Open Stack

We jubilantly announce the release of:

openstack-ansible 25.4.0: Ansible playbooks for deploying OpenStack

This release is part of the yoga stable release series.

The source is available from:

    https://opendev.org/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

Please report issues through:

    https://bugs.launchpad.net/openstack-ansible/+bugs

For more details, please see below.

25.4.0
^^^^^^


Upgrade Notes
*************

* Due to OSSA-2023-003, value of
  "openstack_service_token_roles_required" has been changed to "true".
  With that, major upgrades to Yoga release might struggle from
  prolonged dowtimes. Sensetive to API downtime environments can
  perform major upgrade to any prior release with subsequent minor
  upgrade that will enable "openstack_service_token_roles_required"
  and install safe versions of services. Other way around would be to
  manually create and assign "service" role to all "service" users.


Deprecation Notes
*****************

* RabbitMQ packages are no longer provided by PackageCloud due to
  the upstream repository being no longer available after 2023-05-28.
  Installations will now utilize a community mirror of CloudSmith
  repositories for rabbitmq and erlang.

  https://github.com/rabbitmq/rabbitmq-server/discussions/8386


Security Issues
***************

* Includes SHA bumps for Nova, Cinder and Glance to cover
  OSSA-2023-003.


Bug Fixes
*********

* Fixes incorrect definition of ceilometer "polling_namespaces",
  when host is part of both central and compute groups (ie metal/aio
  scenario)

* Fixes the absence of "libvirtd.service" on compute nodes. With
  CentOS upgrading the libvirt version to 9.3.0, they do not install
  libvirt-deamon as a dependency to libvirt-deamon-kvm anymore.
  libvirt-deamon is installed explicitly now.

* https://bugs.launchpad.net/openstack-ansible/+bug/2021410

Changes in openstack-ansible 25.3.2..25.4.0
-------------------------------------------

f532987d4 Bump OpenStack-Ansible SHAs for Yoga
3a38adb9a Return distro jobs back
4a1b22d09 Force enable openstack_service_token_roles_required
e9950054e Add internal_lb_vip_address to no_proxy
90858c96f Do not define cluster template labels


Diffstat (except docs and test files)
-------------------------------------

ansible-role-requirements.yml                      | 92 +++++++++++-----------
inventory/group_vars/all/keystone.yml              |  3 -
playbooks/defaults/repo_packages/nova_consoles.yml |  4 +-
.../defaults/repo_packages/openstack_services.yml  | 30 +++----
...ometer_polling_namespaces-a21da7a655f4c922.yaml |  5 ++
...all_libvirt_daemon_centos-9826ecb428bce8a5.yaml |  7 ++
.../notes/ossa-2023-003-b62fe9e279eb4434.yaml      |  4 +
...f-packagecloud-deprecated-5ee62da847ccae1f.yaml | 11 +++
...ken_roles_required_forced-b9ae6ce937c0ec32.yaml | 12 +++
.../templates/user_variables.aio.yml.j2            |  2 +-
.../templates/user_variables_magnum.yml.j2         |  6 --
11 files changed, 103 insertions(+), 73 deletions(-)