We are jazzed to announce the release of: kolla-ansible 13.0.1: Ansible Deployment of Kolla containers This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.0.1 ^^^^^^ Security Issues *************** * Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE) Vulnerability in Elasticsearch - CVE-2021-44228. Bug Fixes ********* * Fixes generation of "cyborg.conf". LP#1941704 * Only run "configure ovn in ovsdb" task on ovn-controller hosts The task will fail on hosts (like controller nodes) without tunnel interface LP#1953367 * Fixes an issue where the Nova API logs were written to files ending with *-wsgi.log* which affected the processing of these logs in the Fluentd pipeline. LP#1950185 * On slower nodes, the initial grafana startup could experience a timeout failure when the migrations for setting up the database took longer than expected. This has been fixed by increasing the default timeout. The timeout settings can be changed via new parameters "grafana_start_first_node_delay" and "grafana_start_first_node_retries" for the "grafana" role. LP#1769962 Other Notes *********** * The container "ironic-dnsmasq" now creates the "dnsmasq.log" just as the container "neutron-dhcp-agent". For both log files verbosity can be increased globally via "openstack_logging_debug" or per service via "ironic_logging_debug" or "neutron_logging_debug" variables. Changes in kolla-ansible 13.0.0..13.0.1 --------------------------------------- 832416e50 Added upgrade note for separate nova and cinder keys. f2c0d1ecc [docs] Mark init-runonce properly 725e2d363 ovn: configure ovn in ovsdb only on ovn-controller hosts 49850986d [Security] Add log4j vulnerability mitigation in Elasticsearch f6ff1a0a5 Bump timeout for grafana startup f51dbdede Update dnsmasq logging 4bc015a50 Finish removing Monasca Log Transformer 4d5d88597 Fix monasca-thresh upgrade 24965250e docs: stop installing kolla in quickstart 2e85dba77 Cleanup leftovers of the removed tempest role f62361371 CI: Test minimum and maximum supported ansible versions be9454ab7 Fix wrong opts in cyborg.conf d88d7b131 Specify log file name for Nova API ea04a3375 docs: Install openstack-client with upper constraints 142800014 haproxy: remove unused tls check condition in config Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 3 -- ansible/inventory/multinode | 3 -- ansible/monasca_cleanup.yml | 1 - .../common/templates/conf/input/00-global.conf.j2 | 1 + ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + ansible/roles/elasticsearch/defaults/main.yml | 2 +- ansible/roles/grafana/defaults/main.yml | 3 ++ ansible/roles/grafana/handlers/main.yml | 4 +- .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 6 +++ .../templates/haproxy/haproxy_main.cfg.j2 | 2 - ansible/roles/monasca/defaults/main.yml | 17 --------- ansible/roles/monasca/tasks/upgrade.yml | 1 + ansible/roles/neutron/templates/dnsmasq.conf.j2 | 5 +++ ansible/roles/nova/templates/nova.conf.j2 | 5 ++- ansible/roles/ovn/tasks/bootstrap.yml | 1 + ansible/roles/tempest/defaults/main.yml | 43 ---------------------- ansible/site.yml | 1 - .../reference/networking/neutron-extensions.rst | 10 +++++ .../orchestration-and-nfv/tacker-guide.rst | 27 +++++++------- .../notes/bug-1941704-d31774f4dd56374f.yaml | 5 +++ .../notes/bug-1953367-61591a7f3ecf28ce.yaml | 7 ++++ ...ix-nova-api-log-file-name-9a377525e73012de.yaml | 7 ++++ ...-start-first-node-timeout-f9a6149cc68153a5.yaml | 10 +++++ .../notes/security-log4j-1be047799f8e590a.yaml | 5 +++ .../update-dnsmasq-logging-a5d42f6180aff049.yaml | 7 ++++ 30 files changed, 115 insertions(+), 105 deletions(-)