We are psyched to announce the release of:
openstack-ansible 15.1.6: Ansible playbooks for deploying OpenStack
This release is part of the ocata stable release series.
The source is available from:
http://git.openstack.org/cgit/openstack/openstack-ansible
Download the package from:
https://tarballs.openstack.org/openstack-ansible/
For more details, please see below.
15.1.6 ^^^^^^
New Features ************
* The "os-cinder-install.yml" playbook will now execute a rolling upgrade of cinder including database migrations (both schema and online) as per the procedure described in the cinder documentation (https://docs.openstack.org/developer/cinder/upgrade.html). When haproxy is used as the load balancer, the backend being changed will be drained before changes are made, then added back to the pool once the changes are complete.
* The "horizon_images_allow_location" variable is added to support the "IMAGES_ALLOW_LOCATION" setting in the horizon_local_settings.py file to allow to specify and external location during the image creation.
* The "os-neutron-install.yml" playbook will now execute a rolling upgrade of neutron including database migrations (both expand and contract) as per the procedure described in the neutron documentation (https://docs.openstack.org/developer/neutron/devref/upgrade.html).
Known Issues ************
* OpenStack-Ansible sets a new variable, *galera_disable_privatedevices*, that controls whether the *PrivateDevices* configuration in MariaDB's systemd unit file is enabled.
If the *galera_server* role is deployed on a bare metal host, the MariaDB default is maintained (*PrivateDevices=true*). If the *galera_server* role is deployed within a container, the *PrivateDevices* configuration is set to *true* to work around a systemd bug with a bind mounted */dev/ptmx*.
See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack- ansible/+bug/1697531) for more details.
* OpenStack-Ansible sets a new variable, *memcached_disable_privatedevices*, that controls whether the *PrivateDevices* configuration in MemcacheD's systemd unit file is enabled.
If the *memcached_server* role is deployed on a bare metal host, the default is maintained (*PrivateDevices=true*). If the role is deployed within a container, the *PrivateDevices* configuration is set to *true* to work around a systemd bug with a bind mounted */dev/ptmx*.
See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack- ansible/+bug/1697531) for more details.
Changes in openstack-ansible 15.1.5..15.1.6 -------------------------------------------
a578762 Allow keystone playbook to work with limits 674c64a Override keepalived uca repo with common variable 15edf1f Ensure that role path is absolute 67c8437 Implement rolling upgrades for keystone be87a8a Add haproxy-endpoint-manage common task 3cebcf1 Implement rolling upgrades for neutron 8a71c35 Remove Ceph warning. 4af5c14 Work around bad DNS resolution cb87202 Avoid renaming tempest result files adce4e0 Implement rolling upgrades for cinder fbd1d78 Bump plugins SHA to HEAD 8c26e45 Use distro specific netcat package names 03a6436 Bump lxc_container_create SHA 8b6cc5f Use new ansible-hardening role c663916 Set PrivateDevices=false for MemcacheD 500c25d Set PrivateDevices=false for Galera 60d3545 Fix race condition regression fd6f756 Include strategy/connection plugin fix 2b31509 If repo build fails, force all hosts to fail 250b93d Add additional role path for lint testing a4ffa2b Use the same version of ansible as tests repo 3462c75 [Docs] Update ansible version d98c598 Update all SHAs for 15.1.6 5c6eb06 Avoid retrieving IP from a bridge without IP 6d87aa8 Add var for environment used only inside playbooks
Diffstat (except docs and test files) -------------------------------------
ansible-role-requirements.yml | 40 +-- .../source/app-advanced-config-security.rst | 6 +- deploy-guide/source/app-ceph.rst | 5 - deploy-guide/source/app-security.rst | 2 +- etc/openstack_deploy/user_variables.yml | 7 + playbooks/ceph-install.yml | 2 + playbooks/common-playbooks/cinder.yml | 130 ++++++++++ playbooks/common-playbooks/neutron.yml | 120 +++++++++ playbooks/common-tasks/dynamic-address-fact.yml | 2 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 30 +++ playbooks/common-tasks/restart-service.yml | 45 ++++ playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 60 ++--- playbooks/etcd-install.yml | 2 + playbooks/galera-install.yml | 2 + playbooks/haproxy-install.yml | 2 + playbooks/inventory/group_vars/all.yml | 5 +- playbooks/inventory/group_vars/cinder_all.yml | 10 + playbooks/inventory/group_vars/galera_all.yml | 4 + playbooks/inventory/group_vars/hosts.yml | 2 +- playbooks/inventory/group_vars/keystone_all.yml | 9 + playbooks/inventory/group_vars/memcached.yml | 4 + playbooks/lxc-containers-create.yml | 1 + playbooks/lxc-hosts-setup.yml | 1 + playbooks/memcached-install.yml | 1 + playbooks/openstack-hosts-setup.yml | 1 + playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-ceilometer-install.yml | 1 + playbooks/os-cinder-install.yml | 280 ++++++++++++++------- playbooks/os-designate-install.yml | 1 + playbooks/os-glance-install.yml | 1 + playbooks/os-gnocchi-install.yml | 1 + playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-keystone-install.yml | 186 +++++++++++--- playbooks/os-magnum-install.yml | 1 + playbooks/os-neutron-install.yml | 150 ++++------- playbooks/os-nova-install.yml | 1 + playbooks/os-rally-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-swift-install.yml | 2 + playbooks/os-swift-sync.yml | 1 + playbooks/os-tempest-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/rabbitmq-install.yml | 3 + playbooks/repo-build.yml | 26 +- playbooks/repo-server.yml | 1 + playbooks/rsyslog-install.yml | 1 + playbooks/security-hardening.yml | 3 +- playbooks/unbound-install.yml | 1 + playbooks/utility-install.yml | 1 + playbooks/vars/configs/keepalived_haproxy.yml | 1 + ...tos-galera-privatedevices-4958f0be6cffa466.yaml | 14 ++ ...-memcached-privatedevices-d3be3acb19ed71d6.yaml | 14 ++ .../cinder-rolling-upgrades-f069187fc9139276.yaml | 10 + .../image-allow-location-58212b8e506639f2.yaml | 5 + .../neutron-rolling-upgrades-5269b62ea216df5e.yaml | 7 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 10 + scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-ansible.sh | 2 + scripts/get-pypi-pkg-version.py | 2 +- scripts/openstack-ansible.rc | 2 +- scripts/release-yaml-file-prep.py | 2 +- scripts/scripts-library.sh | 3 +- .../playbooks/memcached-flush.yml | 9 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 13 + tox.ini | 6 +- 70 files changed, 960 insertions(+), 311 deletions(-)