We are delighted to announce the release of: openstack-ansible 27.1.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.1.0 ^^^^^^ New Features ************ * Implemented variable "lxc_image_cache_expiration" that controlls for how long cached LXC image will be valid. Default value is *1year*. Variable format should be compatible with community.general.to_time_unit filter. * Adds optional compression for backups created with mariabackup. Adds two new CLI parameters to the mariabackup script that are used to enable compression and to choose a compression tool. * "--compress=True|False" * "--compressor=<compressor>" Also introduces new Ansible variables that control the above mentioned parameters. * "galera_mariadb_backups_compress" * "galera_mariadb_backups_compressor" Each backup archive is stored in a dedicated directory, alongside the backup metadata. Upgrade Notes ************* * Backup compression is disabled by default, so no changes need to be made for existing deployments. Should compression be desired, set "galera_mariadb_backups_compress" to "True". Choose a compression tool with "galera_mariadb_backups_compressor", default is "gzip". Bug Fixes ********* * LXC image cache expiration mechanism has being fixed. Previously LXC images were valid forever. * All compute nodes are not added as OVN gateways by default and "network-gateway_hosts" definition is respected. Changes in openstack-ansible 27.0.1..27.1.0 ------------------------------------------- 589b0d38a Update Adjutant and Neutron SHAs 9bd51ce10 Fix container bridge name for octavia 954b49ef5 Do not add all computes as OVN gateways 52288afd4 Bump SHAs for 2023.1 df6d915f2 Gather facts before including common-playbooks a25882628 haproxy: fix csp issue preventing embedded serial console bf769b1db haproxy: fix health checks for serialconsole in http mode 76dcfdd21 Use include_role in task to avoid lack of access to vars 65c184903 Restore an ability for HAProxy to bind on interal IP 7af20843d Remove support for 'tls-transition' scenario 558104d07 Stop reffering _member_ role 2402c93c0 nova/haproxy: fix typo in detection of 'serialconsole' 7f2af1461 Avoid breaking horizon during Antelope upgrade 8d5be3129 Make `_member_` role to imply `member` f22ad8f71 Bump keystone version to unblock upgrade jobs Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 148 ++++++++++----------- .../openstack_user_config.yml.aio.j2 | 2 +- inventory/env.d/nova.yml | 1 - inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/ceilometer_all/source_git.yml | 4 +- inventory/group_vars/ceph-rgw.yml | 2 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/designate_all/source_git.yml | 4 +- inventory/group_vars/galera_all.yml | 2 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/haproxy/haproxy.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- .../group_vars/neutron_all/haproxy_service.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 10 +- inventory/group_vars/nova_all/haproxy_service.yml | 8 +- inventory/group_vars/nova_all/source_git.yml | 6 +- inventory/group_vars/octavia_all/source_git.yml | 6 +- inventory/group_vars/rabbitmq_all.yml | 2 +- inventory/group_vars/repo_all.yml | 2 +- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/common-playbooks/cinder.yml | 19 --- playbooks/common-playbooks/neutron.yml | 19 --- playbooks/common-playbooks/nova.yml | 19 --- playbooks/haproxy-install.yml | 28 ++++ playbooks/infra-journal-remote.yml | 6 +- playbooks/os-cinder-install.yml | 23 +++- playbooks/os-neutron-install.yml | 23 +++- playbooks/os-nova-install.yml | 20 ++- playbooks/security-hardening.yml | 6 +- .../fix_lxc_cache_expiration-1656b5758c4ec24e.yaml | 10 ++ .../mariabackup-compression-337b04c68f370c1d.yaml | 28 ++++ .../ovn_gateway_computes-a9509fd25e8d25db.yaml | 5 + scripts/run-upgrade.sh | 2 + scripts/upgrade-utilities/implied_member_role.yml | 63 +++++++++ .../bootstrap-host/tasks/prepare_aio_config.yml | 3 - .../templates/user_variables_tls-transition.yml.j2 | 21 --- .../templates/user_variables_tls.yml.j2 | 25 +++- 43 files changed, 353 insertions(+), 216 deletions(-)