We are stoked to announce the release of:
openstack-ansible 15.1.5: Ansible playbooks for deploying OpenStack
This release is part of the ocata stable release series.
The source is available from:
http://git.openstack.org/cgit/openstack/openstack-ansible
Download the package from:
https://tarballs.openstack.org/openstack-ansible/
For more details, please see below.
15.1.5 ^^^^^^
New Features ************
* The "os_ceilometer" role now includes a facility where you can place your own templates in "/etc/openstack_deploy/ceilometer" (by default) and it will be deployed to the target host after being interpreted by the template engine. If no file is found there, the fallback of the git sourced template is used.
* For the "os_designate" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "designate_*_init_config_overrides" variables which use the "config_template" task to change template defaults.
* The "os_gnocchi" role now includes a facility where you can place your own default "api-paste.ini" or "policy.json" file in "/etc/openstack_deploy/gnocchi" (by default) and it will be deployed to the target host after being interpreted by the template engine.
* The new option *haproxy_backend_arguments* can be utilized to add arbitrary options to a HAProxy backend like tcp-check or http-check.
* The ability to disable the certificate validation when checking and interacting with the internal cinder endpoint has been implemented. In order to do so, set the following in "/etc/openstack_deploy/user_variables.yml".
cinder_service_internaluri_insecure: yes
Upgrade Notes *************
* For the "os_designate" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "designate_*_init_config_overrides" variables which use the "config_template" task to change template defaults.
* The endpoint which designate uses to communicate with neutron has been set to the internalURL by default. This change has been done within the template "designate.conf.j2" and can be changed using the "designate_designate_conf_overrides" variable.
* The magnum client interaction will now make use of the public endpoints by default. Previously this was set to use internal endpoints.
* The keystone endpoints for instances spawned by magnum will now be provided with the public endpoints by default. Previously this was set to use internal endpoints.
Deprecation Notes *****************
* The variable "keepalived_uca_enable" is deprecated, and replaced by "keepalived_ubuntu_src". The "keepalived_uca_enable" variable will be removed in future versions of the keepalived role. The value of "keepalived_ubuntu_src" should be either "uca", "ppa", or "native", for respectively installing from the Ubuntu Cloud archive, from keepalived stable ppa, or not installing from an external source.
* The variable "keepalived_use_latest_stable" is deprecated, and replaced by "keepalived_package_state". The "keepalived_use_latest_stable" variable will be removed in future versions of the keepalived role. The value of "keepalived_package_state" should be either "latest" or "present".
* The upstream noVNC developers recommend that the keymap be automatically detected for virtual machine consoles. The defaults for three Ansible variables have been removed:
* nova_console_keymap
* nova_novncproxy_vnc_keymap
* nova_spice_console_keymap
The "nova.conf" template still includes these variables and it sets the keymap configuration option. Deployers who have customized this setting will not see a change in their "nova.conf".
Security Issues ***************
* The magnum client interaction will now make use of the public endpoints by default. Previously this was set to use internal endpoints.
* The keystone endpoints for instances spawned by magnum will now be provided with the public endpoints by default. Previously this was set to use internal endpoints.
Changes in openstack-ansible 15.1.4..15.1.5 -------------------------------------------
738241d Update vars to match latest keepalived role b6c339e Simplify multi arch repo build 0a47601 Update role SHA's to include keystone fixes bc7374a Revert "Implement ARA logging and reporting for openstack-ansible gate jobs" 65772b6 docs: Remove all the unnecessary blockquotes 782bd1f Update all SHAs for 15.1.5 63d49d5 Vagrantfile resize handling
Diffstat (except docs and test files) -------------------------------------
Vagrantfile | 77 +------------- ansible-role-requirements.yml | 50 ++++----- .../maintenance-tasks/scale-environment.rst | 12 +-- .../openstack-operations/access-environment.rst | 8 +- .../openstack-operations/managing-images.rst | 118 ++++++++++----------- .../openstack-operations/managing-instances.rst | 4 +- .../openstack-operations/network-service.rst | 26 ++--- .../draft-operations-guide/troubleshooting.rst | 52 ++++----- .../openstack_user_config.yml.example | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 60 +++++------ playbooks/inventory/group_vars/all.yml | 2 +- playbooks/repo-build.yml | 37 +++---- playbooks/vars/configs/keepalived_haproxy.yml | 2 +- .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 7 ++ ...ignate_init_time_settings-6efb66b0d17d4c04.yaml | 23 ++++ ...int-change-to-internalurl-3da6bb4bd4972bea.yaml | 7 ++ ...nocchi-deploy-config-file-afba6c2a8edac025.yaml | 7 ++ ...haproxy-backend-arguments-3b1dca299c7a8296.yaml | 4 + .../keepalived_new_vars-a3b2f0d334f79e10.yaml | 15 +++ .../notes/magnum-client-urls-64af5efc9ece6680.yaml | 13 +++ .../remove-console-keymap-ae255da81979a3a5.yaml | 14 +++ ...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml | 11 ++ scripts/gate-check-commit.sh | 5 - scripts/scripts-library.sh | 2 - 30 files changed, 325 insertions(+), 303 deletions(-)