We are satisfied to announce the release of: openstack-ansible 15.1.2: Ansible playbooks for deploying OpenStack This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.2 ^^^^^^ New Features ************ * A variable named "bootstrap_user_variables_template" has been added to the bootstrap-host role so the user can define the user variable template filename for AIO deployments * Implements SSL connection ability to MySQL. "galera_use_ssl" option has to be set to "true" (default), in this case playbooks create self-signed SSL bundle and sets up MySQL configs to use it or distributes user-provided bundle throughout Galera nodes. * Removed dependency for "cinder_backends_rbd_inuse" in nova.conf when setting "rbd_user" and "rbd_secret_uuid" variables. Cinder delivers all necessary values via RPC when attaching the volume, so those variables are only necessary for ephemeral disks stored in Ceph. These variables are required to be set up on cinder-volume side under backend section. Critical Issues *************** * A bug that caused the Keystone credential keys to be lost when the playbook is run during a rebuild of the first Keystone container has been fixed. Please see launchpad bug 1667960 for more details. Bug Fixes ********* * Nova features that use libguestfs (libvirt password/key injection) now work on compute hosts running Ubuntu. When Nova is deployed to Ubuntu compute hosts and either "nova_libvirt_inject_key" or "nova_libvirt_inject_password" are set to True, then kernels stored in /boot/vmlinuz-* will be made readable to nova user. See launchpad bug 1507915. Changes in openstack-ansible 15.1.1..15.1.2 ------------------------------------------- 147844c Update galera repo url variables during upgrades 89ead8d SHA Bump for Keystone CVE-2017-2673 625415a Add variable for template filename 7c140da Unset bootstrap-ansible variables between upgrades 72e5b3a Only bind haproxy to internal IP, repo and galera f220c28 Add trove RPC encryption keys 25a6a28 Update all SHAs for 15.1.2 e2a1c1a Fix ceph installation on CentOS Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 20 +++---- etc/openstack_deploy/user_secrets.yml | 2 + playbooks/ceph-install.yml | 62 ++++++++++++++++++++++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 60 ++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/vars/configs/haproxy_config.yml | 7 +-- .../add-template-file-var-cac35a99a3faf563.yaml | 6 +++ .../fix-libguestfs-ubuntu-a1436d2724c9189a.yaml | 6 +++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 +++ .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 +++ ...primary-container-rebuild-a2f4d7f33d66c843.yaml | 5 ++ scripts/gate-check-commit.sh | 6 +++ .../playbooks/deploy-config-changes.yml | 20 ++++++- .../bootstrap-host/tasks/prepare_aio_config.yml | 2 +- 16 files changed, 169 insertions(+), 48 deletions(-)