Open Stack

We enthusiastically announce the release of:

kolla-ansible 10.1.0: Ansible Deployment of Kolla containers

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/kolla-ansible

Download the package from:

    https://tarballs.openstack.org/kolla-ansible/

Please report issues through:

    https://bugs.launchpad.net/kolla-ansible/+bugs

For more details, please see below.

10.1.0
^^^^^^


New Features
************

* Adds ability to provide a custom elasticsearch config.


Upgrade Notes
*************

* Changes the default value of "kibana_elasticsearch_ssl_verify"
  from "false" to "true". LP#1885110

* Apache ZooKeeper will now be automatically deployed whenever
  Apache Storm is enabled.


Bug Fixes
*********

* Fixes an issue when using ip addresses instead of hostnames in
  Ansible inventory. OpenvSwitch role sets system-id based on
  inventory_hostname, which in case of ip addresses in is first ip
  octet. Such a deployment would result in multiple OVN chassis with
  duplicate name e.g. "10" connecting to OVN Southbound database -
  which spawns high numbers of create/delete events in Encap database
  table - leading to near 100% CPU usage of OVN/OVS/Neutron processes.

* Fixes an issue with Manila deployment starting "openvswitch" and
  "neutron-openvswitch-agent" containers when
  "enable_manila_backend_generic" was set to "False". LP#1884939

* Fixes the Elasticsearch Curator cron schedule run. LP#1885732

* Fixes an incorrect configuration for nova-conductor when a custom
  Nova policy was applied, preventing the "nova_conductor" container
  from starting successfully. LP#1886170

* Fixes an incorrect Ceph keyring file configuration in
  "gnocchi.conf", which prevented Gnocchi from connecting to Ceph.
  LP#1886711

* In line with clients for other services used by Magnum, Cinder and
  Octavia also use endpoint_type = internalURL. In the same tune,
  these services also use the globally defined
  *openstack_region_name*.

* Fix the configuration of the etcd service so that its protocol is
  independant of the value of the "internal_protocol" parameter. The
  etcd service is not load balanced by HAProxy, so there is no proxy
  layer to do TLS termination when "internal_protocol" is configured
  to be "https".

* Fixes LP#1885885 where the default chunk size in the Monasca
  Fluentd output plugin increased from 8MB to 256MB for file buffering
  which exceeded the limit allowed by the Monasca Log / Unified API.

* Adds a new variable "fluentd_elasticsearch_cacert", which defaults
  to the value of "openstack_cacert". If set, this will be used to set
  the path of the CA certificate bundle used by Fluentd when
  communicating with Elasticsearch. LP#1885109

* Improves error reporting in "kolla-genpwd" and "kolla-mergepwd"
  when input files are not in the expected format. LP#1880220.

* Fixes Magnum trust operations in multi-region deployments.

* Deploys Apache ZooKeeper if Apache Storm is enabled explicitly.
  ZooKeeper would only be deployed if Apache Kafka was also enabled,
  which is often done implicitly by enabling Monasca.

Changes in kolla-ansible 10.0.0..10.1.0
---------------------------------------

6bba8cc52 Manage octavia health manager worker through openstack_service worker
1636ea073 Fix incorrect value of [storage]/ceph_keyring in gnocchi.conf
e0a1072b8 Use the children group for site.yml
33f186c94 Remove policy file from nova-conductor config.json template
0ae152d1d Fix Fluentd date format for MariaDB xinetd
ea58710ff Set a chunk size for Fluentd bulk log upload to Monasca
f6a70e666 Syntax error in Fluentd Monasca output config
6a0a4877e Use public interface for Magnum client and trustee Keystone interface
acfabc77a Make ES Curator schedule multinode-friendly
3114af254 Fix the Elasticsearch Curator cron schedule run
4a5aa528b Fix Zun configuration for TLS
2f3ecdb34 [docs] Update quickstart for Ussuri+
81e9565ed Fix etcd protocol configuration
f6bd4eaa5 Support custom elasticsearch configuration files
73b6ccd1f Verify TLS by default for Kibana to Elasticsearch
d3da72c2c Support CA certificate for fluentd & Elasticsearch
a0a184e95 Use internalURL endpoint_type for all clients used by Magnum
b0359f8a2 Fix Magnum trust operations in multi-region clouds
934cf3985 Skip storm play when not enabled
c5ddd19ea openvswitch: Use ansible_hostname for system-id
58a3ba13f Change neutron-ovs-agent deploy only with manila generic backend
9b6ec38b8 octavia: Add documentation
94c7e5a96 Improve error reporting in password utilities
7f0d03183 Enable ZooKeeper when Storm is enabled
8e0c0cd8c CI: use venv only (and not virtualenv)
2ca01f25f nova-cell role clone failed


Diffstat (except docs and test files)
-------------------------------------

ansible/group_vars/all.yml                         |   3 +-
ansible/roles/cinder/templates/cinder.conf.j2      |   2 +-
ansible/roles/common/defaults/main.yml             |   1 +
.../common/templates/conf/input/02-mariadb.conf.j2 |   2 +-
.../common/templates/conf/output/00-local.conf.j2  |  15 ++
.../common/templates/conf/output/01-es.conf.j2     |   3 +
.../templates/conf/output/02-monasca.conf.j2       |   5 +-
ansible/roles/elasticsearch/defaults/main.yml      |  16 +-
ansible/roles/elasticsearch/tasks/config.yml       |   8 +-
.../templates/elasticsearch-curator.crontab.j2     |   2 +
.../templates/elasticsearch-curator.json.j2        |   5 +-
ansible/roles/etcd/defaults/main.yml               |  10 +-
ansible/roles/gnocchi/templates/gnocchi.conf.j2    |   2 +-
ansible/roles/kibana/defaults/main.yml             |   2 +-
ansible/roles/magnum/templates/magnum.conf.j2      |  11 ++
ansible/roles/neutron/defaults/main.yml            |   2 +-
ansible/roles/nova-cell/defaults/main.yml          |   2 +-
.../nova-cell/templates/nova-conductor.json.j2     |   8 +-
ansible/roles/octavia/templates/octavia.conf.j2    |   3 +
ansible/roles/openvswitch/defaults/main.yml        |   6 +-
ansible/roles/qinling/templates/qinling.conf.j2    |   2 +-
.../roles/skydive/templates/skydive-agent.conf.j2  |   4 +-
.../skydive/templates/skydive-analyzer.conf.j2     |   4 +-
ansible/roles/zun/templates/zun.conf.j2            |   5 +
ansible/site.yml                                   |  14 +-
etc/kolla/globals.yml                              |   2 +-
kolla_ansible/cmd/genpwd.py                        |   4 +
kolla_ansible/cmd/mergepwd.py                      |   9 +
...custom-elasticsearch-conf-6fc34fbc3b471997.yaml |   3 +
.../notes/bug-1884734-ec054799d3300778.yaml        |  10 ++
.../notes/bug-1884939-7c77b8002d3ff52d.yaml        |   7 +
.../notes/bug-1885732-10803d46f9c73444.yaml        |   5 +
.../notes/bug-1886170-f76d9d3520ab86ec.yaml        |   7 +
.../notes/bug-1886711-a1a1fd1343f1a644.yaml        |   6 +
...in-magnum-use-internalURL-af3ad82af71a88c6.yaml |   6 +
.../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml  |   8 +
...k-size-for-monasca-output-882338103d2e1f13.yaml |   8 +
...entd-elasticsearch-cacert-0e8824dd57052913.yaml |   8 +
.../notes/improve-pwd-errors-7563a3cc941c3091.yaml |   6 +
.../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml  |   6 +
...stee-keystone-region-name-002162a45f855faf.yaml |   4 +
.../storm-enable-zookeeper-2108156acced1c57.yaml   |  10 ++
zuul.d/base.yaml                                   |   2 +-
50 files changed, 442 insertions(+), 95 deletions(-)