We are ecstatic to announce the release of: kayobe 14.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.3.0 ^^^^^^ New Features ************ * Adds a new "kolla_bifrost_deploy_image_user_data_content" variable used to define custom "user_data" content used by cloud-init for overcloud provision. Upgrade Notes ************* * If the admin network does not have a gateway defined and "seed_enable_snat" is "false", which is the default, overcloud hosts will not have a default gateway immediately after provisioning anymore. A default gateway on another network can still be applied during the host configuration step. * Introduces a new variable "kolla_ansible_extra_custom_passwords" to avoid the need to combine "kolla_ansible_default_custom_passwords" and "kolla_ansible_custom_passwords" when adding or overriding passwords. * Removes the "kolla_docker_registry_insecure" variable from "etc/kayobe/kolla.yml" as it is not used since the 2023.1 (Antelope) release. The replacement "docker_registry_insecure" variable has been added to "etc/kayobe/docker.yml". Bug Fixes ********* * Fixes an issue where local configuration generation would be skipped when running in check mode. This would lead to Kolla Ansible checking with stale configuration. See story 2010526 for details. * Fixes an issue where "kayobe configuration dump" would fail when variables are encrypted using Ansible Vault. Encrypted variables are now sanitised in the dump output. LP#2031390 * Fixes slow fact gathering in some environments by not configuring the seed host as the initial default gateway for overcloud hosts when "seed_enable_snat" is "false", which is the default. LP#2039461 * Fixes an issue where the Kolla Ansible variable "kolla_admin_openrc_cacert" was not set to the value of "kolla_internal_fqdn_cacert". * Fixes gateway assignment when seed SNAT is disabled. In this circumstance Bifrost was generating ConfigDrive data with the default gateway unset even when one is available on the admin network. * Fixes a bug where NetworkManager would overwrite resolv.conf when "resolv_is_managed" is set to "True". LP#2044537 * When determining whether or not a host needs bootstrapping, we attempt to connect to the host using "ansible_user", if the login fails, we then assume that the host needs bootstrapping. In previous releases we used a manually crafted "ssh" command. This did not respect any customisations to the SSH arguments made through Ansible configuration. We now use the raw module so that these customisations are used when connecting to the host. One possible use case is to configure a jump host between the control host and the target hosts. If bootstrapping was needed, hosts will now show as unreachable in the summary stats at the end of the run. This can safely be ignored. * Fixes an issue when user forgot to combine "kolla_ansible_custom_passwords", "kolla_ansible_default_custom_passwords" and own dictionary with custom passwords in configuration files. Now "kolla_ansible_extra_custom_passwords" should provide only user custom passwords to add or override in "kolla/passwords.yml". * Removes the "kolla_docker_registry_insecure" variable from "etc/kayobe/kolla.yml" as it is not used since the 2023.1 (Antelope) release. The replacement "docker_registry_insecure" variable has been added to "etc/kayobe/docker.yml". Changes in kayobe 14.2.0..14.3.0 -------------------------------- 0e1532e6 Ensure git is present before checkout tasks 7d4d9e0f Stop NetworkManager from overriding resolv.conf 1c440973 Fix gateway assignment when seed SNAT is disabled 5bff84f8 Clean up release notes 4817bfef Pin ansible-core at 2.14.11 db9817e6 docs: the page 'Editable installs' has moved 96e09e21 CI: Run configuration dump against localhost 32d48209 Remove kolla_enable_host_ntp variable a23cde01 Fix configuration dump with inline encrypted variables 8473e06d Honor custom ssh args in kayobe-ansible-user.yml 487c01a9 kolla-bifrost: Add precheck for inspection allocation pool 2cbe9b7a CI: Test SELinux configuration be19765a Improve neutron images regex f4d19f4f dev: Improve error checking for config check functions a8be8fe8 Generate local Kolla Ansible config in check mode 5f3e7262 Fix setting kolla_admin_openrc_cacert 17c0523e Fix an issue when user forgot combine custom passwords 186936af Add retries to get_url and uri tasks 5ef763fb Add seed_deploy_containers_registry_attempt_login 45854233 Remove unsupported kolla_docker_registry_insecure variable 2e3479b6 Fix Launchpad bug URL 875c94dd Add custom user_data content configuration for Bifrost af59e6d9 Resolve slow fact gathering when seed SNAT is off bfe49083 Fix last return value in _get_base_path 46d15a76 Revert "CI: Disable bare metal testing on RL9/c9s" Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/bifrost | 4 ++ ansible/inventory/group_vars/all/docker | 5 ++ ansible/inventory/group_vars/all/kolla | 23 ++++---- ansible/inventory/group_vars/all/seed | 4 ++ ansible/inventory/group_vars/seed/docker-registry | 7 +++ ansible/kayobe-ansible-user.yml | 13 ++--- ansible/kolla-ansible.yml | 1 - ansible/kolla-bifrost-hostvars.yml | 9 +-- ansible/roles/apt/tasks/keys.yml | 4 ++ ansible/roles/dell-switch-bmp/tasks/main.yml | 4 ++ ansible/roles/image-download/tasks/main.yml | 7 +++ ansible/roles/kolla-ansible/defaults/main.yml | 15 +---- .../kolla-ansible/templates/kolla/globals.yml | 7 +-- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-bifrost/tasks/main.yml | 8 +++ ansible/roles/kolla/vars/Debian.yml | 1 + ansible/roles/kolla/vars/RedHat.yml | 1 + ansible/roles/network-redhat/tasks/main.yml | 16 ++++++ .../public-openrc/templates/public-openrc.sh.j2 | 4 +- dev/functions | 22 ++++---- ...tenks-deploy-config-compute-libvirt-on-host.yml | 6 ++ dev/tenks-deploy-config-compute.yml | 6 ++ .../configuration/reference/kolla-ansible.rst | 60 +++++++++++--------- .../reference/seed-custom-containers.rst | 4 +- etc/kayobe/bifrost.yml | 4 ++ etc/kayobe/docker.yml | 5 ++ etc/kayobe/kolla.yml | 13 ++--- etc/kayobe/seed.yml | 4 ++ kayobe/ansible.py | 18 +++++- kayobe/cli/commands.py | 10 ++-- kayobe/utils.py | 22 +++++++- playbooks/kayobe-overcloud-base/run.yml | 2 - playbooks/kayobe-overcloud-upgrade-base/run.yml | 4 -- ...-custom-user-data-content-d188c7c197b50acb.yaml | 6 ++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 3 +- .../check-mode-local-config-3f8a4ba231a32c1f.yaml | 7 +++ .../notes/config-dump-vault-edc615e475f234ac.yaml | 7 +++ .../configdrive-gateway-62366f613e6eaac9.yaml | 14 +++++ .../deprecate-fqdn-cacert-301d5a26ed7107ab.yaml | 13 +++++ .../fix-bifrost-gateway-b4bc8a0396dfa935.yaml | 6 ++ ...ix-resolv-conf-management-141788e64d0e82a0.yaml | 6 ++ ...or-ssh-args-for-bootstrap-ba894df14ba58167.yaml | 13 +++++ ...kolla-passwords-overrides-065fd6bb8eb9689d.yaml | 14 +++++ ...-docker-registry-insecure-9d92a2c7c8bdc99c.yaml | 13 +++++ requirements.txt | 2 + 54 files changed, 496 insertions(+), 114 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 752bc6d2..5cdda362 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,0 +4,2 @@ ansible>=6,<8.0 # GPLv3 +# NOTE(priteau): Pin due to AnsibleUnsafeText issues with new ansible-core +ansible-core<2.14.12 # GPLv3