Open Stack

We are stoked to announce the release of:

openstack-ansible 15.1.5: Ansible playbooks for deploying OpenStack

This release is part of the ocata stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

For more details, please see below.

15.1.5
^^^^^^


New Features
************

* The "os_ceilometer" role now includes a facility where you can
  place your own templates in "/etc/openstack_deploy/ceilometer" (by
  default) and it will be deployed to the target host after being
  interpreted by the template engine. If no file is found there, the
  fallback of the git sourced template is used.

* For the "os_designate" role, the systemd unit "TimeoutSec" value
  which controls the time between sending a SIGTERM signal and a
  SIGKILL signal when stopping or restarting the service has been
  reduced from 300 seconds to 120 seconds. This provides 2 minutes for
  long-lived sessions to drain while preventing new ones from starting
  before a restart or a stop. The "RestartSec" value which controls
  the time between the service stop and start when restarting has been
  reduced from 150 seconds to 2 seconds to make the restart happen
  faster. These values can be adjusted by using the
  "designate_*_init_config_overrides" variables which use the
  "config_template" task to change template defaults.

* The "os_gnocchi" role now includes a facility where you can place
  your own default "api-paste.ini" or "policy.json" file in
  "/etc/openstack_deploy/gnocchi" (by default) and it will be deployed
  to the target host after being interpreted by the template engine.

* The new option *haproxy_backend_arguments* can be utilized to add
  arbitrary options to a HAProxy backend like tcp-check or http-check.

* The ability to disable the certificate validation when checking
  and interacting with the internal cinder endpoint has been
  implemented. In order to do so, set the following in
  "/etc/openstack_deploy/user_variables.yml".

     cinder_service_internaluri_insecure: yes


Upgrade Notes
*************

* For the "os_designate" role, the systemd unit "TimeoutSec" value
  which controls the time between sending a SIGTERM signal and a
  SIGKILL signal when stopping or restarting the service has been
  reduced from 300 seconds to 120 seconds. This provides 2 minutes for
  long-lived sessions to drain while preventing new ones from starting
  before a restart or a stop. The "RestartSec" value which controls
  the time between the service stop and start when restarting has been
  reduced from 150 seconds to 2 seconds to make the restart happen
  faster. These values can be adjusted by using the
  "designate_*_init_config_overrides" variables which use the
  "config_template" task to change template defaults.

* The endpoint which designate uses to communicate with neutron has
  been set to the internalURL by default. This change has been done
  within the template "designate.conf.j2" and can be changed using the
  "designate_designate_conf_overrides" variable.

* The magnum client interaction will now make use of the public
  endpoints by default. Previously this was set to use internal
  endpoints.

* The keystone endpoints for instances spawned by magnum will now be
  provided with the public endpoints by default. Previously this was
  set to use internal endpoints.


Deprecation Notes
*****************

* The variable "keepalived_uca_enable" is deprecated, and replaced
  by "keepalived_ubuntu_src". The "keepalived_uca_enable" variable
  will be removed in future versions of the keepalived role. The value
  of "keepalived_ubuntu_src" should be either "uca", "ppa", or
  "native", for respectively installing from the Ubuntu Cloud archive,
  from keepalived stable ppa, or not installing from an external
  source.

* The variable "keepalived_use_latest_stable" is deprecated, and
  replaced by "keepalived_package_state". The
  "keepalived_use_latest_stable" variable will be removed in future
  versions of the keepalived role. The value of
  "keepalived_package_state" should be either "latest" or "present".

* The upstream noVNC developers recommend that the keymap be
  automatically detected for virtual machine consoles. The defaults
  for three Ansible variables have been removed:

  * nova_console_keymap

  * nova_novncproxy_vnc_keymap

  * nova_spice_console_keymap

  The "nova.conf" template still includes these variables and it sets
  the keymap configuration option. Deployers who have customized this
  setting will not see a change in their "nova.conf".


Security Issues
***************

* The magnum client interaction will now make use of the public
  endpoints by default. Previously this was set to use internal
  endpoints.

* The keystone endpoints for instances spawned by magnum will now be
  provided with the public endpoints by default. Previously this was
  set to use internal endpoints.

Changes in openstack-ansible 15.1.4..15.1.5
-------------------------------------------

738241d Update vars to match latest keepalived role
b6c339e Simplify multi arch repo build
0a47601 Update role SHA's to include keystone fixes
bc7374a Revert "Implement ARA logging and reporting for openstack-ansible gate jobs"
65772b6 docs: Remove all the unnecessary blockquotes
782bd1f Update all SHAs for 15.1.5
63d49d5 Vagrantfile resize handling


Diffstat (except docs and test files)
-------------------------------------

Vagrantfile                                        |  77 +-------------
ansible-role-requirements.yml                      |  50 ++++-----
.../maintenance-tasks/scale-environment.rst        |  12 +--
.../openstack-operations/access-environment.rst    |   8 +-
.../openstack-operations/managing-images.rst       | 118 ++++++++++-----------
.../openstack-operations/managing-instances.rst    |   4 +-
.../openstack-operations/network-service.rst       |  26 ++---
.../draft-operations-guide/troubleshooting.rst     |  52 ++++-----
.../openstack_user_config.yml.example              |   2 +-
playbooks/defaults/repo_packages/gnocchi.yml       |   2 +-
.../defaults/repo_packages/openstack_services.yml  |  60 +++++------
playbooks/inventory/group_vars/all.yml             |   2 +-
playbooks/repo-build.yml                           |  37 +++----
playbooks/vars/configs/keepalived_haproxy.yml      |   2 +-
.../deploy-node-config-files-1b272a3ec7ed71b8.yaml |   7 ++
...ignate_init_time_settings-6efb66b0d17d4c04.yaml |  23 ++++
...int-change-to-internalurl-3da6bb4bd4972bea.yaml |   7 ++
...nocchi-deploy-config-file-afba6c2a8edac025.yaml |   7 ++
...haproxy-backend-arguments-3b1dca299c7a8296.yaml |   4 +
.../keepalived_new_vars-a3b2f0d334f79e10.yaml      |  15 +++
.../notes/magnum-client-urls-64af5efc9ece6680.yaml |  13 +++
.../remove-console-keymap-ae255da81979a3a5.yaml    |  14 +++
...-insecure-cinder-endpoint-5cbbb4d8c647d521.yaml |  11 ++
scripts/gate-check-commit.sh                       |   5 -
scripts/scripts-library.sh                         |   2 -
30 files changed, 325 insertions(+), 303 deletions(-)