- Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-security 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are pumped to announce the release of: openstack-ansible-security 14.2.2: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.2 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are pleased to announce the release of: openstack-ansible-haproxy_server 14.2.2: haproxy_server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. 14.2.2 ^^^^^^ New Features * Haproxy-server role allows to set up tunable parameters. For doing that it is necessary to set up a dictionary of options in the config files, mentioning those which have to be changed (defaults for the remaining ones are programmed in the template). Also "maxconn" global option made to be tunable. Changes in openstack-ansible-haproxy_server 14.2.0..14.2.2 ---------------------------------------------------------- 996d3c1 Allow cert validation for hatop download to be disabled b343107 Fix service configs task 903b865 Added Haproxy global tunables Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 18 ++++++++++++++++++ .../implement_tuning_params-e627c774c0d0c9d2.yaml | 7 +++++++ tasks/haproxy_install_hatop.yml | 1 + tasks/haproxy_service_config.yml | 2 +- templates/haproxy.cfg.j2 | 13 +++++++++++-- 5 files changed, 38 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are satisfied to announce the release of: openstack-ansible-os_gnocchi 14.2.2: os_gnocchi for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. Changes in openstack-ansible-os_gnocchi 14.1.1..14.2.2 ------------------------------------------------------ fab5fec Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-galera_server 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are delighted to announce the release of: openstack-ansible-galera_server 14.2.2: Galera Server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 14.2.2 ^^^^^^ New Features * Implements SSL connection ability to MySQL. "galera_use_ssl" option has to be set to "true" (default), in this case playbooks create self-signed SSL bundle and sets up MySQL configs to use it or distributes user-provided bundle throughout Galera nodes. Changes in openstack-ansible-galera_server 14.2.1..14.2.2 --------------------------------------------------------- fffeb4b Added Galera SSL support Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 20 +++++++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 ++ tasks/galera_post_install.yml | 7 +++ tasks/galera_ssl.yml | 54 ++++++++++++++++++ tasks/galera_ssl_key_create.yml | 65 ++++++++++++++++++++++ templates/my.cnf.j2 | 5 ++ tox.ini | 9 +++ 7 files changed, 166 insertions(+)

1 0

[openstackansible] openstack-ansible-os_magnum 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We exuberantly announce the release of: openstack-ansible-os_magnum 14.2.2: os_magnum for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. Changes in openstack-ansible-os_magnum 14.1.1..14.2.2 ----------------------------------------------------- c13d29d Fix Magnum Cluster TLS assets generation e593ff8 Install python2-pyOpenSSL package on CentOS 7e8ac65 Update paste, policy and rootwrap configurations 2017-03-03 Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- templates/magnum.conf.j2 | 2 ++ templates/policy.json.j2 | 54 +++++++++++++++++++++++++----------------------- 3 files changed, 31 insertions(+), 27 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are excited to announce the release of: openstack-ansible-os_ceilometer 14.2.2: os_ceilometer role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. Changes in openstack-ansible-os_ceilometer 14.2.1..14.2.2 --------------------------------------------------------- f8995cf Pin gnocchiclient to comply with optional deps 8301a6c Add pkg-config distro package Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 6 +++++- vars/ubuntu-14.04.yml | 1 + 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-ironic 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are pleased to announce the release of: openstack-ansible-ironic 14.2.2: Ironic Role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. 14.2.2 ^^^^^^ New Features * Add support for "neutron" as an "enabled_network_interface". * The "ironic_neutron_provisioning_network_name" and "ironic_neutron_cleaning_network_name" variable can be set to the name of the neutron network to use for provisioning and cleaning. The ansible tasks will determine the appropriate UUID for that network. Alternatively, "ironic_neutron_provisioning_network_uuid" or "ironic_neutron_cleaning_network" can be used to directly specify the UUID of the networks. If both "ironic_neutron_provisioning_network_name" and "ironic_neutron_provisioning_network_uuid" are specified, the specified UUID will be used. If only the provisioning network is specified, the cleaning network will default to the same network. Changes in openstack-ansible-ironic 14.2.0..14.2.2 -------------------------------------------------- 8d6bb21 Add ldlinux.c32 to the tftp directory 5d46ee5 Add support for neutron network names for cleaning/provisioning Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 12 ++++++ ...c-neutron-network-support-669c382ea8bd3b98.yaml | 17 ++++++++ tasks/ironic_conductor_post_install.yml | 31 ++++++-------- tasks/ironic_get_neutron_uuids.yml | 41 +++++++++++++++++++ tasks/ironic_post_install.yml | 8 ++++ templates/ironic.conf.j2 | 6 +++ vars/ubuntu-14.04.yml | 5 ++- vars/ubuntu-16.04.yml | 6 ++- 16 files changed, 206 insertions(+), 50 deletions(-)

1 0

[openstackansible] openstack-ansible-memcached_server 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We joyfully announce the release of: openstack-ansible-memcached_server 14.2.2: memcached_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 14.1.1..14.2.2 ------------------------------------------------------------ 989d695 Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are amped to announce the release of: openstack-ansible 14.2.2: Ansible playbooks for deploying OpenStack This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.2.2 ^^^^^^ New Features ************ * Allows SSL connection to Galera with SSL support. "galera_use_ssl" option has to be set to "true", in this case self-signed CA cert or user-provided CA cert will be delivered to the container/host. * Implements SSL connection ability to MySQL. "galera_use_ssl" option has to be set to "true" (default), in this case playbooks create self-signed SSL bundle and sets up MySQL configs to use it or distributes user-provided bundle throughout Galera nodes. Bug Fixes ********* * Nova features that use libguestfs (libvirt password/key injection) now work on compute hosts running Ubuntu. When Nova is deployed to Ubuntu compute hosts and either "nova_libvirt_inject_key" or "nova_libvirt_inject_password" are set to True, then kernels stored in /boot/vmlinuz-* will be made readable to nova user. See launchpad bug 1507915. Changes in openstack-ansible 14.2.1..14.2.2 ------------------------------------------- c068291 SHA Bump for Keystone for CVE-2017-2673 0077352 Dynamically group Neutron OVS DVR to compute ba6ee18 Only bind haproxy to internal IP, repo and galera b5de614 Unset bootstrap-ansible variables between upgrades 4b0bf92 Skip tags if running on OpenStack Infra 497e4a7 Update all SHAs for 14.2.2 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 22 +++++------ playbooks/common-tasks/dynamic-grouping.yml | 22 +++++++++++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 46 +++++++++++----------- playbooks/inventory/env.d/nova.yml | 2 - playbooks/inventory/group_vars/all.yml | 2 +- playbooks/os-neutron-install.yml | 11 ++++++ playbooks/vars/configs/haproxy_config.yml | 7 ++-- .../fix-libguestfs-ubuntu-55582fd1d887d328.yaml | 6 +++ .../notes/implement-ssl-48a82cf611db0eb6.yaml | 5 +++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 +++ scripts/gate-check-commit.sh | 6 +++ scripts/run-playbooks.sh | 2 +- 13 files changed, 97 insertions(+), 42 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 14.2.2 (newton)
by no-reply＠openstack.org 01 May '17

01 May '17

We are happy to announce the release of: openstack-ansible-os_keystone 14.2.2: os_keystone for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 14.2.1..14.2.2 ------------------------------------------------------- 0e6df79 Allow the split of install and config d9a9a00 Avoid keystone doctor token size warning Diffstat (except docs and test files) ------------------------------------- tasks/keystone_db_setup.yml | 1 + tasks/keystone_install.yml | 10 ++++++++++ tasks/main.yml | 20 +++++++++++++++++--- templates/keystone.conf.j2 | 5 +++++ 4 files changed, 33 insertions(+), 3 deletions(-)

1 0