We are tickled pink to announce the release of: kolla-ansible 19.6.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 19.6.0 ^^^^^^ Security Issues *************** * Deny access to /server-status via the single frontend. LP#2121626 Bug Fixes ********* * Fixes bug LP#2118452 which stopped the RabbitMQ upgrade from version 3.13 to 4.1 even though it is supported. * Fixes configuration of backend TLS when network nodes are separate from controllers. LP#2117084 * Fixes a bug where K-A can fail service deployment because it tries to copy backend TLS certificates of some hosts to containers when both hosts and containers are not part of backend TLS and do not have certificates to copy. LP#2105505 * Reduce the size of the fluentd buffers to avoid getting HTTP 413 errors when sending logs to opensearch/elasticsearch. The values chosen were based on what seemed a sensible size. These can be customised by editing the "fluentd_bulk_message_request_threshold" and "fluentd_buffer_chunk_limit_size" variables. LP#2079988 Changes in kolla-ansible 19.5.0..19.6.0 --------------------------------------- 9e35fc49a letsencrypt: add max_fail_percentage to site.yml 51de4f636 Deny access to `server-status` via `single frontend` 5e7315be4 Replace outdated core team list by Gerrit links f2e3b929e [CI] Use smaller flavor for CI 208310ee3 [CI] Create smaller flavor for CI 37c651547 [stable-only] neutron: Followup templating error 45640af80 mariabackup: Grant ALTER on mysql.mariadb_backup_history e5e9cd550 neutron: Template vpnaas config only when it is enabled d39efb7f4 CI: Use opendev docker registry mirror 1ba361e66 Tweak RabbitMQ version check to allow 3.13 to 4.1 e76872cba Add network group to tls-backend e94ad492d Fix unrestricted copying of backend TLS certs 87d386863 fluentd: Add ovn logs to input 30bdbe593 CI: Bump instance creation timeout to 5 minutes 91721234e Add size limits to Fluentd buffers f6e633246 Allow to override Cirros image URL for air-gapped environments 311338427 Add missing lock_path for ironic-inspector cd67fe089 Fix path to heat config-generator.conf c3e95fc97 Docs: update RabbitMQ HA instructions 853f7d661 Fix reference to generating a private CA Diffstat (except docs and test files) ------------------------------------- ansible/inventory/all-in-one | 1 + ansible/inventory/multinode | 1 + ansible/roles/common/defaults/main.yml | 12 ++++++ .../templates/conf/input/10-openvswitch.conf.j2 | 38 +++++++++++++++++ .../common/templates/conf/output/00-local.conf.j2 | 4 ++ .../common/templates/conf/output/01-es.conf.j2 | 2 + .../templates/conf/output/03-opensearch.conf.j2 | 2 + ansible/roles/heat/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 5 +++ .../haproxy/haproxy_external_frontend.cfg.j2 | 1 + ansible/roles/mariadb/tasks/register.yml | 2 +- ansible/roles/neutron/tasks/config.yml | 1 + .../templates/neutron-l3-agent-wrapper.sh.j2 | 4 +- .../neutron/templates/neutron-l3-agent.json.j2 | 4 +- .../roles/neutron/templates/neutron-server.json.j2 | 4 +- .../roles/neutron/templates/neutron_vpnaas.conf.j2 | 2 - ansible/roles/rabbitmq/tasks/version-check.yml | 7 ++-- ansible/roles/service-cert-copy/tasks/main.yml | 2 + ansible/site.yml | 4 ++ ...llow-rabbitmq-3-13-to-4-1-8ae08d265c353301.yaml | 7 ++++ .../notes/bug-2117084-60fbff1b0616531d.yaml | 6 +++ ...tatus-via-single-frontend-33bbf3b9688a9ae4.yaml | 5 +++ ...ed-copying-of-backend-tls-2bade63581b84c80.yaml | 8 ++++ .../notes/fluentd-buffers-86acb335b1cf3126.yaml | 9 ++++ tools/init-runonce | 2 +- zuul.d/base.yaml | 2 + 35 files changed, 152 insertions(+), 73 deletions(-)