We are thrilled to announce the release of: kolla 11.3.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.3.0 ^^^^^^ New Features ************ * Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM- SHA-256 mechanisms. These can be used for libvirt SASL authentication. LP#1964013 * Quiet mode (enabled with "--quiet" argument) can be combined with " --logs-dir" option now. Console output will be quiet as expected while building output will be stored in separate log files. Critical Issues *************** * CentOS Linux 8 (non-Stream) support has been dropped, since repositories have been removed from CentOS mirrors - see announcement (https://www.centos.org/centos-linux-eol/). Security Issues *************** * Adds mitigation for Apache Log4j 2 Remote Code Execution (RCE) vulnerabilities CVE-2021-44228 and CVE-2021-45046 to Apache Storm. Bug Fixes ********* * Fixes an issue with Ironic deployments using UEFI and iPXE, where the default UEFI iPXE bootloader in Ironic was not available in the TFTP server. This affects all Kolla releases on CentOS, and Xena on Debian/Ubuntu. LP#1959203 * Installs "glusterfs-client" in Debian and Ubuntu "manila-share" images to support GlusterFS across supported distributions. LP#1964140 * Fixes an issue when older version of Python OpenvSwitch bindings package was used, than the running OpenvSwitch code. LP#1961874 * Fix AArch64 ubuntu ironic-python-agent images UEFI PXE booting failure. Also fix x86_64 lacking of GRUB efi files issue. LP#1879265 * Fixes disabling the use of the "curlrc" configuration file in "healthcheck_curl". LP#1967272 * Fixes an issue seen when using Jinja2 3.1.0. * Fixes an issue with missing Magnum Keystone auth default policy. LP#1957159 * Fixes set_configs.py configuring same permission for directories and files, causing directories lacking execute permission if not set for files. Changes in kolla 11.2.1..11.3.0 ------------------------------- a83002b3f enable logging to file for quiet mode 238c56f53 Fix disabling of curlrc in healthcheck_curl a7ff9f6c0 elasticsearch: install Java first on CentOS too ca4952780 libvirt: add Cyrus SASL packages for DIGEST-MD5 1ea5c73d6 Install glusterfs-client in Debuntu 61f1705bc Use python3-openvswitch from distro 9b1ff36ac Ensure set_configs sets execute bit on directories 674aede28 erlang: use packages from Erlang Solutions on AArch64 545fed783 collectd: pcie-errors is x86-64 only now 07a4e434d base: Drop usage of Ceph Nautilus from RDO 77d683caa ironic: Fix UEFI & iPXE bootloader filenames 07f519996 Drop CentOS Linux 8 image builds 02f5222b0 Use distro provided GRUB efi 56f494230 openstack-base: drop anyjson 891396f7b Mitigate two Log4j vulnerabilities in Apache Storm ca6951744 magnum: fix issue with keystone auth default policy Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 86 ---------------------- kolla/common/config.py | 12 +-- kolla/common/utils.py | 34 ++++++--- kolla/template/filters.py | 9 ++- kolla/template/methods.py | 8 +- kolla/template/repos.yaml | 2 +- .../notes/bug-1959203-1bb695e052248d78.yaml | 8 ++ .../notes/bug-1964140-57b433329bab067e.yaml | 6 ++ .../notes/centos-8-eol-4500333b5e01f448.yaml | 6 ++ .../notes/distro-python-ovs-df705d1e59f16cde.yaml | 6 ++ ...n-agent-pxe-booting-issue-95adaf9249207d5b.yaml | 6 ++ ...check-curl-disable-curlrc-0f85aad47379e2a5.yaml | 5 ++ .../jinja2-pass-context-3f3febcd944e3a51.yaml | 4 + .../notes/libvirt-sasl-07a8a1a25d2450c6.yaml | 6 ++ ...stone-auth-default-policy-e16f7bb558aa4b14.yaml | 5 ++ .../quiet-mode-with-logs-0abafc07923945ac.yaml | 6 ++ ...ectory-execute-permission-8ab919b7b17025d2.yaml | 5 ++ ...-vulnerability-mitigation-6746a8a0bb329485.yaml | 5 ++ 41 files changed, 253 insertions(+), 183 deletions(-)