We are glad to announce the release of: openstack-ansible 31.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 31.0.0 ^^^^^^ New Features ************ * Added support for defining custom error files using haproxy_errorfiles. These files can be distributed alongside haproxy_static_files_extra. * Added variables "lxc_centos_repo_keys" and "lxc_centos_repos", which allows to supply a list of repositories, which will be added to lxc_host. By default, role keeps installing EPEL repository with it's GPG key. Known Issues ************ * It was discovered that LXC 5.0.3 in Ubuntu 24.04 (Noble Numbat) contains packaging issue resulting in apparmor profiling conflicts. A temporary workaround has been applied in "lxc_hosts" role to apply a hotfix to the profile. However, it will be wiped with the next update of "liblxc-common" package. Please, check the bug #2110635 (https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/2110635) for more details on the issue. Upgrade Notes ************* * EL does not need to carry thm COPR repo to install LXC as LXC is now provided by EPEL. We remove repository during upgrade and clean dnf metadata. * Docker mode for zun-compute has been switched to "local" mode. This means, that supporting etcd cluster is no longer required for Zun to operate. If you want preserve old behavior, you will need to pin Docker and Containerd versions back along with adding "zun_docker_kv_storage: etcd" to "user_variables.yml" * For deployments with Zun, underlying software versions were upgraded to: * Docker 20.10.24 -> 27.5.1 * Containerd 1.6.20 -> 1.7.27 * Kata 3.1.0 -> 3.16.0 Deprecation Notes ***************** * Variables "zun_docker_kv_storage" and "zun_docker_kv_group" were deprecated and will be removed in the next release. * The "horizon_default_role_name" (default *member*) Keystone role existence is no longer ensured by the Horizon role. It is expected that the role defined by "horizon_default_role_name" already exists in Keystone and was bootstrapped via "keystone-bootstrap" command during "os_keystone" execution. You can leverage "opestack.osa.openstack_resources" playbook to create extra roles if you need/want to use non-default value for the "horizon_default_role_name" variable Bug Fixes ********* * "os_neutron" role was ignoring actual exit code of "aa-disable" command, when it was exiting abnormally. It could result in unobvious failures later in neutron agents. This was fixed and the role will fail if "aa-disable" fails to disable required apparmor profiles instead of suppressing the issue. * With change of policy regarding stored versions of MariaDB in "mirror.mariadb.org", currently pinned MariaDB versions were removed from the repo. With a switch to "archive.mariadb.org", this should resolve failing installation for MariaDB. Other Notes *********** * Mirror for MariaDB has been switched to "archive.mariadb.org" Changes in openstack-ansible 30.0.0.0rc1..31.0.0 ------------------------------------------------ 670a8c086 Bump SHAs for 2025.1 (Epoxy) RC2 5e335dc56 [doc] Update doc for the stable branch 6fa992ba7 Ensure Python is installed on EL10 650cd7c15 Remove LIBSYSTEMD_VERSION override for AIO 34a370b3b Add AIO bootstrap support for EL10 72c42fffc Add CentOS Stream 10 to molecule tests 4811f10db Do not require full git & autoconf on EL c99b3c455 Update TOX_CONSTRAINTS_FILE for stable/2025.1 3e57a2f64 Update .gitreview for stable/2025.1 02435a780 Bump SHAs to 2025.1 for RC1 64cfac58e Imported Translations from Zanata 3a230f902 docs: remove duplicated text 8c979ebfe docs: update troubleshooting page 0f74bf37a docs: update environment scaling page dc1248f7a Imported Translations from Zanata aaf2a1976 docs: fix broken links on Galera Cluster page 808e1c159 docs: fix small mistake with : 4700a1139 docs: fix for small mistake in text (with Open vSwitch) 1da8679bb docs: fix for small mistake in text (with OpenStack) db155c149 docs: fix for problem with duplicating the language switch def87c08a docs: replace broken url to "Getting Started with MariaDB Galera Cluster" 274b4b45f docs: remove Xen info 08799eca2 Ensure /etc permissions in CI 192501dfa doc: haproxy_base_service_overrides 3a0adddc5 docs: fix for issues when switching between pages using localization de7231c17 docs: update Project scope - remove duplicate phrase 6a6c40b19 docs: fix for mistakes with Ansible, OpenStack-Ansible and RabbitMQ 62e48c7b7 Imported Translations from Zanata 0e3f7eb17 docs: remove old note about bug for Ansible 4fb6ecf0b Fix links to Ansible documentation a3adf75fa docs: add information about project a43889b19 docs: fix for issues when switching between pages using localization 3b9948a1e Fix SHA test scenario 79580fc24 Imported Translations from Zanata 3ee85ff15 Bump ansible-core to 2.17.11 6e7312197 docs: fix for Keepalived and HAProxy in operations 83b3c38ea docs: fix for issues when switching between pages using localization 998404900 docs: added details about Manila 53ae03fa9 Imported Translations from Zanata 1b9809182 docs: remove unused page (about monitoring) 7c64fb888 docs: fix for small mistake with title 4be6b9891 docs: Compatibility Matrix - fix mistakes with layout d1d372457 docs: fix incorrect link to Ansible doc 4a936c2de docs: remove Linux Bridge c83bcb4a1 docs: update information about OSA 66df56fb5 docs: updated information in additional resources 387ebe666 Imported Translations from Zanata 732b42a85 docs: minor fixes with OpenStack-Ansible naming 4cf240421 docs: minor fix for configuring inventory d7f1562ea docs: update Introduction 553aeb2e7 docs: fix for incorrect Contributors guide url e69c616d7 Fix urls in README 20f721724 docs: move page with resources and about OSA in reference a98d68aad docs: fix for Certbot 3bcda4b64 docs: fix for Keepalived and full spelling VIP 6bdef3b85 docs: fix problems with text formatting and few small mistakes bc697263f Imported Translations from Zanata 9ec61ecec docs: minor fixes with OpenStack-Ansible df0c62630 docs: fix for Geneve and remove Linux Bridge 881e5b1dd docs: remove Linux Bridge d078d4c9c Imported Translations from Zanata 0bfe28470 Remove tags from README 3590e1ef6 Add CI jobs for Ceph on Ubuntu 24.04 58e15cdfe tox: Bump minimum version and remove basepython f0b296b2f Imported Translations from Zanata 57346fb3b docs: minor fixes with RabbitMQ and HAProxy 46855690c Imported Translations from Zanata b245d5d17 docs: small fix with writing VXLAN 5b077a948 Imported Translations from Zanata 3e96c062f docs: fix order of steps 780b4f7d3 docs: fix for problem with duplicating the language switch 3c7c9e6d1 docs: fix broken urls in Telemetry with Gnocchi, Ceph and Redis example 817a23c63 Move sync framework to integrated repo 9d65e168a docs: small fix for table 349cb75c3 docs: fix problems with contributors documentation 10e3cfbaf Imported Translations from Zanata d48e3406f docs: use https instead of http 8c31b0963 docs: minor fixes with Geneve and HAProxy 5cc1b1671 Fix role and collection dependency dd5ad305a [doc] Add multi-AZ deployment configuration sample e88e6a501 Imported Translations from Zanata 80da974c2 Maximize amount of ANSIBLE_FORKS for CI 96b0b4a7b Use FQCN for modules and fix YAML issues 756618d25 Optimize generation of required roles/collections 00220d1d8 docs: fix for small error bc517cfcc Move zuul preparation for role/collection bootstrap ce7b2102c docs: minor fixes with OpenStack-Ansible naming 29d2291e5 Update roles for 31.0.0.0b1 release 355faf7da docs: small mistake in Deployment hosts a51a5c73f docs: little fix for Zed release 9bdfd9981 [doc] Update 2023.1 maintenance state cd69d9db6 Define parameters to decompress magnum image before upload 3abf0eceb Freeze roles for 31.0.0.0b1 release 6752fbdd5 Remove lxb driver support c25265379 Stop skipping FQCN ansible-lint rule acbed8fcc Stop skipping yaml-related rules 20b86205b [doc] Update docs on how to use inventory scripts cd6123e2d Symlink console_scripts to /usr/local/bin/ f01fb5662 Install inventory-manage as a console_script 7319bc994 Move argument parsing for dynamic_inventory to generate 173442c99 Stop reffering to tests repo for ansible requirements c592412d1 Switch OpenStack-Ansible to track 2025.1 923799c67 Move remaining playbooks to collection ce4f47e18 Use first utility host as default host for openstack_resources dd418a06e Prevent inventory-manger failing with arbitrary groups 29ce380dd Bump SHAs for master ecd29b628 Ensure that cinderv3 service type is preserved on upgrade 443e946c6 [doc] Reffer to mariadb instead of mysql as client 963b822c4 docs: adjust rabbitmq quorum queue guidance for 2024.2 onwards 1c4075a3b reno: Update master for unmaintained/2023.1 772da0bf3 Pretty-print Ansible log messages as YAML 0546d19d3 Add jmespath to test-requirements e677320f9 Install setuptools for molecule venv caf2442fd Add additional commented RabbitMQ policy to manage segment sizes 82dbf8845 Return upgrade jobs back to voting 618614e63 Ensure repo_server proper username 287e3edce Add httpd role to a-r-r de3a26059 Add noble to molecule testing cf61c8032 Molecule to respect depends-on for test-requirements update 6ae85fc12 Pin ansible-compat up to 25.0.0 1590e39e1 Fix inventory adjustment for legacy container naming 734940d6c Update prod example to reflect OVN setup 1fd3d0f1c Bump SHAs for master 9a93ef431 Add RockyLinux to molecule testing 588d6e295 Add release note for retirement of qdrouterd and amqp1 messaging 0cf44e57a [doc] Document pretty endpoint namings 810bbec59 Add noop molecule job to the integrated repo 40866d036 Add centralized defenition for molecule jobs fcef934d3 Update test-requirements 9461f0822 Bump collection versions used 53aeec4bb Adjust upgrade jobs to test supported paths ad4e95f8d Remove deployment of qdrouterd 426c49da6 Start 2025.1 (Epoxy) development 2f69fac67 Add logs created when clusterapi create fails e320a1875 Update master for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 - .gitreview | 2 +- CONTRIBUTING.rst | 2 +- README.rst | 18 +- ansible-collection-requirements.yml | 14 +- ansible-role-requirements.yml | 336 +- deploy-guide/source/app-resources.rst | 24 - deploy-guide/source/app.rst | 9 - deploy-guide/source/conf.py | 9 +- deploy-guide/source/index.rst | 3 - deploy-guide/source/next-steps.rst | 13 +- deploy-guide/source/overview.rst | 5 +- .../admin/maintenance-tasks/ansible-modules.rst | 18 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 26 +- .../admin/openstack-operations/cli-operations.rst | 2 +- .../admin/openstack-operations/managing-images.rst | 4 +- .../openstack-operations/managing-instances.rst | 4 - .../openstack-operations/managing-networks.rst | 2 +- .../admin/openstack-operations/network-service.rst | 2 +- .../admin/openstack-operations/verify-deploy.rst | 7 +- .../admin/upgrades/compatibility-matrix-legacy.rst | 2 - .../admin/upgrades/distribution-upgrades.rst | 48 +- .../upgrades/os-compatibility-matrix-legacy.html | 297 +- .../admin/upgrades/os-compatibility-matrix.html | 114 +- .../{contributor => contributors}/code-rules.rst | 0 .../{contributor => contributors}/contribute.rst | 0 .../{contributor => contributors}/contributing.rst | 21 +- .../core-reviewers.rst | 0 .../distributions.rst | 0 .../periodic-work.rst | 0 .../project-onboarding.rst | 31 +- .../role-maturity-matrix.html | 0 .../{contributor => contributors}/testing.rst | 2 +- .../locale/de/LC_MESSAGES/doc-contributor.po | 96 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 131 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 118 +- .../source/reference/aboutosa.rst | 27 +- .../architecture/container-networking.rst | 40 +- .../reference/architecture/metal-networking.rst | 40 +- .../reference/configuration/extending-osa.rst | 20 +- .../reference/configuration/using-overrides.rst | 10 +- .../figures/networking-linuxbridge-cn.drawio.png | Bin 90260 -> 0 bytes .../figures/networking-linuxbridge-nn.drawio.png | Bin 120277 -> 0 bytes .../reference/inventory/configure-inventory.rst | 16 +- .../reference/inventory/generate-inventory.rst | 4 +- .../user/figures/az-balancing-diagram.drawio.png | Bin 0 -> 214396 bytes .../user/figures/az-layout-general.drawio.png | Bin 0 -> 83701 bytes etc/openstack_deploy/conf.d/qdrouterd.yml.aio | 3 - etc/openstack_deploy/env.d/aio_metal.yml.example | 3 - etc/openstack_deploy/env.d/az.yml.example | 36 + etc/openstack_deploy/env.d/ceph.yml.az.example | 172 + .../env.d/haproxy.yml.container.example | 14 + .../haproxy/first_backend.yml.az.example | 55 + .../group_vars/haproxy/keepalived.yml.az.example | 93 + .../group_vars/haproxy/lxc_network.yml.example | 8 + etc/openstack_deploy/openstack_user_config.yml.aio | 10 +- .../openstack_user_config.yml.aio.j2 | 32 - .../openstack_user_config.yml.az.example | 286 ++ .../openstack_user_config.yml.example | 6 +- .../openstack_user_config.yml.multibond.example | 6 +- .../openstack_user_config.yml.pod.example | 12 +- .../openstack_user_config.yml.prod-ceph.example | 6 +- .../openstack_user_config.yml.prod.example | 22 +- .../openstack_user_config.yml.singlebond.example | 6 +- .../openstack_user_config.yml.test.example | 6 +- etc/openstack_deploy/user_networks.yml.az.example | 208 + etc/openstack_deploy/user_variables.yml.az.example | 118 + inventory/dynamic_inventory.py | 52 +- inventory/env.d/neutron.yml | 4 - inventory/env.d/nova.yml | 1 - inventory/env.d/zun.yml | 1 - inventory/group_vars/adjutant_all/source_git.yml | 6 +- inventory/group_vars/all/all.yml | 7 +- inventory/group_vars/all/ceph.yml | 12 +- inventory/group_vars/all/infra.yml | 28 +- inventory/group_vars/all/oslo-messaging.yml | 10 +- inventory/group_vars/all/source_git.yml | 6 +- inventory/group_vars/aodh_all/source_git.yml | 6 +- inventory/group_vars/barbican_all/source_git.yml | 6 +- inventory/group_vars/blazar_all/source_git.yml | 10 +- inventory/group_vars/ceilometer_all/source_git.yml | 6 +- inventory/group_vars/cinder_all/source_git.yml | 6 +- inventory/group_vars/cloudkitty_all/source_git.yml | 6 +- inventory/group_vars/designate_all/source_git.yml | 6 +- inventory/group_vars/glance_all/source_git.yml | 6 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 6 +- inventory/group_vars/horizon_all/source_git.yml | 50 +- inventory/group_vars/ironic_all/source_git.yml | 10 +- inventory/group_vars/keystone_all/source_git.yml | 6 +- inventory/group_vars/magnum_all/source_git.yml | 6 +- inventory/group_vars/manila_all/source_git.yml | 6 +- inventory/group_vars/masakari_all/source_git.yml | 10 +- inventory/group_vars/mistral_all/source_git.yml | 10 +- .../group_vars/murano_all/haproxy_service.yml | 32 - inventory/group_vars/neutron_all/source_git.yml | 40 +- inventory/group_vars/nova_all/source_git.yml | 12 +- inventory/group_vars/octavia_all/source_git.yml | 10 +- inventory/group_vars/placement_all/source_git.yml | 6 +- .../group_vars/sahara_all/haproxy_service.yml | 32 - .../group_vars/senlin_all/haproxy_service.yml | 31 - inventory/group_vars/skyline_all/source_git.yml | 8 +- inventory/group_vars/swift_all/source_git.yml | 6 +- inventory/group_vars/tacker_all/source_git.yml | 6 +- inventory/group_vars/trove_all/source_git.yml | 6 +- inventory/group_vars/utility_all/source_git.yml | 40 +- inventory/group_vars/zun_all/source_git.yml | 14 +- inventory/inventory.ini | 4 - molecule/default/converge.yml | 8 + molecule/default/molecule.yml | 28 + osa_toolkit/generate.py | 79 +- osa_toolkit/manage.py | 8 +- playbooks/defaults/healthchecks-vars.yml | 107 - playbooks/hook-dummy.yml | 3 - playbooks/infra-journal-remote.yml | 17 +- playbooks/listening-port-report.yml | 27 +- playbooks/openstack-resources.yml | 25 +- playbooks/qdrouterd-install.yml | 57 - playbooks/setup-everything.yml | 10 +- .../aa_disable_respect_code-f15967693989df79.yaml | 8 + .../notes/archive_mariadb-2c04a473b25a3bbb.yaml | 11 + ...lometer_polling_overrides-015156f1b67a8d75.yaml | 16 + .../notes/centos_copr-dca96bcade8cfb75.yaml | 6 + ...e_versioned_service_types-75bad8363b5cbff7.yaml | 41 + .../notes/docker_local_mode-a894d151f31f5f6e.yaml | 18 + ...haproxy_custom_errorfiles-500674edcaa6cbb6.yaml | 5 + .../haproxy_sysctl_location-e18310fd96597a6f.yaml | 6 + ..._default_role_name_create-48fb556caa075665.yaml | 12 + .../notes/httpd_common_role-a955fdfe516386ea.yaml | 11 + .../notes/httpd_role_switch-afe7209ffa0a402d.yaml | 6 + .../notes/httpd_role_switch-e43a18b6e82ba61c.yaml | 25 + ..._static_routes_defenition-0625db80bcf2e2ed.yaml | 15 + .../notes/lxb_removed-543fdff51aad6817.yaml | 20 + .../notes/lxc_apparmor_issue-e25bbc97e7f2ba62.yaml | 10 + .../lxc_centos_repo_list-34276eedd0a06560.yaml | 6 + .../network_overrides_only-f54364a799bb20a1.yaml | 9 + .../neutron_uwsgi_re_disable-45f28da6a4e29e54.yaml | 17 + .../osa_scripts_installed-7dedb7288427ef31.yaml | 5 + .../notes/retire-qdrouterd-02a0af00ee9e8b4f.yaml | 18 + .../routing_policy_rules-188c8ff5e8c5450f.yaml | 9 + .../skyline_backend_ssl-cd1db8c8fbf140f0.yaml | 6 + ...ntu_noble_ceph_limitation-dd31bcb4446ee873.yaml | 9 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/conf.py | 6 +- releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 48 - .../locale/en_GB/LC_MESSAGES/releasenotes.po | 1013 ----- scripts/bootstrap-ansible.sh | 10 +- scripts/gate-check-commit.sh | 9 +- scripts/get-ansible-collection-requirements.yml | 106 +- scripts/get-ansible-role-requirements.yml | 99 +- scripts/log-collect.sh | 1 + scripts/openstack-ansible.rc | 2 + scripts/run-upgrade.sh | 4 +- .../upgrade-utilities/deploy-config-changes.yml | 10 + setup.cfg | 3 +- sync/doc/requirements.txt | 16 + sync/gen-projects-list.sh | 78 + test-requirements.txt | 18 +- .../bootstrap-host/tasks/check-requirements.yml | 47 +- .../tasks/detect_data_disk_device.yml | 4 +- .../bootstrap-host/tasks/gather_nodepool_vars.yml | 9 +- .../bootstrap-host/tasks/install_packages.yml | 5 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 40 +- .../bootstrap-host/tasks/prepare_data_disk.yml | 36 +- .../bootstrap-host/tasks/prepare_git_useragent.yml | 4 +- .../bootstrap-host/tasks/prepare_hostname.yml | 7 +- .../tasks/prepare_loopback_btrfs.yml | 6 +- .../tasks/prepare_loopback_cinder.yml | 18 +- .../tasks/prepare_loopback_manila.yml | 14 +- .../bootstrap-host/tasks/prepare_loopback_nova.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 8 +- .../tasks/prepare_loopback_swift.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_zfs.yml | 8 +- .../bootstrap-host/tasks/prepare_networking.yml | 28 +- .../bootstrap-host/tasks/prepare_ssh_keys.yml | 26 +- .../roles/bootstrap-host/tasks/prepare_step_ca.yml | 55 +- .../templates/user_variables.aio.yml.j2 | 5 - .../templates/user_variables_magnum.yml.j2 | 4 +- tox.ini | 34 +- zuul.d/jobs.yaml | 101 +- .../env.d/qdrouterd.yml => zuul.d/nodesets.yaml | 28 +- zuul.d/playbooks/post.yml | 18 +- zuul.d/playbooks/pre-gate-cleanup.yml | 24 +- zuul.d/playbooks/pre-gate-scenario.yml | 18 +- zuul.d/playbooks/pre-osa-aio.yml | 19 +- zuul.d/playbooks/pre-osa-requirements.yml | 133 + zuul.d/playbooks/run.yml | 12 +- zuul.d/project-templates.yaml | 37 +- zuul.d/project.yaml | 1 + 265 files changed, 16994 insertions(+), 7467 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 88615ad25..6ab2ac637 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.2.0,<4.0 # Apache-2.0 +hacking>=3.2.0,<=7.0.0 # Apache-2.0 @@ -10,5 +10,2 @@ virtualenv>=14.0.6 # MIT -# TODO(noonedeadpunk) Upgrade linters versions and drop pycodestyle -# once we stop doing linters check for the integrated repo with -# openstack-ansible-tests/test-ansible-lint.sh -flake8==3.8.3 # MIT -ansible-lint==6.19.0 # MIT +flake8 # MIT +ansible-lint==24.12.2 # MIT @@ -16,0 +14,9 @@ Jinja2>=2.10 # BSD + +# Requirements for molecule jobs +ansible-core==2.17.11 # GPL-3.0 +ansible-compat<25.0.0 # MIT +docker>=7.0.0 # Apache-2.0 +jmespath>=1.0.0 # MIT +molecule==24.12.0 # MIT +molecule-plugins[docker]==23.6.0 # MIT +setuptools>75.0.0 # MIT