Open Stack

We are delighted to announce the release of:

openstack-ansible 27.1.0: Ansible playbooks for deploying OpenStack

This release is part of the antelope release series.

The source is available from:

    https://opendev.org/openstack/openstack-ansible

Download the package from:

    https://tarballs.openstack.org/openstack-ansible/

Please report issues through:

    https://bugs.launchpad.net/openstack-ansible/+bugs

For more details, please see below.

27.1.0
^^^^^^


New Features
************

* Implemented variable "lxc_image_cache_expiration" that controlls
  for how long cached LXC image will be valid. Default value is
  *1year*. Variable format should be compatible with
  community.general.to_time_unit filter.

* Adds optional compression for backups created with mariabackup.
  Adds two new CLI parameters to the mariabackup script that are used
  to enable compression and to choose a compression tool.

  * "--compress=True|False"

  * "--compressor=<compressor>"

  Also introduces new Ansible variables that control the above
  mentioned parameters.

  * "galera_mariadb_backups_compress"

  * "galera_mariadb_backups_compressor"

  Each backup archive is stored in a dedicated directory, alongside
  the backup metadata.


Upgrade Notes
*************

* Backup compression is disabled by default, so no changes need to
  be made for existing deployments. Should compression be desired, set
  "galera_mariadb_backups_compress" to "True". Choose a compression
  tool with "galera_mariadb_backups_compressor", default is "gzip".


Bug Fixes
*********

* LXC image cache expiration mechanism has being fixed. Previously
  LXC images were valid forever.

* All compute nodes are not added as OVN gateways by default and
  "network-gateway_hosts" definition is respected.

Changes in openstack-ansible 27.0.1..27.1.0
-------------------------------------------

589b0d38a Update Adjutant and Neutron SHAs
9bd51ce10 Fix container bridge name for octavia
954b49ef5 Do not add all computes as OVN gateways
52288afd4 Bump SHAs for 2023.1
df6d915f2 Gather facts before including common-playbooks
a25882628 haproxy: fix csp issue preventing embedded serial console
bf769b1db haproxy: fix health checks for serialconsole in http mode
76dcfdd21 Use include_role in task to avoid lack of access to vars
65c184903 Restore an ability for HAProxy to bind on interal IP
7af20843d Remove support for 'tls-transition' scenario
558104d07 Stop reffering _member_ role
2402c93c0 nova/haproxy: fix typo in detection of 'serialconsole'
7f2af1461 Avoid breaking horizon during Antelope upgrade
8d5be3129 Make `_member_` role to imply `member`
f22ad8f71 Bump keystone version to unblock upgrade jobs


Diffstat (except docs and test files)
-------------------------------------

ansible-collection-requirements.yml                |   2 +-
ansible-role-requirements.yml                      | 148 ++++++++++-----------
.../openstack_user_config.yml.aio.j2               |   2 +-
inventory/env.d/nova.yml                           |   1 -
inventory/group_vars/all/source_git.yml            |   4 +-
inventory/group_vars/ceilometer_all/source_git.yml |   4 +-
inventory/group_vars/ceph-rgw.yml                  |   2 +-
inventory/group_vars/cinder_all/source_git.yml     |   4 +-
inventory/group_vars/designate_all/source_git.yml  |   4 +-
inventory/group_vars/galera_all.yml                |   2 +-
inventory/group_vars/gnocchi_all/source_git.yml    |   4 +-
inventory/group_vars/haproxy/haproxy.yml           |   2 +-
inventory/group_vars/horizon_all/source_git.yml    |   4 +-
inventory/group_vars/ironic_all/source_git.yml     |   4 +-
inventory/group_vars/keystone_all/source_git.yml   |   4 +-
inventory/group_vars/magnum_all/source_git.yml     |   4 +-
inventory/group_vars/manila_all/source_git.yml     |   4 +-
.../group_vars/neutron_all/haproxy_service.yml     |   4 +-
inventory/group_vars/neutron_all/source_git.yml    |  10 +-
inventory/group_vars/nova_all/haproxy_service.yml  |   8 +-
inventory/group_vars/nova_all/source_git.yml       |   6 +-
inventory/group_vars/octavia_all/source_git.yml    |   6 +-
inventory/group_vars/rabbitmq_all.yml              |   2 +-
inventory/group_vars/repo_all.yml                  |   2 +-
inventory/group_vars/swift_all/source_git.yml      |   4 +-
playbooks/common-playbooks/cinder.yml              |  19 ---
playbooks/common-playbooks/neutron.yml             |  19 ---
playbooks/common-playbooks/nova.yml                |  19 ---
playbooks/haproxy-install.yml                      |  28 ++++
playbooks/infra-journal-remote.yml                 |   6 +-
playbooks/os-cinder-install.yml                    |  23 +++-
playbooks/os-neutron-install.yml                   |  23 +++-
playbooks/os-nova-install.yml                      |  20 ++-
playbooks/security-hardening.yml                   |   6 +-
.../fix_lxc_cache_expiration-1656b5758c4ec24e.yaml |  10 ++
.../mariabackup-compression-337b04c68f370c1d.yaml  |  28 ++++
.../ovn_gateway_computes-a9509fd25e8d25db.yaml     |   5 +
scripts/run-upgrade.sh                             |   2 +
scripts/upgrade-utilities/implied_member_role.yml  |  63 +++++++++
.../bootstrap-host/tasks/prepare_aio_config.yml    |   3 -
.../templates/user_variables_tls-transition.yml.j2 |  21 ---
.../templates/user_variables_tls.yml.j2            |  25 +++-
43 files changed, 353 insertions(+), 216 deletions(-)