We are excited to announce the release of: kolla-ansible 12.7.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.7.0 ^^^^^^ Security Issues *************** * Kolla Ansible used to run Ironic's tftpd as an (unprivileged) root user. Now, it will explicitly use the nobody user. Bug Fixes ********* * Fixes 1982777. Set multipathd user_friendly_names to "no" to make os-brick able to resize volumes online. Adds ability to override multipathd config. LP#1982777 * Fixed bug #1987982 (https://bugs.launchpad.net/kolla- ansible/+bug/1987982) This bug caused the database log_bin_trust_function_creators variable not to be set back to "OFF" after a keystone upgrade. * Fixes an issue with Gnocchi when gnocchi-statsd is disabled. LP#1926914 * Fixes an issue where ping might not be installed on some systems, causing HAProxy prechecks to fail. * If "ironic_enabled_notification_topics" is set to "true", "ironic_notification_level" is set to "info" in order to ensure that Ironic actually sends out notifications. See bug 1969826 (https://bugs.launchpad.net/kolla- ansible/+bug/1969826) for details. Changes in kolla-ansible 12.6.0..12.7.0 --------------------------------------- 717a43c28 Fix haproxy prechecks after deployment 42c3a6abf keystone: Remove redundant 'when' c36c8983a [security] Make Ironic tftpd run as nobody a5d812b35 packages: install iputils for ping 0c53d56fa gnocchi: fix external ceph integration when gnocchi-statsd is disabled 4fafc214b Fix nova online volume resize with multipathd c4857a79a Set the ironic notification level Diffstat (except docs and test files) ------------------------------------- ansible/roles/baremetal/defaults/main.yml | 2 ++ ansible/roles/gnocchi/tasks/external_ceph.yml | 37 ++++++++++------------ ansible/roles/haproxy/tasks/precheck.yml | 2 +- ansible/roles/ironic/templates/ironic-pxe.json.j2 | 2 +- ansible/roles/ironic/templates/ironic.conf.j2 | 4 +++ ansible/roles/keystone/handlers/main.yml | 1 - ansible/roles/keystone/tasks/upgrade.yml | 1 - ansible/roles/multipathd/tasks/config.yml | 17 ++++++---- .../roles/multipathd/templates/multipath.conf.j2 | 2 +- .../notes/bug-1982777-0cac9753aa18a037.yaml | 8 +++++ ...nction_creators-variables-8628098891513dac.yaml | 6 ++++ .../notes/fix-gnocchi-statsd-a56c789a3da758a6.yaml | 5 +++ .../notes/install-iputils-50da7016788f413c.yaml | 5 +++ ...ironic-notification-level-a23db99c66c4b752.yaml | 9 ++++++ .../notes/ironic-tftp-nobody-835803ba36398ea3.yaml | 6 ++++ 15 files changed, 76 insertions(+), 31 deletions(-)