openstack/openstack-ansible
Code Issues Proposed changes

Fix role SHA's for Newton-2 release

Browse Source 
Change-Id: Ifc614c23a03b216c63891abc2821d6fefe4bcf52
This commit is contained in:
Jesse Pretorius 2016-07-27 10:30:21 +01:00 committed by Jesse Pretorius (odyssey4me)
parent 258f63dc41
commit dcfdc9321e
79 changed files with 589 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
ansible-role-requirements.yml
View File

@ -1,124 +1,124 @@
- name: apt_package_pinning
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning
version: master
version: adf63d9b9eff8dd329015a6386c6ec139e42dc6c
- name: pip_install
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-pip_install
version: master
version: 6742c05efbd6766787f9dfec4299bb57a63d42b3
- name: galera_client
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-galera_client
version: master
version: c6b7724c00845c0ce613778606721c8a17080394
- name: galera_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-galera_server
version: master
version: 727189ff0c50299f25bb50e1ddc00eaa425a4fb0
- name: keepalived
scm: git
src: https://github.com/evrardjp/ansible-keepalived
version: master
version: 2.0.0
- name: lxc_container_create
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create
version: master
version: 256785f3ffb3bcddf59df09e7b92e740592adb18
- name: lxc_hosts
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts
version: master
version: 6cbe56a090202fa37c227dee0e2ae3b3d2d6ecc9
- name: memcached_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-memcached_server
version: master
version: db40d5997b09d12d5d451aeb2bc6ffa2758c79c6
- name: openstack-ansible-security
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-security
version: master
version: 5e70944bef90959fee4c9f567c800142730c3a71
- name: openstack_hosts
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts
version: master
version: 9fd7640c1ddad9c4d11e8171ec1f5d3113eb8073
- name: os_keystone
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_keystone
version: master
version: 418ebd6e4bdb219ec1863ed8f5987059d9337a70
- name: openstack_openrc
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc
version: master
version: a29f45fa5a764004d008d2fee8723bc8a146ae96
- name: os_aodh
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_aodh
version: master
version: 3b127dad09aa20ce77b7310f3011a8f0dde86569
- name: os_ceilometer
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_ceilometer
version: master
version: 1a462379024574c2db1fa753fffcaf8525787218
- name: os_cinder
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_cinder
version: master
version: 856dea7bb205576735b75b9982c6f3098b8885cb
- name: os_glance
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_glance
version: master
version: 39ee391e9dd7870d8cedea06e80374bfc89adb9c
- name: os_gnocchi
src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi
scm: git
version: master
src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi
version: bc763b4279031dbf26f0774bfee2e5e6101876f4
- name: os_heat
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_heat
version: master
version: 4a4fe13577b9061c67dec3b2538bd04b9d872490
- name: os_horizon
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_horizon
version: master
version: 6020a7f2a410bbc326cc1690d6ba3f90301ddcf7
- name: os_ironic
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_ironic
version: master
version: 3f96ca867d06f2793e57cff5c3ac940bfa108191
- name: os_neutron
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_neutron
version: master
version: da1a5e466198d93f5af10f1c5e0017605cdec5d2
- name: os_nova
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_nova
version: master
version: 64e6772c0899bd38dd8040e5828480df49120e88
- name: os_swift
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_swift
version: master
version: d568b871833e9a81a1612ad9cc071ca504fad79c
- name: os_tempest
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-os_tempest
version: master
version: ff0f1efbaeb06e5ad7c8a23c45ce7de2d3c32716
- name: plugins
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-plugins
version: master
version: c7b7169c7926347a7d0afb27ca3e1e3d6088dbb6
- name: rabbitmq_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server
version: master
version: 5260d32484ba0aef9d3acb87475913d180de5ac0
- name: repo_build
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-repo_build
version: master
version: 557dee1c410033fcd39c44bb2642c6ef7d760ad6
- name: repo_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-repo_server
version: master
version: 1aa63aa7f4a90777f5bf2007e43a7b28cb069542
- name: rsyslog_client
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_client
version: master
version: 05ddc8e6fce7259c02df2e6d3a5e5d5edc2e9331
- name: rsyslog_server
scm: git
src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_server
version: master
version: c56338a664fc8300d6db4805bb83172cab04d2d9
- name: sshd
scm: git
src: https://github.com/willshersystems/ansible-sshd
version: master
version: 0.4.4

8
releasenotes/notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- The option ``openstack_domain`` has been added to the
**openstack_hosts** role. This option is used to setup
proper hostname entries for all hosts within a given
OpenStack deployment.
- The **openstack_hosts** role will setup an RFC1034/5
hostname and create an alias for all hosts in inventory.

7
releasenotes/notes/add-gnocchi-integrations-40eef52bf255ab0b.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- |
Ceilometer can now use Gnocchi for storage. By default
this is disabled. To enable the service, set
``ceilometer_gnocchi_enabled: yes``. See the Gnocchi
role documentation for more details.

5
releasenotes/notes/add-horizon-ironic-dashboard-support-3eb5168d71e4dddd.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- The os_horizon role now has support for the horizon ironic-ui dashboard. The
dashboard may be enabled by setting ``horizon_enable_ironic_ui`` to ``True``
in ``/etc/openstack_deploy/user_variables.yml``.

8
releasenotes/notes/add-lxc-container-restart-option-8c7f5b20b9414ead.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- A new variable has been added to allow a deployer to control
the restart of containers via the handler. This new option is
``lxc_container_allow_restarts`` and has a default of ``yes``.
If a deployer wishes to disable the auto-restart functionality
they can set this value to ``no`` and automatic container
restarts that are not absolutely required will be disabled.

11
releasenotes/notes/add-nova-extensions-blacklist-8ed18f45aba6a7fb.yaml Normal file
View File

@ -0,0 +1,11 @@
---
features:
- |
Deployers can now blacklist certain Nova extensions
by providing a list of such extensions in
``horizon_nova_extensions_blacklist`` variable, for example:
.. code-block:: yaml
horizon_nova_extensions_blacklist:
- "SimpleTenantUsage"

4
releasenotes/notes/add-xenial-support-3dc3711e5b1bdc34.yaml Normal file
View File

@ -0,0 +1,4 @@
---
feature:
- Support has been added to deploy the nova services on Ubuntu 16.04
LTS.

3
releasenotes/notes/add-xenial-support-5c117335b7b7b407.yaml Normal file
View File

@ -0,0 +1,3 @@
---
feature:
- Support has been added to deploy Aodh services for Ubuntu 16.04 LTS.

3
releasenotes/notes/add-xenial-support-7c24aa813289aa40.yaml Normal file
View File

@ -0,0 +1,3 @@
---
feature:
- Support has been added to deploy the heat services for Ubuntu 16.04 LTS.

4
releasenotes/notes/add-xenial-support-e285a643a39f0438.yaml Normal file
View File

@ -0,0 +1,4 @@
---
feature:
- Support has been added to deploy the swift services on Ubuntu 16.04
LTS.

5
releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- The role previously did not restart the audit daemon after generating a
new rules file. The `bug <https://launchpad.net/bugs/1590916>`_ has been
fixed and the audit daemon will be restarted after any audit rule changes.

11
releasenotes/notes/base-container-overlayfs-ec7eeda2f5807e96.yaml Normal file
View File

@ -0,0 +1,11 @@
---
features:
- The container cache preparation process now allows ``overlayfs`` to be set
as the ``lxc_container_backing_store``. When this is set a base container
will be created using a name of the form
`<linux-distribution>`-`distribution-release>`-`<host-cpu-architecture>`.
The container will be stopped as it is not used for anything except to be
a backing store for all other containers which will be based on a snapshot
of the base container. The ``overlayfs`` backing store is not recommended
to be used for production unless the host kernel version is 3.18 or
higher.

3
releasenotes/notes/centos-7-support-d96233f41f63cfb8.yaml Normal file
View File

@ -0,0 +1,3 @@
---
features:
- The ``rsyslog_server`` role now has support for CentOS 7.

5
releasenotes/notes/change-default-collation-260d932780ef4553.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- The default database collation has changed from
`utf8_unicode_ci` to `utf8_general_ci`. Existing
databases and tables will need to be converted.

5
releasenotes/notes/compress-customization-a7d03162d837085f.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- The standard collectstatic and compression process in the os_horizon role
now happens after horizon customizations are installed, so that all static
resources will be collected and compressed.

7
releasenotes/notes/configurable_inventory_group-9f5b193221b7006d.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- The ``rabbitmq_server`` now supports a configurable inventory
host group. Deployers can override the ``rabbitmq_host_group`` variable
if they wish to use the role to create additional RabbitMQ clusters
on a custom host group.

10
releasenotes/notes/container-config-list-a98937ae0ff94cf0.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- The ``lxc-container-create`` role now consumes the variable
``lxc_container_config_list`` which should contain a list of the entries
which should be added to the LXC container config file when the container
is created. This feature is designed to be used in group_vars to ensure
that containers are fully prepared at the time they are created, thus
cutting down the number of times containers are restarted during
deployments and upgrades.

8
releasenotes/notes/container-create-commands-b3aa578309fa665b.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- The ``lxc-container-create`` role now consumes the variable
``lxc_container_commands`` which should contain any shell commands that
should be executed in a newly created container. This feature is designed
to be used in group_vars to ensure that containers are fully prepared
at the time they are created, thus cutting down the number of times
containers are restarted during deployments and upgrades.

7
releasenotes/notes/container-create-overlayfs-46f3c4c0ecacaadf.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- The container creation process now allows ``overlayfs`` to be set as the
``lxc_container_backing_store``. When this is set it will use a snapshot
of the base container to build the containers. The ``overlayfs``
backing store is not recommended to be used for production unless the host
kernel version is 3.18 or higher.

5
releasenotes/notes/deprecate-openstack-host-apt-packages-b4d7af53d55d980d.yaml Normal file
View File

@ -0,0 +1,5 @@
---
deprecations:
- The ``openstack_host_apt_packages`` variable has been deprecated.
``openstack_host_packages`` should be used instead to override
packages required to install on all OpenStack hosts.

13
releasenotes/notes/disable-graphical-interface-5db89cd1bef7e12d.yaml Normal file
View File

@ -0,0 +1,13 @@
---
features:
- |
The security role now has tasks that will disable the graphical interface
on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and
CentOS 7). These changes take effect after a reboot.
Deployers that need a graphical interface will need to set the following
Ansible variable:
.. code-block:: yaml
security_disable_x_windows: no

12
releasenotes/notes/dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml Normal file
View File

@ -0,0 +1,12 @@
---
features:
- The ``os_neutron`` role now determines the default configuration for
openvswitch-agent ``tunnel_types`` and the presence or absence of
``local_ip`` configuration based on the value of
``neutron_ml2_drivers_type``. Deployers may directly control this
configuration by overriding the ``neutron_tunnel_types`` variable .
- The ``os_neutron`` role now configures neutron ml2 to load the
``l2_population`` mechanism driver by default based on the value of
``neutron_l2_population``. Deployers may directly control the neutron ml2
mechanism drivers list by overriding the ``mechanisms`` variable in the
``neutron_plugins`` dictionary.

7
releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml Normal file
View File

@ -0,0 +1,7 @@
---
fixes:
- |
When the security role was run in Ansible's check mode and a tag was
provided, the ``check_mode`` variable was not being set. Any tasks which
depend on that variable would fail. This `bug is fixed <https://bugs.launchpad.net/openstack-ansible/+bug/1590086>`_
and the ``check_mode`` variable is now set properly on every playbook run.

9
releasenotes/notes/force-dep-order-2c529683509e45da.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- The ``py_pkgs`` lookup plugin now has strict ordering for requirement files
discovered. These files are used to add additional requirements to the
python packages discovered. The order is defined by the constant,
``REQUIREMENTS_FILE_TYPES`` which contains the following entries,
'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt',
'global-requirements.txt', 'global-requirement-pins.txt'. The items in this
list are arranged from least to most priority.

6
releasenotes/notes/git-cache-df0afe90d4029f68.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- The repo build process is now able to make use of a pre-staged git cache.
If the ``/var/www/repo/openstackgit`` folder on the repo server is found
to contain existing git clones then they will be updated if they do not
already contain the required SHA for the build.

6
releasenotes/notes/horizon-arbitrary-config-8a36e4bd6818afe1.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- Horizon now has the ability to set arbitrary configuration options using
global option ``horizon_config_overrides`` in YAML format. The overrides
follow the same pattern found within the other OpenStack service
overrides. `General documentation on overrides can be found here <http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-openstack.html#overriding-openstack-configuration-defaults>`_.

6
releasenotes/notes/horizon_custom_themes-4ee1fd9444b8a5ae.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- The ``os_horizon`` role now supports configuration of custom themes.
Deployers can use the new ``horizon_custom_themes`` and
``horizon_default_theme`` variables to configure the dashboard with
custom themes and default to a specific theme respectively.

12
releasenotes/notes/implemented-v38524-b357edec95128307.yaml Normal file
View File

@ -0,0 +1,12 @@
---
features:
- |
A task was added that restricts ICMPv4 redirects to meet the requirements
of V-38524 in the STIG. This configuration is disabled by default since
it could cause issues with LXC in some environments.
Deployers can enable this configuration by setting an Ansible variable:
.. code-block:: yaml
security_disable_icmpv4_redirects: yes

5
releasenotes/notes/improved-audit-rule-keys-9fa85f758386446c.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- The audit rules added by the security role now have key fields that make
it easier to link the audit log entry to the audit rule that caused it to
appear.

8
releasenotes/notes/install-local-019edab04ffc8347.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- pip can be installed via the deployment host using the
new variable ``pip_offline_install``. This can be useful
in environments where the containers lack internet
connectivity. Please refer to the `limited connectivity installation guide
<http://docs.openstack.org/developer/openstack-ansible/install-guide/app-no-internet-connectivity.html#install-pip-through-deployment-host>`_
for more information.

3
releasenotes/notes/ironic-1604-support-b9ebb12ee4d78275.yaml Normal file
View File

@ -0,0 +1,3 @@
---
features:
- The ``ironic`` role now supports Ubuntu 16.04 and SystemD.

5
releasenotes/notes/lbaasv2-service-provider-config-57d394bdc64f632e.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- The LBaaSv2 service provider configuration can now be adjusted with the
``neutron_lbaasv2_service_provider`` variable. This allows a deployer to
choose to deploy LBaaSv2 with Octavia in a future version.

5
releasenotes/notes/live-migration-default-set-to-ssh-6add1dbdeea43509.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Adding a new nova.conf entry, live_migration_uri. This entry will default
to a ``qemu-ssh://`` uri, which uses the ssh keys that have already been
distributed between all of the compute hosts.

2
releasenotes/notes/memcached_server-add-nofile-setting-504e0c50e10a4ea6.yaml
View File

@ -1,7 +1,7 @@
---
features:
- The openstack-ansible-memcached_server role includes
a new override,`memcached_connections` which is
a new override, ``memcached_connections`` which is
automatically calculated from the number of memcached
connection limit plus additional 1k to configure
the OS nofile limit. Without proper nofile limit

10
releasenotes/notes/metadata-proxy-cleanup-eed6ff482035dc83.yaml Normal file
View File

@ -0,0 +1,10 @@
---
fixes:
- When upgrading it is possible for an old ``neutron-ns-metadata-proxy``
process to remain running in memory. If this happens the old version of
the process can cause unexpected issues in a production environment. To
fix this a task has been added to the os_neutron role that will execute
a process lookup and kill any ``neutron-ns-metadata-proxy`` processes that
are not running the current release tag. Once the old processes are
removed the metadata agent running will respawn everything needed within
60 seconds.

10
releasenotes/notes/mitaka-deprecations-72bec69c1395261d.yaml Normal file
View File

@ -0,0 +1,10 @@
---
other:
- |
``nova_libvirt_live_migration_flag`` is now phased out.
Please create a nova configuration override with
``live_migration_tunnelled: True`` if you want to force the flag
``VIR_MIGRATE_TUNNELLED`` to libvirt. Nova "chooses a sensible
default" otherwise.
- |
``nova_compute_manager`` is now phased out.

18
releasenotes/notes/neutron-ovs-powervm-116662f169e17175.yaml Normal file
View File

@ -0,0 +1,18 @@
---
features:
- |
The ``os_neutron`` role will now default to the OVS firewall driver when
``neutron_plugin_type`` is ``ml2.ovs`` and the host is running Ubuntu
16.04 on PowerVM. To override this default behavior, deployers should
define ``neutron_ml2_conf_ini_overrides`` and
'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example
below
::
neutron_ml2_conf_ini_overrides:
securitygroup:
firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
neutron_openvswitch_agent_ini_overrides:
securitygroup:
firewall_driver: iptables_hybrid

11
releasenotes/notes/neutron_ovs_dvr-7fca77cac0545441.yaml Normal file
View File

@ -0,0 +1,11 @@
---
features:
- |
Support for Neutron distributed virtual routing has been added to the
``os_neutron`` role. This includes the implementation of Networking
Guide's suggested agent configuration. This feature may be activated
by setting ``neutron_plugin_type: ml2.ovs.dvr`` in ``/etc/openstack_deploy/user_variables.yml``.
upgrade:
- The variable ``neutron_agent_mode`` has been removed from the
``os_neutron`` role. The appropriate value for ``l3_agent.ini`` is now
determined based on the ``neutron_plugin_type`` and host group membership.

12
releasenotes/notes/nova-largecluster-key-inserts-afc8cac63af41087.yaml Normal file
View File

@ -0,0 +1,12 @@
---
features:
- The nova SSH public key distribution has been made a lot faster
especially when deploying against very large clusters. To support
larger clusters the role has moved away from the "authorized_key"
module and is now generating a script to insert keys that may
be missing from the authorized keys file. The script is saved on all
nova compute nodes and can be found at
``/usr/local/bin/openstack-nova-key.sh``. If ever there is a need to
reinsert keys or fix issues on a given compute node the script can be
executed at any time without directly running the ansible playbooks
or roles.

5
releasenotes/notes/nova-powervm-b4eddae30abbd08e.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- The os_nova role can now detect and support basic deployment of a PowerVM environment.
This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink
package and nova-powervm driver.

10
releasenotes/notes/nova-uca-support-409b2e6afbce47b1.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- Nova UCA repository support is implemented by default.
This will allow the users to benefit from the updated
packages for KVM.
The ``nova_uca_enable`` variable controls the install
source for the KVM packages. By default this value is set
to ``True`` to make use of UCA repository. User can set to
``False`` to disable.

6
releasenotes/notes/os-glance-only-install-venv-0271d3238c0d561c.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Installation of glance and its dependent pip packages will now only
occur within a Python virtual environment. The ``glance_venv_bin``,
``glance_venv_enabled``, ``glance_venv_etc_dir``, and
``glance_non_venv_etc_dir`` variables have been removed.

6
releasenotes/notes/os-gnocchi-only-install-venv-4e532f44fcf5cda5.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Installation of glance and its dependent pip packages will now only
occur within a Python virtual environment. The ``gnocchi_venv_bin``,
``gnocchi_venv_enabled``, ``gnocchi_venv_etc_dir``, and
``gnocchi_non_venv_etc_dir`` variables have been removed.

5
releasenotes/notes/os-heat-only-install-venv-e3e8e466dd67c2bc.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of heat and its dependent pip packages will now only
occur within a Python virtual environment. The ``heat_venv_bin``
and ``heat_venv_enabled`` variables have been removed.

5
releasenotes/notes/os-horizon-apache-log-format-support-34c9ef74b3bcce31.yaml Normal file
View File

@ -0,0 +1,5 @@
---
features:
- Added ``horizon_apache_custom_log_format`` tunable
to the os-horizon role for changing CustomLog format.
Default is "combined".

6
releasenotes/notes/os-horizon-only-install-venv-0fd3292d2b61e840.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Installation of horizon and its dependent pip packages will now only
occur within a Python virtual environment. The ``horizon_venv_bin``,
``horizon_venv_enabled``, ``horizon_venv_lib_dir``, and
``horizon_non_venv_lib_dir`` variables have been removed.

5
releasenotes/notes/os-ironic-only-install-venv-0da32fc36bfeae2b.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of ironic and its dependent pip packages will now only
occur within a Python virtual environment. The ``ironic_venv_bin``
and ``ironic_venv_enabled`` variables have been removed.

17
releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml Normal file
View File

@ -0,0 +1,17 @@
---
security:
- |
The admin_token_auth middleware presents a potential
security risk and will be removed in a future release
of keystone. Its use can be removed by setting the
``keystone_keystone_paste_ini_overrides`` variable.
::
keystone_keystone_paste_ini_overrides:
pipeline:public_api:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service
pipeline:admin_api:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service
pipeline:api_v3:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3

4
releasenotes/notes/os-keystone-apache-log-format-support-7232177f835222ee.yaml Normal file
View File

@ -0,0 +1,4 @@
---
features:
- Added keystone_apache_custom_log_format tunable for
changing CustomLog format. Default is "combined".

5
releasenotes/notes/os-keystone-only-install-venv-b766568ee8d40354.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of keystone and its dependent pip packages will now only
occur within a Python virtual environment. The ``keystone_venv_enabled``
variable has been removed.

5
releasenotes/notes/os_aodh-only-install-venv-3c80a0a66824fcd7.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of aodh and its dependent pip packages will now only
occur within a Python virtual environment. The ``aodh_venv_enabled``
and ``aodh_venv_bin`` variables have been removed.

5
releasenotes/notes/os_ceilometer-only-install-venv-f3cd57b4a1d025c5.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of ceilometer and its dependent pip packages will now only
occur within a Python virtual environment. The ``ceilometer_venv_enabled``
and ``ceilometer_venv_bin`` variables have been removed.

3
releasenotes/notes/os_cinder-1604-support.yaml Normal file
View File

@ -0,0 +1,3 @@
---
features:
- The ``os_cinder`` role now supports Ubuntu 16.04.

5
releasenotes/notes/os_cinder-only-install-venv-914d5655dd645213.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of cinder and its dependent pip packages will now only
occur within a Python virtual environment. The ``cinder_venv_enabled``
and ``cinder_venv_bin`` variables have been removed.

6
releasenotes/notes/os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Installation of neutron and its dependent pip packages will now only
occur within a Python virtual environment. The ``neutron_venv_enabled``,
``neutron_venv_bin``, ``neutron_non_venv_lib_dir`` and
``neutron_venv_lib_dir`` variables have been removed.

5
releasenotes/notes/os_nova-install-venv-6c6c2ba28f67a891.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of nova and its dependent pip packages will now only
occur within a Python virtual environment. The ``nova_venv_enabled``,
``nova_venv_bin`` variables have been removed.

5
releasenotes/notes/os_swift-only-install-venv-fdd5d41759433cf8.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- Installation of swift and its dependent pip packages will now only
occur within a Python virtual environment. The ``swift_venv_enabled``,
``swift_venv_bin`` variables have been removed.

10
releasenotes/notes/pip-source-store-d94ff2b68a99481a.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- The repo build process now has the ability to store the pip
sources within the build archive. This ability is useful when
deploying environments that are "multi-architecture",
"multi-distro", or "multi-interpreter" where specific pre-build
wheels may not be enough to support all of the deployment.
To enable the ability to store the python source code within a
given release, set the new option ``repo_build_store_pip_sources``
to ``true``.

6
releasenotes/notes/pkg-cacher-cfeae8fb990904a4.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- The repo server now has a Package Cache service for distribution packages. To leverage
the cache, deployers will need to configure the package manager on all hosts to use the
cache as a proxy. If a deployer would prefer to disable this service, the variable
``repo_pkg_cache_enabled`` should be set to ``false``.

8
releasenotes/notes/remove-lbaasv1-26044c48b5d3b508.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- The LBaaSv2 device driver is now set by the Ansible variable
``neutron_lbaasv2_device_driver``. The default is set to use the
``HaproxyNSDriver``, which allows for agent-based load balancers.
upgrade:
- LBaaSv1 has been removed from the ``neutron-lbaas`` project in the Newton
release and it has been removed from OpenStack-Ansible as well.

13
releasenotes/notes/removed-neutron-ha-tool-dd7a4717e03163f9.yaml Normal file
View File

@ -0,0 +1,13 @@
---
deprecations:
- The Neutron HA tool written by AT&T has been deprecated and will be
removed in the Ocata release.
upgrade:
- The Neutron HA tool written by AT&T is no longer enabled by default.
This tool was providing HA capabilities for networks and routers
that were not using the native Neutron L3HA. Because native Neutron
L3HA is stable, compatible with the Linux Bridge Agent, and is
a better means of enabling HA within a deployment this tool is no
longer being setup by default. If legacy L3HA is needed within a
deployment the deployer can set `neutron_legacy_ha_tool_enabled` to
**true** to enable the legacy tooling.

5
releasenotes/notes/rename-pip-packages-tmp-f40dc7599684466a.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- The ``pip_packages_tmp`` variable has been renamed
``pip_tmp_packages`` to avoid unintended processing
by the py_pkgs lookup plugin.

5
releasenotes/notes/repo-build-deprecate-repo-build-apt-packages-df1ca334b857787a.yaml Normal file
View File

@ -0,0 +1,5 @@
---
deprecations:
- The ``repo_build_apt_packages`` variable has been deprecated.
``repo_build_packages`` should be used instead to override
packages required to build Python wheels and venvs.

5
releasenotes/notes/repo-build-fix-upper-constraints-9e24c56520538df2.yaml Normal file
View File

@ -0,0 +1,5 @@
---
fixes:
- The ``repo_build`` role now correctly applies OpenStack requirements
upper-constraints when building Python wheels. This resolves
https://bugs.launchpad.net/openstack-ansible/+bug/1605846

4
releasenotes/notes/repo-build-use-uca-by-default-bde8ded7d72cd42c.yaml Normal file
View File

@ -0,0 +1,4 @@
---
upgrade:
- The ``repo_build`` role now makes use of Ubuntu Cloud Archive by default.
This can be disabled by setting ``repo_build_uca_enable`` to ``False``.

7
releasenotes/notes/rhel-gpg-check-0b483a824314d1b3.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- |
The GPG key checks for package verification in V-38476 are now working for
Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look
for GPG keys from Red Hat and any other GPG keys, such as ones imported
from the EPEL repository, are skipped.

4
releasenotes/notes/rsyslog-client-centos7-support-bf5dd55ef6488a20.yaml Normal file
View File

@ -0,0 +1,4 @@
---
features:
- CentOS7 support has been added to the ``rsyslog_client``
role.

6
releasenotes/notes/rsyslog-client-logrotate-options-02dde942779493bb.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- The options of application logrotate configuration files are now configurable.
``rsyslog_client_log_rotate_options`` can be used to provide a list of directives, and
``rsyslog_client_log_rotate_scripts`` can be used to provide a list of postrotate, prerotate,
firstaction, or lastaction scripts.

8
releasenotes/notes/selective-venv-build-dd9f0e40cd1cc076.yaml Normal file
View File

@ -0,0 +1,8 @@
---
features:
- The repo build process now selectively builds venvs based on
whether each OpenStack service group has any hosts in it. If
there are no hosts in the group, the venv will not be built.
This behaviour can be optionally changed to force all venvs
to be built by setting ``repo_build_venv_selective`` to
``yes``.

3
releasenotes/notes/support-ubuntu-xenial-958e8128ed6578cd.yaml Normal file
View File

@ -0,0 +1,3 @@
---
feature:
- Support has been added to deploy Ceilometer services for Ubuntu 16.04 LTS.

9
releasenotes/notes/swift-conf-b8dd5e1199f8e4a8.yaml Normal file
View File

@ -0,0 +1,9 @@
---
fixes:
- Previously, the ``ansible_managed`` var was being
used to insert a header into the ``swift.conf`` that
contained date/time information. This meant that
swift.conf across different nodes did not have the
same MD5SUM, causing ``swift-recon --md5`` to break.
We now insert a piece of static text instead to
resolve this issue.

11
releasenotes/notes/swift-fs-file-limits-a57ab8b4c3c944e4.yaml Normal file
View File

@ -0,0 +1,11 @@
---
features:
- The ``os_swift`` role has 3 new variables that will allow a
deployer to change the hard, soft and fs.file-max limits. the
hard and soft limits are being added to the limits.conf file for
the swift system user. The fs.file-max settings are added to
storage hosts via kernel tuning. The new options are
``swift_hard_open_file_limits`` with a default of 10240
``swift_soft_open_file_limits`` with a default of 4096
``swift_max_file_limits`` with a default of 24 times the value
of ``swift_hard_open_file_limits``.

17
releasenotes/notes/swift-pretend-mph-passed-7e5c15eeb35861c3.yaml Normal file
View File

@ -0,0 +1,17 @@
---
features:
- The ``pretend_min_part_hours_passed`` option can now be
passed to swift-ring-builder prior to performing a
rebalance. This is set by the
``swift_pretend_min_part_hours_passed`` boolean variable.
The default for this variable is False. We recommend setting
this by running the os-swift.yml playbook with
``-e swift_pretend_min_part_hours_passed=True``, to avoid
resetting ``min_part_hours`` unintentionally on every run.
Setting ``swift_pretend_min_part_hours_passed`` to True will
reset the clock on the last time a rebalance happened, thus
circumventing the min_part_hours check. This should only be
used with extreme caution. If you run this command and deploy
rebalanced rings before a replication pass completes, you may
introduce unavailability in your cluster. This has an end-user
imapct.

4
releasenotes/notes/ubuntu-ppc64le-cab45e63dca77017.yaml Normal file
View File

@ -0,0 +1,4 @@
---
features:
- Support added to allow deploying on ppc64le architecture
using the Ubuntu distributions.

10
releasenotes/notes/update-aodh-integration-fd2a27e8864bd8ff.yaml Normal file
View File

@ -0,0 +1,10 @@
---
upgrade:
- Ceilometer no longer manages alarm storage when Aodh
is enabled. It now redirects alarm-related requests to
the Aodh API. This is now auto-enabled when Aodh is
deployed.
- Overrides for ceilometer ``aodh_connection_string``
will no longer work. Specifying an Aodh connection
string in Ceilometer was deprecated within Ceilometer
in a prior release so this option has been removed.

6
releasenotes/notes/upgrade-lxc-4750ba9aea7b5cd1.yaml Normal file
View File

@ -0,0 +1,6 @@
---
upgrade:
- Hosts running LXC on Ubuntu 14.04 will now need to enable
the "trusty-backports" repository. The backports repo on
Ubuntu 14.04 is now required to ensure LXC is updated to
the latest stable version.

14
releasenotes/notes/use-galera-storage-d1a51c051d2740ad.yaml Normal file
View File

@ -0,0 +1,14 @@
---
upgrade:
- The Aodh data migration script should be run to
migrate alarm data from MongoDB storage to Galera
due to the pending removal of MongoDB support.
fixes:
- Aodh has deprecated support for NoSQL storage (MongoDB
and Cassandra) in Mitaka with removal scheduled for
the O* release. This causes warnings in the logs. The
default of using MongoDB storage for Aodh is replaced
with the use of Galera. Continued use of MongoDB will
require the use of vars to specify a correct
``aodh_connection_string`` and add pymongo to the
``aodh_pip_packages`` list.

4
releasenotes/notes/use-uca-by-default-070751b0b388fcbe.yaml Normal file
View File

@ -0,0 +1,4 @@
---
upgrade:
- Neutron now makes use of Ubuntu Cloud Archive by default. This can be
disabled by setting ``neutron_uca_enable`` to ``False``.

12
releasenotes/notes/var-deprecations-417d87b9d386466a.yaml Normal file
View File

@ -0,0 +1,12 @@
---
deprecations:
- |
The following variables have been renamed in order to make the variable
names neutral for multiple operating systems.
* nova_apt_packages -> nova_packages
* nova_spice_apt_packages -> nova_spice_packages
* nova_novnc_apt_packages -> nova_novnc_packages
* nova_compute_kvm_apt_packages -> nova_compute_kvm_package
The old variable names will be removed in the Ocata cycle.