Merge "Tidy up release notes for Ussuri"

This commit is contained in:
Zuul 2020-05-19 17:10:59 +00:00 committed by Gerrit Code Review
commit 4996570ee8
24 changed files with 79 additions and 69 deletions

View File

@ -1,6 +1,7 @@
---
features:
- |
Added a mechanism to customize ``prometheus.yml``. Please read the the
`documentation <https://docs.openstack.org/kolla-ansible/latest/reference/logging-and-monitoring/prometheus-guide.html>`__.
Adds a mechanism to customize ``prometheus.yml``. Please read the the
`documentation
<https://docs.openstack.org/kolla-ansible/latest/reference/logging-and-monitoring/prometheus-guide.html>`__.
for more details.

View File

@ -4,9 +4,8 @@ features:
Allow operators to use custom parameters with the ceilometer-upgrade
command. This is quite useful when using the dynamic pollster subsystem;
that sub-system provides flexibility to create and edit pollsters configs,
which affects gnocchi resource-type configurations. However, Ceilometer
which affects Gnocchi resource-type configurations. However, Ceilometer
uses default and hard-coded resource-type configurations; if one customizes
some of its default resource-types, he/she can get into trouble during
upgrades. Therefore, the only way to work around it is to use the
"--skip-gnocchi-resource-types" flag. This release introduces a method for
operators to execute such customization, and many others if needed.
``--skip-gnocchi-resource-types`` flag.

View File

@ -1,7 +1,7 @@
---
upgrade:
- |
Adds maximum supported version check for Ansible. Kolla Ansible now
Adds a maximum supported version check for Ansible. Kolla Ansible now
requires at least Ansible ``2.8`` and supports up to ``2.9``. See
`blueprint
<https://blueprints.launchpad.net/kolla-ansible/+spec/ansible-max-version>`__

View File

@ -1,6 +1,6 @@
---
fixes:
- |
Rework keystone fernet bootstrap which had tendencies to fail on multinode
Reworks Keystone fernet bootstrap which had tendencies to fail on multinode
setups. See `bug 1846789 <https://launchpad.net/bugs/1846789>`__ for
details.

View File

@ -1,6 +1,6 @@
---
fixes:
- |
Change Manila cephfs share driver to
``manila.share.drivers.cephfs.driver.CephFSDriver``, old driver was
Changes Manila cephfs share driver to
``manila.share.drivers.cephfs.driver.CephFSDriver``, as the old driver was
deprecated.

View File

@ -1,13 +1,13 @@
---
features:
- |
Introduce user modifiable variables instead of fixed names for Ceph
Introduces user modifiable variables instead of fixed names for Ceph
keyring files used by external Ceph functionality.
upgrade:
- |
For cinder (cinder-volume and cinder-backup), glance-api and manila
keyrings behavior has changed and kolla-ansible deployment will not copy
those keys using wildcards (ceph.*), instead will use newly introduced
variables. Your environment may render unusable after an upgrade if your
keys in /etc/kolla/config do not match default values for introduced
variables.
For cinder (``cinder-volume`` and ``cinder-backup``), ``glance-api`` and
``manila`` keyrings behavior has changed and Kolla Ansible deployment will
not copy those keys using wildcards (``ceph.*``), instead will use newly
introduced variables. Your environment may render unusable after an upgrade
if your keys in ``/etc/kolla/config`` do not match default values for
introduced variables.

View File

@ -1,5 +1,5 @@
---
features:
- Configure all openstack services to use the globally defined Certificate
Authority to verify HTTPs connections. The global CA is configured by the
'openstack_cacert' parameter.
- Configures all openstack services to use the globally defined Certificate
Authority file to verify HTTPS connections. The global CA file is
configured by the ``openstack_cacert`` parameter.

View File

@ -1,13 +1,13 @@
---
features:
- |
When 'kolla_copy_ca_into_containers' is configured to 'yes', the
certificate authority files in /etc/kolla/certificates/ca will be copied
into service containers to enable trust for those CA certificates. This
is required for any certificates that are either self-signed or signed by
a private CA, and are not already present in the service image trust store.
Otherwise, either CA validation will need to be explicitly disabled or the
path to the CA certificate must be configured in the service using
When ``kolla_copy_ca_into_containers`` is configured to ``yes``, the
certificate authority files in ``/etc/kolla/certificates/ca`` will be
copied into service containers to enable trust for those CA certificates.
This is required for any certificates that are either self-signed or signed
by a private CA, and are not already present in the service image trust
store. Otherwise, either CA validation will need to be explicitly disabled
or the path to the CA certificate must be configured in the service using
the ``openstack_cacert`` parameter.
issues:

View File

@ -1,7 +1,7 @@
---
features:
- |
Adds command ``prune-images`` for Docker image pruning on hosts. See
Adds a ``prune-images`` command for Docker image pruning on hosts. See
`blueprint
<https://blueprints.launchpad.net/kolla-ansible/+spec/docker-image-pruning>`__
for details.

View File

@ -1,6 +1,6 @@
---
upgrade:
- |
Python 2.7 support has been dropped. Last release of kolla-ansible to
Python 2.7 support has been dropped. The last release of Kolla Ansible to
support Python 2.7 is OpenStack Train. The minimum version of Python now
supported by kolla-ansible is Python 3.6.
supported by Kolla Ansible is Python 3.6.

View File

@ -1,7 +1,7 @@
---
features:
- |
Added configuration options to enable backend TLS encryption from HAProxy
Adds configuration options to enable backend TLS encryption from HAProxy
to the Keystone, Glance, Heat, Placement, Horizon, Barbican, and Cinder
services. When used in conjunction with enabling TLS for service API
endpoints, network communcation will be encrypted end to end, from client

View File

@ -1,8 +1,8 @@
---
features:
- |
Delegate executing ansible uri REST methods to service containers using
kolla_toolbox. This will enable any certificates that are already copied
and extracted into the service container to be automatically validated.
This is particularly useful in the case that the certificate is either
self-signed or signed by a local (private) CA.
Delegates execution of the Ansible ``uri`` module to service containers
using ``kolla_toolbox``. This will enable any certificates that are already
copied and extracted into the service container to be automatically
validated. This is particularly useful in the case that the certificate is
either self-signed or signed by a local (private) CA.

View File

@ -1,8 +1,8 @@
---
upgrade:
- |
Default behavior for generating cinder.conf template has changed,
now cinder.conf with rbd-1 section will be generated when external Ceph
functionality is used i.e. cinder_backend_ceph is set to true.
Previously it was only included when Kolla-Ansible internal
Ceph deployment mechanism was used.
The default behavior for generating the ``cinder.conf`` template has
changed. An ``rbd-1`` section will be generated when external Ceph
functionality is used, i.e. ``cinder_backend_ceph`` is set to ``true``.
Previously it was only included when Kolla Ansible internal Ceph
deployment mechanism was used.

View File

@ -1,12 +1,12 @@
---
features:
- |
Introduce External Ceph user ids as variables to allow non-standard ceph
authentication ids in OpenStack services configuration without the need to
Introduce External Ceph user IDs as variables to allow non-standard Ceph
authentication IDs in OpenStack service configuration without the need to
override configuration files.
upgrade:
- |
Now the rbd part of ``nova.conf`` in ``nova-compute`` is being generated
when ``nova_backend`` is set to ``"rbd"`` (previously it was generated when
both ``enable_ceph`` was ``"yes"`` and ``nova_backend`` was set to
``"rbd"``).
The ``rbd`` section of ``nova.conf`` for ``nova-compute`` is now generated
when ``nova_backend`` is set to ``"rbd"``. Previously it was only generated
when both ``enable_ceph`` was ``"yes"`` and ``nova_backend`` was set to
``"rbd"``.

View File

@ -1,5 +1,5 @@
---
features:
- |
Adds ``--clean`` argument to ``kolla-mergepwd``. It allows to clean old
(not used anymore) keys from the passwords file.
Adds a ``--clean`` argument to ``kolla-mergepwd``. It allows to clean old
(no longer used) keys from the passwords file.

View File

@ -1,8 +1,15 @@
---
fixes:
- |
The kolla_logs Docker volume is now mounted into the Elasticsearch
The ``kolla_logs`` Docker volume is now mounted into the Elasticsearch
container to expose logs which were previously written erroneously
to the container filesystem (bug 1859162). It is up to the user to
to the container filesystem. `LP#1859162
<https://bugs.launchpad.net/kolla-ansible/+bug/1859162>`__
upgrade:
- |
The ``kolla_logs`` Docker volume is now mounted into the Elasticsearch
container to expose logs which were previously written erroneously
to the container filesystem. It is up to the user to
migrate any existing logs if they so desire and this should be
done before applying this fix.
done before applying this fix. `LP#1859162
<https://bugs.launchpad.net/kolla-ansible/+bug/1859162>`__

View File

@ -1,7 +1,7 @@
---
fixes:
- |
Adapt Octavia to the latest dual CA certificate configuration. The
Adapts Octavia to the latest dual CA certificate configuration. The
following files should exist in ``/etc/kolla/config/octavia/``:
* ``client.cert-and-key.pem``

View File

@ -1,9 +1,10 @@
---
features:
- |
Generate self signed certificates for both the internal and external
(public) networks. If they are the same network, then the certificate
files will be the same.
Adds support for generating self-signed certificates for both the internal
and external (public) networks via the ``kolla-ansible certificates``
command. If they are the same network, then the certificate files will be
the same.
upgrade:
- |
The default value for ``kolla_external_fqdn_cacert`` has been changed

View File

@ -1,7 +1,7 @@
---
features:
- |
Added ``horizon_keystone_domain_choices`` hash. It can be used to set the
available domains to choose from on the horizon login page. This feature
was introduced in Pike release.
Please see `<https://docs.openstack.org/horizon/latest/configuration/settings.html#openstack-keystone-domain-choices>`__
Adds support for configuring the available domains to choose from on the
horizon login page via ``horizon_keystone_domain_choices`` hash. This
feature was introduced in Pike release. Please see
`<https://docs.openstack.org/horizon/latest/configuration/settings.html#openstack-keystone-domain-choices>`__

View File

@ -1,8 +1,8 @@
---
features:
- |
Implement OVN and its integration with Neutron. This includes deployment
of:
Adds support for deployment of OVN and integration of it with Neutron. This
includes deployment of:
* OVN databases (``ovn-sb-db`` and ``ovn-nb-db``)
* Southbound and Northbound databases connector (``ovn-northd``)

View File

@ -1,8 +1,8 @@
---
features:
- |
Add support for managing Ceilometer dynamic pollster configuration in
Kolla-ansible. This feature will look for configurations in
Adds support for managing Ceilometer dynamic pollster configuration in
Kolla Ansible. This feature will look for configurations in
``{{ node_custom_config }}/ceilometer/pollster.d/`` by default.
If there are configs there, they are copied to the control nodes,
to configure Ceilometer dynamic pollster sub-system.

View File

@ -1,5 +1,6 @@
---
features:
- |
Introduce new configuration variable `mariadb_wsrep_extra_provider_options`
allowing users to set additional WSREP options.
Introduces a new configuration variable
``mariadb_wsrep_extra_provider_options`` allowing users to set additional
WSREP options.

View File

@ -3,5 +3,5 @@ upgrade:
- |
Support for deploying Ceph has been removed, after it was deprecated in
Stein. Please use an external tool to deploy Ceph and integrate it with
Kolla-Ansible deployed OpenStack by following the `external Ceph guide
Kolla Ansible deployed OpenStack by following the `external Ceph guide
<https://docs.openstack.org/kolla-ansible/latest/reference/storage/external-ceph-guide.html>`__.

View File

@ -2,8 +2,9 @@
upgrade:
- |
Neutron Linux bridge and Open vSwitch Agents config has been split out into
linuxbridge_agent.ini and openvswitch_agent.ini respectively.
Please move your custom service config from ml2_conf.ini into those files.
``linuxbridge_agent.ini`` and ``openvswitch_agent.ini`` respectively.
Please move your custom service config from ``ml2_conf.ini`` into those
files.
deprecations:
- |
Customizing Neutron Linux bridge and Open vSwitch Agents config via
@ -11,4 +12,4 @@ deprecations:
agents into ``linuxbridge_agent.ini`` and ``openvswitch_agent.ini``
respectively. In this release (Ussuri) custom service config
``ml2_conf.ini`` overrides will still be used when merging configs - but
but that functionality will be removed in V release.
but that functionality will be removed in the Victoria release.