Release-announce
Threads by month
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- 1 participants
- 17236 discussions
We are satisfied to announce the release of:
ironic-python-agent-builder 2.4.0: Tools and scripts to build Ironic
Python Agent
The source is available from:
https://opendev.org/openstack/ironic-python-agent-builder
Download the package from:
https://tarballs.openstack.org/ironic-python-agent-builder/
For more details, please see below.
2.4.0
^^^^^
New Features
************
* Excess hardware firmware on Debian based agent ramdisks is now
automatically removed.
* The new element "ironic-ramdisk-base" can be used to build
ramdisks without IPA itself or any of its dependencies.
* The "ironic-python-agent-builder" CLI now supports "--lzma" flag
to compress images with the LZMA algorithm.
* Firmware for netronome, amdgpu, qcom, ti-communication, ti-
keystone, ueagle-atm, rsi, mrvl, brcm, mediatek, ath10k, rtlwifi are
now removed by default. Set "IPA_REMOVE_FIRMWARE" to override.
Upgrade Notes
*************
* Non-free firmware is now installed by default on Debian DIB
builds. Change the available repositories to disable:
export DIB_DEBIAN_COMPONENTS=main
Bug Fixes
*********
* Free firmware is now installed by default on Debian DIB builds.
* No longer tries to install "biosdevname" on non Red Hat systems
(dropped from Ubuntu after Bionic, never present in Debian).
* The DIB-based ramdisk is now always built with SELinux set to
permissive. Enabling SELinux may result in broken ramdisks and does
not make much sense for IPA anyway.
Changes in ironic-python-agent-builder 2.3.0..2.4.0
---------------------------------------------------
dc090b2 Add doc/requirements
1b904b5 Remove firmware from debian based systems
b072c15 Fix ELEMENTS_PATH environment variable being overwritten.
6c9c505 Add additional firmware images to be excluded
db238b9 Make the debian job voting and start publishing debian images
094aa37 Add ironic-ramdisk-base to build general-purpose ramdisks
0e59d16 Revert "Switch images to CentOS Stream 8"
0d16bee Switch images to CentOS Stream 8
0f62572 Support using lzma for initramfs compression
2c7f7a5 Remove netronome and amdgpu firmware by default
e641593 Workaround for latest pip versions
07367ec Clean up package installation
ee91153 Run check image jobs on ubuntu focal
b6b818f Remove nodeset from ironic-python-agent-build-image-base based jobs
83d628c Repair the previous image name
bceeea1 Use more generic TOX_CONSTRAINTS_FILE
5eebab3 Force SELinux to be in permissive mode
e8dda18 Add documentation about the available Elements
36a91b7 Set safe version of hacking
a97adc4 Support the configuration directory for tinyIPA
46bf9e0 Use centos element for dib on focal
Diffstat (except docs and test files)
-------------------------------------
dib/extra-hardware/package-installs.yaml | 4 +-
dib/ironic-python-agent-ramdisk/element-deps | 3 +-
.../environment.d/01-debian-ipa.bash | 8 ++
.../environment.d/10-defaults.bash | 15 +++
.../60-ironic-python-agent-ramdisk-install | 5 +-
.../package-installs.yaml | 48 ++++++--
dib/ironic-python-agent-ramdisk/pkg-map | 22 +---
.../post-install.d/99-remove-extra-packages | 11 ++
dib/ironic-ramdisk-base/README.rst | 5 +
.../cleanup.d/99-ramdisk-create | 0
dib/ironic-ramdisk-base/element-deps | 3 +
ironic_python_agent_builder/__init__.py | 19 ++-
.../notes/debian-firmware-1927601ebb779bc4.yaml | 13 +++
...s-firmware-removal-debian-06c49a8604122b1c.yaml | 5 +
.../ironic-ramdisk-base-3bfb9b90ad416891.yaml | 5 +
releasenotes/notes/lzma-bf4552b98dd5824a.yaml | 5 +
.../notes/no-firmware-e2cb953037a3be8f.yaml | 6 +
.../notes/selinux-permissive-a059f42bb66373a1.yaml | 6 +
roles/ipa-build-dib-image/tasks/main.yaml | 11 +-
test-requirements.txt | 7 +-
tinyipa/build-tinyipa.sh | 2 +-
tinyipa/build_files/bootlocal.sh | 4 +-
..._constraints.sh => generate_tox_constraints.sh} | 20 ++--
tox.ini | 9 +-
zuul.d/ironic-python-agent-builder-jobs.yaml | 26 +++--
zuul.d/project.yaml | 7 +-
28 files changed, 338 insertions(+), 62 deletions(-)
Requirements updates
--------------------
diff --git a/test-requirements.txt b/test-requirements.txt
index 3e816e9..e1f5e01 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -6 +6 @@
-hacking>=3.0,<3.1.0 # Apache-2.0
+hacking>=3.1.0,<4.0.0 # Apache-2.0
@@ -10,4 +10 @@ doc8>=0.6.0 # Apache-2.0
-sphinx>=2.0.0,!=2.1.0 # BSD
-openstackdocstheme>=2.2.1 # Apache-2.0
-# releasenotes
-reno>=3.1.0 # Apache-2.0
+pycodestyle>=2.0.0,<2.7.0 # MIT
1
0
We are pleased to announce the release of:
kolla-ansible 11.0.0: Ansible Deployment of Kolla containers
This release is part of the victoria release series.
The source is available from:
https://opendev.org/openstack/kolla-ansible
Download the package from:
https://tarballs.openstack.org/kolla-ansible/
Please report issues through:
https://bugs.launchpad.net/kolla-ansible/+bugs
For more details, please see below.
11.0.0
^^^^^^
Known Issues
************
* Since Ussuri, there is a bug in how Ceph (RBD) is handled with
Cinder: the "backend_host" option is missing from the generated
configuration for external Ceph. The symptoms are that volumes
become unmanageable until extra admin action is taken. This does
*not* affect the data plane - running virtual machines are *not*
affected.
There is a related issue regarding active-active "cinder-volume"
services (single-host "cinder-volume" *not* affected), which is that
they should not have been configured with "backend_host" in the
first place but with "cluster" and proper coordination instead. Some
users might have customised their config already to address this
issue.
The Kolla team is investigating the best way to address this for all
its users. In the meantime, please ensure that, before upgrading to
Ussuri, the "backend_host" option is set to its previous value (the
default was "rbd:volumes") via a config override.
For more details please refer to the referenced bug. Do note this
issue affects both new deployments and upgrades. LP#1904062
Bug Fixes
*********
* OVN will no longer schedule SNAT routers on compute nodes when
"neutron_ovn_distributed_fip" is enabled. LP#1901960
* RabbitMQ services are now restarted serially to avoid a split
brain. LP#1904702
* Fixes LP#1906796 by adding notice and note loglevels to monasca
log- metrics drop configuration
* Fixes Swift's stop action. It will no longer try to start "swift-
object-updater" container again. LP#1906944
* Fixes an issue with the "kolla-ansible prechecks" command with
Docker 20.10. LP#1907436
* Fixes an issue with "kolla-ansible mariadb_recovery" when the
"mariadb" container does not exist on one or more hosts. LP#1907658
Changes in kolla-ansible 11.0.0.0rc1..11.0.0
--------------------------------------------
1f11d2f01 docs: add info on adding and removing hosts
620bb29f1 Use ansible_distribution_release instead of ansible_lsb.codename
10caf4d36 Add `issue` reno for bug #1904062
9b733297f Fix mariadb_recovery when mariadb container is missing
51c14add0 Edit ironic inspector pxe filter driver name none to noop
5634440f4 Do not start swift-object-updater on stop
6bf9456bf docs: Add magnum guide
3a91159c8 Revert "Performance: Use import_tasks in the main plays"
f196062d9 Fix an Ansible warning
7284c7efa Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default
d0faadf27 [docs] Add python3-venv package to quickstart.rst
e31c69ecf [CI] Drop periodics
a59192545 Fix prechecks with Docker 20.10.0
1a7478d2f RabbitMQ handler refactored to restart services in serial
bb3f62d71 Do not set 'always' tag where unnecessary
d22758c37 Performance: Use import_tasks in the main plays
14e08b383 Fix stop containers task in Swift rolling restart
7df4f403f Fix kolla-ansible to work with pyenv-virtualenv
e492b580a kibana: Remove 6.x migration from upgrade
0852c7735 CI: add missing --fail argument to curl
ffed23d1e [CI] Set 0 swap size
09943dc6c Remove a CentOS IPv6 FIXME meant for Ussuri
1c2b5e036 ovn: Do not schedule SNAT routers on computes
2f7b2fe36 Switch to Victoria images
d7ba5efab CI: Temporarily disable rabbitmq internal tls
af78e6376 Update TOX_CONSTRAINTS_FILE for stable/victoria
effb93ff9 Update .gitreview for stable/victoria
Diffstat (except docs and test files)
-------------------------------------
.gitreview | 1 +
ansible/action_plugins/merge_yaml.py | 4 +-
ansible/group_vars/all.yml | 2 +-
ansible/roles/aodh/tasks/register.yml | 1 -
ansible/roles/barbican/tasks/register.yml | 1 -
ansible/roles/baremetal/defaults/main.yml | 2 +-
ansible/roles/blazar/tasks/register.yml | 1 -
ansible/roles/ceilometer/tasks/register.yml | 1 -
ansible/roles/cinder/tasks/register.yml | 1 -
ansible/roles/cloudkitty/tasks/register.yml | 1 -
ansible/roles/cyborg/tasks/register.yml | 1 -
ansible/roles/designate/tasks/register.yml | 1 -
ansible/roles/freezer/tasks/register.yml | 1 -
ansible/roles/glance/tasks/register.yml | 1 -
ansible/roles/gnocchi/tasks/register.yml | 1 -
ansible/roles/heat/tasks/register.yml | 1 -
ansible/roles/ironic/defaults/main.yml | 2 +-
ansible/roles/ironic/tasks/register.yml | 1 -
ansible/roles/karbor/tasks/register.yml | 1 -
ansible/roles/keystone/tasks/register.yml | 1 -
.../roles/kibana/tasks/migrate-kibana-index.yml | 111 ----------
ansible/roles/kibana/tasks/upgrade.yml | 2 -
ansible/roles/kuryr/tasks/register.yml | 1 -
ansible/roles/magnum/tasks/register.yml | 1 -
ansible/roles/manila/tasks/register.yml | 1 -
ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +-
ansible/roles/mariadb/templates/galera.cnf.j2 | 14 +-
ansible/roles/masakari/tasks/register.yml | 1 -
ansible/roles/mistral/tasks/register.yml | 1 -
ansible/roles/monasca/tasks/register.yml | 1 -
.../monasca-log-metrics/log-metrics.conf.j2 | 2 +-
ansible/roles/murano/tasks/register.yml | 1 -
ansible/roles/neutron/tasks/register.yml | 1 -
ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 -
ansible/roles/nova/tasks/register.yml | 1 -
ansible/roles/octavia/tasks/register.yml | 1 -
ansible/roles/ovn/tasks/bootstrap.yml | 9 +-
ansible/roles/panko/tasks/register.yml | 1 -
ansible/roles/placement/tasks/register.yml | 1 -
ansible/roles/prechecks/tasks/service_checks.yml | 2 +-
ansible/roles/qinling/tasks/register.yml | 1 -
ansible/roles/rabbitmq/handlers/main.yml | 45 +----
ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++
ansible/roles/sahara/tasks/register.yml | 1 -
ansible/roles/searchlight/tasks/register.yml | 1 -
ansible/roles/senlin/tasks/register.yml | 1 -
ansible/roles/solum/tasks/register.yml | 1 -
ansible/roles/swift/tasks/register.yml | 1 -
ansible/roles/swift/tasks/rolling_upgrade.yml | 41 ++--
ansible/roles/swift/tasks/stop.yml | 2 +-
ansible/roles/tacker/tasks/register.yml | 1 -
ansible/roles/trove/tasks/register.yml | 1 -
ansible/roles/vitrage/tasks/register.yml | 1 -
ansible/roles/watcher/tasks/register.yml | 1 -
ansible/roles/zun/tasks/register.yml | 1 -
etc/kolla/globals.yml | 2 +-
.../notes/bug-1901960-363503e11449b53c.yaml | 6 +
.../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 +
.../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 +
.../notes/bug-1906944-38798e1348ff9c97.yaml | 6 +
.../notes/bug-1907436-2da50ed38d107127.yaml | 6 +
.../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 +
.../notes/issue-bug-1904062-ef446343323c8452.yaml | 23 +++
tools/init-runonce | 2 +-
tools/kolla-ansible | 8 +-
tox.ini | 8 +-
zuul.d/base.yaml | 1 +
zuul.d/jobs.yaml | 8 +
zuul.d/project.yaml | 13 +-
77 files changed, 448 insertions(+), 275 deletions(-)
1
0
We are amped to announce the release of:
kayobe 9.0.0: Deployment of OpenStack to bare metal using OpenStack
kolla and bifrost
This release is part of the victoria release series.
The source is available from:
https://opendev.org/openstack/kayobe
Download the package from:
https://tarballs.openstack.org/kayobe/
Please report issues through:
https://storyboard.openstack.org/#!/project/openstack/kayobe
For more details, please see below.
9.0.0
^^^^^
Bug Fixes
* Fixes a number of issues with using Kayobe on CentOS 8.3.
* Fixes an issue with Python setup when venv is not used. See story
2008378 for details.
* Fix the implementation of the "kayobe seed hypervisor host package
update" command, which was incomplete. See story 2008458 for
details.
Changes in kayobe 9.0.0.0rc1..9.0.0
-----------------------------------
d6669350 CI: fix race condition in kolla-ansible-host-vars role tests
01b9328d Fix Python setup when venv is not used
9eb982bb Fix overcloud provisioning
dc0b8b07 Fix implementation of kayobe seed hypervisor host package update
885dd064 Fixes for CentOS 8.3
b1be865d Update TOX_CONSTRAINTS_FILE for stable/victoria
b5b4f740 Update .gitreview for stable/victoria
Diffstat (except docs and test files)
-------------------------------------
.gitreview | 1 +
ansible/host-package-update.yml | 2 +-
ansible/kayobe-target-venv.yml | 2 +-
ansible/overcloud-provision.yml | 2 +-
dev/tenks-deploy-config-compute.yml | 20 ++++++++++++++------
playbooks/kayobe-overcloud-upgrade-base/run.yml | 14 +++++++-------
playbooks/kayobe-seed-upgrade-base/overrides.yml.j2 | 8 ++++++++
playbooks/kayobe-seed-upgrade-base/pre.yml | 8 ++++++++
playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 +++++++
releasenotes/notes/centos-8.3-89d07c8f8db5b17b.yaml | 4 ++++
.../notes/fix-python-setup-5e7ff929a6cab092.yaml | 5 +++++
...sor-host-package-update-fix-9411205aadc92b8f.yaml | 6 ++++++
requirements.yml | 4 ++--
setup.cfg | 3 +++
test-requirements.txt | 4 ++--
tox.ini | 10 +++++-----
17 files changed, 76 insertions(+), 25 deletions(-)
Requirements updates
--------------------
diff --git a/test-requirements.txt b/test-requirements.txt
index ddaa6572..194c468c 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -9 +9 @@ doc8 # Apache-2.0
-docker<3 # Apache-2.0
+docker # Apache-2.0
@@ -14 +14 @@ oslotest>=1.10.0 # Apache-2.0
-paramiko<2.5.0
+paramiko
1
0
We are chuffed to announce the release of:
kolla-ansible 9.3.0: Ansible Deployment of Kolla containers
This release is part of the train stable release series.
The source is available from:
https://opendev.org/openstack/kolla-ansible
Download the package from:
https://tarballs.openstack.org/kolla-ansible/
Please report issues through:
https://bugs.launchpad.net/kolla-ansible/+bugs
For more details, please see below.
9.3.0
^^^^^
New Features
************
* Adds a new flag, "docker_disable_default_iptables_rules", which
defaults to "no". Docker is manipulating iptables rules by default
to provide network isolation, and this might cause problems if the
host already has an iptables based firewall. A common problem is
that Docker sets the default policy of the "FORWARD" chain in the
"filter" to "DROP". Setting "docker_disable_default_iptables_rules"
to "yes" will disable Docker's iptables manipulation. This feature
will be enabled by default from the Victoria 11.0.0 release.
* Improves performance of the "common" role by generating all
fluentd configuration in a single file.
* Improves performance of the "common" role by generating all
logrotate configuration in a single file.
Upgrade Notes
*************
* The default value of "REST_API_REQUIRED_SETTINGS" was
synchronized with Horizon. You may want to review settings exposed
by the updated configuration.
Security Issues
***************
* The "admin-openrc.sh" file generated by "kolla-ansible post-
deploy" was previously created with "root:root" ownership and "644"
permissions. This would allow anyone with access to the same
directory to read the file, including the admin credentials. The
ownership of "admin-openrc.sh" is now set to the user executing
"kolla-ansible", and the file is assigned a mode of "600". This
change can be applied by running "kolla-ansible post-deploy".
Bug Fixes
*********
* Add support to use bifrost-deploy behind proxy. It uses existing
container_proxy variable.
* Fixes handling of */dev/kvm* permissions to be more robust against
host-level actions. LP#1681461
* Rework keystone fernet bootstrap which had tendencies to fail on
multinode setups. See bug 1846789 for details.
* IPv6 fully-routed topology (/128 addressing) is now allowed (where
applicable). LP#1848941
* Fixes deployment of fluentd without any enabled OpenStack
services. LP#1867953
* This patch adds "kolla-ansible" internal logrotate config for
Logstash. Logstash 2.4 uses integrated in container logrotate
configuration which tries to rotate logs in /var/log/logstash while
"kolla-ansible" deployed Logstash logs are in
/var/log/kolla/logstash. LP#1886787
* Fixes "--configdir" parameter to apply to default "passwords.yml"
location. LP#1887180
* "fluentd" is now logging to "/var/log/kolla/fluentd/fluentd.log"
instead of "stdout". LP#1888852
* Fixes "deploy-containers" action missing for the Masakari role.
LP#1889611
* An issue has been fixed when "keystone" container would be stuck
in restart loop with a message that fernet key is stale. LP#1895723
* Fixes "haproxy_single_service_split" template to work with default
for "mode" ("http"). LP#1896591
* Fixed invalid fernet cron file path on Debian/Ubuntu from
"/var/spool/cron/crontabs/root/fernet-cron" to
"/var/spool/cron/crontabs/root". LP#1898765
* Add with_first_found on placement for placement-api wsgi
configuration to allow overwrite from users. LP#1898766
* RabbitMQ services are now restarted serially to avoid a split
brain. LP#1904702
* Fixes LP#1906796 by adding notice and note loglevels to monasca
log- metrics drop configuration
* Fixes Swift's stop action. It will no longer try to start "swift-
object-updater" container again. LP#1906944
* Fixes an issue with the "kolla-ansible prechecks" command with
Docker 20.10. LP#1907436
* Fixes an issue with "kolla-ansible mariadb_recovery" when the
"mariadb" container does not exist on one or more hosts. LP#1907658
* fix deploy freezer failed when use kolla_dev_mod LP#1888242
* Fixes issues with some CloudKitty commands trying to connect to an
external TLS endpoint using HTTP. LP#1888544
* Fixes an issue where Docker may fail to start if "iptables" is not
installed. LP#1899060
* The "admin-openrc.sh" file generated by "kolla-ansible post-
deploy" was previously created with "root:root" ownership and "644"
permissions. This would allow anyone with access to the same
directory to read the file, including the admin credentials. The
ownership of "admin-openrc.sh" is now set to the user executing
"kolla-ansible", and the file is assigned a mode of "600". This
change can be applied by running "kolla-ansible post-deploy".
* Fixes an issue during deleting evacuated instances with encrypted
block devices. LP#1891462
* Fixes an issue where Keystone Fernet key rotation may fail due to
permission denied error if the Keystone rotation happens before the
Keystone container starts. LP#1888512
* Fixes an issue with Keystone startup when Fernet key rotation does
not occur within the configured interval. This may happen due to one
of the Keystone hosts being down at the scheduled time of rotation,
or due to uneven intervals between cron jobs. LP#1895723
* Fixes an issue where Grafana instances would race to bootstrap the
Grafana DB. See LP#1888681.
* Fixes LP#1892210 where the number of open connections to Memcached
from "neutron-server" would grow over time until reaching the
maximum set by "memcached_connection_limit" (5000 by default), at
which point the Memcached instance would stop working.
* An issue where when Kafka default topic creation was used to
create a Kafka topic, no redundant replicas were created in a multi-
node cluster. LP#1888522. This affects Monasca which uses Kafka, and
was previously masked by the legacy Kafka client used by Monasca
which has since been upgraded in Ussuri. Monasca users with multi-
node Kafka clusters should consultant the Kafka documentation to
increase the number of replicas.
* Fixes an issue where the "br_netfilter" kernel module was not
loaded on compute hosts. LP#1886796
* Prevents adding a new Keystone host to an existing cluster when
not targeting all Keystone hosts (e.g. due to "--limit" or "--
serial" arguments), to avoid overwriting existing Fernet keys.
LP#1891364
* Reduce the use of SQLAlchemy connection pooling, to improve
service reliability during a failover of the controller with the
internal VIP. LP#1896635
* No longer configures the Prometheus OpenStack exporter to use the
"prometheus" Docker volume, which was never required.
* Updates the default value of "REST_API_REQUIRED_SETTINGS" in
Horizon "local_settings", which enables some features such as
selecting the default boot source for instances. LP#1891024
Changes in kolla-ansible 9.2.0..9.3.0
-------------------------------------
060267ec8 Use ansible_distribution_release instead of ansible_lsb.codename
0719b78dc Fix mariadb_recovery when mariadb container is missing
bc6d69192 Backport ignore_missing support for kolla_docker
1c0f26818 Edit ironic inspector pxe filter driver name none to noop
7b55676f2 Do not start swift-object-updater on stop
c54d34595 docs: Add magnum guide
5744a6273 Revert "Performance: Use import_tasks in the main plays"
020f9093f Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default
c34bc558c CI: Avoid tox (and clean up gate setup)
190d8a17e [CI] Drop periodics and multinode gating
c34bf4529 Fix prechecks with Docker 20.10.0 and py27 job
6323f8096 RabbitMQ handler refactored to restart services in serial
46f27a8dc Do not set 'always' tag where unnecessary
ae2b7fa18 Performance: Use import_tasks in the main plays
492fc8f9c Fix stop containers task in Swift rolling restart
1aa3ab5e5 Fix kolla-ansible to work with pyenv-virtualenv
2418a317a [CI] Set 0 swap size
6342da230 Fix permission denied during Fernet key rotation
5ede5d9db Fix keystone-startup.sh - remove Fernet key age check
dc497edc7 Fix fernet cron path on Ubuntu/Debian
70fe644bc baremetal: Install iptables for Docker if enabled
4c25aedb0 replace internal with openstack_interface
dd37b867c Delete the /var/log/kolla directory should use sudo
55f2c1c34 Performance: use a single config file for fluentd
0eeff529f Performance: optimize genconfig
059bc5c27 docs: more info on migrating from CentOS 7 to 8
838af93b5 Performance: use a single config file for logrotate
55b2eee95 Apply bool filter to all enable_prometheus_* variables
8be6606de Remove duplicate groups
51b69e9b1 docs: Add information on migrating to CentOS 8
c92325d01 Performance: use import_tasks for register and bootstrap
ad9e82a99 Allow overwrite of placement-api wsgi config
6d03ac94c Add 'baremetal' to mechanism_drivers when using ironic+linuxbridge
903efc5a9 Reduce the use of SQLAlchemy connection pooling
ecd899c9a Fix keystone-startup.sh
b04819dd9 Fix default mode in haproxy_single_service_split
475a8ff0a Remove unused configuration for prometheus-openstack-exporter
d1f1c5c33 Performance: replace unconditional include_tasks with import_tasks
5a9c89479 Performance: remove one include_tasks in nova-cell
55fe8c189 Synchronize REST_API_REQUIRED_SETTINGS with Horizon
b27e0741b Fix test-ironic.sh not catching errors
c5e8162ff Add default value for kolla_internal_address variable
024ce8be9 Fix external mariadb documentation for database_user
c0e20dfd8 [CI] Fix Bifrost CentOS 8 job
8cd7b4d1a Fix fernet bootstrap and key distribution - follow up
ac38a4875 Fix keystone fernet bootstrap
1432aa007 add region name for tasks
2750a0835 Prevent overwriting existing Keystone Fernet keys
1ae811932 change the timezone precheck task's condition
dcc74b45e Add workaround for keystonemiddleware/neutron memcached issue
06c6e14e5 Fix kolla-ansible not reflect environment changed
ad42c70f9 Add cinder auth config to nova-cell nova.conf.j2
27919beee Fix ownership and permissions of admin-openrc.sh
f22643ff5 CI: enable Ansible SSH pipelining
84ccebf16 Mount /etc/timezone based on host OS
421246a33 Add support to use bifrost-deploy behind proxy
59cd154c1 Add missing mistral services log files
97f601cbe Fix fluentd warnings caused by "type copy"
cf733fdde [CI] Temporarily block new Ansible
0c3bd2532 [docker] Added a new flag to disable default iptables rules
df06eab19 Fix actions for Aodh and Swift
751d51b53 Fix play hosts for ironic, monasca, neutron, nova
cc2889090 Fix kolla_address in IPv6 fully-routed topo case
4d53605ac Fix Masakari role missing deploy-containers
560d27839 Performance: use import_tasks for check-containers.yml
9648a0aa4 fluentd: log to a file instead of stdout
f2031fc8a Improve Grafana DB bootstrap
410e66eec Set Kafka default replication factor
5433cbd8c Fix some CloudKitty API responses when behind SSL
efbcf5285 Performance: remove unnecessary conditions from includes
3525b2c36 Update glance configuration file for backend
724c1c807 CI: add prometheus-efk scenario
c30ed83fb fix deploy freezer failed when kolla_dev_mod enabled
574257dc2 Make /dev/kvm permissions handling more robust
0de9de494 Fix deprecation warnings in fluentd
678e24e5a Fix deployment of fluentd without any enabled OpenStack services
94c27865c Support editable virtualenv installation for development
6b51404a9 Manila - adjust logic for Open vSwitch configuration generation
0e353d3f5 Fix Logstash 2.4 log rotation
2aba54b88 Use openstack_tag for elasticsearch-curator image
8d7cc7239 Evaluate PASSWORDS_FILE later
921585a82 Load br_netfilter module in nova-cell role
Diffstat (except docs and test files)
-------------------------------------
ansible/group_vars/all.yml | 7 +-
ansible/library/kolla_docker.py | 7 +-
ansible/nova.yml | 2 +
ansible/post-deploy.yml | 9 +-
ansible/roles/aodh/defaults/main.yml | 8 +-
ansible/roles/aodh/tasks/bootstrap.yml | 2 +-
ansible/roles/aodh/tasks/config.yml | 3 -
ansible/roles/aodh/tasks/deploy.yml | 14 +-
ansible/roles/aodh/tasks/reconfigure.yml | 2 +-
ansible/roles/aodh/tasks/register.yml | 1 -
ansible/roles/aodh/tasks/stop.yml | 6 +
ansible/roles/aodh/tasks/upgrade.yml | 6 +-
ansible/roles/aodh/templates/aodh.conf.j2 | 2 +
ansible/roles/barbican/defaults/main.yml | 6 +-
ansible/roles/barbican/tasks/bootstrap.yml | 2 +-
ansible/roles/barbican/tasks/config.yml | 3 -
ansible/roles/barbican/tasks/deploy.yml | 13 +-
ansible/roles/barbican/tasks/reconfigure.yml | 2 +-
ansible/roles/barbican/tasks/register.yml | 1 -
ansible/roles/barbican/tasks/upgrade.yml | 6 +-
ansible/roles/baremetal/defaults/main.yml | 4 +-
.../roles/baremetal/tasks/bootstrap-servers.yml | 6 +-
ansible/roles/baremetal/tasks/post-install.yml | 13 +
ansible/roles/bifrost/tasks/deploy.yml | 6 +-
ansible/roles/bifrost/tasks/reconfigure.yml | 2 +-
ansible/roles/bifrost/tasks/start.yml | 1 +
ansible/roles/bifrost/tasks/upgrade.yml | 4 +-
ansible/roles/blazar/defaults/main.yml | 4 +-
ansible/roles/blazar/tasks/bootstrap.yml | 2 +-
ansible/roles/blazar/tasks/config.yml | 3 -
ansible/roles/blazar/tasks/deploy.yml | 12 +-
ansible/roles/blazar/tasks/reconfigure.yml | 2 +-
ansible/roles/blazar/tasks/register.yml | 1 -
ansible/roles/blazar/tasks/upgrade.yml | 6 +-
ansible/roles/blazar/templates/blazar.conf.j2 | 2 +
ansible/roles/ceilometer/defaults/main.yml | 8 +-
ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +-
ansible/roles/ceilometer/tasks/config.yml | 3 -
ansible/roles/ceilometer/tasks/deploy.yml | 12 +-
ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +-
ansible/roles/ceilometer/tasks/register.yml | 1 -
ansible/roles/ceilometer/tasks/upgrade.yml | 6 +-
ansible/roles/chrony/defaults/main.yml | 2 +-
ansible/roles/chrony/tasks/config.yml | 3 -
ansible/roles/chrony/tasks/deploy.yml | 4 +-
ansible/roles/chrony/tasks/reconfigure.yml | 2 +-
ansible/roles/chrony/tasks/upgrade.yml | 2 +-
ansible/roles/cinder/defaults/main.yml | 8 +-
ansible/roles/cinder/tasks/bootstrap.yml | 2 +-
ansible/roles/cinder/tasks/config.yml | 3 -
ansible/roles/cinder/tasks/deploy.yml | 21 +-
ansible/roles/cinder/tasks/reconfigure.yml | 2 +-
ansible/roles/cinder/tasks/register.yml | 1 -
ansible/roles/cinder/tasks/upgrade.yml | 6 +-
ansible/roles/cinder/templates/cinder.conf.j2 | 2 +
ansible/roles/cloudkitty/defaults/main.yml | 4 +-
ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +-
ansible/roles/cloudkitty/tasks/config.yml | 3 -
ansible/roles/cloudkitty/tasks/deploy.yml | 12 +-
ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +-
ansible/roles/cloudkitty/tasks/register.yml | 1 -
ansible/roles/cloudkitty/tasks/upgrade.yml | 6 +-
.../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 +
ansible/roles/collectd/defaults/main.yml | 2 +-
ansible/roles/collectd/tasks/config.yml | 3 -
ansible/roles/collectd/tasks/deploy.yml | 4 +-
ansible/roles/collectd/tasks/reconfigure.yml | 2 +-
ansible/roles/collectd/tasks/upgrade.yml | 4 +-
ansible/roles/common/defaults/main.yml | 97 ++++-
ansible/roles/common/filter_plugins/filters.py | 22 ++
ansible/roles/common/tasks/config.yml | 409 ++++++++-------------
ansible/roles/common/tasks/deploy.yml | 6 +-
ansible/roles/common/tasks/reconfigure.yml | 2 +-
ansible/roles/common/tasks/upgrade.yml | 4 +-
.../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +-
.../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +-
.../common/templates/conf/input/00-global.conf.j2 | 46 +--
.../common/templates/conf/input/01-syslog.conf.j2 | 2 +-
.../common/templates/conf/output/00-local.conf.j2 | 54 +--
.../templates/cron-logrotate-fluentd.conf.j2 | 3 +
.../common/templates/cron-logrotate-global.conf.j2 | 5 +-
.../templates/cron-logrotate-logstash.conf.j2 | 3 +
ansible/roles/common/templates/cron.json.j2 | 78 +---
ansible/roles/common/templates/fluentd.json.j2 | 54 +--
ansible/roles/common/templates/td-agent.conf.j2 | 49 ++-
ansible/roles/congress/defaults/main.yml | 6 +-
ansible/roles/cyborg/defaults/main.yml | 6 +-
ansible/roles/cyborg/tasks/bootstrap.yml | 2 +-
ansible/roles/cyborg/tasks/config.yml | 3 -
ansible/roles/cyborg/tasks/deploy.yml | 13 +-
ansible/roles/cyborg/tasks/reconfigure.yml | 2 +-
ansible/roles/cyborg/tasks/register.yml | 1 -
ansible/roles/cyborg/tasks/upgrade.yml | 6 +-
ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +
ansible/roles/designate/defaults/main.yml | 14 +-
ansible/roles/designate/tasks/bootstrap.yml | 2 +-
ansible/roles/designate/tasks/config.yml | 3 -
ansible/roles/designate/tasks/deploy.yml | 20 +-
ansible/roles/designate/tasks/reconfigure.yml | 2 +-
ansible/roles/designate/tasks/register.yml | 1 -
ansible/roles/designate/tasks/update_pools.yml | 3 +-
ansible/roles/designate/tasks/upgrade.yml | 8 +-
ansible/roles/elasticsearch/defaults/main.yml | 5 +-
ansible/roles/elasticsearch/tasks/config.yml | 3 -
ansible/roles/elasticsearch/tasks/deploy.yml | 6 +-
ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +-
ansible/roles/elasticsearch/tasks/upgrade.yml | 6 +-
ansible/roles/etcd/defaults/main.yml | 2 +-
ansible/roles/etcd/tasks/config.yml | 3 -
ansible/roles/etcd/tasks/deploy.yml | 4 +-
ansible/roles/etcd/tasks/reconfigure.yml | 2 +-
ansible/roles/etcd/tasks/upgrade.yml | 4 +-
ansible/roles/freezer/defaults/main.yml | 4 +-
ansible/roles/freezer/tasks/bootstrap.yml | 4 +-
ansible/roles/freezer/tasks/config.yml | 3 -
ansible/roles/freezer/tasks/deploy.yml | 15 +-
ansible/roles/freezer/tasks/reconfigure.yml | 2 +-
ansible/roles/freezer/tasks/register.yml | 1 -
ansible/roles/freezer/tasks/upgrade.yml | 6 +-
ansible/roles/freezer/templates/freezer.conf.j2 | 2 +
ansible/roles/glance/defaults/main.yml | 4 +-
ansible/roles/glance/tasks/bootstrap.yml | 2 +-
ansible/roles/glance/tasks/config.yml | 3 -
ansible/roles/glance/tasks/deploy.yml | 14 +-
ansible/roles/glance/tasks/legacy_upgrade.yml | 6 +-
ansible/roles/glance/tasks/reconfigure.yml | 2 +-
ansible/roles/glance/tasks/register.yml | 1 -
ansible/roles/glance/tasks/rolling_upgrade.yml | 2 +
ansible/roles/glance/templates/glance-api.conf.j2 | 2 +
ansible/roles/gnocchi/defaults/main.yml | 6 +-
ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +-
ansible/roles/gnocchi/tasks/config.yml | 3 -
ansible/roles/gnocchi/tasks/deploy.yml | 13 +-
ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +-
ansible/roles/gnocchi/tasks/register.yml | 1 -
ansible/roles/gnocchi/tasks/upgrade.yml | 6 +-
ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 3 +-
ansible/roles/grafana/defaults/main.yml | 2 +-
ansible/roles/grafana/handlers/main.yml | 39 +-
ansible/roles/grafana/tasks/config.yml | 3 -
ansible/roles/grafana/tasks/deploy.yml | 8 +-
ansible/roles/grafana/tasks/reconfigure.yml | 2 +-
ansible/roles/grafana/tasks/upgrade.yml | 30 +-
.../templates/haproxy_single_service_split.cfg.j2 | 2 +-
ansible/roles/haproxy/defaults/main.yml | 4 +-
ansible/roles/haproxy/tasks/config.yml | 3 -
ansible/roles/haproxy/tasks/deploy.yml | 6 +-
ansible/roles/haproxy/tasks/reconfigure.yml | 2 +-
ansible/roles/haproxy/tasks/upgrade.yml | 4 +-
ansible/roles/heat/defaults/main.yml | 6 +-
ansible/roles/heat/tasks/bootstrap.yml | 2 +-
ansible/roles/heat/tasks/config.yml | 3 -
ansible/roles/heat/tasks/deploy.yml | 16 +-
ansible/roles/heat/tasks/reconfigure.yml | 2 +-
ansible/roles/heat/tasks/register.yml | 1 -
ansible/roles/heat/tasks/upgrade.yml | 6 +-
ansible/roles/heat/templates/heat.conf.j2 | 2 +
ansible/roles/horizon/defaults/main.yml | 2 +-
ansible/roles/horizon/tasks/bootstrap.yml | 2 +-
ansible/roles/horizon/tasks/config.yml | 3 -
ansible/roles/horizon/tasks/deploy.yml | 4 +-
ansible/roles/horizon/tasks/reconfigure.yml | 2 +-
ansible/roles/horizon/tasks/upgrade.yml | 4 +-
ansible/roles/horizon/templates/local_settings.j2 | 12 +-
ansible/roles/influxdb/defaults/main.yml | 2 +-
ansible/roles/influxdb/tasks/config.yml | 3 -
ansible/roles/influxdb/tasks/deploy.yml | 4 +-
ansible/roles/influxdb/tasks/reconfigure.yml | 2 +-
ansible/roles/influxdb/tasks/upgrade.yml | 4 +-
ansible/roles/ironic/defaults/main.yml | 14 +-
ansible/roles/ironic/tasks/bootstrap.yml | 2 +-
ansible/roles/ironic/tasks/config.yml | 3 -
ansible/roles/ironic/tasks/deploy.yml | 22 +-
ansible/roles/ironic/tasks/legacy_upgrade.yml | 8 +-
ansible/roles/ironic/tasks/reconfigure.yml | 2 +-
ansible/roles/ironic/tasks/register.yml | 1 -
ansible/roles/ironic/tasks/rolling_upgrade.yml | 12 +-
.../ironic/templates/ironic-inspector.conf.j2 | 2 +
ansible/roles/ironic/templates/ironic.conf.j2 | 2 +
ansible/roles/iscsi/defaults/main.yml | 4 +-
ansible/roles/iscsi/tasks/config.yml | 3 -
ansible/roles/iscsi/tasks/deploy.yml | 6 +-
ansible/roles/iscsi/tasks/reconfigure.yml | 2 +-
ansible/roles/iscsi/tasks/upgrade.yml | 2 +-
ansible/roles/kafka/defaults/main.yml | 2 +-
ansible/roles/kafka/tasks/config.yml | 3 -
ansible/roles/kafka/tasks/deploy.yml | 4 +-
ansible/roles/kafka/tasks/reconfigure.yml | 2 +-
ansible/roles/kafka/tasks/upgrade.yml | 4 +-
.../kafka/templates/kafka.server.properties.j2 | 1 +
ansible/roles/karbor/defaults/main.yml | 6 +-
ansible/roles/karbor/tasks/bootstrap.yml | 2 +-
ansible/roles/karbor/tasks/config.yml | 3 -
ansible/roles/karbor/tasks/deploy.yml | 13 +-
ansible/roles/karbor/tasks/reconfigure.yml | 2 +-
ansible/roles/karbor/tasks/register.yml | 1 -
ansible/roles/karbor/tasks/upgrade.yml | 6 +-
ansible/roles/karbor/templates/karbor.conf.j2 | 2 +
ansible/roles/keystone/defaults/main.yml | 6 +-
ansible/roles/keystone/handlers/main.yml | 12 +-
ansible/roles/keystone/tasks/bootstrap.yml | 2 +-
ansible/roles/keystone/tasks/bootstrap_service.yml | 54 +++
ansible/roles/keystone/tasks/config.yml | 17 +-
ansible/roles/keystone/tasks/deploy.yml | 12 +-
ansible/roles/keystone/tasks/distribute_fernet.yml | 19 +
ansible/roles/keystone/tasks/init_fernet.yml | 27 --
ansible/roles/keystone/tasks/reconfigure.yml | 2 +-
ansible/roles/keystone/tasks/register.yml | 2 +-
ansible/roles/keystone/tasks/upgrade.yml | 4 +-
.../keystone/templates/fernet-node-sync.sh.j2 | 28 +-
ansible/roles/keystone/templates/fernet-push.sh.j2 | 3 +
.../roles/keystone/templates/fernet-rotate.sh.j2 | 3 +
.../keystone/templates/keystone-fernet.json.j2 | 9 +-
.../roles/keystone/templates/keystone-ssh.json.j2 | 7 +
.../keystone/templates/keystone-startup.sh.j2 | 24 ++
ansible/roles/keystone/templates/keystone.conf.j2 | 2 +
ansible/roles/keystone/templates/keystone.json.j2 | 9 +-
ansible/roles/kibana/defaults/main.yml | 2 +-
ansible/roles/kibana/tasks/config.yml | 3 -
ansible/roles/kibana/tasks/deploy.yml | 4 +-
ansible/roles/kibana/tasks/reconfigure.yml | 2 +-
ansible/roles/kibana/tasks/upgrade.yml | 4 +-
ansible/roles/kuryr/defaults/main.yml | 2 +-
ansible/roles/kuryr/tasks/config.yml | 3 -
ansible/roles/kuryr/tasks/deploy.yml | 6 +-
ansible/roles/kuryr/tasks/reconfigure.yml | 2 +-
ansible/roles/kuryr/tasks/register.yml | 1 -
ansible/roles/kuryr/tasks/upgrade.yml | 4 +-
ansible/roles/magnum/defaults/main.yml | 4 +-
ansible/roles/magnum/tasks/bootstrap.yml | 2 +-
ansible/roles/magnum/tasks/config.yml | 3 -
ansible/roles/magnum/tasks/deploy.yml | 12 +-
ansible/roles/magnum/tasks/reconfigure.yml | 2 +-
ansible/roles/magnum/tasks/register.yml | 4 +-
ansible/roles/magnum/tasks/upgrade.yml | 6 +-
ansible/roles/magnum/templates/magnum.conf.j2 | 2 +
ansible/roles/manila/defaults/main.yml | 8 +-
ansible/roles/manila/tasks/bootstrap.yml | 2 +-
ansible/roles/manila/tasks/config.yml | 3 -
ansible/roles/manila/tasks/deploy.yml | 14 +-
ansible/roles/manila/tasks/reconfigure.yml | 2 +-
ansible/roles/manila/tasks/register.yml | 1 -
ansible/roles/manila/tasks/upgrade.yml | 6 +-
ansible/roles/manila/templates/manila.conf.j2 | 2 +
ansible/roles/mariadb/defaults/main.yml | 2 +-
ansible/roles/mariadb/tasks/bootstrap.yml | 2 +-
ansible/roles/mariadb/tasks/config.yml | 3 -
ansible/roles/mariadb/tasks/deploy.yml | 10 +-
ansible/roles/mariadb/tasks/reconfigure.yml | 2 +-
ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +-
ansible/roles/mariadb/tasks/upgrade.yml | 2 +-
ansible/roles/masakari/defaults/main.yml | 6 +-
ansible/roles/masakari/tasks/bootstrap.yml | 2 +-
ansible/roles/masakari/tasks/check-containers.yml | 17 +
ansible/roles/masakari/tasks/config.yml | 18 -
ansible/roles/masakari/tasks/deploy-containers.yml | 2 +
ansible/roles/masakari/tasks/deploy.yml | 13 +-
ansible/roles/masakari/tasks/reconfigure.yml | 2 +-
ansible/roles/masakari/tasks/register.yml | 1 -
ansible/roles/masakari/tasks/upgrade.yml | 6 +-
ansible/roles/masakari/templates/masakari.conf.j2 | 2 +
ansible/roles/memcached/defaults/main.yml | 2 +-
ansible/roles/memcached/tasks/config.yml | 3 -
ansible/roles/memcached/tasks/deploy.yml | 4 +-
ansible/roles/memcached/tasks/reconfigure.yml | 2 +-
ansible/roles/memcached/tasks/upgrade.yml | 4 +-
ansible/roles/mistral/defaults/main.yml | 8 +-
ansible/roles/mistral/tasks/bootstrap.yml | 2 +-
ansible/roles/mistral/tasks/config.yml | 3 -
ansible/roles/mistral/tasks/deploy.yml | 14 +-
ansible/roles/mistral/tasks/reconfigure.yml | 2 +-
ansible/roles/mistral/tasks/register.yml | 1 -
ansible/roles/mistral/tasks/upgrade.yml | 6 +-
ansible/roles/mistral/templates/mistral.conf.j2 | 2 +
ansible/roles/monasca/defaults/main.yml | 24 +-
ansible/roles/monasca/handlers/main.yml | 39 +-
ansible/roles/monasca/tasks/bootstrap.yml | 2 +-
ansible/roles/monasca/tasks/config.yml | 3 -
ansible/roles/monasca/tasks/deploy.yml | 37 +-
ansible/roles/monasca/tasks/reconfigure.yml | 2 +-
ansible/roles/monasca/tasks/register.yml | 1 -
ansible/roles/monasca/tasks/upgrade.yml | 35 +-
.../monasca/templates/monasca-api/api.conf.j2 | 2 +
.../monasca-log-metrics/log-metrics.conf.j2 | 2 +-
ansible/roles/mongodb/defaults/main.yml | 2 +-
ansible/roles/mongodb/tasks/config.yml | 2 +-
ansible/roles/multipathd/defaults/main.yml | 2 +-
ansible/roles/multipathd/tasks/config.yml | 3 -
ansible/roles/multipathd/tasks/deploy.yml | 6 +-
ansible/roles/multipathd/tasks/reconfigure.yml | 2 +-
ansible/roles/multipathd/tasks/upgrade.yml | 6 +-
ansible/roles/murano/defaults/main.yml | 4 +-
ansible/roles/murano/tasks/bootstrap.yml | 2 +-
ansible/roles/murano/tasks/config.yml | 3 -
ansible/roles/murano/tasks/deploy.yml | 16 +-
ansible/roles/murano/tasks/reconfigure.yml | 2 +-
ansible/roles/murano/tasks/register.yml | 1 -
ansible/roles/murano/tasks/upgrade.yml | 8 +-
ansible/roles/murano/templates/murano.conf.j2 | 2 +
ansible/roles/neutron/defaults/main.yml | 24 +-
ansible/roles/neutron/tasks/bootstrap.yml | 2 +-
ansible/roles/neutron/tasks/check-containers.yml | 1 +
ansible/roles/neutron/tasks/config.yml | 3 -
ansible/roles/neutron/tasks/deploy.yml | 12 +-
ansible/roles/neutron/tasks/legacy_upgrade.yml | 8 +-
ansible/roles/neutron/tasks/reconfigure.yml | 2 +-
ansible/roles/neutron/tasks/register.yml | 1 -
ansible/roles/neutron/tasks/rolling_upgrade.yml | 6 +-
ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +-
ansible/roles/neutron/templates/neutron.conf.j2 | 5 +
ansible/roles/nova-cell/defaults/main.yml | 23 +-
ansible/roles/nova-cell/tasks/config-host.yml | 36 ++
.../roles/nova-cell/tasks/config-libvirt-tls.yml | 48 ++-
ansible/roles/nova-cell/tasks/config.yml | 35 +-
ansible/roles/nova-cell/tasks/deploy.yml | 6 +-
.../roles/nova-cell/tasks/discover_computes.yml | 2 +-
ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 -
ansible/roles/nova-cell/tasks/reconfigure.yml | 2 +-
ansible/roles/nova-cell/tasks/rolling_upgrade.yml | 6 +-
ansible/roles/nova-cell/tasks/upgrade.yml | 2 +-
.../nova-cell/templates/99-kolla-kvm.rules.j2 | 4 +
ansible/roles/nova-cell/templates/nova.conf.j2 | 12 +-
ansible/roles/nova/defaults/main.yml | 8 +-
ansible/roles/nova/tasks/config.yml | 3 -
ansible/roles/nova/tasks/deploy.yml | 7 +-
ansible/roles/nova/tasks/reconfigure.yml | 2 +-
ansible/roles/nova/tasks/register.yml | 1 -
ansible/roles/nova/tasks/rolling_upgrade.yml | 4 +-
ansible/roles/nova/tasks/upgrade.yml | 2 +-
ansible/roles/nova/templates/nova.conf.j2 | 5 +-
ansible/roles/octavia/defaults/main.yml | 8 +-
ansible/roles/octavia/tasks/bootstrap.yml | 2 +-
ansible/roles/octavia/tasks/config.yml | 3 -
ansible/roles/octavia/tasks/deploy.yml | 14 +-
ansible/roles/octavia/tasks/reconfigure.yml | 2 +-
ansible/roles/octavia/tasks/register.yml | 3 +-
ansible/roles/octavia/tasks/upgrade.yml | 6 +-
ansible/roles/octavia/templates/octavia.conf.j2 | 2 +
ansible/roles/opendaylight/tasks/config.yml | 3 -
ansible/roles/opendaylight/tasks/deploy.yml | 6 +-
ansible/roles/opendaylight/tasks/reconfigure.yml | 2 +-
ansible/roles/opendaylight/tasks/upgrade.yml | 6 +-
ansible/roles/openvswitch/defaults/main.yml | 4 +-
ansible/roles/openvswitch/tasks/config.yml | 7 +-
ansible/roles/openvswitch/tasks/deploy.yml | 8 +-
ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +-
ansible/roles/openvswitch/tasks/upgrade.yml | 8 +-
ansible/roles/ovs-dpdk/defaults/main.yml | 4 +-
ansible/roles/ovs-dpdk/tasks/config.yml | 3 -
ansible/roles/ovs-dpdk/tasks/deploy.yml | 4 +-
ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +-
ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +-
ansible/roles/panko/defaults/main.yml | 2 +-
ansible/roles/panko/tasks/bootstrap.yml | 2 +-
ansible/roles/panko/tasks/config.yml | 3 -
ansible/roles/panko/tasks/deploy.yml | 8 +-
ansible/roles/panko/tasks/reconfigure.yml | 2 +-
ansible/roles/panko/tasks/register.yml | 1 -
ansible/roles/panko/tasks/upgrade.yml | 6 +-
ansible/roles/panko/templates/panko.conf.j2 | 2 +
ansible/roles/placement/defaults/main.yml | 2 +-
ansible/roles/placement/tasks/bootstrap.yml | 2 +-
ansible/roles/placement/tasks/config.yml | 9 +-
ansible/roles/placement/tasks/deploy.yml | 10 +-
ansible/roles/placement/tasks/reconfigure.yml | 2 +-
ansible/roles/placement/tasks/register.yml | 1 -
ansible/roles/placement/tasks/upgrade.yml | 10 +-
.../roles/placement/templates/placement.conf.j2 | 3 +-
ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +-
ansible/roles/prechecks/tasks/main.yml | 10 +-
ansible/roles/prechecks/tasks/service_checks.yml | 2 +-
ansible/roles/prometheus/defaults/main.yml | 27 +-
ansible/roles/prometheus/tasks/config.yml | 3 -
ansible/roles/prometheus/tasks/deploy.yml | 6 +-
ansible/roles/prometheus/tasks/reconfigure.yml | 2 +-
ansible/roles/prometheus/tasks/upgrade.yml | 4 +-
.../prometheus-openstack-exporter.json.j2 | 5 -
.../prometheus/templates/prometheus-server.json.j2 | 2 +-
ansible/roles/qdrouterd/defaults/main.yml | 2 +-
ansible/roles/qdrouterd/tasks/config.yml | 3 -
ansible/roles/qdrouterd/tasks/deploy.yml | 6 +-
ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +-
ansible/roles/qdrouterd/tasks/upgrade.yml | 4 +-
ansible/roles/qinling/defaults/main.yml | 4 +-
ansible/roles/qinling/tasks/bootstrap.yml | 2 +-
ansible/roles/qinling/tasks/config.yml | 3 -
ansible/roles/qinling/tasks/deploy.yml | 12 +-
ansible/roles/qinling/tasks/reconfigure.yml | 2 +-
ansible/roles/qinling/tasks/register.yml | 1 -
ansible/roles/qinling/tasks/upgrade.yml | 6 +-
ansible/roles/qinling/templates/qinling.conf.j2 | 2 +
ansible/roles/rabbitmq/defaults/main.yml | 2 +-
ansible/roles/rabbitmq/handlers/main.yml | 43 +--
ansible/roles/rabbitmq/tasks/check-containers.yml | 3 +-
ansible/roles/rabbitmq/tasks/config.yml | 18 +-
ansible/roles/rabbitmq/tasks/deploy.yml | 6 +-
ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +-
ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++
ansible/roles/rabbitmq/tasks/upgrade.yml | 4 +-
ansible/roles/rally/defaults/main.yml | 2 +-
ansible/roles/rally/tasks/bootstrap.yml | 2 +-
ansible/roles/rally/tasks/config.yml | 3 -
ansible/roles/rally/tasks/deploy.yml | 6 +-
ansible/roles/rally/tasks/reconfigure.yml | 2 +-
ansible/roles/rally/tasks/upgrade.yml | 6 +-
ansible/roles/rally/templates/rally.conf.j2 | 2 +
ansible/roles/redis/defaults/main.yml | 4 +-
ansible/roles/redis/tasks/config.yml | 3 -
ansible/roles/redis/tasks/deploy.yml | 4 +-
ansible/roles/redis/tasks/reconfigure.yml | 2 +-
ansible/roles/redis/tasks/upgrade.yml | 4 +-
ansible/roles/sahara/defaults/main.yml | 4 +-
ansible/roles/sahara/tasks/bootstrap.yml | 2 +-
ansible/roles/sahara/tasks/config.yml | 3 -
ansible/roles/sahara/tasks/deploy.yml | 12 +-
ansible/roles/sahara/tasks/reconfigure.yml | 2 +-
ansible/roles/sahara/tasks/register.yml | 1 -
ansible/roles/sahara/tasks/upgrade.yml | 6 +-
ansible/roles/sahara/templates/sahara.conf.j2 | 2 +
ansible/roles/searchlight/defaults/main.yml | 4 +-
ansible/roles/searchlight/tasks/bootstrap.yml | 2 +-
ansible/roles/searchlight/tasks/config.yml | 3 -
ansible/roles/searchlight/tasks/deploy.yml | 8 +-
ansible/roles/searchlight/tasks/reconfigure.yml | 2 +-
ansible/roles/searchlight/tasks/register.yml | 1 -
ansible/roles/searchlight/tasks/upgrade.yml | 6 +-
ansible/roles/senlin/defaults/main.yml | 4 +-
ansible/roles/senlin/tasks/bootstrap.yml | 2 +-
ansible/roles/senlin/tasks/config.yml | 3 -
ansible/roles/senlin/tasks/deploy.yml | 12 +-
ansible/roles/senlin/tasks/reconfigure.yml | 2 +-
ansible/roles/senlin/tasks/register.yml | 1 -
ansible/roles/senlin/tasks/upgrade.yml | 6 +-
ansible/roles/senlin/templates/senlin.conf.j2 | 2 +
ansible/roles/skydive/defaults/main.yml | 4 +-
ansible/roles/skydive/tasks/config.yml | 3 -
ansible/roles/skydive/tasks/deploy.yml | 6 +-
ansible/roles/skydive/tasks/reconfigure.yml | 2 +-
ansible/roles/skydive/tasks/upgrade.yml | 4 +-
ansible/roles/solum/defaults/main.yml | 8 +-
ansible/roles/solum/tasks/bootstrap.yml | 2 +-
ansible/roles/solum/tasks/config.yml | 3 -
ansible/roles/solum/tasks/deploy.yml | 14 +-
ansible/roles/solum/tasks/reconfigure.yml | 2 +-
ansible/roles/solum/tasks/register.yml | 1 -
ansible/roles/solum/tasks/upgrade.yml | 6 +-
ansible/roles/solum/templates/solum.conf.j2 | 2 +
ansible/roles/storm/defaults/main.yml | 4 +-
ansible/roles/storm/tasks/config.yml | 3 -
ansible/roles/storm/tasks/deploy.yml | 4 +-
ansible/roles/storm/tasks/reconfigure.yml | 2 +-
ansible/roles/storm/tasks/upgrade.yml | 2 +-
ansible/roles/swift/tasks/deploy-containers.yml | 2 +
ansible/roles/swift/tasks/deploy.yml | 8 +-
ansible/roles/swift/tasks/legacy_upgrade.yml | 4 +-
ansible/roles/swift/tasks/reconfigure.yml | 2 +-
ansible/roles/swift/tasks/register.yml | 1 -
ansible/roles/swift/tasks/rolling_upgrade.yml | 43 ++-
ansible/roles/swift/tasks/stop.yml | 2 +-
ansible/roles/tacker/defaults/main.yml | 4 +-
ansible/roles/tacker/tasks/bootstrap.yml | 2 +-
ansible/roles/tacker/tasks/config.yml | 3 -
ansible/roles/tacker/tasks/deploy.yml | 14 +-
ansible/roles/tacker/tasks/reconfigure.yml | 2 +-
ansible/roles/tacker/tasks/register.yml | 1 -
ansible/roles/tacker/tasks/upgrade.yml | 6 +-
ansible/roles/tacker/templates/tacker.conf.j2 | 2 +
ansible/roles/telegraf/defaults/main.yml | 2 +-
ansible/roles/telegraf/tasks/config.yml | 3 -
ansible/roles/telegraf/tasks/deploy.yml | 4 +-
ansible/roles/telegraf/tasks/reconfigure.yml | 2 +-
ansible/roles/telegraf/tasks/upgrade.yml | 4 +-
ansible/roles/tempest/defaults/main.yml | 2 +-
ansible/roles/tempest/tasks/config.yml | 3 -
ansible/roles/tempest/tasks/deploy.yml | 4 +-
ansible/roles/tempest/tasks/reconfigure.yml | 2 +-
ansible/roles/tempest/tasks/upgrade.yml | 4 +-
ansible/roles/trove/defaults/main.yml | 6 +-
ansible/roles/trove/tasks/bootstrap.yml | 2 +-
ansible/roles/trove/tasks/config.yml | 3 -
ansible/roles/trove/tasks/deploy.yml | 13 +-
ansible/roles/trove/tasks/reconfigure.yml | 2 +-
ansible/roles/trove/tasks/register.yml | 1 -
ansible/roles/trove/tasks/upgrade.yml | 6 +-
.../roles/trove/templates/trove-conductor.conf.j2 | 2 +
.../trove/templates/trove-taskmanager.conf.j2 | 2 +
ansible/roles/trove/templates/trove.conf.j2 | 2 +
ansible/roles/vitrage/defaults/main.yml | 8 +-
ansible/roles/vitrage/tasks/bootstrap.yml | 2 +-
ansible/roles/vitrage/tasks/config.yml | 3 -
ansible/roles/vitrage/tasks/deploy.yml | 14 +-
ansible/roles/vitrage/tasks/reconfigure.yml | 2 +-
ansible/roles/vitrage/tasks/register.yml | 2 +-
ansible/roles/vitrage/tasks/upgrade.yml | 6 +-
ansible/roles/vitrage/templates/vitrage.conf.j2 | 2 +
ansible/roles/vmtp/defaults/main.yml | 2 +-
ansible/roles/vmtp/tasks/config.yml | 3 -
ansible/roles/vmtp/tasks/deploy.yml | 5 +-
ansible/roles/vmtp/tasks/reconfigure.yml | 2 +-
ansible/roles/vmtp/tasks/upgrade.yml | 4 +-
ansible/roles/watcher/defaults/main.yml | 6 +-
ansible/roles/watcher/tasks/bootstrap.yml | 2 +-
ansible/roles/watcher/tasks/config.yml | 3 -
ansible/roles/watcher/tasks/deploy.yml | 13 +-
ansible/roles/watcher/tasks/reconfigure.yml | 2 +-
ansible/roles/watcher/tasks/register.yml | 1 -
ansible/roles/watcher/tasks/upgrade.yml | 6 +-
ansible/roles/watcher/templates/watcher.conf.j2 | 2 +
ansible/roles/zookeeper/defaults/main.yml | 2 +-
ansible/roles/zookeeper/tasks/config.yml | 3 -
ansible/roles/zookeeper/tasks/deploy.yml | 4 +-
ansible/roles/zookeeper/tasks/reconfigure.yml | 2 +-
ansible/roles/zookeeper/tasks/upgrade.yml | 4 +-
ansible/roles/zun/defaults/main.yml | 6 +-
ansible/roles/zun/tasks/bootstrap.yml | 2 +-
ansible/roles/zun/tasks/config.yml | 3 -
ansible/roles/zun/tasks/deploy.yml | 12 +-
ansible/roles/zun/tasks/reconfigure.yml | 2 +-
ansible/roles/zun/tasks/register.yml | 1 -
ansible/roles/zun/tasks/upgrade.yml | 6 +-
ansible/roles/zun/templates/zun.conf.j2 | 2 +
ansible/site.yml | 8 +-
.../reference/databases/external-mariadb-guide.rst | 4 +-
kolla_ansible/filters.py | 11 +-
kolla_ansible/fluentd_filters.py | 44 +++
kolla_ansible/helpers.py | 21 ++
kolla_ansible/kolla_address.py | 30 +-
...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml | 5 +
.../notes/bug-1681461-761f0cdf71bcb962.yaml | 6 +
...6789-fix-fernet-bootstrap-36f87e36e4dc6ec9.yaml | 6 +
.../notes/bug-1848941-7e192be1885af513.yaml | 6 +
.../notes/bug-1867953-4897a2c05aba43c6.yaml | 5 +
.../notes/bug-1886787-013164ffc2f67264.yaml | 9 +
.../notes/bug-1887180-89450a4185c7449d.yaml | 6 +
.../notes/bug-1888852-8735ee29f69f77b5.yaml | 5 +
.../notes/bug-1889611-f08c228fca884bf2.yaml | 5 +
.../notes/bug-1895723-910de90908de260a.yaml | 6 +
.../notes/bug-1896591-47c829f8b72d567a.yaml | 6 +
.../notes/bug-1898765-73881932a2ef1d32.yaml | 7 +
.../notes/bug-1898766-ffc55c97230d8221.yaml | 6 +
.../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 +
.../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 +
.../notes/bug-1906944-38798e1348ff9c97.yaml | 6 +
.../notes/bug-1907436-2da50ed38d107127.yaml | 6 +
.../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 +
...ug-freezer-dev-mod-failed-af5bebb6c3eaabad.yaml | 5 +
.../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml | 5 +
.../docker-disable-iptables-e9a248a0515f30a6.yaml | 12 +
.../docker-install-iptables-f24fef8ce2418963.yaml | 6 +
...min-openrc-ownership-mode-310d89a6f50a9640.yaml | 19 +
...vacuate-cinder-encryption-489f8cf6a340e7be.yaml | 6 +
...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml | 7 +
.../fix-keystone-startup-66c5aa11a464a562.yaml | 8 +
...ance-grafana-db-bootstrap-298feba3e1750aca.yaml | 5 +
...emcached-connection-issue-84f5affa217b4612.yaml | 8 +
.../fluentd-single-config-d5ae95fecbfb6e3e.yaml | 5 +
...default-topic-replication-0debd5eb89f0c50d.yaml | 11 +
.../notes/load-br-netfilter-4ce9facd93e96af7.yaml | 6 +
.../logrotate-single-config-663d6bf154218380.yaml | 5 +
...-keystone-bootstrap-limit-f0250725633c16de.yaml | 7 +
...uce-db-connection-pooling-b44da77eaa390f22.yaml | 6 +
...e-from-openstack-exporter-f6bb5da3093abef8.yaml | 5 +
...est-api-required-settings-099875e53248b62c.yaml | 14 +
test-requirements.txt | 2 +-
tools/cleanup-containers | 2 +-
tools/kolla-ansible | 17 +-
tools/setup_gate.sh | 54 ++-
zuul.d/base.yaml | 14 +
zuul.d/jobs.yaml | 31 +-
zuul.d/project.yaml | 39 +-
588 files changed, 3201 insertions(+), 1844 deletions(-)
Requirements updates
--------------------
diff --git a/test-requirements.txt b/test-requirements.txt
index 7044225bd..899c0c6b3 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4 +4 @@
-bandit>=1.1.0 # Apache-2.0
+bandit<1.6.3,>=1.1.0 # Apache-2.0
1
0
Hello everyone,
A new release candidate for kolla for the end of the Victoria
cycle is available! You can find the source code tarball at:
https://tarballs.openstack.org/kolla/
Unless release-critical issues are found that warrant a release
candidate respin, this candidate will be formally released as the
final Victoria release. You are therefore strongly encouraged
to test and validate this tarball!
Alternatively, you can directly test the stable/victoria release
branch at:
https://opendev.org/openstack/kolla/src/branch/stable/victoria
Release notes for kolla can be found at:
https://docs.openstack.org/releasenotes/kolla/
If you find an issue that could be considered release-critical, please
file it at:
https://bugs.launchpad.net/kolla/+bugs
and tag it *victoria-rc-potential* to bring it to the kolla
release crew's attention.
1
0
We exuberantly announce the release of:
kolla 10.2.0: Kolla OpenStack Deployment
This release is part of the ussuri stable release series.
The source is available from:
https://opendev.org/openstack/kolla
Download the package from:
https://tarballs.openstack.org/kolla/
Please report issues through:
https://bugs.launchpad.net/kolla/+bugs
For more details, please see below.
10.2.0
^^^^^^
New Features
************
* Add a Monasca app plugin for the Monasca fork of Grafana. Plugin
provides screens for viewing or configuring: Alarm Definitions,
Alarms and Notifications
Upgrade Notes
*************
* Kolla now no longer supports CentOS 8.2 and below. This is to
support CentOS 8.3 without extra workarounds (please see the fixes
section for more details). The promise is to support the latest
CentOS 8 release which is 8.3 now.
* Source based builds will now install OpenStack projects code from
stable tarballs, compared to versioned (released point versions)
ones as before.
Bug Fixes
*********
* Fixes the FC Cinder backend usage in Nova. LP#1884484
* Logstash 6 introduced in Centos 8 in Train release comes with
log4j2 configuration that does not remove old compressed logs after
rotation https://github.com/elastic/logstash/issues/11883 Log
rotation config backported from Logstash 7 - Combination of Size
Based and Time Based policies. Deletion occurs after 30 days or 3000
MB log files size - whichever comes first.
* Fixes MariaDB incremental backup failure when full backup was not
created the same day. LP#1897948
* Fixes builds on CentOS 8.3 failing due to renamed repos. Notice
Kolla now no longer supports CentOS 8.2 and below. LP#1907213
* Fixes an issue with the "kolla_set_configs --check" command when
the source is a directory. LP#1890567
* Fixes an issue with the Masakari dashboard where policies were not
loaded correctly.
* nova-compute uses daxio to cleanup vpmem backend device on
instance delete. If the daxio binary is missing in the nova-compute
container instance delete fails. daxio is provided in centos via
daxio, in ubuntu via the pmdk-tools package.
* Added rally-openstack as plugin to rally source image
* Fixes an issue which can block the Monasca Fluentd output plugin.
LP#1889065
Changes in kolla 10.1.0..10.2.0
-------------------------------
e0d8772ef Fix Freezer & Cyborg API startup on CentOS
8d6f21a20 Install iptables in ironic-inspector container
67e5c68f0 Fix build of monasca-grafana
84ffe90e2 ceilometer: do not fail when using an unsupported database type
12c898e99 Add daxio for nvdimm scenario
b53a93faa mariadb: Fixes incremental backup failure when full not created today
c6bd759c7 use freezer user for freezer_scheduler container
ed85b4053 elasticsearch-curator: drop botocore workaround
6a278f14a Publish weekly
b439904d5 Support CentOS 8.3
e54f95eaa [CI] Slim down
10b267a76 [CI] Stop testing lower-constraints
09ead6310 Update the'image-building.rst' document
f834290de curator: Add wheel to elasticsearch-curator
19e8efb1c rally: add rally-openstack in source - follow up
bebad0409 Use upper constraints for virtualenv in openstack-base
027016e98 Checks for heat_user_domain explicitly
943c03f2e Improve pip install process for offline deployment.
de7f3c259 Add sysfsutils to nova-compute ubuntu source
c93162596 Release note for using stable sources
5a31aa02b Fix Masakari dashboard policy file location
c191e6fbd Fix kolla_set_configs --check with a directory
ce7cd4784 Add collectd-libpod-stats to image
193c766a9 Change sources to stable-ussuri
ef6cfb419 Replace cradox with rados
135f01d7e version-check: handle using of stable branch tarballs
aecf4c51e Install newer virtualenv with relaxed importlib
821c49600 Add glusterfs-fuse package to manila-share container
69c0ff849 Updated TGTD to N for centos8
b4faacb4e [CI] Fix wheel url for CentOS
c305746b6 Install Monasca plugin for Grafana by default
c941e8635 Upgrade Fluentd Monasca plugin
a893e6950 copy rootwarp files form venv in ironic base
15f2af1b0 Fix Logstash 6 log rotation - Stable/Ussuri
Diffstat (except docs and test files)
-------------------------------------
.zuul.d/centos.yaml | 34 ++--
.zuul.d/debian.yaml | 2 +-
.zuul.d/project.yaml | 1 -
.zuul.d/ubuntu.yaml | 26 +--
.../ceilometer-notification/extend_start.sh | 3 -
.../elasticsearch-curator/Dockerfile.j2 | 3 +-
.../openvswitch-netcontrold/Dockerfile.j2 | 2 +-
kolla/common/config.py | 216 +++++++++++----------
kolla/template/repos.yaml | 8 +-
.../add-monasca-grafana-app-ea24f8ca43fa9c7d.yaml | 5 +
.../notes/bug-1884484-d26488c9c1f3977f.yaml | 5 +
.../notes/bug-1886975-454ac12be3d8e1d3.yaml | 9 +
.../notes/bug-1897948-a0eb6d890eea8061.yaml | 6 +
.../notes/bug-1907213-e0cee8498d19a170.yaml | 13 ++
.../notes/fix-config-check-c973c462761a4fa9.yaml | 6 +
...masakari-dashboard-policy-bb8c6c2364666401.yaml | 5 +
.../notes/nova_compute_daxio-b8655d31df15139a.yaml | 7 +
.../rally-openstack-source-62f3ac8f156fc758.yaml | 4 +
...ntd-monasca-output-plugin-739caf0af953d533.yaml | 5 +
.../ussuri-stable-sources-0b003ba0c2ede6ee.yaml | 5 +
tools/version-check.py | 51 ++++-
47 files changed, 448 insertions(+), 234 deletions(-)
1
0
We contentedly announce the release of:
kolla 9.3.0: Kolla OpenStack Deployment
This release is part of the train stable release series.
The source is available from:
https://opendev.org/openstack/kolla
Download the package from:
https://tarballs.openstack.org/kolla/
Please report issues through:
https://bugs.launchpad.net/kolla/+bugs
For more details, please see below.
9.3.0
^^^^^
Upgrade Notes
*************
* Kolla now no longer supports CentOS 8.2 and below. This is to
support CentOS 8.3 without extra workarounds (please see the fixes
section for more details). The promise is to support the latest
CentOS 8 release which is 8.3 now.
* Almanach and Dragonflow images are no longer available for
Debian/Ubuntu.
* The "networking-hyperv" package is no longer installed in the
"neutron-server" source image.
* The "kuryr-libnetwork" image is no longer available.
* "helm-repository" image is now unbuildable due to the chart
repository being gone. The image was deprecated and is not known to
be used by any tooling.
Bug Fixes
*********
* Fixes mixed RabbitMQ and Erlang package sources on CentOS 8 (Train
only). Those could lead to RabbitMQ cluster instability in certain
circumstances. LP#1884034
* Fixes the FC Cinder backend usage in Nova. LP#1884484
* Logstash 6 introduced in Centos 8 in Train release comes with
log4j2 configuration that does not remove old compressed logs after
rotation https://github.com/elastic/logstash/issues/11883 Log
rotation config backported from Logstash 7 - Combination of Size
Based and Time Based policies. Deletion occurs after 30 days or 3000
MB log files size - whichever comes first.
* Fixes MariaDB incremental backup failure when full backup was not
created the same day. LP#1897948
* Fixes builds on CentOS 8.3 failing due to renamed repos. Notice
Kolla now no longer supports CentOS 8.2 and below. LP#1907213
* Fixes an issue with the "kolla_set_configs --check" command when
the source is a directory. LP#1890567
* Fixes an issue with the Masakari dashboard where policies were not
loaded correctly.
* Fixes the "masakari-monitors" image on CentOS 8.
* nova-compute uses daxio to cleanup vpmem backend device on
instance delete. If the daxio binary is missing in the nova-compute
container instance delete fails. daxio is provided in centos via
daxio, in ubuntu via the pmdk-tools package.
* Fixes an issue which can block the Monasca Fluentd output plugin.
LP#1889065
Changes in kolla 9.2.0..9.3.0
-----------------------------
3e020fdf2 Fix Freezer & Cyborg API startup on CentOS
31ce22ee2 Mark helm-repository unbuildable
d43c46def Install iptables in ironic-inspector container
dfdfe86e2 Fix build of monasca-grafana
1d8af466f ceilometer: do not fail when using an unsupported database type
5c0757404 Add daxio for nvdimm scenario
c213921fd mariadb: Fixes incremental backup failure when full not created today
078da7ed6 use freezer user for freezer_scheduler container
617421fb3 Support CentOS 8.3
a5a422f63 elasticsearch-curator: drop botocore workaround
13e73e983 Publish weekly
ccecadfbf [CI] Slim down
576ae967e [CI] Stop testing lower-constraints and fix py27 job
2dd1027dd Bump OpenStack versions for Train
b3462dee0 curator: Add wheel to elasticsearch-curator
353d7cb27 Checks for heat_user_domain explicitly
b38ed5d9f Add sysfsutils to nova-compute ubuntu source
73671ed91 Bump versions for Train
0c302393d Add collectd-libpod-stats to image
08a3d4fd1 Fix Masakari dashboard policy file location
797ecd6dd Fix kolla_set_configs --check with a directory
5826e44d7 Replace cradox with rados
fec2c701d Use upstream Erlang on CentOS 8
9d3bf5731 Add glusterfs-fuse package to manila-share container
bfc8ce085 Upgrade Fluentd Monasca plugin
2ff242c4a Bump up versions for train
a31836265 [CI] Fix wheel url for CentOS
326823c4d Revert "openstack-base: pin setuptools < 46 to get horizon working"
65d9a0417 Updated TGTD to N for centos8
e3e2da2e9 Fix masakari-monitors image on CentOS 8
102ae176b Fix Logstash 6 log rotation - Stable/Train
6e625051d Bump prometheus-openstack-exporter version to 1.1.0
Diffstat (except docs and test files)
-------------------------------------
.zuul.d/centos.yaml | 47 +++++++++++-----------
.zuul.d/debian.yaml | 2 +-
.zuul.d/project.yaml | 1 -
.zuul.d/ubuntu.yaml | 22 +++++-----
.../ceilometer-notification/extend_start.sh | 3 --
.../elasticsearch-curator/Dockerfile.j2 | 1 +
.../prometheus-openstack-exporter/Dockerfile.j2 | 2 +-
kolla/common/config.py | 40 +++++++++---------
kolla/image/build.py | 20 ++++++++-
.../notes/bug-1884034-328afb8831779e02.yaml | 6 +++
.../notes/bug-1884484-d26488c9c1f3977f.yaml | 5 +++
.../notes/bug-1886975-454ac12be3d8e1d3.yaml | 9 +++++
.../notes/bug-1897948-a0eb6d890eea8061.yaml | 6 +++
.../notes/bug-1907213-e0cee8498d19a170.yaml | 21 ++++++++++
.../notes/fix-config-check-c973c462761a4fa9.yaml | 6 +++
...masakari-dashboard-policy-bb8c6c2364666401.yaml | 5 +++
...masakari-monitors-centos8-6b030ab9531505be.yaml | 4 ++
.../notes/nova_compute_daxio-b8655d31df15139a.yaml | 7 ++++
...buildable-helm-repository-5e361266659b29d1.yaml | 6 +++
...ntd-monasca-output-plugin-739caf0af953d533.yaml | 5 +++
test-requirements.txt | 2 +-
47 files changed, 305 insertions(+), 131 deletions(-)
Requirements updates
--------------------
diff --git a/test-requirements.txt b/test-requirements.txt
index 18de5acca..5b5c85cf2 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4 +4 @@
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit!=1.6.0,<1.6.3,>=1.1.0 # Apache-2.0
1
0
We are psyched to announce the release of:
kolla-ansible 10.2.0: Ansible Deployment of Kolla containers
This release is part of the ussuri stable release series.
The source is available from:
https://opendev.org/openstack/kolla-ansible
Download the package from:
https://tarballs.openstack.org/kolla-ansible/
Please report issues through:
https://bugs.launchpad.net/kolla-ansible/+bugs
For more details, please see below.
10.2.0
^^^^^^
New Features
************
* Adds a new flag, "docker_disable_default_iptables_rules", which
defaults to "no". Docker is manipulating iptables rules by default
to provide network isolation, and this might cause problems if the
host already has an iptables based firewall. A common problem is
that Docker sets the default policy of the "FORWARD" chain in the
"filter" to "DROP". Setting "docker_disable_default_iptables_rules"
to "yes" will disable Docker's iptables manipulation. This feature
will be enabled by default from the Victoria 11.0.0 release.
* Improves performance of the "common" role by generating all
fluentd configuration in a single file.
* Improves performance of the "common" role by generating all
logrotate configuration in a single file.
Known Issues
************
* Since Ussuri, there is a bug in how Ceph (RBD) is handled with
Cinder: the "backend_host" option is missing from the generated
configuration for external Ceph. The symptoms are that volumes
become unmanageable until extra admin action is taken. This does
*not* affect the data plane - running virtual machines are *not*
affected.
There is a related issue regarding active-active "cinder-volume"
services (single-host "cinder-volume" *not* affected), which is that
they should not have been configured with "backend_host" in the
first place but with "cluster" and proper coordination instead. Some
users might have customised their config already to address this
issue.
The Kolla team is investigating the best way to address this for all
its users. In the meantime, please ensure that, before upgrading to
Ussuri, the "backend_host" option is set to its previous value (the
default was "rbd:volumes") via a config override.
For more details please refer to the referenced bug. Do note this
issue affects both new deployments and upgrades. LP#1904062
Upgrade Notes
*************
* When deploying Monasca with Logstash 6, any custom Logstash 2
configuration for Monasca will need to be updated to work with
Logstash 6. Please consult the documentation.
* "baremetal" role now uses CentOS "8" package repository for Docker
CE (compared to "7" previously).
* The Prometheus OpenStack exporter now uses internal endpoints to
communicate with OpenStack services, to match the configuration of
other services deployed by Kolla Ansible. Using public endpoints can
be retained by setting the
"prometheus_openstack_exporter_endpoint_type" variable to "public".
* The default value of "REST_API_REQUIRED_SETTINGS" was
synchronized with Horizon. You may want to review settings exposed
by the updated configuration.
Security Issues
***************
* The "admin-openrc.sh" file generated by "kolla-ansible post-
deploy" was previously created with "root:root" ownership and "644"
permissions. This would allow anyone with access to the same
directory to read the file, including the admin credentials. The
ownership of "admin-openrc.sh" is now set to the user executing
"kolla-ansible", and the file is assigned a mode of "600". This
change can be applied by running "kolla-ansible post-deploy".
Bug Fixes
*********
* Add support to use bifrost-deploy behind proxy. It uses existing
container_proxy variable.
* Fixes handling of */dev/kvm* permissions to be more robust against
host-level actions. LP#1681461
* IPv6 fully-routed topology (/128 addressing) is now allowed (where
applicable). LP#1848941
* When deploying Elasticsearch 6, Logstash 2 was deployed by default
which is not compatible with Elasticsearch 6. Logstash 6 is now
deployed by default.
* Fix Castellan (Barbican client) when used with enabled TLS.
LP#1886615
* Fixes "--configdir" parameter to apply to default "passwords.yml"
location. LP#1887180
* "fluentd" is now logging to "/var/log/kolla/fluentd/fluentd.log"
instead of "stdout". LP#1888852
* Fixes "deploy-containers" action missing for the Masakari role.
LP#1889611
* An issue has been fixed when "keystone" container would be stuck
in restart loop with a message that fernet key is stale. LP#1895723
* Fixes "haproxy_single_service_split" template to work with default
for "mode" ("http"). LP#1896591
* Fixed invalid fernet cron file path on Debian/Ubuntu from
"/var/spool/cron/crontabs/root/fernet-cron" to
"/var/spool/cron/crontabs/root". LP#1898765
* Add with_first_found on placement for placement-api wsgi
configuration to allow overwrite from users. LP#1898766
* OVN will no longer schedule SNAT routers on compute nodes when
"neutron_ovn_distributed_fip" is enabled. LP#1901960
* RabbitMQ services are now restarted serially to avoid a split
brain. LP#1904702
* Fixes LP#1906796 by adding notice and note loglevels to monasca
log- metrics drop configuration
* Fixes Swift's stop action. It will no longer try to start "swift-
object-updater" container again. LP#1906944
* Fixes an issue with the "kolla-ansible prechecks" command with
Docker 20.10. LP#1907436
* Fixes an issue with "kolla-ansible mariadb_recovery" when the
"mariadb" container does not exist on one or more hosts. LP#1907658
* fix deploy freezer failed when use kolla_dev_mod LP#1888242
* Fixes issues with some CloudKitty commands trying to connect to an
external TLS endpoint using HTTP. LP#1888544
* Fixes an issue where Docker may fail to start if "iptables" is not
installed. LP#1899060
* The "admin-openrc.sh" file generated by "kolla-ansible post-
deploy" was previously created with "root:root" ownership and "644"
permissions. This would allow anyone with access to the same
directory to read the file, including the admin credentials. The
ownership of "admin-openrc.sh" is now set to the user executing
"kolla-ansible", and the file is assigned a mode of "600". This
change can be applied by running "kolla-ansible post-deploy".
* Fixes an issue during deleting evacuated instances with encrypted
block devices. LP#1891462
* Fixes an issue where Keystone Fernet key rotation may fail due to
permission denied error if the Keystone rotation happens before the
Keystone container starts. LP#1888512
* Fixes an issue with Keystone startup when Fernet key rotation does
not occur within the configured interval. This may happen due to one
of the Keystone hosts being down at the scheduled time of rotation,
or due to uneven intervals between cron jobs. LP#1895723
* Fixes an issue with Kibana upgrade on Debian/Ubuntu systems.
LP#1901614
* Reverts the arp_responder option setting to the default ('False')
for the LinuxBridge agent, as this is known to cause problems with
l2_population as well as other issues such as not being fully
compatible with the allowed-address-pairs extension. LP#1892776
* Fixes an issue with the Neutron Linux bridge ML2 driver where the
firewall driver configuration was not applied. LP#1889455
* Fixes an issue with Masakari and internal TLS where CA
certificates were not copied into containers, and the path to the CA
file was not configured. Depends on masakari bug 1873736 being
fixed. LP#1888655
* Fixes an issue where Grafana instances would race to bootstrap the
Grafana DB. See LP#1888681.
* Fixes LP#1892210 where the number of open connections to Memcached
from "neutron-server" would grow over time until reaching the
maximum set by "memcached_connection_limit" (5000 by default), at
which point the Memcached instance would stop working.
* An issue where when Kafka default topic creation was used to
create a Kafka topic, no redundant replicas were created in a multi-
node cluster. LP#1888522. This affects Monasca which uses Kafka, and
was previously masked by the legacy Kafka client used by Monasca
which has since been upgraded in Ussuri. Monasca users with multi-
node Kafka clusters should consultant the Kafka documentation to
increase the number of replicas.
* Fixes an issue where the "br_netfilter" kernel module was not
loaded on compute hosts. LP#1886796
* The Prometheus OpenStack exporter now uses internal endpoints to
communicate with OpenStack services, to match the configuration of
other services deployed by Kolla Ansible.
* Prevents adding a new Keystone host to an existing cluster when
not targeting all Keystone hosts (e.g. due to "--limit" or "--
serial" arguments), to avoid overwriting existing Fernet keys.
LP#1891364
* Reduce the use of SQLAlchemy connection pooling, to improve
service reliability during a failover of the controller with the
internal VIP. LP#1896635
* No longer configures the Prometheus OpenStack exporter to use the
"prometheus" Docker volume, which was never required.
* Updates the default value of "REST_API_REQUIRED_SETTINGS" in
Horizon "local_settings", which enables some features such as
selecting the default boot source for instances. LP#1891024
Other Notes
***********
* Add trove-guestagent.conf for trove
Changes in kolla-ansible 10.1.0..10.2.0
---------------------------------------
e1380e259 Add `issue` reno for bug #1904062
90d7cc481 docs: add info on adding and removing hosts
ca2654740 Use ansible_distribution_release instead of ansible_lsb.codename
a90871d8e Fix mariadb_recovery when mariadb container is missing
b2c2aea0b Backport ignore_missing support for kolla_docker
356405a7b Edit ironic inspector pxe filter driver name none to noop
39ffceae8 CI: test elasticsearch & kibana 6.x migration (Ussuri)
81dc651c1 Do not start swift-object-updater on stop
ece790946 docs: Add magnum guide
efac50bac Revert "Performance: Use import_tasks in the main plays"
0cc64d8e2 Fix an Ansible warning
33a844f07 Monasca log-metrics - Drop "notice" and "note" loglevel metrics by default
8f0b88e15 [docs] Add python3-venv package to quickstart.rst
5d066b0cc [CI] Drop periodics
16670ed70 Fix prechecks with Docker 20.10.0
aa3fa8d82 RabbitMQ handler refactored to restart services in serial
c8a1cd98f Do not set 'always' tag where unnecessary
57a2a2019 Performance: Use import_tasks in the main plays
1f83249ef Fix stop containers task in Swift rolling restart
f9a45abfb Fix kolla-ansible to work with pyenv-virtualenv
2a7197a6a [baremetal]: Use $releasever in docker-ce repo
b03dc2c3d CI: add missing --fail argument to curl
4ad4429f2 [CI] Set 0 swap size
88a840fb9 ovn: Do not schedule SNAT routers on computes
7db8c7df3 Fix permission denied during Fernet key rotation
e33c4a7e0 kibana: Fix kibana 6.x migration
724e1f9b6 CI: prometheus-efk: add tests/test-prometheus-efk.sh to files
8e56a1a79 Fix keystone-startup.sh - remove Fernet key age check
b0d71d0fd follow up: Fix the centos8 default path error in the quickstart.rst document
952bf2536 Fix the centos8 default path error in the quickstart.rst document
5d2c8d5a1 Fix fernet cron path on Ubuntu/Debian
2008668ae docs: Add link back to Train CentOS 8 migration page
a9af6cebf baremetal: Install iptables for Docker if enabled
1ab5d5081 replace internal with openstack_interface
24c1450de Fix glance-tls-proxy logrotate and fluentd log permissions
43842a8c8 Delete the /var/log/kolla directory should use sudo
c66f6a135 Performance: use a single config file for fluentd
2946e458f Performance: optimize genconfig
c55f7f3a2 Apply bool filter to all enable_prometheus_* variables
0597bc581 Performance: use import_tasks for register and bootstrap
0528e5435 Fix haproxy bundle generation
a80240c69 Allow overwrite of placement-api wsgi config
fe2146020 Make no_proxy handling more robust
1d4fd52e4 Reduce the use of SQLAlchemy connection pooling
7e3d3d8bc Fix keystone-startup.sh
96462c42a Fix default mode in haproxy_single_service_split
9464bd11c Pin Ansible in test-reqs (<2.10)
64747162f Performance: use a single config file for logrotate
1739d667a Remove unused configuration for prometheus-openstack-exporter
566547dee Performance: remove one include_tasks in nova-cell
326bfaa92 Performance: replace unconditional include_tasks with import_tasks
fd998d071 Fix test-ironic.sh not catching errors
a9c227cca Set neutron-ovn-metadata-agent metadata_workers to 2
d8dfe5367 Synchronize REST_API_REQUIRED_SETTINGS with Horizon
0e9287fe0 Add default value for kolla_internal_address variable
bfbc8e867 Fix external mariadb documentation for database_user
744ff2277 Update trove config file
e3a92a5e2 add region name for tasks
3b197af49 Disable arp_responder option for LinuxBridge agent
772171306 Fix fernet bootstrap and key distribution - follow up
15d689044 Prevent overwriting existing Keystone Fernet keys
c30eb14af change the timezone precheck task's condition
5d09ab684 Add workaround for keystonemiddleware/neutron memcached issue
e71cc0d40 Add the missing hosts for vitrage
75f8ce358 Fix kolla-ansible not reflect environment changed
652d3eeb5 Add cinder auth config to nova-cell nova.conf.j2
d87217ec2 CI: enable Ansible SSH pipelining
57536ed6f Pin ansible-lint to 4.2.0
54a223b67 Add trove-guestagent.conf
295742718 Fix ownership and permissions of admin-openrc.sh
a229bbd22 Mount /etc/timezone based on host OS
e74782af4 Skip broken ansible-lint
6f81454f5 Add support to use bifrost-deploy behind proxy
cb6eaa204 Add missing mistral services log files
b2a30ab50 [CI] Temporarily block new Ansible
ed6c6babf Fix Barbican client (Castellan) with TLS (part 2)
f27c8489f Update TLS documentation
10f3a99b4 Move TLS documentation to its own page
12a0acfe3 [docker] Added a new flag to disable default iptables rules
73e4ff71d Fix actions for Aodh and Swift
95068764c Fix play hosts for ironic, monasca, neutron, nova
8d2ecde25 prometheus-openstack-exporter config service filtering
362b79728 linuxbridge: Fix name of securitygroup section
16aae4737 Configure prometheus-openstack-exporter to use internal endpoints
8a770bbdb Fix kolla_address in IPv6 fully-routed topo case
dee49c7ed Fix Masakari role missing deploy-containers
ae3374961 Performance: use import_tasks for check-containers.yml
9a38592eb fluentd: log to a file instead of stdout
4d9650ab2 Improve Grafana DB bootstrap
a82e23370 Set Kafka default replication factor
b973ff7d8 Fix some CloudKitty API responses when behind SSL
8366f22ac Performance: remove unnecessary conditions from includes
26f6db900 Masakari: copy TLS certificates into containers
3c33cd6a3 Update glance configuration file for backend
b4e22abff fix deploy freezer failed when kolla_dev_mod enabled
6a6ee3df2 Make /dev/kvm permissions handling more robust
8fa0af6b5 Fix fluentd warnings caused by "type copy"
aca3736e7 Fix Barbican client (Castellan) with TLS
f7b86b8ae CI: add prometheus-efk scenario
97d153bff Support editable virtualenv installation for development
d2be30095 Manila - adjust logic for Open vSwitch configuration generation
4b7ac2c00 Logstash 6 support
6d6d3c043 Evaluate PASSWORDS_FILE later
d986ba05d Load br_netfilter module in nova-cell role
Diffstat (except docs and test files)
-------------------------------------
ansible/action_plugins/merge_yaml.py | 4 +-
ansible/group_vars/all.yml | 17 +-
ansible/library/kolla_docker.py | 7 +-
ansible/nova.yml | 2 +
ansible/post-deploy.yml | 6 +-
ansible/roles/aodh/defaults/main.yml | 8 +-
ansible/roles/aodh/tasks/bootstrap.yml | 2 +-
ansible/roles/aodh/tasks/config.yml | 3 -
ansible/roles/aodh/tasks/deploy.yml | 14 +-
ansible/roles/aodh/tasks/reconfigure.yml | 2 +-
ansible/roles/aodh/tasks/register.yml | 1 -
ansible/roles/aodh/tasks/stop.yml | 6 +
ansible/roles/aodh/tasks/upgrade.yml | 6 +-
ansible/roles/aodh/templates/aodh.conf.j2 | 2 +
ansible/roles/barbican/defaults/main.yml | 6 +-
ansible/roles/barbican/tasks/bootstrap.yml | 2 +-
ansible/roles/barbican/tasks/config.yml | 3 -
ansible/roles/barbican/tasks/deploy.yml | 13 +-
ansible/roles/barbican/tasks/reconfigure.yml | 2 +-
ansible/roles/barbican/tasks/register.yml | 1 -
ansible/roles/barbican/tasks/upgrade.yml | 6 +-
ansible/roles/baremetal/defaults/main.yml | 7 +-
.../roles/baremetal/tasks/bootstrap-servers.yml | 6 +-
ansible/roles/baremetal/tasks/post-install.yml | 13 +
ansible/roles/bifrost/tasks/deploy.yml | 6 +-
ansible/roles/bifrost/tasks/reconfigure.yml | 2 +-
ansible/roles/bifrost/tasks/start.yml | 1 +
ansible/roles/bifrost/tasks/upgrade.yml | 4 +-
ansible/roles/blazar/defaults/main.yml | 4 +-
ansible/roles/blazar/tasks/bootstrap.yml | 2 +-
ansible/roles/blazar/tasks/config.yml | 3 -
ansible/roles/blazar/tasks/deploy.yml | 12 +-
ansible/roles/blazar/tasks/reconfigure.yml | 2 +-
ansible/roles/blazar/tasks/register.yml | 1 -
ansible/roles/blazar/tasks/upgrade.yml | 6 +-
ansible/roles/blazar/templates/blazar.conf.j2 | 2 +
ansible/roles/ceilometer/defaults/main.yml | 8 +-
ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +-
ansible/roles/ceilometer/tasks/config.yml | 3 -
ansible/roles/ceilometer/tasks/deploy.yml | 12 +-
ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +-
ansible/roles/ceilometer/tasks/register.yml | 1 -
ansible/roles/ceilometer/tasks/upgrade.yml | 6 +-
ansible/roles/certificates/tasks/generate.yml | 4 +-
ansible/roles/chrony/defaults/main.yml | 2 +-
ansible/roles/chrony/tasks/config.yml | 3 -
ansible/roles/chrony/tasks/deploy.yml | 4 +-
ansible/roles/chrony/tasks/reconfigure.yml | 2 +-
ansible/roles/chrony/tasks/upgrade.yml | 2 +-
ansible/roles/cinder/defaults/main.yml | 8 +-
ansible/roles/cinder/tasks/bootstrap.yml | 2 +-
ansible/roles/cinder/tasks/config.yml | 3 -
ansible/roles/cinder/tasks/deploy.yml | 20 +-
ansible/roles/cinder/tasks/reconfigure.yml | 2 +-
ansible/roles/cinder/tasks/register.yml | 1 -
ansible/roles/cinder/tasks/upgrade.yml | 6 +-
ansible/roles/cinder/templates/cinder.conf.j2 | 4 +
ansible/roles/cloudkitty/defaults/main.yml | 4 +-
ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +-
ansible/roles/cloudkitty/tasks/config.yml | 3 -
ansible/roles/cloudkitty/tasks/deploy.yml | 12 +-
ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +-
ansible/roles/cloudkitty/tasks/register.yml | 1 -
ansible/roles/cloudkitty/tasks/upgrade.yml | 6 +-
.../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 +
ansible/roles/collectd/defaults/main.yml | 2 +-
ansible/roles/collectd/tasks/config.yml | 3 -
ansible/roles/collectd/tasks/deploy.yml | 4 +-
ansible/roles/collectd/tasks/reconfigure.yml | 2 +-
ansible/roles/collectd/tasks/upgrade.yml | 4 +-
ansible/roles/common/defaults/main.yml | 6 +-
ansible/roles/common/filter_plugins/filters.py | 22 ++
ansible/roles/common/tasks/config.yml | 405 ++++++++-------------
ansible/roles/common/tasks/deploy.yml | 6 +-
ansible/roles/common/tasks/reconfigure.yml | 2 +-
ansible/roles/common/tasks/upgrade.yml | 4 +-
.../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +-
.../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +-
.../common/templates/conf/output/00-local.conf.j2 | 113 +++---
.../templates/cron-logrotate-fluentd.conf.j2 | 3 +
.../common/templates/cron-logrotate-global.conf.j2 | 5 +-
ansible/roles/common/templates/cron.json.j2 | 77 +---
ansible/roles/common/templates/fluentd.json.j2 | 45 +--
ansible/roles/common/templates/td-agent.conf.j2 | 49 ++-
ansible/roles/congress/defaults/main.yml | 6 +-
ansible/roles/cyborg/defaults/main.yml | 6 +-
ansible/roles/cyborg/tasks/bootstrap.yml | 2 +-
ansible/roles/cyborg/tasks/config.yml | 3 -
ansible/roles/cyborg/tasks/deploy.yml | 13 +-
ansible/roles/cyborg/tasks/reconfigure.yml | 2 +-
ansible/roles/cyborg/tasks/register.yml | 1 -
ansible/roles/cyborg/tasks/upgrade.yml | 6 +-
ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +
ansible/roles/designate/defaults/main.yml | 14 +-
ansible/roles/designate/tasks/bootstrap.yml | 2 +-
ansible/roles/designate/tasks/config.yml | 3 -
ansible/roles/designate/tasks/deploy.yml | 20 +-
ansible/roles/designate/tasks/reconfigure.yml | 2 +-
ansible/roles/designate/tasks/register.yml | 1 -
ansible/roles/designate/tasks/update_pools.yml | 3 +-
ansible/roles/designate/tasks/upgrade.yml | 8 +-
ansible/roles/elasticsearch/defaults/main.yml | 4 +-
ansible/roles/elasticsearch/tasks/config.yml | 3 -
ansible/roles/elasticsearch/tasks/deploy.yml | 6 +-
ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +-
ansible/roles/elasticsearch/tasks/upgrade.yml | 6 +-
ansible/roles/etcd/defaults/main.yml | 2 +-
ansible/roles/etcd/tasks/config.yml | 3 -
ansible/roles/etcd/tasks/deploy.yml | 4 +-
ansible/roles/etcd/tasks/reconfigure.yml | 2 +-
ansible/roles/etcd/tasks/upgrade.yml | 4 +-
ansible/roles/freezer/defaults/main.yml | 4 +-
ansible/roles/freezer/tasks/bootstrap.yml | 4 +-
ansible/roles/freezer/tasks/config.yml | 3 -
ansible/roles/freezer/tasks/deploy.yml | 15 +-
ansible/roles/freezer/tasks/reconfigure.yml | 2 +-
ansible/roles/freezer/tasks/register.yml | 1 -
ansible/roles/freezer/tasks/upgrade.yml | 6 +-
ansible/roles/freezer/templates/freezer.conf.j2 | 2 +
ansible/roles/glance/defaults/main.yml | 11 +-
ansible/roles/glance/tasks/bootstrap.yml | 2 +-
ansible/roles/glance/tasks/config.yml | 3 -
ansible/roles/glance/tasks/deploy.yml | 14 +-
ansible/roles/glance/tasks/legacy_upgrade.yml | 6 +-
ansible/roles/glance/tasks/reconfigure.yml | 2 +-
ansible/roles/glance/tasks/register.yml | 1 -
ansible/roles/glance/tasks/rolling_upgrade.yml | 2 +
ansible/roles/glance/templates/glance-api.conf.j2 | 11 +
ansible/roles/gnocchi/defaults/main.yml | 6 +-
ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +-
ansible/roles/gnocchi/tasks/config.yml | 3 -
ansible/roles/gnocchi/tasks/deploy.yml | 13 +-
ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +-
ansible/roles/gnocchi/tasks/register.yml | 1 -
ansible/roles/gnocchi/tasks/upgrade.yml | 6 +-
ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 3 +-
ansible/roles/grafana/defaults/main.yml | 2 +-
ansible/roles/grafana/handlers/main.yml | 39 +-
ansible/roles/grafana/tasks/config.yml | 3 -
ansible/roles/grafana/tasks/deploy.yml | 8 +-
ansible/roles/grafana/tasks/reconfigure.yml | 2 +-
ansible/roles/grafana/tasks/upgrade.yml | 30 +-
.../templates/haproxy_single_service_split.cfg.j2 | 2 +-
ansible/roles/haproxy/defaults/main.yml | 4 +-
ansible/roles/haproxy/tasks/config.yml | 3 -
ansible/roles/haproxy/tasks/deploy.yml | 6 +-
ansible/roles/haproxy/tasks/reconfigure.yml | 2 +-
ansible/roles/haproxy/tasks/upgrade.yml | 4 +-
ansible/roles/heat/defaults/main.yml | 6 +-
ansible/roles/heat/tasks/bootstrap.yml | 2 +-
ansible/roles/heat/tasks/config.yml | 3 -
ansible/roles/heat/tasks/deploy.yml | 16 +-
ansible/roles/heat/tasks/reconfigure.yml | 2 +-
ansible/roles/heat/tasks/register.yml | 1 -
ansible/roles/heat/tasks/upgrade.yml | 6 +-
ansible/roles/heat/templates/heat.conf.j2 | 2 +
ansible/roles/horizon/defaults/main.yml | 2 +-
ansible/roles/horizon/tasks/bootstrap.yml | 2 +-
ansible/roles/horizon/tasks/config.yml | 3 -
ansible/roles/horizon/tasks/deploy.yml | 4 +-
ansible/roles/horizon/tasks/reconfigure.yml | 2 +-
ansible/roles/horizon/tasks/upgrade.yml | 4 +-
ansible/roles/horizon/templates/local_settings.j2 | 13 +-
ansible/roles/influxdb/defaults/main.yml | 2 +-
ansible/roles/influxdb/tasks/config.yml | 3 -
ansible/roles/influxdb/tasks/deploy.yml | 4 +-
ansible/roles/influxdb/tasks/reconfigure.yml | 2 +-
ansible/roles/influxdb/tasks/upgrade.yml | 4 +-
ansible/roles/ironic/defaults/main.yml | 14 +-
ansible/roles/ironic/tasks/bootstrap.yml | 2 +-
ansible/roles/ironic/tasks/config.yml | 3 -
ansible/roles/ironic/tasks/deploy.yml | 22 +-
ansible/roles/ironic/tasks/legacy_upgrade.yml | 8 +-
ansible/roles/ironic/tasks/reconfigure.yml | 2 +-
ansible/roles/ironic/tasks/register.yml | 1 -
ansible/roles/ironic/tasks/rolling_upgrade.yml | 12 +-
.../ironic/templates/ironic-inspector.conf.j2 | 2 +
ansible/roles/ironic/templates/ironic.conf.j2 | 2 +
ansible/roles/iscsi/defaults/main.yml | 4 +-
ansible/roles/iscsi/tasks/config.yml | 3 -
ansible/roles/iscsi/tasks/deploy.yml | 6 +-
ansible/roles/iscsi/tasks/reconfigure.yml | 2 +-
ansible/roles/iscsi/tasks/upgrade.yml | 2 +-
ansible/roles/kafka/defaults/main.yml | 2 +-
ansible/roles/kafka/tasks/config.yml | 3 -
ansible/roles/kafka/tasks/deploy.yml | 4 +-
ansible/roles/kafka/tasks/reconfigure.yml | 2 +-
ansible/roles/kafka/tasks/upgrade.yml | 4 +-
.../kafka/templates/kafka.server.properties.j2 | 1 +
ansible/roles/karbor/defaults/main.yml | 6 +-
ansible/roles/karbor/tasks/bootstrap.yml | 2 +-
ansible/roles/karbor/tasks/config.yml | 3 -
ansible/roles/karbor/tasks/deploy.yml | 13 +-
ansible/roles/karbor/tasks/reconfigure.yml | 2 +-
ansible/roles/karbor/tasks/register.yml | 1 -
ansible/roles/karbor/tasks/upgrade.yml | 6 +-
ansible/roles/karbor/templates/karbor.conf.j2 | 2 +
ansible/roles/keystone/defaults/main.yml | 6 +-
ansible/roles/keystone/handlers/main.yml | 12 +-
ansible/roles/keystone/tasks/bootstrap.yml | 2 +-
ansible/roles/keystone/tasks/bootstrap_service.yml | 22 +-
ansible/roles/keystone/tasks/config.yml | 17 +-
ansible/roles/keystone/tasks/deploy.yml | 10 +-
ansible/roles/keystone/tasks/reconfigure.yml | 2 +-
ansible/roles/keystone/tasks/register.yml | 2 +-
ansible/roles/keystone/tasks/upgrade.yml | 4 +-
.../keystone/templates/fernet-node-sync.sh.j2 | 20 +-
.../keystone/templates/keystone-fernet.json.j2 | 9 +-
.../roles/keystone/templates/keystone-ssh.json.j2 | 7 +
.../keystone/templates/keystone-startup.sh.j2 | 24 ++
ansible/roles/keystone/templates/keystone.conf.j2 | 2 +
ansible/roles/keystone/templates/keystone.json.j2 | 9 +-
ansible/roles/kibana/defaults/main.yml | 2 +-
ansible/roles/kibana/tasks/config.yml | 3 -
ansible/roles/kibana/tasks/deploy.yml | 4 +-
.../roles/kibana/tasks/migrate-kibana-index.yml | 2 +-
ansible/roles/kibana/tasks/reconfigure.yml | 2 +-
ansible/roles/kibana/tasks/upgrade.yml | 6 +-
ansible/roles/kuryr/defaults/main.yml | 2 +-
ansible/roles/kuryr/tasks/config.yml | 3 -
ansible/roles/kuryr/tasks/deploy.yml | 6 +-
ansible/roles/kuryr/tasks/reconfigure.yml | 2 +-
ansible/roles/kuryr/tasks/register.yml | 1 -
ansible/roles/kuryr/tasks/upgrade.yml | 4 +-
ansible/roles/magnum/defaults/main.yml | 4 +-
ansible/roles/magnum/tasks/bootstrap.yml | 2 +-
ansible/roles/magnum/tasks/config.yml | 3 -
ansible/roles/magnum/tasks/deploy.yml | 12 +-
ansible/roles/magnum/tasks/reconfigure.yml | 2 +-
ansible/roles/magnum/tasks/register.yml | 4 +-
ansible/roles/magnum/tasks/upgrade.yml | 6 +-
ansible/roles/magnum/templates/magnum.conf.j2 | 2 +
ansible/roles/manila/defaults/main.yml | 8 +-
ansible/roles/manila/tasks/bootstrap.yml | 2 +-
ansible/roles/manila/tasks/config.yml | 3 -
ansible/roles/manila/tasks/deploy.yml | 14 +-
ansible/roles/manila/tasks/reconfigure.yml | 2 +-
ansible/roles/manila/tasks/register.yml | 1 -
ansible/roles/manila/tasks/upgrade.yml | 6 +-
ansible/roles/manila/templates/manila.conf.j2 | 2 +
ansible/roles/mariadb/defaults/main.yml | 4 +-
ansible/roles/mariadb/tasks/bootstrap.yml | 2 +-
ansible/roles/mariadb/tasks/config.yml | 3 -
ansible/roles/mariadb/tasks/deploy.yml | 10 +-
ansible/roles/mariadb/tasks/reconfigure.yml | 2 +-
ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +-
ansible/roles/mariadb/tasks/upgrade.yml | 2 +-
ansible/roles/masakari/defaults/main.yml | 6 +-
ansible/roles/masakari/tasks/bootstrap.yml | 2 +-
ansible/roles/masakari/tasks/check-containers.yml | 17 +
ansible/roles/masakari/tasks/config.yml | 22 +-
ansible/roles/masakari/tasks/copy-certs.yml | 6 +
ansible/roles/masakari/tasks/deploy-containers.yml | 2 +
ansible/roles/masakari/tasks/deploy.yml | 13 +-
ansible/roles/masakari/tasks/reconfigure.yml | 2 +-
ansible/roles/masakari/tasks/register.yml | 1 -
ansible/roles/masakari/tasks/upgrade.yml | 6 +-
ansible/roles/masakari/templates/masakari.conf.j2 | 3 +
ansible/roles/memcached/defaults/main.yml | 2 +-
ansible/roles/memcached/tasks/config.yml | 3 -
ansible/roles/memcached/tasks/deploy.yml | 4 +-
ansible/roles/memcached/tasks/reconfigure.yml | 2 +-
ansible/roles/memcached/tasks/upgrade.yml | 4 +-
ansible/roles/mistral/defaults/main.yml | 8 +-
ansible/roles/mistral/tasks/bootstrap.yml | 2 +-
ansible/roles/mistral/tasks/config.yml | 3 -
ansible/roles/mistral/tasks/deploy.yml | 14 +-
ansible/roles/mistral/tasks/reconfigure.yml | 2 +-
ansible/roles/mistral/tasks/register.yml | 1 -
ansible/roles/mistral/tasks/upgrade.yml | 6 +-
ansible/roles/mistral/templates/mistral.conf.j2 | 2 +
ansible/roles/monasca/defaults/main.yml | 25 +-
ansible/roles/monasca/handlers/main.yml | 39 +-
ansible/roles/monasca/tasks/bootstrap.yml | 2 +-
ansible/roles/monasca/tasks/config.yml | 3 -
ansible/roles/monasca/tasks/deploy.yml | 34 +-
ansible/roles/monasca/tasks/reconfigure.yml | 2 +-
ansible/roles/monasca/tasks/register.yml | 1 -
ansible/roles/monasca/tasks/upgrade.yml | 38 +-
.../monasca/templates/monasca-api/api.conf.j2 | 2 +
.../monasca-log-metrics/log-metrics.conf.j2 | 13 +-
.../monasca-log-metrics.json.j2 | 2 +-
.../monasca-log-persister/log-persister.conf.j2 | 6 +-
.../monasca-log-persister.json.j2 | 2 +-
.../log-transformer.conf.j2 | 9 +-
.../monasca-log-transformer.json.j2 | 2 +-
ansible/roles/mongodb/defaults/main.yml | 2 +-
ansible/roles/multipathd/defaults/main.yml | 2 +-
ansible/roles/multipathd/tasks/config.yml | 3 -
ansible/roles/multipathd/tasks/deploy.yml | 6 +-
ansible/roles/multipathd/tasks/reconfigure.yml | 2 +-
ansible/roles/multipathd/tasks/upgrade.yml | 6 +-
ansible/roles/murano/defaults/main.yml | 4 +-
ansible/roles/murano/tasks/bootstrap.yml | 2 +-
ansible/roles/murano/tasks/config.yml | 3 -
ansible/roles/murano/tasks/deploy.yml | 16 +-
ansible/roles/murano/tasks/reconfigure.yml | 2 +-
ansible/roles/murano/tasks/register.yml | 1 -
ansible/roles/murano/tasks/upgrade.yml | 8 +-
ansible/roles/murano/templates/murano.conf.j2 | 2 +
ansible/roles/neutron/defaults/main.yml | 24 +-
ansible/roles/neutron/tasks/bootstrap.yml | 2 +-
ansible/roles/neutron/tasks/check-containers.yml | 1 +
ansible/roles/neutron/tasks/config.yml | 3 -
ansible/roles/neutron/tasks/deploy.yml | 12 +-
ansible/roles/neutron/tasks/legacy_upgrade.yml | 8 +-
ansible/roles/neutron/tasks/reconfigure.yml | 2 +-
ansible/roles/neutron/tasks/register.yml | 1 -
ansible/roles/neutron/tasks/rolling_upgrade.yml | 6 +-
.../neutron/templates/linuxbridge_agent.ini.j2 | 3 +-
ansible/roles/neutron/templates/neutron.conf.j2 | 5 +
.../templates/neutron_ovn_metadata_agent.ini.j2 | 1 +
ansible/roles/nova-cell/defaults/main.yml | 23 +-
ansible/roles/nova-cell/tasks/config-host.yml | 36 ++
.../roles/nova-cell/tasks/config-libvirt-tls.yml | 48 ++-
ansible/roles/nova-cell/tasks/config.yml | 35 +-
ansible/roles/nova-cell/tasks/deploy.yml | 6 +-
.../roles/nova-cell/tasks/discover_computes.yml | 2 +-
ansible/roles/nova-cell/tasks/rabbitmq.yml | 1 -
ansible/roles/nova-cell/tasks/reconfigure.yml | 2 +-
ansible/roles/nova-cell/tasks/rolling_upgrade.yml | 6 +-
ansible/roles/nova-cell/tasks/upgrade.yml | 2 +-
.../nova-cell/templates/99-kolla-kvm.rules.j2 | 4 +
ansible/roles/nova-cell/templates/nova.conf.j2 | 15 +-
ansible/roles/nova/defaults/main.yml | 8 +-
ansible/roles/nova/tasks/config.yml | 3 -
ansible/roles/nova/tasks/deploy.yml | 7 +-
ansible/roles/nova/tasks/reconfigure.yml | 2 +-
ansible/roles/nova/tasks/register.yml | 1 -
ansible/roles/nova/tasks/rolling_upgrade.yml | 4 +-
ansible/roles/nova/tasks/upgrade.yml | 2 +-
ansible/roles/nova/templates/nova.conf.j2 | 8 +-
ansible/roles/octavia/defaults/main.yml | 8 +-
ansible/roles/octavia/tasks/bootstrap.yml | 2 +-
ansible/roles/octavia/tasks/config.yml | 3 -
ansible/roles/octavia/tasks/deploy.yml | 14 +-
ansible/roles/octavia/tasks/reconfigure.yml | 2 +-
ansible/roles/octavia/tasks/register.yml | 3 +-
ansible/roles/octavia/tasks/upgrade.yml | 6 +-
ansible/roles/octavia/templates/octavia.conf.j2 | 2 +
ansible/roles/openvswitch/defaults/main.yml | 4 +-
ansible/roles/openvswitch/tasks/config.yml | 7 +-
ansible/roles/openvswitch/tasks/deploy.yml | 8 +-
ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +-
ansible/roles/openvswitch/tasks/upgrade.yml | 8 +-
ansible/roles/ovn/tasks/bootstrap.yml | 9 +-
ansible/roles/ovn/tasks/config.yml | 3 -
ansible/roles/ovn/tasks/deploy.yml | 6 +-
ansible/roles/ovn/tasks/reconfigure.yml | 2 +-
ansible/roles/ovn/tasks/upgrade.yml | 6 +-
ansible/roles/ovs-dpdk/defaults/main.yml | 4 +-
ansible/roles/ovs-dpdk/tasks/config.yml | 3 -
ansible/roles/ovs-dpdk/tasks/deploy.yml | 4 +-
ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +-
ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +-
ansible/roles/panko/defaults/main.yml | 2 +-
ansible/roles/panko/tasks/bootstrap.yml | 2 +-
ansible/roles/panko/tasks/config.yml | 3 -
ansible/roles/panko/tasks/deploy.yml | 8 +-
ansible/roles/panko/tasks/reconfigure.yml | 2 +-
ansible/roles/panko/tasks/register.yml | 1 -
ansible/roles/panko/tasks/upgrade.yml | 6 +-
ansible/roles/panko/templates/panko.conf.j2 | 2 +
ansible/roles/placement/defaults/main.yml | 2 +-
ansible/roles/placement/tasks/bootstrap.yml | 2 +-
ansible/roles/placement/tasks/config.yml | 9 +-
ansible/roles/placement/tasks/deploy.yml | 10 +-
ansible/roles/placement/tasks/reconfigure.yml | 2 +-
ansible/roles/placement/tasks/register.yml | 1 -
ansible/roles/placement/tasks/upgrade.yml | 10 +-
.../roles/placement/templates/placement.conf.j2 | 3 +-
ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +-
ansible/roles/prechecks/tasks/main.yml | 10 +-
ansible/roles/prechecks/tasks/service_checks.yml | 2 +-
ansible/roles/prometheus/defaults/main.yml | 35 +-
ansible/roles/prometheus/tasks/config.yml | 3 -
ansible/roles/prometheus/tasks/deploy.yml | 6 +-
ansible/roles/prometheus/tasks/reconfigure.yml | 2 +-
ansible/roles/prometheus/tasks/upgrade.yml | 4 +-
.../prometheus-openstack-exporter.json.j2 | 7 +-
.../prometheus/templates/prometheus-server.json.j2 | 2 +-
ansible/roles/prune-images/tasks/main.yml | 4 +-
ansible/roles/qdrouterd/defaults/main.yml | 2 +-
ansible/roles/qdrouterd/tasks/config.yml | 3 -
ansible/roles/qdrouterd/tasks/deploy.yml | 6 +-
ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +-
ansible/roles/qdrouterd/tasks/upgrade.yml | 4 +-
ansible/roles/qinling/defaults/main.yml | 4 +-
ansible/roles/qinling/tasks/bootstrap.yml | 2 +-
ansible/roles/qinling/tasks/config.yml | 3 -
ansible/roles/qinling/tasks/deploy.yml | 12 +-
ansible/roles/qinling/tasks/reconfigure.yml | 2 +-
ansible/roles/qinling/tasks/register.yml | 1 -
ansible/roles/qinling/tasks/upgrade.yml | 6 +-
ansible/roles/qinling/templates/qinling.conf.j2 | 2 +
ansible/roles/rabbitmq/defaults/main.yml | 2 +-
ansible/roles/rabbitmq/handlers/main.yml | 43 +--
ansible/roles/rabbitmq/tasks/check-containers.yml | 3 +-
ansible/roles/rabbitmq/tasks/config.yml | 18 +-
ansible/roles/rabbitmq/tasks/deploy.yml | 6 +-
ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +-
ansible/roles/rabbitmq/tasks/restart_services.yml | 21 ++
ansible/roles/rabbitmq/tasks/upgrade.yml | 4 +-
ansible/roles/rally/defaults/main.yml | 2 +-
ansible/roles/rally/tasks/bootstrap.yml | 2 +-
ansible/roles/rally/tasks/config.yml | 3 -
ansible/roles/rally/tasks/deploy.yml | 6 +-
ansible/roles/rally/tasks/reconfigure.yml | 2 +-
ansible/roles/rally/tasks/upgrade.yml | 6 +-
ansible/roles/rally/templates/rally.conf.j2 | 2 +
ansible/roles/redis/defaults/main.yml | 4 +-
ansible/roles/redis/tasks/config.yml | 3 -
ansible/roles/redis/tasks/deploy.yml | 4 +-
ansible/roles/redis/tasks/reconfigure.yml | 2 +-
ansible/roles/redis/tasks/upgrade.yml | 4 +-
ansible/roles/sahara/defaults/main.yml | 4 +-
ansible/roles/sahara/tasks/bootstrap.yml | 2 +-
ansible/roles/sahara/tasks/config.yml | 3 -
ansible/roles/sahara/tasks/deploy.yml | 12 +-
ansible/roles/sahara/tasks/reconfigure.yml | 2 +-
ansible/roles/sahara/tasks/register.yml | 1 -
ansible/roles/sahara/tasks/upgrade.yml | 6 +-
ansible/roles/sahara/templates/sahara.conf.j2 | 2 +
ansible/roles/searchlight/defaults/main.yml | 4 +-
ansible/roles/searchlight/tasks/bootstrap.yml | 2 +-
ansible/roles/searchlight/tasks/config.yml | 3 -
ansible/roles/searchlight/tasks/deploy.yml | 8 +-
ansible/roles/searchlight/tasks/reconfigure.yml | 2 +-
ansible/roles/searchlight/tasks/register.yml | 1 -
ansible/roles/searchlight/tasks/upgrade.yml | 6 +-
ansible/roles/senlin/defaults/main.yml | 8 +-
ansible/roles/senlin/tasks/bootstrap.yml | 2 +-
ansible/roles/senlin/tasks/config.yml | 3 -
ansible/roles/senlin/tasks/deploy.yml | 14 +-
ansible/roles/senlin/tasks/reconfigure.yml | 2 +-
ansible/roles/senlin/tasks/register.yml | 1 -
ansible/roles/senlin/tasks/upgrade.yml | 6 +-
ansible/roles/senlin/templates/senlin.conf.j2 | 2 +
ansible/roles/skydive/defaults/main.yml | 4 +-
ansible/roles/skydive/tasks/config.yml | 3 -
ansible/roles/skydive/tasks/deploy.yml | 6 +-
ansible/roles/skydive/tasks/reconfigure.yml | 2 +-
ansible/roles/skydive/tasks/upgrade.yml | 4 +-
ansible/roles/solum/defaults/main.yml | 8 +-
ansible/roles/solum/tasks/bootstrap.yml | 2 +-
ansible/roles/solum/tasks/config.yml | 3 -
ansible/roles/solum/tasks/deploy.yml | 14 +-
ansible/roles/solum/tasks/reconfigure.yml | 2 +-
ansible/roles/solum/tasks/register.yml | 1 -
ansible/roles/solum/tasks/upgrade.yml | 6 +-
ansible/roles/solum/templates/solum.conf.j2 | 2 +
ansible/roles/storm/defaults/main.yml | 4 +-
ansible/roles/storm/tasks/config.yml | 3 -
ansible/roles/storm/tasks/deploy.yml | 4 +-
ansible/roles/storm/tasks/reconfigure.yml | 2 +-
ansible/roles/storm/tasks/upgrade.yml | 2 +-
ansible/roles/swift/tasks/deploy-containers.yml | 2 +
ansible/roles/swift/tasks/deploy.yml | 8 +-
ansible/roles/swift/tasks/legacy_upgrade.yml | 4 +-
ansible/roles/swift/tasks/reconfigure.yml | 2 +-
ansible/roles/swift/tasks/register.yml | 1 -
ansible/roles/swift/tasks/rolling_upgrade.yml | 43 ++-
ansible/roles/swift/tasks/stop.yml | 2 +-
ansible/roles/tacker/defaults/main.yml | 4 +-
ansible/roles/tacker/tasks/bootstrap.yml | 2 +-
ansible/roles/tacker/tasks/config.yml | 3 -
ansible/roles/tacker/tasks/deploy.yml | 14 +-
ansible/roles/tacker/tasks/reconfigure.yml | 2 +-
ansible/roles/tacker/tasks/register.yml | 1 -
ansible/roles/tacker/tasks/upgrade.yml | 6 +-
ansible/roles/tacker/templates/tacker.conf.j2 | 2 +
ansible/roles/telegraf/defaults/main.yml | 2 +-
ansible/roles/telegraf/tasks/config.yml | 3 -
ansible/roles/telegraf/tasks/deploy.yml | 4 +-
ansible/roles/telegraf/tasks/reconfigure.yml | 2 +-
ansible/roles/telegraf/tasks/upgrade.yml | 4 +-
ansible/roles/tempest/defaults/main.yml | 2 +-
ansible/roles/tempest/tasks/config.yml | 3 -
ansible/roles/tempest/tasks/deploy.yml | 4 +-
ansible/roles/tempest/tasks/reconfigure.yml | 2 +-
ansible/roles/tempest/tasks/upgrade.yml | 4 +-
ansible/roles/trove/defaults/main.yml | 6 +-
ansible/roles/trove/tasks/bootstrap.yml | 2 +-
ansible/roles/trove/tasks/config.yml | 24 +-
ansible/roles/trove/tasks/deploy.yml | 13 +-
ansible/roles/trove/tasks/reconfigure.yml | 2 +-
ansible/roles/trove/tasks/register.yml | 1 -
ansible/roles/trove/tasks/upgrade.yml | 6 +-
.../roles/trove/templates/trove-conductor.conf.j2 | 12 +-
.../roles/trove/templates/trove-guestagent.conf.j2 | 6 +
.../trove/templates/trove-taskmanager.conf.j2 | 15 +-
.../trove/templates/trove-taskmanager.json.j2 | 8 +-
ansible/roles/trove/templates/trove.conf.j2 | 15 +-
ansible/roles/vitrage/defaults/main.yml | 10 +-
ansible/roles/vitrage/tasks/bootstrap.yml | 2 +-
ansible/roles/vitrage/tasks/config.yml | 3 -
ansible/roles/vitrage/tasks/deploy.yml | 15 +-
ansible/roles/vitrage/tasks/reconfigure.yml | 2 +-
ansible/roles/vitrage/tasks/register.yml | 2 +-
ansible/roles/vitrage/tasks/upgrade.yml | 6 +-
ansible/roles/vitrage/templates/vitrage.conf.j2 | 2 +
ansible/roles/vmtp/defaults/main.yml | 2 +-
ansible/roles/vmtp/tasks/config.yml | 3 -
ansible/roles/vmtp/tasks/deploy.yml | 5 +-
ansible/roles/vmtp/tasks/reconfigure.yml | 2 +-
ansible/roles/vmtp/tasks/upgrade.yml | 4 +-
ansible/roles/watcher/defaults/main.yml | 6 +-
ansible/roles/watcher/tasks/bootstrap.yml | 2 +-
ansible/roles/watcher/tasks/config.yml | 3 -
ansible/roles/watcher/tasks/deploy.yml | 13 +-
ansible/roles/watcher/tasks/reconfigure.yml | 2 +-
ansible/roles/watcher/tasks/register.yml | 1 -
ansible/roles/watcher/tasks/upgrade.yml | 6 +-
ansible/roles/watcher/templates/watcher.conf.j2 | 2 +
ansible/roles/zookeeper/defaults/main.yml | 2 +-
ansible/roles/zookeeper/tasks/config.yml | 3 -
ansible/roles/zookeeper/tasks/deploy.yml | 4 +-
ansible/roles/zookeeper/tasks/reconfigure.yml | 2 +-
ansible/roles/zookeeper/tasks/upgrade.yml | 4 +-
ansible/roles/zun/defaults/main.yml | 8 +-
ansible/roles/zun/tasks/bootstrap.yml | 2 +-
ansible/roles/zun/tasks/config.yml | 3 -
ansible/roles/zun/tasks/deploy.yml | 13 +-
ansible/roles/zun/tasks/reconfigure.yml | 2 +-
ansible/roles/zun/tasks/register.yml | 1 -
ansible/roles/zun/tasks/upgrade.yml | 6 +-
ansible/roles/zun/templates/zun.conf.j2 | 2 +
ansible/site.yml | 9 +-
.../reference/databases/external-mariadb-guide.rst | 4 +-
kolla_ansible/filters.py | 11 +-
kolla_ansible/fluentd_filters.py | 44 +++
kolla_ansible/helpers.py | 21 ++
kolla_ansible/kolla_address.py | 30 +-
.../add-trove-guestagent-5482833a0c99033a.yaml | 4 +
...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml | 5 +
.../notes/bug-1681461-761f0cdf71bcb962.yaml | 6 +
.../notes/bug-1848941-7e192be1885af513.yaml | 6 +
.../notes/bug-1884090-c40ff140d5514108.yaml | 12 +
.../notes/bug-1886615-640e817dfdb93b8a.yaml | 5 +
.../notes/bug-1887180-89450a4185c7449d.yaml | 6 +
.../notes/bug-1888852-8735ee29f69f77b5.yaml | 5 +
.../notes/bug-1889611-f08c228fca884bf2.yaml | 5 +
.../notes/bug-1895723-910de90908de260a.yaml | 6 +
.../notes/bug-1896591-47c829f8b72d567a.yaml | 6 +
.../notes/bug-1898765-73881932a2ef1d32.yaml | 7 +
.../notes/bug-1898766-ffc55c97230d8221.yaml | 6 +
.../notes/bug-1901960-363503e11449b53c.yaml | 6 +
.../notes/bug-1904702-7451dd8c4caa309b.yaml | 5 +
.../notes/bug-1906796-e52b9e113f36ceed.yaml | 6 +
.../notes/bug-1906944-38798e1348ff9c97.yaml | 6 +
.../notes/bug-1907436-2da50ed38d107127.yaml | 6 +
.../notes/bug-1907658-a24ddc45f63893b5.yaml | 6 +
...ug-freezer-dev-mod-failed-af5bebb6c3eaabad.yaml | 5 +
.../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml | 5 +
.../docker-disable-iptables-e9a248a0515f30a6.yaml | 12 +
.../docker-install-iptables-f24fef8ce2418963.yaml | 6 +
.../docker-repo-centos-8-edc2412c57a2762c.yaml | 5 +
...min-openrc-ownership-mode-310d89a6f50a9640.yaml | 19 +
...vacuate-cinder-encryption-489f8cf6a340e7be.yaml | 6 +
...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml | 7 +
.../fix-keystone-startup-66c5aa11a464a562.yaml | 8 +
.../fix-kibana-6-migration-0e1aa94040fd53c5.yaml | 5 +
...linuxbridge-arp_responder-28068f7fe41e4e4d.yaml | 8 +
...fix-linuxbridge-secgroups-7e5cae9d630e3db9.yaml | 6 +
.../notes/fix-masakari-tls-64f010c037e95bea.yaml | 8 +
...ance-grafana-db-bootstrap-298feba3e1750aca.yaml | 5 +
...emcached-connection-issue-84f5affa217b4612.yaml | 8 +
.../fluentd-single-config-d5ae95fecbfb6e3e.yaml | 5 +
...default-topic-replication-0debd5eb89f0c50d.yaml | 11 +
.../notes/issue-bug-1904062-ef446343323c8452.yaml | 23 ++
.../notes/load-br-netfilter-4ce9facd93e96af7.yaml | 6 +
.../logrotate-single-config-663d6bf154218380.yaml | 5 +
...ck-exporter-endpoint-type-7c687da172986fb3.yaml | 13 +
...-keystone-bootstrap-limit-f0250725633c16de.yaml | 7 +
...uce-db-connection-pooling-b44da77eaa390f22.yaml | 6 +
...e-from-openstack-exporter-f6bb5da3093abef8.yaml | 5 +
...est-api-required-settings-099875e53248b62c.yaml | 14 +
test-requirements.txt | 4 +-
tools/cleanup-containers | 2 +-
tools/init-runonce | 2 +-
tools/kolla-ansible | 17 +-
tools/setup_gate.sh | 4 +
zuul.d/base.yaml | 11 +
zuul.d/jobs.yaml | 16 +
zuul.d/project.yaml | 14 +-
606 files changed, 3430 insertions(+), 1944 deletions(-)
Requirements updates
--------------------
diff --git a/test-requirements.txt b/test-requirements.txt
index ee9d561e3..fb40592ed 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -2 +2 @@
-ansible-lint>=4.2.0 # MIT
+ansible-lint==4.2.0 # MIT
@@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0
-ansible>=2.8.0 # GPLv3
+ansible>=2.8.0,<2.10 # GPLv3
1
0
We joyfully announce the release of:
kayobe 8.1.0: Deployment of OpenStack to bare metal using OpenStack
kolla and bifrost
This release is part of the ussuri stable release series.
The source is available from:
https://opendev.org/openstack/kayobe
Download the package from:
https://tarballs.openstack.org/kayobe/
Please report issues through:
https://storyboard.openstack.org/#!/project/openstack/kayobe
For more details, please see below.
8.1.0
^^^^^
New Features
************
* Updates the default image for the seed VM to CentOS 8.2.
Upgrade Notes
*************
* Kayobe configures Bifrost to use the "trusted" zone of
"firewalld", ensuring that all services running on the seed host are
accessible. Deployments with stricter firewall policies can select
another zone by setting the "kolla_bifrost_firewalld_internal_zone"
variable in "${KAYOBE_CONFIG_PATH}/bifrost.yml". To avoid loss of
connectivity to the seed host, ensure that "firewalld" is already
configured on the seed host before deploying seed services.
Bug Fixes
*********
* Adds support for a custom Barbican configuration file
("barbican.conf"), as only extended configuration stored under a
"barbican" folder was supported.
* Fixes loss of connectivity to the seed host after deploying seed
services, when using a shared provisioning and admin network. This
was caused by Bifrost configuring "firewalld" to only allow Ironic
traffic. Kayobe now configures Bifrost to use the "trusted" zone,
which allows all traffic.
* Fix an issue when dnf proxy is set and python3-pip package fails
during host configure.
* Fixes a number of issues with using Kayobe on CentOS 8.3.
* Fixes issues when network interfaces are configured without IP
addresses. See story 2007900 for details.
* Fixes generation of pip configuration when using a pip proxy
without a local mirror.
* Changes the value of "OS_ENDPOINT_TYPE",
"OS_MANILA_ENDPOINT_TYPE", and "OS_MISTRAL_ENDPOINT_TYPE" in
"public-openrc.sh" to use "publicURL", which should fix issues with
legacy CLI tools on hosts without access to the internal API. See
story 2007950 for details.
* Removes the "ifcfg-eth0" network interface configuration file when
not required, using a new version of the "MichaelRigaert.interfaces"
Ansible role. This file ships with CentOS 8 cloud images and can
prevent the "network" service from starting successfully when no
"eth0" interface is present or being configured. See story 2007913
for details.
* Fix the implementation of the "kayobe seed hypervisor host package
update" command, which was incomplete. See story 2008458 for
details.
* Fixes an issue with seed service deployment where modifying the
overcloud image fails on a CentOS 8.1 host with a CentOS 8.2
"bifrost_deploy" container, by updating the default image for the
seed VM to CentOS 8.2. See story 2007942 for details.
Changes in kayobe 8.0.0..8.1.0
------------------------------
5871473c CI: fix race condition in kolla-ansible-host-vars role tests
c08d1b14 Fix implementation of kayobe seed hypervisor host package update
5cfd2ba5 Fixes for CentOS 8.3
0bc547f7 Fix filtering of network names set to an empty string
d825b16c docs: Add link back to Train CentOS 8 migration page
7136a3e8 Synchronise global extra variables file with defaults
43b7dc40 Add missing barbican.conf support
7873dd85 Performance: skip LVM configuration if no groups configured
1d65c770 Configure bifrost to use firewalld trusted zone
6b1ca248 When EPEL install flag is not set
eb063dbc Performance: avoid set_fact in Kolla Ansible host vars
5a2a2446 CI: Fix kayobe-tox-molecule job
41c88924 Performance: Parallelise Kolla Ansible host vars generation
d40736b7 Document that kolla_tag may need to be changed when upgrading
e998b15b Avoid setting IPADDR=0.0.0.0
7f3a8d50 Update shebang for Python 3 script
504b309d Performance: refactor pip configuration
53420e06 Move dnf.yml earlier in host configure workflow
50001a10 Make pip_index_url variable conditional
9fabc914 Pin ansible-lint to 4.2.0
f82a2308 Skip broken ansible-lint
d324d9a6 Set endpoint type variables to publicURL in public-openrc.sh
ab86a2d7 Block Ansible 2.9.12
6c65cbbc Sync kolla-ansible inventory for Ussuri
243bfe05 Fix network configuration when no eth0 interface is present
f6321c2f Update hook link instructions to use relative path
9bbea8eb Update seed VM image to CentOS 8.2
84662a9c Sync zookeeper feature flag with kolla-ansible
eef94567 Fix condition of placement image build
ec71150a Add seed VM provisioning CI job
Diffstat (except docs and test files)
-------------------------------------
ansible/action_plugins/kolla_ansible_host_vars.py | 19 +
ansible/dnf.yml | 2 +
ansible/filter_plugins/networks.py | 18 +-
ansible/group_vars/all/bifrost | 4 +
ansible/group_vars/all/compute | 4 +-
ansible/group_vars/all/controllers | 6 +-
ansible/group_vars/all/kolla | 61 ++-
ansible/group_vars/all/monitoring | 4 +-
ansible/group_vars/all/seed | 14 +-
ansible/group_vars/all/seed-hypervisor | 2 +-
ansible/group_vars/all/seed-vm | 2 +-
ansible/group_vars/all/storage | 4 +-
ansible/host-package-update.yml | 2 +-
ansible/kolla-ansible.yml | 301 ++++++--------
ansible/kolla-openstack.yml | 2 +
ansible/lvm.yml | 15 +-
ansible/roles/dnf/tasks/local-mirror.yml | 2 +
.../kolla-ansible-host-vars/defaults/main.yml | 12 +
.../roles/kolla-ansible-host-vars/tasks/main.yml | 15 +
.../kolla-ansible-host-vars/templates/host-vars.j2 | 7 +
ansible/roles/kolla-ansible/defaults/main.yml | 57 ---
ansible/roles/kolla-ansible/tasks/config.yml | 27 +-
ansible/roles/kolla-ansible/tasks/install.yml | 2 +-
ansible/roles/kolla-ansible/templates/host-vars.j2 | 7 -
.../kolla-ansible/templates/overcloud-services.j2 | 9 +-
.../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 +
ansible/roles/kolla-openstack/defaults/main.yml | 3 +
.../molecule/enable-everything/molecule.yml | 4 +
ansible/roles/kolla-openstack/tasks/config.yml | 1 +
.../kolla-openstack/templates/barbican.conf.j2 | 9 +
ansible/roles/pip/tasks/main.yml | 6 +-
ansible/roles/pip/tasks/pip_conf.yml | 24 +-
.../public-openrc/templates/public-openrc.sh.j2 | 6 +
ansible/seed-vm-provision.yml | 3 +-
bindep.txt | 2 +
dev/functions | 18 +-
dev/tenks-deploy-config-compute.yml | 20 +-
etc/kayobe/bifrost.yml | 4 +
etc/kayobe/compute.yml | 9 +-
etc/kayobe/controllers.yml | 7 +
etc/kayobe/kolla.yml | 22 +
etc/kayobe/seed-vm.yml | 2 +-
etc/kayobe/seed.yml | 25 +-
etc/kayobe/storage.yml | 9 +-
kayobe/cli/commands.py | 24 +-
kayobe/plugins/__init__.py | 0
kayobe/plugins/action/__init__.py | 0
kayobe/plugins/action/kolla_ansible_host_vars.py | 161 ++++++++
.../plugins/action/test_kolla_ansible_host_vars.py | 450 +++++++++++++++++++++
.../overrides.yml.j2 | 2 -
.../kayobe-seed-upgrade-base/overrides.yml.j2 | 8 +
playbooks/kayobe-seed-upgrade-base/pre.yml | 8 +
playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 51 +++
playbooks/kayobe-seed-vm-base/pre.yml | 63 +++
playbooks/kayobe-seed-vm-base/run.yml | 15 +
playbooks/kayobe-seed-vm-base/seed-group-vars.j2 | 5 +
...support-for-barbican-conf-c15f0ab4294281cf.yaml | 6 +
.../bifrost-firewalld-zone-09a29651a058531a.yaml | 16 +
.../notes/bugfix-dnf-proxy-cd934867c3d64388.yaml | 5 +
.../notes/centos-8.3-89d07c8f8db5b17b.yaml | 4 +
.../fix-no-ip-addr-on-nic-38d6f8e8078f534d.yaml | 6 +
...pip-index-url-conditional-3f9c5b3c5c808500.yaml | 5 +
.../public-os-endpoint-type-a678a8ddc51ce3b1.yaml | 8 +
.../notes/remove-ifcfg-eth0-c179ea98fc34e164.yaml | 9 +
...r-host-package-update-fix-9411205aadc92b8f.yaml | 6 +
.../notes/seed-vm-centos-8.2-36b7a480a7725da1.yaml | 11 +
requirements.txt | 2 +-
requirements.yml | 6 +-
setup.cfg | 3 +
test-requirements.txt | 8 +-
tools/feature-flags.py | 2 +-
tools/run-bashate.sh | 4 +-
tox.ini | 1 +
zuul.d/jobs.yaml | 17 +
zuul.d/project.yaml | 2 +
87 files changed, 1574 insertions(+), 472 deletions(-)
Requirements updates
--------------------
diff --git a/requirements.txt b/requirements.txt
index 6e2d373d..e959d990 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2 +2 @@ pbr>=2.0 # Apache-2.0
-ansible>=2.8.0,<2.10.0,!=2.8.9,!=2.9.8 # GPLv3
+ansible>=2.8.0,<2.10.0,!=2.8.9,!=2.9.8,!=2.9.12 # GPLv3
diff --git a/test-requirements.txt b/test-requirements.txt
index 9b9f3d3c..b7415e4a 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5 +5 @@
-ansible-lint>=3.0.0 # MIT
+ansible-lint==4.2.0 # MIT
@@ -9,2 +9,2 @@ doc8 # Apache-2.0
-docker<3 # Apache-2.0
-hacking>=0.12.0,<0.13 # Apache-2.0
+docker # Apache-2.0
+hacking>=3.0,<3.1.0 # Apache-2.0
@@ -14 +14 @@ oslotest>=1.10.0 # Apache-2.0
-paramiko<2.5.0
+paramiko
1
0
Hello everyone,
A new release candidate for kayobe for the end of the Victoria
cycle is available! You can find the source code tarball at:
https://tarballs.openstack.org/kayobe/
Unless release-critical issues are found that warrant a release
candidate respin, this candidate will be formally released as the
final Victoria release. You are therefore strongly encouraged
to test and validate this tarball!
Alternatively, you can directly test the stable/victoria release
branch at:
https://opendev.org/openstack/kayobe/src/branch/stable/victoria
Release notes for kayobe can be found at:
https://docs.openstack.org/releasenotes/kayobe/
If you find an issue that could be considered release-critical, please
file it at:
https://storyboard.openstack.org/#!/project/openstack/kayobe
and tag it *victoria-rc-potential* to bring it to the kayobe
release crew's attention.
1
0