Freeze roles for Milestone 1

This freezes the roles and copy each role releases notes for
preparing the first Milestone of the Rocky release.

Change-Id: I6b1343863eb27a5753ddbfcc3c1e2b063618ae50
This commit is contained in:
Jean-Philippe Evrard 2018-04-28 17:15:18 +02:00 committed by Jesse Pretorius
parent 87ddedc694
commit ec5b3a7a82
27 changed files with 310 additions and 58 deletions

View File

@ -1,191 +1,191 @@
- name: ansible-hardening
scm: git
src: https://git.openstack.org/openstack/ansible-hardening
version: master
version: e3997863438be50e08011ef7f347cd74beff8458
- name: apt_package_pinning
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning
version: master
version: b9de2393c2e5bf7fa34249efcbd4903146def3ff
- name: pip_install
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-pip_install
version: master
version: d14847189419d479373c3734cbfebd3fdc9c1e15
- name: galera_client
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-galera_client
version: master
version: 2de5b523a055a36d6061cc58a4f460a4900b5c6c
- name: galera_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-galera_server
version: master
version: 7daa94e69bbba55203f518b32efddba87d8fddd5
- name: ceph_client
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-ceph_client
version: master
version: e4e768ca2372e0d5838fc0e57ef6a120aab05d06
- name: haproxy_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-haproxy_server
version: master
version: 9b7c79572af0bc438d137dde24c16c8e7aa45247
- name: keepalived
scm: git
src: https://github.com/evrardjp/ansible-keepalived
version: master
version: 64764d25ab868417f1138a7b9605f2eb94cbfd02
- name: lxc_container_create
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create
version: master
version: e58699c1bdf02380a14519a1534012d6f1901e06
- name: lxc_hosts
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts
version: master
version: bbde19186d8381806fa896672e596bbb5f2fc1d7
- name: memcached_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-memcached_server
version: master
version: e7ffc8c09fcdd6a79bf2129f47f743125de59fd6
- name: openstack_hosts
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts
version: master
version: d99cf0f0b19668bee57fe118b788b4432ac38749
- name: os_keystone
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_keystone
version: master
version: aa5cec05cff15e4febcbb7994a26ea32ab47a557
- name: openstack_openrc
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc
version: master
version: 2b88c83e50c196db573883048313e596bab5a341
- name: os_aodh
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_aodh
version: master
version: 7dc1295911865d8e460b1fc841df29404744d18b
- name: os_barbican
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_barbican
version: master
version: a9b859fb66445d308c9c66cb5ba6cc2dc3010d31
- name: os_ceilometer
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_ceilometer
version: master
version: f88b365788899b38d96597d805114198e262d757
- name: os_cinder
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_cinder
version: master
version: c2a816962281207f68b89afa4726f045df2d1e2c
- name: os_congress
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_congress
version: master
version: 2e1ef93a838b9be96b5229c67df1e5419de5d676
- name: os_designate
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_designate
version: master
version: 26f1e942f879153e4b9692e9686f319c0fbb75b9
- name: os_glance
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_glance
version: master
version: 6cd36b8dba0fd7ad0c72387951f6103b741fe9f9
- name: os_gnocchi
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi
version: master
version: b235e576150ba835fd6b4c8726a44a435c0d8bb1
- name: os_heat
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_heat
version: master
version: 81a3f47a540ccac41497491988bc9576cc2799cf
- name: os_horizon
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_horizon
version: master
version: b6ea51848dfac67610b2410d2263274ed26b060f
- name: os_ironic
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_ironic
version: master
version: a4f3e7563ff660098fcb3c3faedfd11a4e317513
- name: os_magnum
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_magnum
version: master
version: f8eac041766efc198dc86fa61fda2a070cd4a984
- name: os_molteniron
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_molteniron
version: master
version: 0dae54128d45e7be3f1a823cdd8080e7ff536c78
- name: os_neutron
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_neutron
version: master
version: 7f6211a93fcc180257c70832098a1adab955a97f
- name: os_nova
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_nova
version: master
version: f51d68552759559f56a4906474cb76e1e5b2b2cb
- name: os_octavia
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_octavia
version: master
version: b10a24998a5e642f61f320795f5a0c2ea9cc1b08
- name: os_rally
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_rally
version: master
version: 2e0afc3de1df59573e43232eb3e46aac25436a21
- name: os_sahara
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_sahara
version: master
version: 7aed3ebb0fd3f6f953ea68779dc4ffc8475987e0
- name: os_swift
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_swift
version: master
version: 8f1cb4dde58c2d09061d3d7fb29b9f54ccaff450
- name: os_tacker
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_tacker
version: master
version: aaba56e52dde82420bd9553f75fab2f9cbebaccb
- name: os_tempest
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_tempest
version: master
version: db6a3e0af6748951a47faacdd976bcf09c058ce6
- name: os_trove
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_trove
version: master
version: effaf490224d52cc587b98fd0bb0e6d8936de69a
- name: plugins
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-plugins
version: master
version: c8231e07ca8db9604a80060baf1bdecaad1d0e9a
- name: rabbitmq_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server
version: master
version: d44eb3b39a4262995d8f551cf88fe81424460ab1
- name: repo_build
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-repo_build
version: master
version: 040ee2e1284586dcdf27538129ef3d3d1a4907b4
- name: repo_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-repo_server
version: master
version: 4e3213f4c6618235aa93bd994166799c06ccb7a5
- name: rsyslog_client
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_client
version: master
version: b976e44d883e65009255a2d653f69495f9f10c0e
- name: rsyslog_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_server
version: master
version: 958937cfe9f8864582b3ea2ac8eac026142c54e5
- name: sshd
scm: git
src: https://github.com/willshersystems/ansible-sshd
version: master
version: c7483f1294473a33547c30ebe83d8d5bf28694d3
- name: bird
scm: git
src: https://github.com/logan2211/ansible-bird
version: master
version: 21d7d8de5af9e73c0853d3434a4b3d3f8dd39a70
- name: etcd
scm: git
src: https://github.com/logan2211/ansible-etcd
version: master
version: 3933355dfe51477822db517d3c07ad561fb61318
- name: unbound
scm: git
src: https://github.com/logan2211/ansible-unbound
version: master
version: 509d99a94bd959afa0d9a86f34fb6af95a1ef5c7
- name: resolvconf
scm: git
src: https://github.com/logan2211/ansible-resolvconf
version: master
version: d48dd3eea22094b6ecc6aa6ea07279c8e68e28b5
- name: ceph-ansible
scm: git
src: https://github.com/ceph/ceph-ansible
@ -193,32 +193,32 @@
- name: opendaylight
scm: git
src: https://github.com/opendaylight/integration-packaging-ansible-opendaylight
version: master
version: 2131cb7a09eee561783991218abbaa6e8c26cb25
- name: haproxy_endpoints
scm: git
src: https://github.com/logan2211/ansible-haproxy-endpoints
version: master
version: 8e3a24a35beb16d717072dc83895c5a1f92689fb
- name: nspawn_container_create
src: https://git.openstack.org/openstack/openstack-ansible-nspawn_container_create
scm: git
version: master
version: 997f74afa3fa7e0e29454c80371d95e61c22c3e7
- name: nspawn_hosts
src: https://git.openstack.org/openstack/openstack-ansible-nspawn_hosts
scm: git
version: master
version: 7a57e4e98ace0b59ab8982301ecc74c54236a047
- name: systemd_service
src: https://git.openstack.org/openstack/ansible-role-systemd_service
scm: git
version: master
version: 1c580bbdbc626814b3c552f90b260a5c1ec66bec
- name: systemd_mount
src: https://git.openstack.org/openstack/ansible-role-systemd_mount
scm: git
version: master
version: d1dc867ef105140f9cd805a6a0050d8ba76787f4
- name: systemd_networkd
src: https://git.openstack.org/openstack/ansible-role-systemd_networkd
scm: git
version: master
version: d8bcdc0341b0df29bd152e9b1f0eb3cb0e2b5439
- name: python_venv_build
src: https://git.openstack.org/openstack/ansible-role-python_venv_build
scm: git
version: master
version: 19e2573be8ddc21dfa017861d1bb6f6a4f9a39dc

View File

@ -0,0 +1,4 @@
---
features:
- Added the ability to configure vendor data for Nova in order to be able to
push things via the metadata service or config drive.

View File

@ -0,0 +1,5 @@
---
deprecations:
- |
The `lxc_container_fixed_mac` option has been removed and containers will
be created with static mac addresses.

View File

@ -0,0 +1,6 @@
---
features:
- A new option was added to the plugin for `container_namespaces` which is a
user provided interface for passing in the namespaces used to attach to the
container. If this option is undefined the default namespaces will be used
for full container isolation.

View File

@ -0,0 +1,7 @@
---
features:
- |
Deployers of CentOS 7 environments can use the
``openstack_hosts_enable_yum_fastestmirror`` variable to enable or disable
yum's fastestmirror plugin. The default setting of ``yes`` ensures that
fastestmirror is enabled.

View File

@ -0,0 +1,5 @@
---
features:
- Fedora 27 is now supported.
deprecations:
- Fedora 26 support is deprecated and no longer tested on each commit.

View File

@ -0,0 +1,17 @@
---
upgrade:
- |
In order to collect the default files used for various templates, the
implementation has been changed from using a git source to rather
using the built-in templates from the venv build based on the setup.cfg
file. As such, the following variables have been removed.
* ``keystone_git_config_lookup_location``
* ``keystone_paste_git_file_path``
* ``keystone_sso_callback_git_file_path``
Instead, a location on the deployment host where the venv defaults are
stored is now configurable using the variable
``keystone_config_cache_path`` which defaults to ``cache/keystone`` in
the deploy user home directory. This location is used as a template
source when deploying the file to the target host.

View File

@ -0,0 +1,16 @@
---
features:
- |
This consolidates the amphora image tasks in a common file and adds a way
to download an amphora image from an artefact storage over http(s). With
the Octavia team providing test images the tests were modified to not
build images any longer but download them.
security:
- |
It is commonly considered bad practice to downlaod random images from the
Internet expecially the test images the Octavia team provides which could
potentially include unpatched operating system packages - so for any
production deploy adjust the download url to an artifact storage your
organization controls. The system also does not authenticate the image
(e.g. with an md5) so should only be used on networks your organization
controls.

View File

@ -0,0 +1,14 @@
---
features:
- In a greenfield deployment containers will now bind link
their journals to the physical host machine in the
``/var/log/journal/{{ machine_id }}`` location. During an
upgrade this change will be added to the container config but
will not go into effect until the container is restarted.
Because the restart is not forced the operator can perform
restarts to best suit the needs of their environment.
Journal linking provides operators the ability to log stream
and health check containerized systems without having to
attach or otherwise login. If this feature is not needed or
desired it can be disabled by setting the option
``lxc_container_journal_link`` to *false*.

View File

@ -0,0 +1,9 @@
---
features:
- Within the lxc-container-create role the legacy networking scripts have been
converted to use systemd-networkd for ubuntu and centos. This gives us a
single, common, networking functionality to across multiple distros.
- All of the pre/post up, and pre/post down adhoc command options have been
converted to using systemd "oneshot" services. This conversion allows all
supported distros to benifit from the ability to run adhoc commands before
and after networking is available on both start-up and shut-down.

View File

@ -0,0 +1,27 @@
---
features:
- The option ``lxc_hosts_container_image_url`` has been added allowing
deployers to define their base image url to whatever it needs to be
removing the requirement for operators to maintain an internal LXC
index in the event they want to host a private repository.
- The option ``lxc_hosts_container_image_download_legacy`` has been
added allowing a deployer to enable the use of the legacy lxc image
repository. This option is a Boolean and has a default of **false**.
deprecations:
- The variable ``lxc_image_cache_server_mirrors`` has been deprecated
in the "lxc_hosts" role. This option has been replaced by the static
variable ``lxc_hosts_container_image_url``. This variable will continue
to function as a single element list allowing existing automation to
function when in legacy image mode but should not be considered in use
by default.
- The variable ``lxc_image_cache_server`` has been deprecated in the
``lxc_hosts`` role. This option has been replaced by the static
variable ``lxc_hosts_container_image_url``.
other:
- The use of **images.linuxcontainers.org** is no longer required. While
the images provided by that build system are perfectly functional they
have been less than optimal in a lot ways for a very long time. The
``lxc_hosts`` role will now pull a base image from the upstream distro
being deployed. If a deployer wishes to continue using the images from
**images.linuxcontainers.org** they are welcome to but it is no longer
forced.

View File

@ -0,0 +1,8 @@
---
features:
- Enable networking-bgpvpn ml2 neutron driver to make
``OpenDaylight SDN Controller`` to support BGPVPN
for external network connectivity. You can set the
``neutron_plugin_type`` to ``ml2.opendaylight`` and
``neutron_plugin_base`` to ``odl-router_v2`` and
``bgpvpn`` to enable BGPVPN on the OpenDaylight.

View File

@ -5,3 +5,4 @@ features:
You can set the ``neutron_plugin_type`` to
``ml2.opendaylight`` to utilize this code path.
The usage of ``OpenDaylight`` is currently experimental.
Two versions are currently supported: Nitrogen and Oxygen.

View File

@ -0,0 +1,8 @@
---
features:
- |
The default variable `nova_default_schedule_zone` was previously set by
default to ``nova``. This default has been removed to allow the default
to be set by the nova code instead. Deployers wishing to maintain the
default availability zone of nova must now set the variable as a
user_variables.yml or group_vars override.

View File

@ -0,0 +1,8 @@
---
upgrade:
- |
The Cinder v1 API and the variable to enable it, ``cinder_enable_v1_api``,
have been removed. Existing keystone registered endpoints and service for
cinder v1 will be removed during an upgrade.
- |
The ``cinder_enable_v3_api`` variable has been removed as it had no effect.

View File

@ -0,0 +1,15 @@
---
features:
- |
The PIP upgrade strategy can now be controlled using the new
``pip_install_strategy`` variable which can either be ``eager``
if the deployers want to upgrade both the package and its dependencies or
``only-if-needed`` if they want to only upgrade what's really necessary.
More information can be found on the `PIP user guide
<https://pip.pypa.io/en/stable/user_guide/#only-if-needed-recursive-upgrade>`_
upgrade:
- |
The default PIP stategy has been changed to ``only-of-needed`` in order to
minimize the amount of packages which are updated during installation.
Deployers can still override the default option using the ``pip_install_strategy``
variable.

View File

@ -0,0 +1,31 @@
---
features:
- |
The extra packages percona packages used by the ppc64le
are now downloaded by the Ansible deployment host by
default, as opposed to the target hosts. Once downloaded
the packages are pushed up to the target hosts.
This behaviour may be adjusted by setting
``galera_server_extra_package_downloader`` to
``target-host``.
The packages are downloaded to the path set in
``galera_server_extra_package_path``.
deprecations:
- |
The following variables have been removed as they no
longer serve any purpose.
* ``galera_package_arch``
* ``percona_package_download_validate_certs``
* ``percona_package_url``
* ``percona_package_fallback_url``
* ``percona_package_sha256``
* ``percona_package_path``
* ``qpress_package_download_validate_certs``
* ``qpress_package_url``
* ``qpress_package_fallback_url``
* ``qpress_package_sha256``
* ``qpress_package_path``
The functionality previously using these variables has
been transitioned to using a simpler data structure.

View File

@ -0,0 +1,5 @@
---
deprecations:
- |
The variable ``pip_required_pip_packages`` has been removed as it is not
used and not required.

View File

@ -0,0 +1,5 @@
---
upgrade:
- Any tooling using the Designate v1 API needs to be reworked to use the v2 API
critical:
- The Designate V1 API has been removed, and cannot be enabled.

View File

@ -0,0 +1,8 @@
---
other:
- |
The internal variable ``python_ceph_package`` has been renamed to
``python_ceph_packages`` and is now a list instead of a string.
If you are using gnocchi with ceph and are using this internal
variable in your ``ceph_extra_components`` overrides,
please update it to ``python_ceph_packages``.

View File

@ -0,0 +1,8 @@
---
features:
- The variable ``lxc_user_defined_container`` has been added to the lxc_hosts
role allowing deployers to define the variable file loaded when preparing a
base container image. This option defaults to using a base image most
closely associated with the underlying OS however should a deployer need,
this option can be used to customize the base container image for a given
host.

View File

@ -0,0 +1,20 @@
---
upgrade:
- The variable ``lxc_host_machine_volume_size`` now accepts any valid size
modifier acceptable by ``truncate -s`` and ``machinectl set-limit``.
prior to this change the option assumed an integer was set for some value
in gigabytes. All acceptable values can be seen within the
`documentation for machinectl <https://www.freedesktop.org/software/systemd/man/machinectl.html#set-limit%20%5BNAME%5D%20BYTES>`_
features:
- An option to disable the ``machinectl`` quota system has been added. The
variable ``lxc_host_machine_quota_disabled`` is a Boolean with a default of
**true**. When this option is set to **true** it will disable the
``machinectl`` quota system.
other:
- The variable ``lxc_host_machine_volume_size`` is used to set the size of
the default sparse file as well as define a limit within the ``machinectl``
quota system. When the ``machinectl`` quota system is enabled deployers
should appropriately set this value to the size of the container volume,
even when not using a sparse file.
- The container image cache within machinectl has been set to "64G" by
default.

View File

@ -1,7 +1,7 @@
---
upgrade:
- |
If you have overriden your
If you have overridden your
``openstack_host_specific_kernel_modules``, please
remove its group matching, and move that override
directly to the appropriate group.

View File

@ -0,0 +1,10 @@
---
deprecations:
- The option ``cache_prep_commands`` from ``lxc_cache_map`` has been
removed. This option has been converted to a template file within
the **lxc_hosts** role. In order to set specific cache commands within
the template it is recommended that deployers set
``lxc_cache_prep_pre_commands`` or ``lxc_cache_prep_post_commands``. If the
entire prep script needs to be overridden deployers can set
``lxc_cache_prep_template`` to the full local path of the prep template and
the role will use this script irrespective of the base container type.

View File

@ -0,0 +1,6 @@
---
features:
- |
Supported openSUSE and Ubuntu hosts ship with new enough pip,
setuptools, virtualenv and wheel packages which are now being
used in favor of the PIP ones.

View File

@ -0,0 +1,9 @@
---
features:
- The variable ``lxc_user_defined_container`` has been added to the
lxc_container_create role allowing deployers to define the variable
file loaded when creating a container. This option defaults to **null**
which will instruct the role to create a container using the OS most closely
assosiated with the underlying OS. This option can be set to either one of
the roles built-in container types or use any variable file local to the
deployment host.

View File

@ -4,7 +4,7 @@ features:
``GROUP_VARS_PATH`` with the folders of its choice
(separated by the colon sign) to define an user
space group_vars folder. These vars will apply but
be (currently) overriden by the OpenStack-Ansible
be (currently) overridden by the OpenStack-Ansible
default group vars, by the set facts, and by the
user_* variables. If the deployer defines multiple
paths, the variables found are merged, and
@ -14,7 +14,7 @@ features:
``HOST_VARS_PATH`` with the folders of its choice
(separated by the colon sign) to define an user
space host_vars folder. These vars will apply but
be (currently) overriden by the OpenStack-Ansible
be (currently) overridden by the OpenStack-Ansible
default host vars, by the set facts, and by the
user_* variables. If the deployer defines multiple
paths, the variables found are merged, and