We are delighted to announce the release of: kolla-ansible 8.3.0: Ansible Deployment of Kolla containers This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 8.3.0 ^^^^^ New Features ************ * Improves performance of the "common" role by generating all fluentd configuration in a single file. * Improves performance of the "common" role by generating all logrotate configuration in a single file. Upgrade Notes ************* * The default value of "REST_API_REQUIRED_SETTINGS" was synchronized with Horizon. You may want to review settings exposed by the updated configuration. Security Issues *************** * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". Bug Fixes ********* * Add support to use bifrost-deploy behind proxy. It uses existing container_proxy variable. * Fixes handling of */dev/kvm* permissions to be more robust against host-level actions. LP#1681461 * This patch adds "kolla-ansible" internal logrotate config for Logstash. Logstash 2.4 uses integrated in container logrotate configuration which tries to rotate logs in /var/log/logstash while "kolla-ansible" deployed Logstash logs are in /var/log/kolla/logstash. LP#1886787 * Fixes "--configdir" parameter to apply to default "passwords.yml" location. LP#1887180 * This patch fixes a bug, when kolla_toolbox Ansible module failed due to Python deprecation warnings caused by paramiko/cryptography. LP#1888657 * Fixes "haproxy_single_service_split" template to work with default for "mode" ("http"). LP#1896591 * Fixed invalid fernet cron file path on Debian/Ubuntu from "/var/spool/cron/crontabs/root/fernet-cron" to "/var/spool/cron/crontabs/root". LP#1898765 * Add with_first_found on placement for placement-api wsgi configuration to allow overwrite from users. LP#1898766 * Fixes issues with some CloudKitty commands trying to connect to an external TLS endpoint using HTTP. LP#1888544 * The "admin-openrc.sh" file generated by "kolla-ansible post- deploy" was previously created with "root:root" ownership and "644" permissions. This would allow anyone with access to the same directory to read the file, including the admin credentials. The ownership of "admin-openrc.sh" is now set to the user executing "kolla-ansible", and the file is assigned a mode of "600". This change can be applied by running "kolla-ansible post-deploy". * Fixes an issue with fluentd deployment when there are no changes to the container's configuration. LP#1904721 * Fixes an issue where Keystone Fernet key rotation may fail due to permission denied error if the Keystone rotation happens before the Keystone container starts. LP#1888512 * Fixes LP#1892210 where the number of open connections to Memcached from "neutron-server" would grow over time until reaching the maximum set by "memcached_connection_limit" (5000 by default), at which point the Memcached instance would stop working. * Fixes an issue with Octavia deployment caused by a reference to an undefined variable, "openstack_cacert". LP#1888003 * An issue where when Kafka default topic creation was used to create a Kafka topic, no redundant replicas were created in a multi- node cluster. LP#1888522. This affects Monasca which uses Kafka, and was previously masked by the legacy Kafka client used by Monasca which has since been upgraded in Ussuri. Monasca users with multi- node Kafka clusters should consultant the Kafka documentation to increase the number of replicas. * Fixes an issue where the "br_netfilter" kernel module was not loaded on compute hosts. LP#1886796 * Reduce the use of SQLAlchemy connection pooling, to improve service reliability during a failover of the controller with the internal VIP. LP#1896635 * No longer configures the Prometheus OpenStack exporter to use the "prometheus" Docker volume, which was never required. * Updates the default value of "REST_API_REQUIRED_SETTINGS" in Horizon "local_settings", which enables some features such as selecting the default boot source for instances. LP#1891024 Changes in kolla-ansible 8.2.0..8.3.0 ------------------------------------- 7467b7db9 fluentd: Remove conditions from handler 9e4392cae Fix permission denied during Fernet key rotation f97a0eea1 Fix fernet cron path on Ubuntu/Debian 8fb75f24b Delete the /var/log/kolla directory should use sudo 56da6814e Performance: use a single config file for fluentd 4646c4891 Performance: use a single config file for logrotate 6cc7d4234 Apply bool filter to all enable_prometheus_* variables 300f31300 Performance: use import_tasks for register and bootstrap a50f72358 Allow overwrite of placement-api wsgi config 343bdf0ce Add 'baremetal' to mechanism_drivers when using ironic+linuxbridge 9ee209080 Reduce the use of SQLAlchemy connection pooling 917bdfbf0 Fix default mode in haproxy_single_service_split 1817ed500 Remove unused configuration for prometheus-openstack-exporter c7e63f362 Performance: replace unconditional include_tasks with import_tasks 8a081b260 Synchronize REST_API_REQUIRED_SETTINGS with Horizon 2e3ccb15d Fix test-ironic.sh not catching errors c9845c0e6 Add default value for kolla_internal_address variable 322f70d5b Fix external mariadb documentation for database_user 185ba1c03 add region name for tasks 7f7b8a334 change the timezone precheck task's condition 7b512d633 Add workaround for keystonemiddleware/neutron memcached issue 7f2b16962 Fix ownership and permissions of admin-openrc.sh 50947b418 Add support to use bifrost-deploy behind proxy 49f62c8ae Add missing mistral services log files 25add4003 Fix fluentd warnings caused by "type copy" 460066721 [CI] Temporarily block new Ansible 1d5318a3e Fix play hosts for ironic, monasca, neutron, nova af744bbdb Set Kafka default replication factor 07d1a4443 Fix some CloudKitty API responses when behind SSL bc7fcab66 Performance: remove unnecessary conditions from includes 2c0284e8b Update glance configuration file for backend bbaa82619 Ignore Python warnings in kolla-toolbox b06676662 Make /dev/kvm permissions handling more robust 8a9e435a3 octavia: fix undefined variable in register.yml 29b6bc128 Load br_netfilter module in nova-cell role 87e7df1f9 Support editable virtualenv installation for development da1267e60 Fix Logstash 2.4 log rotation c6e813ee8 Evaluate PASSWORDS_FILE later Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 4 +- ansible/post-deploy.yml | 9 +- ansible/roles/aodh/tasks/bootstrap.yml | 2 +- ansible/roles/aodh/tasks/deploy.yml | 12 +- ansible/roles/aodh/tasks/reconfigure.yml | 2 +- ansible/roles/aodh/tasks/upgrade.yml | 4 +- ansible/roles/aodh/templates/aodh.conf.j2 | 2 + ansible/roles/barbican/tasks/bootstrap.yml | 2 +- ansible/roles/barbican/tasks/deploy.yml | 11 +- ansible/roles/barbican/tasks/reconfigure.yml | 2 +- ansible/roles/barbican/tasks/upgrade.yml | 4 +- .../roles/baremetal/tasks/bootstrap-servers.yml | 6 +- ansible/roles/bifrost/tasks/deploy.yml | 6 +- ansible/roles/bifrost/tasks/reconfigure.yml | 2 +- ansible/roles/bifrost/tasks/start.yml | 1 + ansible/roles/bifrost/tasks/upgrade.yml | 4 +- ansible/roles/blazar/tasks/bootstrap.yml | 2 +- ansible/roles/blazar/tasks/deploy.yml | 10 +- ansible/roles/blazar/tasks/reconfigure.yml | 2 +- ansible/roles/blazar/tasks/upgrade.yml | 4 +- ansible/roles/blazar/templates/blazar.conf.j2 | 2 + ansible/roles/ceilometer/tasks/bootstrap.yml | 2 +- ansible/roles/ceilometer/tasks/deploy.yml | 10 +- ansible/roles/ceilometer/tasks/reconfigure.yml | 2 +- ansible/roles/ceilometer/tasks/upgrade.yml | 4 +- ansible/roles/chrony/tasks/deploy.yml | 2 +- ansible/roles/chrony/tasks/reconfigure.yml | 2 +- ansible/roles/chrony/tasks/upgrade.yml | 2 +- ansible/roles/cinder/tasks/bootstrap.yml | 2 +- ansible/roles/cinder/tasks/deploy.yml | 19 +- ansible/roles/cinder/tasks/reconfigure.yml | 2 +- ansible/roles/cinder/tasks/upgrade.yml | 4 +- ansible/roles/cinder/templates/cinder.conf.j2 | 2 + ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +- ansible/roles/cloudkitty/tasks/deploy.yml | 10 +- ansible/roles/cloudkitty/tasks/reconfigure.yml | 2 +- ansible/roles/cloudkitty/tasks/upgrade.yml | 4 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 5 + ansible/roles/collectd/tasks/deploy.yml | 2 +- ansible/roles/collectd/tasks/reconfigure.yml | 2 +- ansible/roles/collectd/tasks/upgrade.yml | 2 +- ansible/roles/common/defaults/main.yml | 1 + ansible/roles/common/filter_plugins/filters.py | 47 +++ ansible/roles/common/handlers/main.yml | 8 - ansible/roles/common/tasks/config.yml | 408 ++++++++------------- ansible/roles/common/tasks/deploy.yml | 4 +- ansible/roles/common/tasks/reconfigure.yml | 2 +- ansible/roles/common/tasks/upgrade.yml | 2 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 46 ++- .../common/templates/cron-logrotate-global.conf.j2 | 5 +- .../templates/cron-logrotate-logstash.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 75 +--- ansible/roles/common/templates/fluentd.json.j2 | 47 +-- ansible/roles/common/templates/td-agent.conf.j2 | 49 ++- ansible/roles/cyborg/tasks/bootstrap.yml | 2 +- ansible/roles/cyborg/tasks/deploy.yml | 11 +- ansible/roles/cyborg/tasks/reconfigure.yml | 2 +- ansible/roles/cyborg/tasks/upgrade.yml | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 + ansible/roles/designate/tasks/bootstrap.yml | 2 +- ansible/roles/designate/tasks/deploy.yml | 18 +- ansible/roles/designate/tasks/reconfigure.yml | 2 +- ansible/roles/designate/tasks/update_pools.yml | 3 +- ansible/roles/designate/tasks/upgrade.yml | 6 +- ansible/roles/elasticsearch/tasks/deploy.yml | 4 +- ansible/roles/elasticsearch/tasks/reconfigure.yml | 2 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 4 +- ansible/roles/etcd/tasks/deploy.yml | 2 +- ansible/roles/etcd/tasks/reconfigure.yml | 2 +- ansible/roles/etcd/tasks/upgrade.yml | 2 +- ansible/roles/freezer/tasks/deploy.yml | 10 +- ansible/roles/freezer/tasks/reconfigure.yml | 2 +- ansible/roles/freezer/tasks/upgrade.yml | 4 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/tasks/bootstrap.yml | 2 +- ansible/roles/glance/tasks/deploy.yml | 12 +- ansible/roles/glance/tasks/legacy_upgrade.yml | 4 +- ansible/roles/glance/tasks/reconfigure.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/gnocchi/tasks/bootstrap.yml | 2 +- ansible/roles/gnocchi/tasks/deploy.yml | 11 +- ansible/roles/gnocchi/tasks/reconfigure.yml | 2 +- ansible/roles/gnocchi/tasks/upgrade.yml | 4 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 3 +- ansible/roles/grafana/tasks/deploy.yml | 6 +- ansible/roles/grafana/tasks/reconfigure.yml | 2 +- ansible/roles/grafana/tasks/upgrade.yml | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 2 +- ansible/roles/haproxy/tasks/deploy.yml | 4 +- ansible/roles/haproxy/tasks/reconfigure.yml | 2 +- ansible/roles/haproxy/tasks/upgrade.yml | 4 +- ansible/roles/heat/tasks/bootstrap.yml | 2 +- ansible/roles/heat/tasks/deploy.yml | 14 +- ansible/roles/heat/tasks/reconfigure.yml | 2 +- ansible/roles/heat/tasks/upgrade.yml | 4 +- ansible/roles/heat/templates/heat.conf.j2 | 2 + ansible/roles/horizon/tasks/bootstrap.yml | 2 +- ansible/roles/horizon/tasks/deploy.yml | 2 +- ansible/roles/horizon/tasks/reconfigure.yml | 2 +- ansible/roles/horizon/tasks/upgrade.yml | 2 +- ansible/roles/horizon/templates/local_settings.j2 | 12 +- ansible/roles/influxdb/tasks/deploy.yml | 2 +- ansible/roles/influxdb/tasks/reconfigure.yml | 2 +- ansible/roles/influxdb/tasks/upgrade.yml | 2 +- ansible/roles/ironic/tasks/bootstrap.yml | 2 +- ansible/roles/ironic/tasks/deploy.yml | 20 +- ansible/roles/ironic/tasks/legacy_upgrade.yml | 6 +- ansible/roles/ironic/tasks/reconfigure.yml | 2 +- ansible/roles/ironic/tasks/rolling_upgrade.yml | 8 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/ironic/templates/ironic.conf.j2 | 2 + ansible/roles/iscsi/tasks/deploy.yml | 4 +- ansible/roles/iscsi/tasks/reconfigure.yml | 2 +- ansible/roles/iscsi/tasks/upgrade.yml | 2 +- ansible/roles/kafka/tasks/deploy.yml | 2 +- ansible/roles/kafka/tasks/reconfigure.yml | 2 +- ansible/roles/kafka/tasks/upgrade.yml | 2 +- .../kafka/templates/kafka.server.properties.j2 | 1 + ansible/roles/karbor/tasks/bootstrap.yml | 2 +- ansible/roles/karbor/tasks/deploy.yml | 11 +- ansible/roles/karbor/tasks/reconfigure.yml | 2 +- ansible/roles/karbor/tasks/upgrade.yml | 4 +- ansible/roles/karbor/templates/karbor.conf.j2 | 2 + ansible/roles/keystone/tasks/bootstrap.yml | 2 +- ansible/roles/keystone/tasks/deploy.yml | 8 +- ansible/roles/keystone/tasks/reconfigure.yml | 2 +- ansible/roles/keystone/tasks/register.yml | 1 + ansible/roles/keystone/tasks/upgrade.yml | 2 +- .../keystone/templates/keystone-fernet.json.j2 | 9 +- .../roles/keystone/templates/keystone-ssh.json.j2 | 7 + ansible/roles/keystone/templates/keystone.conf.j2 | 2 + ansible/roles/kibana/tasks/deploy.yml | 2 +- ansible/roles/kibana/tasks/reconfigure.yml | 2 +- ansible/roles/kibana/tasks/upgrade.yml | 2 +- ansible/roles/kuryr/tasks/deploy.yml | 4 +- ansible/roles/kuryr/tasks/reconfigure.yml | 2 +- ansible/roles/kuryr/tasks/upgrade.yml | 2 +- ansible/roles/magnum/tasks/bootstrap.yml | 2 +- ansible/roles/magnum/tasks/deploy.yml | 10 +- ansible/roles/magnum/tasks/reconfigure.yml | 2 +- ansible/roles/magnum/tasks/register.yml | 3 + ansible/roles/magnum/tasks/upgrade.yml | 4 +- ansible/roles/magnum/templates/magnum.conf.j2 | 2 + ansible/roles/manila/tasks/bootstrap.yml | 2 +- ansible/roles/manila/tasks/deploy.yml | 12 +- ansible/roles/manila/tasks/reconfigure.yml | 2 +- ansible/roles/manila/tasks/upgrade.yml | 4 +- ansible/roles/manila/templates/manila.conf.j2 | 2 + ansible/roles/mariadb/tasks/bootstrap.yml | 2 +- ansible/roles/mariadb/tasks/deploy.yml | 8 +- ansible/roles/mariadb/tasks/reconfigure.yml | 2 +- ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/memcached/tasks/deploy.yml | 2 +- ansible/roles/memcached/tasks/reconfigure.yml | 2 +- ansible/roles/memcached/tasks/upgrade.yml | 2 +- ansible/roles/mistral/tasks/bootstrap.yml | 2 +- ansible/roles/mistral/tasks/deploy.yml | 12 +- ansible/roles/mistral/tasks/reconfigure.yml | 2 +- ansible/roles/mistral/tasks/upgrade.yml | 4 +- ansible/roles/mistral/templates/mistral.conf.j2 | 2 + ansible/roles/monasca/tasks/bootstrap.yml | 2 +- ansible/roles/monasca/tasks/deploy.yml | 35 +- ansible/roles/monasca/tasks/reconfigure.yml | 2 +- ansible/roles/monasca/tasks/upgrade.yml | 4 +- .../monasca/templates/monasca-api/api.conf.j2 | 2 + ansible/roles/multipathd/tasks/deploy.yml | 4 +- ansible/roles/multipathd/tasks/reconfigure.yml | 2 +- ansible/roles/multipathd/tasks/upgrade.yml | 4 +- ansible/roles/murano/tasks/bootstrap.yml | 2 +- ansible/roles/murano/tasks/deploy.yml | 14 +- ansible/roles/murano/tasks/reconfigure.yml | 2 +- ansible/roles/murano/tasks/upgrade.yml | 6 +- ansible/roles/murano/templates/murano.conf.j2 | 2 + ansible/roles/neutron/tasks/bootstrap.yml | 2 +- ansible/roles/neutron/tasks/deploy.yml | 10 +- ansible/roles/neutron/tasks/legacy_upgrade.yml | 6 +- ansible/roles/neutron/tasks/reconfigure.yml | 2 +- ansible/roles/neutron/tasks/rolling_upgrade.yml | 4 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 2 +- ansible/roles/neutron/templates/neutron.conf.j2 | 5 + ansible/roles/nova/defaults/main.yml | 5 + ansible/roles/nova/tasks/config-host.yml | 36 ++ ansible/roles/nova/tasks/deploy.yml | 11 +- ansible/roles/nova/tasks/reconfigure.yml | 2 +- ansible/roles/nova/tasks/rolling_upgrade.yml | 2 +- ansible/roles/nova/templates/99-kolla-kvm.rules.j2 | 4 + ansible/roles/nova/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/tasks/bootstrap.yml | 2 +- ansible/roles/octavia/tasks/deploy.yml | 12 +- ansible/roles/octavia/tasks/reconfigure.yml | 2 +- ansible/roles/octavia/tasks/register.yml | 3 +- ansible/roles/octavia/tasks/upgrade.yml | 4 +- ansible/roles/octavia/templates/octavia.conf.j2 | 2 + ansible/roles/opendaylight/tasks/deploy.yml | 4 +- ansible/roles/opendaylight/tasks/reconfigure.yml | 2 +- ansible/roles/opendaylight/tasks/upgrade.yml | 4 +- ansible/roles/openvswitch/tasks/deploy.yml | 6 +- ansible/roles/openvswitch/tasks/reconfigure.yml | 2 +- ansible/roles/openvswitch/tasks/upgrade.yml | 6 +- ansible/roles/ovs-dpdk/tasks/deploy.yml | 2 +- ansible/roles/ovs-dpdk/tasks/reconfigure.yml | 2 +- ansible/roles/ovs-dpdk/tasks/upgrade.yml | 2 +- ansible/roles/panko/tasks/bootstrap.yml | 2 +- ansible/roles/panko/tasks/deploy.yml | 6 +- ansible/roles/panko/tasks/reconfigure.yml | 2 +- ansible/roles/panko/tasks/upgrade.yml | 4 +- ansible/roles/panko/templates/panko.conf.j2 | 2 + ansible/roles/placement/tasks/bootstrap.yml | 2 +- ansible/roles/placement/tasks/config.yml | 6 +- ansible/roles/placement/tasks/deploy.yml | 8 +- ansible/roles/placement/tasks/reconfigure.yml | 2 +- ansible/roles/placement/tasks/upgrade.yml | 8 +- .../roles/placement/templates/placement.conf.j2 | 3 +- ansible/roles/prechecks/tasks/datetime_checks.yml | 2 +- ansible/roles/prechecks/tasks/main.yml | 10 +- ansible/roles/prometheus/defaults/main.yml | 7 +- ansible/roles/prometheus/tasks/deploy.yml | 4 +- ansible/roles/prometheus/tasks/reconfigure.yml | 2 +- ansible/roles/prometheus/tasks/upgrade.yml | 2 +- .../prometheus-openstack-exporter.json.j2 | 5 - .../prometheus/templates/prometheus-server.json.j2 | 2 +- ansible/roles/qdrouterd/tasks/deploy.yml | 4 +- ansible/roles/qdrouterd/tasks/reconfigure.yml | 2 +- ansible/roles/qdrouterd/tasks/upgrade.yml | 2 +- ansible/roles/rabbitmq/tasks/deploy.yml | 4 +- ansible/roles/rabbitmq/tasks/reconfigure.yml | 2 +- ansible/roles/rabbitmq/tasks/upgrade.yml | 2 +- ansible/roles/rally/tasks/bootstrap.yml | 2 +- ansible/roles/rally/tasks/deploy.yml | 4 +- ansible/roles/rally/tasks/reconfigure.yml | 2 +- ansible/roles/rally/tasks/upgrade.yml | 4 +- ansible/roles/rally/templates/rally.conf.j2 | 2 + ansible/roles/redis/tasks/deploy.yml | 2 +- ansible/roles/redis/tasks/reconfigure.yml | 2 +- ansible/roles/redis/tasks/upgrade.yml | 2 +- ansible/roles/sahara/tasks/bootstrap.yml | 2 +- ansible/roles/sahara/tasks/deploy.yml | 10 +- ansible/roles/sahara/tasks/reconfigure.yml | 2 +- ansible/roles/sahara/tasks/upgrade.yml | 4 +- ansible/roles/sahara/templates/sahara.conf.j2 | 2 + ansible/roles/searchlight/tasks/bootstrap.yml | 2 +- ansible/roles/searchlight/tasks/deploy.yml | 6 +- ansible/roles/searchlight/tasks/reconfigure.yml | 2 +- ansible/roles/searchlight/tasks/upgrade.yml | 4 +- ansible/roles/senlin/tasks/bootstrap.yml | 2 +- ansible/roles/senlin/tasks/deploy.yml | 10 +- ansible/roles/senlin/tasks/reconfigure.yml | 2 +- ansible/roles/senlin/tasks/upgrade.yml | 4 +- ansible/roles/senlin/templates/senlin.conf.j2 | 2 + ansible/roles/skydive/tasks/deploy.yml | 4 +- ansible/roles/skydive/tasks/reconfigure.yml | 2 +- ansible/roles/skydive/tasks/upgrade.yml | 2 +- ansible/roles/solum/tasks/bootstrap.yml | 2 +- ansible/roles/solum/tasks/deploy.yml | 12 +- ansible/roles/solum/tasks/reconfigure.yml | 2 +- ansible/roles/solum/tasks/upgrade.yml | 4 +- ansible/roles/solum/templates/solum.conf.j2 | 2 + ansible/roles/storm/tasks/deploy.yml | 2 +- ansible/roles/storm/tasks/reconfigure.yml | 2 +- ansible/roles/storm/tasks/upgrade.yml | 2 +- ansible/roles/swift/tasks/deploy.yml | 8 +- ansible/roles/swift/tasks/legacy_upgrade.yml | 4 +- ansible/roles/swift/tasks/reconfigure.yml | 2 +- ansible/roles/swift/tasks/rolling_upgrade.yml | 2 +- ansible/roles/tacker/tasks/bootstrap.yml | 2 +- ansible/roles/tacker/tasks/deploy.yml | 12 +- ansible/roles/tacker/tasks/reconfigure.yml | 2 +- ansible/roles/tacker/tasks/upgrade.yml | 4 +- ansible/roles/tacker/templates/tacker.conf.j2 | 2 + ansible/roles/telegraf/tasks/deploy.yml | 2 +- ansible/roles/telegraf/tasks/reconfigure.yml | 2 +- ansible/roles/telegraf/tasks/upgrade.yml | 2 +- ansible/roles/tempest/tasks/deploy.yml | 2 +- ansible/roles/tempest/tasks/reconfigure.yml | 2 +- ansible/roles/tempest/tasks/upgrade.yml | 2 +- ansible/roles/trove/tasks/bootstrap.yml | 2 +- ansible/roles/trove/tasks/deploy.yml | 11 +- ansible/roles/trove/tasks/reconfigure.yml | 2 +- ansible/roles/trove/tasks/upgrade.yml | 4 +- .../roles/trove/templates/trove-conductor.conf.j2 | 2 + .../trove/templates/trove-taskmanager.conf.j2 | 2 + ansible/roles/trove/templates/trove.conf.j2 | 2 + ansible/roles/vitrage/tasks/bootstrap.yml | 2 +- ansible/roles/vitrage/tasks/deploy.yml | 12 +- ansible/roles/vitrage/tasks/reconfigure.yml | 2 +- ansible/roles/vitrage/tasks/register.yml | 1 + ansible/roles/vitrage/tasks/upgrade.yml | 4 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 2 + ansible/roles/vmtp/tasks/deploy.yml | 3 +- ansible/roles/vmtp/tasks/reconfigure.yml | 2 +- ansible/roles/vmtp/tasks/upgrade.yml | 2 +- ansible/roles/watcher/tasks/bootstrap.yml | 2 +- ansible/roles/watcher/tasks/deploy.yml | 11 +- ansible/roles/watcher/tasks/reconfigure.yml | 2 +- ansible/roles/watcher/tasks/upgrade.yml | 4 +- ansible/roles/watcher/templates/watcher.conf.j2 | 2 + ansible/roles/zookeeper/tasks/deploy.yml | 2 +- ansible/roles/zookeeper/tasks/reconfigure.yml | 2 +- ansible/roles/zookeeper/tasks/upgrade.yml | 2 +- ansible/roles/zun/tasks/bootstrap.yml | 2 +- ansible/roles/zun/tasks/deploy.yml | 10 +- ansible/roles/zun/tasks/reconfigure.yml | 2 +- ansible/roles/zun/tasks/upgrade.yml | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 2 + ansible/site.yml | 9 +- .../reference/databases/external-mariadb-guide.rst | 4 +- ...frost-deploy-behind-proxy-e41f84e8d49a9ddf.yaml | 5 + .../notes/bug-1681461-761f0cdf71bcb962.yaml | 6 + .../notes/bug-1886787-013164ffc2f67264.yaml | 9 + .../notes/bug-1887180-89450a4185c7449d.yaml | 6 + .../notes/bug-1888657-44e2f6f3aedc20ba.yaml | 6 + .../notes/bug-1896591-47c829f8b72d567a.yaml | 6 + .../notes/bug-1898765-73881932a2ef1d32.yaml | 7 + .../notes/bug-1898766-ffc55c97230d8221.yaml | 6 + .../cloudkitty-proxy-headers-da4ea3297063e2e8.yaml | 5 + ...min-openrc-ownership-mode-310d89a6f50a9640.yaml | 19 + ...ix-fluentd-without-change-7b310b85955966bf.yaml | 6 + ...fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml | 7 + ...emcached-connection-issue-84f5affa217b4612.yaml | 8 + .../fix-octavia-register-f3bd4a66bc2f637a.yaml | 6 + .../fluentd-single-config-d5ae95fecbfb6e3e.yaml | 5 + ...default-topic-replication-0debd5eb89f0c50d.yaml | 11 + .../notes/load-br-netfilter-4ce9facd93e96af7.yaml | 6 + .../logrotate-single-config-663d6bf154218380.yaml | 5 + ...uce-db-connection-pooling-b44da77eaa390f22.yaml | 6 + ...e-from-openstack-exporter-f6bb5da3093abef8.yaml | 5 + ...est-api-required-settings-099875e53248b62c.yaml | 14 + tools/cleanup-containers | 2 +- tools/kolla-ansible | 9 +- tools/setup_gate.sh | 4 +- 333 files changed, 1024 insertions(+), 1045 deletions(-)