We are satisfied to announce the release of: openstack-ansible 22.0.0: Ansible playbooks for deploying OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 22.0.0 ^^^^^^ New Features ************ * Add "horizon_allowed_hosts" to be able to configure django ALLOWED_HOSTS. The default is still the same as it was but you can create a list of allowed hosts in "/etc/openstack_deploy/user_variables.yml". to set the correct value, see https://docs.djangoproject.com/en/dev/ref/settings /#allowed-hosts for more details. * It is now possible to have a service which only have a frontend. by using *haproxy_frontend_only* inside your service. * Add the possibility to have a haproxy_frontend_raw entry to control haproxy config for the frontend, the entry will be literally copied in to the service. You can set a list under the key *haproxy_frontend_raw* * Added new variable "haproxy_hatop_install", that allows to conditionally enable or disable hatop installation. Upgrade Notes ************* * Variable "haproxy_hatop_downloader" has been removed, Deployers supposed to use "haproxy_hatop_download_url" override if needed to install in deployments with limited internet connection. Changes in openstack-ansible 21.0.0.0rc1..22.0.0 ------------------------------------------------ 3c4eaa3fd Bump Victoria for the release 49dc0f496 Gather minimal facts to use ansible_distribution f8f4c9b41 Set force option to false by default adac359d4 Bump ansible version to 2.10.4 7a0ca0b56 Fix keystone IDP setup e2eaac58b Update deploy guide to reflect the current status of OSA 2e02dd29a Fix documentation links b86347c21 Fix config_template trackbranch 55fdecb20 Update TOX_CONSTRAINTS_FILE for stable/victoria b020596f3 Update .gitreview for stable/victoria ac43c0ce9 Bump OSA for RC1 b29caa7f6 Fix galera link in aio quickstart guide 4761d0f29 Remove *_git_project_group variables f3dfc0b07 Bump SHAs for master 627a04482 Ensure kuryr repo is available within CI images d1b50915c Make container_bridge optional for provider networks c17d811fa Apply /etc/environment for runtime after adjustment 5204e939f Add security.txt to haproxy frontend e8912ecd6 Cleanup group_vars 80acd1000 Update doc8 version f553efcd9 Remove octavia_ssh_key_name override 47b99273f Add Octavia SSH key creation test 347ec0d90 Do not warn about incorrect group naming cea6a459b Do not print btrfs error in log 0f352559f Decrease amphora image RAM for CI ba8fd1350 Set reasonable default for octavia_ceilometer_enabled ce593d825 Update variables for default Zun deployments and AIO 9949f3fb4 Added Openstack Adjutant role deployment 380b3b102 Bump SHAs for master 469b7d66b Use unittest.mock instead of mock 427d5f2ec Add Zun CI requirement to Zuul required projects 6287cad77 Fix networking_nsx_git_track_branch 03353d998 Add magnum tempest URL 461071f1b Added Netplan examples for a Openstack Infrastructure node. 0cce99df8 Make the different methods of integrating with a ceph cluster clearer ad81ab561 Pin SHA of murano-dashboard so it is controlled by OSA releases 83e230cf1 Bump calico version e675912f6 Bump SHAs for master 83eaf03d9 Add default simple key to secrets af66ffe76 Unfreeze roles 33fdc3fbc Freeze roles for the milestone dab4941aa Add neutron missing drivers bump bf10b55c9 Use parallel git clone fe95e7b98 Set service region for masakari f9c51dbce [doc] Mention uwsgi overrides in doc 5b9aa902f Bump ansible version to 2.10.3 19ccee7dd Move nspawn to unmaintained state 215bc46f8 Improve repo server haproxy healthcheck to verify repo synchronisation 08066c181 Disable manila 2 vms tempest scenario 83a9e5bfe Bump SHAs for master 457447431 Setup keystone sp/idp after db contract 2fc0afec7 Cover nova metadata with SSL 857169a8a Run hardening after container deployment f2873ddbd Actually destroy container even if keeping data 57ac2b03c Add secret for galera mariadb backup users password 77bb885d0 Make collections installation more reliable b3caf5c91 Add doc for Docker Alpine deployment host 5c37076ba Imported Translations from Zanata c0d8e2397 Fix manila tempest tests 6bf107e7b Fail if we're trying to use distro path for bionic a05e5de56 Remove Centos-7 support 54a4b4e42 Remove glance_registry from inventory d1286267b Deprecate os_congress role ad432e115 Fix infra jobs ef806bc74 Actually use ANSIBLE_FORKS in openstack-ansible.rc cc1cb3ad3 IP addresses in examples were changed 97f249f3f Add infra testing scenario 4b8a3b05b Use haproxy for metal deployments 4f7aa0ef8 Update integrated ansible-lint rules ccad60bc6 Imported Translations from Zanata a0761a0e6 Simplify path for letsencrypt usage abb20e728 Remove "when" statement from vars_prompt ea9e4883c Use nodepool epel mirror in CI for systemd-networkd package eae210982 Fix octavia tempest tests 650f018fd Switch integrated linters to focal 7ec0a966a Convert lxc2 config keys to lxc3 format ed5ecab20 Fix focal ceph jobs ec3233f9f Update ansible-lint==4.3.5, flake8==3.8.3, bashate>=0.5.1 353d69886 Add link to configuration example for Ceph configuration from files. 84e46a6c1 Imported Translations from Zanata 456a816f4 [doc] Adjust deployment docs ef1061a02 Add user defined collections 0ef5fde2b Remove python2 packages from bindep.txt 4fbd684c1 Switch to ansible-base 2.10.1 with collections 962f8464a Imported Translations from Zanata 8ace031c3 Bump ansible version to 2.9.13 f958d8ea8 Update pip/setuptools/wheel to latest versions f4510b6ba Bind services to mgmt network addresses b541dd97d Bump SHAs for master 6ca149ebc Handle deprecation of ANSIBLE_COLLECTIONS_PATHS 1fec15cfd Install current ARA version into the ansible-runtime venv 3074ca61d Remove references to eth10/eth11 container interfaces 855a52ecb Imported Translations from Zanata 593a92964 Update scripts-library.sh to grab output when command exists 8a3dd1414 [doc] Update current_series_name 5ae985bbf Add integrated test for Ubuntu using ML2/OVN driver 3214d6fbc Added Openstack Senlin role deployment 9f893c207 Fix keys() method output 74ab2420d Imported Translations from Zanata 28e71610c Bump SHAs for master a14c2d9b1 Fix hacking min version to 3.0.1 fed973c4f [doc] Fix deployment guide to correspond relevant OS 8c15db431 Decrease amount of jobs and update distros 3522e34d8 Remove tempest_test_distro_blacklist 8760975ea Bump SHAs for master 7632df34d Add corosync/pacemaker installation ab4097f26 [doc] Adjustments for Victoria release cycle b7ce47c5f Adjust docs for Ussuri 6fe9cbab5 Allow usage of haproxy_ssl_all_vips for services f8e76b59f Bump ceilometer SHA to ublock telemetry 4f1d36101 Add ironic-inspector to the openstack_services 1a57af20e Fix neutron-server default serial 6d8337b32 Remove nova_api_placement from inventory 8f8eadedd Run tempest install when tempest_run is False f35337faf Fix UPGRADE_SOURCE_BRANCH c7ab46f62 Make upgrade jobs get role relevant versions 4b5730cdb Trigger basic ironic tempest tests on os_ironic 334845a72 Bump SHAs for master 9aaea8828 Imported Translations from Zanata 93c242c1b Install required modules for utility env 30c3ce014 Imported Translations from Zanata 706ac12d5 Imported Translations from Zanata afe775b24 Imported Translations from Zanata a7aa4c72c Bump SHAs for master d1577b958 Fix gate job for aio_metal template 39a4622ef Fix ceph deployment for CentOS 7 b7b1e47f2 Remove fastest-infra-wheel-mirror.py 1b18926bb Remove package cache proxy cleanup 07222b7db Add zun to required-projects fc1b6f3bf Fix management address lookup for metal hosts in some deployments 7478bd28b Add rsync package for New CentOS-8 minimal installs d2657174c Fix KeyError raised when max hostname length exceeded 34b6ed80a Add ubuntu focal distro jobs efdb61633 Remove glance-registry from docs abf978005 Ensure distro packages are present for utility wheel build 9d7969f58 Add documentation for deploying letsencrypt certificates da9c7a806 Remove mapping of gnocchi_dentity_only to swift e167e5685 Add Centos-8 support 61941eaa8 Fix tmpfiles-setup wait handler 6a31cdb5a Bump SHAs for master 75cfbe4db Disable test_swift_acl_anonymous_download test fb2925b7a Fix the name of the renamed network for trove 8b6fd3da0 Add Ubuntu Focal support fc249bf2d Rename mysql to mariadb for registered var 9754287bd Cleanup ansible_python_interpreter 8150ec454 Simplify version check 8e9bdba32 Wait for systemd-tmpfiles-setup service to complete after container restart f9de47a34 Add murano to required_projects f893e82f7 Rewrite CI provided apt sources to be http instead of https on focal de16d1434 auto-detect interpreter. 8f72ca3bb Bump SHAs for master dfc5f0f10 Fix mysql binary name 058eaab25 Correct a typo in the document 9c0303398 Remove git repo haproxy backend 0de309e7a Always use the utility host for service setup tasks 1058a251e Use ansible openstack collection 3c4e47f05 Switch to newer openstackdocstheme and reno versions 314a372fa Update default requirements_git_url for utility c66e06255 Start Victoria cycle f7a785e9b Update master for stable/ussuri 0ab800593 Add ansible openstack collection 0e7ed693f Only use zuul cloned git repos for code hosted at opendev.org 5c53b88e4 Fix inventory_manage when the component for a host is not defined da5fe69ec Fix hacking min version to 3.0.1 e9c33c1c0 Fix default openstack_deploy dir evaluation 9b50edb62 Resolve issue with undefined facts while running with tags Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 13 + .gitreview | 2 +- Vagrantfile | 20 - ansible-collection-requirements.yml | 21 + ansible-role-requirements.yml | 254 +++---- bindep.txt | 10 +- deploy-guide/source/app-aboutosa.rst | 22 +- deploy-guide/source/conf.py | 20 +- deploy-guide/source/configure.rst | 4 + deploy-guide/source/deploymenthost.rst | 72 +- deploy-guide/source/overview-requirements.rst | 10 +- deploy-guide/source/targethosts-networkconfig.rst | 16 +- deploy-guide/source/targethosts-prepare.rst | 116 +--- .../locale/de/LC_MESSAGES/doc-contributor.po | 11 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 150 ++++- .../reference/configuration/using-overrides.rst | 108 +-- .../reference/inventory/configure-inventory.rst | 7 +- etc/netplan/01-static.yml | 65 ++ etc/netplan/README.md | 15 + etc/openstack_deploy/conf.d/adjutant.yml.aio | 3 + etc/openstack_deploy/conf.d/adjutant.yml.example | 8 + etc/openstack_deploy/conf.d/congress.yml.aio | 4 - etc/openstack_deploy/conf.d/masakari.yml.aio | 6 +- etc/openstack_deploy/conf.d/masakari.yml.example | 11 +- etc/openstack_deploy/conf.d/senlin.yml.aio | 4 + etc/openstack_deploy/conf.d/senlin.yml.example | 8 + etc/openstack_deploy/env.d/aio_metal.yml.example | 3 - etc/openstack_deploy/env.d/neutron_ovn.yml.example | 16 + etc/openstack_deploy/env.d/nova_ovn.yml.example | 13 + .../openstack_user_config.yml.aio.j2 | 10 +- .../openstack_user_config.yml.example | 13 +- .../openstack_user_config.yml.multibond.example | 6 - .../openstack_user_config.yml.prod.example | 6 - ...openstack_user_config.yml.provnet-group.example | 6 - .../openstack_user_config.yml.singlebond.example | 6 - etc/openstack_deploy/user_secrets.yml | 44 +- .../user_variables.yml.prod-ceph.example | 2 +- .../user_variables.yml.prod.example | 3 +- global-requirement-pins.txt | 6 +- inventory/env.d/{congress.yml => adjutant.yml} | 18 +- inventory/env.d/glance.yml | 4 - inventory/env.d/nova.yml | 4 - inventory/env.d/senlin.yml | 31 + inventory/group_vars/all/all.yml | 9 +- inventory/group_vars/all/ceph-rgw.yml | 2 +- inventory/group_vars/all/ceph.yml | 2 +- inventory/group_vars/all/designate.yml | 4 +- inventory/group_vars/all/glance.yml | 7 +- inventory/group_vars/all/nova.yml | 4 +- inventory/group_vars/all/panko.yml | 15 - inventory/group_vars/all_containers.yml | 2 +- inventory/group_vars/aodh_all.yml | 3 - inventory/group_vars/barbican_all.yml | 2 + inventory/group_vars/ceph_all.yml | 38 +- inventory/group_vars/cinder_volume.yml | 2 +- inventory/group_vars/congress_all.yml | 20 - inventory/group_vars/galera_all.yml | 2 +- inventory/group_vars/gnocchi_all.yml | 5 - inventory/group_vars/haproxy/haproxy.yml | 93 ++- inventory/group_vars/haproxy/keepalived.yml | 4 +- inventory/group_vars/horizon_all.yml | 3 + inventory/group_vars/hosts.yml | 2 +- inventory/group_vars/ironic_all.yml | 2 +- inventory/group_vars/magnum_all.yml | 8 - inventory/group_vars/manila_all.yml | 12 +- .../group_vars/masakari-monitor_hosts.yml | 7 +- .../group_vars/masakari_all.yml | 6 +- inventory/group_vars/memcached.yml | 2 +- inventory/group_vars/mistral_all.yml | 10 +- inventory/group_vars/murano_all.yml | 11 +- inventory/group_vars/neutron_agent.yml | 2 +- inventory/group_vars/nova_all.yml | 8 +- inventory/group_vars/octavia_all.yml | 6 +- inventory/group_vars/panko_all.yml | 5 +- inventory/group_vars/rabbitmq_all.yml | 8 + inventory/group_vars/utility_all.yml | 29 +- inventory/inventory.ini | 18 +- osa_toolkit/generate.py | 8 +- osa_toolkit/manage.py | 3 + playbooks/ceph-install.yml | 70 +- playbooks/ceph-nfs-install.yml | 8 +- playbooks/ceph-rgw-install.yml | 9 +- playbooks/ceph-rgw-keystone-setup.yml | 13 +- playbooks/common-playbooks/cinder.yml | 11 +- playbooks/common-playbooks/glance.yml | 75 --- playbooks/common-playbooks/neutron.yml | 32 +- playbooks/common-playbooks/nova.yml | 12 +- playbooks/common-tasks/ceph-server.yml | 27 +- playbooks/common-tasks/os-lxc-container-setup.yml | 8 + playbooks/common-tasks/package-cache-proxy.yml | 75 --- playbooks/containers-lxc-create.yml | 11 +- playbooks/containers-lxc-destroy.yml | 3 - playbooks/containers-lxc-host.yml | 10 +- playbooks/containers-nspawn-create.yml | 14 +- playbooks/containers-nspawn-destroy.yml | 2 - playbooks/containers-nspawn-host.yml | 8 +- playbooks/defaults/ceph_ansible.yml | 21 - playbooks/defaults/distro_install.yml | 5 +- playbooks/defaults/repo_packages/gnocchi.yml | 3 +- playbooks/defaults/repo_packages/nova_consoles.yml | 6 +- .../defaults/repo_packages/openstack_services.yml | 274 ++++---- playbooks/defaults/source_install.yml | 8 + playbooks/etcd-install.yml | 8 +- playbooks/galera-install.yml | 10 +- playbooks/haproxy-install.yml | 8 +- playbooks/healthcheck-infrastructure.yml | 156 ++++- playbooks/healthcheck-openstack.yml | 51 +- playbooks/infra-journal-remote.yml | 8 +- playbooks/library/git_requirements.py | 314 +++++++++ playbooks/memcached-install.yml | 8 +- playbooks/openstack-hosts-setup.yml | 27 +- playbooks/os-adjutant-install.yml | 63 ++ playbooks/os-aodh-install.yml | 8 +- playbooks/os-barbican-install.yml | 8 +- playbooks/os-blazar-install.yml | 12 +- playbooks/os-ceilometer-install.yml | 8 +- playbooks/os-cinder-install.yml | 4 +- playbooks/os-congress-install.yml | 43 -- playbooks/os-designate-install.yml | 8 +- playbooks/os-glance-install.yml | 80 ++- playbooks/os-gnocchi-install.yml | 8 +- playbooks/os-heat-install.yml | 8 +- playbooks/os-horizon-install.yml | 8 +- playbooks/os-ironic-install.yml | 8 +- playbooks/os-keystone-install.yml | 30 +- playbooks/os-magnum-install.yml | 7 + playbooks/os-manila-install.yml | 10 +- playbooks/os-masakari-install.yml | 20 +- playbooks/os-mistral-install.yml | 12 +- playbooks/os-murano-install.yml | 12 +- playbooks/os-neutron-install.yml | 4 +- playbooks/os-nova-install.yml | 20 +- playbooks/os-octavia-install.yml | 8 +- playbooks/os-panko-install.yml | 8 +- playbooks/os-placement-install.yml | 12 +- playbooks/os-rally-install.yml | 8 +- playbooks/os-sahara-install.yml | 6 + playbooks/os-senlin-install.yml | 62 ++ playbooks/os-swift-install.yml | 9 +- playbooks/os-tacker-install.yml | 8 +- playbooks/os-tempest-install.yml | 11 +- playbooks/os-trove-install.yml | 8 +- playbooks/os-zun-install.yml | 8 +- playbooks/qdrouterd-install.yml | 9 +- playbooks/rabbitmq-install.yml | 11 +- playbooks/repo-install.yml | 8 +- .../system_crontab_coordination/meta/main.yml | 2 +- playbooks/rsyslog-install.yml | 8 +- playbooks/security-hardening.yml | 8 +- playbooks/setup-hosts.yml | 2 +- playbooks/setup-openstack.yml | 3 +- playbooks/unbound-install.yml | 11 +- playbooks/utility-install.yml | 50 +- ...ted-image-scenario-option-c67490ab7f9d4f92.yaml | 7 + .../add-centos-8-support-af546bd6ca3b10cd.yaml | 7 + .../notes/add-focal-support-54ae4be4f524db7b.yaml | 7 + .../notes/add_allowed_hosts-38036c7457afc255.yaml | 7 + ...ds-ipxe-conductor-support-d68b68548aa1cf1f.yaml | 6 + .../notes/barbican_backends-7d070edd33401f35.yaml | 7 + .../notes/barbican_libraries-af0d43f90a4b995d.yaml | 6 + .../notes/bind-to-mgmt-b755a8a390ee970e.yaml | 20 + ...der_active_active_cluster-62674205a3259902.yaml | 6 + .../notes/drop-machinectl-5053dc9833535cd9.yaml | 8 + .../focal_distro_install-921cc6052ae69b27.yaml | 12 + .../notes/glance_registry-0a1a1f8c60f5a368.yaml | 4 + ...frontend-only-haproxy_raw-d55ad3baa8d006f3.yaml | 8 + .../notes/haproxy-hatop-4d6525a52f93a69e.yaml | 10 + .../haproxy_letsencrypt-4a13c7911a20b993.yaml | 16 + .../haproxy_letsencrypt-a49fb3846fa19c65.yaml | 7 + .../notes/lxc_image_url-a45e19531dc56ea4.yaml | 6 + ...make-vlan-ranges-optional-1c8f3d183c369e16.yaml | 17 + ...masakari-corosync-cluster-2be3f4a1e2a38fe1.yaml | 7 + .../notes/nova_filters-41739c325c0339e9.yaml | 11 + .../notes/os_adjutant-ec59fc6a996e1fbe.yaml | 6 + releasenotes/notes/os_senlin-c0b802950e22d55c.yaml | 6 + .../notes/pipeline_yml-779d1ee79fd91f5f.yaml | 12 + .../notes/remove-fax-fail-5038b4b6eb4951b3.yaml | 2 +- .../remove-lxc2-support-cf492c787fee8657.yaml | 9 + .../notes/repo_check-31eb53ae77ddeb41.yaml | 6 + .../system_scope_support-ab364c1725e2506e.yaml | 15 + .../notes/token-gen-key-0395ca56015506d1.yaml | 5 + .../notes/uwsgi_overrides-81c79cb385ca1839.yaml | 7 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + .../source/locale/id/LC_MESSAGES/releasenotes.po | 726 +++++++-------------- releasenotes/source/ussuri.rst | 6 + requirements.txt | 3 + scripts/bootstrap-ansible.sh | 35 +- scripts/fastest-infra-wheel-mirror.py | 181 ----- scripts/gate-check-commit.sh | 44 +- scripts/get-ansible-collection-requirements.yml | 80 +++ scripts/get-ansible-role-requirements.yml | 57 +- scripts/log-collect.sh | 4 +- scripts/openstack-ansible.rc | 9 +- scripts/pw-token-gen.py | 6 +- scripts/run-upgrade.sh | 4 +- scripts/scripts-library.sh | 52 +- .../upgrade-utilities/deploy-config-changes.yml | 1 - .../galera-cluster-rolling-restart.yml | 10 +- test-requirements.txt | 7 +- .../bootstrap-host/tasks/check-requirements.yml | 10 +- .../tasks/detect_data_disk_device.yml | 7 +- .../bootstrap-host/tasks/gather_nodepool_vars.yml | 35 + .../bootstrap-host/tasks/prepare_aio_config.yml | 94 ++- .../bootstrap-host/tasks/prepare_data_disk.yml | 3 + .../bootstrap-host/tasks/prepare_networking.yml | 8 +- .../templates/user_variables.aio.yml.j2 | 24 +- .../templates/user_variables_ceph.yml.j2 | 7 +- .../templates/user_variables_congress.yml.j2 | 21 - .../templates/user_variables_ironic.yml.j2 | 25 + .../templates/user_variables_magnum.yml.j2 | 3 +- .../templates/user_variables_manila.yml.j2 | 4 + .../templates/user_variables_neutron_ovn.yml.j2 | 34 + .../templates/user_variables_octavia.yml.j2 | 10 +- .../templates/user_variables_translations.yml.j2 | 4 +- .../templates/user_variables_zun.yml.j2 | 6 +- .../roles/bootstrap-host/vars/redhat-8.yml | 22 +- tox.ini | 2 +- zuul.d/jobs.yaml | 177 +++-- zuul.d/playbooks/pre-gate-cleanup.yml | 35 +- zuul.d/project-templates.yaml | 106 +-- zuul.d/project.yaml | 2 +- 252 files changed, 3641 insertions(+), 2660 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6a94d1d4e..11562795c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -27,0 +28,3 @@ jmespath>=0.9.3 # MIT + +# We use this for the parallel git clone +GitPython>=1.0.1 diff --git a/test-requirements.txt b/test-requirements.txt index f49cb49c4..6b1880ab0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -9 +8,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD @@ -14,2 +13,2 @@ virtualenv>=14.0.6 # MIT -flake8<2.6.0,>=2.5.4 # MIT -ansible-lint==3.4.21 # MIT +flake8==3.8.3 # MIT +ansible-lint==4.3.5 # MIT