We contentedly announce the release of: openstack-ansible 20.1.2: Ansible playbooks for deploying OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 20.1.2 ^^^^^^ New Features ************ * Added support for using mod_auth_openidc instead of shibboleth as a service provider for supporting users who have a preference to use OIDC for federation. Mod_auth_openidc is the apache module that is recommended in the keystone documentation for implementing openidc. Added a variable to called apache_mod to keystone_sp, if left undefined shibboleth will continue to be installed by default provided keystone_sp is not empty. Mod_auth_openidc will not be installed unless it is spelled correctly, any misspellings will result in a shibboleth install. Note that installing shibboleth on Debian based metal distro deployments may break services that depend on libcurl4, as shib2 requires libcurl3, and they are unable to coexist. This can be resolved when there is a shib3 package available in a future release of Ubuntu/Debian. There is currently no support for simultaneous use of shibboleth2 and mod_auth_openidc. Deprecation Notes ***************** * Fedora is no longer tested in CI for each commit. Changes in openstack-ansible 20.1.1..20.1.2 ------------------------------------------- 63e0f8ee2 Bump SHAs for stable/train c2cb2fde9 Remove retired congress 52fe96199 Rewrite CI provided apt sources to be http instead of https on bionic 06a1809f8 Include openstack_services.yml as vars file for Gnocchi role 05d376f48 Bump SHAs for stable/train Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 52 ++++++------- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 88 +++++++++++----------- playbooks/os-gnocchi-install.yml | 1 + .../fedora-latest-support-bf58ecd96cc8fbd4.yaml | 4 + .../notes/mod-auth-openidc-102bd253b677f3fc.yaml | 16 ++++ zuul.d/jobs.yaml | 1 - zuul.d/playbooks/pre-gate-cleanup.yml | 8 ++ 9 files changed, 101 insertions(+), 73 deletions(-)