We are glad to announce the release of: kolla-ansible 13.9.0: Ansible Deployment of Kolla containers This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.9.0 ^^^^^^ New Features ************ * Since CVE-2022-29404 is fixed the default value for the LimitRequestBody directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1073741824 (1 GiB). This limits the size of images (for example) uploaded in Horizon. Now this limit can be configured via "horizon_httpd_limitrequestbody". LP#2012588 * etcd is now exposed internally via HAProxy on "etcd_client_port". * The config option *rabbitmq_ha_replica_count* is added, to allow for changing the replication factor of mirrored queues in RabbitMQ. While the flag is unset, the queues are mirrored across all nodes using "ha-mode":"all". Note that this only has an effect if the flag ` om_enable_rabbitmq_high_availability` is set to *True*, as otherwise queues are not mirrored. * The config option *rabbitmq_ha_promote_on_shutdown* has been added, which allows changing the RabbitMQ definition *ha-promote-on- shutdown*. By default *ha-promote-on-shutdown* is "when-synced". We recommend changing this to be "always". This basically means we don't mind losing some messages, instead we give priority to rabbitmq availability. This is most relevant when restarting rabbitmq, such as when upgrading. Note that setting the value of this flag, even to the default value of "when-synced", will cause RabbitMQ to be restarted on the next deploy. For more details please see: https://www.rabbitmq.com/ha.html#cluster-shutdown * Services using etcd3gw via tooz now use etcd via haproxy. This removes a single point of failure, where we hardcoded the first etcd host for backend_url. Upgrade Notes ************* * "ironic.conf" now sets "[pxe]\kernel_append_params" instead of "[pxe]\pxe_append_params" which has been deprecated. Please override the new config option if you are overriding the old one. * Default tags of "neutron_tls_proxy" and "glance_tls_proxy" have been changed to "haproxy_tag", as both services are using "haproxy" container image. Any custom tag overrides for those services should be altered before upgrade. Bug Fixes ********* * Set the etcd internal hostname and cacert for tls internal enabled deployments. This allows services to work with etcd when coordination is enabled for TLS interal deployments. Without this fix, the coordination backend fails to connect to etcd and the service itself crashes. * fix missing [taskflow] section in masakari.conf.j2 LP#1966536 * When upgrading RabbitMQ, the policy *ha-all* was cleared only if *rabbitmq_remove_ha_all_policy* is set to *true*. Now, *om_enable_rabbitmq_high_availability* must also be set to *false*. Changes in kolla-ansible 13.8.0..13.9.0 --------------------------------------- 4a4240a72 Pin zun jobs to Docker 20 fd73e0ecd Add LimitRequestBody configuration for Horizon 2af2b16db Add flag to change RabbitMQ ha-mode definition a060f45ba RabbitMQ: Support setting ha-promote-on-shutdown fd7da3fd0 Ironic: Avoid setting deprecated pxe_append_params af07bbd12 ironic: fix dev mode for inspector 9543628c2 Use haproxy-config instead of loadbalancer-config e12964cb2 Set the etcd internal hostname and cacert for tls internal enabled deployments e6d1c2e1a Remove RabbitMQ ha-all policy when not required cdfa1dbe3 hacluster: Use nodename to align with nova service names 5c7d8aefe Fix docker version precheck (bad backport) 9eb1835f9 Add [taskflow] section for masakari.conf.j2 fdd888d2b Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag ceb4e991c Use loadbalancer to connect to etcd 834537d15 Put etcd behind HTTP loadbalancer 94deff997 docs: fix information about libvirt SASL auth Diffstat (except docs and test files) ------------------------------------- ansible/roles/baremetal/defaults/main.yml | 4 +++- ansible/roles/baremetal/tasks/install.yml | 19 +++++++++++++++++++ ansible/roles/cinder/templates/cinder.conf.j2 | 3 +-- ansible/roles/etcd/defaults/main.yml | 8 +++++++- ansible/roles/etcd/tasks/loadbalancer.yml | 7 +++++++ ansible/roles/glance/defaults/main.yml | 3 ++- ansible/roles/hacluster/tasks/bootstrap_service.yml | 8 ++++---- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 3 +++ ansible/roles/ironic/defaults/main.yml | 4 +++- ansible/roles/ironic/tasks/clone.yml | 3 ++- ansible/roles/ironic/templates/ironic.conf.j2 | 2 +- ansible/roles/masakari/templates/masakari.conf.j2 | 3 +++ ansible/roles/neutron/defaults/main.yml | 3 ++- ansible/roles/prechecks/tasks/package_checks.yml | 1 + ansible/roles/rabbitmq/defaults/main.yml | 9 +++++++++ ansible/roles/rabbitmq/tasks/upgrade.yml | 4 +++- ansible/roles/rabbitmq/templates/definitions.json.j2 | 4 ++-- ansible/site.yml | 5 +++++ ...add-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml | 9 +++++++++ .../notes/etcd-tcp-loadbalancer-08d9332ee3be9a8b.yaml | 4 ++++ ...fix-etcd-coordination-config-b1c9f900ef13be13.yaml | 8 ++++++++ ...onf-missing-taskflow-section-31b6654e29bec35d.yaml | 5 +++++ .../notes/kernel_append_params-a162aaab2d0b8649.yaml | 7 +++++++ ...to-change-replication-factor-321c2f9e08e7d179.yaml | 9 +++++++++ ...bitmq-ha-promote-on-shutdown-9099c6643f2d0cce.yaml | 13 +++++++++++++ ...removal-extra-variable-check-d59177a8c876d34e.yaml | 6 ++++++ .../tls-proxies-use-haproxy-tag-aa030b5e5df6fbf0.yaml | 8 ++++++++ ...ncer-for-etcdgw-coordination-6704a8b1389bbabe.yaml | 6 ++++++ tools/validate-all-file.py | 1 + zuul.d/base.yaml | 1 + 34 files changed, 171 insertions(+), 19 deletions(-)