We exuberantly announce the release of: kolla-ansible 15.4.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features ************ * The new command "kolla-ansible rabbitmq-reset-state" has been added. It force-resets the state of RabbitMQ. This is primarily designed to be used when enabling HA queues, see docs: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability * Updates apache grok pattern to match the size of response in bytes, time taken to serve the request and user agent. * Masakari coordination backend can now be configured via masakari_coordination_backend variable. Coordination is optional and can now be set to either redis or etcd. * Set a log retention policy for OpenSearch via Index State Management (ISM). Documentation. * Adds the ability to configure rabbitmq via "rabbitmq_extra_config" which can be overriden in globals.yml. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Added log retention in OpenSearch, previously handled by Elasticsearch Curator. By default the soft and hard retention periods are 30 and 60 days respectively. If you are upgrading from Elasticsearch, and have previously configured "elasticsearch_curator_soft_retention_period_days" or "elasticsearch_curator_hard_retention_period_days", those variables will be used instead of the defaults. You should migrate your configuration to use the new variable names before the Caracal release. Bug Fixes ********* * Fix MariaDB backup if enable_proxysql is enable * Fixes keystone's task which is connecting via ssh instead locally. LP#2004224 * Fixes 504 timeout when scraping openstack exporter. Ensures that HAProxy server timeout is the same as the scrape timeout for the openstack exporter backend. LP#2006051 * Fixes non-persistent Neutron agent state data. LP2009884 * Fix issue with octavia security group rules creation when using IPv6 configuration for octavia management network. See LP#2023502 for more details. * Fixes glance-api failed to start privsep daemon when cinder_backend_ceph is set to true. See LP#2024541 for more details. * Fixes 2024554. Adds host and "mariadb_port" to the wsrep sync status check. This is so none standard ports can be used for mariadb deployments. LP#2024554 * Fixes an issue with high CPU usage of the cAdvisor container by setting the per-container housekeeping interval to the same value as the Prometheus scrape interval. LP#2048223 * Fixes glance image import LP#2048525. * Fixes an issue where Prometheus would fail to scrape the OpenStack exporter when using internal TLS with an FQDN. LP#2008208 * Fixes Docker health check for the "sahara_engine" container. LP#2046268 * Fixes an issue where Fluentd was parsing Horizon WSGI application logs incorrectly. Horizon error logs are now written to "horizon- error.log" instead of "horizon.log". See LP#1898174 * Added log retention in OpenSearch, previously handled by Elasticsearch Curator, now using Index State Management (ISM) OpenSearch bundled plugin. LP#2047037. * Fixes an issue where Prometheus scraping of Etcd metrics would fail if Etcd TLS is enabled. LP#2036950 Changes in kolla-ansible 15.3.0..15.4.0 --------------------------------------- 668834785 CI: Test Nova server resize functionality fd42b9795 Enable glance proxying behaviour 5f148b83f cadvisor: Set housekeeping interval to Prometheus scrape interval 285c71a33 Remove nova cell sync comment 03d61a2cc Make designate bind9 cmdline configurable 1eae44d10 Persist Neutron agent state files in volume 8dee91bd2 Fix wsrep sync status task while switched to TCP/IP 897d6fbf7 Set a log retention policy for OpenSearch 3e598dfc6 Add nova conf for cyborg 5972fcaf8 Fix Docker health check for sahara_engine 011fe5e28 Adding mariadb_port to wsrep sync status so alterative ports can be used 04695d49d Fix Horizon WSGI application log parsing 8782e73c7 Remove Glance and Neutron TLS proxies from fluentd input config 69fd0f538 keystone: do not report changed on tasks that list df1972ee7 Fix proxysql get mariadb_backup_database_password e4bd422d4 Change regex for the multiline parser at the fluentd rabbitmq input d3773f8ae Fix glance-api failed to start privsep daemon 39144fc8b Set HAProxy server timeout for openstack exporter c4018cc44 Add command to force reset the state of RabbitMQ e81d9f992 ovn: Fix wording in limit check 78c25aaba Fix OpenStack exporter scrape with internal TLS & FQDN ee54b5f17 Adds condition to handle QoS extension in sriov_agent.ini template 1b18ecf88 Improve grok pattern matching for apache logs bd23f26d4 prometheus: Fix etcd scrape when etcd uses TLS 71a562339 Configure coordination in default for masakari-api 6097da0fa Fix issue with octavia security group rules creation 8ee98726c Trivial: Add connection: local for keystone-fernet cron generate task bde24a756 Add ability to configure rabbitmq ee9be687b kolla_address: check correct error return value a5d696a8d senlin: add missing cafile parameter f72b4955b Add check_mode: false to Nova upgrade checks Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 1 + ansible/rabbitmq-reset-state.yml | 10 ++++ ansible/roles/common/defaults/main.yml | 4 -- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 4 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 12 ++++ ansible/roles/designate/defaults/main.yml | 1 + .../templates/designate-backend-bind9.json.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 2 + ansible/roles/horizon/templates/horizon.conf.j2 | 3 +- ansible/roles/keystone/tasks/config.yml | 1 + .../keystone/tasks/register_identity_providers.yml | 2 + ansible/roles/mariadb/tasks/precheck.yml | 2 +- ansible/roles/mariadb/tasks/restart_services.yml | 1 + ansible/roles/masakari/templates/masakari.conf.j2 | 9 +++ ansible/roles/neutron/templates/neutron.conf.j2 | 5 +- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 5 ++ ansible/roles/nova/tasks/bootstrap_service.yml | 2 - ansible/roles/nova/tasks/upgrade.yml | 1 + ansible/roles/octavia/defaults/main.yml | 6 +- ansible/roles/octavia/tasks/prepare.yml | 18 ++++++ ansible/roles/opensearch/defaults/main.yml | 48 ++++++++++++++++ ansible/roles/opensearch/tasks/deploy.yml | 3 + ansible/roles/opensearch/tasks/post-config.yml | 65 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 3 + ansible/roles/ovn-db/tasks/lookup_cluster.yml | 14 +++-- ansible/roles/prometheus/defaults/main.yml | 6 +- .../roles/prometheus/templates/prometheus.yml.j2 | 5 +- ansible/roles/rabbitmq/defaults/main.yml | 1 + ansible/roles/rabbitmq/tasks/reset-state.yml | 16 ++++++ ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 + ansible/roles/sahara/defaults/main.yml | 2 +- ansible/roles/senlin/templates/senlin.conf.j2 | 1 + .../central-logging-guide.rst | 44 +++++++++++++++ kolla_ansible/database_shards.py | 1 + kolla_ansible/kolla_address.py | 2 +- ...-backup-database-password-54f43ecf102fb897.yaml | 4 ++ .../notes/bug-2004224-0e600c99f8e5b83f.yaml | 6 ++ .../notes/bug-2006051-135bd20d5c465517.yaml | 7 +++ .../notes/bug-2009884-a13cd185a29faf9a.yaml | 5 ++ .../notes/bug-2023502-68acc8637510cb22.yaml | 7 +++ .../notes/bug-2024541-98c2864f16f8eb59.yaml | 7 +++ .../notes/bug-2024554-6eb811364536f1e8.yaml | 7 +++ .../notes/bug-2048223-bb66fa11c6b36c5e.yaml | 7 +++ .../notes/bug-2048525-53ac0711f2c8ae4b.yaml | 5 ++ ...orce-reset-rabbitmq-state-7ec4414fd2a63d16.yaml | 7 +++ .../fix-prom-os-exp-fqdn-efb67c364b653bd9.yaml | 6 ++ ...sahara-engine-healthcheck-cfc635de9e4f56bc.yaml | 5 ++ .../notes/horizon-log-bugfix-b89f502c2f3ccaf9.yaml | 8 +++ ...prove-apache-grok-pattern-47b0bcd90f464d60.yaml | 5 ++ ...kari-coordination-backend-d3b742315a07aabc.yaml | 6 ++ .../opensearch-log-retention-598c3389456a67e6.yaml | 20 +++++++ .../prometheus-etcd-tls-313e7cf454f6763a.yaml | 6 ++ .../rabbitmq-configuration-6b100a390734dc29.yaml | 5 ++ ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 +++ tools/init-runonce | 1 + tools/kolla-ansible | 6 ++ 61 files changed, 488 insertions(+), 42 deletions(-)