We are satisfied to announce the release of: openstack-ansible 14.0.8: Ansible playbooks for deploying OpenStack This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.0.8 ^^^^^^ New Features ************ * The security-hardening playbook hosts target can now be filtered using the "security_host_group" var. Upgrade Notes ************* * The global override "cinder_nfs_client" is replaced in favor of fully supporting multi backends configuration via the cinder_backends stanza. Deprecation Notes ***************** * The global override "cinder_nfs_client" is replaced in favor of fully supporting multi backends configuration via the cinder_backends stanza. Bug Fixes ********* * Systems using systemd (like Ubuntu Xenial) were incorrectly limited to a low amount of open files. This was causing issues when restarting galera. A deployer can still define the maximum number of open files with the variable "galera_file_limits" (Defaults to 65536). Other Notes *********** * The limits.conf file for galera servers will now be deployed under "/etc/security/limits.d/99-limits.conf". This is being done to ensure our changes do not clobber existing settings within the system's default "/etc/security/limits.conf" file when the file is templated. Changes in openstack-ansible 14.0.7..14.0.8 ------------------------------------------- b60a789 [Docs] Complete the example file ba9c17e [DOC] Fix release name in quickstart doc 90933f5 [Docs] Fix documentation for Cinder NFS backend 811705f Bring idempotency to swapon 6f208b7 Add tracepath commands to the AIO f507b51 Ensures the host IP isn't used for containers 661762b Remove 3DES from ssl_cipher_suite 6d4be1a Target unbound component group instead of _all 216bdd8 Move scenario variables under vars ae6dac2 Fix haproxy playbook group target 7488760 Update all SHAs for 14.0.8 f150c11 Configurable haproxy network whitelists 843fb40 corrected infra wheel mirror URL fd4321a Use https to retrieve upper-constraints ab02d75 Var target security playbook host group 51781c4 Adjust compute host removal docs Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 22 +++---- deploy-guide/source/app-networking.rst | 20 ++++++ .../developer-docs/ops-remove-computehost.rst | 4 +- etc/openstack_deploy/openstack_user_config.yml.aio | 4 ++ .../openstack_user_config.yml.example | 45 ++++++++----- .../openstack_user_config.yml.prod.example | 15 ++++- global-requirement-pins.txt | 2 +- playbooks/common-tasks/set-upper-constraints.yml | 8 ++- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 46 +++++++------- playbooks/haproxy-install.yml | 2 +- playbooks/inventory/group_vars/all.yml | 8 +-- playbooks/inventory/group_vars/haproxy_all.yml | 13 ++++ playbooks/inventory/group_vars/hosts.yml | 2 +- playbooks/security-hardening.yml | 2 +- playbooks/unbound-install.yml | 6 +- playbooks/vars/configs/haproxy_config.yml | 35 +++-------- .../cinder-nfs-multibackend-df133e8fff374da4.yaml | 9 +++ ...unt-of-open-files-systemd-54af64659bf61518.yaml | 8 +++ .../notes/moved-limits.conf-c4785040f2c77247.yaml | 8 +++ ...curity-playbook-hosts-var-a9b71f3dbcda2cad.yaml | 4 ++ scripts/bootstrap-ansible.sh | 7 ++- scripts/fastest-infra-wheel-mirror.py | 2 +- scripts/scripts-library.sh | 2 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 73 ++++++++++++---------- 31 files changed, 260 insertions(+), 157 deletions(-)