We high-spiritedly announce the release of: openstack-ansible 26.0.1: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.0.1 ^^^^^^ Security Issues *************** * This release includes SHA bump for Cinder, Nova and Glance that covers OSSA-2023-002 vulnarability (CVE-2022-47951). Bug Fixes ********* * Fixed issue where neutron-metadata-agent and neutron-dhcp-agent were started on network_hosts for OVN scenario along with neutron- ovn- metadata-agent. These services will be disabled and masked for existing environments. Manual clean-up of systemd services and correpsonsive neutron agents is still needed. New deployments won't have these services deployed from the beginning. Changes in openstack-ansible 26.0.0..26.0.1 ------------------------------------------- f54fc43f0 Bump OSA for stable/zed to cover CVE-2022-47951 b7d67b5bb Fix bump of github repos cd0405c94 Bump OpenStack-Ansible Zed 631fd5951 Add Glance tempest plugin repo to testing SHA pins list 2dc11a39c Skip haproxy with setup-infrastructure for upgrades dfb0c02f4 Block unauthenticated Ironic API endpoints from untrusted networks 0b7b681d7 [doc] Update repositiories for mirroring 26adeef20 Correct series names for documentation f6d0a3a1c Sync ZFS pool names 3ac6b6217 Define name for all collections in a-r-r f03be8368 Prevent bootstrap failure when all roles/collections are overriden e9c2f7dd1 Add gate_log_requirements function 1ac606dcc [doc] Fix document on dymanic_inventory tox usage 71f5f948c Unset OSA-defined variables for bootstrap 52b99e009 Update tox.ini abac5e82c Update TOX_CONSTRAINTS_FILE for stable/zed e3fd4d137 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 38 ++++-- ansible-role-requirements.yml | 138 ++++++++++----------- deploy-guide/source/conf.py | 4 +- .../reference/inventory/generate-inventory.rst | 4 +- inventory/group_vars/haproxy/haproxy.yml | 7 ++ playbooks/defaults/repo_packages/gnocchi.yml | 4 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 52 ++++---- .../defaults/repo_packages/openstack_testing.yml | 6 +- .../notes/ossa-2023-002-0ee5aa141d4ee69d.yaml | 5 + .../ovn_dhcp_metadata_agents-851b42a6923c811f.yaml | 10 ++ scripts/bootstrap-ansible.sh | 4 + scripts/get-ansible-collection-requirements.yml | 7 +- scripts/get-ansible-role-requirements.yml | 2 +- scripts/run-upgrade.sh | 3 +- scripts/scripts-library.sh | 14 +++ .../bootstrap-host/tasks/prepare_data_disk.yml | 8 +- tox.ini | 6 +- 23 files changed, 220 insertions(+), 154 deletions(-)