We are happy to announce the release of: kolla-ansible 10.0.0: Ansible Deployment of Kolla containers This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * Kolla Ansible checks now that the local Ansible Python environment is coherent, i.e. used Ansible can see Kolla Ansible. LP#1856346 * Self-signed TLS certificates can be used to test TLS in a development OpenStack environment. The "kolla-ansible certificates" command will generate the required self-signed TLS certificates. This command has been updated to first create a self-signed root certificate authority. The command then generates the internal and external facing certificates and signs them using the root CA. If backend TLS is enabled, the command will generate the backend certificate and sign it with the root CA. * Enable Galera node state checking by using "clustercheck" script that is used by HAProxy to define node up/down state. Upgrade Notes ************* * The default "migration_interface" is moved from "network_interface" to "api_interface", which is treaded as internal and security network plane in most case. * Replaced "kolla_external_fqdn_cacert" and "kolla_internal_fqdn_cacert" with "kolla_admin_openrc_cacert", which by default is not set. "OS_CACERT" is now set to the value of "kolla_admin_openrc_cacert" in the generated "admin-openrc.sh" file. * The Monasca Log API has been removed. All logs now go to the unified Monasca API when Monasca is enabled. Any custom Fluentd configuration and inventory files will need to be updated. Any monasca_log_api containers will be removed automatically. Deprecation Notes ***************** * The "congress" project is no longer maintained. This has been retired since Victoria and has not been used by other OpenStack services since. (http://lists.openstack.org/pipermail/openstack- discuss/2020-April/014292.html) Bug Fixes ********* * Fixes Kibana deployment with the new E*K stack (6+). LP#1799689 * Fix prometheus-openstack-exporter to use CA certificate. * Fixes Grafana datasource update. LP#1881890 * Removing chrony package and AppArmor profile from docker host if containerized chrony is enabled. LP#1882513 * Add missing "become: true" on some VMWare related tasks. Fixed on "Copying VMware vCenter CA file" and "Copying over nsx.ini". * fix deploy nova failed when use kolla_dev_mod. * Fixes an issue with Cinder upgrades that would cause online schema migration to fail. LP#1880753 Changes in kolla-ansible 10.0.0.0rc1..10.0.0 -------------------------------------------- 7d0946352 Fix prometheus-elasticsearch-exporter flags af6114da8 Revert rename of Monasca API config file 35ef89ae6 Fix STATIC_ROOT for Debian, Ubuntu 851180d26 Remove max count from Cinder online schema migration f81dcc8e9 Switch octavia to use service project in service_auth 6f1bd3e35 Fix issues with Prometheus config generation 540eb9a01 Replace internal and external VIP CA with root CA edb1077ee Generate Root CA for Self-Signed Certificates 2dcfdb77a fix deploy nova failed when use kolla_dev_mod 87dedced7 Do not ask for a SSH key password 59b8b07e5 Remove chrony package if containerized chrony is enabled b8c142f60 Fix Grafana datasource update dd8e55274 Remove nova-consoleauth task in U cycle f6d48b035 Fix group_vars and cinder template per documentation 8e45849d5 CI: Move NFV reqs installation to where it belongs 546f5e890 Add missing become to some VMWare tasks 915860dc5 Add 'ovn' to list of valid values of neutron_plugin_agent 61e051c9b Fix handler notification for mariadb-clustercheck bbb033dda Fix bug in deploying monasca_agent_forwarder 4f1d3e9e8 barbican: Use python3 plugin in uwsgi config 01f5b5b18 Use api_interface as migration_interface default value 6d6c369f9 Add EL8 packages. d92123e59 Custom haproxy script for monitoring galera 3d355eaf4 Switch to Monasca API for logs 262cd0f4a Fix glance backend TLS configuration task b70a50226 [Community goal] Update the contributor guide 7ebb0cddd Victoria: Add releasenote for remove congress role cd6d4bbd9 Remove confusing docs cc99af6ae Fix kolla_source_version for stable 1f16c04a5 Check that used Ansible can see Kolla Ansible d71bbefc7 Use Ussuri images in Ussuri deployments aea9b4d23 Remove post_config from the Kibana role 2f44ffad6 Add First login steps back into Kibana doc d875c710e enable prometheus-openstack-exporter to use ca cert cfc572ac3 Update TOX_CONSTRAINTS_FILE for stable/ussuri 3fc878956 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + CONTRIBUTING.rst | 19 ++ ansible/group_vars/all.yml | 18 +- ansible/inventory/all-in-one | 3 - ansible/inventory/multinode | 3 - .../roles/barbican/templates/barbican-api.ini.j2 | 2 +- ansible/roles/baremetal/defaults/main.yml | 2 + ansible/roles/baremetal/tasks/post-install.yml | 16 ++ ansible/roles/ceilometer/tasks/config.yml | 1 + ansible/roles/certificates/defaults/main.yml | 5 + .../roles/certificates/tasks/generate-backend.yml | 64 +++++++ ansible/roles/certificates/tasks/generate-root.yml | 45 +++++ ansible/roles/certificates/tasks/generate.yml | 191 ++++++++------------- ansible/roles/certificates/tasks/main.yml | 4 + ansible/roles/cinder/defaults/main.yml | 4 - ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 6 +- .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 2 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 2 +- .../common/templates/conf/input/02-mariadb.conf.j2 | 14 ++ .../common/templates/conf/output/00-local.conf.j2 | 12 +- .../templates/conf/output/02-monasca.conf.j2 | 4 +- ansible/roles/glance/tasks/config.yml | 5 +- ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/haproxy/tasks/precheck.yml | 2 + ansible/roles/horizon/templates/local_settings.j2 | 3 + ansible/roles/kibana/defaults/main.yml | 10 -- ansible/roles/kibana/tasks/deploy.yml | 2 - ansible/roles/kibana/tasks/post_config.yml | 89 ---------- ansible/roles/mariadb/defaults/main.yml | 37 +++- ansible/roles/mariadb/handlers/main.yml | 16 ++ ansible/roles/mariadb/tasks/check-containers.yml | 2 +- ansible/roles/mariadb/tasks/config.yml | 29 +++- ansible/roles/mariadb/tasks/recover_cluster.yml | 24 +-- .../mariadb/templates/mariadb-clustercheck.json.j2 | 18 ++ .../roles/mariadb/templates/xinetd-clustercheck.j2 | 16 ++ ansible/roles/monasca/defaults/main.yml | 28 --- ansible/roles/monasca/handlers/main.yml | 15 -- ansible/roles/monasca/tasks/config.yml | 34 ---- ansible/roles/monasca/tasks/deploy.yml | 5 +- ansible/roles/monasca/tasks/post_config.yml | 2 +- ansible/roles/monasca/tasks/precheck.yml | 11 -- ansible/roles/monasca/tasks/upgrade.yml | 12 ++ .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca/templates/monasca-api/api.conf.j2 | 7 + .../templates/monasca-api/monasca-api.json.j2 | 2 +- .../templates/monasca-log-api/log-api-paste.ini.j2 | 65 ------- .../templates/monasca-log-api/log-api.conf.j2 | 43 ----- .../monasca-log-api/monasca-log-api.json.j2 | 32 ---- .../templates/monasca-log-api/wsgi-log-api.conf.j2 | 34 ---- ansible/roles/neutron/tasks/config.yml | 1 + ansible/roles/nova/tasks/bootstrap.yml | 3 + ansible/roles/nova/tasks/deploy.yml | 3 - ansible/roles/nova/tasks/upgrade.yml | 7 - ansible/roles/octavia/defaults/main.yml | 4 + ansible/roles/octavia/tasks/register.yml | 14 ++ ansible/roles/octavia/templates/octavia.conf.j2 | 2 +- ansible/roles/prometheus/tasks/config.yml | 21 ++- ansible/roles/prometheus/templates/clouds.yml.j2 | 1 + .../prometheus-elasticsearch-exporter.json.j2 | 2 +- ansible/site.yml | 1 - .../central-logging-guide.rst | 15 ++ etc/kolla/globals.yml | 9 +- .../notes/bug-1799689-c8612c73649ac483.yaml | 5 + .../notes/bug-1850812-e840453d44e17d34.yaml | 4 + .../notes/bug-1856346-59d0f01005d56e81.yaml | 6 + .../notes/bug-1881890-72c76f5fc065588b.yaml | 5 + ...-chrony-permission-denied-917b3bffc5cdb38d.yaml | 6 + ...-become-attributes-vmware-9ae97e49b4d7dc0d.yaml | 5 + .../bug-nova-dev-mod-failed-ad4e64f5a5bc2a6a.yaml | 4 + ...fault-migration-interface-3cdf30eed98553fd.yaml | 6 + ...-cinder-upgrade-max-count-ab928f85f224c63d.yaml | 5 + ...erate-self-signed-root-ca-bc523acab7290cfe.yaml | 17 ++ .../mariadb-clustercheck-39b5837c09868f1e.yaml | 5 + .../remove-congress-role-0f6a327de69e2173.yaml | 8 + ...r-in-admin-project-action-95c87ca45a1188d6.yaml | 19 +- ...fied-monasca-api-for-logs-8c6829e7fb1ccf8b.yaml | 7 + tools/init-runonce | 2 +- tools/kolla-ansible | 74 ++++++-- tools/setup_gate.sh | 3 + tox.ini | 12 +- 93 files changed, 931 insertions(+), 814 deletions(-)