We are satisfied to announce the release of: openstack-ansible 17.0.3: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 17.0.3 ^^^^^^ New Features ************ * When *venvwithindex=True* and *ignorerequirements=True* are both specified in *tempest_git_install_fragments* (as was previously the default), this results in tempest being installed from PyPI without any constraints being applied. This could result in the version of tempest being installed in the integrated build being different than the version being installed in the independent role tests. Going forward, we remove the *tempest_git_** overrides in playbooks/defaults/repo_packages/openstack_testing.yml so that the integrated build installs tempest from PyPI, but with appropriate constraints applied. * This consolidates the amphora image tasks in a common file and adds a way to download an amphora image from an artefact storage over http(s). With the Octavia team providing test images the tests were modified to not build images any longer but download them. Security Issues *************** * It is commonly considered bad practice to downlaod random images from the Internet expecially the test images the Octavia team provides which could potentially include unpatched operating system packages - so for any production deploy adjust the download url to an artifact storage your organization controls. The system also does not authenticate the image (e.g. with an md5) so should only be used on networks your organization controls. Other Notes *********** * The internal variable "python_ceph_package" has been renamed to "python_ceph_packages" and is now a list instead of a string. If you are using gnocchi with ceph and are using this internal variable in your "ceph_extra_components" overrides, please update it to "python_ceph_packages". Changes in openstack-ansible 17.0.2..17.0.3 ------------------------------------------- 72c8be4 Update role SHA's to resolve pip/python venv issues 64bf9d9 Update Ansible to 2.4.4.0 9ebb91b Enable horizon fwaas panels when firewall_v2 driver is enabled 4c9bcae log_hosts should be optional 0f5a23e bootstrap-host: Set repo build pip default mirror when in openstack-ci ba9d62c Add shade library to openstack-ansible venv 16e8ffb Remove tempest_git_* overrides 782285b Add IP addresses to infra node br-vxlan in the examples 8b846bb [DOC] rectify galera recovery for systemd 3c777c5 Do not log passwords bbdfbb8 Do not log passwords 95ff8c4 Update all SHAs for 17.0.3 0810950 Remove spurious VxLAN bridge IP from ceph osd hosts 190c16c Use a sensible vlan range in the example configs 2fd5a4b Add nova/ironic/glance cross-service vars to group_vars/all Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 62 ++++++++-------- .../openstack_interface.cfg.pod.example | 20 ++---- .../openstack_interface.cfg.prod.example | 21 ++---- .../openstack_interface.cfg.test.example | 22 ++---- etc/openstack_deploy/openstack_user_config.yml.aio | 2 +- .../openstack_user_config.yml.aio.j2 | 2 +- .../openstack_user_config.yml.example | 2 +- .../openstack_user_config.yml.pod.example | 2 +- .../openstack_user_config.yml.prod-ceph.example | 2 +- .../openstack_user_config.yml.prod.example | 2 +- .../openstack_user_config.yml.test.example | 2 +- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/all/glance.yml | 3 + inventory/group_vars/all/ironic.yml | 24 +++++++ inventory/group_vars/glance_all.yml | 5 -- inventory/group_vars/horizon_all.yml | 2 +- inventory/group_vars/ironic_all.yml | 8 --- playbooks/common-tasks/mysql-db-user.yml | 2 + playbooks/common-tasks/rabbitmq-vhost-user.yml | 1 + .../defaults/repo_packages/openstack_services.yml | 82 +++++++++++----------- .../defaults/repo_packages/openstack_testing.yml | 7 -- playbooks/healthcheck-infrastructure.yml | 1 + playbooks/rabbitmq-install.yml | 1 + ...-tempest-with-constraints-409eab81862db701.yaml | 11 +++ .../notes/image_download-754d13e7df9b7891.yaml | 16 +++++ ...iable_python_ceph_package-9575466eb146e500.yaml | 8 +++ requirements.txt | 1 + scripts/bootstrap-ansible.sh | 2 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 1 + 34 files changed, 184 insertions(+), 163 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 54d032a..a589187 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ virtualenv>=14.0.6 # MIT +shade>=1.17.0 # Apache-2.0