We are pumped to announce the release of: openstack-ansible 16.0.0: Ansible playbooks for deploying OpenStack This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * OpenStack-Ansible now supports the openSUSE Leap 42.X distributions mainly targeting the latest 42.3 release. * Deployers can set "pip_install_centos_mirror_url" to use their preferred mirror for the RDO repositories. * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" * Fedora 26 is now supported. * The variable "lxc_image_cache_server_mirrors" has been added to the "lxc_hosts" role. This is a list type variable and gives deployers the ability to specify multiple lxc-image mirrors at the same time. * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Known Issues ************ * Ceph storage backend is known not to work on openSUSE Leap 42.X yet. This is due to missing openSUSE support in the upstream Ceph Ansible playbooks. Upgrade Notes ************* * The following variables have been removed from the "haproxy_server" role as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - haproxy_required_distro_packages Deprecation Notes ***************** * Fedora 25 support is deprecated and no longer tested on each commit. * The variable "lxc_image_cache_server" has been deprecated in the "lxc_hosts" role. By default this value will pull the first item out of "lxc_image_cache_server_mirrors" list which is only done for compatibility (legacy) purposes. The default string type variable, "lxc_image_cache_server", will be removed from the "lxc_hosts" role in the in "R" release. Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * In Ubuntu the "dnsmasq" package actually includes init scripts and service configuration which conflict with LXC and are best not included. The actual dependent package is "dnsmasq-base". The package list has been adjusted and a task added to remove the "dnsmasq" package and purge the related configuration files from all LXC hosts. * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Other Notes *********** * openSUSE Leap 42.X support is still work in progress and not fully tested besides basic coverange in the OpenStack CI and individual manual testing. Even though backporting fixes to the Pike release will be done on best effort basis, it's advised to use the master branch when working on openSUSE hosts. Changes in openstack-ansible 15.0.0.0rc1..16.0.0 ------------------------------------------------ 8fbe91d Final SHA Bump for stable/pike pre release 63ea1ca Suppress curl warning w/shell module 6b94a6c Bump SHA's prior to releasing 16.0.0 dd4d91b scripts: scripts-library.sh: Fix tracepath logging ecd269f roles: bootstrap-host: Remove useless 'break' command from case statement 82ec7f8 roles: bootstrap-host: Fix typo in postup/postdown options for SUSE c8494e6 Pin Dragonflow in stable/pike 8f8abbf [DOC] Add openSUSE Leap references dbdfbec [DOC} Add openSUSE to Software requirements c74c9eb Fix LXC container start order 1ec85b2 Revert "Modify unbound to JIT install clients" c148398 Declare openSUSE Leap 42.X support as WIP df2e43b tests: bootstrap-host: Add SUSE support in the RedHat network scripts 4e6e87a playbooks: os-lxc-container-setup: Force kill a container on openSUSE if it takes too long to stop 275b5e8 playbooks: os-swift-install: Use correct group name on openSUSE 524c3d1 playbooks: utility-install.yml: Update package cache on openSUSE 9587f07 group_vars: all: Replace spaces with underscores in distro repository 85fc159 tests: bootstrap-host: Refresh repositories on SUSE d93bab3 tests: bootstrap-aio: Add sftp subsystem option for SUSE 3b69bbc tests: bootstrap-host: Add ability to configure networking on SUSE 394cbd3 tests: bootstrap-host: Add SUSE variables file e2a8a7b tests: bootstrap-host: Use btrfs tools to determine available disk space 0c99bf0 scripts: bootstrap-ansible: Add required packages on openSUSE Leap 67e1a0e scripts: scripts-library.sh: Add support for openSUSE 4688f77 scripts: scripts-library.sh: Do not use the '-m' option on tracepath ac5c320 scripts: scripts-library.sh: Hide 'which' command output 2f02fd9 Vagrantfile: Add openSUSE support bc1717c Vagrantfile: Increase VM memory size to 12G b2597fd Update role SHA's for online migration fixes 3407125 Enable verbose logging when fetching roles via git-clone 5255170 Correct zuul-cloner cloning of pinned SHA's 5b21a8b Correct cinder online migrations command ce43b73 Update documentation redirects b15efc2 Remove python3 usage in bootstrap-ansible.sh 7737930 ansible-role-requirements: Bump version for the 'bird' role 1c0302f Set serial to 100% for nova_compute 52b1cb4 scripts: scripts-library.sh: Fix location for log directory f2ce540 Bump SHAs for Pike final rc 6c8e2b4 Bump ansible-keepalived to 3.0.3 bd2f417 Update docs/tooling for Pike 9a539c3 Test containerised cinder-volume eef6a62 Pin ARA for Pike a9cfb2b Revert "Reduce container counts for cinder, ironic and trove" f09b7e6 Reduce CentOS AIO bootstrap pkg list ef7bc41 Fix import of osa_toolkit in inventory-manage.py b013dec Fix Barbican's health checks 11aa1a2 Update the playbook serial settings e567837 Bootstrap Ansible fails if partial keypair exists 0146e3e Remove repeated pip_install role execution f783831 Update UPPER_CONSTRAINTS_FILE for stable/pike ffdc7bc Update .gitreview for stable/pike 2bf2d65 Allow Keepalived to read haproxy pid file f63db53 Add subunit output to ARA reporting b7a0ded Use correct dnf.conf path for proxy c410546 Pin SHA's for stable/pike rc1 2b2bd4d Use LXC reverse proxy in OpenStack-CI 7b39cba Remove the reload from the cinder playbook cbe43d5 Clarification of the openstack_user_config.yml.example 7fa186b Remove extra horizon_wsgi_threads variable da5759d Update Ansible to 2.3.2.0 f47ec3e Update fastest-infra-wheel-mirror 56a388e Fix python prereq install task 55e084b Run resolvconf role on hosts only after unbound is deployed 1b7628b Improve proxy vars in user_variables.yml e22ce54 Update worker threads to better optimize gate memory 686c9f3 Add dnf support to ceph playbook 4e24b58 Add a switch for the gate job exit tasks bbbd367 Add dnf support b3c670f Modify unbound to JIT install clients 64f942b remove the use of iteritems 7ac103e Octavia scenario e32deaa Temporarily pin all ceph roles d7a9d83 Dynamically retrieve the location of ARA to work on both py2 & py3 b3cd95f Use ansible-runtime python for internal scripts 9cd4292 Support cidr_networks in L3 network environments 09249d0 Lists of user variables files in bootstrap-host role 3e8489c Allow PYTHON_EXEC_PATH in bootstrap-ansible 6ccf4c1 Update and replace http with https for doc links in OpenStack-Ansible f10c80d [Trivialfix]Fix typos 808b2ee Run the common setup tasks on Unbound DNS containers fb5856c Create env.d overrides directory during bootstrap 01878ae Fix the unbound resolver conf.d filenames faa5fdd Updated from global requirements ea6954f Use python import machinery for inventory code 55f0c1f Remove trove_regular_user 05f3601 Add etcd environment definition 9220732 group_vars: repo_all: Always build cryptography from source a28beed Prefilter the list of groups for repo_masters 1c3a57a Unpin SHA's post Pike-3 release 009a37e Fix SHAs for Pike milestone-3 af5c873 [DOCS] Update of SSL Config to include HAProxy ece5067 Move Upgrade branch change above initial library source 2e8e68e Provide default python path 7499771 Add python2 headers for the host package install eb05d83 Revert "Update setuptools to 36.2.0" 5f7000e Improve ansible host & venv bootstrap 1c9ff37 Fix double conditional bug 6e894ee Make master repos contain all distros bb9beeb Fix variable names in sripts-library.sh 1f80d9c Add python package for ansible bootstrap fefcbcb Restart nova-placement service only when necessary bbea424 Remove stray VIRTUALENV_OPTIONS 4514082 Bump Ansible version to include include_role fix 82da9b6 Reduce ansible bootstrap packages 60a1673 Fixes deploy-guide links 27accd6 Simplify nova_cinder_rbd_inuse set fact d4ae086 Update setuptools to 36.2.0 1aeed9b Optimize execution of RBD set fact 33d8122 Update URL home-page in documents according to document migration be1419d Remove ceph_client role execution from playbooks 6519bd6 Only gather facts when necessary 022ec0e Remove run-playbooks 5c918b4 Idempotent nova db privilege grants 79021ad Restart glance services only when necessary f0e6184 Cleanly catch keyboard interrupts during tests e115d4d Set python interpreter for connection:local plays 2213cf9 py35: Set virtualenv options for CentOS 4d4d1be Tidy up keystone need_db_sync fact 08885fe Optimize the link address 8ad53fb Add debug data to data-plane-test 05f7979 Correct swift3 repo variable names 78179e9 Ensure ansible bootstrap works properly with py35 4cef8b6 Implement rolling upgrades for nova 87dcb17 Add translations test-site deployment option 4c6f4d2 Set PrivateDevices=false for CentOS7 Ceph deploys e3524ec Correctly map nova git sources b0ff0fd Fix openstackdocstheme settings 315780f March to the beat of the new docs drum 1c59857 Fixes Ocata doc link 6777032 Fix localhost python interpreter. d175e09 Use env var for the clone root 255c489 Update all SHA's for Master (Pike) as of 30.06.2017 27298a7 Implement rolling upgrades for glance b158b90 Update Calico repo build information 2ba9800 Consolidate final two keystone plays 5b9d96e Bootstrap Ansible with Python3 on Ubuntu 3feeb57 Updated from global requirements 7691623 Ensure that role path is absolute 4f6e339 Switch from oslosphinx to openstackdocstheme 7c642cc Change the variable name play_hosts to ansible_play_hosts 1e7085a Allow keystone playbook to work with limits 14793d7 Implement rolling upgrades for neutron 8243a80 Remove Ceph warning. 46ccb91 [Docs] Recommendations for firewalld 5b433aa Avoid renaming tempest result files 002c35f scripts: sources-branch-updater: Allow role requirements updates on master b55fc72 Work around bad DNS resolution ecf32e2 Implement rolling upgrades for keystone ef12bf0 Implement rolling upgrades for cinder 324857e Block comment should start with '# ' 275f3da Override keepalived uca repo with common variable 3b910f1 Use distro specific netcat package names b9c839f Move unsetting of group and host env vars 14ae2dd Set PrivateDevices=false for MemcacheD 5640b27 Implement a data plane down time test for upgrades 5f30197 scripts: sources-branch-updater-lib.sh: Avoid using 'dirname $0' c43f0bd Remove localhost host_vars file ebdf81b scripts: sources-branch-updater-lib.sh: Fix typos d10f52b Set PrivateDevices=false for Galera e9ef150 scripts: Introduce sources-branch-updater-lib library 28b646e Fix race condition regression 7e4d83e Add API availability tests to upgrade 4ecc7c3 Add additional role path for lint testing 6963b8e Switch to Cryptography over pycrypto 2798cf4 Use new ansible-hardening role abb3349 Use the same version of ansible as tests repo a1c1e6f Set python2 for SHA updating scripts 90016a2 Updated from global requirements 4e074e8 Updated from global requirements 7f5e85b Vagrant: Implement plugin check and simpler config e2f56ec Fix Python 3 bytes vs strings differences fa5336c Fix Python 3 dictionary incompatibilities 693c4b6 If repo build fails, force all hosts to fail ed7032f Revert role pin for further Pike development ed4ccd5 Add support for python 3 inventory tests 4237287 Avoid retrieving IP from a bridge without IP a1d51d5 Improve compatibiliity with Python 3 952fad5 Update vars to match latest keepalived role f9f5f00 SHA Pin for OSA Pike-2 e7800ce Simplify multi arch repo build 09b9641 Updated from global requirements 165e92c Update Ansible to 2.3.1.0 1986b06 Unset group and host vars variables during upgrade a8aba56 docs: Remove all the unnecessary blockquotes ff85023 Remove cinder_glance_api_version option 43dd3cb Add license boilerplate to Vagrantfile f7bb1e9 Add nc to the packages to install during upgrade 407002f Vagrantfile resize handling 58b4f6d Use root folder group_vars f02b548 SHA Bump for Pike as of 26.05.2017 39900e1 Remove snowflaked keepalived config cb3847c Move to a all/ group var folder 8d8e76c Avoid jinja2 templating in when warnings 62f05f7 Remove when {{ ca6d36f Ceilometer: Update URL used to source default configs e138a5e [ops-guide] Adds links to networking info in ops and networking guide 77ac881 Add var for environment used only inside playbooks b379bcf [ops-guide] Adding live migration section to ops-guide e868073 Updated from global requirements 03cdc4f Pass package list as a list 46acf2d Fix CentOS swap creation 1612733 Fix os_cmd script for tty bfa4e97 Update all SHAs for Pike 2017-05-15 129ee2a Gnocchi: Update URL used to source default configs e32cfea Updated from global requirements 3bec543 Isolate ansible-runtime venv site packages a966862 scripts: sources-branch-update.sh: Remove double 'sed' 7d0b033 Update sources-branch-updater to cater for git sourced config e56dc09 Change swap creation command for CentOS a293d10 [DOCS] Fix typos in index links for documentation 63302c6 [Docs] Cleanup developer section bf0fdb5 Adjust typesetting of disk requirements 119002a Adjust indent of inventory-manage.py 4a35fe9 Remove unused properties from environment files 95b7157 Do not use those commands when they are not exist. 8ebd4b6 Fix mysql check for galera for CentOS 2a0766b [Docs] Describe variable files locations c57ae01 [ops-guide] Removing 'draft' from operations-guide 52fe77b Fix cinder backends detection for nova ceph deploy 37e78b6 Enable ARA cross-repo testing bddcfb8 [DOCS] dded Instance Connectivity + Network Troubleshooting 8f0ff13 Bump ceilometer SHA 23a7eb6 Use package module to install distro packages 43d664b [ops-guide] Add live migration content 8a4729d SHA Bump for Pike 28/04/2016 62bc0d7 Enable cross-repo testing for OSA integrated tests 06269c1 Use wait_for_connection instead of wait_for to check container c294599 Add designate public and internal URL config f5c72e5 Bugfix for wait_for_ssh for waiting for connectivity d872a07 Update galera repo url variables during upgrades adcdb7e Add variable for template filename 4279629 Unset bootstrap-ansible variables between upgrades a05bf7c [DOCS] Internal/External VIP should be different IPs 13a8c27 Only bind haproxy to internal IP, repo and galera 36843ee Adding contributing guide to tests/ structure 5afc0aa [DOCS] Have different release/git branch name 13f8256 Update ansible-lint to 3.4.12 3320471 [DOCS] Fix link to individual role docs 0c94344 Add keystone public endpoint ce05985 Update Ansible to 2.3.0.0 b3e7a79 Enable SSL termination for octavia 7b0fd88 [docs] Redirecting deploy guide link e7263ad Move included vars to vars section d04647a Deploy package cache proxy on unbound 8033841 [DOC] Fix ntp service doc for CentOS 5c048b9 Unpin Roles for Pike-2 release 26b1fb9 Role Pin for Pike OSA Milestone-1 ce64ef4 Add group vars to prep for os_neutron role changes af28828 [DOC] use 127.0.0.1 for mysql connection 11f7da6 [DOCS] Fix the dead link 936610a [docs] Add backup information to the OSA Ops Guide b769a6e Reduce container counts for cinder, ironic and trove 89cd5c8 Set a sane default haproxy_bind_on_non_local 3a1418a Ensure proxy check is short circuit 2dd0756 Configurable haproxy network whitelists a163614 Fix a typo 35411cd Fix a typo 2e9e369 Fix ceph installation on CentOS aa459b3 [Docs] Firewall guide 0a01e1e Fix rally installation inside utility container d9e1330 SHA Bump as of 04 April 2017 a3a1535 [ops-guide] Add network maintenace content 20a4340 update package locations path in repo-build play 45d778e [docs] Update Ocata release status in heading 95b51a8 Implement http-check on haproxy services e380357 Add trove RPC encryption keys 6d757ca Update haproxy check script in keepalived. 2be3319 Restructure lib directory to install via pip 9603b8a deploy-guide: fix small rst format issues 1059b19 Keystone: Source template files from git or deploy host a74b741 Update Ansible to 2.2.2.0 57178f7 [DOCS] Add checklist item for ceph_stable_release f9061c0 Remove Ceilometer API Service 05b935b Fix pip_links for LB terminated SSL environments baba7b3 SHA Bump on Master as at 22 March 2017 bb7c067 Add support to install a molteniron server 24d52d5 Update Vagrantfile to include CentOS7 2feef33 Updated from global requirements cacf410 Add better support for multi-OS deployments 83a6b09 Implement fix for Octavia host group name 27d2754 Remove "tenant_id" from the nova endpoint a988176 [DOCS] Fixes broken link 2377479 Introduce userspace group_vars and host_vars a44e418 Remove git_dest variables daf20d0 Additions to install OpenStack Octavia 8152a15 Provide example of using veth pairs for br-vlan 1c0da7e Add Swift3 middleware to openstack_services daca930 Use OpenStack-Infra MariaDB mirror in OpenStack-CI 894e219 [docs] Updated restarting services section 3f6d625 [docs] Reorders ToC to avoid gap 9220d52 Tidy up upgrade scripts 1ed6d9f Remove epel form bootstrap-host installation. fe84f80 Updated from global requirements 6dcb678 Remove unused confusing data in example 47c684d [DOC] Fix doc about EPEL ef70b6f [docs] Update doc references for Ocata/Pike e2f62f9 Check if env.d folder exists for upgrades 51689d2 Answer the upgrade no-going-back prompt 6d6f34c [docs] Add scenario customisation information to AIO quick start guide 39d1f38 DOC - Add note regarding Ansible hostname bug b251aef [docs] Update developer docs script reference 722b5ff Ensure that the terminal type is set 8de5d4f Check for rbd as a default & optional glance back-end 20b068d Fix upgrade script-library check 27b5c8e Bump the Aodh SHA ae6a005 AIO: Provide facility to exclude apt distributions f63701a [docs] Add http public endpoint example 2759d7f [docs] Add content to the troubleshooting chapter beafe30 [docs] Fix formatting for Core Reviewers page f899ee2 Add openstack_user_config reference to Networking Appendix 9df34f6 Add rsyslog_client configuration for Calico a39837a Remove with_items from utility pip install 1e4d474 Serialize RabbitMQ container prep 56f31c2 Add ceph container bind mounts to group_vars e992ff0 Move glance container bind mount dirs to group_vars 2aa4a3f Adjust gate-check-commit for deploy/upgrade testing 8721437 Update all SHAs for Pike 2017-03-03 1053adf Implement ARA logging and reporting for openstack-ansible gate jobs d7c5711 Added a common tag to the common tasks 2b3ad52 Updated from global requirements f517b14 Move ceph client role to playbooks for faster run time cf6600d Updated from global requirements e74eca2 Install rdo package 59aaac0 Only insert container hosts into lxc_hosts 448b9ce Update keystone SHA to support db_sync check be08a06 Use an explicit version of urrlib3 ca2fecc update galera cluster database bind mount dirs 67f2db5 Place gnocchi database bind mount dirs to be in group_vars 5094011 Remove ceilometer from the gate 4c04c68 unify interface lookups 9aeea15 Updated from global requirements dfdda46 Add vagrantfile for AIO testing f438c65 Move upper constraint logic to after python is installed ce14919 Disable haproxy endpoint drain wait 3a08bb7 Fix error during 'inventory-manage.py -r' calls 0463862 Update thread/worker settings for optimal memory usage 41cf2f5 Updated from global requirements e0f219a Update doc index for Pike d427a7f [Doc] fix small typo 6a8f21d Use setuptools 33.1.1 53d6e17 [docs] Update troubleshooting chapter in ops guide 42292e1 Deprecate ceilometer-collector 4f1010d [Docs] Remove infra references from refinfo 7544ea9 [Docs] Scratch the content of backup and restore fc49b7d [Docs] Refactor galera ops page a930912 [Docs] Integration of role maturity matrix f09e0a2 Fix fastest-infra-wheel-mirror.py for CentOS. 3bdf5aa Add in ironic_service_user_name group_vars/all.yml cd267f1 Fix ceph AIO bootstrap for CentOS f5ed8d4 [DOCS] Fix ansible fact caching information 03a6b40 [Docs] Cleanup Container mgmt 349ba40 [Docs] Fix block storage refs in scale-environment 19a1a32 [Docs] Small fixes on swift Multi-Region guide ca98a28 [DOCS] Updated network services config references f064940 [DOCS] Update image management 5c4c6bc [DOCS] Use openstack commands 8c8f62e [DOCS] Remove redundant limit command 9583bdd [DOCS] Updated CLI examples 5ac874d [Docs] Clarify user_*.yml precedence 0feeb44 [DOCS] Correct CLI Operations examples 5e2322c [Docs] Add note to run ad-hoc commands from playbooks dir 8782f11 [Docs] Fix advanced config OSA integration section e7e0c95 Add "at least" in reference to Ethernet int 4c8db04 [Docs] Small cleanups to advanced config 257b602 Serialize Keystone and manage haproxy endpoints 9037c53 Fix broken install guide link 259992d Rename neutron_dhcp_domain to neutron_dns_domain 8057996 Make Magnum proto use openstack_service_proto e44a7f1 Add CentOS support for AIO setup 3ddf708 Remove security role from user_variables.yml 6bc3bf9 Cinder use correct glance API when RBD enabled 9ea99be Set upgrade test to test ocata->master f5d6475 Integration of dragonflow in integrated gate ab5c6ce Removing openrc download docs 2b21dc2 SHA Bump for master 15-02-2017 2de2c01 [Docs] Complete the example file c0dfe2a [Docs] Remove Kilo 339f12a [ops-guide] Add rabbitmq content e4551ef [DOCS] Move limited connectivity section to Deploy Guide 9c94a5b [DOCS] Fix link to plugins docs a9b8752 [DOC] Fix release name in quickstart doc 92ccc1b [DOCS] Include branch in links to role docs cb750e5 [Docs] Fix documentation for Cinder NFS backend 7659b63 [DOCS] Move links to role docs to deploy guide 2ce6356 Updated from global requirements 06cd163 Get conf files from local git server rather than upstream 96c7660 Ensures the host IP isn't used for containers 9831ad8 Updated from global requirements 0495961 Remove 3DES from ssl_cipher_suite 56f72ac Fixed typo causing bug in openstack-hosts-setup 59b3495 Target unbound component group instead of _all 541f04e Bring idempotency to swapon d263099 Add tracepath commands to the AIO 248caaf Revert role pins in master branch 60351bc Add group vars to enable integration with barbican 5f3cad6 Using yaml.safe_load instead of yaml.load 6b7147e Move scenario variables under vars 99c163f Use upstream profile_tasks callback 6680528 Fix typo in ip.py a687052 Use https instead of http for git.openstack.org ccea3dd Replace 'assertTrue(a in b)' with 'assertIn(a, b)' 7299336 Docstrings should not start with a space 75371dd Configurable haproxy network whitelists e572694 Update reno for stable/ocata ccabfa0 Fix haproxy playbook group target 3c8548b Work on starting the upgrade job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 28 +- Vagrantfile | 99 ++ ansible-role-requirements.yml | 106 +- .../source/app-advanced-config-options.rst | 7 +- .../source/app-advanced-config-override.rst | 3 +- .../source/app-advanced-config-security.rst | 7 +- .../source/app-advanced-config-sslcertificates.rst | 46 +- deploy-guide/source/app-advanced-role-docs.rst | 11 - deploy-guide/source/app-ceph.rst | 7 +- deploy-guide/source/app-config-pod.rst | 159 +++ deploy-guide/source/app-config-prod.rst | 2 +- deploy-guide/source/app-config-test.rst | 14 +- deploy-guide/source/app-custom-layouts.rst | 8 +- deploy-guide/source/app-limited-connectivity.rst | 152 +++ deploy-guide/source/app-networking.rst | 35 +- deploy-guide/source/app-resources.rst | 6 +- deploy-guide/source/app-security.rst | 12 +- deploy-guide/source/app.rst | 2 + deploy-guide/source/conf.py | 37 +- deploy-guide/source/configure.rst | 114 +- deploy-guide/source/deploymenthost.rst | 80 +- deploy-guide/source/overview-requirements.rst | 43 +- deploy-guide/source/targethosts-networkconfig.rst | 3 + deploy-guide/source/targethosts-prepare.rst | 92 +- .../admin/maintenance-tasks/ansible-modules.rst | 136 +++ .../admin/maintenance-tasks/managing-swift.rst | 80 ++ .../admin/maintenance-tasks/network-maintain.rst | 196 ++++ .../admin/maintenance-tasks/rabbitmq-maintain.rst | 220 ++++ .../admin/maintenance-tasks/scale-environment.rst | 364 ++++++ .../monitor-environment/monitoring-systems.rst | 11 + .../admin/openstack-operations/cli-operations.rst | 121 ++ .../admin/openstack-operations/managing-images.rst | 62 ++ .../openstack-operations/managing-instances.rst | 386 +++++++ .../admin/openstack-operations/network-service.rst | 39 + .../admin/openstack-operations/verify-deploy.rst | 112 ++ .../installation-hosts-limited-connectivity.rst | 177 --- .../draft-operations-guide/advanced-config.rst | 337 ------ .../draft-operations-guide/maintenance-tasks.rst | 19 - .../maintenance-tasks/ansible-modules.rst | 131 --- .../maintenance-tasks/backups.rst | 37 - .../maintenance-tasks/containers.rst | 194 ---- .../maintenance-tasks/firewalls.rst | 14 - .../maintenance-tasks/galera.rst | 430 ------- .../maintenance-tasks/managing-swift.rst | 78 -- .../maintenance-tasks/network-maintain.rst | 27 - .../maintenance-tasks/rabbitmq-maintain.rst | 24 - .../maintenance-tasks/scale-environment.rst | 366 ------ .../draft-operations-guide/monitor-environment.rst | 11 - .../monitor-environment/monitoring-systems.rst | 11 - .../openstack-operations.rst | 15 - .../openstack-operations/access-environment.rst | 272 ----- .../openstack-operations/managing-images.rst | 125 --- .../openstack-operations/managing-instances.rst | 220 ---- .../openstack-operations/network-service.rst | 41 - .../openstack-operations/verify-deploy.rst | 61 - .../ref-info/ansible-scripts.rst | 21 - .../ref-info/lxc-commands.rst | 37 - .../draft-operations-guide/troubleshooting.rst | 223 ---- .../upgrade-guide/reference-upgrade-playbooks.rst | 90 -- .../openstack_interface.cfg.pod.example | 157 +++ .../openstack_interface.cfg.prod.example | 26 +- .../openstack_interface.cfg.test.example | 32 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 1 + etc/openstack_deploy/conf.d/etcd.conf.example | 9 + etc/openstack_deploy/conf.d/molteniron.yml.aio | 4 + etc/openstack_deploy/conf.d/octavia.yml.aio | 4 + etc/openstack_deploy/conf.d/unbound.conf.aio | 3 - etc/openstack_deploy/conf.d/unbound.conf.example | 8 - etc/openstack_deploy/conf.d/unbound.yml.aio | 3 + etc/openstack_deploy/conf.d/unbound.yml.example | 8 + etc/openstack_deploy/openstack_user_config.yml.aio | 34 + .../openstack_user_config.yml.aio.j2 | 134 +++ .../openstack_user_config.yml.example | 75 +- .../openstack_user_config.yml.pod.example | 511 +++++++++ .../openstack_user_config.yml.prod.example | 25 +- .../openstack_user_config.yml.test.example | 4 +- etc/openstack_deploy/user_secrets.yml | 13 +- etc/openstack_deploy/user_variables.yml | 27 +- .../user_variables.yml.test.example | 6 + global-requirement-pins.txt | 2 +- group_vars/all/all.yml | 122 ++ group_vars/all/aodh.yml | 21 + group_vars/all/ceilometer.yml | 26 + group_vars/all/ceph.yml | 30 + group_vars/all/cinder.yml | 43 + group_vars/all/glance.yml | 51 + group_vars/all/haproxy.yml | 276 +++++ group_vars/all/heat.yml | 34 + group_vars/all/infra.yml | 31 + group_vars/all/ironic.yml | 29 + group_vars/all/keepalived.yml | 69 ++ group_vars/all/keystone.yml | 59 + group_vars/all/magnum.yml | 23 + group_vars/all/neutron.yml | 50 + group_vars/all/nova.yml | 60 + group_vars/all/octavia.yml | 31 + group_vars/all/pip.yml | 26 + group_vars/all/sahara.yml | 34 + group_vars/all/ssl.yml | 21 + group_vars/all/swift.yml | 29 + group_vars/all_containers.yml | 31 + group_vars/aodh_all.yml | 24 + group_vars/barbican_all.yml | 33 + group_vars/ceilometer_all.yml | 36 + group_vars/ceph_all.yml | 19 + group_vars/cinder_all.yml | 50 + group_vars/cinder_volume.yml | 22 + group_vars/designate_all.yml | 59 + group_vars/galera_all.yml | 28 + group_vars/glance_all.yml | 38 + group_vars/gnocchi_all.yml | 40 + group_vars/haproxy_all.yml | 37 + group_vars/heat_all.yml | 28 + group_vars/horizon_all.yml | 41 + group_vars/hosts.yml | 29 + group_vars/ironic_all.yml | 25 + group_vars/ironic_compute.yml | 16 + group_vars/keystone_all.yml | 39 + group_vars/magnum_all.yml | 32 + group_vars/memcached.yml | 23 + group_vars/neutron_agent.yml | 28 + group_vars/neutron_all.yml | 30 + group_vars/neutron_calico_dhcp_agent.yml | 107 ++ group_vars/nova_all.yml | 46 + group_vars/octavia_all.yml | 19 + group_vars/rabbitmq_all.yml | 22 + group_vars/repo_all.yml | 68 ++ group_vars/rsyslog.yml | 19 + group_vars/sahara_all.yml | 21 + group_vars/swift_all.yml | 31 + group_vars/trove_all.yml | 46 + group_vars/utility_all.yml | 71 ++ host_vars/.placeholder | 0 lib/__init__.py | 0 lib/dictutils.py | 92 -- lib/filesystem.py | 310 ------ lib/generate.py | 1096 ------------------ lib/ip.py | 322 ------ lib/manage.py | 339 ------ lib/tools.py | 53 - osa_toolkit/__init__.py | 0 osa_toolkit/dictutils.py | 92 ++ osa_toolkit/filesystem.py | 315 ++++++ osa_toolkit/generate.py | 1170 ++++++++++++++++++++ osa_toolkit/ip.py | 325 ++++++ osa_toolkit/manage.py | 356 ++++++ osa_toolkit/tools.py | 53 + playbooks/ceph-install.yml | 93 +- playbooks/common-playbooks/cinder.yml | 121 ++ playbooks/common-playbooks/glance.yml | 89 ++ playbooks/common-playbooks/neutron.yml | 120 ++ playbooks/common-playbooks/nova.yml | 171 +++ playbooks/common-tasks/dynamic-address-fact.yml | 51 + playbooks/common-tasks/dynamic-grouping.yml | 4 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 30 + playbooks/common-tasks/mysql-db-user.yml | 4 + playbooks/common-tasks/os-log-dir-setup.yml | 4 + playbooks/common-tasks/os-lxc-container-setup.yml | 39 +- playbooks/common-tasks/package-cache-proxy.yml | 31 +- playbooks/common-tasks/rabbitmq-vhost-user.yml | 5 + playbooks/common-tasks/restart-service.yml | 45 + playbooks/common-tasks/set-pip-upstream-url.yml | 4 + playbooks/common-tasks/set-upper-constraints.yml | 10 + playbooks/defaults/repo_packages/gnocchi.yml | 5 +- playbooks/defaults/repo_packages/nova_consoles.yml | 8 +- .../defaults/repo_packages/openstack_services.yml | 117 +- .../defaults/repo_packages/openstack_testing.yml | 6 +- playbooks/defaults/repo_packages/projectcalico.yml | 22 - playbooks/defaults/repo_packages/readme.rst | 1 - playbooks/etcd-install.yml | 2 + playbooks/galera-install.yml | 11 +- playbooks/haproxy-install.yml | 8 +- playbooks/inventory/dynamic_inventory.py | 14 +- playbooks/inventory/env.d/aodh.yml | 2 - playbooks/inventory/env.d/barbican.yml | 2 - playbooks/inventory/env.d/ceilometer.yml | 19 +- playbooks/inventory/env.d/ceph.yml | 3 - playbooks/inventory/env.d/cinder.yml | 3 - playbooks/inventory/env.d/designate.yml | 10 +- playbooks/inventory/env.d/etcd.yml | 34 + playbooks/inventory/env.d/galera.yml | 3 - playbooks/inventory/env.d/glance.yml | 1 - playbooks/inventory/env.d/gnocchi.yml | 2 - playbooks/inventory/env.d/haproxy.yml | 1 - playbooks/inventory/env.d/heat.yml | 4 - playbooks/inventory/env.d/horizon.yml | 2 - playbooks/inventory/env.d/ironic.yml | 6 - playbooks/inventory/env.d/keystone.yml | 2 - playbooks/inventory/env.d/magnum.yml | 2 - playbooks/inventory/env.d/memcache.yml | 2 - playbooks/inventory/env.d/molteniron.yml | 35 + playbooks/inventory/env.d/neutron.yml | 4 - playbooks/inventory/env.d/nova.yml | 13 - playbooks/inventory/env.d/octavia.yml | 47 + playbooks/inventory/env.d/pkg_repo.yml | 2 - playbooks/inventory/env.d/rabbitmq.yml | 2 - playbooks/inventory/env.d/rsyslog.yml | 2 - playbooks/inventory/env.d/sahara.yml | 2 - playbooks/inventory/env.d/swift-remote.yml | 1 - playbooks/inventory/env.d/swift.yml | 5 - playbooks/inventory/env.d/trove.yml | 2 - playbooks/inventory/env.d/unbound.yml | 2 - playbooks/inventory/env.d/utility.yml | 2 - playbooks/inventory/group_vars/all.yml | 468 -------- playbooks/inventory/group_vars/all_containers.yml | 23 - playbooks/inventory/group_vars/aodh_all.yml | 24 - playbooks/inventory/group_vars/barbican_all.yml | 33 - playbooks/inventory/group_vars/ceilometer_all.yml | 33 - playbooks/inventory/group_vars/cinder_all.yml | 38 - playbooks/inventory/group_vars/cinder_volume.yml | 17 - playbooks/inventory/group_vars/designate_all.yml | 56 - playbooks/inventory/group_vars/galera_all.yml | 19 - playbooks/inventory/group_vars/glance_all.yml | 28 - playbooks/inventory/group_vars/gnocchi_all.yml | 32 - playbooks/inventory/group_vars/haproxy_all.yml | 20 - playbooks/inventory/group_vars/heat_all.yml | 28 - playbooks/inventory/group_vars/horizon_all.yml | 41 - playbooks/inventory/group_vars/hosts.yml | 29 - playbooks/inventory/group_vars/ironic_all.yml | 25 - playbooks/inventory/group_vars/ironic_compute.yml | 16 - playbooks/inventory/group_vars/keystone_all.yml | 27 - playbooks/inventory/group_vars/magnum_all.yml | 32 - playbooks/inventory/group_vars/memcached.yml | 19 - playbooks/inventory/group_vars/neutron_agent.yml | 28 - playbooks/inventory/group_vars/neutron_all.yml | 28 - .../group_vars/neutron_calico_dhcp_agent.yml | 107 -- playbooks/inventory/group_vars/nova_all.yml | 31 - playbooks/inventory/group_vars/rabbitmq_all.yml | 22 - playbooks/inventory/group_vars/rally_all.yml | 18 - playbooks/inventory/group_vars/repo_all.yml | 56 - playbooks/inventory/group_vars/rsyslog.yml | 19 - playbooks/inventory/group_vars/sahara_all.yml | 21 - playbooks/inventory/group_vars/swift_all.yml | 31 - playbooks/inventory/group_vars/trove_all.yml | 46 - playbooks/inventory/group_vars/utility_all.yml | 69 -- playbooks/lxc-containers-create.yml | 14 +- playbooks/lxc-hosts-setup.yml | 1 + playbooks/memcached-install.yml | 1 + playbooks/openstack-hosts-setup.yml | 48 +- playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-ceilometer-install.yml | 3 +- playbooks/os-cinder-install.yml | 302 +++-- playbooks/os-designate-install.yml | 9 +- playbooks/os-glance-install.yml | 173 ++- playbooks/os-gnocchi-install.yml | 8 +- playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-keystone-install.yml | 175 ++- playbooks/os-magnum-install.yml | 1 + playbooks/os-molteniron-install.yml | 52 + playbooks/os-neutron-install.yml | 158 +-- playbooks/os-nova-install.yml | 338 +++--- playbooks/os-octavia-install.yml | 69 ++ playbooks/os-rally-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-swift-install.yml | 8 +- playbooks/os-swift-sync.yml | 1 + playbooks/os-tempest-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/rabbitmq-install.yml | 9 +- playbooks/repo-build.yml | 48 +- playbooks/repo-server.yml | 1 + .../templates/crontab.j2 | 10 +- playbooks/rsyslog-install.yml | 3 +- playbooks/security-hardening.yml | 3 +- playbooks/setup-openstack.yml | 2 + playbooks/unbound-install.yml | 11 +- playbooks/utility-install.yml | 35 +- playbooks/vars/configs/haproxy_config.yml | 289 ----- playbooks/vars/configs/keepalived_haproxy.yml | 68 -- .../configs/keepalived_haproxy_notifications.sh | 34 - .../notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml | 4 + .../notes/Add-CentOS-support-9a63262163dfb678.yaml | 4 + .../notes/add-iptables-5ff8c4317e2e8498.yaml | 8 + .../add-octavia-to-repo-f9d0fd8cee969181.yaml | 5 + .../add-opensuse-support-a8ec3f54188e5f01.yaml | 14 + .../notes/add-swift3-support-a3f1a5d866fd8883.yaml | 5 + .../add-template-file-var-cac35a99a3faf563.yaml | 6 + ...d_and_network_preparation-a414d45b624652a3.yaml | 11 + ...tom-epel-release-packages-b409be1aa46ee9c3.yaml | 6 + ...ble-hostname-bug-rabbitmq-7919f9311d61dcd6.yaml | 9 + ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 + .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 + ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...rbican_init_time_settings-d7510910912fa061.yaml | 23 + .../notes/cap-workers-fc70b4f8586ba1a5.yaml | 6 + ...pping_aodh_wsgi_processes-6db6da9ba36c8851.yaml | 6 + ...nder_osapi_volume_workers-db32afcf7615b05b.yaml | 5 + .../capping_glance_workers-54afc20c20baa14e.yaml | 6 + ...ng_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml | 6 + .../capping_heat_workers-13791c456e59277d.yaml | 6 + .../capping_horizon_workers-29ecc4893bcc3a4b.yaml | 6 + ...ing_ironic_wsgi_processes-6fa7306fc3c29de7.yaml | 6 + .../capping_keystone_workers-e284a47fc4dcea38.yaml | 6 + .../capping_neutron_workers-d97a5d50ca996af5.yaml | 6 + .../capping_nova_workers-349f0f4d3fd50b37.yaml | 7 + ...apping_repo_nginx_workers-ddbc355855f8fe43.yaml | 5 + ...apping_sahara_api_workers-d95bdf63093ce893.yaml | 6 + ...ng_swift_services_workers-5ac9ecb28f56469f.yaml | 8 + ...ter-init-config-overrides-8ac1b94bd70c9c09.yaml | 10 + ...ter-init-config-overrides-bfce7e419061c4da.yaml | 10 + ...ometer_init_time_settings-2eebfa58227ae31a.yaml | 23 + ...er_upstream_file_retrieve-bbbf147cdeacb8f2.yaml | 10 + ...tos-galera-privatedevices-4958f0be6cffa466.yaml | 14 + ...-memcached-privatedevices-d3be3acb19ed71d6.yaml | 14 + ...entos-mirror-url-variable-eea9f226b5611b40.yaml | 5 + ...tos-private-devices-issue-0088e6f8c70a601f.yaml | 21 + ...tos-private-devices-issue-99aab9a30b1f8014.yaml | 21 + .../ceph-extra-components-71f1c130b9b47ba5.yaml | 6 + .../cinder-auth-stragety-02ca99f48ad7739b.yaml | 5 + .../cinder-data-migrations-ce31707c078b335c.yaml | 9 + ...der-init-config-overrides-9e495aee023deed6.yaml | 10 + .../cinder-rolling-upgrades-f069187fc9139276.yaml | 10 + .../notes/cinder_api_v3-cc53677ce77d97c3.yaml | 5 + ...cinder_init_time_settings-1ef46f6b9d4fc1df.yaml | 18 + .../notes/cinder_uwsgi-c6a1651a4c54a8cc.yaml | 15 + .../notes/common-tags-9763f578ea5fe5b6.yaml | 5 + ...onditionally-install-epel-9e8e1b67e5943019.yaml | 16 + ...template-ignore-none-type-9387c236853f061b.yaml | 9 + .../notes/copr-repo-priority-60b3603b0c1ff2f7.yaml | 6 + ...zable-login-banner-string-d8d5ae874e8e49f3.yaml | 6 + .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 13 + .../deprecate_auth_plugin-1a78326719d67f23.yaml | 5 + .../deprecate_auth_plugin-347b326919d67a18.yaml | 5 + .../deprecate_auth_plugin-397a32171826ef78.yaml | 5 + .../deprecate_auth_plugin-451832a71b967e27.yaml | 5 + .../deprecate_auth_plugin-71a83567d996752e.yaml | 5 + .../deprecate_auth_plugin-781a536e19d674e8.yaml | 5 + .../deprecate_auth_plugin-819233a76d4523e8.yaml | 5 + .../deprecate_auth_plugin-a391325719b67612.yaml | 5 + ...ignate-pools-yaml-support-d693dc2471642167.yaml | 11 + ...ignate_init_time_settings-6efb66b0d17d4c04.yaml | 23 + ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + .../dnsmasq-lxc-conflict-fix-c8968f6a16d033c6.yaml | 10 + ...int-change-to-internalurl-3da6bb4bd4972bea.yaml | 7 + releasenotes/notes/esl-repo-6ff0c7f24ad2a043.yaml | 25 + .../notes/extra-headers-e54a672d3a78dd89.yaml | 15 + .../notes/fedora-26-support-70a304f9c97d1b37.yaml | 5 + .../fix-mysql-overrides-e5362ae15c657214.yaml | 8 + .../fix_lxc_hosts_membership-1f73f3114638c09e.yaml | 7 + ...-client-url-var-deprecate-9ced45ea374c3c7d.yaml | 9 + .../notes/get_nested_filter-b89828586d7e2520.yaml | 7 + ...nce-init-config-overrides-d1c8c3dcc50c109a.yaml | 10 + ...glance_init_time_settings-d3cc064fd8acf107.yaml | 15 + .../notes/glance_uwsgi-dd5fe62e6f85ecd2.yaml | 12 + ...nocchi-deploy-config-file-afba6c2a8edac025.yaml | 7 + ...chi-init-config-overrides-4fc9ec27ea1bd090.yaml | 10 + ...nocchi_init_time_settings-ba554f29fc7fd351.yaml | 23 + ...hi_upstream_file_retrieve-e2a056bfc532d761.yaml | 10 + .../notes/group_vars_move-2e8f3c45935e98d8.yaml | 9 + ...haproxy-backend-arguments-3b1dca299c7a8296.yaml | 4 + ...eat-init-config-overrides-004872081661a34c.yaml | 10 + .../heat_init_time_settings-5f9f7cd4326ded97.yaml | 23 + .../notes/heat_uwsgi-11d691aa4d47c35d.yaml | 20 + .../notes/heatstack_password-25956b6143577735.yaml | 5 + .../idempotent-wheel-build-4c527045bec09fd5.yaml | 22 + .../image-allow-location-58212b8e506639f2.yaml | 5 + .../notes/implement-ssl-48a82cf611db0eb6.yaml | 5 + .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 + .../implement_tuning_params-e627c774c0d0c9d2.yaml | 10 + .../inventory-python-imports-c967b20e64b43758.yaml | 6 + ...nic-init-config-overrides-e73d9fd46a69afcf.yaml | 10 + .../ironic_init_time_settings-b8ab3c3c4d733dc.yaml | 23 + .../notes/keepalived-cleanup-d25a27752c0432bc.yaml | 9 + .../keepalived_new_vars-a3b2f0d334f79e10.yaml | 15 + .../keystone-endpoints-urls-679748dec6ee6dd7.yaml | 4 + ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 10 + .../keystone-nginx-default-e9d91affd646f379.yaml | 10 + ...one-upstream-config-files-d16f27fc1332ed83.yaml | 9 + ...ystone_init_time_settings-62a1aab4bcfc9779.yaml | 23 + ...one_plugin_default_update-c025bd5508069df3.yaml | 12 + ...instance-defaults-support-533844543082b2f4.yaml | 6 + .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 + ...c-install-from-pkg-centos-e38d351a3a9ac67e.yaml | 5 + .../lxc-interface-scripts-78e9021cf2ed0c97.yaml | 7 + .../lxc-ssh-wait-deprecation-fe3eda58fc9d318e.yaml | 12 + .../lxc_image_cache_server-f14701a7f8f4b8ca.yaml | 14 + .../lxc_net_manage_iptables-95e52387dcef0015.yaml | 5 + .../notes/magnum-client-urls-64af5efc9ece6680.yaml | 13 + ...num-init-config-overrides-aec21cbbd9da8e4e.yaml | 9 + .../magnum_init_time_settings-6ecc4ff27d7dca1.yaml | 23 + .../move-gnocchi-component-118ae07fce3562e1.yaml | 6 + .../multi-os-wheel-repos-7910b13547ea59ad.yaml | 9 + ...eutron-dragonflow-support-fce23f85c6a0bebd.yaml | 7 + ...ron-init-config-overrides-9d1d2b3b908705ed.yaml | 10 + .../neutron-rolling-upgrades-5269b62ea216df5e.yaml | 7 + ...eutron_init_time_settings-66ad8a3d9eb951b0.yaml | 23 + .../nova-data-migrations-f6c2bc0f9e7b1908.yaml | 9 + ...ova-init-config-overrides-7221a8f9d5be9291.yaml | 9 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...a-ocata-conf-deprecations-0a99d13c97424c51.yaml | 13 + .../notes/nova-placement-api-07ce03fdceb95c6d.yaml | 12 + .../nova-rolling-upgrades-5a3927330c6be5fd.yaml | 7 + .../notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml | 9 + .../nova_init_time_settings-cef7e89ab41da256.yaml | 23 + .../nova_use_cinder_v3_api-ce5f9c030591c404.yaml | 6 + .../notes/nova_uwsgi-af062fa20317d41c.yaml | 23 + ...via-init-config-overrides-554491baa2e97102.yaml | 10 + ...octavia_init_time_settings-4e66767550df88d.yaml | 23 + .../notes/octavia_uwsgi-f5d10fec3c1950bf.yaml | 15 + ...ron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml | 4 + ...octavia-haproxy-templates-18561d31bcd7151e.yaml | 7 + .../password-lifetime-opt-in-c380f0ec81daffd0.yaml | 7 + .../pip-extra-index-remove-db32c770a70c8faa.yaml | 5 + .../plugins-remove-neutron-cbea1235e030e4f5.yaml | 5 + ...primary-container-rebuild-a2f4d7f33d66c843.yaml | 5 + .../notes/public-uri-proto-a1f05edd1a594f7f.yaml | 5 + .../notes/rabbimq-ssl-611102b1525ba5c2.yaml | 6 +- .../notes/recreate-option-d78bae1fd922a84d.yaml | 6 + .../remove-ceilometer-api-2bada67ecc58e18b.yaml | 11 + ...move-ceilometer-collector-aeaf6e9e1d3eb345.yaml | 9 + .../remove-console-keymap-ae255da81979a3a5.yaml | 13 + .../remove-haproxy-repo-vars-051a47bbfaf6d1da.yaml | 8 + .../notes/remove-plumgrid-8c86d99999a2ca48.yaml | 5 + .../notes/remove-uca-rdo-8c625c61eeb9a771.yaml | 5 + ...glance_api_version_option-2d5508ed5deaba58.yaml | 6 + ...glance_api_version_option-5dc1d316c979e940.yaml | 5 + ...move_nova_cpu_mode_option-e9fcfc97aa13a29a.yaml | 9 + .../notes/remove_rpc_backend-1163da2fe9418315.yaml | 5 + .../notes/remove_rpc_backend-1729234e23895f18.yaml | 5 + .../notes/remove_rpc_backend-187132a35223d295.yaml | 5 + .../notes/remove_rpc_backend-7123da9fe3419215.yaml | 5 + .../notes/remove_rpc_backend-78139a469235891f.yaml | 5 + .../notes/remove_rpc_backend-8134a355d9864e12.yaml | 5 + .../notes/remove_rpc_backend-89135235e3513394.yaml | 5 + .../notes/remove_rpc_backend-9813a3455f234521.yaml | 5 + .../notes/remove_rpc_backend-a37345891a987f21.yaml | 5 + .../notes/remove_rpc_backend-a9832d7699ef1245.yaml | 5 + .../notes/replace-epel-df390980c03bbaa8.yaml | 9 + .../notes/rpc-encryption-b75fb0d08579a7dd.yaml | 7 + ...log_server_storage_policy-1dcdd5630acdeb79.yaml | 5 + ...ara-init-config-overrides-4c35b88618b0d0b4.yaml | 10 + ...sahara_init_time_settings-5ed44feb1285b867.yaml | 23 + .../notes/sahara_uwsgi-41e7e0a91a3f8c33.yaml | 15 + .../notes/save-mac-addresses-8b1e6e6301d99a37.yaml | 7 + ...service_net_endpoint_type-60dbb87c4f68403c.yaml | 7 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 + ...sion-1-renumbering-fiesta-aa047fea3ea35e74.yaml | 20 + ...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml | 11 + .../notes/suse-support-7919a5e43ebdd793.yaml | 4 + .../notes/suse-support-f50df7e6b27e3e15.yaml | 4 + ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 10 + .../notes/swift-pypy-support-9706519c4b88a571.yaml | 4 +- .../swift_init_time_settings-20ea7817cbd2dca9.yaml | 23 + .../swift_internal_client-7c497400d7a8b4a2.yaml | 7 + ...est-remove-old-run-script-4365fa3b091169d8.yaml | 10 + ...ove-init-config-overrides-a78ed428a32adef8.yaml | 10 + .../trove_init_time_settings-dd293238c53c517.yaml | 23 + .../notes/ubuntu-s390x-0a561bc69354d48a.yaml | 3 + .../notes/ubuntu-s390x-c8dcc05e32e1d9eb.yaml | 3 + .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 + ...ate-multi-backend-options-4eb27290058401d3.yaml | 9 + .../update_translations-f950283d821bba05.yaml | 8 + ...space_group_and_host_vars-14f77b5eb518e32d.yaml | 22 + ...-rename-gnocchi-endpoints-87626018773f77e0.yaml | 5 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + requirements.txt | 8 +- scripts/ansible-role-requirements-editor.py | 2 +- scripts/bootstrap-aio.sh | 8 +- scripts/bootstrap-ansible.sh | 130 ++- scripts/fastest-infra-wheel-mirror.py | 30 +- scripts/gate-check-commit.sh | 194 +++- scripts/gen-config.py | 7 +- scripts/get-pypi-pkg-version.py | 2 +- scripts/inventory-manage.py | 19 +- scripts/keepalived_haproxy_notifications.sh | 34 + scripts/openstack-ansible.rc | 10 +- scripts/os-cmd | 2 +- scripts/pw-token-gen.py | 4 +- scripts/release-yaml-file-prep.py | 2 +- scripts/run-playbooks.sh | 132 --- scripts/run-upgrade.sh | 44 +- scripts/scripts-library.sh | 198 ++-- scripts/sources-branch-updater-lib.sh | 291 +++++ scripts/sources-branch-updater.sh | 260 +---- scripts/update-revision.sh | 3 +- .../playbooks/ansible_fact_cleanup.yml | 1 + .../playbooks/deploy-config-changes.yml | 73 +- .../playbooks/galera-cluster-rolling-restart.yml | 2 +- .../playbooks/memcached-flush.yml | 15 +- .../playbooks/user-secrets-adjustment.yml | 3 +- .../scripts/migrate_openstack_vars.py | 4 +- setup.cfg | 5 +- setup.py | 2 +- test-requirements.txt | 9 +- .../bootstrap-host/tasks/check-requirements.yml | 15 +- .../bootstrap-host/tasks/install_packages.yml | 109 ++ .../bootstrap-host/tasks/prepare_aio_config.yml | 52 +- .../tasks/prepare_loopback_cinder.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 72 +- .../bootstrap-host/tasks/prepare_networking.yml | 139 ++- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 79 ++ .../bootstrap-host/templates/apt-sources.list.j2 | 18 +- .../bootstrap-host/templates/osa_interfaces.cfg.j2 | 39 + .../templates/osa_interfaces_multinode.cfg.j2 | 6 +- .../templates/redhat_interface_alias.cfg.j2 | 5 + .../templates/redhat_interface_default.cfg.j2 | 11 + .../templates/rpm_interface_ifdown-post.cfg.j2 | 29 + .../templates/rpm_interface_ifup-post.cfg.j2 | 35 + .../templates/suse_interface_default.cfg.j2 | 8 + .../templates/user_variables.aio.yml.j2 | 151 ++- .../templates/user_variables.ceph.yml.j2 | 16 - .../templates/user_variables_ceph.yml.j2 | 29 + .../templates/user_variables_octavia.yml.j2 | 25 + .../templates/user_variables_translations.yml.j2 | 22 + tox.ini | 26 +- 592 files changed, 18710 insertions(+), 11783 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cbbac23..ed8d1a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +4 @@ -pip>=7.1.0 # MIT -setuptools!=24.0.0,>=16.0 # PSF/ZPL -wheel # MIT -pyasn1 # BSD +pyasn1!=0.2.3 # BSD @@ -9 +6 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -15,0 +13 @@ PyYAML>=3.10.0 # MIT +urllib3>=1.21.1 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7c6cede..78145f7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ bashate>=0.2 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -15,3 +15,2 @@ virtualenv>=13.1.0 # MIT -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.5.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -19 +18 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0