[release-announce] kayobe 10.2.0 (wallaby)
no-reply at openstack.org
no-reply at openstack.org
Tue Jun 7 11:10:58 UTC 2022
We are pleased to announce the release of:
kayobe 10.2.0: Deployment of OpenStack to bare metal using OpenStack
kolla and bifrost
This release is part of the wallaby stable release series.
The source is available from:
https://opendev.org/openstack/kayobe
Download the package from:
https://tarballs.openstack.org/kayobe/
Please report issues through:
https://storyboard.openstack.org/#!/project/openstack/kayobe
For more details, please see below.
10.2.0
^^^^^^
New Features
************
* Enables hardware clock (RTC) synchronisation by default when
applying the chrony role. This setting is configurable with the new
variable "chrony_rtcsync_enabled".
* Adds support for inspection of L3-routed Ironic networks via DHCP-
relay.
* Adds support for running package updates on Ubuntu hosts via the
following existing commands:
* "kayobe seed host package update --packages <packages>"
* "kayobe seed hypervisor host package update --packages
<packages>"
* "kayobe infra vm host package update --packages <packages>"
* "kayobe overcloud host package update --packages <packages>"
Security Issues
***************
* Fixes an issue where any passwords in
"kolla_ansible_custom_passwords" were exposed in Ansible logs. When
using verbosity level 3 ("-vvv"), they were also exposed in Ansible
output.
Bug Fixes
*********
* In production environments, the provision network may be separated
from the other networks, so in this case, if you want Bifrost's DHCP
service provides the correct gateway for the clients the
"inspection_gateway" should be used instead of the "gateway"
attribute for the provision network. This also avoids configuring
the multiple IP gateways on a single host which leads to
unpredictable results.
* Fixes an issue where the Neutron SR-IOV agent image is not built
when the service is enabled.
* Fixes an issue with idempotence of local Kolla Ansible
configuration generation.
* Fixes an issue with the seed's configdrive when the admin network
is a VLAN. See story 2008089 for details.
* Enables deployment of Grafana when Monasca is enabled, as a
replacement for the retired "monasca-grafana" image. See story
2009717 for details.
* Fixes Ansible inventory generation with some custom group mappings
using the same group names for Kayobe and Kolla Ansible. See story
2009927 for details.
* The set of commands starting with "kayobe overcloud database" now
generate the kolla configuration necessary to login to the nodes
running the database.
* Fixes an issue with config drive generation for infrastructure and
seed VMs when using untagged interfaces. The symptom of this issue
is that kayobe cannot login to the instance. If you check the
libvirt console log, you will see "KeyError: 'vlan_link'". See story
2009910 for details.
* Fixes an issue where hacluster images are not built when the
service is enabled.
* Fixes an issue with IPA image builds which used the "master"
branch of "ironic-python-agent", even on stable releases of Kayobe,
or when explicitly setting "ipa_build_source_version".
* Fixes an issue where any passwords in
"kolla_ansible_custom_passwords" were exposed in Ansible logs. When
using verbosity level 3 ("-vvv"), they were also exposed in Ansible
output.
* Fixes an issue where patch links could be erroneously created on
hosts not in the overcloud group. See Story 2009911 for details.
* Pins Jinja2 to less than "3.1.0" to avoid breaking changes.
* Fixes an issue where the MTU defined in Kayobe was not applied to
Ironic provisioning and cleaning networks in Neutron.
* Deployment image (IPA) build no longer uses master version of
upper- constraints. Instead, it defaults to using the constraints
for the OpenStack release associated with the version of Kayobe
being used. See story 2009810 for details.
* Fixes failures to run "kayobe overcloud bios raid configure" by
upgrading the "stackhpc.drac" role to version 1.1.6.
* Fixes an issue with masking NTP services which are not found. See
story 2009821 for details.
Changes in kayobe 10.1.0..10.2.0
--------------------------------
313a9851 ironic: Set MTU on provisioning and cleaning Neutron networks
4d68a5dd CI: Disable horizon in upgrade jobs to save disk space
8888e406 Fix forgotten hacluster regexp for image build
c231848e CI: separate image builds into a non-voting job
3beff4ca kolla_passwords: add no_log for password overrides
c0988335 Bump stackhpc.drac role
712c41b4 Cleanup old and deprecated Swift configuration
26cb0bde docs: Fix custom LVM example
9f469c36 Update documentation link for NCLU
09a4c294 Fix variable name for stackhpc.os-networks upper constraints
4d7e7a57 Restore forgotten linuxbridge-agent container
e23ce7a4 Fix Ansible inventory generation when reusing group names
56f01b53 CI: Avoid image downloads and builds in seed jobs
7e348126 CI: Fix molecule job failure
6cafdb8a Fix custom config idempotence
ea7a9059 Pin Jinja2<3.1.0 to avoid contextfilter removal
035f2f40 Ubuntu: support host package update
a7e3b0c2 CI: Pin ansible-lint to <6
6886ce6b Only create patch links on overcloud hosts
c129808c CI: Disable container image builds on Ubuntu
1f006150 Use naming convention to infer VLAN tagging
00d6ad65 CI: remove qemu-utils installation
ee6d4614 CI: stop using zuul as kayobe_ansible_user in TLS jobs
ae617ae7 Enable rtcsync in chrony by default
c5f9a5ee Bump up manage-lvm role version to v0.2.6
8a859c23 CI: Enable bare metal testing for Ubuntu
52973754 Set requirements branch for IPA build
4b3bb2c0 Set correct gateway for the bifrost provision network
180fd4ba ntp: Fix service mask when service doesn't exist
ed3a0556 Fix Sphinx syntax typo
42c87d2c Fix 'ModuleNotFoundError: No module named 'docker'
1c65af8e Fix seed VM configdrive when admin network is a VLAN
e9dd7e0d Generate kolla config when running database commands
b08a2197 Build neutron-sriov-agent image when enabled
933cf53c ipa: Use openstack_branch instead of master
c68913d8 Deploy Grafana when Monasca is enabled
4d777082 [CI] Drop unused nodeset
43451c49 CI: Use correct TD agent repository version
9ae0401f Document that extra kernel parameters are important for inspection
679fa2a7 Add support for Ironic inspection through DHCP-relay
c92a97ce Limit ip-routing and snat to seed hosts only
Diffstat (except docs and test files)
-------------------------------------
ansible/group_vars/all/bifrost | 3 +
ansible/group_vars/all/ipa | 9 ++-
ansible/group_vars/all/kolla | 9 ++-
ansible/group_vars/all/time | 3 +
ansible/host-package-update.yml | 6 +-
ansible/ip-routing.yml | 2 +-
ansible/kolla-ansible.yml | 1 +
ansible/kolla-bifrost.yml | 2 +-
ansible/provision-net.yml | 4 +-
ansible/roles/kolla-ansible/defaults/main.yml | 3 +
.../roles/kolla-ansible/library/kolla_passwords.py | 2 +-
.../roles/kolla-ansible/templates/globals.yml.j2 | 2 +-
.../kolla-ansible/templates/overcloud-top-level.j2 | 2 +-
ansible/roles/kolla-openstack/tasks/config.yml | 1 -
.../roles/kolla-openstack/templates/glance.conf.j2 | 29 --------
ansible/roles/network-redhat/tasks/main.yml | 1 +
ansible/roles/ntp/tasks/prepare.yml | 25 +++++--
ansible/snat.yml | 2 +-
dev/functions | 11 +++
.../reference/ironic-python-agent.rst | 7 +-
.../configuration/reference/physical-network.rst | 2 +-
etc/kayobe/bifrost.yml | 3 +
etc/kayobe/ipa.yml | 2 +-
etc/kayobe/time.yml | 3 +
kayobe/cli/commands.py | 8 ++
kayobe/plugins/filter/networks.py | 8 ++
molecule-requirements.txt | 12 +++
playbooks/kayobe-overcloud-base/globals.yml.j2 | 2 +-
playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 -
playbooks/kayobe-overcloud-base/run.yml | 11 ---
.../overrides.yml.j2 | 2 +-
.../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 +-
playbooks/kayobe-overcloud-upgrade-base/pre.yml | 4 +
.../kayobe-seed-base/bifrost-overrides.yml.j2 | 8 +-
playbooks/kayobe-seed-base/overrides.yml.j2 | 4 +-
playbooks/kayobe-seed-base/run.yml | 34 +++++----
.../bifrost-overrides.yml.j2 | 6 +-
...ifrost-inspection-gateway-316ab384430ef8df.yaml | 9 +++
.../build-neutron-sriov-836acf378bae0b48.yaml | 5 ++
.../notes/config-idemoptence-37846db82ecd9f43.yaml | 4 +
.../notes/configdrive-vlans-4e8b6ed07b229233.yaml | 6 ++
...able-grafana-with-monasca-497d686e95d89242.yaml | 7 ++
...nable-rtc-synchronisation-1179a52e8e6bd12b.yaml | 6 ++
...lla-ansible-group-mapping-8fcd6cbb1e744e18.yaml | 6 ++
...ckup-with-no-kolla-config-4f857915adabad41.yaml | 6 ++
.../fixes-keyerror-vlan-link-c177cf719e070df6.yaml | 8 ++
.../hacluster-build-issue-2a8023e0cd80235a.yaml | 5 ++
...pector-dhcp-range-netmask-bb46eb7df77587a4.yaml | 4 +
.../notes/ipa-branch-b29c377c531013a8.yaml | 6 ++
...asswords-overrides-no-log-57054ce64fae8143.yaml | 11 +++
.../patch-links-on-overcloud-e24dbc858d3399cc.yaml | 6 ++
.../notes/pin-jinja2-988297e06a2cf790.yaml | 4 +
.../notes/provision-net-mtu-befdda04224f49a6.yaml | 5 ++
...ents-branch-for-ipa-build-c3ca977ec21b58f4.yaml | 8 ++
.../stackhpc-drac-check-mode-8097215f8eca9991.yaml | 5 ++
.../notes/story-2009821-b309165e25e77aea.yaml | 5 ++
.../ubuntu-package-update-0db09fc57249b9fc.yaml | 10 +++
requirements.txt | 1 +
requirements.yml | 8 +-
roles/kayobe-diagnostics/files/get_logs.sh | 1 +
test-requirements.txt | 8 +-
tox.ini | 2 +-
zuul.d/jobs.yaml | 26 +++++++
zuul.d/nodesets.yaml | 6 --
zuul.d/project.yaml | 5 ++
69 files changed, 395 insertions(+), 129 deletions(-)
Requirements updates
--------------------
diff --git a/molecule-requirements.txt b/molecule-requirements.txt
new file mode 100644
index 00000000..9ae944e6
--- /dev/null
+++ b/molecule-requirements.txt
@@ -0,0 +1,12 @@
+# The order of packages is significant, because pip processes them in the order
+# of appearance. Changing the order has an impact on the overall integration
+# process, which may cause wedges in the gate later.
+
+ansible-lint>=3.0.0,<6.0.0,!=4.3.0 # MIT
+docker # Apache-2.0
+molecule # MIT
+molecule-docker # MIT
+pytest-molecule # MIT
+pytest-testinfra
+rich<12.1.0
+yamllint # GPLv3
diff --git a/requirements.txt b/requirements.txt
index ed81d1d1..43ec9103 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,0 +3 @@ ansible>=2.9.0,<2.11.0,!=2.9.8,!=2.9.12 # GPLv3
+Jinja2<3.1.0 # BSD
diff --git a/test-requirements.txt b/test-requirements.txt
index f3184134..b732c830 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5 +5 @@
-ansible-lint>=3.0.0,!=4.3.0 # MIT
+ansible-lint>=3.0.0,<6.0.0,!=4.3.0 # MIT
@@ -9 +8,0 @@ doc8 # Apache-2.0
-docker # Apache-2.0
@@ -11,2 +9,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0
-molecule # MIT
-molecule-docker # MIT
@@ -14,3 +10,0 @@ oslotest>=1.10.0 # Apache-2.0
-paramiko
-pytest-molecule # MIT
-pytest-testinfra
More information about the Release-announce
mailing list