We enthusiastically announce the release of: kayobe 12.10.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.10.0 ^^^^^^^ Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Adds missing "disable-selinux" element when building Rocky Linux overcloud host disk images. * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". * Deploys "prometheus-elasticsearch-exporter" on hosts of the "opensearch" group, resolving failures to connect to OpenSearch when the "elasticsearch" and "opensearch" groups are different. Changes in kayobe 12.9.0..12.10.0 --------------------------------- 69ba8785 Ensure git is present before checkout tasks b9cea681 Stop NetworkManager from overriding resolv.conf 2c625dd5 Fix gateway assignment when seed SNAT is disabled aa7f7f36 Clean up release notes 1c45e8b1 Sync Kolla Ansible feature flags for stable/yoga 192e08da docs: add information about enabling TLS to automated guide afd9dec5 docs: the page 'Editable installs' has moved 2e309ef0 Remove kolla_enable_host_ntp variable 17f6b866 CI: Run configuration dump against localhost b2dd82da Use latest published CentOS Stream 8 image 27114922 Fix configuration dump with inline encrypted variables a14d05d5 Honor custom ssh args in kayobe-ansible-user.yml 0bb3ad8a kolla-bifrost: Add precheck for inspection allocation pool 698c281a Improve neutron images regex 4f41f170 Run elasticsearch exporter on opensearch hosts too f2f85fa7 Generate local Kolla Ansible config in check mode 89994fe7 dev: Improve error checking for config check functions cad48d1d Fix setting kolla_admin_openrc_cacert f14f10d5 Fix an issue when user forgot combine custom passwords 9b8ed55a Add retries to get_url and uri tasks 18627811 Add seed_deploy_containers_registry_attempt_login 0f8b8d08 Allow overriding earlier use of NetworkManager a25dd224 Fix Launchpad bug URL 8a1aa4dc Resolve slow fact gathering when seed SNAT is off cf78d2e7 Fix last return value in _get_base_path d2f84443 Fix condition for enabling disable-selinux element Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/infra-vms | 4 +- ansible/group_vars/all/kolla | 18 ++++-- ansible/group_vars/all/overcloud-dib | 2 +- ansible/group_vars/all/seed | 4 ++ ansible/group_vars/all/seed-vm | 4 +- ansible/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 1 - ansible/kolla-bifrost-hostvars.yml | 8 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 10 +--- .../kolla-ansible/templates/kolla/globals.yml | 7 +-- .../kolla-ansible/templates/overcloud-services.j2 | 1 + ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 6 ++ ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- ansible/roles/veth/defaults/main.yml | 2 + ansible/roles/veth/tasks/RedHat.yml | 4 +- dev/functions | 22 ++++---- .../configuration/reference/kolla-ansible.rst | 56 ++++++++++-------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/infra-vms.yml | 2 +- etc/kayobe/kolla.yml | 14 ++++- etc/kayobe/seed-vm.yml | 2 +- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 19 ++++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ ...linux-overcloud-dib-rocky-7c381912c3dfbc09.yaml | 5 ++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ ...earch-exporter-opensearch-cb7791220be58055.yaml | 6 ++ ...centos-cloud-image-latest-b967c585a23d1615.yaml | 5 ++ 53 files changed, 483 insertions(+), 98 deletions(-)