We are overjoyed to announce the release of: kayobe 15.6.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.6.0 ^^^^^^ New Features ************ * Adds the internal VIP to the NOPROXY/noproxy environment variables. * Adds support for using Cumulus switches (NCLU and NVUE) with Networking Generic Switch. Security Issues *************** * When running API requests from a host configured with kayobe, traffic destined for the internal VIP is sent via the default proxy. This can be a security issue if not using TLS as the proxy will be able to intercept the traffic. If using an untrusted proxy, with TLS disabled on the internal VIP, it is recommended that you run "kayobe overcloud host configure -t proxy", "kayobe seed hypervisor host configure -t proxy", "kayobe seed host configure -t proxy", and "kayobe infra vm host configure -t proxy", to add the internal VIP to the no proxy configuration. This is considered a minor issue as traffic between containers will not use the proxy by default. LP#2087556 Bug Fixes ********* * The "proxysql" image is now built when "kolla_enable_proxysql" is set to "true". * Pin requirements for IPA image build to ensure that the "ironic- lib" version matches "ironic-python-agent". LP#2089263 <https://bugs.launchpad.net/kayobe/+bug/2089263>`__ * Changes the default cloud image for seed and infra VMs to use Rocky Linux 9.3 when using "bios" boot mode, to fix boot failures with newer cloud images. When deploying new VMs, it is recommended to set "infra_vm_boot_firmware" and "seed_vm_boot_firmware" to "efi". Changes in kayobe 15.5.0..15.6.0 -------------------------------- 40779aa4 CI: use quay.io/podman/hello due too dockerhub rate limits fb5856cd Ensure ironic-python-agent matches ironic-lib 715b4b93 Add internal VIP address to no_proxy 14259a03 CI: Replace deprecated distro.linux_distribution 9629a40e Add support for building the proxysql image e2f0f4a8 Adds support for using Cumulus switches with NGS 09063d14 Use Rocky Linux 9.3 images unless in efi boot mode Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 14 ++++++++++---- ansible/inventory/group_vars/all/ipa | 1 + ansible/inventory/group_vars/all/kolla | 3 +++ ansible/inventory/group_vars/all/proxy | 1 + ansible/inventory/group_vars/all/seed-vm | 12 +++++++++--- ansible/kolla-openstack.yml | 2 ++ .../configuration/reference/ironic-python-agent.rst | 17 ++++++++--------- etc/kayobe/infra-vms.yml | 10 ++++++---- etc/kayobe/proxy.yml | 5 +++-- etc/kayobe/seed-vm.yml | 8 +++++--- .../adds-internal-vip-to-no-proxy-cbb4db4ea3909185.yaml | 17 +++++++++++++++++ .../notes/build-proxysql-image-ec09332ef0b7dae0.yaml | 5 +++++ .../notes/cumulus-support-ngs-c4a6e6f3d45f5783.yaml | 5 +++++ .../notes/pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++++++ ...pin-rl9-vm-image-bios-firmware-b025ac853f68a91b.yaml | 7 +++++++ 16 files changed, 92 insertions(+), 29 deletions(-)