We enthusiastically announce the release of: kolla-ansible 10.1.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Adds ability to provide a custom elasticsearch config. Upgrade Notes ************* * Changes the default value of "kibana_elasticsearch_ssl_verify" from "false" to "true". LP#1885110 * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. Bug Fixes ********* * Fixes an issue when using ip addresses instead of hostnames in Ansible inventory. OpenvSwitch role sets system-id based on inventory_hostname, which in case of ip addresses in is first ip octet. Such a deployment would result in multiple OVN chassis with duplicate name e.g. "10" connecting to OVN Southbound database - which spawns high numbers of create/delete events in Encap database table - leading to near 100% CPU usage of OVN/OVS/Neutron processes. * Fixes an issue with Manila deployment starting "openvswitch" and "neutron-openvswitch-agent" containers when "enable_manila_backend_generic" was set to "False". LP#1884939 * Fixes the Elasticsearch Curator cron schedule run. LP#1885732 * Fixes an incorrect configuration for nova-conductor when a custom Nova policy was applied, preventing the "nova_conductor" container from starting successfully. LP#1886170 * Fixes an incorrect Ceph keyring file configuration in "gnocchi.conf", which prevented Gnocchi from connecting to Ceph. LP#1886711 * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fix the configuration of the etcd service so that its protocol is independant of the value of the "internal_protocol" parameter. The etcd service is not load balanced by HAProxy, so there is no proxy layer to do TLS termination when "internal_protocol" is configured to be "https". * Fixes LP#1885885 where the default chunk size in the Monasca Fluentd output plugin increased from 8MB to 256MB for file buffering which exceeded the limit allowed by the Monasca Log / Unified API. * Adds a new variable "fluentd_elasticsearch_cacert", which defaults to the value of "openstack_cacert". If set, this will be used to set the path of the CA certificate bundle used by Fluentd when communicating with Elasticsearch. LP#1885109 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. Changes in kolla-ansible 10.0.0..10.1.0 --------------------------------------- 6bba8cc52 Manage octavia health manager worker through openstack_service worker 1636ea073 Fix incorrect value of [storage]/ceph_keyring in gnocchi.conf e0a1072b8 Use the children group for site.yml 33f186c94 Remove policy file from nova-conductor config.json template 0ae152d1d Fix Fluentd date format for MariaDB xinetd ea58710ff Set a chunk size for Fluentd bulk log upload to Monasca f6a70e666 Syntax error in Fluentd Monasca output config 6a0a4877e Use public interface for Magnum client and trustee Keystone interface acfabc77a Make ES Curator schedule multinode-friendly 3114af254 Fix the Elasticsearch Curator cron schedule run 4a5aa528b Fix Zun configuration for TLS 2f3ecdb34 [docs] Update quickstart for Ussuri+ 81e9565ed Fix etcd protocol configuration f6bd4eaa5 Support custom elasticsearch configuration files 73b6ccd1f Verify TLS by default for Kibana to Elasticsearch d3da72c2c Support CA certificate for fluentd & Elasticsearch a0a184e95 Use internalURL endpoint_type for all clients used by Magnum b0359f8a2 Fix Magnum trust operations in multi-region clouds 934cf3985 Skip storm play when not enabled c5ddd19ea openvswitch: Use ansible_hostname for system-id 58a3ba13f Change neutron-ovs-agent deploy only with manila generic backend 9b6ec38b8 octavia: Add documentation 94c7e5a96 Improve error reporting in password utilities 7f0d03183 Enable ZooKeeper when Storm is enabled 8e0c0cd8c CI: use venv only (and not virtualenv) 2ca01f25f nova-cell role clone failed Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 15 ++ .../common/templates/conf/output/01-es.conf.j2 | 3 + .../templates/conf/output/02-monasca.conf.j2 | 5 +- ansible/roles/elasticsearch/defaults/main.yml | 16 +- ansible/roles/elasticsearch/tasks/config.yml | 8 +- .../templates/elasticsearch-curator.crontab.j2 | 2 + .../templates/elasticsearch-curator.json.j2 | 5 +- ansible/roles/etcd/defaults/main.yml | 10 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 2 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 11 ++ ansible/roles/neutron/defaults/main.yml | 2 +- ansible/roles/nova-cell/defaults/main.yml | 2 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 4 +- .../skydive/templates/skydive-analyzer.conf.j2 | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 5 + ansible/site.yml | 14 +- etc/kolla/globals.yml | 2 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...custom-elasticsearch-conf-6fc34fbc3b471997.yaml | 3 + .../notes/bug-1884734-ec054799d3300778.yaml | 10 ++ .../notes/bug-1884939-7c77b8002d3ff52d.yaml | 7 + .../notes/bug-1885732-10803d46f9c73444.yaml | 5 + .../notes/bug-1886170-f76d9d3520ab86ec.yaml | 7 + .../notes/bug-1886711-a1a1fd1343f1a644.yaml | 6 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + .../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml | 8 + ...k-size-for-monasca-output-882338103d2e1f13.yaml | 8 + ...entd-elasticsearch-cacert-0e8824dd57052913.yaml | 8 + .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + .../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 ++ zuul.d/base.yaml | 2 +- 50 files changed, 442 insertions(+), 95 deletions(-)