We are chuffed to announce the release of: kolla-ansible 12.1.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Added a new haproxy configuration variable, "haproxy_host_ipv4_tcp_retries2", which allows users to modify this kernel option. This option sets maximum number of times a TCP packet is retransmitted in established state before giving up. The default kernel value is 15, which corresponds to a duration of approximately between 13 to 30 minutes, depending on the retransmission timeout. This variable can be used to mitigate an issue with stuck connections in case of VIP failover, see bug 1917068 for details. * Adds the ability to override the automatic detection of *fluentd_version* and *fluentd_binary*. These can now be defined as extra variables. This removes the dependency of having docker configured for config generation. Bug Fixes ********* * Fixes missing region_name in keystone_auth sections. See bug 1933025 for details. * Fixes default Masakari host monitor config to work with other config that Kolla Ansible sets. This sets "disable_ipmi_check" due to "restrict_to_remotes" being set. It prevents the "TypeError" that happened when host monitor had to take action. This does not affect any functionality so far as Kolla Ansible does not manage IPMI credentials in Pacemaker. LP#1933209 * Fixes an issue where "kolla-ansible" exits with a zero exit code when executed with a bogus command name. LP#1929397 * Fixes the container health check for the "ironic_ipxe" container on Debian and Ubuntu systems. LP#1937037 * Fixes an issue with Magnum when TLS is enabled. LP#781062 Other Notes *********** * Following Cinder upstream, support for using ZFSSA with Cinder has been removed. ZFSSA was unsupported in Train and later removed in Ussuri. Changes in kolla-ansible 12.0.0..12.1.0 --------------------------------------- 8c68ced1a Fix exit code with bogus command name 9f13719b2 Fix ironic_ipxe healthcheck on Debian/Ubuntu 38748d2aa Fix Masakari host monitor default config 0f46987d5 Fix typos in release note 198c2c613 docs: Add note about internal VIP when HAProxy is disabled acf08e289 CI: only run cells job on changes to nova role 47f768d68 CI: fix backups Ceph pool name 270b237b3 magnum: Add CA certificate configuration for internal TLS 9bf681dd9 Make it possible to override automatic fluentd version detection 6d3ebe147 CI: Avoid generating a nova key in cephadm scenario bd0bcd75a [CI] Do not set ansible_python_interpreter for Zuul 8521ddca2 Allow user to set sysctl_net_ipv4_tcp_retries2 0e0f9693a Make rabbitmq cluster_partition_handling configurable 24d3228d0 Add missing region_name in keystoneauth sections 86bf12d2f Drop support for Cinder ZFSSA backend Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/defaults/main.yml | 14 ------- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/templates/cinder.conf.j2 | 15 +------ ansible/roles/common/tasks/config.yml | 12 ++++-- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/haproxy/defaults/main.yml | 4 ++ ansible/roles/haproxy/tasks/config-host.yml | 7 ++-- ansible/roles/heat/templates/heat.conf.j2 | 1 + ansible/roles/ironic/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/magnum/templates/magnum.conf.j2 | 10 +++++ ansible/roles/manila/templates/manila.conf.j2 | 1 + .../masakari/templates/masakari-monitors.conf.j2 | 6 +++ ansible/roles/mistral/templates/mistral.conf.j2 | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + ansible/roles/murano/templates/murano.conf.j2 | 3 ++ ansible/roles/neutron/templates/neutron.conf.j2 | 3 ++ ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/templates/octavia.conf.j2 | 1 + .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 1 + ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + .../reference/high-availability/haproxy-guide.rst | 47 ++++++++++++++++++++++ etc/kolla/globals.yml | 3 +- etc/kolla/passwords.yml | 5 --- .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 +++ .../notes/bug-1933209-73e78353cb5c3266.yaml | 11 +++++ ...fault-migration-interface-3cdf30eed98553fd.yaml | 4 +- .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 +++ .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 +++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++++++ ...eb-ironic-ipxe-heathcheck-2ae5fd0537c056ce.yaml | 6 +++ .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 +++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 +++ roles/cephadm/defaults/main.yml | 3 +- tools/kolla-ansible | 2 +- zuul.d/base.yaml | 6 +-- 56 files changed, 209 insertions(+), 71 deletions(-)