openstack
/
openstack-ansible
Code Issues Proposed changes

Freeze Ansible Roles for Beta release 

Change-Id: I5361a9f4157a851a94708a81669bebcb6d825b09
This commit is contained in:
Dmitriy Rabotyagov 2022-06-06 20:41:29 +02:00 committed by Jonathan Rosser
parent 5c4178f1ab
commit 8c6076494c
42 changed files with 452 additions and 62 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

185
ansible-role-requirements.yml
View File

@ -1,306 +1,367 @@
---
- name: ansible-hardening
scm: git
src: https://opendev.org/openstack/ansible-hardening
version: master
version: 02edef4106227e868942c8fc32709ca5413c97a6
trackbranch: master
shallow_since: '2022-06-05'
- name: apt_package_pinning
scm: git
src: https://opendev.org/openstack/openstack-ansible-apt_package_pinning
version: master
version: 967cbe4a3e2d181ee139a849dced4227fbc76d95
trackbranch: master
shallow_since: '2022-05-29'
- name: galera_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-galera_server
version: master
version: 8b102ff94b3ea0367a3bf5365295426ee649957b
trackbranch: master
shallow_since: '2022-06-02'
- name: ceph_client
scm: git
src: https://opendev.org/openstack/openstack-ansible-ceph_client
version: master
version: d9844a4e9421c5324eeed1a4f811681bebf6f565
trackbranch: master
shallow_since: '2022-05-29'
- name: haproxy_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-haproxy_server
version: master
version: 8a81b355d8bc0a8828288d7c571639500a4e3e7e
trackbranch: master
shallow_since: '2022-05-29'
- name: keepalived
scm: git
src: https://github.com/evrardjp/ansible-keepalived
version: master
version: 0c9625bcc90104c72581af07bcb2e654fef14215
trackbranch: master
shallow_since: '2022-05-03'
- name: lxc_container_create
scm: git
src: https://opendev.org/openstack/openstack-ansible-lxc_container_create
version: master
version: 37422a7e3dbfff32a1e18c69ca288e593c620727
trackbranch: master
shallow_since: '2022-05-29'
- name: lxc_hosts
scm: git
src: https://opendev.org/openstack/openstack-ansible-lxc_hosts
version: master
version: 844ebcdab63125f239733c2ef1023fade5543e68
trackbranch: master
shallow_since: '2022-05-29'
- name: memcached_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-memcached_server
version: master
version: 9847bf2f5901fdaaf95da7cca32e750e8e56e366
trackbranch: master
shallow_since: '2022-05-29'
- name: openstack_hosts
scm: git
src: https://opendev.org/openstack/openstack-ansible-openstack_hosts
version: master
version: 010b8377ed99b88136e495cfc6f0518b983b92da
trackbranch: master
shallow_since: '2022-06-01'
- name: os_keystone
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_keystone
version: master
version: 235bc0d03721c8efa43e5bc76ec625d80f13b189
trackbranch: master
shallow_since: '2022-05-29'
- name: openstack_openrc
scm: git
src: https://opendev.org/openstack/openstack-ansible-openstack_openrc
version: master
version: 688378603315200dee5b29833e3676b951174698
trackbranch: master
shallow_since: '2022-05-29'
- name: os_adjutant
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_adjutant
version: master
version: a5e9acc16dd212663a41fbc184605066e161d8c3
trackbranch: master
shallow_since: '2022-05-29'
- name: os_aodh
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_aodh
version: master
version: 1f5f88d80eece34a20b189a1c67f8bbe07382a52
trackbranch: master
shallow_since: '2022-05-29'
- name: os_barbican
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_barbican
version: master
version: e5e1a59e05df9f09e21e13d4bec9056b0a93accd
trackbranch: master
shallow_since: '2022-05-29'
- name: os_blazar
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_blazar
version: master
version: 1a5758969a402916fda7dd2923074d4f8e7edf92
trackbranch: master
shallow_since: '2022-05-29'
- name: os_ceilometer
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_ceilometer
version: master
version: ff76357c81211a18569a6dacf36b11d601c57ceb
trackbranch: master
shallow_since: '2022-05-29'
- name: os_cinder
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_cinder
version: master
version: 091b2dfa7246eb94c35816778ee1ae2bcbed5b34
trackbranch: master
shallow_since: '2022-05-29'
- name: os_cloudkitty
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_cloudkitty
version: master
version: 2d98ac9ec700d286d4ccdf79477e00776d932c44
trackbranch: master
shallow_since: '2022-05-29'
- name: os_designate
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_designate
version: master
version: 79b0b8e1ee401255f4fd3927abaa1561f0a20e44
trackbranch: master
shallow_since: '2022-05-29'
- name: os_glance
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_glance
version: master
version: 93c73e99b114346bd1e9100a800ca791e50a02c1
trackbranch: master
shallow_since: '2022-05-29'
- name: os_gnocchi
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_gnocchi
version: master
version: c845819cae0b9606043682008a389716cf3c537a
trackbranch: master
shallow_since: '2022-05-29'
- name: os_heat
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_heat
version: master
version: a69fc500fa3d394ae2d09e22f70429871d582fce
trackbranch: master
shallow_since: '2022-05-29'
- name: os_horizon
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_horizon
version: master
version: 99f8b02ba0052fd111b0ad4f12831203a9b594a3
trackbranch: master
shallow_since: '2022-05-29'
- name: os_ironic
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_ironic
version: master
version: 3c71d45c0d88a6c7c3a7089d426ebf57f7667693
trackbranch: master
shallow_since: '2022-05-29'
- name: os_magnum
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_magnum
version: master
version: 1a3615afdfe55fea362ffb4103430a2d9ac483f5
trackbranch: master
shallow_since: '2022-05-29'
- name: os_manila
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_manila
version: master
version: 4bff5b4352370508429675fb0653580ba5e787ba
trackbranch: master
shallow_since: '2022-05-29'
- name: os_masakari
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_masakari
version: master
version: abb26f320e56af6a38a676cf1604b4f29762b0ad
trackbranch: master
shallow_since: '2022-05-29'
- name: os_mistral
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_mistral
version: master
version: f7fb516d5506837f5e26eb5fa434ffd0d511b466
trackbranch: master
shallow_since: '2022-05-29'
- name: os_murano
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_murano
version: master
version: 6960333d5d5f27eeed4532f795237408696b0563
trackbranch: master
shallow_since: '2022-05-29'
- name: os_neutron
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_neutron
version: master
version: d0af9ee28656e30bd66e364fcb19de422fe6e66e
trackbranch: master
shallow_since: '2022-05-29'
- name: os_nova
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_nova
version: master
version: cf66cd365c5c4ab7276b8d9a2c11d149f1884eb3
trackbranch: master
shallow_since: '2022-05-29'
- name: os_octavia
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_octavia
version: master
version: 2490e5a64eac248ba8d4eb557e1d110e179dda8d
trackbranch: master
shallow_since: '2022-06-06'
- name: os_placement
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_placement
version: master
version: 025824434be3ee3b551b54f42b3b6b7f2dd9288e
trackbranch: master
shallow_since: '2022-05-29'
- name: os_rally
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_rally
version: master
version: 854b8a2b1f35e441cc09fa6b51b8b586351a4a53
trackbranch: master
shallow_since: '2022-05-29'
- name: os_sahara
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_sahara
version: master
version: f8ff70e99c02bd1df1045f0f794ffc2de6fa2648
trackbranch: master
shallow_since: '2022-05-29'
- name: os_senlin
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_senlin
version: master
version: f9cb1f0953c0544988211d551a8913923e707c2d
trackbranch: master
shallow_since: '2022-05-29'
- name: os_swift
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_swift
version: master
version: e2e110154939a8a7170e07aec3a24ad64d0b3403
trackbranch: master
shallow_since: '2022-06-03'
- name: os_tacker
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_tacker
version: master
version: d3794939f010941ef4c616155a03ef978e8e5eb7
trackbranch: master
shallow_since: '2022-05-29'
- name: os_tempest
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_tempest
version: master
version: 18f2c885da785dd00380ebfb8407702c942c6731
trackbranch: master
shallow_since: '2022-05-29'
- name: os_trove
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_trove
version: master
version: 6dff6afa76649247cd412558a64a4455b4a1e112
trackbranch: master
shallow_since: '2022-05-29'
- name: os_zun
scm: git
src: https://opendev.org/openstack/openstack-ansible-os_zun
version: master
version: 9825b2cfe94e8a3d6b5c108f2426489c453dcf91
trackbranch: master
shallow_since: '2022-05-29'
- name: qdrouterd
scm: git
src: https://opendev.org/openstack/ansible-role-qdrouterd
version: master
version: 59786da1bb1769ee7176a5f53a2e777f9f1d0747
trackbranch: master
shallow_since: '2022-05-29'
- name: rabbitmq_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-rabbitmq_server
version: master
version: 30f338e4bcd2e693dc4ecb5dc1d1509982440e52
trackbranch: master
shallow_since: '2022-05-29'
- name: repo_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-repo_server
version: master
version: a9ecec103d0f823123baf429a4c9dd1361003096
trackbranch: master
shallow_since: '2022-05-29'
- name: rsyslog_client
scm: git
src: https://opendev.org/openstack/openstack-ansible-rsyslog_client
version: master
version: 8b3426e27d6d2f40811ef6c701ce63325a11a053
trackbranch: master
shallow_since: '2022-05-29'
- name: rsyslog_server
scm: git
src: https://opendev.org/openstack/openstack-ansible-rsyslog_server
version: master
version: e6fea6f8eac588d4d1ef60df888e52f933d3caa7
trackbranch: master
shallow_since: '2022-05-29'
- name: bird
scm: git
src: https://github.com/logan2211/ansible-bird
version: master
version: 904e55d56f82f36e3e9e9fbc5b3bd932a1151f7b
trackbranch: master
shallow_since: '2021-09-12'
- name: etcd
scm: git
src: https://github.com/noonedeadpunk/ansible-etcd
version: master
version: e4491f63bbd023d5014b60ec554a5a74ffd34c74
trackbranch: master
shallow_since: '2022-05-27'
- name: unbound
scm: git
src: https://github.com/noonedeadpunk/ansible-role-unbound
version: master
version: 4eab099d707ee8e2c8b4b7fef38806fdddb2a2ea
trackbranch: master
shallow_since: '2022-05-27'
- name: resolvconf
scm: git
src: https://github.com/logan2211/ansible-resolvconf
version: master
version: f7f694b3dd4361e364dccb4ce94e6510727fca2f
trackbranch: master
shallow_since: '2021-03-31'
- name: ceph-ansible
scm: git
src: https://github.com/ceph/ceph-ansible
version: stable-6.0
version: 4d3e25c85ee390a126ddc755dc3f672c298ff4fa
trackbranch: stable-6.0
shallow_since: '2021-12-08'
shallow_since: '2022-05-29'
- name: opendaylight
scm: git
src: https://github.com/opendaylight/integration-packaging-ansible-opendaylight
version: master
version: 4a9217ed0fe9078152435daaa2d3f45b81021b3a
trackbranch: master
shallow_since: '2019-09-14'
- name: haproxy_endpoints
scm: git
src: https://github.com/logan2211/ansible-haproxy-endpoints
version: master
version: 8e3a24a35beb16d717072dc83895c5a1f92689fb
trackbranch: master
shallow_since: '2018-03-22'
- name: pacemaker_corosync
scm: git
src: https://github.com/noonedeadpunk/ansible-pacemaker-corosync
version: master
version: 70d3c59efea4c3080fa66aeef75eadd0a032a83e
trackbranch: master
shallow_since: '2021-01-12'
- name: systemd_service
src: https://opendev.org/openstack/ansible-role-systemd_service
scm: git
version: master
version: 4bc059e9d93fc80f225564955db410de6463262e
trackbranch: master
shallow_since: '2022-05-29'
- name: systemd_mount
src: https://opendev.org/openstack/ansible-role-systemd_mount
scm: git
version: master
version: 076b8f940e88eec34fb2a4b7a05fd9fea8ee7b3b
trackbranch: master
shallow_since: '2022-05-29'
- name: systemd_networkd
src: https://opendev.org/openstack/ansible-role-systemd_networkd
scm: git
version: master
version: 1906bd37ec78d1bb9ab4496467dfc2afe0875973
trackbranch: master
shallow_since: '2022-05-29'
- name: python_venv_build
src: https://opendev.org/openstack/ansible-role-python_venv_build
scm: git
version: master
version: 04f58473495eb3127ffd2486ae993355269c9905
trackbranch: master
shallow_since: '2022-05-29'
- name: uwsgi
src: https://opendev.org/openstack/ansible-role-uwsgi
scm: git
version: master
version: d30b01f30f7cf90748bd664c1f1c150b27fe1fc3
trackbranch: master
shallow_since: '2022-05-29'
- name: pki
src: https://opendev.org/openstack/ansible-role-pki
scm: git
version: master
version: 39a320161a58b3fc852a3e656b803886d7f2f79a
trackbranch: master
shallow_since: '2022-05-29'

8
releasenotes/notes/add-uwsgi-tls-5a8c4005106fbcd5.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- |
Added variable `uwsgi_tls` which when added to a `uwsgi_services` item
enables TLS for that service. `uwsgi_tls` is a dict and should contain 2
keys `crt` and `key`, which define the path to the certificate and its
corresponding key respectively. The certificate file should contain any
intermediate certificates required by a client to verify trust.

5
releasenotes/notes/add_flexibility_for_octavia_cinder_variables-107cb1da89834bf3.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- Introduces 3 new variables cinder_default_availability_zone,
octavia_cinder_volume_size and octavia_cinder_volume_type. using
these variables, enables Octavia to use different Cinder configurations.

7
releasenotes/notes/adds-uefi-boot-support-18ad99dd21f7e8be.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- UEFI boot support has been added. To migrate from Legacy BIOS mode,
define `boot_mode:uefi` as a capability for baremetal nodes that support
UEFI. In addition, corresponding flavor(s) will need to be created or
modified to include `boot_mode:uefi` as a capability for scheduling to
occur against UEFI nodes.

12
releasenotes/notes/centos-mirror-url-7698160e63aedce6.yaml Normal file
View File

@ -0,0 +1,12 @@
---
features:
- |
A new variable ``centos_mirror_url`` is introduced to the openstack_hosts
role to allow a single deployment wide variable to control the location
of the centos package mirror.
upgrade:
- |
Existing use of the variable ``openstack_hosts_centos_mirror_url`` will
continue to work as in previous releases, but the new variable
``centos_mirror_url`` can be used to define the mirror location for the
whole deployment.

3
releasenotes/notes/credential-provider-mechanisms-959f7479debbe448.yaml Normal file
View File

@ -0,0 +1,3 @@
---
features:
- Added a support for both Credential Provider Mechanisms(dynamic credentials and pre-provisioned credentials).

5
releasenotes/notes/db-pooling-old-vars-0fca50f8114ab7bb.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- |
The ``octaiva_db_pool_size`` variable was previously deprecated and is now
removed. A replacement variable was introduced in the Xena release.

7
releasenotes/notes/db-pooling-old-vars-6ad7284cd8583218.yaml Normal file
View File

@ -0,0 +1,7 @@
---
upgrade:
- |
The following keystone role variables were previously deprecated, and
are now removed. Replacement variables were introduced in the Xena release.
``keystone_database_pool_timeout`` ``keystone_database_max_pool_size``
``keystone_database_idle_timeout``

5
releasenotes/notes/db-pooling-old-vars-b5dbab9bfb21cc78.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- |
The ``neutron_db_pool_size`` variable was previously deprecated and is now
removed. A replacement variable was introduced in the Xena release.

6
releasenotes/notes/deprecate_congress_lxd-9e1c00c6f93f32f6.yaml Normal file
View File

@ -0,0 +1,6 @@
---
deprecations:
- |
Vaiables ``tempest_service_available_congress`` and
``tempest_service_available_nova_lxd`` have been removed and have no effect
since corresponding services are not supported anymore.

5
releasenotes/notes/deprecate_glance_api_servers-6a5fd6a13d324fb4.yaml Normal file
View File

@ -0,0 +1,5 @@
---
deprecations:
- |
Variable ``nova_glance_api_servers`` has been removed and has no effect
due to corresponsive upstream api_servers being deprecated.

8
releasenotes/notes/drop-nginx-repo-e0a6ab0107e09e94.yaml Normal file
View File

@ -0,0 +1,8 @@
---
upgrade:
- |
The use of the nginx package repository on RedHat derived operating
systems is no longer required as there is a new enough version of the
nginx package in the standard distro repos now. The variables
``repo_centos_nginx_mirror`` and ``repo_centos_nginx_key`` are removed from
the repo_server role and no longer have any effect.

9
releasenotes/notes/extra-port-47d2ba4074ab6a62.yaml Normal file
View File

@ -0,0 +1,9 @@
---
upgrade:
- |
Galera will now additionally listen on port 3307 by default, with this port
being used by the monitoring user to check cluster status. Ensure that any
firewall rules permit access to this port before upgrading. If an
'extra_port' was already configured, ensure that any conflicting
configuration is removed and set your preferred values via
'galera_monitoring_port' and 'galera_monitoring_max_connections'.

19
releasenotes/notes/feature-enabled-deprecation-b4bedf43746e30b4.yaml Normal file
View File

@ -0,0 +1,19 @@
---
deprecations:
- |
Following tempest related variables were deprecated and have no effect:
* tempest_compute_ssh_user
* tempest_compute_console_output_enabled
* tempest_compute_resize_enabled
* tempest_compute_snapshot_enabled
* tempest_compute_change_password
* tempest_image_api_v1_enabled
* tempest_image_api_v2_enabled
* tempest_swift_container_sync
* tempest_swift_object_versioning
* tempest_swift_discoverable_apis
* tempest_volume_backup_enabled
* tempest_volume_multi_backend_enabled
* tempest_enable_instance_password
* tempest_volume_backend_names

5
releasenotes/notes/galera_data_dir-98c9606407532be0.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- |
Implemented variable ``galera_data_dir`` that control datadir for MariaDB
databases. Defaults to `/var/lib/mysql`.

10
releasenotes/notes/galera_tmpdir-3271e0bc8e353930.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- |
New variables ``galera_tmp_dir`` and ``galera_ignore_db_dirs`` were
implemented to control path to tmp dir and what directories should be
ignored when listing databases.
upgrade:
- |
If you have database named as ``#tmp`` you should change ``galera_tmp_dir``
path and adjust ``galera_ignore_db_dirs`` or rename database.

13
releasenotes/notes/glance_remote_client-78e5d426cb55717f.yaml Normal file
View File

@ -0,0 +1,13 @@
---
features:
deprecations:
- |
Variable ``glance_nfs_local_directory`` has been renamed to
``glance_images_local_directory`` to better reflect purpose of
the variable. ``glance_nfs_local_directory`` remains for backwards
compatability but will be removed in Zed release.
- |
Variable ``glance_nfs_client`` has been replaced with
``glance_remote_client``. New variable has new keys for defining mounts
to cover wider range of supported filesystems.
Compatability for ``glance_nfs_client`` has been kept until Zed release.

20
releasenotes/notes/global-apt-pins-a0d6785a8fd662df.yaml Normal file
View File

@ -0,0 +1,20 @@
---
features:
- |
A new variable `openstack_hosts_apt_pinned_packages` is added which allows
deployment wide apt pins to be defined in user_variables. The variable defaults
to pinning the UCA repository to a priority lower than the Ubuntu repositories for
any binary packages generated from the ceph source package. The intention is to
ensure that Ceph packages are always installed from the Ubuntu repositories, or
alternatively the official ceph repositories if the ceph_client role is run later
against a host. The ceph packages for a particular openstack release may not be the
same version as those expected by the rest of openstack-ansible so this change ensures
consistency in the deployed ceph version.
upgrade:
- |
The new variable `openstack_hosts_apt_pinned_packages` is added to the openstack_hosts
ansible role and sets the value of `apt_pinned_packages` for the apt_package_pinning
role run as a dependancy of the openstack_hosts role. Existing use of the
`apt_pinned_packages` variable by deployers in user_variables should be reviewed
to ensure that those pins are applied by the intended ansible roles, and swapped
to this new variable if necessary.

18
releasenotes/notes/gnocchi_incoming_driver-0f96301b88044f55.yaml Normal file
View File

@ -0,0 +1,18 @@
---
features:
- |
Implemented possibility to natively define ``gnocchi_incoming_driver``
separately from ``gnocchi_storage_driver``. Default behaviour is that
``[incoming]`` is left unconfigured which means ``[storage]`` is used
when gnocchi_incoming_driver and gnocchi_storage_driver are equal.
Role will install incoming driver dependencies if required.
To implement that following variables introduced:
* gnocchi_storage_file_basepath
* gnocchi_storage_swift_container_prefix
* gnocchi_incoming_driver
* gnocchi_incoming_file_basepath
* gnocchi_incoming_swift_container_prefix
* gnocchi_ceph_incoming_pool
* gnocchi_ceph_incoming_username

9
releasenotes/notes/gnocchi_redis_driver-ea6bcb123755094b.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
Variables ``gnocchi_storage_redis_url`` and ``gnocchi_incoming_redis_url``
were added to manage redis connection if it's picked as an storage/incoming
driver.
Default value is redis://localhost:6379/
Please mention, that OpenStack-Ansible does not provide isntallation of
Redis as of today.

5
releasenotes/notes/heartbeat-in-pthread-6266b4bad0efa00c.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- |
Fixes a file descriptor leak which may impact services which use the
oslo.messaging RabbitMQ heartbeat mechanism.

5
releasenotes/notes/heartbeat-in-pthread-9f5fde7bfdd7d306.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- |
Fixes a file descriptor leak which may impact services which use the
oslo.messaging RabbitMQ heartbeat mechanism.

5
releasenotes/notes/heartbeat-in-pthread-d0c9958361c224f0.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- |
Fixes a file descriptor leak which may impact services which use the
oslo.messaging RabbitMQ heartbeat mechanism.

13
releasenotes/notes/keystone-use-pki-role-d0e905887a5f5bd1.yaml Normal file
View File

@ -0,0 +1,13 @@
---
upgrade:
- |
The keystone installation now uses ansible-role-pki to create and install
a server certificate for Apache when keystone_ssl is true. The same role
is also used to create a CA certificate and key for SAML federation when
keystone_idp is populated by the deployer. For an existing keystone SAML
setup the certificate and key will be re-created which may be undesirable,
unless the existing ones are first copied to the relevant directories in
``/etc/openstack_deploy/pki/roots`` on the deploy host. The variables
``keystone_ssl_self_signed_regen`` and ``keystone_ssl_self_signed_subject``
are removed and are replaced with equivalent functionality via the new
``keystone_pki_*`` variables.

7
releasenotes/notes/keystone_uwsgi_role-b61179e170401e21.yaml Normal file
View File

@ -0,0 +1,7 @@
---
upgrade:
- |
Keystone now uses common uwsgi role for uWSGI deployment. Along with that
variable ``keystone_services`` has been extended with required arguments
for uWSGI. If you override this variable locally make sure to update it's
structure accordingly.

10
releasenotes/notes/neutron-dpdk-bonds-4dd98fc0b341ebfb.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- |
The ``provider_networks`` library has been updated to support the
definition of bond member interfaces that can automatically be added as
bond ports to OVS provider bridges setup during a deployment. This
feature is currently limited to DPDK-based deployments. To activate this
feature, add the ``network_bond_interfaces`` key to the respective provider
network definition in ``openstack_user_config.yml``. For more information,
refer to the latest Open vSwitch w/ DPDK deployment guide.

6
releasenotes/notes/nova_glance_rbd-ab6e9b0f5dd7b9ec.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- |
New variables ``nova_glance_rbd_inuse`` and ``nova_glance_images_rbd_pool`` have
been implemented that allows deployer to easily configure nova to retrieve glance
images from RBD directly, if nova uses local storage for ephemeral drives.

6
releasenotes/notes/nova_ssl_header-c5d95a629a0a1df5.yaml Normal file
View File

@ -0,0 +1,6 @@
---
deprecations:
- |
Variables ``nova_external_ssl`` and ``nova_secure_proxy_ssl_header``
have been removed since secure_proxy_ssl_header option from nova.conf
they controlled has been deprecated and has no effect.

7
releasenotes/notes/optional_cinder_audit_send_actions-76bf53ee0df68383.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- Introduced new variable ``cinder_volume_usage_audit_send_actions_enabled``
to allow the deployer to disable the send actions option in
cinder-volume-usage-audit service unit. To have lowest possible
footprint, the default value would be true to not change the behaviour
of the cinder-volume-usage-audit in existing deployments.

5
releasenotes/notes/rabbit_cloudsmith-36ccc2f807688f4f.yaml Normal file
View File

@ -0,0 +1,5 @@
---
other:
- |
Default source of rabbitmq and erlang packages has been switched to
cloudsmith.io

15
releasenotes/notes/rabbitmq_ini_config-dcf95fe46a37ff2c.yaml Normal file
View File

@ -0,0 +1,15 @@
---
features:
- |
New variables that provide better control over RabbitMQ management
interface have been implemented:
* rabbitmq_management_bind_tcp_port
* rabbitmq_management_bind_tls_port
* rabbitmq_management_ssl
upgrade:
- |
RabbitMQ was migrated to the new-style config, which resides in
``/etc/rabbitmq/rabbitmq.conf``. Old config ``rabbitmq.config`` will be
removed during upgrade.

6
releasenotes/notes/rabbitmq_init_overrides-74ce479a2dcf304c.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- |
Added variable ``rabbitmq_init_overrides`` that allows to control rabbitmq
overrides that will be applied to the systemd service.
Previously values were hardcoded without possibility for override.

9
releasenotes/notes/rabbitmq_manage_hosts-834150c45dfc0771.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
Added variable ``rabbitmq_manage_hosts_entries`` that controls if
rabbitmq_server role will attempt to adjust /etc/hosts file
fixes:
- |
Do not duplicate records in /etc/hosts file by rabbitmq role when hosts
file is already managed by OSA.

6
releasenotes/notes/remove-unnecessary-vars-2b29b9fd5c7ac06a.yaml Normal file
View File

@ -0,0 +1,6 @@
---
deprecations:
- variable ``tempest_network_tenant_network_cidr`` has been deprecated
- variable ``tempest_network_tenant_network_mask_bits`` has been deprecated
- variable ``tempest_fatal_deprecations`` has been deprecated

5
releasenotes/notes/remove_xinetd-1970838891f570cc.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- |
The xinetd script and configuration to run the 'clustercheck' script is
replaced with a systemd socket activated service.

3
releasenotes/notes/tempest-endpoint-type-bf2252d66bc1e4f5.yaml Normal file
View File

@ -0,0 +1,3 @@
---
other:
- Added new variable ``tempest_endpoint_type`` to avoid having endpoint type hardcoded in tempest.conf

5
releasenotes/notes/tempest-resource-creation-improvements-4a5bc4dab1944934.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- Implemented variables ``tempest_public_net_create``, ``tempest_private_net_create``, ``tempest_router_create``, ``tempest_images_create``, ``tempest_flavors_create``, ``tempest_projects_create`` which allow to skip creating specific resources.
upgrade:
- Changed default value for ``tempest_projects`` variable. Now this list contains only one element 'tempest'. Previously it was 'demo' and 'alt_demo' which was quite confusing.

7
releasenotes/notes/templated_service-f31e4515c2fd75ab.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- |
Allow to create `templated services <https://www.freedesktop.org/software/systemd/man/systemd.service.html#Service%20Templates>`_
Now for systemd_services you are allowed to provide template_arguments,
which can contain a list of arguments with which templated services
would be created.

6
releasenotes/notes/tls_variables-5d7db8f80f158f0d.yaml Normal file
View File

@ -0,0 +1,6 @@
---
deprecations:
- |
The variable 'keystone_ssl_cipher_suite' is deprecated in favour of
'keystone_ssl_cipher_suite_tls12' which will continue to manage
configuration of ciphers for TLS v1.2 and earlier.

9
releasenotes/notes/tls_variables-91160d4e38085de4.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
The HAProxy role now supports TLS v1.3 by default, alongside TLS v1.2.
deprecations:
- |
The variable 'haproxy_ssl_cipher_suite' is deprecated in favour of
'haproxy_ssl_cipher_suite_tls12' which will continue to manage
configuration of ciphers for TLS v1.2 and earlier.

6
releasenotes/notes/tls_variables-ab6684a5a5505068.yaml Normal file
View File

@ -0,0 +1,6 @@
---
deprecations:
- |
The variable 'horizon_ssl_cipher_suite' is deprecated in favour of
'horizon_ssl_cipher_suite_tls12' which will continue to manage
configuration of ciphers for TLS v1.2 and earlier.

9
releasenotes/notes/venv_wheels_build-23298a7019e629bd.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
Functionality of ``venv_rebuild`` has been adjusted to the correct scope.
Now setting this variable to true will not trigger wheels rebuild -
it will just remove and re-create your virtualenv.
If you want to rebuild wheels, a new variable ``venv_wheels_rebuild`` has
been implemented.