Open Stack

We are psyched to announce the release of:

openstack-ansible 15.1.6: Ansible playbooks for deploying OpenStack

This release is part of the ocata stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

15.1.6
^^^^^^


New Features
************

* The "os-cinder-install.yml" playbook will now execute a rolling
  upgrade of cinder including database migrations (both schema and
  online) as per the procedure described in the cinder documentation
  (https://docs.openstack.org/developer/cinder/upgrade.html). When
  haproxy is used as the load balancer, the backend being changed will
  be drained before changes are made, then added back to the pool once
  the changes are complete.

* The "horizon_images_allow_location" variable is added to support
  the "IMAGES_ALLOW_LOCATION" setting in the horizon_local_settings.py
  file to allow to specify and external location during the image
  creation.

* The "os-neutron-install.yml" playbook will now execute a rolling
  upgrade of neutron including database migrations (both expand and
  contract) as per the procedure described in the neutron
  documentation
  (https://docs.openstack.org/developer/neutron/devref/upgrade.html).


Known Issues
************

* OpenStack-Ansible sets a new variable,
  *galera_disable_privatedevices*, that controls whether the
  *PrivateDevices* configuration in MariaDB's systemd unit file is
  enabled.

  If the *galera_server* role is deployed on a bare metal host, the
  MariaDB default is maintained (*PrivateDevices=true*). If the
  *galera_server* role is deployed within a container, the
  *PrivateDevices* configuration is set to *true* to work around a
  systemd bug with a bind mounted */dev/ptmx*.

  See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack-
  ansible/+bug/1697531) for more details.

* OpenStack-Ansible sets a new variable,
  *memcached_disable_privatedevices*, that controls whether the
  *PrivateDevices* configuration in MemcacheD's systemd unit file is
  enabled.

  If the *memcached_server* role is deployed on a bare metal host, the
  default is maintained (*PrivateDevices=true*). If the role is
  deployed within a container, the *PrivateDevices* configuration is
  set to *true* to work around a systemd bug with a bind mounted
  */dev/ptmx*.

  See Launchpad Bug 1697531 (https://bugs.launchpad.net/openstack-
  ansible/+bug/1697531) for more details.

Changes in openstack-ansible 15.1.5..15.1.6
-------------------------------------------

a578762 Allow keystone playbook to work with limits
674c64a Override keepalived uca repo with common variable
15edf1f Ensure that role path is absolute
67c8437 Implement rolling upgrades for keystone
be87a8a Add haproxy-endpoint-manage common task
3cebcf1 Implement rolling upgrades for neutron
8a71c35 Remove Ceph warning.
4af5c14 Work around bad DNS resolution
cb87202 Avoid renaming tempest result files
adce4e0 Implement rolling upgrades for cinder
fbd1d78 Bump plugins SHA to HEAD
8c26e45 Use distro specific netcat package names
03a6436 Bump lxc_container_create SHA
8b6cc5f Use new ansible-hardening role
c663916 Set PrivateDevices=false for MemcacheD
500c25d Set PrivateDevices=false for Galera
60d3545 Fix race condition regression
fd6f756 Include strategy/connection plugin fix
2b31509 If repo build fails, force all hosts to fail
250b93d Add additional role path for lint testing
a4ffa2b Use the same version of ansible as tests repo
3462c75 [Docs] Update ansible version
d98c598 Update all SHAs for 15.1.6
5c6eb06 Avoid retrieving IP from a bridge without IP
6d87aa8 Add var for environment used only inside playbooks


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      |  40 +--
.../source/app-advanced-config-security.rst        |   6 +-
deploy-guide/source/app-ceph.rst                   |   5 -
deploy-guide/source/app-security.rst               |   2 +-
etc/openstack_deploy/user_variables.yml            |   7 +
playbooks/ceph-install.yml                         |   2 +
playbooks/common-playbooks/cinder.yml              | 130 ++++++++++
playbooks/common-playbooks/neutron.yml             | 120 +++++++++
playbooks/common-tasks/dynamic-address-fact.yml    |   2 +-
playbooks/common-tasks/haproxy-endpoint-manage.yml |  30 +++
playbooks/common-tasks/restart-service.yml         |  45 ++++
playbooks/defaults/repo_packages/nova_consoles.yml |   4 +-
.../defaults/repo_packages/openstack_services.yml  |  60 ++---
playbooks/etcd-install.yml                         |   2 +
playbooks/galera-install.yml                       |   2 +
playbooks/haproxy-install.yml                      |   2 +
playbooks/inventory/group_vars/all.yml             |   5 +-
playbooks/inventory/group_vars/cinder_all.yml      |  10 +
playbooks/inventory/group_vars/galera_all.yml      |   4 +
playbooks/inventory/group_vars/hosts.yml           |   2 +-
playbooks/inventory/group_vars/keystone_all.yml    |   9 +
playbooks/inventory/group_vars/memcached.yml       |   4 +
playbooks/lxc-containers-create.yml                |   1 +
playbooks/lxc-hosts-setup.yml                      |   1 +
playbooks/memcached-install.yml                    |   1 +
playbooks/openstack-hosts-setup.yml                |   1 +
playbooks/os-aodh-install.yml                      |   1 +
playbooks/os-barbican-install.yml                  |   1 +
playbooks/os-ceilometer-install.yml                |   1 +
playbooks/os-cinder-install.yml                    | 280 ++++++++++++++-------
playbooks/os-designate-install.yml                 |   1 +
playbooks/os-glance-install.yml                    |   1 +
playbooks/os-gnocchi-install.yml                   |   1 +
playbooks/os-heat-install.yml                      |   1 +
playbooks/os-horizon-install.yml                   |   1 +
playbooks/os-ironic-install.yml                    |   1 +
playbooks/os-keystone-install.yml                  | 186 +++++++++++---
playbooks/os-magnum-install.yml                    |   1 +
playbooks/os-neutron-install.yml                   | 150 ++++-------
playbooks/os-nova-install.yml                      |   1 +
playbooks/os-rally-install.yml                     |   1 +
playbooks/os-sahara-install.yml                    |   1 +
playbooks/os-swift-install.yml                     |   2 +
playbooks/os-swift-sync.yml                        |   1 +
playbooks/os-tempest-install.yml                   |   1 +
playbooks/os-trove-install.yml                     |   1 +
playbooks/rabbitmq-install.yml                     |   3 +
playbooks/repo-build.yml                           |  26 +-
playbooks/repo-server.yml                          |   1 +
playbooks/rsyslog-install.yml                      |   1 +
playbooks/security-hardening.yml                   |   3 +-
playbooks/unbound-install.yml                      |   1 +
playbooks/utility-install.yml                      |   1 +
playbooks/vars/configs/keepalived_haproxy.yml      |   1 +
...tos-galera-privatedevices-4958f0be6cffa466.yaml |  14 ++
...-memcached-privatedevices-d3be3acb19ed71d6.yaml |  14 ++
.../cinder-rolling-upgrades-f069187fc9139276.yaml  |  10 +
.../image-allow-location-58212b8e506639f2.yaml     |   5 +
.../neutron-rolling-upgrades-5269b62ea216df5e.yaml |   7 +
...ova-init-config-overrides-ffce7e419061c4da.yaml |  10 +
scripts/ansible-role-requirements-editor.py        |   2 +-
scripts/bootstrap-ansible.sh                       |   2 +
scripts/get-pypi-pkg-version.py                    |   2 +-
scripts/openstack-ansible.rc                       |   2 +-
scripts/release-yaml-file-prep.py                  |   2 +-
scripts/scripts-library.sh                         |   3 +-
.../playbooks/memcached-flush.yml                  |   9 +-
.../bootstrap-host/tasks/prepare_aio_config.yml    |  13 +
tox.ini                                            |   6 +-
70 files changed, 960 insertions(+), 311 deletions(-)