We are gleeful to announce the release of: openstack-ansible 17.0.5: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 17.0.5 ^^^^^^ New Features ************ * Octavia requires SSL certificates for communication with the amphora. This adds the automatic creation of self signed certificates for this purpose. It uses different certificate authorities for amphora and control plane thus insuring maximum security. Known Issues ************ * All OSA releases earlier than 17.0.5, 16.0.4, and 15.1.22 will fail to build the rally venv due to the release of the new cmd2-0.9.0 python library. Deployers are encouraged to update to the latest OSA release which pins to an appropriate version which is compatible with python2. * Recently the spice-html5 git repository was entirely moved from "https://github.com/SPICE/spice-html5" to "https://gitlab.freedesktop.org/spice/spice-html5". This results in a failure in the git clone stage of the "repo-build.yml" playbook for OSA queens releases earlier than "17.0.5". To fix the issue, deployers may upgrade to the most recent release, or may implement the following override in "user_variables.yml". nova_spicehtml5_git_repo: https://gitlab.freedesktop.org/spice/spice-html5.git Upgrade Notes ************* * The distribution package lookup and data output has been removed from the py_pkgs lookup so that the repo-build use of py_pkgs has reduced output and the lookup is purpose specific for python packages only. Security Issues *************** * It is recommended that the certificate generation is always reviewed by security professionals since algorithms and key-lengths considered secure change all the time. Bug Fixes ********* * Newer releases of CentOS ship a version of libnss that depends on the existance of /dev/random and /dev/urandom in the operating system in order to run. This causes a problem during the cache preparation process which runs inside chroot that does not contain this, resulting in errors with the following message: error: Failed to initialize NSS library This has been resolved by introducing a /dev/random and /dev/urandom inside the chroot-ed environment. Changes in openstack-ansible 17.0.4..17.0.5 ------------------------------------------- b6d44cf Update repo_build role SHA for custom PyPi indexes fix 4662c7d Update os_tempest role SHA pin for cmd2 pin c963790 Add release note with workaround for spice-html5 repo change 94b745a Fix Git URL for SPICE to work with CentOS 5dbc4c5 Updated spice-html5 git repository URL 7f8caa1 Add more meaningful/user readable failure 22db155 Add some troubleshooting informations e28f00a Adds the certificate client key password to user_secrets 33dcfa0 Pin ARA for Queens 2100356 Use upper constraints when installing ARA 4b53dbe Update lxc_hosts role SHA for cache resolver fix c038e8d Ensure facts are updated for new containers 2c831b0 Improve the limited connectivity documentation 5ea58f5 Adjust inside/outside openstack-ci bootstrap-host tasks f6defdb Update docs to reflect release of Queens 69015c0 Run inventory-manage.py from the ansible-runtime venv 0633521 Update all SHAs for 17.0.5 e5d8c23 [Docs] Clarify the testing page 5487401 Configure cors for glance for additional usability 933dabb Be clear about python3: Remove its support Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 70 +++---- bindep.txt | 3 - etc/openstack_deploy/user_secrets.yml | 1 + inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/all/glance.yml | 19 ++ inventory/group_vars/all/horizon.yml | 16 ++ playbooks/containers-lxc-create.yml | 14 +- playbooks/defaults/repo_packages/nova_consoles.yml | 3 +- .../defaults/repo_packages/openstack_services.yml | 82 ++++----- .../notes/add-random-devices-38671b23cb1319b8.yaml | 12 ++ .../certificate_generation-a9cdcc8e3b1e186f.yaml | 14 ++ .../notes/cmd2-0.9.0-838765e91d9be69e.yaml | 7 + ...ove-distro-package-lookup-340b0fedb25a7c4b.yaml | 8 + .../spice-html5-repo-change-b4ad1c25ec94ee99.yaml | 14 ++ scripts/bootstrap-ansible.sh | 8 +- scripts/gate-check-commit.sh | 8 +- scripts/inventory-manage.py | 2 +- .../bootstrap-host/tasks/check-requirements.yml | 10 + .../bootstrap-host/tasks/prepare_aio_config.yml | 180 +++++++----------- tox.ini | 9 - 24 files changed, 543 insertions(+), 364 deletions(-)