From dcfdc9321e380c3e869b8d469fa0f0b878e54066 Mon Sep 17 00:00:00 2001 From: Jesse Pretorius Date: Wed, 27 Jul 2016 10:30:21 +0100 Subject: [PATCH] Fix role SHA's for Newton-2 release Change-Id: Ifc614c23a03b216c63891abc2821d6fefe4bcf52 --- ansible-role-requirements.yml | 64 +++++++++---------- .../RFC1034-5_hostname-1ee18e06e8f57853.yaml | 8 +++ ...gnocchi-integrations-40eef52bf255ab0b.yaml | 7 ++ ...ic-dashboard-support-3eb5168d71e4dddd.yaml | 5 ++ ...ainer-restart-option-8c7f5b20b9414ead.yaml | 8 +++ ...extensions-blacklist-8ed18f45aba6a7fb.yaml | 11 ++++ .../add-xenial-support-3dc3711e5b1bdc34.yaml | 4 ++ .../add-xenial-support-5c117335b7b7b407.yaml | 3 + .../add-xenial-support-7c24aa813289aa40.yaml | 3 + .../add-xenial-support-e285a643a39f0438.yaml | 4 ++ .../augenrules-restart-39fe3e1e2de3eaba.yaml | 5 ++ ...-container-overlayfs-ec7eeda2f5807e96.yaml | 11 ++++ .../centos-7-support-d96233f41f63cfb8.yaml | 3 + ...ge-default-collation-260d932780ef4553.yaml | 5 ++ ...mpress-customization-a7d03162d837085f.yaml | 5 ++ ...able_inventory_group-9f5b193221b7006d.yaml | 7 ++ ...ontainer-config-list-a98937ae0ff94cf0.yaml | 10 +++ ...iner-create-commands-b3aa578309fa665b.yaml | 8 +++ ...ner-create-overlayfs-46f3c4c0ecacaadf.yaml | 7 ++ ...ck-host-apt-packages-b4d7af53d55d980d.yaml | 5 ++ ...-graphical-interface-5db89cd1bef7e12d.yaml | 13 ++++ ...dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml | 12 ++++ ...check-mode-with-tags-bf798856a27c53eb.yaml | 7 ++ .../force-dep-order-2c529683509e45da.yaml | 9 +++ .../notes/git-cache-df0afe90d4029f68.yaml | 6 ++ ...zon-arbitrary-config-8a36e4bd6818afe1.yaml | 6 ++ ...orizon_custom_themes-4ee1fd9444b8a5ae.yaml | 6 ++ .../implemented-v38524-b357edec95128307.yaml | 12 ++++ ...oved-audit-rule-keys-9fa85f758386446c.yaml | 5 ++ .../notes/install-local-019edab04ffc8347.yaml | 8 +++ .../ironic-1604-support-b9ebb12ee4d78275.yaml | 3 + ...vice-provider-config-57d394bdc64f632e.yaml | 5 ++ ...n-default-set-to-ssh-6add1dbdeea43509.yaml | 5 ++ ...r-add-nofile-setting-504e0c50e10a4ea6.yaml | 2 +- ...tadata-proxy-cleanup-eed6ff482035dc83.yaml | 10 +++ .../mitaka-deprecations-72bec69c1395261d.yaml | 10 +++ .../neutron-ovs-powervm-116662f169e17175.yaml | 18 ++++++ .../neutron_ovs_dvr-7fca77cac0545441.yaml | 11 ++++ ...ecluster-key-inserts-afc8cac63af41087.yaml | 12 ++++ .../notes/nova-powervm-b4eddae30abbd08e.yaml | 5 ++ .../nova-uca-support-409b2e6afbce47b1.yaml | 10 +++ ...ce-only-install-venv-0271d3238c0d561c.yaml | 6 ++ ...hi-only-install-venv-4e532f44fcf5cda5.yaml | 6 ++ ...at-only-install-venv-e3e8e466dd67c2bc.yaml | 5 ++ ...e-log-format-support-34c9ef74b3bcce31.yaml | 5 ++ ...on-only-install-venv-0fd3292d2b61e840.yaml | 6 ++ ...ic-only-install-venv-0da32fc36bfeae2b.yaml | 5 ++ ...ken-auth-deprecation-24e84a18f8a56814.yaml | 17 +++++ ...e-log-format-support-7232177f835222ee.yaml | 4 ++ ...ne-only-install-venv-b766568ee8d40354.yaml | 5 ++ ...dh-only-install-venv-3c80a0a66824fcd7.yaml | 5 ++ ...er-only-install-venv-f3cd57b4a1d025c5.yaml | 5 ++ .../notes/os_cinder-1604-support.yaml | 3 + ...er-only-install-venv-914d5655dd645213.yaml | 5 ++ ...on-only-install-venv-ca3bf63ed0507e4b.yaml | 6 ++ ...os_nova-install-venv-6c6c2ba28f67a891.yaml | 5 ++ ...ft-only-install-venv-fdd5d41759433cf8.yaml | 5 ++ .../pip-source-store-d94ff2b68a99481a.yaml | 10 +++ .../notes/pkg-cacher-cfeae8fb990904a4.yaml | 6 ++ .../remove-lbaasv1-26044c48b5d3b508.yaml | 8 +++ ...oved-neutron-ha-tool-dd7a4717e03163f9.yaml | 13 ++++ ...ame-pip-packages-tmp-f40dc7599684466a.yaml | 5 ++ ...o-build-apt-packages-df1ca334b857787a.yaml | 5 ++ ...ix-upper-constraints-9e24c56520538df2.yaml | 5 ++ ...d-use-uca-by-default-bde8ded7d72cd42c.yaml | 4 ++ .../rhel-gpg-check-0b483a824314d1b3.yaml | 7 ++ ...ient-centos7-support-bf5dd55ef6488a20.yaml | 4 ++ ...nt-logrotate-options-02dde942779493bb.yaml | 6 ++ ...selective-venv-build-dd9f0e40cd1cc076.yaml | 8 +++ ...upport-ubuntu-xenial-958e8128ed6578cd.yaml | 3 + .../notes/swift-conf-b8dd5e1199f8e4a8.yaml | 9 +++ ...swift-fs-file-limits-a57ab8b4c3c944e4.yaml | 11 ++++ ...t-pretend-mph-passed-7e5c15eeb35861c3.yaml | 17 +++++ .../ubuntu-ppc64le-cab45e63dca77017.yaml | 4 ++ ...ate-aodh-integration-fd2a27e8864bd8ff.yaml | 10 +++ .../notes/upgrade-lxc-4750ba9aea7b5cd1.yaml | 6 ++ .../use-galera-storage-d1a51c051d2740ad.yaml | 14 ++++ .../use-uca-by-default-070751b0b388fcbe.yaml | 4 ++ .../var-deprecations-417d87b9d386466a.yaml | 12 ++++ 79 files changed, 589 insertions(+), 33 deletions(-) create mode 100644 releasenotes/notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml create mode 100644 releasenotes/notes/add-gnocchi-integrations-40eef52bf255ab0b.yaml create mode 100644 releasenotes/notes/add-horizon-ironic-dashboard-support-3eb5168d71e4dddd.yaml create mode 100644 releasenotes/notes/add-lxc-container-restart-option-8c7f5b20b9414ead.yaml create mode 100644 releasenotes/notes/add-nova-extensions-blacklist-8ed18f45aba6a7fb.yaml create mode 100644 releasenotes/notes/add-xenial-support-3dc3711e5b1bdc34.yaml create mode 100644 releasenotes/notes/add-xenial-support-5c117335b7b7b407.yaml create mode 100644 releasenotes/notes/add-xenial-support-7c24aa813289aa40.yaml create mode 100644 releasenotes/notes/add-xenial-support-e285a643a39f0438.yaml create mode 100644 releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml create mode 100644 releasenotes/notes/base-container-overlayfs-ec7eeda2f5807e96.yaml create mode 100644 releasenotes/notes/centos-7-support-d96233f41f63cfb8.yaml create mode 100644 releasenotes/notes/change-default-collation-260d932780ef4553.yaml create mode 100644 releasenotes/notes/compress-customization-a7d03162d837085f.yaml create mode 100644 releasenotes/notes/configurable_inventory_group-9f5b193221b7006d.yaml create mode 100644 releasenotes/notes/container-config-list-a98937ae0ff94cf0.yaml create mode 100644 releasenotes/notes/container-create-commands-b3aa578309fa665b.yaml create mode 100644 releasenotes/notes/container-create-overlayfs-46f3c4c0ecacaadf.yaml create mode 100644 releasenotes/notes/deprecate-openstack-host-apt-packages-b4d7af53d55d980d.yaml create mode 100644 releasenotes/notes/disable-graphical-interface-5db89cd1bef7e12d.yaml create mode 100644 releasenotes/notes/dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml create mode 100644 releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml create mode 100644 releasenotes/notes/force-dep-order-2c529683509e45da.yaml create mode 100644 releasenotes/notes/git-cache-df0afe90d4029f68.yaml create mode 100644 releasenotes/notes/horizon-arbitrary-config-8a36e4bd6818afe1.yaml create mode 100644 releasenotes/notes/horizon_custom_themes-4ee1fd9444b8a5ae.yaml create mode 100644 releasenotes/notes/implemented-v38524-b357edec95128307.yaml create mode 100644 releasenotes/notes/improved-audit-rule-keys-9fa85f758386446c.yaml create mode 100644 releasenotes/notes/install-local-019edab04ffc8347.yaml create mode 100644 releasenotes/notes/ironic-1604-support-b9ebb12ee4d78275.yaml create mode 100644 releasenotes/notes/lbaasv2-service-provider-config-57d394bdc64f632e.yaml create mode 100644 releasenotes/notes/live-migration-default-set-to-ssh-6add1dbdeea43509.yaml create mode 100644 releasenotes/notes/metadata-proxy-cleanup-eed6ff482035dc83.yaml create mode 100644 releasenotes/notes/mitaka-deprecations-72bec69c1395261d.yaml create mode 100644 releasenotes/notes/neutron-ovs-powervm-116662f169e17175.yaml create mode 100644 releasenotes/notes/neutron_ovs_dvr-7fca77cac0545441.yaml create mode 100644 releasenotes/notes/nova-largecluster-key-inserts-afc8cac63af41087.yaml create mode 100644 releasenotes/notes/nova-powervm-b4eddae30abbd08e.yaml create mode 100644 releasenotes/notes/nova-uca-support-409b2e6afbce47b1.yaml create mode 100644 releasenotes/notes/os-glance-only-install-venv-0271d3238c0d561c.yaml create mode 100644 releasenotes/notes/os-gnocchi-only-install-venv-4e532f44fcf5cda5.yaml create mode 100644 releasenotes/notes/os-heat-only-install-venv-e3e8e466dd67c2bc.yaml create mode 100644 releasenotes/notes/os-horizon-apache-log-format-support-34c9ef74b3bcce31.yaml create mode 100644 releasenotes/notes/os-horizon-only-install-venv-0fd3292d2b61e840.yaml create mode 100644 releasenotes/notes/os-ironic-only-install-venv-0da32fc36bfeae2b.yaml create mode 100644 releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml create mode 100644 releasenotes/notes/os-keystone-apache-log-format-support-7232177f835222ee.yaml create mode 100644 releasenotes/notes/os-keystone-only-install-venv-b766568ee8d40354.yaml create mode 100644 releasenotes/notes/os_aodh-only-install-venv-3c80a0a66824fcd7.yaml create mode 100644 releasenotes/notes/os_ceilometer-only-install-venv-f3cd57b4a1d025c5.yaml create mode 100644 releasenotes/notes/os_cinder-1604-support.yaml create mode 100644 releasenotes/notes/os_cinder-only-install-venv-914d5655dd645213.yaml create mode 100644 releasenotes/notes/os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml create mode 100644 releasenotes/notes/os_nova-install-venv-6c6c2ba28f67a891.yaml create mode 100644 releasenotes/notes/os_swift-only-install-venv-fdd5d41759433cf8.yaml create mode 100644 releasenotes/notes/pip-source-store-d94ff2b68a99481a.yaml create mode 100644 releasenotes/notes/pkg-cacher-cfeae8fb990904a4.yaml create mode 100644 releasenotes/notes/remove-lbaasv1-26044c48b5d3b508.yaml create mode 100644 releasenotes/notes/removed-neutron-ha-tool-dd7a4717e03163f9.yaml create mode 100644 releasenotes/notes/rename-pip-packages-tmp-f40dc7599684466a.yaml create mode 100644 releasenotes/notes/repo-build-deprecate-repo-build-apt-packages-df1ca334b857787a.yaml create mode 100644 releasenotes/notes/repo-build-fix-upper-constraints-9e24c56520538df2.yaml create mode 100644 releasenotes/notes/repo-build-use-uca-by-default-bde8ded7d72cd42c.yaml create mode 100644 releasenotes/notes/rhel-gpg-check-0b483a824314d1b3.yaml create mode 100644 releasenotes/notes/rsyslog-client-centos7-support-bf5dd55ef6488a20.yaml create mode 100644 releasenotes/notes/rsyslog-client-logrotate-options-02dde942779493bb.yaml create mode 100644 releasenotes/notes/selective-venv-build-dd9f0e40cd1cc076.yaml create mode 100644 releasenotes/notes/support-ubuntu-xenial-958e8128ed6578cd.yaml create mode 100644 releasenotes/notes/swift-conf-b8dd5e1199f8e4a8.yaml create mode 100644 releasenotes/notes/swift-fs-file-limits-a57ab8b4c3c944e4.yaml create mode 100644 releasenotes/notes/swift-pretend-mph-passed-7e5c15eeb35861c3.yaml create mode 100644 releasenotes/notes/ubuntu-ppc64le-cab45e63dca77017.yaml create mode 100644 releasenotes/notes/update-aodh-integration-fd2a27e8864bd8ff.yaml create mode 100644 releasenotes/notes/upgrade-lxc-4750ba9aea7b5cd1.yaml create mode 100644 releasenotes/notes/use-galera-storage-d1a51c051d2740ad.yaml create mode 100644 releasenotes/notes/use-uca-by-default-070751b0b388fcbe.yaml create mode 100644 releasenotes/notes/var-deprecations-417d87b9d386466a.yaml diff --git a/ansible-role-requirements.yml b/ansible-role-requirements.yml index 0bfc30a408..24c0a88563 100644 --- a/ansible-role-requirements.yml +++ b/ansible-role-requirements.yml @@ -1,124 +1,124 @@ - name: apt_package_pinning scm: git src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning - version: master + version: adf63d9b9eff8dd329015a6386c6ec139e42dc6c - name: pip_install scm: git src: https://git.openstack.org/openstack/openstack-ansible-pip_install - version: master + version: 6742c05efbd6766787f9dfec4299bb57a63d42b3 - name: galera_client scm: git src: https://git.openstack.org/openstack/openstack-ansible-galera_client - version: master + version: c6b7724c00845c0ce613778606721c8a17080394 - name: galera_server scm: git src: https://git.openstack.org/openstack/openstack-ansible-galera_server - version: master + version: 727189ff0c50299f25bb50e1ddc00eaa425a4fb0 - name: keepalived scm: git src: https://github.com/evrardjp/ansible-keepalived - version: master + version: 2.0.0 - name: lxc_container_create scm: git src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create - version: master + version: 256785f3ffb3bcddf59df09e7b92e740592adb18 - name: lxc_hosts scm: git src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts - version: master + version: 6cbe56a090202fa37c227dee0e2ae3b3d2d6ecc9 - name: memcached_server scm: git src: https://git.openstack.org/openstack/openstack-ansible-memcached_server - version: master + version: db40d5997b09d12d5d451aeb2bc6ffa2758c79c6 - name: openstack-ansible-security scm: git src: https://git.openstack.org/openstack/openstack-ansible-security - version: master + version: 5e70944bef90959fee4c9f567c800142730c3a71 - name: openstack_hosts scm: git src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts - version: master + version: 9fd7640c1ddad9c4d11e8171ec1f5d3113eb8073 - name: os_keystone scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_keystone - version: master + version: 418ebd6e4bdb219ec1863ed8f5987059d9337a70 - name: openstack_openrc scm: git src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc - version: master + version: a29f45fa5a764004d008d2fee8723bc8a146ae96 - name: os_aodh scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_aodh - version: master + version: 3b127dad09aa20ce77b7310f3011a8f0dde86569 - name: os_ceilometer scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_ceilometer - version: master + version: 1a462379024574c2db1fa753fffcaf8525787218 - name: os_cinder scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_cinder - version: master + version: 856dea7bb205576735b75b9982c6f3098b8885cb - name: os_glance scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_glance - version: master + version: 39ee391e9dd7870d8cedea06e80374bfc89adb9c - name: os_gnocchi - src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi scm: git - version: master + src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi + version: bc763b4279031dbf26f0774bfee2e5e6101876f4 - name: os_heat scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_heat - version: master + version: 4a4fe13577b9061c67dec3b2538bd04b9d872490 - name: os_horizon scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_horizon - version: master + version: 6020a7f2a410bbc326cc1690d6ba3f90301ddcf7 - name: os_ironic scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_ironic - version: master + version: 3f96ca867d06f2793e57cff5c3ac940bfa108191 - name: os_neutron scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_neutron - version: master + version: da1a5e466198d93f5af10f1c5e0017605cdec5d2 - name: os_nova scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_nova - version: master + version: 64e6772c0899bd38dd8040e5828480df49120e88 - name: os_swift scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_swift - version: master + version: d568b871833e9a81a1612ad9cc071ca504fad79c - name: os_tempest scm: git src: https://git.openstack.org/openstack/openstack-ansible-os_tempest - version: master + version: ff0f1efbaeb06e5ad7c8a23c45ce7de2d3c32716 - name: plugins scm: git src: https://git.openstack.org/openstack/openstack-ansible-plugins - version: master + version: c7b7169c7926347a7d0afb27ca3e1e3d6088dbb6 - name: rabbitmq_server scm: git src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server - version: master + version: 5260d32484ba0aef9d3acb87475913d180de5ac0 - name: repo_build scm: git src: https://git.openstack.org/openstack/openstack-ansible-repo_build - version: master + version: 557dee1c410033fcd39c44bb2642c6ef7d760ad6 - name: repo_server scm: git src: https://git.openstack.org/openstack/openstack-ansible-repo_server - version: master + version: 1aa63aa7f4a90777f5bf2007e43a7b28cb069542 - name: rsyslog_client scm: git src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_client - version: master + version: 05ddc8e6fce7259c02df2e6d3a5e5d5edc2e9331 - name: rsyslog_server scm: git src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_server - version: master + version: c56338a664fc8300d6db4805bb83172cab04d2d9 - name: sshd scm: git src: https://github.com/willshersystems/ansible-sshd - version: master + version: 0.4.4 diff --git a/releasenotes/notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml b/releasenotes/notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml new file mode 100644 index 0000000000..c8e307749c --- /dev/null +++ b/releasenotes/notes/RFC1034-5_hostname-1ee18e06e8f57853.yaml @@ -0,0 +1,8 @@ +--- +features: + - The option ``openstack_domain`` has been added to the + **openstack_hosts** role. This option is used to setup + proper hostname entries for all hosts within a given + OpenStack deployment. + - The **openstack_hosts** role will setup an RFC1034/5 + hostname and create an alias for all hosts in inventory. diff --git a/releasenotes/notes/add-gnocchi-integrations-40eef52bf255ab0b.yaml b/releasenotes/notes/add-gnocchi-integrations-40eef52bf255ab0b.yaml new file mode 100644 index 0000000000..a194820c12 --- /dev/null +++ b/releasenotes/notes/add-gnocchi-integrations-40eef52bf255ab0b.yaml @@ -0,0 +1,7 @@ +--- +features: + - | + Ceilometer can now use Gnocchi for storage. By default + this is disabled. To enable the service, set + ``ceilometer_gnocchi_enabled: yes``. See the Gnocchi + role documentation for more details. diff --git a/releasenotes/notes/add-horizon-ironic-dashboard-support-3eb5168d71e4dddd.yaml b/releasenotes/notes/add-horizon-ironic-dashboard-support-3eb5168d71e4dddd.yaml new file mode 100644 index 0000000000..1e3d3c3542 --- /dev/null +++ b/releasenotes/notes/add-horizon-ironic-dashboard-support-3eb5168d71e4dddd.yaml @@ -0,0 +1,5 @@ +--- +features: + - The os_horizon role now has support for the horizon ironic-ui dashboard. The + dashboard may be enabled by setting ``horizon_enable_ironic_ui`` to ``True`` + in ``/etc/openstack_deploy/user_variables.yml``. diff --git a/releasenotes/notes/add-lxc-container-restart-option-8c7f5b20b9414ead.yaml b/releasenotes/notes/add-lxc-container-restart-option-8c7f5b20b9414ead.yaml new file mode 100644 index 0000000000..6b54fcb914 --- /dev/null +++ b/releasenotes/notes/add-lxc-container-restart-option-8c7f5b20b9414ead.yaml @@ -0,0 +1,8 @@ +--- +features: + - A new variable has been added to allow a deployer to control + the restart of containers via the handler. This new option is + ``lxc_container_allow_restarts`` and has a default of ``yes``. + If a deployer wishes to disable the auto-restart functionality + they can set this value to ``no`` and automatic container + restarts that are not absolutely required will be disabled. diff --git a/releasenotes/notes/add-nova-extensions-blacklist-8ed18f45aba6a7fb.yaml b/releasenotes/notes/add-nova-extensions-blacklist-8ed18f45aba6a7fb.yaml new file mode 100644 index 0000000000..59e7758fa0 --- /dev/null +++ b/releasenotes/notes/add-nova-extensions-blacklist-8ed18f45aba6a7fb.yaml @@ -0,0 +1,11 @@ +--- +features: + - | + Deployers can now blacklist certain Nova extensions + by providing a list of such extensions in + ``horizon_nova_extensions_blacklist`` variable, for example: + + .. code-block:: yaml + + horizon_nova_extensions_blacklist: + - "SimpleTenantUsage" diff --git a/releasenotes/notes/add-xenial-support-3dc3711e5b1bdc34.yaml b/releasenotes/notes/add-xenial-support-3dc3711e5b1bdc34.yaml new file mode 100644 index 0000000000..dac463c496 --- /dev/null +++ b/releasenotes/notes/add-xenial-support-3dc3711e5b1bdc34.yaml @@ -0,0 +1,4 @@ +--- +feature: + - Support has been added to deploy the nova services on Ubuntu 16.04 + LTS. diff --git a/releasenotes/notes/add-xenial-support-5c117335b7b7b407.yaml b/releasenotes/notes/add-xenial-support-5c117335b7b7b407.yaml new file mode 100644 index 0000000000..61c328715c --- /dev/null +++ b/releasenotes/notes/add-xenial-support-5c117335b7b7b407.yaml @@ -0,0 +1,3 @@ +--- +feature: + - Support has been added to deploy Aodh services for Ubuntu 16.04 LTS. diff --git a/releasenotes/notes/add-xenial-support-7c24aa813289aa40.yaml b/releasenotes/notes/add-xenial-support-7c24aa813289aa40.yaml new file mode 100644 index 0000000000..06462f8515 --- /dev/null +++ b/releasenotes/notes/add-xenial-support-7c24aa813289aa40.yaml @@ -0,0 +1,3 @@ +--- +feature: + - Support has been added to deploy the heat services for Ubuntu 16.04 LTS. diff --git a/releasenotes/notes/add-xenial-support-e285a643a39f0438.yaml b/releasenotes/notes/add-xenial-support-e285a643a39f0438.yaml new file mode 100644 index 0000000000..bda475caff --- /dev/null +++ b/releasenotes/notes/add-xenial-support-e285a643a39f0438.yaml @@ -0,0 +1,4 @@ +--- +feature: + - Support has been added to deploy the swift services on Ubuntu 16.04 + LTS. diff --git a/releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml b/releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml new file mode 100644 index 0000000000..45311efd49 --- /dev/null +++ b/releasenotes/notes/augenrules-restart-39fe3e1e2de3eaba.yaml @@ -0,0 +1,5 @@ +--- +fixes: + - The role previously did not restart the audit daemon after generating a + new rules file. The `bug `_ has been + fixed and the audit daemon will be restarted after any audit rule changes. diff --git a/releasenotes/notes/base-container-overlayfs-ec7eeda2f5807e96.yaml b/releasenotes/notes/base-container-overlayfs-ec7eeda2f5807e96.yaml new file mode 100644 index 0000000000..d677079568 --- /dev/null +++ b/releasenotes/notes/base-container-overlayfs-ec7eeda2f5807e96.yaml @@ -0,0 +1,11 @@ +--- +features: + - The container cache preparation process now allows ``overlayfs`` to be set + as the ``lxc_container_backing_store``. When this is set a base container + will be created using a name of the form + ``-`distribution-release>`-``. + The container will be stopped as it is not used for anything except to be + a backing store for all other containers which will be based on a snapshot + of the base container. The ``overlayfs`` backing store is not recommended + to be used for production unless the host kernel version is 3.18 or + higher. diff --git a/releasenotes/notes/centos-7-support-d96233f41f63cfb8.yaml b/releasenotes/notes/centos-7-support-d96233f41f63cfb8.yaml new file mode 100644 index 0000000000..3f371a8d48 --- /dev/null +++ b/releasenotes/notes/centos-7-support-d96233f41f63cfb8.yaml @@ -0,0 +1,3 @@ +--- +features: + - The ``rsyslog_server`` role now has support for CentOS 7. diff --git a/releasenotes/notes/change-default-collation-260d932780ef4553.yaml b/releasenotes/notes/change-default-collation-260d932780ef4553.yaml new file mode 100644 index 0000000000..088135c25a --- /dev/null +++ b/releasenotes/notes/change-default-collation-260d932780ef4553.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - The default database collation has changed from + `utf8_unicode_ci` to `utf8_general_ci`. Existing + databases and tables will need to be converted. diff --git a/releasenotes/notes/compress-customization-a7d03162d837085f.yaml b/releasenotes/notes/compress-customization-a7d03162d837085f.yaml new file mode 100644 index 0000000000..c0f9a97c09 --- /dev/null +++ b/releasenotes/notes/compress-customization-a7d03162d837085f.yaml @@ -0,0 +1,5 @@ +--- +fixes: + - The standard collectstatic and compression process in the os_horizon role + now happens after horizon customizations are installed, so that all static + resources will be collected and compressed. diff --git a/releasenotes/notes/configurable_inventory_group-9f5b193221b7006d.yaml b/releasenotes/notes/configurable_inventory_group-9f5b193221b7006d.yaml new file mode 100644 index 0000000000..c334b92a94 --- /dev/null +++ b/releasenotes/notes/configurable_inventory_group-9f5b193221b7006d.yaml @@ -0,0 +1,7 @@ +--- +features: + - The ``rabbitmq_server`` now supports a configurable inventory + host group. Deployers can override the ``rabbitmq_host_group`` variable + if they wish to use the role to create additional RabbitMQ clusters + on a custom host group. + diff --git a/releasenotes/notes/container-config-list-a98937ae0ff94cf0.yaml b/releasenotes/notes/container-config-list-a98937ae0ff94cf0.yaml new file mode 100644 index 0000000000..bef297b6c9 --- /dev/null +++ b/releasenotes/notes/container-config-list-a98937ae0ff94cf0.yaml @@ -0,0 +1,10 @@ +--- +features: + - The ``lxc-container-create`` role now consumes the variable + ``lxc_container_config_list`` which should contain a list of the entries + which should be added to the LXC container config file when the container + is created. This feature is designed to be used in group_vars to ensure + that containers are fully prepared at the time they are created, thus + cutting down the number of times containers are restarted during + deployments and upgrades. + diff --git a/releasenotes/notes/container-create-commands-b3aa578309fa665b.yaml b/releasenotes/notes/container-create-commands-b3aa578309fa665b.yaml new file mode 100644 index 0000000000..a4dbf92d3a --- /dev/null +++ b/releasenotes/notes/container-create-commands-b3aa578309fa665b.yaml @@ -0,0 +1,8 @@ +--- +features: + - The ``lxc-container-create`` role now consumes the variable + ``lxc_container_commands`` which should contain any shell commands that + should be executed in a newly created container. This feature is designed + to be used in group_vars to ensure that containers are fully prepared + at the time they are created, thus cutting down the number of times + containers are restarted during deployments and upgrades. diff --git a/releasenotes/notes/container-create-overlayfs-46f3c4c0ecacaadf.yaml b/releasenotes/notes/container-create-overlayfs-46f3c4c0ecacaadf.yaml new file mode 100644 index 0000000000..0e596fdc64 --- /dev/null +++ b/releasenotes/notes/container-create-overlayfs-46f3c4c0ecacaadf.yaml @@ -0,0 +1,7 @@ +--- +features: + - The container creation process now allows ``overlayfs`` to be set as the + ``lxc_container_backing_store``. When this is set it will use a snapshot + of the base container to build the containers. The ``overlayfs`` + backing store is not recommended to be used for production unless the host + kernel version is 3.18 or higher. diff --git a/releasenotes/notes/deprecate-openstack-host-apt-packages-b4d7af53d55d980d.yaml b/releasenotes/notes/deprecate-openstack-host-apt-packages-b4d7af53d55d980d.yaml new file mode 100644 index 0000000000..c1c1f1eb93 --- /dev/null +++ b/releasenotes/notes/deprecate-openstack-host-apt-packages-b4d7af53d55d980d.yaml @@ -0,0 +1,5 @@ +--- +deprecations: + - The ``openstack_host_apt_packages`` variable has been deprecated. + ``openstack_host_packages`` should be used instead to override + packages required to install on all OpenStack hosts. diff --git a/releasenotes/notes/disable-graphical-interface-5db89cd1bef7e12d.yaml b/releasenotes/notes/disable-graphical-interface-5db89cd1bef7e12d.yaml new file mode 100644 index 0000000000..879fc9c8cd --- /dev/null +++ b/releasenotes/notes/disable-graphical-interface-5db89cd1bef7e12d.yaml @@ -0,0 +1,13 @@ +--- +features: + - | + The security role now has tasks that will disable the graphical interface + on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and + CentOS 7). These changes take effect after a reboot. + + Deployers that need a graphical interface will need to set the following + Ansible variable: + + .. code-block:: yaml + + security_disable_x_windows: no diff --git a/releasenotes/notes/dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml b/releasenotes/notes/dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml new file mode 100644 index 0000000000..cc687316f1 --- /dev/null +++ b/releasenotes/notes/dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml @@ -0,0 +1,12 @@ +--- +features: + - The ``os_neutron`` role now determines the default configuration for + openvswitch-agent ``tunnel_types`` and the presence or absence of + ``local_ip`` configuration based on the value of + ``neutron_ml2_drivers_type``. Deployers may directly control this + configuration by overriding the ``neutron_tunnel_types`` variable . + - The ``os_neutron`` role now configures neutron ml2 to load the + ``l2_population`` mechanism driver by default based on the value of + ``neutron_l2_population``. Deployers may directly control the neutron ml2 + mechanism drivers list by overriding the ``mechanisms`` variable in the + ``neutron_plugins`` dictionary. diff --git a/releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml b/releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml new file mode 100644 index 0000000000..ee8e78d26c --- /dev/null +++ b/releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml @@ -0,0 +1,7 @@ +--- +fixes: + - | + When the security role was run in Ansible's check mode and a tag was + provided, the ``check_mode`` variable was not being set. Any tasks which + depend on that variable would fail. This `bug is fixed `_ + and the ``check_mode`` variable is now set properly on every playbook run. diff --git a/releasenotes/notes/force-dep-order-2c529683509e45da.yaml b/releasenotes/notes/force-dep-order-2c529683509e45da.yaml new file mode 100644 index 0000000000..9360ffd318 --- /dev/null +++ b/releasenotes/notes/force-dep-order-2c529683509e45da.yaml @@ -0,0 +1,9 @@ +--- +features: + - The ``py_pkgs`` lookup plugin now has strict ordering for requirement files + discovered. These files are used to add additional requirements to the + python packages discovered. The order is defined by the constant, + ``REQUIREMENTS_FILE_TYPES`` which contains the following entries, + 'test-requirements.txt', 'dev-requirements.txt', 'requirements.txt', + 'global-requirements.txt', 'global-requirement-pins.txt'. The items in this + list are arranged from least to most priority. diff --git a/releasenotes/notes/git-cache-df0afe90d4029f68.yaml b/releasenotes/notes/git-cache-df0afe90d4029f68.yaml new file mode 100644 index 0000000000..9defd139a6 --- /dev/null +++ b/releasenotes/notes/git-cache-df0afe90d4029f68.yaml @@ -0,0 +1,6 @@ +--- +features: + - The repo build process is now able to make use of a pre-staged git cache. + If the ``/var/www/repo/openstackgit`` folder on the repo server is found + to contain existing git clones then they will be updated if they do not + already contain the required SHA for the build. diff --git a/releasenotes/notes/horizon-arbitrary-config-8a36e4bd6818afe1.yaml b/releasenotes/notes/horizon-arbitrary-config-8a36e4bd6818afe1.yaml new file mode 100644 index 0000000000..66a8dccca5 --- /dev/null +++ b/releasenotes/notes/horizon-arbitrary-config-8a36e4bd6818afe1.yaml @@ -0,0 +1,6 @@ +--- +features: + - Horizon now has the ability to set arbitrary configuration options using + global option ``horizon_config_overrides`` in YAML format. The overrides + follow the same pattern found within the other OpenStack service + overrides. `General documentation on overrides can be found here `_. diff --git a/releasenotes/notes/horizon_custom_themes-4ee1fd9444b8a5ae.yaml b/releasenotes/notes/horizon_custom_themes-4ee1fd9444b8a5ae.yaml new file mode 100644 index 0000000000..35870124e6 --- /dev/null +++ b/releasenotes/notes/horizon_custom_themes-4ee1fd9444b8a5ae.yaml @@ -0,0 +1,6 @@ +--- +features: + - The ``os_horizon`` role now supports configuration of custom themes. + Deployers can use the new ``horizon_custom_themes`` and + ``horizon_default_theme`` variables to configure the dashboard with + custom themes and default to a specific theme respectively. diff --git a/releasenotes/notes/implemented-v38524-b357edec95128307.yaml b/releasenotes/notes/implemented-v38524-b357edec95128307.yaml new file mode 100644 index 0000000000..24ebec9f39 --- /dev/null +++ b/releasenotes/notes/implemented-v38524-b357edec95128307.yaml @@ -0,0 +1,12 @@ +--- +features: + - | + A task was added that restricts ICMPv4 redirects to meet the requirements + of V-38524 in the STIG. This configuration is disabled by default since + it could cause issues with LXC in some environments. + + Deployers can enable this configuration by setting an Ansible variable: + + .. code-block:: yaml + + security_disable_icmpv4_redirects: yes diff --git a/releasenotes/notes/improved-audit-rule-keys-9fa85f758386446c.yaml b/releasenotes/notes/improved-audit-rule-keys-9fa85f758386446c.yaml new file mode 100644 index 0000000000..497de35ac0 --- /dev/null +++ b/releasenotes/notes/improved-audit-rule-keys-9fa85f758386446c.yaml @@ -0,0 +1,5 @@ +--- +features: + - The audit rules added by the security role now have key fields that make + it easier to link the audit log entry to the audit rule that caused it to + appear. diff --git a/releasenotes/notes/install-local-019edab04ffc8347.yaml b/releasenotes/notes/install-local-019edab04ffc8347.yaml new file mode 100644 index 0000000000..614be990ca --- /dev/null +++ b/releasenotes/notes/install-local-019edab04ffc8347.yaml @@ -0,0 +1,8 @@ +--- +features: + - pip can be installed via the deployment host using the + new variable ``pip_offline_install``. This can be useful + in environments where the containers lack internet + connectivity. Please refer to the `limited connectivity installation guide + `_ + for more information. diff --git a/releasenotes/notes/ironic-1604-support-b9ebb12ee4d78275.yaml b/releasenotes/notes/ironic-1604-support-b9ebb12ee4d78275.yaml new file mode 100644 index 0000000000..8d05d57c13 --- /dev/null +++ b/releasenotes/notes/ironic-1604-support-b9ebb12ee4d78275.yaml @@ -0,0 +1,3 @@ +--- +features: + - The ``ironic`` role now supports Ubuntu 16.04 and SystemD. diff --git a/releasenotes/notes/lbaasv2-service-provider-config-57d394bdc64f632e.yaml b/releasenotes/notes/lbaasv2-service-provider-config-57d394bdc64f632e.yaml new file mode 100644 index 0000000000..e87be90b25 --- /dev/null +++ b/releasenotes/notes/lbaasv2-service-provider-config-57d394bdc64f632e.yaml @@ -0,0 +1,5 @@ +--- +features: + - The LBaaSv2 service provider configuration can now be adjusted with the + ``neutron_lbaasv2_service_provider`` variable. This allows a deployer to + choose to deploy LBaaSv2 with Octavia in a future version. diff --git a/releasenotes/notes/live-migration-default-set-to-ssh-6add1dbdeea43509.yaml b/releasenotes/notes/live-migration-default-set-to-ssh-6add1dbdeea43509.yaml new file mode 100644 index 0000000000..80969693cc --- /dev/null +++ b/releasenotes/notes/live-migration-default-set-to-ssh-6add1dbdeea43509.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Adding a new nova.conf entry, live_migration_uri. This entry will default + to a ``qemu-ssh://`` uri, which uses the ssh keys that have already been + distributed between all of the compute hosts. diff --git a/releasenotes/notes/memcached_server-add-nofile-setting-504e0c50e10a4ea6.yaml b/releasenotes/notes/memcached_server-add-nofile-setting-504e0c50e10a4ea6.yaml index daedb68ad9..3fbbd2a701 100644 --- a/releasenotes/notes/memcached_server-add-nofile-setting-504e0c50e10a4ea6.yaml +++ b/releasenotes/notes/memcached_server-add-nofile-setting-504e0c50e10a4ea6.yaml @@ -1,7 +1,7 @@ --- features: - The openstack-ansible-memcached_server role includes - a new override,`memcached_connections` which is + a new override, ``memcached_connections`` which is automatically calculated from the number of memcached connection limit plus additional 1k to configure the OS nofile limit. Without proper nofile limit diff --git a/releasenotes/notes/metadata-proxy-cleanup-eed6ff482035dc83.yaml b/releasenotes/notes/metadata-proxy-cleanup-eed6ff482035dc83.yaml new file mode 100644 index 0000000000..61a2570966 --- /dev/null +++ b/releasenotes/notes/metadata-proxy-cleanup-eed6ff482035dc83.yaml @@ -0,0 +1,10 @@ +--- +fixes: + - When upgrading it is possible for an old ``neutron-ns-metadata-proxy`` + process to remain running in memory. If this happens the old version of + the process can cause unexpected issues in a production environment. To + fix this a task has been added to the os_neutron role that will execute + a process lookup and kill any ``neutron-ns-metadata-proxy`` processes that + are not running the current release tag. Once the old processes are + removed the metadata agent running will respawn everything needed within + 60 seconds. diff --git a/releasenotes/notes/mitaka-deprecations-72bec69c1395261d.yaml b/releasenotes/notes/mitaka-deprecations-72bec69c1395261d.yaml new file mode 100644 index 0000000000..98fcca5a0d --- /dev/null +++ b/releasenotes/notes/mitaka-deprecations-72bec69c1395261d.yaml @@ -0,0 +1,10 @@ +--- +other: + - | + ``nova_libvirt_live_migration_flag`` is now phased out. + Please create a nova configuration override with + ``live_migration_tunnelled: True`` if you want to force the flag + ``VIR_MIGRATE_TUNNELLED`` to libvirt. Nova "chooses a sensible + default" otherwise. + - | + ``nova_compute_manager`` is now phased out. diff --git a/releasenotes/notes/neutron-ovs-powervm-116662f169e17175.yaml b/releasenotes/notes/neutron-ovs-powervm-116662f169e17175.yaml new file mode 100644 index 0000000000..3150d169af --- /dev/null +++ b/releasenotes/notes/neutron-ovs-powervm-116662f169e17175.yaml @@ -0,0 +1,18 @@ +--- +features: + - | + The ``os_neutron`` role will now default to the OVS firewall driver when + ``neutron_plugin_type`` is ``ml2.ovs`` and the host is running Ubuntu + 16.04 on PowerVM. To override this default behavior, deployers should + define ``neutron_ml2_conf_ini_overrides`` and + 'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example + below + + :: + + neutron_ml2_conf_ini_overrides: + securitygroup: + firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver + neutron_openvswitch_agent_ini_overrides: + securitygroup: + firewall_driver: iptables_hybrid diff --git a/releasenotes/notes/neutron_ovs_dvr-7fca77cac0545441.yaml b/releasenotes/notes/neutron_ovs_dvr-7fca77cac0545441.yaml new file mode 100644 index 0000000000..6627221ca2 --- /dev/null +++ b/releasenotes/notes/neutron_ovs_dvr-7fca77cac0545441.yaml @@ -0,0 +1,11 @@ +--- +features: + - | + Support for Neutron distributed virtual routing has been added to the + ``os_neutron`` role. This includes the implementation of Networking + Guide's suggested agent configuration. This feature may be activated + by setting ``neutron_plugin_type: ml2.ovs.dvr`` in ``/etc/openstack_deploy/user_variables.yml``. +upgrade: + - The variable ``neutron_agent_mode`` has been removed from the + ``os_neutron`` role. The appropriate value for ``l3_agent.ini`` is now + determined based on the ``neutron_plugin_type`` and host group membership. diff --git a/releasenotes/notes/nova-largecluster-key-inserts-afc8cac63af41087.yaml b/releasenotes/notes/nova-largecluster-key-inserts-afc8cac63af41087.yaml new file mode 100644 index 0000000000..96c2265535 --- /dev/null +++ b/releasenotes/notes/nova-largecluster-key-inserts-afc8cac63af41087.yaml @@ -0,0 +1,12 @@ +--- +features: + - The nova SSH public key distribution has been made a lot faster + especially when deploying against very large clusters. To support + larger clusters the role has moved away from the "authorized_key" + module and is now generating a script to insert keys that may + be missing from the authorized keys file. The script is saved on all + nova compute nodes and can be found at + ``/usr/local/bin/openstack-nova-key.sh``. If ever there is a need to + reinsert keys or fix issues on a given compute node the script can be + executed at any time without directly running the ansible playbooks + or roles. diff --git a/releasenotes/notes/nova-powervm-b4eddae30abbd08e.yaml b/releasenotes/notes/nova-powervm-b4eddae30abbd08e.yaml new file mode 100644 index 0000000000..e450591d32 --- /dev/null +++ b/releasenotes/notes/nova-powervm-b4eddae30abbd08e.yaml @@ -0,0 +1,5 @@ +--- +features: + - The os_nova role can now detect and support basic deployment of a PowerVM environment. + This sets the virtualization type to 'powervm' and installs/updates the PowerVM NovaLink + package and nova-powervm driver. diff --git a/releasenotes/notes/nova-uca-support-409b2e6afbce47b1.yaml b/releasenotes/notes/nova-uca-support-409b2e6afbce47b1.yaml new file mode 100644 index 0000000000..d59a0ef23f --- /dev/null +++ b/releasenotes/notes/nova-uca-support-409b2e6afbce47b1.yaml @@ -0,0 +1,10 @@ +--- +features: + - Nova UCA repository support is implemented by default. + This will allow the users to benefit from the updated + packages for KVM. + + The ``nova_uca_enable`` variable controls the install + source for the KVM packages. By default this value is set + to ``True`` to make use of UCA repository. User can set to + ``False`` to disable. diff --git a/releasenotes/notes/os-glance-only-install-venv-0271d3238c0d561c.yaml b/releasenotes/notes/os-glance-only-install-venv-0271d3238c0d561c.yaml new file mode 100644 index 0000000000..afa6dbf59a --- /dev/null +++ b/releasenotes/notes/os-glance-only-install-venv-0271d3238c0d561c.yaml @@ -0,0 +1,6 @@ +--- +upgrade: + - Installation of glance and its dependent pip packages will now only + occur within a Python virtual environment. The ``glance_venv_bin``, + ``glance_venv_enabled``, ``glance_venv_etc_dir``, and + ``glance_non_venv_etc_dir`` variables have been removed. diff --git a/releasenotes/notes/os-gnocchi-only-install-venv-4e532f44fcf5cda5.yaml b/releasenotes/notes/os-gnocchi-only-install-venv-4e532f44fcf5cda5.yaml new file mode 100644 index 0000000000..538ea1aba3 --- /dev/null +++ b/releasenotes/notes/os-gnocchi-only-install-venv-4e532f44fcf5cda5.yaml @@ -0,0 +1,6 @@ +--- +upgrade: + - Installation of glance and its dependent pip packages will now only + occur within a Python virtual environment. The ``gnocchi_venv_bin``, + ``gnocchi_venv_enabled``, ``gnocchi_venv_etc_dir``, and + ``gnocchi_non_venv_etc_dir`` variables have been removed. diff --git a/releasenotes/notes/os-heat-only-install-venv-e3e8e466dd67c2bc.yaml b/releasenotes/notes/os-heat-only-install-venv-e3e8e466dd67c2bc.yaml new file mode 100644 index 0000000000..f42b6a7305 --- /dev/null +++ b/releasenotes/notes/os-heat-only-install-venv-e3e8e466dd67c2bc.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of heat and its dependent pip packages will now only + occur within a Python virtual environment. The ``heat_venv_bin`` + and ``heat_venv_enabled`` variables have been removed. diff --git a/releasenotes/notes/os-horizon-apache-log-format-support-34c9ef74b3bcce31.yaml b/releasenotes/notes/os-horizon-apache-log-format-support-34c9ef74b3bcce31.yaml new file mode 100644 index 0000000000..67c0f90e9a --- /dev/null +++ b/releasenotes/notes/os-horizon-apache-log-format-support-34c9ef74b3bcce31.yaml @@ -0,0 +1,5 @@ +--- +features: + - Added ``horizon_apache_custom_log_format`` tunable + to the os-horizon role for changing CustomLog format. + Default is "combined". diff --git a/releasenotes/notes/os-horizon-only-install-venv-0fd3292d2b61e840.yaml b/releasenotes/notes/os-horizon-only-install-venv-0fd3292d2b61e840.yaml new file mode 100644 index 0000000000..cdd533eb1a --- /dev/null +++ b/releasenotes/notes/os-horizon-only-install-venv-0fd3292d2b61e840.yaml @@ -0,0 +1,6 @@ +--- +upgrade: + - Installation of horizon and its dependent pip packages will now only + occur within a Python virtual environment. The ``horizon_venv_bin``, + ``horizon_venv_enabled``, ``horizon_venv_lib_dir``, and + ``horizon_non_venv_lib_dir`` variables have been removed. diff --git a/releasenotes/notes/os-ironic-only-install-venv-0da32fc36bfeae2b.yaml b/releasenotes/notes/os-ironic-only-install-venv-0da32fc36bfeae2b.yaml new file mode 100644 index 0000000000..d39cc63cde --- /dev/null +++ b/releasenotes/notes/os-ironic-only-install-venv-0da32fc36bfeae2b.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of ironic and its dependent pip packages will now only + occur within a Python virtual environment. The ``ironic_venv_bin`` + and ``ironic_venv_enabled`` variables have been removed. diff --git a/releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml b/releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml new file mode 100644 index 0000000000..9b9e057bde --- /dev/null +++ b/releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml @@ -0,0 +1,17 @@ +--- +security: + - | + The admin_token_auth middleware presents a potential + security risk and will be removed in a future release + of keystone. Its use can be removed by setting the + ``keystone_keystone_paste_ini_overrides`` variable. + + :: + + keystone_keystone_paste_ini_overrides: + pipeline:public_api: + pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service + pipeline:admin_api: + pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service + pipeline:api_v3: + pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3 diff --git a/releasenotes/notes/os-keystone-apache-log-format-support-7232177f835222ee.yaml b/releasenotes/notes/os-keystone-apache-log-format-support-7232177f835222ee.yaml new file mode 100644 index 0000000000..ed27f8f1a3 --- /dev/null +++ b/releasenotes/notes/os-keystone-apache-log-format-support-7232177f835222ee.yaml @@ -0,0 +1,4 @@ +--- +features: + - Added keystone_apache_custom_log_format tunable for + changing CustomLog format. Default is "combined". diff --git a/releasenotes/notes/os-keystone-only-install-venv-b766568ee8d40354.yaml b/releasenotes/notes/os-keystone-only-install-venv-b766568ee8d40354.yaml new file mode 100644 index 0000000000..d2eca846e7 --- /dev/null +++ b/releasenotes/notes/os-keystone-only-install-venv-b766568ee8d40354.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of keystone and its dependent pip packages will now only + occur within a Python virtual environment. The ``keystone_venv_enabled`` + variable has been removed. diff --git a/releasenotes/notes/os_aodh-only-install-venv-3c80a0a66824fcd7.yaml b/releasenotes/notes/os_aodh-only-install-venv-3c80a0a66824fcd7.yaml new file mode 100644 index 0000000000..14a17b2de2 --- /dev/null +++ b/releasenotes/notes/os_aodh-only-install-venv-3c80a0a66824fcd7.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of aodh and its dependent pip packages will now only + occur within a Python virtual environment. The ``aodh_venv_enabled`` + and ``aodh_venv_bin`` variables have been removed. \ No newline at end of file diff --git a/releasenotes/notes/os_ceilometer-only-install-venv-f3cd57b4a1d025c5.yaml b/releasenotes/notes/os_ceilometer-only-install-venv-f3cd57b4a1d025c5.yaml new file mode 100644 index 0000000000..4dbd29d021 --- /dev/null +++ b/releasenotes/notes/os_ceilometer-only-install-venv-f3cd57b4a1d025c5.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of ceilometer and its dependent pip packages will now only + occur within a Python virtual environment. The ``ceilometer_venv_enabled`` + and ``ceilometer_venv_bin`` variables have been removed. diff --git a/releasenotes/notes/os_cinder-1604-support.yaml b/releasenotes/notes/os_cinder-1604-support.yaml new file mode 100644 index 0000000000..29e6ae779f --- /dev/null +++ b/releasenotes/notes/os_cinder-1604-support.yaml @@ -0,0 +1,3 @@ +--- +features: + - The ``os_cinder`` role now supports Ubuntu 16.04. diff --git a/releasenotes/notes/os_cinder-only-install-venv-914d5655dd645213.yaml b/releasenotes/notes/os_cinder-only-install-venv-914d5655dd645213.yaml new file mode 100644 index 0000000000..9bd86d6719 --- /dev/null +++ b/releasenotes/notes/os_cinder-only-install-venv-914d5655dd645213.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of cinder and its dependent pip packages will now only + occur within a Python virtual environment. The ``cinder_venv_enabled`` + and ``cinder_venv_bin`` variables have been removed. \ No newline at end of file diff --git a/releasenotes/notes/os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml b/releasenotes/notes/os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml new file mode 100644 index 0000000000..08188ccc97 --- /dev/null +++ b/releasenotes/notes/os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml @@ -0,0 +1,6 @@ +--- +upgrade: + - Installation of neutron and its dependent pip packages will now only + occur within a Python virtual environment. The ``neutron_venv_enabled``, + ``neutron_venv_bin``, ``neutron_non_venv_lib_dir`` and + ``neutron_venv_lib_dir`` variables have been removed. diff --git a/releasenotes/notes/os_nova-install-venv-6c6c2ba28f67a891.yaml b/releasenotes/notes/os_nova-install-venv-6c6c2ba28f67a891.yaml new file mode 100644 index 0000000000..e4b355f6a2 --- /dev/null +++ b/releasenotes/notes/os_nova-install-venv-6c6c2ba28f67a891.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of nova and its dependent pip packages will now only + occur within a Python virtual environment. The ``nova_venv_enabled``, + ``nova_venv_bin`` variables have been removed. diff --git a/releasenotes/notes/os_swift-only-install-venv-fdd5d41759433cf8.yaml b/releasenotes/notes/os_swift-only-install-venv-fdd5d41759433cf8.yaml new file mode 100644 index 0000000000..14e76d3f00 --- /dev/null +++ b/releasenotes/notes/os_swift-only-install-venv-fdd5d41759433cf8.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - Installation of swift and its dependent pip packages will now only + occur within a Python virtual environment. The ``swift_venv_enabled``, + ``swift_venv_bin`` variables have been removed. diff --git a/releasenotes/notes/pip-source-store-d94ff2b68a99481a.yaml b/releasenotes/notes/pip-source-store-d94ff2b68a99481a.yaml new file mode 100644 index 0000000000..aa2aa27436 --- /dev/null +++ b/releasenotes/notes/pip-source-store-d94ff2b68a99481a.yaml @@ -0,0 +1,10 @@ +--- +features: + - The repo build process now has the ability to store the pip + sources within the build archive. This ability is useful when + deploying environments that are "multi-architecture", + "multi-distro", or "multi-interpreter" where specific pre-build + wheels may not be enough to support all of the deployment. + To enable the ability to store the python source code within a + given release, set the new option ``repo_build_store_pip_sources`` + to ``true``. diff --git a/releasenotes/notes/pkg-cacher-cfeae8fb990904a4.yaml b/releasenotes/notes/pkg-cacher-cfeae8fb990904a4.yaml new file mode 100644 index 0000000000..d4ec4b7c7a --- /dev/null +++ b/releasenotes/notes/pkg-cacher-cfeae8fb990904a4.yaml @@ -0,0 +1,6 @@ +--- +features: + - The repo server now has a Package Cache service for distribution packages. To leverage + the cache, deployers will need to configure the package manager on all hosts to use the + cache as a proxy. If a deployer would prefer to disable this service, the variable + ``repo_pkg_cache_enabled`` should be set to ``false``. diff --git a/releasenotes/notes/remove-lbaasv1-26044c48b5d3b508.yaml b/releasenotes/notes/remove-lbaasv1-26044c48b5d3b508.yaml new file mode 100644 index 0000000000..46041a23ba --- /dev/null +++ b/releasenotes/notes/remove-lbaasv1-26044c48b5d3b508.yaml @@ -0,0 +1,8 @@ +--- +features: + - The LBaaSv2 device driver is now set by the Ansible variable + ``neutron_lbaasv2_device_driver``. The default is set to use the + ``HaproxyNSDriver``, which allows for agent-based load balancers. +upgrade: + - LBaaSv1 has been removed from the ``neutron-lbaas`` project in the Newton + release and it has been removed from OpenStack-Ansible as well. diff --git a/releasenotes/notes/removed-neutron-ha-tool-dd7a4717e03163f9.yaml b/releasenotes/notes/removed-neutron-ha-tool-dd7a4717e03163f9.yaml new file mode 100644 index 0000000000..70eb3386b0 --- /dev/null +++ b/releasenotes/notes/removed-neutron-ha-tool-dd7a4717e03163f9.yaml @@ -0,0 +1,13 @@ +--- +deprecations: + - The Neutron HA tool written by AT&T has been deprecated and will be + removed in the Ocata release. +upgrade: + - The Neutron HA tool written by AT&T is no longer enabled by default. + This tool was providing HA capabilities for networks and routers + that were not using the native Neutron L3HA. Because native Neutron + L3HA is stable, compatible with the Linux Bridge Agent, and is + a better means of enabling HA within a deployment this tool is no + longer being setup by default. If legacy L3HA is needed within a + deployment the deployer can set `neutron_legacy_ha_tool_enabled` to + **true** to enable the legacy tooling. diff --git a/releasenotes/notes/rename-pip-packages-tmp-f40dc7599684466a.yaml b/releasenotes/notes/rename-pip-packages-tmp-f40dc7599684466a.yaml new file mode 100644 index 0000000000..c3ff20acd5 --- /dev/null +++ b/releasenotes/notes/rename-pip-packages-tmp-f40dc7599684466a.yaml @@ -0,0 +1,5 @@ +--- +fixes: + - The ``pip_packages_tmp`` variable has been renamed + ``pip_tmp_packages`` to avoid unintended processing + by the py_pkgs lookup plugin. diff --git a/releasenotes/notes/repo-build-deprecate-repo-build-apt-packages-df1ca334b857787a.yaml b/releasenotes/notes/repo-build-deprecate-repo-build-apt-packages-df1ca334b857787a.yaml new file mode 100644 index 0000000000..5df85a0c4c --- /dev/null +++ b/releasenotes/notes/repo-build-deprecate-repo-build-apt-packages-df1ca334b857787a.yaml @@ -0,0 +1,5 @@ +--- +deprecations: + - The ``repo_build_apt_packages`` variable has been deprecated. + ``repo_build_packages`` should be used instead to override + packages required to build Python wheels and venvs. diff --git a/releasenotes/notes/repo-build-fix-upper-constraints-9e24c56520538df2.yaml b/releasenotes/notes/repo-build-fix-upper-constraints-9e24c56520538df2.yaml new file mode 100644 index 0000000000..fcdf4cdc01 --- /dev/null +++ b/releasenotes/notes/repo-build-fix-upper-constraints-9e24c56520538df2.yaml @@ -0,0 +1,5 @@ +--- +fixes: + - The ``repo_build`` role now correctly applies OpenStack requirements + upper-constraints when building Python wheels. This resolves + https://bugs.launchpad.net/openstack-ansible/+bug/1605846 diff --git a/releasenotes/notes/repo-build-use-uca-by-default-bde8ded7d72cd42c.yaml b/releasenotes/notes/repo-build-use-uca-by-default-bde8ded7d72cd42c.yaml new file mode 100644 index 0000000000..58b69b37df --- /dev/null +++ b/releasenotes/notes/repo-build-use-uca-by-default-bde8ded7d72cd42c.yaml @@ -0,0 +1,4 @@ +--- +upgrade: + - The ``repo_build`` role now makes use of Ubuntu Cloud Archive by default. + This can be disabled by setting ``repo_build_uca_enable`` to ``False``. diff --git a/releasenotes/notes/rhel-gpg-check-0b483a824314d1b3.yaml b/releasenotes/notes/rhel-gpg-check-0b483a824314d1b3.yaml new file mode 100644 index 0000000000..3ad7f458e5 --- /dev/null +++ b/releasenotes/notes/rhel-gpg-check-0b483a824314d1b3.yaml @@ -0,0 +1,7 @@ +--- +features: + - | + The GPG key checks for package verification in V-38476 are now working for + Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look + for GPG keys from Red Hat and any other GPG keys, such as ones imported + from the EPEL repository, are skipped. diff --git a/releasenotes/notes/rsyslog-client-centos7-support-bf5dd55ef6488a20.yaml b/releasenotes/notes/rsyslog-client-centos7-support-bf5dd55ef6488a20.yaml new file mode 100644 index 0000000000..7d81427d31 --- /dev/null +++ b/releasenotes/notes/rsyslog-client-centos7-support-bf5dd55ef6488a20.yaml @@ -0,0 +1,4 @@ +--- +features: + - CentOS7 support has been added to the ``rsyslog_client`` + role. diff --git a/releasenotes/notes/rsyslog-client-logrotate-options-02dde942779493bb.yaml b/releasenotes/notes/rsyslog-client-logrotate-options-02dde942779493bb.yaml new file mode 100644 index 0000000000..8ebecc3f13 --- /dev/null +++ b/releasenotes/notes/rsyslog-client-logrotate-options-02dde942779493bb.yaml @@ -0,0 +1,6 @@ +--- +features: + - The options of application logrotate configuration files are now configurable. + ``rsyslog_client_log_rotate_options`` can be used to provide a list of directives, and + ``rsyslog_client_log_rotate_scripts`` can be used to provide a list of postrotate, prerotate, + firstaction, or lastaction scripts. diff --git a/releasenotes/notes/selective-venv-build-dd9f0e40cd1cc076.yaml b/releasenotes/notes/selective-venv-build-dd9f0e40cd1cc076.yaml new file mode 100644 index 0000000000..801a133039 --- /dev/null +++ b/releasenotes/notes/selective-venv-build-dd9f0e40cd1cc076.yaml @@ -0,0 +1,8 @@ +--- +features: + - The repo build process now selectively builds venvs based on + whether each OpenStack service group has any hosts in it. If + there are no hosts in the group, the venv will not be built. + This behaviour can be optionally changed to force all venvs + to be built by setting ``repo_build_venv_selective`` to + ``yes``. diff --git a/releasenotes/notes/support-ubuntu-xenial-958e8128ed6578cd.yaml b/releasenotes/notes/support-ubuntu-xenial-958e8128ed6578cd.yaml new file mode 100644 index 0000000000..1dc7f36697 --- /dev/null +++ b/releasenotes/notes/support-ubuntu-xenial-958e8128ed6578cd.yaml @@ -0,0 +1,3 @@ +--- +feature: + - Support has been added to deploy Ceilometer services for Ubuntu 16.04 LTS. diff --git a/releasenotes/notes/swift-conf-b8dd5e1199f8e4a8.yaml b/releasenotes/notes/swift-conf-b8dd5e1199f8e4a8.yaml new file mode 100644 index 0000000000..70ed36e27a --- /dev/null +++ b/releasenotes/notes/swift-conf-b8dd5e1199f8e4a8.yaml @@ -0,0 +1,9 @@ +--- +fixes: + - Previously, the ``ansible_managed`` var was being + used to insert a header into the ``swift.conf`` that + contained date/time information. This meant that + swift.conf across different nodes did not have the + same MD5SUM, causing ``swift-recon --md5`` to break. + We now insert a piece of static text instead to + resolve this issue. diff --git a/releasenotes/notes/swift-fs-file-limits-a57ab8b4c3c944e4.yaml b/releasenotes/notes/swift-fs-file-limits-a57ab8b4c3c944e4.yaml new file mode 100644 index 0000000000..3edb979ce5 --- /dev/null +++ b/releasenotes/notes/swift-fs-file-limits-a57ab8b4c3c944e4.yaml @@ -0,0 +1,11 @@ +--- +features: + - The ``os_swift`` role has 3 new variables that will allow a + deployer to change the hard, soft and fs.file-max limits. the + hard and soft limits are being added to the limits.conf file for + the swift system user. The fs.file-max settings are added to + storage hosts via kernel tuning. The new options are + ``swift_hard_open_file_limits`` with a default of 10240 + ``swift_soft_open_file_limits`` with a default of 4096 + ``swift_max_file_limits`` with a default of 24 times the value + of ``swift_hard_open_file_limits``. diff --git a/releasenotes/notes/swift-pretend-mph-passed-7e5c15eeb35861c3.yaml b/releasenotes/notes/swift-pretend-mph-passed-7e5c15eeb35861c3.yaml new file mode 100644 index 0000000000..0be1bf4999 --- /dev/null +++ b/releasenotes/notes/swift-pretend-mph-passed-7e5c15eeb35861c3.yaml @@ -0,0 +1,17 @@ +--- +features: + - The ``pretend_min_part_hours_passed`` option can now be + passed to swift-ring-builder prior to performing a + rebalance. This is set by the + ``swift_pretend_min_part_hours_passed`` boolean variable. + The default for this variable is False. We recommend setting + this by running the os-swift.yml playbook with + ``-e swift_pretend_min_part_hours_passed=True``, to avoid + resetting ``min_part_hours`` unintentionally on every run. + Setting ``swift_pretend_min_part_hours_passed`` to True will + reset the clock on the last time a rebalance happened, thus + circumventing the min_part_hours check. This should only be + used with extreme caution. If you run this command and deploy + rebalanced rings before a replication pass completes, you may + introduce unavailability in your cluster. This has an end-user + imapct. diff --git a/releasenotes/notes/ubuntu-ppc64le-cab45e63dca77017.yaml b/releasenotes/notes/ubuntu-ppc64le-cab45e63dca77017.yaml new file mode 100644 index 0000000000..b5926ace09 --- /dev/null +++ b/releasenotes/notes/ubuntu-ppc64le-cab45e63dca77017.yaml @@ -0,0 +1,4 @@ +--- +features: + - Support added to allow deploying on ppc64le architecture + using the Ubuntu distributions. diff --git a/releasenotes/notes/update-aodh-integration-fd2a27e8864bd8ff.yaml b/releasenotes/notes/update-aodh-integration-fd2a27e8864bd8ff.yaml new file mode 100644 index 0000000000..c3e06ab976 --- /dev/null +++ b/releasenotes/notes/update-aodh-integration-fd2a27e8864bd8ff.yaml @@ -0,0 +1,10 @@ +--- +upgrade: + - Ceilometer no longer manages alarm storage when Aodh + is enabled. It now redirects alarm-related requests to + the Aodh API. This is now auto-enabled when Aodh is + deployed. + - Overrides for ceilometer ``aodh_connection_string`` + will no longer work. Specifying an Aodh connection + string in Ceilometer was deprecated within Ceilometer + in a prior release so this option has been removed. diff --git a/releasenotes/notes/upgrade-lxc-4750ba9aea7b5cd1.yaml b/releasenotes/notes/upgrade-lxc-4750ba9aea7b5cd1.yaml new file mode 100644 index 0000000000..3393858fab --- /dev/null +++ b/releasenotes/notes/upgrade-lxc-4750ba9aea7b5cd1.yaml @@ -0,0 +1,6 @@ +--- +upgrade: + - Hosts running LXC on Ubuntu 14.04 will now need to enable + the "trusty-backports" repository. The backports repo on + Ubuntu 14.04 is now required to ensure LXC is updated to + the latest stable version. diff --git a/releasenotes/notes/use-galera-storage-d1a51c051d2740ad.yaml b/releasenotes/notes/use-galera-storage-d1a51c051d2740ad.yaml new file mode 100644 index 0000000000..0f516cbfbe --- /dev/null +++ b/releasenotes/notes/use-galera-storage-d1a51c051d2740ad.yaml @@ -0,0 +1,14 @@ +--- +upgrade: + - The Aodh data migration script should be run to + migrate alarm data from MongoDB storage to Galera + due to the pending removal of MongoDB support. +fixes: + - Aodh has deprecated support for NoSQL storage (MongoDB + and Cassandra) in Mitaka with removal scheduled for + the O* release. This causes warnings in the logs. The + default of using MongoDB storage for Aodh is replaced + with the use of Galera. Continued use of MongoDB will + require the use of vars to specify a correct + ``aodh_connection_string`` and add pymongo to the + ``aodh_pip_packages`` list. diff --git a/releasenotes/notes/use-uca-by-default-070751b0b388fcbe.yaml b/releasenotes/notes/use-uca-by-default-070751b0b388fcbe.yaml new file mode 100644 index 0000000000..e473f28095 --- /dev/null +++ b/releasenotes/notes/use-uca-by-default-070751b0b388fcbe.yaml @@ -0,0 +1,4 @@ +--- +upgrade: + - Neutron now makes use of Ubuntu Cloud Archive by default. This can be + disabled by setting ``neutron_uca_enable`` to ``False``. diff --git a/releasenotes/notes/var-deprecations-417d87b9d386466a.yaml b/releasenotes/notes/var-deprecations-417d87b9d386466a.yaml new file mode 100644 index 0000000000..13952a82d8 --- /dev/null +++ b/releasenotes/notes/var-deprecations-417d87b9d386466a.yaml @@ -0,0 +1,12 @@ +--- +deprecations: + - | + The following variables have been renamed in order to make the variable + names neutral for multiple operating systems. + + * nova_apt_packages -> nova_packages + * nova_spice_apt_packages -> nova_spice_packages + * nova_novnc_apt_packages -> nova_novnc_packages + * nova_compute_kvm_apt_packages -> nova_compute_kvm_package + + The old variable names will be removed in the Ocata cycle.