We exuberantly announce the release of: openstack-ansible 30.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 30.0.0 ^^^^^^ Prelude ******* Behavior of "rabbitmq_upgrade" variable has changed. It no longer can be used to reset the cluster state. It now acts solely as a flag to perform a rolling-upgrade of the existing cluster. New Features ************ * Added a variable "rabbitmq_erlang_package_version" that can be used to define an erlang version being used when "external_repo" is used as package source. * The neutron firewall-as-a-servie dashboard will be automatically deployed if the FWaaS service is enabled. FWaaS is now an active deliverable again fron the Neutron project. * RabbitMQ version is upgraded to a new major version 4.0 Upgrade Notes ************* * uWSGI has been re-enabled by default for Neutron one more time. With that new services are introduced which should ensure adequate functionality of Neutron when uWSGI is being used. * "neutron-periodic-workers" service is enabled for all drivers when WSGI is being used. It runs along with previously existing "neutron-rpc-server" * "neutron-ovn-maintenance-worker" service is added only if *ml2.ovn* is being used as "neutron_plugin_type". The service will be enabled and running only when WSGI is used for Neutron "neutron_use_uwsgi" is set to *True* * If you are using Ubuntu 22.04 Jammy Jellyfish and "install_method: distro" please make sure to disable "neutron_use_uwsgi" as required binaries for this mode to work are missing from packages for this distro. * Please, make sure you are running RabbitMQ version of 3.13 before proceeding with the upgrade. In case you RabbitMQ version is lower then 3.13 upgrade to 4.0 will fail. You can run upgrade to 3.13 with same version of role by supplying variable "rabbitmq_package_version" during runtime, for example: "openstack- ansible openstack.osa.rabbitmq_server -e rabbitmq_upgrade=true -e rabbitmq_package_version=3.13.7-1" and then re-running upgrade normally to 4.0. Deprecation Notes ***************** * Following deprecated variables were removed and have no effect: * *cinder_service_v2_name* * *cinder_service_v2_port* * *cinder_service_v2_proto* * *cinder_service_v2_type* * *cinder_service_v2_description* * *cinder_service_v2_publicuri* * *cinder_service_v2_publicurl* * *cinder_service_v2_adminuri* * *cinder_service_v2_adminurl* * *cinder_service_v2_internaluri* * *cinder_service_v2_internalurl* * Following variables were deprecated and removed in favor of their analogues * *cinder_service_description* -> *cinder_service_v3_description* * *cinder_service_publicuri_proto* -> *cinder_service_v3_publicuri_proto* * *cinder_service_adminuri_proto* -> *cinder_service_v3_adminuri_proto* * *cinder_service_internaluri_proto* -> *cinder_service_v3_internaluri_proto* * *cinder_service_type* -> *cinder_service_v3_type* * *cinder_service_publicuri* -> *cinder_service_v3_publicurl* * *cinder_service_adminuri* -> *cinder_service_v3_adminurl* * *cinder_service_internaluri* -> *cinder_service_v3_internalurl* * *cinder_service_v3_port* -> *cinder_service_port* * *cinder_service_v3_proto* -> *cinder_service_proto* * Variable "rabbitmq_erlang_version_spec" has been deprecated and does not have any effect anymore. Please, use "rabbitmq_erlang_package_version" instead. * Variable "haproxy_tls_vip_binds" has been renamed to "haproxy_vip_binds" to better reflect variable purpose. Old variable name is still respected but it's usage is descouraged and old naming will be removed in the future. Bug Fixes ********* * The format of kernel and ramdisk images for Ironic is now raw in order to conform to upstream expectations. See https://bugs.launchpad.net/ironic/+bug/2074090 * Issues with uWSGI mode for Neutron has been addressed and uWSGI be used for the service. Other Notes *********** * Supplying "rabbitmq_upgrade=true" no longer re-initialize cluster and will perform regular rolling upgrade of the RabbitMQ cluster. Changes in openstack-ansible 29.0.0.0rc1..30.0.0 ------------------------------------------------ 7c3639cf0 [doc] Doc index page to contain only release-specific data d51c8dbed Switch plugins repo to 2024.2 branch 37aadd383 Update TOX_CONSTRAINTS_FILE for stable/2024.2 94b78b37a Update .gitreview for stable/2024.2 1abf903e4 Produce 2024.2 RC1 for OpenStack-Ansible 17eccd5c8 Add fwaas to neutron source_git file ef192b73d Add neutron fwaas and vpnaas git and zuul repo definitions 44ad51c2b Update step-ca version ea01c7e60 Retire murano/senlin/sahara 1a6da4268 Switch Ubuntu distro jobs to 24.04 3486f2dbf Move healthcheck playbooks to the collection 742d933dc Replace usage of mirrorlist with an official Rocky mirror 73fdd751f [doc] Document requirement for RabbitMQ upgrade 8964d4319 Fix encoded url bypass edae05a8a Add variables to control HSTS records 7603b5314 Deny access to any paths including /. for console proxies. 87cf8b64c Use mariadb-admin instead of mysqladmin fb7de5866 Remove usage of mariadb.com infra mirror 59a149ba4 Move all ancilliary zuul jobs to ubuntu noble ce98ae273 Remove HA queues defenition 71dd03dd8 Unfreeze roles after milestone release 80e6a1a44 Reference keepalived scripts through integrated repo path 4115c6ac2 [reno] Add a release note for haproxy_limit_hosts key implementation aecaefa15 Freeze roles for 30.0.0.0b1 release 0461ec98c Add autocomplete script for playbooks a18973964 Ensure that the inventory tox job runs on an ubuntu-jammy node 3c9465d19 Bump ansible version to 2.17.5 700e59186 Fix upgrade job on master to upgrade from 2024.1 to master 71bc8edf8 Update docs for playbooks collectification 394c840dc Move OpenStack playbooks to collection e1e1b861b Bump SHAs and pinned versions 08a722730 Add Ceph test for Rocky Linux 367fe8eb8 Convert Skyline HAProxy httpcheck 59ec4725d Increase MPM thread limits for Apache d70218855 Use node FQDN for nova-restore-compute-id e16d741a7 Add global release note for Apache MPM alignment ce0c26bd8 Use mariadb client instead of mysql for healthcheck 09d805bc2 Use hosts setup playbooks from openstack-ansible-plugins repo ff7b294b9 Use infrastructure playbooks from openstack-ansible-plugins repo 50f16d1e1 Remove ceph-server common tasks 1b470d16c [doc] Add support for Ubuntu 24.04 to docs 1c5e45648 Test on Ubuntu Noble 62d53b971 Add Ubuntu Noble to the list of supported LXC operating systems a9a8718b7 Verify OS for containers installation e175b4aa6 Use haproxy_install playbook from openstack-ansible-plugins repo af8adb377 Remove extra slash character from horizon haproxy healthcheck url. a0714bf9a Simplify handling of 'telemetry' scenario in CI tests e1964865e Do not install Skyline with os-infra_hosts 120c942fd Enchance reference_group logic for inventory 055e69eef [doc] Add documentation on spawning HAProxy inside LXC e97192fc3 Bump SHAs for master f55df9f33 Use the 'generated' apparmor profile for all containers ad73fda3b Permit Ubuntu Noble for deploy host and targets in requirements checks b30628cd4 Remove the get_md5 parameter from ansible stat tasks fc558a06f Use unbound_clients role from plugins collection efbea346b Delete glusterd data along with container data 0053e7c38 Properly apply `always` tag to install_defaults 8147225bd Rename Container Network to Management cdcb7240f [doc] Fix Typo 099ac08a9 Skip repo verification for distro install c5fbcbfbb Rename haproxy_hosts to load_balancer_hosts 0877eaf8a Skip importing haproxy_service_config with no haproxy hosts dec6ed220 Properly apply `always` tag to haproxy_endpoint_manage 6f32d3562 Update ssh service name for modern debian based systems. 64fb3b0b9 Improve regex matching for infra_lxc_validate job fec9108ed Update repo server service user ae0450b26 Remove incorrect ' releasenotes' directory 9eea5ec38 reno: Update master for unmaintained/zed 827a7e340 Use haproxy_endpoint_manage role from osa collection rather than common-tasks eccd6c50e Remove dynamic-grouping common task file 4c40bcb9d Remove remove_container_journal common task file 792f1c6a4 Use openstack.osa.install_defaults role instead of vars_files 18cb6d1ea Bump ansible collection versions d21b0fbbc Collect letsencrypt logs 87a051e24 Collect step-ca logs 47c57267e Use UCA mirror in CI for ubuntu 120d6be99 Switch to ceph-ansible stable-8.0 9a37e1fd0 Use gather_extra_facts role from plugins collection 5bb361685 [doc] Add Code Review policies to contributor documentation d8097f08c [doc] Update role maturity matrix a1eca36d9 Update SHAs for master 4d1ce1b31 Use dynamic_address_fact role from plugins collection df8f3af39 Remove os-log-dir-setup common playbook fbc66e909 Add nfs server exports file to log collection 348f776bd Remove use of deprecated ANSIBLE_COLLECTIONS_PATHS 736d43270 Update pip/wheel/setuptools/uwsgi versions to latest 808301144 Update ansible to 2.17.1 a9ec85685 [doc] Override pdf filename for the deploy guide c8c33b211 Collect iscsid config for CI jobs a769a7356 Grammar and OS corrections a6c488c82 Revert "Enable oslomsg_rabbit_queue_manager by default" 6254dff44 Ensure link to PDF appears for deploy guide 7808a2c0b Drop support for Debian 11 (bullseye) 73cdcc65b Switch services SHAs to track master 4e6c09fbe Start 2024.2 (Dalmatian) development 31e2e91a3 Update master for stable/2024.1 1285a5ab9 [doc] Remove empty pages around ToC in PDF 30b43800c [doc] Properly promote deploy guide Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 16 +- ansible-role-requirements.yml | 320 ++++++------- deploy-guide/source/conf.py | 6 +- deploy-guide/source/deploymenthost.rst | 2 +- deploy-guide/source/index.rst | 6 +- deploy-guide/source/overview-requirements.rst | 7 +- deploy-guide/source/run-playbooks.rst | 26 +- deploy-guide/source/targethosts-prepare.rst | 2 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 4 +- .../admin/upgrades/distribution-upgrades.rst | 34 +- .../admin/upgrades/os-compatibility-matrix.html | 32 +- .../inventory/understanding-inventory.rst | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.aio | 2 +- etc/openstack_deploy/conf.d/haproxy.yml.example | 2 +- etc/openstack_deploy/openstack_user_config.yml.aio | 2 +- .../openstack_user_config.yml.example | 8 +- .../openstack_user_config.yml.multibond.example | 2 +- .../openstack_user_config.yml.pod.example | 2 +- .../openstack_user_config.yml.prod-ceph.example | 2 +- .../openstack_user_config.yml.prod.example | 2 +- ...openstack_user_config.yml.provnet-group.example | 2 +- .../openstack_user_config.yml.singlebond.example | 2 +- .../openstack_user_config.yml.test.example | 2 +- global-requirement-pins.txt | 8 +- inventory/env.d/haproxy.yml | 7 + inventory/env.d/skyline.yml | 1 - inventory/group_vars/adjutant_all/source_git.yml | 6 +- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/all/infra.yml | 8 +- inventory/group_vars/all/oslo-messaging.yml | 3 + inventory/group_vars/all/source_git.yml | 6 +- inventory/group_vars/all_containers.yml | 5 - inventory/group_vars/aodh_all/source_git.yml | 6 +- inventory/group_vars/barbican_all/source_git.yml | 6 +- inventory/group_vars/blazar_all/source_git.yml | 10 +- inventory/group_vars/ceilometer_all/source_git.yml | 6 +- inventory/group_vars/ceph-rgw.yml | 3 +- inventory/group_vars/ceph_all.yml | 30 ++ inventory/group_vars/cinder_all/source_git.yml | 6 +- inventory/group_vars/cloudkitty_all/source_git.yml | 6 +- inventory/group_vars/designate_all/source_git.yml | 6 +- inventory/group_vars/glance_all/source_git.yml | 6 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/haproxy/haproxy.yml | 17 +- inventory/group_vars/haproxy/keepalived.yml | 6 +- inventory/group_vars/heat_all/source_git.yml | 6 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 62 +-- inventory/group_vars/ironic_all/source_git.yml | 10 +- inventory/group_vars/keystone_all/source_git.yml | 6 +- inventory/group_vars/magnum_all/source_git.yml | 6 +- inventory/group_vars/manila_all/source_git.yml | 6 +- inventory/group_vars/masakari_all/source_git.yml | 10 +- inventory/group_vars/mistral_all/source_git.yml | 10 +- inventory/group_vars/neutron_all/source_git.yml | 40 +- inventory/group_vars/nova_all/haproxy_service.yml | 6 + inventory/group_vars/nova_all/source_git.yml | 8 +- inventory/group_vars/octavia_all/source_git.yml | 10 +- inventory/group_vars/placement_all/source_git.yml | 6 +- .../group_vars/skyline_all/haproxy_service.yml | 4 +- inventory/group_vars/skyline_all/source_git.yml | 8 +- inventory/group_vars/swift_all/source_git.yml | 6 +- inventory/group_vars/tacker_all/source_git.yml | 6 +- inventory/group_vars/trove_all/source_git.yml | 6 +- inventory/group_vars/utility_all/source_git.yml | 44 +- inventory/group_vars/zun_all/source_git.yml | 14 +- osa_toolkit/generate.py | 18 +- playbooks/ceph-install.yml | 217 +-------- playbooks/ceph-nfs-install.yml | 53 +-- .../gather-hardware-facts.yml => ceph-pools.yml} | 8 +- playbooks/ceph-rgw-install.yml | 82 +--- playbooks/ceph-rgw-keystone-setup.yml | 97 +--- playbooks/certificate-authority.yml | 17 +- playbooks/certificate-generate.yml | 20 +- playbooks/certificate-ssh-authority.yml | 18 +- playbooks/common-playbooks/cinder.yml | 122 ----- playbooks/common-playbooks/neutron.yml | 95 ---- playbooks/common-tasks/ceph-server.yml | 49 -- playbooks/common-tasks/dynamic-address-fact.yml | 38 -- playbooks/common-tasks/dynamic-grouping.yml | 24 - playbooks/common-tasks/haproxy-endpoint-manage.yml | 31 -- playbooks/common-tasks/os-log-dir-setup.yml | 44 -- .../common-tasks/remove_container_journal.yml | 23 - playbooks/common-tasks/unbound-clients.yml | 65 --- playbooks/containers-deploy.yml | 6 +- playbooks/containers-lxc-create.yml | 64 +-- playbooks/containers-lxc-destroy.yml | 76 +-- playbooks/containers-lxc-host.yml | 45 +- playbooks/defaults/distro_install.yml | 37 -- playbooks/defaults/source_install.yml | 38 -- playbooks/galera-install.yml | 68 +-- playbooks/haproxy-install.yml | 53 +-- playbooks/healthcheck-hosts.yml | 115 +---- playbooks/healthcheck-infrastructure.yml | 395 +--------------- playbooks/healthcheck-openstack.yml | 516 +-------------------- playbooks/memcached-install.yml | 30 +- playbooks/openstack-hosts-setup.yml | 59 +-- playbooks/openstack-resources.yml | 13 +- playbooks/os-adjutant-install.yml | 67 +-- playbooks/os-aodh-install.yml | 72 +-- playbooks/os-barbican-install.yml | 71 +-- playbooks/os-blazar-install.yml | 75 +-- playbooks/os-ceilometer-install.yml | 33 +- playbooks/os-cinder-install.yml | 53 +-- playbooks/os-cloudkitty-install.yml | 68 +-- playbooks/os-designate-install.yml | 71 +-- playbooks/os-glance-install.yml | 87 +--- playbooks/os-gnocchi-install.yml | 75 +-- playbooks/os-heat-install.yml | 74 +-- playbooks/os-horizon-install.yml | 73 +-- playbooks/os-ironic-install.yml | 74 +-- playbooks/os-keystone-install.yml | 186 +------- playbooks/os-magnum-install.yml | 72 +-- playbooks/os-manila-install.yml | 92 +--- playbooks/os-masakari-install.yml | 103 +--- playbooks/os-mistral-install.yml | 75 +-- playbooks/os-neutron-install.yml | 58 +-- playbooks/os-nova-install.yml | 236 +--------- playbooks/os-octavia-install.yml | 74 +-- playbooks/os-placement-install.yml | 74 +-- playbooks/os-rally-install.yml | 26 +- playbooks/os-skyline-install.yml | 45 +- playbooks/os-swift-install.yml | 56 +-- playbooks/os-swift-sync.yml | 13 +- playbooks/os-tacker-install.yml | 63 +-- playbooks/os-tempest-install.yml | 31 +- playbooks/os-trove-install.yml | 71 +-- playbooks/os-zun-install.yml | 90 +--- playbooks/qdrouterd-install.yml | 3 +- playbooks/rabbitmq-install.yml | 95 +--- playbooks/repo-install.yml | 68 +-- playbooks/security-hardening.yml | 32 +- playbooks/setup-hosts.yml | 27 +- playbooks/setup-infrastructure.yml | 47 +- playbooks/setup-openstack.yml | 99 +--- playbooks/unbound-install.yml | 39 +- playbooks/utility-install.yml | 161 +------ playbooks/zookeeper-install.yml | 32 +- ...urity-group-rules-support-99470d209ffa97c4.yaml | 5 + .../add-magnum-integration-a7a21c4feae9cbeb.yaml | 6 + .../align_ceph_repo_vars-222f6af6a7d349a2.yaml | 18 + .../notes/amphora_bfv_quota-8adc0a3c886921ba.yaml | 17 + .../apache_mpm_alignment-41063895f0f9c024.yaml | 11 + .../bash_autocompletion-f44059352827c3a6.yaml | 10 + .../notes/ceph-ansible-8-3923428844537c1b.yaml | 19 + ...r_v2_endpoint_deprecation-869f74090121154e.yaml | 31 ++ ...cloudkitty_storage_config-48e154cc2b549238.yaml | 5 + .../notes/custom_ssh_config-46c443e077b3386b.yaml | 7 + ...ble_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 + .../drop_debian_bullseye-c93d0e7e52170780.yaml | 4 + .../erlang_version_spec-ee21ffe0a1d34576.yaml | 12 + .../federated_domain_names-4e169b8b9a947940.yaml | 13 + .../notes/fwaas-dashboard-4bc47b7c284dad68.yaml | 6 + .../notes/ha_queues_removed-4e4d3fe5ed74a242.yaml | 16 + ...aproxy_hosts_envd_renamed-56edb1aa3f56539b.yaml | 16 + .../haproxy_limit_hosts-0f529297c9748eb7.yaml | 20 + ...tbeat_in_pthread_to_false-4bde8fca9a332805.yaml | 8 + .../notes/horizon_apache_mpm-2a34436635f1bef9.yaml | 8 + ...zon_extend_local_settings-9e062b515de94b24.yaml | 7 + ...rnel-ramdisk-image-format-3edd5c7479ebd32a.yaml | 7 + ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 + .../l3_agent_extensions_var-79150960642ce551.yaml | 5 + ...akari_service_type_rename-4a86255372f8a3b5.yaml | 5 + .../notes/neutron_default_az-51715b4d836b5802.yaml | 8 + .../neutron_uwsgi_re-enabled-d75d0362aaf32278.yaml | 24 + .../octavia-dhcp-disable-d575d932a1959652.yaml | 6 + ...tavia_ssh_keypair_options-a6f9cfeb51bdfefa.yaml | 16 + .../playbooks_to_collections-c252770d24be9bb7.yaml | 26 ++ .../quorum_queues_default-2f633cd0d5ee2037.yaml | 5 +- .../notes/rabbitmq_4-0d92471180caa8ea.yaml | 16 + .../rabbitmq_repo_deb822-b47ef07ff462193f.yaml | 16 + ...rabbitmq_upgrade_refactor-4dfd860f76610a28.yaml | 9 + .../rename_haproxy_vip_binds-dda8197aaf607b53.yaml | 7 + .../replace_nginx_apache-f62e453f44acf790.yaml | 8 + .../return_amphora_provider-05deae1d173dbb1f.yaml | 5 + .../skyline_not_infra_hosts-58190dad1c43ed9a.yaml | 11 + .../switch-to-rabbitmq-ppa-671004eb2092aa3b.yaml | 12 + .../ubuntu_noble_support-d4d741bdfdf1d4ef.yaml | 4 + ...r_policy_location_gnocchi-6cc4bb4018456c39.yaml | 6 + ...env_build_facts_gathering-9a85f72324d6e7e0.yaml | 6 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- scripts/bash-completion | 93 ++++ scripts/bootstrap-ansible.sh | 14 +- scripts/gate-check-commit.sh | 16 +- scripts/log-collect.sh | 4 + scripts/openstack-ansible.rc | 1 - scripts/rabbitmq-test.py | 47 -- scripts/run-upgrade.sh | 4 +- .../galera-cluster-rolling-restart.yml | 2 +- .../upgrade-utilities/nova-restore-compute-id.yml | 3 +- .../bootstrap-host/tasks/check-requirements.yml | 8 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 8 +- .../templates/user_variables.aio.yml.j2 | 17 +- .../templates/user_variables_ceph.yml.j2 | 2 +- tox.ini | 2 +- zuul.d/jobs.yaml | 299 ++++++------ zuul.d/playbooks/post.yml | 1 - zuul.d/playbooks/pre-gate-cleanup.yml | 26 ++ zuul.d/playbooks/pre-gate-scenario.yml | 10 +- zuul.d/project-templates.yaml | 93 ++-- 219 files changed, 1893 insertions(+), 6222 deletions(-)