We jubilantly announce the release of: openstack-ansible 25.4.0: Ansible playbooks for deploying OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.4.0 ^^^^^^ Upgrade Notes ************* * Due to OSSA-2023-003, value of "openstack_service_token_roles_required" has been changed to "true". With that, major upgrades to Yoga release might struggle from prolonged dowtimes. Sensetive to API downtime environments can perform major upgrade to any prior release with subsequent minor upgrade that will enable "openstack_service_token_roles_required" and install safe versions of services. Other way around would be to manually create and assign "service" role to all "service" users. Deprecation Notes ***************** * RabbitMQ packages are no longer provided by PackageCloud due to the upstream repository being no longer available after 2023-05-28. Installations will now utilize a community mirror of CloudSmith repositories for rabbitmq and erlang. https://github.com/rabbitmq/rabbitmq-server/discussions/8386 Security Issues *************** * Includes SHA bumps for Nova, Cinder and Glance to cover OSSA-2023-003. Bug Fixes ********* * Fixes incorrect definition of ceilometer "polling_namespaces", when host is part of both central and compute groups (ie metal/aio scenario) * Fixes the absence of "libvirtd.service" on compute nodes. With CentOS upgrading the libvirt version to 9.3.0, they do not install libvirt-deamon as a dependency to libvirt-deamon-kvm anymore. libvirt-deamon is installed explicitly now. * https://bugs.launchpad.net/openstack-ansible/+bug/2021410 Changes in openstack-ansible 25.3.2..25.4.0 ------------------------------------------- f532987d4 Bump OpenStack-Ansible SHAs for Yoga 3a38adb9a Return distro jobs back 4a1b22d09 Force enable openstack_service_token_roles_required e9950054e Add internal_lb_vip_address to no_proxy 90858c96f Do not define cluster template labels Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 92 +++++++++++----------- inventory/group_vars/all/keystone.yml | 3 - playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 30 +++---- ...ometer_polling_namespaces-a21da7a655f4c922.yaml | 5 ++ ...all_libvirt_daemon_centos-9826ecb428bce8a5.yaml | 7 ++ .../notes/ossa-2023-003-b62fe9e279eb4434.yaml | 4 + ...f-packagecloud-deprecated-5ee62da847ccae1f.yaml | 11 +++ ...ken_roles_required_forced-b9ae6ce937c0ec32.yaml | 12 +++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_magnum.yml.j2 | 6 -- 11 files changed, 103 insertions(+), 73 deletions(-)