- Release-announce - lists.openstack.org

kayobe 14.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are thrilled to announce the release of: kayobe 14.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.2.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Kolla Ansible inventories in the Kayobe configuration are now passed through without modification. Previously, only "group_vars" were passed through. When using multiple environments, the Kolla inventory from the base configuration layer **and** the Kolla inventory from the Kayobe environment layer will be passed through. The inventory from the environment takes precedence over the inventory from the base layer. This allows you to put any shared configuration in the base layer. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * As Kolla Ansible inventories are now passed through without modification, the inventory directory in Kayobe configuration ("etc/kayobe/kolla/inventory/") must be a valid Ansible inventory, although "*.j2" files used as Kolla Ansible inventory templates are ignored. For cases where only "group_vars" or "hosts_vars" are required, a blank inventory file in the same directory may be used. * It is no longer possible to create an environment named "kayobe". This is reserved for internal use. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 14.1.0..14.2.0 -------------------------------- 6e2a551f Fix MTU of NetworkManager bridge VLAN interfaces 94e79f9f Bump MichaelRigart.interfaces to v1.14.4 8b433cc0 Add option to skip kolla docker registry login 7825b287 bifrost: Populate bifrost host vars on deprovision 9a5a3b58 Add introspection rule to update deploy kernel location 16a993be Use importlib.metadata instead of importlib_metadata a44f0636 Fix data file path detection with new pip 6ec4e8a5 Complete Skydive removal and Skyline addition 5a82ecb0 Fix firewalld configuration for monitoring hosts c7aaecfc Speed up calls to Bifrost ebdf4935 CI: fetch systemd configuration including kolla-generated unit files ad4fc2a3 Fix for seed-containers being unable to use password protected registry 62481994 Fix CentOS / Rocky route options d2b1fcaf Add STP option for bridge interfaces 68bdfcec docs: Add a warning on creating network loops 4c09f11b Pass through kolla inventories as is Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/all/kolla | 8 ++-- ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/kolla-ansible.yml | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/kolla-ansible/defaults/main.yml | 8 +++- ansible/roles/kolla-ansible/tasks/config.yml | 56 ++++++++++++++++++---- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 4 ++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../configuration/reference/kolla-ansible.rst | 19 +++++++- .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/ansible.py | 5 ++ kayobe/cli/commands.py | 3 +- kayobe/kolla_ansible.py | 54 ++++++++++++++------- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 50 ++++++++++++++++++- kayobe/utils.py | 22 +++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ultiple-kolla-inventories-65fd7a4922c639c5.yaml | 21 ++++++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ 53 files changed, 578 insertions(+), 70 deletions(-)

1 0

kolla 14.11.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are happy to announce the release of: kolla 14.11.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.11.0 ^^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Fixes an issue with Elasticsearch curator not working due to too new python elasticsearch-curator library not compatible with Elasticsearch version 7. LP#2028048 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 14.10.0..14.11.0 --------------------------------- 8304b9456 Fix missing grafana opensearch datasource 83987b16a Fix an issue with zun-cni-daemon building images in aarch64 26de85f2f [yoga-only]: Fix erlang versions 06f9ddef8 rabbitmq: Use novemberain repos for Debian/Ubuntu 1f11f5c23 [yoga-only]: Fix kolla-toolbox after Galaxy migration c2be45ca1 CI: Drop upgrade jobs since Xena is EOL 0cdce9f77 Improve kolla-toolbox offline support. 0353c51c6 Add comprehensive checks for container restarts feed9d87f Revert "Disable build of Gnocchi containers" c90d4a208 Add server-status handler to Rocky/Centos Apache conf a76d93dfb Pin iptables to 1.8.4 in Centos Stream 8 aadc29061 Pin elasticsearch-curator==5.8.4 a3367db6b CI: Add rocky9 experimental jobs 7a30d4d76 opensearch-dashboards: Fix permissions 23e0819d6 opensearch: move to yum/apt repos ca472c5f7 Pin setuptools=67.2.* ce2b14e5a Use erlang-25 from copr on aarch64 9cdee8398 ovsdpdk: add libdpdk-dev d49cca549 rabbitmq: use erlang-25 ppa on Debian/Ubuntu Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 4 - .zuul.d/debian.yaml | 2 - .zuul.d/rocky.yaml | 21 ++++ .zuul.d/ubuntu.yaml | 10 +- ...rences.debian => apt_preferences.debian.x86_64} | 2 +- ...rences.ubuntu => apt_preferences.ubuntu.x86_64} | 2 +- .../elasticsearch-curator/Dockerfile.j2 | 2 +- .../opensearch/opensearch-dashboards/Dockerfile.j2 | 32 +++--- .../opensearch-dashboards/extend_start.sh | 8 +- kolla/common/config.py | 6 +- kolla/image/build.py | 2 - kolla/template/methods.py | 4 + kolla/template/repos.yaml | 110 +++++++++++++++------ .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 + ...x-elasesticsearch-curator-f2f154dc707d15bd.yaml | 7 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 + ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 35 files changed, 402 insertions(+), 104 deletions(-)

1 0

kayobe 13.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are jazzed to announce the release of: kayobe 13.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 13.2.0..13.3.0 -------------------------------- 790427f8 Fix MTU of NetworkManager bridge VLAN interfaces bacab88a Bump MichaelRigart.interfaces to v1.14.4 0638862a Add option to skip kolla docker registry login a1a1f8d3 bifrost: Populate bifrost host vars on deprovision cd0bdbdd Add introspection rule to update deploy kernel location 8b7b8e37 Revert "CI: Disable bare metal testing on RL9/c9s" a1fc1b43 CI: Enable Ubuntu jobs again d773ed56 Use importlib.metadata instead of importlib_metadata 77a0e36f Fix data file path detection with new pip 16c10d12 Fix firewalld configuration for monitoring hosts 0cb8a93e Speed up calls to Bifrost 3e3b41cc CI: fetch systemd configuration including kolla-generated unit files fbe1bd4f Fix for seed-containers being unable to use password protected registry 3abfeb27 Fix CentOS / Rocky route options b0f5e013 Add STP option for bridge interfaces e00f9cad docs: Add a warning on creating network loops abff761c Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + ...tenks-deploy-config-compute-libvirt-on-host.yml | 6 +++ dev/tenks-deploy-config-compute.yml | 6 +++ .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 60 ++++++++++++++++++++-- kayobe/utils.py | 22 ++++++++ playbooks/kayobe-overcloud-base/run.yml | 2 - .../overrides.yml.j2 | 2 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 4 -- .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 42 files changed, 296 insertions(+), 34 deletions(-)

1 0

kolla-ansible 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kolla-ansible 16.2.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Supports Debian Bookworm (12) as host distribution. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. Changes in kolla-ansible 16.1.0..16.2.0 --------------------------------------- 9f32dada6 Rename per role filters files d3bab163d Default keystone user role changed to member c40fc0dbc Add ML2/OVN and ML2/OVS setting checks for neutron 2569a69ff Add option for extra kernel modules in neutron role d40d59f3f README: link to the meetings page directly 82898bff2 keystone: ensure bool for two parameters fc7ed97d5 Configure Nova libvirt.num_pcie_ports to 16 by default 319da0050 ovn: Fix broken deployment/reconfig on Ubuntu aa6202d88 CI: Remove redundant set/unset_cirros_image_q35_machine_type 7f208d9d5 Prevent libvirtd reload when only generating config aaaeb3e90 debian: fix some debian jobs 2e6644719 CI: add q35 hardware machine type to tests f848b81c2 CI: add block support to validate-all-file.py ff1d9dd17 senlin: add missing cafile parameter fdcb72b38 ovn: Improve clustering 12cf8bd17 Fix designate-producers not running properly 9c689f21e Use better default bind address for ironic-tftp c3541ad72 Fix D001 Line too long in mariadb-guide 13b8f90be Fixes WEBSSO_KEYSTONE_URL Value 764bbf6ef Drop useless DUMMY_ENVIRONMENT environment for cron container 6955f956f Fixes task name in notify module to the actual task name 404dc0d4a debian: Add Bookworm Host OS support a5addd825 systemd: handle running container without systemd unit 68f610f8b CI: bump ansible version in linter b5b2951c2 update ansible version 817d92fa3 Deny access to public /server-status in http Openstack services 06016233c Enable nova libvirt driver skip_cpu_compare_on_dest workaround b10e7dbe8 Fix OpenSearch Dashboards health check dfa1f83c2 Fix the fluentd regexp to collect the logs 739fb69cc opensearch: alter path after using rpm/deb packaging 3aaf78659 Trivial: Add deploy-containers for skyline 8d5356268 loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/module_utils/kolla_docker_worker.py | 7 +- ansible/module_utils/kolla_systemd_worker.py | 13 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../common/templates/conf/input/00-global.conf.j2 | 4 +- .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + .../templates/opensearch-dashboards.json.j2 | 14 +-- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- ansible/roles/prechecks/vars/main.yml | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/skyline/tasks/deploy-containers.yml | 2 + lint-requirements.txt | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + .../debian-bookworm-host-08840d78c88742d3.yaml | 4 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ test-requirements.txt | 2 +- tools/validate-all-file.py | 72 ++++++----- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 51 +++++++- zuul.d/nodesets.yaml | 22 ++++ zuul.d/project.yaml | 23 ++-- 74 files changed, 784 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 0f255aa34..89cb54276 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -1 +1 @@ -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3 diff --git a/test-requirements.txt b/test-requirements.txt index 76b4eba12..c16a76461 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3

1 0

pbr 6.0.0
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We high-spiritedly announce the release of: pbr 6.0.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 6.0.0 ^^^^^ Upgrade Notes * The deprecated support for *setup.py build_sphinx* has been removed. This feature has been deprecated since version 4.2. Setuptools and sphinx have removed support for this command which breaks PBR's ability to integrate with those two tools to provide this functionality. Users should switch to building sphinx docs with sphinx directly. Changes in pbr 5.11.1..6.0.0 ---------------------------- 1115115 build: Use kwargs 457a89f Add support for PEP-660 6df1643 Fix PBR integration testing d03d617 Replace imp with importlib.machinery 0e335e6 Add release note for build_sphinx removal ee04b62 Use _ instead of - in setup.cfg directives 47c5afe Remove sphinx doc building integration Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 39 +++ pbr/build.py | 66 ++++- pbr/builddoc.py | 292 --------------------- pbr/hooks/commands.py | 3 - pbr/packaging.py | 12 +- pyproject.toml.future | 2 +- .../build_sphinx_removal-de990a5c14a9e64d.yaml | 8 + 14 files changed, 150 insertions(+), 633 deletions(-)

1 0

sushy-tools 1.0.1
by no-reply＠openstack.org 02 Nov '23

02 Nov '23

We eagerly announce the release of: sushy-tools 1.0.1: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. Changes in sushy-tools 1.0.0..1.0.1 ----------------------------------- 37f1182 Add BiosVersion field to System Diffstat (except docs and test files) ------------------------------------- sushy_tools/emulator/templates/system.json | 1 + 1 file changed, 1 insertion(+)

1 0

openstack-ansible 27.2.0 (antelope)
by no-reply＠openstack.org 25 Oct '23

25 Oct '23

We are pumped to announce the release of: openstack-ansible 27.2.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.2.0 ^^^^^^ New Features ************ * HAProxy services that use backend nodes that are not in the Ansible inventory can now have the "backend_port" specified in the list, along with "name" or "ip_addr" settings. This allow to have the service bound to different port on different backend servers. * Added variables "galera_backups_full_init_overrides" and "galera_backups_increment_init_overrides" that can be leveraged to override default set of systemd unit file for mariadb backups. Similar to change I7b3b0f4da047f82a49266ef57fba2fbaa24cebdc . * HAProxy services can now override the path of the certificate with "haproxy_ssl_path" if set under the service definition. * Added variable "openstack_host_journald_config" that allows to supply arbitrary configuration for systemd-journald as a mapping. Deprecation Notes ***************** * *nova_pci_passthrough_whitelist* is now deprecated in favor of *nova_device_spec*. * "common-playbooks/nova.yml" has been deprecated and removed. All content from it now resides inside "os-nova-install.yml" directly. Bug Fixes ********* * Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new OIDCXForwardedHeaders configuration option is required. Changes in openstack-ansible 27.1.0..27.2.0 ------------------------------------------- c765f93b0 Bump SHAs for 2023.1 f6eb26a5d Define install_method default when hosts resolution depend on it 29c33cece Run nova db post setup from nova playbook 6187ce0cf Remove common nova playbook cd6178651 Always use on-disk openstack service git repos in CI jobs 9eb892c14 Gather extra networking facts for keepalived Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 + ansible-role-requirements.yml | 50 ++--- inventory/group_vars/blazar_all/source_git.yml | 4 +- inventory/group_vars/ceilometer_all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +- inventory/group_vars/designate_all/source_git.yml | 4 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- inventory/group_vars/horizon_all/source_git.yml | 6 +- inventory/group_vars/ironic_all/source_git.yml | 6 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/masakari_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 4 +- inventory/group_vars/nova_all/source_git.yml | 6 +- inventory/group_vars/octavia_all/source_git.yml | 6 +- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/common-playbooks/nova.yml | 159 ---------------- playbooks/haproxy-install.yml | 8 + playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- playbooks/os-nova-install.yml | 211 ++++++++++++++++++++- .../backend_config_per_host-14cec3ec5f708934.yaml | 7 + .../backups-systemd-override-e36d6bf010eb6b92.yaml | 7 + .../notes/haproxy_ssl_path-7130354314aee961.yaml | 4 + .../notes/journald_config-e3b0e5060dd5f6e7.yaml | 5 + ...tone-oidc-forwarded-proto-92471121e3949428.yaml | 5 + .../notes/nova_device_spec-0175a30b2295b768.yaml | 4 + ...move_common_nova_playbook-9fde48c51bee5b6a.yaml | 5 + scripts/gate-check-commit.sh | 2 +- scripts/get-ansible-role-requirements.yml | 7 +- 34 files changed, 329 insertions(+), 245 deletions(-)

1 0

python-octaviaclient 3.5.1 (bobcat)
by no-reply＠openstack.org 23 Oct '23

23 Oct '23

We are glad to announce the release of: python-octaviaclient 3.5.1: Octavia client for OpenStack Load Balancing This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 3.5.1 ^^^^^ Bug Fixes * Removed unneeded attributes that could have been passed to the API when calling "listener create", hsts_include_subdomains and hsts_preload were passed even when not used. It fixes an issue when using a recent python-octaviaclient release with older Octavia releases (without this HSTS feature). Changes in python-octaviaclient 3.5.0..3.5.1 -------------------------------------------- 1fa821f Set default value for HSTS options to None d0f3a1c Update TOX_CONSTRAINTS_FILE for stable/2023.2 4df8842 Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + octaviaclient/osc/v2/listener.py | 2 ++ ...e-unneeded-attributes-in-listener-create-2e7cb2de281ac7fe.yaml | 8 ++++++++ tox.ini | 6 +++--- 5 files changed, 17 insertions(+), 3 deletions(-)

1 0

openstack-ansible 26.3.0 (zed)
by no-reply＠openstack.org 20 Oct '23

20 Oct '23

We are amped to announce the release of: openstack-ansible 26.3.0: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.3.0 ^^^^^^ New Features ************ * Added variables "galera_backups_full_init_overrides" and "galera_backups_increment_init_overrides" that can be leveraged to override default set of systemd unit file for mariadb backups. Similar to change I7b3b0f4da047f82a49266ef57fba2fbaa24cebdc . Deprecation Notes ***************** * *nova_pci_passthrough_whitelist* is now deprecated in favor of *nova_device_spec*. Bug Fixes ********* * Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new OIDCXForwardedHeaders configuration option is required. Changes in openstack-ansible 26.2.0..26.3.0 ------------------------------------------- 0e0178799 Bump SHAs for Zed ec8136cf7 Gather extra networking facts for keepalived e1c11ea52 Fix container bridge name for octavia Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 36 +++++++++++----------- .../openstack_user_config.yml.aio.j2 | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 +-- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +-- .../defaults/repo_packages/openstack_services.yml | 26 ++++++++-------- playbooks/haproxy-install.yml | 8 +++++ .../backups-systemd-override-e36d6bf010eb6b92.yaml | 7 +++++ ...tone-oidc-forwarded-proto-92471121e3949428.yaml | 5 +++ .../notes/nova_device_spec-0175a30b2295b768.yaml | 4 +++ 9 files changed, 60 insertions(+), 36 deletions(-)

1 0

openstack-ansible 25.5.0 (yoga)
by no-reply＠openstack.org 19 Oct '23

19 Oct '23

We are tickled pink to announce the release of: openstack-ansible 25.5.0: Ansible playbooks for deploying OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.5.0 ^^^^^^ New Features ************ * Added variables "galera_backups_full_init_overrides" and "galera_backups_increment_init_overrides" that can be leveraged to override default set of systemd unit file for mariadb backups. Similar to change I7b3b0f4da047f82a49266ef57fba2fbaa24cebdc . * Implemented variable "lxc_image_cache_expiration" that controlls for how long cached LXC image will be valid. Default value is *1year*. Variable format should be compatible with community.general.to_time_unit filter. * Adds optional compression for backups created with mariabackup. Adds two new CLI parameters to the mariabackup script that are used to enable compression and to choose a compression tool. * "--compress=True|False" * "--compressor=<compressor>" Also introduces new Ansible variables that control the above mentioned parameters. * "galera_mariadb_backups_compress" * "galera_mariadb_backups_compressor" Each backup archive is stored in a dedicated directory, alongside the backup metadata. Upgrade Notes ************* * Backup compression is disabled by default, so no changes need to be made for existing deployments. Should compression be desired, set "galera_mariadb_backups_compress" to "True". Choose a compression tool with "galera_mariadb_backups_compressor", default is "gzip". Bug Fixes ********* * LXC image cache expiration mechanism has being fixed. Previously LXC images were valid forever. * Variables "haproxy_fall" and "haproxy_rise" are now respected again and will be used for defining amount of checks before haproxy will mark backend as UP or DOWN. Keys "backend_rise" and "haproxy_fall" that are set inside service definition are still respected and will have prescedence over global ones. Changes in openstack-ansible 25.4.0..25.5.0 ------------------------------------------- d1b5f6c35 Bump SHAs for Yoga bac12a794 Remove unreadable unicode symbols 0ddc7abc2 Bump ansible-core to 2.12.8 bf4ef5635 Gather extra networking facts for keepalived 53d5f37a3 Use include_role in task to avoid lack of access to vars 1e93da2cd Add is_nest property for container_skel 10f1602f8 Restore an ability for HAProxy to bind on interal IP 170878db5 Pin version of setuptools 4c554a45b Re-enable CI jobs after rally is fixed 8478db6d8 Disable upgrade jobs from Xena 4c1cfa222 Include proper vars_file for rally b10f69889 Drop `else` condition in the container_skel_load loop Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 40 +++--- .../reference/inventory/configure-inventory.rst | 125 +++++++++++++++++++ etc/openstack_deploy/env.d/pods.yml.example | 44 +++++++ .../openstack_user_config.yml.pod.example | 122 ++++--------------- global-requirement-pins.txt | 1 + inventory/group_vars/haproxy/haproxy.yml | 12 +- osa_toolkit/generate.py | 134 ++++++++++++--------- playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 54 ++++----- .../defaults/repo_packages/openstack_testing.yml | 4 + playbooks/haproxy-install.yml | 8 ++ playbooks/infra-journal-remote.yml | 6 +- playbooks/os-rally-install.yml | 2 +- playbooks/security-hardening.yml | 6 +- .../backups-systemd-override-e36d6bf010eb6b92.yaml | 7 ++ .../fix_lxc_cache_expiration-1656b5758c4ec24e.yaml | 10 ++ .../notes/haproxy_rise_fall-64ba2e6d7e206973.yaml | 8 ++ .../mariabackup-compression-337b04c68f370c1d.yaml | 28 +++++ scripts/bootstrap-ansible.sh | 2 +- zuul.d/project-templates.yaml | 16 +-- 24 files changed, 478 insertions(+), 234 deletions(-)

1 0