We joyfully announce the release of: kolla-ansible 6.2.2: Ansible Deployment of Kolla containers This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 6.2.2 ^^^^^ New Features ************ * Docker logs are no longer allowed to grow unbounded and have been limited to a fixed size per container. Two new variables have been added, *docker_log_max_file* and *docker_log_max_size* which default to 5 and 50MB respectively. This means that for each container, there should be no more than 250MB of Docker logs. Upgrade Notes ************* * The Keystone fernet key rotation scheduling algorithm has been modified to avoid issues with over-rotation of keys. The variables "fernet_token_expiry", "fernet_token_allow_expired_window" and "fernet_key_rotation_interval" may be set to configure the token expiry and key rotation schedule. By default, "fernet_token_expiry" is 86400, "fernet_token_allow_expired_window" is 172800, and "fernet_key_rotation_interval" is the sum of these two variables. This allows for the minimum number of active keys - 3. See bug 1809469 for details. Bug Fixes ********* * Adds system hostnames to "/etc/hosts", if different from short hostnames. This can fix live migration of Nova instances in some contexts. See bug 1830023 for details. Other Notes *********** * While Kolla Ansible now avoids duplicating Nova cells when messaging or database connection information are changed, operators of existing deployments should perform a manual cleanup of duplicate cells using the "nova-manage cell_v2" command from a container running the "nova_api" image, leaving only two cells, one named "cell0" and another one with the right connection information. Changes in kolla-ansible 6.2.1..6.2.2 ------------------------------------- 403cc371c Constrain the size of Docker logs 7c575f46f Add 'allow *' to getting ceph mds keyring da171abc2 openvswitch: always run handler to to ensure OVS bridges are up 849d613ce Add Region and Multiples into default globals.yml 8e219a917 During deploy, always sync DB 65bae5a73 Language tweaks in multi-region docs for clarity c68cc2c66 Don't rotate keystone fernet keys during deploy aa4424500 Wait for all compute services before cell discovery 9ec00c24e Fixes for MariaDB bootstrap and recovery 621a4d6fd Restart all nova services after upgrade 20b40798d (Rocky and Queens only) CI: Fix ceph jobs for kolla 73747860d Avoid parallel discover_hosts (nova-related race condition) 20782235c Remove zuul-cloner usage 01654d83e Add blazar to fluentd aggregation 22c012c96 [heat] Multi-region support for bootstrap 489a0a31a Fix Blazar Nova aggregate in multi-region setup 554187c9b Hide logs when looping over passwords 18d8960e4 Support multi-region discovery of Nova cells d6bac914d Add ansible_nodename (system hostname) to /etc/hosts 11b9eba2a nova: Fix DBNotAllowed during compute startup d5cef35a7 Fix keystone fernet key rotation scheduling ec2aa48c1 Add unit test for keystone fernet cron generator f6cfee320 Stop duplicating Nova cells Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 12 ++ ansible/roles/aodh/tasks/bootstrap.yml | 2 - ansible/roles/barbican/tasks/bootstrap.yml | 2 - ansible/roles/baremetal/tasks/pre-install.yml | 3 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/blazar/tasks/bootstrap.yml | 3 +- ansible/roles/ceph/defaults/main.yml | 2 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 - ansible/roles/cloudkitty/tasks/bootstrap.yml | 2 - .../common/templates/conf/input/00-global.conf.j2 | 1 + ansible/roles/congress/tasks/bootstrap.yml | 2 - ansible/roles/designate/tasks/bootstrap.yml | 2 - ansible/roles/glance/tasks/bootstrap.yml | 2 - ansible/roles/gnocchi/tasks/bootstrap.yml | 2 - ansible/roles/heat/tasks/bootstrap.yml | 2 - ansible/roles/heat/tasks/bootstrap_service.yml | 1 + ansible/roles/horizon/tasks/bootstrap.yml | 2 - ansible/roles/ironic/tasks/bootstrap.yml | 4 +- ansible/roles/karbor/tasks/bootstrap.yml | 2 - .../keystone/files/fernet_rotate_cron_generator.py | 83 +++++---- ansible/roles/keystone/tasks/bootstrap.yml | 2 - ansible/roles/keystone/tasks/config.yml | 8 +- ansible/roles/keystone/tasks/init_fernet.yml | 2 +- ansible/roles/keystone/templates/fernet-push.sh.j2 | 7 + .../roles/keystone/templates/fernet-rotate.sh.j2 | 6 +- .../keystone/templates/keystone-fernet.json.j2 | 6 + ansible/roles/keystone/templates/keystone.conf.j2 | 12 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 - ansible/roles/manila/tasks/bootstrap.yml | 2 - ansible/roles/mariadb/handlers/main.yml | 22 +++ ansible/roles/mariadb/tasks/recover_cluster.yml | 146 ++++++++------- ansible/roles/mistral/tasks/bootstrap.yml | 2 - ansible/roles/murano/tasks/bootstrap.yml | 2 - ansible/roles/neutron/tasks/bootstrap.yml | 2 - ansible/roles/nova/defaults/main.yml | 9 + ansible/roles/nova/handlers/main.yml | 51 ++++++ ansible/roles/nova/tasks/bootstrap.yml | 7 +- ansible/roles/nova/tasks/create_cells.yml | 77 ++++++++ ansible/roles/nova/tasks/discover_computes.yml | 52 +++++- ansible/roles/nova/tasks/reload.yml | 40 ----- ansible/roles/nova/tasks/upgrade.yml | 2 - ansible/roles/nova/templates/nova.conf.j2 | 7 +- ansible/roles/octavia/tasks/bootstrap.yml | 2 - ansible/roles/openvswitch/handlers/main.yml | 12 -- ansible/roles/openvswitch/tasks/deploy.yml | 2 + .../roles/openvswitch/tasks/ensure-ovs-bridge.yml | 11 ++ ansible/roles/openvswitch/tasks/upgrade.yml | 2 + ansible/roles/panko/tasks/bootstrap.yml | 4 - ansible/roles/rally/tasks/bootstrap.yml | 2 - ansible/roles/sahara/tasks/bootstrap.yml | 2 - ansible/roles/senlin/tasks/bootstrap.yml | 2 - ansible/roles/solum/tasks/bootstrap.yml | 2 - ansible/roles/tacker/tasks/bootstrap.yml | 2 - ansible/roles/trove/tasks/bootstrap.yml | 2 - ansible/roles/vitrage/tasks/bootstrap.yml | 2 - ansible/roles/watcher/tasks/bootstrap.yml | 2 - ansible/roles/zun/tasks/bootstrap.yml | 2 - etc/kolla/globals.yml | 9 + ...add-nodename-to-etc-hosts-6360acc642ee3d49.yaml | 7 + .../fernet-key-rotation-8d40041d7d783dc7.yaml | 16 ++ .../limit-docker-log-size-33133da03b232ece.yaml | 8 + ...op-duplicating-nova-cells-670211557fe2cda3.yaml | 9 + tools/setup_gate.sh | 15 -- 68 files changed, 719 insertions(+), 257 deletions(-)