#, fuzzy msgid "" msgstr "" "Project-Id-Version: OpenStack-Ansible\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2024-11-21 15:10+0000\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #: ../../:335 msgid "" "**NOTE:** This fix is partially applied for existing OpenStack-Ansible " "deployments. See the upgrade section of the release notes for the work " "required to fully apply the fix." msgstr "" #: ../../:1288 stable/pike>:1799 msgid "" "**This is a breaking change for existing CentOS deployments.** The ``yum`` " "package manager will have errors when it finds that certain packages that it " "installed from EPEL are no longer available. Deployers may need to rebuild " "container or reinstall packages to complete this change." msgstr "" #: ../../:2625 msgid "" "**lxc_cache_validate_certs**: Removed because the Ansible ``get_url`` module " "is no longer used." msgstr "" #: ../../:2623 msgid "" "**lxc_container_base_delete**: Removed because the cache will be refreshed " "upon role execution." msgstr "" #: ../../:2627 msgid "" "**lxc_container_caches**: Removed because the container create process will " "build a cached image based on the host OS." msgstr "" #: ../../:2597 msgid "" "**lxc_container_release**: Removed because image is now tied with the host " "operating system." msgstr "" #: ../../:2590 msgid "" "**lxc_container_template**: Removed because the template option is now " "contained within the operating system specific variable file loaded at " "runtime." msgstr "" #: ../../:2603 msgid "" "**lxc_container_template_main_apt_repo**: Removed because this option is now " "being set within the cache creation process and is no longer needed here." msgstr "" #: ../../:2618 msgid "" "**lxc_container_template_options**: This option was renamed to " "*lxc_cache_download_template_options*. The deprecation filter was not used " "because the values provided from this option have been fundamentally changed " "and potentially old overrides will cause problems." msgstr "" #: ../../:2593 msgid "" "**lxc_container_template_options**: This option was renamed to " "*lxc_container_download_template_options*. The deprecation filter was not " "used because the values provided from this option have been fundamentally " "changed and old overrides will cause problems." msgstr "" #: ../../:2605 msgid "" "**lxc_container_template_security_apt_repo**: Removed because this option is " "now being set within the cache creation process and is no longer needed here." "" msgstr "" #: ../../:2599 msgid "" "**lxc_container_user_name**: Removed because the default users are no longer " "created when the cached image is created." msgstr "" #: ../../:2616 msgid "" "**lxc_container_user_password**: Removed because the default lxc container " "user is no longer created by the lxc container template." msgstr "" #: ../../:2601 msgid "" "**lxc_container_user_password**: Removed because the default users are no " "longer created when the cached image is created." msgstr "" #: ../../:519 msgid "12.0.10" msgstr "" #: ../../:504 msgid "12.0.11" msgstr "" #: ../../:479 msgid "12.0.12" msgstr "" #: ../../:444 msgid "12.0.13" msgstr "" #: ../../:399 msgid "12.0.14" msgstr "" #: ../../:308 msgid "12.0.15" msgstr "" #: ../../:227 msgid "12.0.16" msgstr "" #: ../../:874 msgid "12.0.6" msgstr "" #: ../../:719 msgid "12.0.7" msgstr "" #: ../../:626 msgid "12.0.8" msgstr "" #: ../../:582 msgid "12.0.9" msgstr "" #: ../../:202 msgid "12.1.0" msgstr "" #: ../../:159 msgid "12.2.0" msgstr "" #: ../../:124 msgid "12.2.2" msgstr "" #: ../../:20 msgid "12.2.4" msgstr "" #: ../../:5 msgid "12.2.5" msgstr "" #: ../../:916 msgid "13.0.0" msgstr "" #: ../../:779 msgid "13.0.1" msgstr "" #: ../../:764 msgid "13.1.0" msgstr "" #: ../../:749 msgid "13.1.1" msgstr "" #: ../../:651 msgid "13.1.2" msgstr "" #: ../../:616 msgid "13.1.3" msgstr "" #: ../../:557 msgid "13.1.4" msgstr "" #: ../../:529 msgid "13.2.0" msgstr "" #: ../../:468 msgid "13.3.0" msgstr "" #: ../../:407 msgid "13.3.1" msgstr "" #: ../../:5 msgid "13.3.13" msgstr "" #: ../../:364 msgid "13.3.2" msgstr "" #: ../../:253 msgid "13.3.3" msgstr "" #: ../../:168 msgid "13.3.4" msgstr "" #: ../../:104 msgid "13.3.5" msgstr "" #: ../../:89 msgid "13.3.6" msgstr "" #: ../../:64 msgid "13.3.7" msgstr "" #: ../../:49 msgid "13.3.8" msgstr "" #: ../../:20 msgid "13.3.9" msgstr "" #: ../../:1398 msgid "14.0.0" msgstr "" #: ../../:1303 msgid "14.0.2" msgstr "" #: ../../:1254 msgid "14.0.3" msgstr "" #: ../../:1168 msgid "14.0.5" msgstr "" #: ../../:1133 msgid "14.0.6" msgstr "" #: ../../:1028 msgid "14.0.7" msgstr "" #: ../../:973 msgid "14.0.8" msgstr "" #: ../../:934 msgid "14.1.0" msgstr "" #: ../../:875 msgid "14.1.1" msgstr "" #: ../../:816 msgid "14.2.0" msgstr "" #: ../../:742 msgid "14.2.1" msgstr "" #: ../../:207 msgid "14.2.10" msgstr "" #: ../../:188 msgid "14.2.11" msgstr "" #: ../../:164 msgid "14.2.12" msgstr "" #: ../../:97 msgid "14.2.15" msgstr "" #: ../../:82 msgid "14.2.16" msgstr "" #: ../../:5 msgid "14.2.16-7" msgstr "" #: ../../:713 msgid "14.2.2" msgstr "" #: ../../:508 msgid "14.2.3" msgstr "" #: ../../:469 msgid "14.2.4" msgstr "" #: ../../:454 msgid "14.2.5" msgstr "" #: ../../:439 msgid "14.2.6" msgstr "" #: ../../:370 msgid "14.2.7" msgstr "" #: ../../:335 msgid "14.2.8" msgstr "" #: ../../:276 msgid "14.2.9" msgstr "" #: ../../:1346 msgid "15.0.0" msgstr "" #: ../../:1206 msgid "15.1.0" msgstr "" #: ../../:1159 msgid "15.1.1" msgstr "" #: ../../:390 msgid "15.1.10" msgstr "" #: ../../:371 msgid "15.1.11" msgstr "" #: ../../:347 msgid "15.1.12" msgstr "" #: ../../:332 msgid "15.1.13" msgstr "" #: ../../:310 msgid "15.1.14" msgstr "" #: ../../:295 msgid "15.1.15" msgstr "" #: ../../:237 msgid "15.1.16" msgstr "" #: ../../:198 msgid "15.1.17" msgstr "" #: ../../:1114 msgid "15.1.2" msgstr "" #: ../../:183 msgid "15.1.20" msgstr "" #: ../../:157 msgid "15.1.21" msgstr "" #: ../../:93 msgid "15.1.22" msgstr "" #: ../../:39 msgid "15.1.23" msgstr "" #: ../../:5 msgid "15.1.28-10" msgstr "" #: ../../:877 msgid "15.1.3" msgstr "" #: ../../:844 msgid "15.1.4" msgstr "" #: ../../:733 msgid "15.1.5" msgstr "" #: ../../:667 msgid "15.1.6" msgstr "" #: ../../:541 msgid "15.1.7" msgstr "" #: ../../:526 msgid "15.1.8" msgstr "" #: ../../:456 msgid "15.1.9" msgstr "" #: ../../:860 msgid "16.0.0" msgstr "" #: ../../:835 msgid "16.0.1" msgstr "" #: ../../:288 msgid "16.0.10" msgstr "" #: ../../:265 msgid "16.0.11" msgstr "" #: ../../:250 msgid "16.0.12" msgstr "" #: ../../:224 msgid "16.0.13" msgstr "" #: ../../:160 msgid "16.0.14" msgstr "" #: ../../:97 msgid "16.0.15" msgstr "" #: ../../:81 msgid "16.0.16" msgstr "" #: ../../:64 msgid "16.0.19" msgstr "" #: ../../:811 msgid "16.0.2" msgstr "" #: ../../:31 msgid "16.0.24" msgstr "" #: ../../:5 msgid "16.0.25" msgstr "" #: ../../:745 msgid "16.0.3" msgstr "" #: ../../:632 msgid "16.0.4" msgstr "" #: ../../:534 msgid "16.0.5" msgstr "" #: ../../:484 msgid "16.0.6" msgstr "" #: ../../:448 msgid "16.0.7" msgstr "" #: ../../:385 msgid "16.0.8" msgstr "" #: ../../:345 msgid "16.0.9" msgstr "" #: ../../:631 msgid "17.0.0" msgstr "" #: ../../:602 msgid "17.0.1" msgstr "" #: ../../:540 msgid "17.0.2" msgstr "" #: ../../:488 msgid "17.0.3" msgstr "" #: ../../:462 msgid "17.0.4" msgstr "" #: ../../:373 msgid "17.0.5" msgstr "" #: ../../:315 msgid "17.0.6" msgstr "" #: ../../:299 msgid "17.0.7" msgstr "" #: ../../:278 msgid "17.0.8" msgstr "" #: ../../:261 msgid "17.1.0" msgstr "" #: ../../:217 msgid "17.1.1" msgstr "" #: ../../:5 msgid "17.1.11" msgstr "" #: ../../:184 msgid "17.1.4" msgstr "" #: ../../:169 msgid "17.1.5" msgstr "" #: ../../:144 msgid "17.1.6" msgstr "" #: ../../:114 msgid "17.1.7" msgstr "" #: ../../:68 msgid "17.1.8" msgstr "" #: ../../:41 msgid "17.1.9" msgstr "" #: ../../:451 msgid "18.0.0" msgstr "" #: ../../:350 msgid "18.1.0" msgstr "" #: ../../:311 msgid "18.1.1" msgstr "" #: ../../:5 msgid "18.1.15" msgstr "" #: ../../:276 msgid "18.1.3" msgstr "" #: ../../:184 msgid "18.1.4" msgstr "" #: ../../:137 msgid "18.1.5" msgstr "" #: ../../:78 msgid "18.1.6" msgstr "" #: ../../:20 msgid "18.1.8" msgstr "" #: ../../:193 msgid "19.0.0" msgstr "" #: ../../:77 msgid "19.0.10" msgstr "" #: ../../:158 msgid "19.0.2" msgstr "" #: ../../:126 msgid "19.0.4" msgstr "" #: ../../:107 msgid "19.0.7" msgstr "" #: ../../:51 msgid "19.1.1" msgstr "" #: ../../:36 msgid "19.1.2" msgstr "" #: ../../:5 msgid "19.1.7" msgstr "" #: ../../:176 msgid "20.0.0" msgstr "" #: ../../:160 msgid "20.0.2" msgstr "" #: ../../:134 msgid "20.1.0" msgstr "" #: ../../:115 msgid "20.1.1" msgstr "" #: ../../:90 msgid "20.1.2" msgstr "" #: ../../:5 msgid "20.2.0" msgstr "" #: ../../:179 msgid "21.0.0" msgstr "" #: ../../:94 msgid "21.2.0" msgstr "" #: ../../:68 msgid "21.2.1" msgstr "" #: ../../:5 msgid "21.2.10" msgstr "" #: ../../:40 msgid "21.2.3" msgstr "" #: ../../:23 msgid "21.2.5" msgstr "" #: ../../:268 msgid "22.0.0" msgstr "" #: ../../:251 msgid "22.0.1" msgstr "" #: ../../:207 msgid "22.1.0" msgstr "" #: ../../:190 msgid "22.1.1" msgstr "" #: ../../:141 msgid "22.1.2" msgstr "" #: ../../:126 msgid "22.2.0" msgstr "" #: ../../:75 msgid "22.3.0" msgstr "" #: ../../:57 msgid "22.3.1" msgstr "" #: ../../:39 msgid "22.3.2" msgstr "" #: ../../:5 msgid "22.4.0" msgstr "" #: ../../:198 msgid "23.0.0" msgstr "" #: ../../:180 msgid "23.1.0" msgstr "" #: ../../:162 msgid "23.1.1" msgstr "" #: ../../:128 msgid "23.2.0" msgstr "" #: ../../:82 msgid "23.3.0" msgstr "" #: ../../:5 msgid "23.4.0" msgstr "" #: ../../:353 msgid "24.0.0" msgstr "" #: ../../:327 msgid "24.0.1" msgstr "" #: ../../:281 msgid "24.2.0" msgstr "" #: ../../:238 msgid "24.3.0" msgstr "" #: ../../:110 msgid "24.4.0" msgstr "" #: ../../:83 msgid "24.4.3" msgstr "" #: ../../:38 msgid "24.5.0" msgstr "" #: ../../:22 msgid "24.5.1" msgstr "" #: ../../:5 msgid "24.6.0" msgstr "" #: ../../:352 msgid "25.0.0" msgstr "" #: ../../:309 msgid "25.1.0" msgstr "" #: ../../:265 msgid "25.2.0" msgstr "" #: ../../:214 msgid "25.3.0" msgstr "" #: ../../:197 msgid "25.3.1" msgstr "" #: ../../:128 msgid "25.4.0" msgstr "" #: ../../:54 msgid "25.5.0" msgstr "" #: ../../:5 msgid "25.6.0" msgstr "" #: ../../:298 msgid "26.0.0" msgstr "" #: ../../:267 msgid "26.0.1" msgstr "" #: ../../:216 msgid "26.1.2" msgstr "" #: ../../:134 msgid "26.2.0" msgstr "" #: ../../:95 msgid "26.3.0" msgstr "" #: ../../:51 msgid "26.4.0" msgstr "" #: ../../:22 msgid "26.5.0" msgstr "" #: ../../:5 msgid "26.5.2" msgstr "" #: ../../:475 msgid "27.0.0" msgstr "" #: ../../:411 msgid "27.1.0" msgstr "" #: ../../:354 msgid "27.2.0" msgstr "" #: ../../:310 msgid "27.3.0" msgstr "" #: ../../:215 msgid "27.4.0" msgstr "" #: ../../:185 msgid "27.4.2" msgstr "" #: ../../:136 msgid "27.4.3" msgstr "" #: ../../:66 msgid "27.5.0" msgstr "" #: ../../:36 msgid "27.5.1" msgstr "" #: ../../:5 msgid "27.6.0" msgstr "" #: ../../:314 msgid "28.0.0" msgstr "" #: ../../:211 msgid "28.0.1" msgstr "" #: ../../:183 msgid "28.2.0" msgstr "" #: ../../:145 msgid "28.2.1" msgstr "" #: ../../:87 msgid "28.3.0" msgstr "" #: ../../:56 msgid "28.3.1" msgstr "" #: ../../:5 msgid "28.4.0" msgstr "" #: ../../:225 msgid "29.0.0" msgstr "" #: ../../:195 msgid "29.0.1" msgstr "" #: ../../:153 msgid "29.0.2" msgstr "" #: ../../:33 msgid "29.1.0" msgstr "" #: ../../:5 msgid "29.2.0" msgstr "" #: ../../:82 current msgid "30.0.0.0b1" msgstr "" #: ../../:5 current msgid "30.0.0.0b1-18" msgstr "" #: ../../:336 msgid "_coordination_enable" msgstr "" #: ../../:337 msgid "_coordination_url" msgstr "" #: ../../:798 origin/stable/ocata>:1143 #: stable/pike>:2033 msgid "" "A bug that caused the Keystone credential keys to be lost when the playbook " "is run during a rebuild of the first Keystone container has been fixed. " "Please see launchpad bug 1667960 for more details." msgstr "" #: ../../:581 origin/stable/newton>:2008 msgid "" "A conditional has been added to the ``_local_ip`` settings used in the " "``neutron_local_ip`` which removes the hard requirement for an overlay " "network to be set within a deployment. If no overlay network is set within " "the deployment the ``local_ip`` will be set to the value of " "\"ansible_ssh_host\"." msgstr "" #: ../../:546 msgid "" "A default stick-table was previously applied to all backends by default but " "did not have any specific purpose. This is now removed, and the variable " "``haproxy_stick_table`` should be used to supply a list of config lines to " "be applied to each backend to control stick-table functionality." msgstr "" #: ../../:24 current msgid "" "A mapping ``_haproxy_services`` now can contain a key " "``haproxy_limit_hosts``, which can be used to filter out haproxy nodes to " "which this config should be applied. This behaviour might be useful in case " "you want to apply a different service configuration to haproxy hosts." msgstr "" #: ../../:567 msgid "" "A new 'ssl_cipher_suite_tls13' variable is added for global control of TLS " "v1.3 cipher suites." msgstr "" #: ../../:554 msgid "" "A new LXC container template has been added which will allow us to better " "manage containers on the host machines we support. The new template uses the " "`machinectl` command to create container rootfs using the existing cache. " "This in-turn will provide easier management of container images, faster " "build times, and the ability to instantly clone a container (or a given " "variant) without impacting a containers state. This new lxc container create " "template, and the features it provides, will only impact new containers " "created allowing deployers to safely adopt this change in any existing " "environment." msgstr "" #: ../../:581 msgid "" "A new ``heat_api`` container is created with all heat services running in it." " The previously implemented ``heat_apis_container`` and " "``heat_engine_container`` can be removed." msgstr "" #: ../../:336 msgid "" "A new ansible role (ansible-role-pki) is introduced to manage the creation " "of server certificates and certificate authorities. A self signed Root CA " "and Intermediate CA are created on the deploy host and are used to provide " "TLS for RabbitMQ, and with the default configuration also a self-signed " "server certificate for HAProxy. A set of new variables with the prefix " "openstack_pki_* are introduced which allow a deployer to customise and " "extend the set of certificate authorities which are created. Root " "certificate authorities are installed into the trust store of all hosts and " "containers allowing a complete trust chain to be formed across the " "deployment which has never previously been possible." msgstr "" #: ../../:2066 msgid "" "A new configuration parameter ``security_ntp_bind_local_interfaces`` was " "added to the security role to restrict the network interface to which " "chronyd will listen for NTP requests." msgstr "" #: ../../:1083 msgid "" "A new database called `nova_api` has been created. This database has its own " "user credentials and nova-manage db sync process. For the database password " "there is a new variable entry in `user_secrets.yml` called " "``nova_api_container_mysql_password``." msgstr "" #: ../../:1857 msgid "" "A new debug flag has been added to ``dynamic_inventory.py``. This should " "make it easier to understand what's happening with the inventory script, and " "provide a way to gather output for more detailed bug reports. See the " "developer docs for more details." msgstr "" #: ../../:580 msgid "" "A new driver type ``no_driver`` is defined in the os_ironic role which " "enables the ``no-console``, ``no-raid`` and ``no-inspect`` interfaces in the " "ironic configuration. This driver is added to the defaults set of drivers " "configured by the ironic ansible role." msgstr "" #: ../../:2189 msgid "" "A new global option to control all package install states has been " "implemented. The default action for all distribution package installations " "is to ensure that the latest package is installed. This may be changed to " "only verify if the package is present by setting ``package_state`` to " "``present``." msgstr "" #: ../../:625 origin/stable/newton>:2435 msgid "" "A new global variable has been created named ``openstack_domain``. This " "variable has a default value of \"openstack.local\"." msgstr "" #: ../../:518 msgid "" "A new key ``haproxy_default_backend`` can be defined for each service " "configured in the haproxy loadbalancer. Configuring this variable writes a " "value for the ``default_backend`` directive into the config for the service " "frontend. It can be useful to provide a specific default backend as a fall-" "through option when other backends are selected using ACLs, and to also " "allow the name of the default backend to be different from " "``haproxy_service_name``." msgstr "" #: ../../:545 msgid "" "A new key `haproxy_map_entries` is now able to be configured for each " "haproxy service definition to allow arbitrary entries to be placed in any " "number of haproxy map files which may then be referenced in other directives " "in the haproxy config file such as ``use_backend`` or ``http-request``. The " "complete map files are constructed from the fragments defined across all the " "service definitions and are assembled into a complete map file in " "alphanumeric sort order, or optionally with a user defined ordering." msgstr "" #: ../../:428 origin/stable/mitaka>:713 #: origin/stable/newton>:2687 msgid "" "A new nova admin endpoint will be registered with the suffix ``/v2.1/" "%(tenant_id)s``. The nova admin endpoint with the suffix ``/v2/" "%(tenant_id)s`` may be manually removed." msgstr "" #: ../../:3138 msgid "" "A new option `swift_pypy_archive` has been added to allow a pre-built pypy " "archive to be downloaded and moved into place to support swift running under " "pypy. This option is a dictionary and contains the URL and SHA256 as keys." msgstr "" #: ../../:3134 msgid "" "A new option `swift_pypy_enabled` has been added to enable or disable the " "pypy interpreter for swift. The default is \"false\"." msgstr "" #: ../../:29 stable/stein>:629 msgid "" "A new option has been added allowing deployers to disable any and all " "containers on a given host. The option `no_containers` is a boolean which, " "if undefined, will default to *false*. This option can be added to any host " "in the `openstack_user_config.yml` or via an override in `conf.d`. When this " "option is set to *true* the given host will be treated as a baremetal " "machine. The new option mirrors the existing environmental option `is_metal` " "but allows deployers to target specific hosts instead of entire groups." msgstr "" #: ../../:477 origin/stable/newton>:1528 msgid "" "A new option has been added to ``bootstrap-ansible.sh`` to set the role " "fetch mode. The environment variable ``ANSIBLE_ROLE_FETCH_MODE`` sets how " "role dependencies are resolved." msgstr "" #: ../../:318 stable/ussuri>:442 msgid "" "A new optional file /etc/openstack_deploy/user-role-requirements.yml is now " "available for a deployer to override individual entries in the upstream " "ansible-role-requirements file. This can be used to point to alternative " "repos containing local fixes, or to add supplementary ansible roles that are " "not specified in the standard ansible-role-requirements." msgstr "" #: ../../:444 msgid "" "A new override, `skyline_client_max_body_size`, has been introduced to " "support large image uploads via the Skyline dashboard. The default value of " "1100M supports upstream Ubuntu and Rocky Linux images, but can be increased " "to support larger images or decreased to encourage the use of the CLI." msgstr "" #: ../../:223 stable/yoga>:238 #: unmaintained/xena>:47 unmaintained/xena>:62 unmaintained/zed>:465 #: unmaintained/zed>:567 msgid "" "A new parameter `octavia_provider_network_mtu` is added to set the MTU to " "1500 by default. This is important for deployments which allow jumbo frames " "while setting the management to the standard Ethernet MTU. The MTU can be " "still changed at any point during the initial octavia deployment or with the " "`openstack network set --mtu` command line." msgstr "" #: ../../:360 msgid "" "A new parameter, `octavia_ovn_enabled`, is added to support the Octavia OVN " "provider driver. The Octavia OVN provider driver is an alternative to " "amphora and uses built-in support for load balancing withing OVN/OVS. The " "`ml2.ovn` Neutron plugin is required for this functionality. The OVN " "provider can be used during load balancer creation by specifying the `--" "provider ovn` argument for the `openstack loadbalancer create` command." msgstr "" #: ../../:913 msgid "" "A new playbook ``infra-journal-remote.yml`` to ship journals has been added. " "Physical hosts will now ship the all available systemd journals to the " "logging infrastructure. The received journals will be split up by host and " "stored in the `/var/log/journal/remote` directory. This feature will give " "deployers greater access/insight into how the cloud is functioning requiring " "nothing more that the systemd built-ins." msgstr "" #: ../../:206 msgid "" "A new playbook ``os-zun-install.yml`` has been added which will deploy the " "zun service to hosts assigned to the host group ``zun-infra_hosts``." msgstr "" #: ../../:216 origin/stable/ocata>:558 #: stable/pike>:1122 msgid "" "A new repository for installing modern erlang from ESL (erlang solutions) " "has been added giving us the ability to install and support modern stable " "erlang over numerous operating systems." msgstr "" #: ../../:1524 msgid "" "A new switch ``pip_install_build_packages`` is introduced to allow toggling " "compiler and development library installation. The legacy behavior of " "installing the compiler and development libraries is maintained as the " "switch is enabled by default." msgstr "" #: ../../:1324 origin/stable/ocata>:1575 msgid "" "A new task has been added to the \"os-lxc-container-setup.yml\" common-tasks " "file. This new task will allow for additional configurations to be added " "without having to restart the container. This change is helpful in cases " "where non-impacting config needs to be added or updated to a running " "containers." msgstr "" #: ../../:1506 msgid "" "A new task was added to disable ICMPv6 redirects per the requirements in V-" "38548. However, since this change can cause problems in running OpenStack " "environments, it is disabled by default. Deployers who wish to enable this " "task (and disable ICMPv6 redirects) should set " "``security_disable_icmpv6_redirects`` to ``yes``." msgstr "" #: ../../:71 stable/stein>:1112 msgid "" "A new value ``epel_gpg_keys`` can be overridden to use a different GPG key " "for the EPEL-7 RPM package repo instead of the vendored key used by default." msgstr "" #: ../../:377 msgid "" "A new variable ``centos_mirror_url`` is introduced to the openstack_hosts " "role to allow a single deployment wide variable to control the location of " "the centos package mirror." msgstr "" #: ../../:375 msgid "" "A new variable ``haproxy_stick_table`` can be defined to apply a customised " "stick-table to all backends on the loadbalancer. In addition, " "``haproxy_stick_table`` can be set in each service definition to have a " "customised stick-table for a particular backend." msgstr "" #: ../../:412 msgid "" "A new variable `openstack_hosts_apt_pinned_packages` is added which allows " "deployment wide apt pins to be defined in user_variables. The variable " "defaults to pinning the UCA repository to a priority lower than the Ubuntu " "repositories for any binary packages generated from the ceph source package. " "The intention is to ensure that Ceph packages are always installed from the " "Ubuntu repositories, or alternatively the official ceph repositories if the " "ceph_client role is run later against a host. The ceph packages for a " "particular openstack release may not be the same version as those expected " "by the rest of openstack-ansible so this change ensures consistency in the " "deployed ceph version." msgstr "" #: ../../:1040 msgid "" "A new variable called ``ceph_extra_components`` is available for the " "ceph_client role. Extra components, packages, and services that are not " "shipped by default by OpenStack-Ansible can be defined here." msgstr "" #: ../../:653 origin/stable/mitaka>:957 msgid "" "A new variable called ``lxc_container_cache_files`` has been implemented " "which contains a list of dictionaries that specify files on the deployment " "host which should be copied into the LXC container cache and what attributes " "to assign to the copied file." msgstr "" #: ../../:493 stable/queens>:640 msgid "" "A new variable has been added to allow a deployer to control the restart of " "containers from common-tasks/os-lxc-container-setup.yml. This new option is " "``lxc_container_allow_restarts`` and has a default of ``true``. If a " "deployer wishes to disable the auto-restart functionality they can set this " "value to ``false`` and automatic container restarts will be disabled. This " "is a complement to the same option already present in the " "lxc_container_create role. This option is useful to avoid uncoordinated " "restarts of galera or rabbitmq containers if the LXC container configuration " "changes in a way that requires a restart." msgstr "" #: ../../:168 origin/stable/mitaka>:373 msgid "" "A new variable has been added to allow a deployer to control the restart of " "containers via the handler. This new option is " "``lxc_container_allow_restarts`` and has a default of ``true``. If a " "deployer wishes to disable the auto-restart functionality they can set this " "value to ``false`` and automatic container restarts that are not absolutely " "required will be disabled." msgstr "" #: ../../:1450 msgid "" "A new variable has been added to allow a deployer to control the restart of " "containers via the handler. This new option is " "``lxc_container_allow_restarts`` and has a default of ``yes``. If a deployer " "wishes to disable the auto-restart functionality they can set this value to " "``no`` and automatic container restarts that are not absolutely required " "will be disabled." msgstr "" #: ../../:698 msgid "" "A new variable has been added which allows deployers to set the container " "technology OSA will use when running a deployment in containers. This new " "variable is ``container_tech`` which has a default value of \"lxc\"." msgstr "" #: ../../:685 stable/queens>:794 msgid "" "A new variable has been introduced into the ``os_tempest`` role named " "``tempest_image_downloader``. When set to ``deployment-host`` (which is the " "default) it uses the deployment host to handle the download of images to be " "used for tempest testing. The images are then uploaded to the target host " "for uploading into Glance." msgstr "" #: ../../:2339 msgid "" "A new variable is supported in the ``neutron_services`` dictionary called " "``service_conf_path``. This variable enables services to deploy their config " "templates to paths outside of /etc/neutron by specifying a directory using " "the new variable." msgstr "" #: ../../:451 msgid "" "A new variable nova_ironic_console_type is added to enable the deployment of " "one of the nova console proxies in the ironic_console ansible group. The " "only supported setting at this time is `disabled` or `serialconsole`." msgstr "" #: ../../:1688 msgid "" "A new variable, ``tempest_flavors``, has been added to the os_tempest role " "allowing users to define nova flavors to be during tempest testing." msgstr "" #: ../../:733 msgid "" "A new variable, ``tempest_roles``, has been added to the os_tempest role " "allowing users to define keystone roles to be during tempest testing." msgstr "" #: ../../:868 origin/stable/newton>:2576 msgid "" "A new version of keepalived will be installed on the haproxy nodes if the " "variable ``keepalived_use_latest_stable`` is set to ``True`` and more than " "one haproxy node is configured. The update of the package will cause " "keepalived to restart and therefore will cause the virtual IP addresses " "managed by keepalived to be briefly unconfigured, then reconfigured." msgstr "" #: ../../:368 msgid "A pre-existing PKI (Public Key Infrastructure) setup is required." msgstr "" #: ../../:3296 msgid "" "A self-signed certificate will now be generated by default when HAproxy is " "used as a load balancer. This certificate is used to terminate the public " "endpoint for Horizon and all OpenStack API services." msgstr "" #: ../../:896 origin/stable/newton>:3292 msgid "" "A sudoers entry has been added to the repo_servers in order to allow the " "nginx user to stop and start nginx via the init script. This is implemented " "in order to ensure that the repo sync process can shut off nginx while " "synchronising data from the master to the slaves." msgstr "" #: ../../:463 origin/stable/mitaka>:1161 msgid "" "A sudoers entry is added to the repo_servers to allow the nginx user to stop " "and start NGINX from the init script. This ensures that the repo sync " "process can shut off NGINX while synchronizing data from master to slaves." msgstr "" #: ../../:1832 msgid "" "A task was added that restricts ICMPv4 redirects to meet the requirements of " "V-38524 in the STIG. This configuration is disabled by default since it " "could cause issues with LXC in some environments." msgstr "" #: ../../:1498 msgid "" "A task was added to disable secure ICMP redirects per the requirements in V-" "38526. This change can cause problems in some environments, so it is " "disabled by default. Deployers can enable the task (which disables secure " "ICMP redirects) by setting ``security_disable_icmpv4_redirects_secure`` to " "``yes``." msgstr "" #: ../../:658 msgid "" "A typical OSA install will put the neutron and octavia queues on different " "vhosts thus preventing the event streamer from working While octavia is " "streaming to its own queue the consumer on the neutron side listens to the " "neutron queue. With a recent octavia enhancement a separate queue for the " "event streamer can be configured. This patch will set up the event streamer " "to post into the neutron queue using neutron's credentials. Thus reaching " "the consumer on the neutron-lbaas side and allowing for streaming." msgstr "" #: ../../:1123 stable/pike>:911 msgid "" "A variable named ``bootstrap_user_variables_template`` has been added to the " "bootstrap-host role so the user can define the user variable template " "filename for AIO deployments" msgstr "" #: ../../:288 current msgid "" "A web server for repo containers/hosts has been changed from Nginx to Apache." " This was made to reduce amount of services we manage with roles and to " "better align approaches and development vectors." msgstr "" #: ../../:110 origin/stable/mitaka>:239 msgid "" "AIDE initialization is now always run on subsequent playbook runs when " "``initialize_aide`` is set to ``yes``. The initialization will be skipped if " "AIDE isn't installed or if the AIDE database already exists." msgstr "" #: ../../:3337 msgid "" "AIDE initialization is now always run on subsequent playbook runs when " "``security_initialize_aide`` is set to ``yes``. The initialization will be " "skipped if AIDE isn't installed or if the AIDE database already exists." msgstr "" #: ../../:29 origin/stable/mitaka>:177 #: origin/stable/newton>:1514 msgid "" "AIDE is configured to skip the entire ``/var`` directory when it does the " "database initialization and when it performs checks. This reduces disk I/O " "and allows these jobs to complete faster." msgstr "" #: ../../:829 origin/stable/ocata>:1587 msgid "" "Add ``get_networks`` command to the neutron library. This will return " "network information for all networks, and fail if the specified ``net_name`` " "network is not present. If no ``net_name`` is specified network information " "will for all networks will be returned without performing a check on an " "existing ``net_name`` network." msgstr "" #: ../../:291 msgid "" "Add ``horizon_allowed_hosts`` to be able to configure django ALLOWED_HOSTS. " "The default is still the same as it was but you can create a list of allowed " "hosts in ``/etc/openstack_deploy/user_variables.yml``. to set the correct " "value, see https://docs.djangoproject.com/en/dev/ref/settings/#allowed-hosts " "for more details." msgstr "" #: ../../:419 msgid "" "Add ``keepalived_instances_overrides`` variable, which allows passing custom " "options for ``keepalived_instances``." msgstr "" #: ../../:439 msgid "" "Add ``mistral_api_use_uwsgi`` which allows running mistral-api service " "without uWSGI (set to `true` by default)." msgstr "" #: ../../:224 stable/2023.2>:409 #: unmaintained/zed>:31 msgid "" "Add ``rabbitmq_additional_config`` to be able to add additional " "configuration e.g. to add configuration for plugins." msgstr "" #: ../../:413 msgid "" "Add ability to set the environment variable ``RABBITMQ_USE_LONGNAMES`` via " "the ``rabbitmq-env.conf`` to be able to use the FQDN of a node. By default " "this will be set to ``false``, the default value also set by RabbitMQ." msgstr "" #: ../../:3345 msgid "" "Add architecture-specific locations for percona-xtrabackup and qpress, with " "alternate locations provided for ppc64el due to package inavailability from " "the current provider." msgstr "" #: ../../:396 msgid "" "Add merge with ``haproxy__overrides`` variables (e.g.: " "``haproxy_cloudkitty_api_service``), which can be used for partial overrides " "for haproxy services configurations." msgstr "" #: ../../:486 msgid "" "Add parameters ``galera_mariadb_backups_full_randomized_delay_sec`` and " "``galera_mariadb_backups_incremental_randomized_delay_sec`` to run the " "systemd timers for mariabackup with a randomized delay. This is useful if " "backups are done of more than one node to avoid running it at the exact same " "time." msgstr "" #: ../../:1499 stable/pike>:1503 msgid "Add support for Ubuntu on IBM z Systems (s390x)." msgstr "" #: ../../:763 origin/stable/ocata>:1623 msgid "Add support for ``neutron`` as an ``enabled_network_interface``." msgstr "" #: ../../:106 current stable/2024.1>:42 msgid "" "Add support for ceilometer consumption of magnum notifications. " "Notifications will be consumed automatically when magnum_ceilometer_enabled " "is True." msgstr "" #: ../../:223 msgid "" "Add support for encryption of databases. This is disabled by default and can " "be enabled by setting ``galera_mariadb_encryption_enabled`` to ``true``. For " "now only the ``file_key_management`` encryption plugin is supported. You can " "override enryption options with ``galera_encryption_overrides``. The role " "creates ``galera_db_encryption_keys`` for you, if they're not specified. To " "specify your on encryption keys, provide them like this." msgstr "" #: ../../:751 origin/stable/ocata>:1172 #: stable/pike>:1073 msgid "" "Add support for the cinder v3 api. This is enabled by default, but can be " "disabled by setting the ``cinder_enable_v3_api`` variable to ``false``." msgstr "" #: ../../:421 msgid "" "Add the abbility to configure the logging options with the variable " "``rabbitmq_log`` of the rabbitmq-server using key-value pairs. The default " "values for journald (true) and file (false) are keept but more options (see " "https://www.rabbitmq.com/logging.html) can be configured now." msgstr "" #: ../../:273 msgid "" "Add the launchpad and bugzilla keys in tempest_test_blacklist ansible " "variable. Developers must have a way to trackdown why a test was inserted in " "the skiplist, and one of the ways is through bugs. This feature add the " "information regarding it in the list of skipped tests on os_tempest" msgstr "" #: ../../:14 stable/stein>:120 stable/train>:230 #: stable/ussuri>:304 msgid "" "Add the possibility to disable openrc v2 download in the dashboard. new var " "``horizon_show_keystone_v2_rc`` can be set to ``False`` to remove the entry " "for the openrc v2 download." msgstr "" #: ../../:332 msgid "" "Add the possibility to have a haproxy_frontend_raw entry to control haproxy " "config for the frontend, the entry will be literally copied in to the " "service. You can set a list under the key `haproxy_frontend_raw`" msgstr "" #: ../../:399 msgid "" "Add the possibility to use python-tempestconf tool to generate tempest.conf " "file, rather than use the role template." msgstr "" #: ../../:732 stable/train>:262 stable/ussuri>:368 msgid "" "Added 2 new varibles for all groups - `oslomsg_notify_policies` and " "`oslomsg_rpc_policies`. These variables contain default rabbitmq policies, " "which will be applied for every rabbitmq vhost. As for now they will enable " "[HA mode](https://www.rabbitmq.com/ha.html) for all vhosts. If you would " "like to disable HA mode just set these variables to empty lists inside your " "`user_config.yml`" msgstr "" #: ../../:457 msgid "" "Added Trove guest specific variables to be able to use standalone rabbitmq " "along with defaulting behaviour to enable guests to use " "``trove_container_net_name`` for rabbitmq servers:" msgstr "" #: ../../:1046 msgid "" "Added ``cinder_auth_strategy`` variable to configure Cinder's auth strategy " "since Cinder can work in noauth mode as well." msgstr "" #: ../../:356 origin/stable/mitaka>:585 #: origin/stable/newton>:2088 msgid "" "Added ``horizon_apache_custom_log_format`` tunable to the os-horizon role " "for changing CustomLog format. Default is \"combined\"." msgstr "" #: ../../:404 msgid "" "Added ``nova_console_proxy_types`` list variable for use when deployments " "have a mix of nova console types for different compute nodes." msgstr "" #: ../../:375 msgid "" "Added ``openstack-resources.yml`` playbook that aims to handle creation and " "futher adjustment of OpenStack resources. It relies heavily on Ansible " "collection for OpenStack. The main goal of the playbook to provide a unified " "method of creating and managing common resources, like images, flavors, " "compute aggregates, networks, etc. Playbook can consume following variables, " "that are provided to simmilar ones in ``openstack.osa.openstack_resources`` " "role:" msgstr "" #: ../../:317 msgid "" "Added ``zookepeer`` role which deploys zookeeper cluster that can be used as " "a coordination driver for services like cinder, designate, octavia, etc. For " "deployment you need to specify ``coordination_hosts`` in your conf.d or " "openstack_user_config.yml and run ``zookeeper-install.yml`` playbook." msgstr "" #: ../../:392 msgid "" "Added `systemd_overrides` and `systemd_overrides_only` keys to the " "`systemd_services` dictionary. With help of the `systemd_overrides` you can " "define systemd native overrides, which will be placed in /etc/systemd/system/" "service_name.service.d/overrides. `systemd_overrides_only` shows that no " "service_name.service should not be created and create only overrides." msgstr "" #: ../../:14 current msgid "" "Added a bash auto-completion script which will assist with running openstack-" "ansible commands. It is placed as ``/etc/bash_completion.d/openstack-" "ansible``, so please make sure your .bashrc is configured to load completion " "scripts from there. As of today it can help with completing playbook names, " "which are part of collections, Ansible native flags and hosts in case of ``--" "limit`` flag is used." msgstr "" #: ../../:1796 msgid "" "Added a boolean var `haproxy_service_enabled` to the " "`haproxy_service_configs` dict to support toggling haproxy endpoints on/off." msgstr "" #: ../../:949 msgid "" "Added a function in dynamic_inventory.py to improve the identification of " "incorrect settings inside the user config files." msgstr "" #: ../../:29 origin/stable/newton>:1800 msgid "" "Added a new ``haproxy_extra_services`` var which will allow extra haproxy " "endpoint additions." msgstr "" #: ../../:102 current msgid "" "Added a new variable ``octavia_security_group_additional_rules`` that allows " "configuration of additional security group rules for Amphora." msgstr "" #: ../../:388 msgid "" "Added a support for both Credential Provider Mechanisms(dynamic credentials " "and pre-provisioned credentials)." msgstr "" #: ../../:195 current msgid "Added a support for deployment on Ubuntu 24.04 LTS (Noble Numbat)." msgstr "" #: ../../:124 current msgid "" "Added a variable ``cloudkitty_storage`` that allows to easily define storage " "configuration options for Cloudkitty." msgstr "" #: ../../:29 stable/ussuri>:118 msgid "" "Added deployment of the `keystone_auth_default_policy.json` file for Magnum." msgstr "" #: ../../:243 msgid "" "Added experimental support for Debian Bullseye. Deployment path with " "`distro` packages is not available at the moment." msgstr "" #: ../../:348 msgid "" "Added extra variables to Neutron role for Availability Zones configuration:" msgstr "" #: ../../:283 msgid "Added extra variables to allow control Blazar integration with Nova:" msgstr "" #: ../../:324 msgid "" "Added following variables that are designed to control coordination " "configuration. Reasonable defaults are set for services to work out of the " "box." msgstr "" #: ../../:427 msgid "" "Added following variables to control endpoint types that trove will search " "in the catalog:" msgstr "" #: ../../:440 msgid "" "Added following variables to control when to add specific service blocks to " "the config file and enable support for these services:" msgstr "" #: ../../:449 msgid "Added following variables to ease designate integration with trove:" msgstr "" #: ../../:414 msgid "" "Added guest image upload functionality into Trove role. In order to use this " "functionality, you need to define ``trove_guestagent_images`` variable which " "may contain list of images that are required for upload and set required " "tags for them." msgstr "" #: ../../:360 origin/stable/mitaka>:589 #: origin/stable/newton>:2092 msgid "" "Added keystone_apache_custom_log_format tunable for changing CustomLog " "format. Default is \"combined\"." msgstr "" #: ../../:556 msgid "" "Added new ``management_ip`` option, that can be defined in conf.d or " "openstack_user_config.yml files for hosts. It might be useful if SSH network " "for accessing hosts differs from OpenStack management network. Option " "``management_ip`` should be set to an IP address that represents management " "network on the host, while ``ip`` option remains to represent SSH address " "that will be used to access host by Ansible." msgstr "" #: ../../:359 msgid "" "Added new keys ``haproxy_frontend_h2`` and ``haproxy_backend_h2`` per " "service definition to enable HTTP/2 for a specified service." msgstr "" #: ../../:1419 msgid "" "Added new parameter ```cirros_img_disk_format`` to support disk formats " "other than qcow2." msgstr "" #: ../../:185 stable/ussuri>:202 msgid "" "Added new parameter ``tempest_services`` for setting " "tempest_service_available_{service_name} var automatically." msgstr "" #: ../../:613 msgid "" "Added new varaibles that allow users to configure extra systemd services, " "networks or mounts on openstack hosts. While services and mounts can be " "configured on any targeted hosts, networks will be created only on bare " "metal nodes. In order to configure extra networks in containers please " "reffer to ``openstack_user_config.yml`` documentation. A list of new " "variables that were added:" msgstr "" #: ../../:266 msgid "" "Added new variable ``blazar_nova_aggregate_name`` that allows to control " "Nova aggregate name for Blazar. When is not False (default value " "'freepool'), aggregate in topic will be created during deployment." msgstr "" #: ../../:49 unmaintained/victoria>:336 #: unmaintained/wallaby>:274 msgid "" "Added new variable ``haproxy_hatop_install``, that allows to conditionally " "enable or disable hatop installation." msgstr "" #: ../../:370 msgid "" "Added new variable ``octavia_enabled_provider_agents`` that allows to enable " "Provider Agents for Octavia." msgstr "" #: ../../:420 msgid "" "Added new variable ``rabbitmq_queue_replication`` that allows to control if " "any redundancy features (like quorum queues or classic mirrored queues) will " "be used. By default it is set to ``True``." msgstr "" #: ../../:937 msgid "" "Added new variable ``tempest_endpoint_type`` to avoid having endpoint type " "hardcoded in tempest.conf" msgstr "" #: ../../:1563 msgid "" "Added new variable ``tempest_image_file``. This variable replaces the hard-" "coded value for the ``img_file`` setting in tempest.conf.j2. This will " "allow users to specify images other than cirros." msgstr "" #: ../../:1567 msgid "" "Added new variable ``tempest_img_disk_format``. This variable replaces " "``cirros_img_disk_format``." msgstr "" #: ../../:1555 msgid "Added new variable ``tempest_img_name``." msgstr "" #: ../../:1559 msgid "" "Added new variable ``tempest_img_url``. This variable replaces " "``cirros_tgz_url`` and ``cirros_img_url``." msgstr "" #: ../../:892 origin/stable/ocata>:1811 #: stable/pike>:1512 msgid "" "Added new variable ``tempest_volume_backend_names`` and updated templates/" "tempest.conf.j2 to point ``backend_names`` at this variable" msgstr "" #: ../../:387 msgid "" "Added new variable haproxy_stick_table_enabled to haproxy_service_configs, " "that allows you to conditionally enable or disable the default stick-table." msgstr "" #: ../../:299 msgid "" "Added new variables `barbican_backends_config` and `barbican_plugins_config` " "along with barbican.conf cleanup to support multibackend scenario and more " "handy Barbican backends configuration." msgstr "" #: ../../:393 msgid "" "Added new variables to os_neutron role that allow to adjust connection to " "OVS manager:" msgstr "" #: ../../:379 msgid "" "Added option to be able to mount s3fs with systemd as shared filesystem. " "Type should be stated as 'fuse.s3fs', and extra key 'credentials' should be " "set for systemd_mounts. S3 url should be placed in the options. Please " "follow https://github.com/s3fs-fuse/s3fs-fuse#examples for docs regarding " "s3fs." msgstr "" #: ../../:506 msgid "" "Added option to periodically clean-up deleted records from Cinder database. " "For this purpose a new service``cinder-purge-deleted`` was introduced. It " "will be called periodically using corresponsive systemd timer on the first " "cinder-api host." msgstr "" #: ../../:594 msgid "" "Added option to periodically clean-up deleted records from Nova database. " "Having a lot of records for the deleted instances affects service " "performance. With that 2 new services are being introduced: ``nova-archive-" "deleted`` and ``nova-purge-deleted`` that will be called periodically using " "corresponsive systemd timers on the first nova-conductor host." msgstr "" #: ../../:2281 msgid "Added playbook for deploying Rally in the utility containers" msgstr "" #: ../../:229 msgid "" "Added possibility to override ceph.conf partially by defining " "`ceph_client_ceph_conf_overrides` variable. It uses regular format of " "OpenStack-Ansible overrides. From now on, config_template plugin should be " "present for ansible." msgstr "" #: ../../:500 msgid "" "Added possibility to source environment variables from a user file that will " "have prescedence over all environemnt variables loaded after openstack-" "ansible.rc and have prescedence over all variables defined there By default " "path to the user file is ``/etc/openstack_deploy/user.rc``." msgstr "" #: ../../:315 msgid "" "Added property protection configuration, managed with new variables: " "``glance_property_protection_file_overrides`` (should be configured for a " "configuration to run, look in Default variables for an example), " "``glance_property_protection_rule_format``, " "``glance_property_protection_file``." msgstr "" #: ../../:401 msgid "" "Added sockets key to configure systemd-sockets for the systemd service." msgstr "" #: ../../:1424 msgid "" "Added storage policy so that deployers can override how to store the logs. " "``per_host`` stores logs in a sub-directory per host. ``per_program`` stores " "logs in a single file per application which facilitates troubleshooting easy." "" msgstr "" #: ../../:427 msgid "" "Added support for RabbitMQ quorum queues. Quorum queues are disabled by " "default. Followingvariables were implemented to control the behaviour:" msgstr "" #: ../../:1631 msgid "" "Added support for ironic-OneView drivers. Check the documentation on how to " "enable them." msgstr "" #: ../../:1129 msgid "" "Added support for specifying GID and UID for cinder system user by defining " "``cinder_system_user_uid`` and ``cinder_system_group_gid``. This setting is " "optional." msgstr "" #: ../../:99 stable/ussuri>:325 msgid "" "Added support for using mod_auth_openidc instead of shibboleth as a service " "provider for supporting users who have a preference to use OIDC for " "federation. Mod_auth_openidc is the apache module that is recommended in the " "keystone documentation for implementing openidc. Added a variable to called " "apache_mod to keystone_sp, if left undefined shibboleth will continue to be " "installed by default provided keystone_sp is not empty. Mod_auth_openidc " "will not be installed unless it is spelled correctly, any misspellings will " "result in a shibboleth install. Note that installing shibboleth on Debian " "based metal distro deployments may break services that depend on libcurl4, " "as shib2 requires libcurl3, and they are unable to coexist. This can be " "resolved when there is a shib3 package available in a future release of " "Ubuntu/Debian. There is currently no support for simultaneous use of " "shibboleth2 and mod_auth_openidc." msgstr "" #: ../../:246 msgid "Added support to deploy Skyline dashboard." msgstr "" #: ../../:1412 msgid "" "Added the ``lxc_container_recreate`` option, which will destroy then " "recreate LXC containers. The container names and IP addresses will remain " "the same, as will the MAC addresses of any containers using the " "``lxc_container_fixed_mac`` setting." msgstr "" #: ../../:274 stable/queens>:553 msgid "" "Added the ability to configure vendor data for Nova in order to be able to " "push things via the metadata service or config drive." msgstr "" #: ../../:238 msgid "" "Added variable ``blazar_policy_overrides`` that aims to allow deploying " "policy.yaml file with provided overrides for Blazar service." msgstr "" #: ../../:370 msgid "" "Added variable ``ceph_cluster_name`` that allows ceph_client role to work " "with clusters that have non-default cluster name. It defaults to ``ceph``." msgstr "" #: ../../:75 stable/2023.2>:96 stable/2024.1>:256 msgid "" "Added variable ``cinder_manage_volume_types`` that allows to skip volume " "type creation and management by os_cinder role." msgstr "" #: ../../:303 msgid "" "Added variable ``galera_init_overrides`` that can be leveraged to override " "default set of systemd unit file for mariadb. This also brings requirement " "of `systemd_service `_ role." msgstr "" #: ../../:309 msgid "" "Added variable ``galera_install_method`` to control whether external " "repositories should be configured or role should attempt to install from " "distro default ones instead." msgstr "" #: ../../:269 msgid "" "Added variable ``glance_image_cache_stall_time`` to control glance cache " "time if needed. Defaults to ``86400``." msgstr "" #: ../../:353 msgid "" "Added variable ``haproxy_tls_vip_binds`` that allows to fully override " "haproxy bindings, that are generated by the role if some assumptions are not " "valid for some scenarios. It is list of mappings, that include address and " "interface. Interface key is optional and can be ommited." msgstr "" #: ../../:342 msgid "" "Added variable ``ironic_user_driver_types`` that allow to extend the default " "``ironic_driver_types`` as well as override existing default records." msgstr "" #: ../../:405 msgid "" "Added variable ``keepalived_sysctl_tcp_retries`` that allows to control " "number of retries kernel will make to give up on connection. It controls net." "ipv4.tcp_retries2 sysctl setting which default value of which is 15. Default " "value of ``keepalived_sysctl_tcp_retries`` is 8, so VIP failover time will " "be ~1min. Setting ``keepalived_sysctl_tcp_retries`` to 0 will remove " "mentioned sysctl setting." msgstr "" #: ../../:574 msgid "" "Added variable ``lxc_net_bridge_type`` that allows to control type for " "lxcbr0: it can be set either to linuxbridge or openvswitch as of today. " "Default value is linuxbridge that preserves previous behaviour." msgstr "" #: ../../:302 msgid "" "Added variable ``nova_cell_force_update`` that can be set to True during " "runtime to force update cell records. This might be useful in case of " "password rotation for DB users for cell0 or any other changes in connection " "configuration." msgstr "" #: ../../:129 current msgid "" "Added variable ``nova_ssh_custom_config`` which allows to apply extra " "configuration for SSH connection established by Nova Compute while " "perfroming offline migrations or resizes. Can be leveraged to define a " "custom SSH port or ProxyJump." msgstr "" #: ../../:118 current stable/2024.1>:48 msgid "" "Added variable ``openstack_apache_mpm_backend`` which is used as a default " "value by service-specific variables to define used Apache MPM across the " "deployment. Defaults MPM ``event`` will be used if not overriden." msgstr "" #: ../../:382 msgid "" "Added variable ``openstack_host_custom_hosts_records`` that allows deployer " "to add custom records to /etc/hosts file. It's structure a simple list where " "each element is a string wich should be placed to /etc/hosts." msgstr "" #: ../../:378 stable/2023.2>:381 msgid "" "Added variable ``openstack_host_journald_config`` that allows to supply " "arbitrary configuration for systemd-journald as a mapping." msgstr "" #: ../../:372 msgid "" "Added variable ``openstack_systemd_global_overrides`` that defines some " "defaults for all systemd services. It will be deployed to all hosts and " "containers, but can be controlled with group_vars or host_vars as well if " "needed." msgstr "" #: ../../:338 msgid "" "Added variable ``rabbitmq_erlang_extra_args`` that allows to define extra " "arguments for erlang." msgstr "" #: ../../:525 msgid "" "Added variable ``rabbitmq_init_overrides`` that allows to control rabbitmq " "overrides that will be applied to the systemd service. Previously values " "were hardcoded without possibility for override." msgstr "" #: ../../:531 unmaintained/wallaby>:95 #: unmaintained/xena>:294 msgid "" "Added variable ``rabbitmq_manage_hosts_entries`` that controls if " "rabbitmq_server role will attempt to adjust /etc/hosts file" msgstr "" #: ../../:216 unmaintained/wallaby>:264 msgid "" "Added variable ``security_rhel7_enable_aide`` that is designed to avoid " "installation and initialization of the aide related STIGs" msgstr "" #: ../../:421 msgid "" "Added variable ``trove_management_security_groups`` to set list of security " "groups that will be set for management interface of Trove guest instances." msgstr "" #: ../../:656 msgid "" "Added variable ``venv_build_group`` that allows to provide an ansible group " "name, that will be used to find wheels build targets. Default is `repo_all`" msgstr "" #: ../../:473 msgid "" "Added variable ``zun_policy_overrides`` that aims to allow deploying policy." "yaml file with provided overrides for Zun service." msgstr "" #: ../../:306 msgid "" "Added variable `barbican_user_libraries` for deploying custom lib files from " "deploy host to barbican continers that might be required for PKCS#11 or " "other plugins." msgstr "" #: ../../:374 msgid "" "Added variable `ceilometer_pipeline_default_file_path` to be able to define " "user provided pipeline file like for other ceilometer configs. In order to " "avoid deployment of pipeline.yaml you can set in your user variables: " "`_ceilometer_pipeline_yaml_overrides: {}`" msgstr "" #: ../../:341 msgid "" "Added variable `haproxy_ssl_letsencrypt_certbot_challenge` which is default " "to `http-01`. As for now really tested in only `http-01` but we keep door " "open for adding support for more challanges, like `dns-01`. For `http-01` " "all required arguments are passed, but oth other challanges you might want " "to use `haproxy_ssl_letsencrypt_setup_extra_params` to pass missing " "arguments." msgstr "" #: ../../:225 msgid "" "Added variable `horizon_bind_address` which defines IP address where Apache " "will listen on `horizon_listen_ports`" msgstr "" #: ../../:425 msgid "" "Added variable `horizon_policy_overrides` which allows to customize horizon " "specific policies. As we don't want to carry and maintain horizon policies " "with OSA, they're retrieved from horizon hosts and adjusted in-place, which " "means that they won't rollback in case you just remove override. " "`horizon_policy_overrides` has also non-standart format, as it's nested " "dictionary, where 1st level key represents service which policy needs to be " "overriden, and it's value is normal policy override format." msgstr "" #: ../../:24 stable/ussuri>:113 #: unmaintained/victoria>:357 msgid "" "Added variable `nova_scheduler_extra_filters` which allows to extend list of " "defaulted `nova_scheduler_default_filters`" msgstr "" #: ../../:396 msgid "" "Added variable `uwsgi_ini_overrides` and `uwsgi_init_config_overrides` which " "might be useful if deployer wants to adjust some uwsgi parameter for all " "services, so that there was no necessity to use bunch of the overrides for " "each service." msgstr "" #: ../../:361 msgid "" "Added variable `uwsgi_tls` which when added to a `uwsgi_services` item " "enables TLS for that service. `uwsgi_tls` is a dict and should contain 2 " "keys `crt` and `key`, which define the path to the certificate and its " "corresponding key respectively. The certificate file should contain any " "intermediate certificates required by a client to verify trust." msgstr "" #: ../../:367 stable/2023.2>:327 stable/yoga>:63 #: unmaintained/zed>:104 msgid "" "Added variables ``galera_backups_full_init_overrides`` and " "``galera_backups_increment_init_overrides`` that can be leveraged to " "override default set of systemd unit file for mariadb backups. Similar to " "change I7b3b0f4da047f82a49266ef57fba2fbaa24cebdc ." msgstr "" #: ../../:347 msgid "" "Added variables ``haproxy_bind_external_lb_vip_interface`` and " "``haproxy_bind_internal_lb_vip_interface`` that allows deployer to bind " "haproxy on the specific interface only." msgstr "" #: ../../:310 msgid "" "Added variables ``masakari_monitor_corosync_multicast_ports`` and " "``masakari_monitor_corosync_ipmi_check`` that allow to define ports used by " "corosync service and to enable IPMI checks in case ipmi RA is set in " "pacemaker." msgstr "" #: ../../:112 current msgid "" "Added variables ``octavia_gigabytes`` and ``octavia_num_volumes`` to control " "quota defenitions for the project where Octavia Amphorae is being spawned." msgstr "" #: ../../:635 msgid "" "Added variables ``pki_handler_ca_changed``, ``pki_handler_cert_changed`` and " "``pki_handler_cert_installed`` that control name of meta handlers which role " "triggers when included. This might be useful if multiple roles that leverage " "the pki role are inlcuded withing same playbook and you want to have better " "control over handler execution." msgstr "" #: ../../:453 msgid "" "Added variables ``systemd_run_dir`` and ``systemd_lock_dir`` that allows to " "control run and lock path for directories that will be used by systemd " "services. Variables should not include service name since it will be added " "by default at the end of the provided path. These variables could be also " "defined as keys inside ``systemd_services`` and this will have prescedence " "over default behaviour." msgstr "" #: ../../:629 msgid "" "Added variables ``venv_pip_build_env`` and ``venv_pip_install_env`` that " "allows to set extra environment variables during wheels build or venv " "installation." msgstr "" #: ../../:34 stable/ussuri>:262 #: unmaintained/victoria>:322 msgid "" "Added variables `cinder_active_active_cluster` and " "`cinder_active_active_cluster_name` that allow to explicitly enable or " "disable active/active feature, and set cluster name." msgstr "" #: ../../:392 msgid "" "Added variables `horizon_session_engine` and `horizon_session_caches` which " "can be used to configure horizon session engine and a backend for it." msgstr "" #: ../../:124 stable/ussuri>:308 msgid "" "Added variables `magnum_cluster_templates` and `magnum_flavors` which allow " "deployers to define coe cluster template and nova flavors creation during " "role execution. These variables may contain list of resources to add. All " "keys supported by appropriate ansible modules may be passed as items in the " "list." msgstr "" #: ../../:148 current stable/2024.1>:54 msgid "Added variables to better control SSH keypair generation for Octavia:" msgstr "" #: ../../:491 origin/stable/newton>:2580 msgid "" "Adding a new nova.conf entry, live_migration_uri. This entry will default to " "a ``qemu-ssh://`` uri, which uses the ssh keys that have already been " "distributed between all of the compute hosts." msgstr "" #: ../../:87 stable/stein>:218 msgid "" "Adding support for Mistral to be built as part of the repo build process." msgstr "" #: ../../:91 stable/stein>:222 msgid "" "Adding the ``os-mistral-install.yml`` file to deploy mistral to hosts tagged " "with hostgroup ``mistral_all``" msgstr "" #: ../../:1756 origin/stable/ocata>:1563 msgid "" "Additional libvirt ceph client secrets can be defined to support attaching " "volumes from different ceph clusters." msgstr "" #: ../../:341 msgid "" "Additional user-specified username and password pairs can now be set up " "during the Galera installation process by defining them in the " "'galera_additional_users' list." msgstr "" #: ../../:509 msgid "" "Additional variables are available when MariaDB is configured to use TLS, " "enabled by setting ``galera_use_ssl`` to ``true``. " "``galera_require_secure_transport`` to require that all client connections " "are encrypted, defaulting to false. ``galera_tls_version`` to provide a list " "of accepted TLS protocols, defaulting to 'TLSv1.2,TLSv1.3'." msgstr "" #: ../../:1085 origin/stable/ocata>:1567 msgid "" "Additional volume-types can be created by defining a list named " "``extra_volume_types`` in the desired backend of the variable(s) " "``cinder_backends``" msgstr "" #: ../../:466 msgid "" "Adds a 'zun-docker-cleanup' script to the Zun compute virtualenv which can " "be used to clean up cached Docker images held on compute hosts. This can be " "run on a timer by setting the 'zun_docker_prune_images' variable or executed " "manually by adding '--force' to the script." msgstr "" #: ../../:641 msgid "" "Adds a new flag to enable Octavia V2 API (disabled by default) to facilitate " "to run Octavia stand alone (without Neutron)" msgstr "" #: ../../:645 msgid "" "Adds a new flag to toggle Octavia V1 API (the API needed to run in " "conjunction with Neutron) and enables it by default." msgstr "" #: ../../:917 msgid "" "Adds a way for the system to automatically create the Octavia management " "network if octavia_service_net_setup is enabled (DEFAULT). Additional " "parameters can control the setup." msgstr "" #: ../../:895 msgid "" "Adds iptables rules to block taffic from the octavia managment network to " "the octavia container for both ipv4 and ipv6." msgstr "" #: ../../:414 msgid "" "Adds new variable `tempest_tempestconf_profile_extras` which allows to " "extend `tempest_tempestconf_profile` dictionary without need to override all " "existing keys. `tempest_tempestconf_profile_extras` has presedence over " "`tempest_tempestconf_profile`. For example, it may be used to define extra " "image or it's format." msgstr "" #: ../../:426 stable/2023.2>:386 stable/yoga>:76 #: unmaintained/zed>:149 msgid "" "Adds optional compression for backups created with mariabackup. Adds two new " "CLI parameters to the mariabackup script that are used to enable compression " "and to choose a compression tool." msgstr "" #: ../../:921 msgid "" "Adds support for glance-image-id and automatic uploading of the image if " "octavia_amp_image_upload_enabled is True (Default is False). This is mostly " "tp work around the limitations of Ansible's OpenStack support and should not " "be used in prodcution settings. Instead refer to the documentation to upload " "images yourself." msgstr "" #: ../../:1434 msgid "" "Adds support for the horizon ironic-ui dashboard. The dashboard will be " "automatically enabled if any ironic hosts are defined." msgstr "" #: ../../:1442 msgid "" "Adds support for the horizon magnum-ui dashboard. The dashboard will be " "automatically enabled if any magnum hosts are defined." msgstr "" #: ../../:549 stable/rocky>:468 msgid "" "Adds support for the horizon octavia-ui dashboard. The dashboard will be " "automatically enabled if any octavia hosts are defined. If both Neutron " "LBaaSv2 and Octavia are enabled, two Load Balancer panels will be visible in " "Horizon." msgstr "" #: ../../:1794 msgid "" "Adds support for the horizon trove-ui dashboard. The dashboard will be " "automatically enabled if any trove hosts are defined." msgstr "" #: ../../:497 msgid "" "Adds the ``subnet_dns_publish_fixed_ip`` option extension in ml2 plugin. The " "subnet-dns-publish-fixed-ip extension adds a new attribute to the definition " "of the subnet resource. When set to true it will allow publishing DNS " "records for fixed IPs." msgstr "" #: ../../:290 stable/2023.2>:294 #: stable/2024.1>:717 unmaintained/zed>:41 msgid "" "After adding ``localhost`` to inventory explicitly this resulted in " "potential FQDN change due to adding a record for localhost into managed " "block inside ``/etc/hosts`` file. This is now fixed and record for ``127.0.0." "1`` will be removed from managed by Ansible blocks inside /etc/hosts file." msgstr "" #: ../../:808 msgid "" "After haproxy base service was added, dummy letsencrypt service is no longer " "needed for deployments without horizon and should be removed." msgstr "" #: ../../:102 stable/pike>:169 #: stable/queens>:395 stable/rocky>:959 msgid "" "All OSA releases earlier than 17.0.5, 16.0.4, and 15.1.22 will fail to build " "the rally venv due to the release of the new cmd2-0.9.0 python library. " "Deployers are encouraged to update to the latest OSA release which pins to " "an appropriate version which is compatible with python2." msgstr "" #: ../../:578 msgid "" "All cinder container services are consolidated into a single " "``cinder_api_container``. The previously implemented " "``cinder_scheduler_container`` can be removed." msgstr "" #: ../../:468 stable/2023.2>:605 msgid "" "All compute nodes are not added as OVN gateways by default and ``network-" "gateway_hosts`` definition is respected." msgstr "" #: ../../:587 msgid "" "All nova services are consolidated into the ``nova_api_container`` and the " "rest of the nova containers can be removed." msgstr "" #: ../../:1673 msgid "" "All of the database and database user creates have been removed from the " "roles into the playbooks. This allows the roles to be tested independently " "of the deployed database and also allows the roles to be used independently " "of infrastructure choices made by the integrated OSA project." msgstr "" #: ../../:69 origin/stable/mitaka>:206 #: origin/stable/newton>:3019 msgid "" "All of the discretionary access control (DAC) auditing is now disabled by " "default. This reduces the amount of logs generated during deployments and " "minor upgrades. The following variables are now set to ``no``:" msgstr "" #: ../../:91 current msgid "" "All playbooks for OpenStack-Ansible were moved under openstack.osa " "collection, which is being installed as a part of bootstrap-ansible.sh " "process. We left playbooks under their original names and locations for " "backwards compatability, though they are just importing corresponsive " "playbooks from the collection." msgstr "" #: ../../:2935 msgid "" "All roles always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``package_state`` should be set to " "``present``." msgstr "" #: ../../:306 stable/ussuri>:430 msgid "" "All roles are migrated from usage of regular log files to systemd-journald" msgstr "" #: ../../:581 msgid "" "All supported operating systems now build their LXC images locally on the " "lxc container hosts rather than relying on external pre-built base images. " "debootstrap and dnf are used on debian and Centos variants respectively. All " "variables controlling the download of images have been removed from the " "lxc_hosts role, and a new override, lxc_apt_mirror is added to allow local " "mirrors to be specified for debootstrap. Centos systems will use the mirror " "configuration already present on the host when building the container rootfs " "with dnf." msgstr "" #: ../../:259 msgid "" "All the ocata versions 15.1.15 and before use mariadb-server 10.1 with no " "minor version frozen. The latest version, 10.1.31, has presented problems " "with the state transfer for multi-node environments when the variable " "``galera_wsrep_sst_method`` is set to ``xtrabackup-v2`` (the default value). " "This causes a new cluster to fail, or an existing cluster to be unable to " "transfer state when a node is rebooted." msgstr "" #: ../../:394 msgid "" "All the pike versions 16.0.7 and before use mariadb-server 10.1 with no " "minor version frozen. The latest version, 10.1.31, has presented problems " "with the state transfer for multi-node environments when the variable " "``galera_wsrep_sst_method`` is set to ``xtrabackup-v2`` (the default value). " "This causes a new cluster to fail, or an existing cluster to be unable to " "transfer state when a node is rebooted." msgstr "" #: ../../:589 msgid "" "All trove services have been consolidated into the ``trove_api_container``. " "The previously implemented ``trove_conductor_container`` and " "``trove_taskmanager_container`` can be removed." msgstr "" #: ../../:3150 msgid "" "All variables in the security role are now prepended with ``security_`` to " "avoid collisions with variables in other roles. All deployers who have used " "the security role in previous releases will need to prepend all security " "role variables with ``security_``." msgstr "" #: ../../:804 msgid "" "Allow the default section in an ini file to be specified using the " "``default_section`` variable when calling a ``config_template`` task. This " "defaults to ``DEFAULT``." msgstr "" #: ../../:453 origin/stable/mitaka>:691 msgid "" "Allow the fallocate_reserve option to be set (in bytes) for Swift, to help " "prevent disks from filling up and prevent a situation where Swift is unable " "to remove objects due to a lack of disk space. The fallocate_reserve value " "to is set to a default of 10GB." msgstr "" #: ../../:556 msgid "" "Allow to create `templated services `_ Now for " "systemd_services you are allowed to provide template_arguments, which can " "contain a list of arguments with which templated services would be created." msgstr "" #: ../../:722 stable/pike>:1231 msgid "" "Allows SSL connection to Galera with SSL support. ``galera_use_ssl`` option " "has to be set to ``true``, in this case self-signed CA cert or user-provided " "CA cert will be delivered to the container/host." msgstr "" #: ../../:561 msgid "" "Along with ``mistral_api_use_uwsgi``, ``cron_trigger.enabled`` would be set " "to `false` by default, disabling Cron Triggers on all existing installations " "as per `suggestion `_." msgstr "" #: ../../:334 msgid "" "Also each service that uses coordination have following variables defined:" msgstr "" #: ../../:433 stable/2023.2>:393 stable/yoga>:83 #: unmaintained/zed>:156 msgid "" "Also introduces new Ansible variables that control the above mentioned " "parameters." msgstr "" #: ../../:39 origin/stable/mitaka>:187 #: origin/stable/newton>:1632 msgid "" "Although the STIG requires martian packets to be logged, the logging is now " "disabled by default. The logs can quickly fill up a syslog server or make a " "physical console unusable." msgstr "" #: ../../:864 msgid "" "Although the ``ceph-rgw`` playbooks do enable Swift object versioning, " "support in radosgw is currently limited to setting ``X-Versions-Location`` " "on a container. ``X-History-Location``, understood by native Swift, is " "currently not supported by radosgw (although the feature is `pending `_ upstream)." msgstr "" #: ../../:233 current msgid "" "Amphorae flavor will have 0 disk set (through variable " "``octavia_amp_disk``), when ``octavia_cinder_enabled: True``." msgstr "" #: ../../:3377 msgid "" "An Ansible task was added to disable the ``netconsole`` service on CentOS " "systems if the service is installed on the system." msgstr "" #: ../../:1710 msgid "" "An Ansible was added to disable the ``rdisc`` service on CentOS systems if " "the service is installed on the system." msgstr "" #: ../../:367 current stable/2024.1>:128 msgid "" "An Octavia ``amphora`` provider was returned back to the list of supported " "providers to satisfy Magnum ``octavia_provider`` default label." msgstr "" #: ../../:1748 msgid "" "An export flag has been added to the ``inventory-manage.py`` script. This " "flag allows exporting of host and network information from an OpenStack-" "Ansible inventory for import into another system, or an alternate view of " "the existing data. See the developer docs for more details." msgstr "" #: ../../:2080 msgid "" "An opportunistic Ansible execution strategy has been implemented. This " "allows the Ansible linear strategy to skip tasks with conditionals faster by " "never queuing the task when the conditional is evaluated to be false." msgstr "" #: ../../:687 msgid "" "An option has been added allowing the user to define the `user_group` " "LBaaSv2 uses. The new option is ``neutron_lbaasv2_user_group`` and is set " "within the OS specific value by default." msgstr "" #: ../../:297 msgid "" "An option to disable the ``machinectl`` quota system has been added. The " "variable ``lxc_host_machine_quota_disabled`` is a Boolean with a default of " "**true**. When this option is set to **true** it will disable the " "``machinectl`` quota system." msgstr "" #: ../../:821 stable/rocky>:893 msgid "" "An option to disable the ``machinectl`` quota system has been changed. The " "variable ``lxc_host_machine_quota_disabled`` is a Boolean with a default of " "**false**. When this option is set to **true** it will disable the " "``machinectl`` quota system." msgstr "" #: ../../:192 msgid "" "Ansible-core was upgraded to version 2.15.9 in order to cover CVE-2023-5764 " "and CVE-2024-0690" msgstr "" #: ../../:353 stable/ussuri>:477 msgid "" "Any ceph infrastructure components (OSDs, MONs etc) deployed using the OSA/" "ceph-ansible tooling will be upgraded to the Ceph Nautilus release. " "Deployers should verify that this upgrade is suitable for their environment " "before commencing a major upgrade to Train, and consult the ceph-ansible and " "ceph release notes for Nautilus. For integration with external ceph clusters " "where OSA does not deploy any of the ceph cluster infrastructure, overrides " "can be used to select the specific version of ceph repositories used by the " "OSA ceph_client ansible role." msgstr "" #: ../../:667 msgid "" "Any external or 3rd party integrations with openstack-ansible that use the " "``openstack-ansible`` command line wrapper around ``ansible-playbook`` and " "access ansible facts via the ``ansible_`` pattern must be " "refactored to access those variables as follows: " "``ansible_facts['variable']``. If this is not possible, the environment " "variable ``ANSIBLE_INJECT_FACT_VARS`` can be set to ``True`` to restore the " "previous behaviour." msgstr "" #: ../../:907 msgid "" "Any tooling using the Designate v1 API needs to be reworked to use the v2 " "API" msgstr "" #: ../../:936 msgid "" "Any user that is coming from Pike or below on Ubuntu should modify its " "``user_external_repos_list``, switching its ubuntu cloud archive repository " "from ``state: present`` to ``state: absent``. From now on, UCA will be " "defined with the filename ``uca``. If the deployer wants to use its mirror, " "he can still override the variable ``uca_repo`` to point to its mirror. " "Alternatively, the deployer can completely define which repos to add and " "remove, ignoring our defaults, by overriding " "``openstack_hosts_package_repos``." msgstr "" #: ../../:3500 msgid "" "Aodh has deprecated support for NoSQL storage (MongoDB and Cassandra) in " "Mitaka with removal scheduled for the O* release. This causes warnings in " "the logs. The default of using MongoDB storage for Aodh is replaced with the " "use of Galera. Continued use of MongoDB will require the use of vars to " "specify a correct ``aodh_connection_string`` and add pymongo to the " "``aodh_pip_packages`` list." msgstr "" #: ../../:240 origin/stable/mitaka>:538 #: origin/stable/newton>:2096 msgid "" "Apache MPM tunable support has been added to the os-keystone role in order " "to allow MPM thread tuning. Default values reflect the current Ubuntu " "default settings:" msgstr "" #: ../../:364 msgid "" "Application credentials are now enabled by default as a keystone " "authentication method. If deployments do not wish to enable application " "credentials then the existing keystone_auth_methods variable can be " "overidden with the required set of authentication methods." msgstr "" #: ../../:38 current msgid "" "As RabbitMQ HA (mirrored) queues are no longer supported with current " "version of RabbitMQ, please make sure a migration to Quorum Queues was " "performed before proceeding with the upgrade. Please check the `Migrate " "between HA and Quorum Queues `_ " "documentation for more details on the migration path." msgstr "" #: ../../:709 origin/stable/newton>:2664 msgid "" "As described in the `Mitaka release notes `_ Neutron now correctly calculates for and " "advertises the MTU to instances. As such the ``neutron_network_device_mtu`` " "variable has been removed and the hard-coded values in the templates for " "``advertise_mtu``, ``path_mtu``, and ``segment_mtu`` have been removed to " "allow upstream defaults to operate as intended." msgstr "" #: ../../:705 origin/stable/newton>:2660 msgid "" "As described in the `Mitaka release notes `_ Neutron now correctly calculates for and " "advertises the MTU to instances. The default DHCP configuration to advertise " "an MTU to instances has therefore been removed from the variable " "``neutron_dhcp_config``." msgstr "" #: ../../:284 unmaintained/zed>:525 msgid "" "As of today ceph community repository (download.ceph.com) does not provide " "packages for Ubuntu 22.04 (Jammy). Based on that OpenStack-Ansible does " "install ceph packages from distro-provided repositories. Thus, you can not " "control packages version that will be installed and ceph support should be " "considered as experimental." msgstr "" #: ../../:479 msgid "" "As support for Centos-7 is removed from openstack-ansible in the Victoria " "release it is no longer necessary to support LXC2 configuration syntax in " "the lxc_container_create ansible role. The version of LXC is now assumed to " "be 3 or greater, and any LXC configuration keys that are being overriden by " "the deployer in the variable lxc_container_config_list should be updated to " "be LXC3 syntax as these will no longer be be converted by ansible code.." msgstr "" #: ../../:3451 msgid "" "Assigning multiple IP addresses to the same host name will now result in an " "inventory error before running any playbooks." msgstr "" #: ../../:372 msgid "" "At the same time ``haproxy_backend_h2`` will be respected regardless of TLS/" "plain TCP configuration." msgstr "" #: ../../:528 msgid "" "Automatic generation of ``ansible_`` fact vars is now disabled " "when using the ``openstack-ansible`` command. There is now less data to pass " "to the target hosts when executing ansible modules. The same values are now " "accessed as follows: ``ansible_facts['variable']``" msgstr "" #: ../../:242 stable/rocky>:1476 #: stable/stein>:1512 msgid "" "Avoid setting the quotas too high for your cloud since this can impact the " "performance of other servcies and lead to a potential Denial-of-Service " "attack if Loadbalancer quotas are not set properly or RBAC is not properly " "set up." msgstr "" #: ../../:450 stable/2023.2>:460 stable/yoga>:100 #: unmaintained/zed>:196 msgid "" "Backup compression is disabled by default, so no changes need to be made for " "existing deployments. Should compression be desired, set " "``galera_mariadb_backups_compress`` to ``True``. Choose a compression tool " "with ``galera_mariadb_backups_compressor``, default is ``gzip``." msgstr "" #: ../../:178 stable/2023.2>:283 #: stable/2024.1>:698 msgid "" "Backwards compatibility of ``client`` key inside ``ceph_extra_components`` " "variable has been fixed to support both a list and a list of mappings." msgstr "" #: ../../:270 origin/stable/ocata>:661 #: stable/pike>:2109 msgid "" "Based on documentation from RabbitMQ [ https://www.rabbitmq.com/which-erlang." "html ] this change ensures the version of erlang we're using across distros " "is consistent and supported by RabbitMQ." msgstr "" #: ../../:683 msgid "" "Blazar endpoints are now versioned and were suffixed with ``/v1`` by default" msgstr "" #: ../../:278 msgid "" "Blazar now using memcached for token caching. List of memcached servers can " "be controlled using ``blazar_memcached_servers`` variable." msgstr "" #: ../../:687 msgid "Blazar service authentication was fixed" msgstr "" #: ../../:63 branch>:342 current origin/liberty>:10 #: origin/liberty>:100 origin/liberty>:149 origin/liberty>:192 #: origin/liberty>:217 origin/liberty>:269 origin/liberty>:385 #: origin/liberty>:434 origin/liberty>:469 origin/liberty>:494 #: origin/liberty>:705 origin/liberty>:864 origin/stable/mitaka>:54 #: origin/stable/mitaka>:79 origin/stable/mitaka>:154 origin/stable/mitaka>:229 #: origin/stable/mitaka>:328 origin/stable/mitaka>:393 #: origin/stable/mitaka>:501 origin/stable/mitaka>:595 #: origin/stable/mitaka>:631 origin/stable/mitaka>:723 #: origin/stable/mitaka>:754 origin/stable/mitaka>:906 #: origin/stable/mitaka>:1179 origin/stable/newton>:193 #: origin/stable/newton>:266 origin/stable/newton>:319 #: origin/stable/newton>:360 origin/stable/newton>:494 #: origin/stable/newton>:732 origin/stable/newton>:949 #: origin/stable/newton>:1008 origin/stable/newton>:1123 #: origin/stable/newton>:1154 origin/stable/newton>:1230 #: origin/stable/newton>:1289 origin/stable/newton>:1384 #: origin/stable/newton>:3323 origin/stable/ocata>:25 origin/stable/ocata>:80 #: origin/stable/ocata>:139 origin/stable/ocata>:376 origin/stable/ocata>:440 #: origin/stable/ocata>:502 origin/stable/ocata>:657 origin/stable/ocata>:863 #: origin/stable/ocata>:1149 origin/stable/ocata>:1196 #: origin/stable/ocata>:2065 stable/2023.1>:25 stable/2023.1>:124 #: stable/2023.1>:167 stable/2023.1>:203 stable/2023.1>:280 stable/2023.1>:330 #: stable/2023.1>:400 stable/2023.1>:459 stable/2023.1>:773 stable/2023.2>:45 #: stable/2023.2>:61 stable/2023.2>:163 stable/2023.2>:199 stable/2023.2>:279 #: stable/2023.2>:586 stable/2024.1>:113 stable/2024.1>:169 stable/2024.1>:679 #: stable/pike>:10 stable/pike>:86 stable/pike>:142 stable/pike>:206 #: stable/pike>:319 stable/pike>:609 stable/pike>:733 stable/pike>:797 #: stable/pike>:2095 stable/queens>:102 stable/queens>:134 stable/queens>:251 #: stable/queens>:304 stable/queens>:360 stable/queens>:444 stable/queens>:619 #: stable/queens>:1080 stable/rocky>:174 stable/rocky>:252 stable/rocky>:340 #: stable/rocky>:434 stable/rocky>:1485 stable/stein>:20 stable/stein>:1569 #: stable/train>:65 stable/train>:586 stable/ussuri>:146 stable/ussuri>:819 #: stable/yoga>:25 stable/yoga>:109 stable/yoga>:175 stable/yoga>:340 #: stable/yoga>:881 unmaintained/victoria>:22 unmaintained/victoria>:62 #: unmaintained/victoria>:112 unmaintained/victoria>:508 #: unmaintained/wallaby>:102 unmaintained/wallaby>:145 #: unmaintained/wallaby>:185 unmaintained/wallaby>:799 unmaintained/xena>:88 #: unmaintained/xena>:200 unmaintained/xena>:266 unmaintained/xena>:301 #: unmaintained/xena>:615 unmaintained/zed>:10 unmaintained/zed>:37 #: unmaintained/zed>:71 unmaintained/zed>:123 unmaintained/zed>:205 #: unmaintained/zed>:245 unmaintained/zed>:283 unmaintained/zed>:657 msgid "Bug Fixes" msgstr "" #: ../../:601 msgid "" "By default these services are disabled/stopped and database cleanup is not " "performed. You can enable this behaviour by defining variables " "``nova_archive_deleted`` and ``nova_purge_deleted``." msgstr "" #: ../../:512 msgid "" "By default this service is disabled/stopped and database cleanup is not " "performed. You can enable this behaviour by defining variable " "``cinder_purge_deleted``." msgstr "" #: ../../:894 unmaintained/xena>:213 msgid "" "By default we increase ``tune.maxrewrite`` as otherwise while using CSP " "headers, their size could exceed allowed buffer. Also deployers can override " "this value if needed." msgstr "" #: ../../:1215 stable/pike>:959 msgid "" "Capping the default value for the variable ``aodh_wsgi_processes`` to 16 " "when the user doesn't configure this variable. Default value is twice the " "number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1457 stable/pike>:963 msgid "" "Capping the default value for the variable ``cinder_osapi_volume_workers`` " "to 16 when the user doesn't configure this variable. Default value is half " "the number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1465 msgid "" "Capping the default value for the variable ``galera_max_connections`` to " "1600 when the user doesn't configure this variable. Default value is 100 " "times the number of vCPUs available on the machine with a capping value of " "1600." msgstr "" #: ../../:1461 msgid "" "Capping the default value for the variable ``galera_wsrep_slave_threads`` to " "16 when the user doesn't configure this variable. Default value is the " "number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1219 stable/pike>:971 msgid "" "Capping the default value for the variable ``gnocchi_wsgi_processes`` to 16 " "when the user doesn't configure this variable. Default value is twice the " "number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1223 stable/pike>:983 msgid "" "Capping the default value for the variable ``ironic_wsgi_processes`` to 16 " "when the user doesn't configure this variable. Default value is one fourth " "the number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1481 stable/pike>:987 msgid "" "Capping the default value for the variable ``keystone_wsgi_processes`` to 16 " "when the user doesn't configure this variable. Default value is half the " "number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1493 stable/pike>:999 msgid "" "Capping the default value for the variable ``repo_nginx_workers`` to 16 when " "the user doesn't configure this variable. Default value is half the number " "of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1227 stable/pike>:1003 msgid "" "Capping the default value for the variable ``sahara_api_workers`` to 16 when " "the user doesn't configure this variable. Default value is half the number " "of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1168 stable/pike>:1007 msgid "" "Capping the default value for the variable ``swift_proxy_server_workers`` to " "16 when the user doesn't configure this variable and if the swift proxy is " "in a container. Default value is half the number of vCPUs available on the " "machine if the swift proxy is not in a container. Default value is half the " "number of vCPUs available on the machine with a capping value of 16 if the " "proxy is in a container." msgstr "" #: ../../:1453 msgid "" "Capping the default value for the variables ``ceilometer_api_workers`` and " "``ceilometer_notification_workers`` to 16 when the user doesn't configure " "these variables. Default value is half the number of vCPUs available on the " "machine with a capping value of 16." msgstr "" #: ../../:1469 stable/pike>:967 msgid "" "Capping the default value for the variables ``glance_api_workers`` and " "``glance_registry_workers`` to 16 when the user doesn't configure these " "variables. Default value is half the number of vCPUs available on the " "machine with a capping value of 16." msgstr "" #: ../../:1473 stable/pike>:975 msgid "" "Capping the default value for the variables ``heat_api_workers`` and " "``heat_engine_workers`` to 16 when the user doesn't configure these " "variables. Default value is half the number of vCPUs available on the " "machine with a capping value of 16." msgstr "" #: ../../:1477 stable/pike>:979 msgid "" "Capping the default value for the variables ``horizon_wsgi_processes`` and " "``horizon_wsgi_threads`` to 16 when the user doesn't configure these " "variables. Default value is half the number of vCPUs available on the " "machine with a capping value of 16." msgstr "" #: ../../:1485 stable/pike>:991 msgid "" "Capping the default value for the variables ``neutron_api_workers``, " "``neutron_num_sync_threads`` and ``neutron_metadata_workers`` to 16 when the " "user doesn't configure these variables. Default value is half the number of " "vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1489 stable/pike>:995 msgid "" "Capping the default value for the variables ``nova_wsgi_processes``, " "``nova_osapi_compute_workers``, ``nova_metadata_workers`` and " "``nova_conductor_workers`` to 16 when the user doesn't configure these " "variables. Default value is half the number of vCPUs available on the " "machine with a capping value of 16." msgstr "" #: ../../:1423 msgid "" "Ceilometer can now use Gnocchi for storage. By default this is disabled. To " "enable the service, set ``ceilometer_gnocchi_enabled: yes``. See the Gnocchi " "role documentation for more details." msgstr "" #: ../../:418 msgid "" "Ceilometer does not support V3 endpoints in Liberty, which are the flavor " "created by OSA. To deploy Ceilometer some endpoints in the Keystone service " "catalog must be removed and replaced with V2 endpoints. This is neccessary, " "for example, to use the Swift pollster to collect metrics for Swift storage " "use the Swift endpoint. For detailed instructions on the steps for these " "changes to the service catalog see the `OpenStack Liberty Install Guide " "`." msgstr "" #: ../../:3170 msgid "" "Ceilometer no longer manages alarm storage when Aodh is enabled. It now " "redirects alarm-related requests to the Aodh API. This is now auto-enabled " "when Aodh is deployed." msgstr "" #: ../../:945 msgid "" "Ceilometer now uses the Keystone v3 endpoint. The 'identity_uri' directive " "has been removed since it's unused. 'region_name' has been added. The " "directives under 'service_credentials' have been updated to support the " "keystoneauth library" msgstr "" #: ../../:1788 msgid "" "CentOS 7 and Ubuntu 16.04 support have been added to the ``haproxy`` role." msgstr "" #: ../../:1992 msgid "CentOS 7 support has been added to the ``galera_client`` role." msgstr "" #: ../../:1824 msgid "CentOS 7 support has been added to the ``galera_server`` role." msgstr "" #: ../../:516 stable/queens>:1113 msgid "" "CentOS deployments require a special COPR repository for modern LXC packages." " The COPR repository is not mirrored at this time and this causes failed " "gate tests and production deployments." msgstr "" #: ../../:173 msgid "" "CentOS/Rocky linux deployments will get major update of OVS version from 2." "17 to 3.1 and OVN from 22.12 to 23.03. RDO has stopped building packages for " "previous OVS/OVN versions which means they will not recieve any upstream " "bugfixes or security patches." msgstr "" #: ../../:2300 msgid "CentOS7 support has been added to the ``rsyslog_client`` role." msgstr "" #: ../../:1365 stable/pike>:879 msgid "CentOS7/RHEL support has been added to the ceph_client role." msgstr "" #: ../../:1692 msgid "CentOS7/RHEL support has been added to the os_aodh role." msgstr "" #: ../../:1696 msgid "CentOS7/RHEL support has been added to the os_ceilometer role." msgstr "" #: ../../:2125 msgid "CentOS7/RHEL support has been added to the os_cinder role." msgstr "" #: ../../:1700 msgid "CentOS7/RHEL support has been added to the os_designate role." msgstr "" #: ../../:2129 msgid "CentOS7/RHEL support has been added to the os_glance role." msgstr "" #: ../../:1704 msgid "CentOS7/RHEL support has been added to the os_gnocchi role." msgstr "" #: ../../:1708 msgid "CentOS7/RHEL support has been added to the os_heat role." msgstr "" #: ../../:1712 msgid "CentOS7/RHEL support has been added to the os_horizon role." msgstr "" #: ../../:2133 msgid "CentOS7/RHEL support has been added to the os_keystone role." msgstr "" #: ../../:1716 msgid "CentOS7/RHEL support has been added to the os_neutron role." msgstr "" #: ../../:1720 msgid "CentOS7/RHEL support has been added to the os_nova role." msgstr "" #: ../../:1724 msgid "CentOS7/RHEL support has been added to the os_swift role." msgstr "" #: ../../:1534 stable/queens>:855 msgid "" "Ceph storage backend is known not to work on openSUSE Leap 42.X yet. This is " "due to missing openSUSE support in the upstream Ceph Ansible playbooks." msgstr "" #: ../../:383 unmaintained/xena>:382 msgid "" "Ceph-ansible has been switched to version 6.0 and Ceph Pacific is used by " "default." msgstr "" #: ../../:725 msgid "" "Certbot-auto is deprecated since 2020. It was removed from haproxy_server " "role." msgstr "" #: ../../:207 stable/2023.2>:203 #: stable/2024.1>:732 unmaintained/zed>:14 msgid "" "Change of ``horizon_webroot`` variable is now respected and will be " "reflected in Apache configuration to serve static files and define wsgi path " "accordingly." msgstr "" #: ../../:57 msgid "" "Change the ``ansible-role-requirements.yml`` file to include the URL and git " "SHA for your patched fork of the os_neutron role." msgstr "" #: ../../:28 msgid "" "Change the ``ansible-role-requirements.yml`` file to include the URL and git " "SHA for your patched fork of the repo_build role." msgstr "" #: ../../:2367 msgid "" "Change the port for devices in the ring by adjusting the port value for " "services, hosts, or devices. This will not involve a rebalance of the ring." msgstr "" #: ../../:272 current msgid "" "Changed a default value for a ``neutron_default_availability_zones`` " "variable. From now on role will gather defined ``neutron_availability_zone`` " "across all hosts (which defaults to `nova`) and attempt to schedule on all " "available Availability Zones by default. Change of the default should not " "alter behaviour for single-AZ setups." msgstr "" #: ../../:228 current msgid "" "Changed default for ``octavia_cinder_volume_size`` to 20gb in order to align " "with value of ``octavia_amp_disk``" msgstr "" #: ../../:745 msgid "" "Changed default value for ``tempest_projects`` variable. Now this list " "contains only one element 'tempest'. Previously it was 'demo' and 'alt_demo' " "which was quite confusing." msgstr "" #: ../../:928 msgid "" "Changed the default NTP server options in ``chrony.conf``. The ``offline`` " "option has been removed, ``minpoll``/``maxpoll`` have been removed in favour " "of the upstream defaults, while the ``iburst`` option was added to speed up " "initial time synchronization." msgstr "" #: ../../:3418 msgid "" "Changed the way we name host containers groups in dynamic_inventory.py for a " "hostname from hostname_containers to hostname-host_containers to prevent " "failing in the case where containers groups have the same name as host " "containers when choosing hostnames inspired from containers group names. " "This change fixes the following bugs https://bugs.launchpad.net/openstack-" "ansible/+bug/1512883 and https://bugs.launchpad.net/openstack-ansible/+bug/" "1528953." msgstr "" #: ../../:2371 msgid "" "Changing the port for a device, or group of devices, carries a brief period " "of downtime to the swift storage services for those devices. The devices " "will be unavailable during period between when the storage service restarts " "after the port update, and the ring updates to match the new port." msgstr "" #: ../../:235 origin/stable/ocata>:631 #: stable/pike>:1674 msgid "" "Changing to the ESL repos has no upgrade impact. The version of erlang " "provided by ESL is newer than that what is found in the distro repos. " "Furthermore, a pin has been added to ensure that APT always uses the ESL " "repos as it's preferred source which has been done to simply ensure APT is " "always pointed at ESL." msgstr "" #: ../../:25 msgid "" "Cherry-pick https://review.openstack.org/557757 into the fork on that branch." "" msgstr "" #: ../../:81 stable/rocky>:197 stable/stein>:306 msgid "" "Chrony got a new configuration option to synchronize the system clock back " "to the RTC using the ``security_ntp_sync_rtc`` variable. Disabled by default." "" msgstr "" #: ../../:167 stable/train>:216 stable/ussuri>:295 msgid "" "Cinder is deployed with Active-Active enabled by default if you are using " "Ceph as a backend storage." msgstr "" #: ../../:723 msgid "" "Cinder v2 API is now fully removed from Cinder service. With that os_cinder " "role ensures v2 endpoint is not present anymore in the catalog and remove " "endpoints if they're present." msgstr "" #: ../../:211 origin/stable/mitaka>:495 #: origin/stable/newton>:2691 msgid "" "Cleanup tasks are added to remove the nova console git directories ``/usr/" "share/novnc`` and ``/usr/share/spice-html5``, prior to cloning these inside " "the nova vnc and spice console playbooks. This is necessary to guarantee " "that local modifications do not break git clone operations, especially " "during upgrades." msgstr "" #: ../../:1653 msgid "" "Code which added 'Acquire::http:No-Cache true' to the host and container apt " "preferences when http proxy environment variables were set has been removed. " "This setting is only required when working around issues introduced by badly " "configured http proxies. In some cases proxies can improperly cache the apt " "Releases and Packages files leading to package installation errors. If a " "deployment is behind a badly configured proxy, the deployer can add the " "necessary apt config fragment as part of host provisioning. OSA will " "replicate that config into any containers that are created. This setting can " "be removed from existing deployments if required by manually deleting the " "file ``/etc/apt/apt.conf.d/00apt-no-cache`` from all host and containers." msgstr "" #: ../../:383 msgid "" "Compare dict vars of before and after configuration to determine whether the " "config keys or values have changed so a configuration file will not be " "incorrectly marked as changed when only the ordering has changed." msgstr "" #: ../../:397 msgid "" "Configurations using the ``ceph-ansible`` role (that is, those applying the " "``ceph-install.yml`` or ``ceph-rgw-install.yml`` playbooks) should be very " "carefully reviewed if you are upgrading from prior ``stable/rocky`` releases." " Those releases shipped a pre-release version of ``ceph-ansible`` that was " "unintentionally included in ``ansible-role-requirements.yml``." msgstr "" #: ../../:1320 origin/stable/ocata>:1571 msgid "" "Container boot ordering has been implemented on container types where it " "would be beneficial. This change ensures that stateful systems running " "within a container are started ahead of non-stateful systems. While this " "change has no impact on a running deployment it will assist with faster " "recovery should any node hosting container go down or simply need to be " "restarted." msgstr "" #: ../../:473 origin/stable/mitaka>:1183 msgid "" "Containers might fail to retrieve packages from the repo server when " "connecting to a slave repo server that has not finished synchronizing. For " "more information, see https://bugs.launchpad.net/openstack-ansible/+bug/" "1543146. This is addressed by adding pre and post hooks into lsyncd to " "connect to the slave repo servers and disable NGINX for the duration for the " "sync." msgstr "" #: ../../:1551 msgid "" "Containers will now bind mount all logs to the physical host machine in the " "\"/openstack/log/{{ inventory_hostname }}\" location. This change will " "ensure containers using a block backed file system (lvm, zfs, bfrfs) do not " "run into issues with full file systems due to logging." msgstr "" #: ../../:319 msgid "" "Copy the logs from the container's filesystem to ``/openstack/log/{{ " "inventory_hostname }}`` on the host filesystem" msgstr "" #: ../../:23 origin/stable/newton>:52 msgid "" "Create a ``stable/newton`` branch in the fork based on the ``newton-eol`` " "tag." msgstr "" #: ../../:555 msgid "" "Create file /etc/openstack_deploy/user-role-requirements.yml with following " "content:" msgstr "" #: ../../:221 unmaintained/wallaby>:279 msgid "" "Created series of variables ``haproxy_*_service`` that contain specific to " "the service haproxy configuration block. This allows deployers to " "selectively adjust haproxy frontend/backend configuration for specific " "service only, without need to override whole haproxy_default_services." msgstr "" #: ../../:458 origin/stable/newton>:794 #: origin/stable/ocata>:1139 stable/pike>:787 stable/pike>:2029 #: stable/queens>:1042 unmaintained/wallaby>:785 msgid "Critical Issues" msgstr "" #: ../../:916 msgid "" "Data structure for ``tempest_test_blacklist`` has been updated to add " "launchpad and/or bugzilla linked with the test being skipped." msgstr "" #: ../../:1071 msgid "Database migration tasks have been added for the FWaaS neutron plugin." msgstr "" #: ../../:1129 msgid "Database migration tasks have been added for the LBaaS neutron plugin." msgstr "" #: ../../:2656 msgid "" "Database migration tasks have been added for the dynamic routing neutron " "plugin." msgstr "" #: ../../:298 msgid "" "Default MariaDB version is set to 10.6.10. When running minor upgrade don't " "forget to provide ``-e galera_upgrade=true`` to openstack-ansible command. " "With that MariDB version installed for CentOS 9 Stream, Rocky 9 and Ubuntu " "22.04 will switch from distro provided version to 10.6.10 installed from " "MariaDB repository, which might be a major version upgrade." msgstr "" #: ../../:77 msgid "" "Default RabbitMQ version was upgraded to ``3.9.21`` and erlang version to " "``24.3.*``" msgstr "" #: ../../:663 msgid "" "Default Trove service project name has been changed from " "``trove_for_trove_usage`` to ``service``. You might want to manually delete " "``trove_for_trove_usage`` project after upgrade or override new default." msgstr "" #: ../../:657 msgid "" "Default Trove service username has been changed from ``admin_trove_user`` to " "``trove``. You might want to manually delete ``admin_trove_user`` after " "upgrade or override new default." msgstr "" #: ../../:507 msgid "Default ``ansible-core`` version has been switched to 2.13 series" msgstr "" #: ../../:515 msgid "Default ceph version has been switched to Quincy" msgstr "" #: ../../:104 msgid "Default erlang for RabbitMQ version is upgraded to ``24.1.7``" msgstr "" #: ../../:238 current stable/2023.1>:14 #: stable/2023.2>:28 stable/2024.1>:89 msgid "" "Default for Neutron API has been switched from using uWSGI to old eventlet " "due to found compatability issues for the current OpenStack release. You can " "find more infromation in Neutron `bug report `_ You can preserve current behaviour by setting " "``neutron_use_uwsgi: True``" msgstr "" #: ../../:307 msgid "" "Default neutron plugin has been switched from LinuxBridge to OVN. This is " "effective for all new deployments. At the same time OpenStack-Ansible does " "not provide any in-house tooling for completing upgrade from ml2.lxb to ml2." "ovn. Please, reffer to upgrade section for more details on how to upgrade " "OpenStack-Ansible." msgstr "" #: ../../:694 msgid "" "Default provider driver for Octavia has been changed to ``amphorav2``, since " "`amphora` and `octavia` drivers are deprecated for removal." msgstr "" #: ../../:901 msgid "" "Default quotas were bumped for the following resources: networks (from 10 to " "100), subnets (from 10 to 100), ports (from 50 to 500) to match upstream " "defaults." msgstr "" #: ../../:462 msgid "" "Default run path for systemd services has been changed to ``/run`` and lock " "path to ``/run/lock``." msgstr "" #: ../../:932 unmaintained/wallaby>:75 #: unmaintained/xena>:231 msgid "" "Default source of rabbitmq and erlang packages has been switched to " "cloudsmith.io" msgstr "" #: ../../:698 msgid "" "Default value for ``glance_show_multiple_locations`` has changed to False, " "regardless of other variables." msgstr "" #: ../../:818 msgid "" "Default value for ``horizon_enable_ssl`` has changed to False. (or " "``openstack_service_backend_ssl`` if it is defined)" msgstr "" #: ../../:398 current msgid "" "Default value for ``octavia_management_net_dhcp`` was set to False. It means " "that Octavia management network will not have DHCP enabled by default if " "os_octavia role is responsible for managaing it." msgstr "" #: ../../:707 msgid "" "Default value for ``octavia_security_group_rule_cidr`` is changed and " "defined to the CIDR of Octavia management network. To preserve previous " "behaviour, please override the variable to `0.0.0.0/0`." msgstr "" #: ../../:669 msgid "" "Default value for ``trove_service_net_subnet_cidr`` has been changed from " "\"192.168.20.0/24\" to \"172.29.252.0/22\". Along with that pool start and " "pool end has changed as well, which is represented with variables " "``trove_service_net_allocation_pool_start`` and " "``trove_service_net_allocation_pool_end``. Please, define these variables " "user_variables in case you used default values in production endironments." msgstr "" #: ../../:445 msgid "" "Default value of ``glance_available_stores`` has changed. Now it is always " "should be represented as a list of mappings, where each item has following " "keys:" msgstr "" #: ../../:302 current stable/2024.1>:616 msgid "" "Default value of ``gnocchi_policy_default_file_path`` has changed to search " "for ``policy.yaml`` file under ``/etc/openstack_deploy/gnocchi/`` folder. " "Please ensure, that you use YAML format instead of JSON for the file." msgstr "" #: ../../:859 msgid "" "Default value of ``venv_wheel_build_enable`` has been changed. Now wheels " "are built when there is at least a single host in ``venv_build_group``. " "Previously it was depending on the amount of hosts targeted for the play." msgstr "" #: ../../:699 msgid "" "Default values for variables ``octavia_loadbalancer_topology`` and " "``octavia_enable_anti_affinity`` has been switched to ``ACTIVE_STANDBY`` and " "``True`` accordingly to reflect most reasonable production setup. You can " "define these variables to their previous defaults if you want to preserve " "behaviour." msgstr "" #: ../../:3463 msgid "" "Deleting variable entries from the ``global_overrides`` dictionary in " "``openstack_user_config.yml`` now properly removes those variables from the " "``openstack_inventory.json`` file. See Bug" msgstr "" #: ../../:554 msgid "" "Depending on when the initial Kilo deployment was done it is possible the " "repository servers have a pip.conf locking down the environment which limits " "the packages available to to install. If this file is present it will cause " "build failures as the repository server attempts to build Liberty packages." msgstr "" #: ../../:429 msgid "" "Deployers are now able to remove un-needed roles/collections from the " "bootstrap process through user-role/collection-requirements.yml files. " "Please, check documentation for more details: https://docs.openstack.org/" "openstack-ansible/latest/reference/configuration/extending-osa.html" msgstr "" #: ../../:612 stable/pike>:1604 msgid "" "Deployers can `galera_disable_privatedevices` to `yes` to set " "`PrivateDevices=false` in the systemd unit file for MariaDB on CentOS 7. The " "default is `no`, which keeps the default systemd unit file settings from the " "MariaDB package." msgstr "" #: ../../:591 stable/pike>:1583 msgid "" "Deployers can `memcached_disable_privatedevices` to `yes` to set " "`PrivateDevices=false` in the systemd unit file for MariaDB on CentOS 7. The " "default is `no`, which keeps the default systemd unit file settings from the " "MemcacheD package." msgstr "" #: ../../:310 msgid "" "Deployers can also shut down and power on galera containers **one at a " "time** manually if that method is preferred." msgstr "" #: ../../:1836 msgid "" "Deployers can enable this configuration by setting an Ansible variable:" msgstr "" #: ../../:317 origin/stable/mitaka>:566 #: origin/stable/newton>:1458 msgid "" "Deployers can now blacklist certain Nova extensions by providing a list of " "such extensions in ``horizon_nova_extensions_blacklist`` variable, for " "example:" msgstr "" #: ../../:291 origin/stable/newton>:2012 msgid "" "Deployers can now configure tempest public and private networks by setting " "the following variables, 'tempest_private_net_provider_type' to either vxlan " "or vlan and 'tempest_public_net_provider_type' to flat or vlan. Depending on " "what the deployer sets these variables to, they may also need to update " "other variables accordingly, this mainly involves " "'tempest_public_net_physical_type' and 'tempest_public_net_seg_id'. Please " "refer to http://docs.openstack.org/mitaka/networking-guide/intro-basic-" "networking.html for more neutron networking information." msgstr "" #: ../../:146 stable/stein>:696 msgid "" "Deployers can now define a cinder-backend volume type explicitly private or " "public with option ``public`` set to true or false." msgstr "" #: ../../:1312 origin/stable/ocata>:1393 msgid "" "Deployers can now define the override " "``cinder_rpc_executor_thread_pool_size`` which defaults to 64" msgstr "" #: ../../:1316 origin/stable/ocata>:1397 msgid "" "Deployers can now define the override ``cinder_rpc_response_timeout`` which " "defaults to 60" msgstr "" #: ../../:1093 origin/stable/ocata>:1746 msgid "" "Deployers can now define the varible ``cinder_qos_specs`` to create qos " "specs and assign those specs to desired cinder volume types." msgstr "" #: ../../:472 msgid "" "Deployers can now set the ``container_tech`` to **nspawn** when deploying " "OSA within containers. When making the decision to deploy container types " "the deployer only needs to define the desired ``container_tech`` and " "continue the deployment as normal." msgstr "" #: ../../:712 msgid "" "Deployers can now set the ``install_method`` to either ``source`` (default) " "or ``distro`` to choose the method for installing OpenStack services on the " "hosts. This only applies to *new* deployments. Existing deployments which " "are source based, cannot be converted to the new ``distro`` method. For more " "information, please refer to the `Deployment Guide `_." msgstr "" #: ../../:925 msgid "" "Deployers can now specify a custom package name or URL for an EPEL release " "package. CentOS systems use ``epel-release`` by default, but some deployers " "have a customized package that redirects servers to internal mirrors." msgstr "" #: ../../:746 msgid "" "Deployers can opt out of this change by setting " "``openstack_host_keep_journals`` to ``no``." msgstr "" #: ../../:1482 msgid "Deployers can opt-out of the change entirely by setting a variable:" msgstr "" #: ../../:3380 msgid "" "Deployers can opt-out of this change by setting " "``security_disable_netconsole`` to ``no``." msgstr "" #: ../../:1713 msgid "" "Deployers can opt-out of this change by setting ``security_disable_rdisc`` " "to ``no``." msgstr "" #: ../../:796 origin/stable/mitaka>:1051 msgid "" "Deployers can optionally remove the Keystone v2 endpoints from the database. " " Those endpoints will not be removed by the upgrade process." msgstr "" #: ../../:953 msgid "" "Deployers can optionally set a UID and/or GID for the nova user and group. " "This is helpful for environments with shared storage." msgstr "" #: ../../:1104 msgid "" "Deployers can provide a customized login banner via a new Ansible variable: " "``security_login_banner_text``. This banner text is used for non-graphical " "logins, which includes console and ssh logins." msgstr "" #: ../../:1142 origin/stable/ocata>:1514 msgid "" "Deployers can set ``heat_cinder_backups_enabled`` to enable or disable the " "cinder backups feature in heat. If heat has cinder backups enabled, but " "cinder's backup service is disabled, newly built stacks will be undeletable." msgstr "" #: ../../:649 msgid "" "Deployers can set ``lxc_hosts_opensuse_mirror_url`` to use their preferred " "mirror for the openSUSE repositories. They can also set the " "``lxc_hosts_opensuse_mirror_obs_url`` if they want to set a different mirror " "for the OBS repositories. If they want to use the same mirror in both cases " "then they can leave the latter variable to its default value. The full list " "of mirrors and their capabilities can be obtained at http://mirrors.opensuse." "org/" msgstr "" #: ../../:1528 msgid "" "Deployers can set ``openstack_host_nf_conntrack_max`` to control the maximum " "size of the netfilter connection tracking table. The default of ``262144`` " "should be increased if virtual machines will be handling large amounts of " "concurrent connections." msgstr "" #: ../../:1035 msgid "" "Deployers can set ``pip_install_centos_mirror_url`` to use their preferred " "mirror for the RDO repositories." msgstr "" #: ../../:659 msgid "" "Deployers can set ``pip_install_opensuse_mirror_url`` to use their preferred " "mirror for the openSUSE repositories. They can also set the " "``pip_install_opensuse_mirror_obs_url`` if they want to set a different " "mirror for the OBS repositories. If they want to use the same mirror in both " "cases then they can leave the latter variable to its default value. The full " "list of mirrors and their capabilities can be obtained at http://mirrors." "opensuse.org/" msgstr "" #: ../../:993 msgid "" "Deployers can set a default availability zone (AZ) for new instance builds " "which do not provide an AZ. The value is ``None`` by default, but it can be " "changed with the ``nova_default_schedule_zone`` Ansible variable." msgstr "" #: ../../:772 msgid "" "Deployers can set a refresh interval for haproxy's stats page by setting the " "``haproxy_stats_refresh_interval`` variable. The default value is ``60``, " "which causes haproxy to refresh the stats page every 60 seconds." msgstr "" #: ../../:744 msgid "" "Deployers can specify the authentication credentials to be used with wsrep " "by configuring ``galera_wsrep_sst_auth_user`` and " "``galera_wsrep_sst_auth_password``." msgstr "" #: ../../:1945 msgid "" "Deployers can still set a specific keymap using a nova configuration " "override if necessary." msgstr "" #: ../../:306 msgid "" "Deployers can use the rolling restart functionality provided in the upgrade " "playbook within the main `OpenStack-Ansible repository `_." msgstr "" #: ../../:740 msgid "" "Deployers how have the option to set the the wsrep method via the " "``galera_wsrep_sst_method``." msgstr "" #: ../../:1488 msgid "" "Deployers may opt-in for the change without automatically updating the " "active ``grub.cfg`` file by setting the following Ansible variables:" msgstr "" #: ../../:1398 msgid "" "Deployers may provide a list of custom haproxy template files to copy from " "the deployment host through the ``octavia_user_haproxy_templates`` variable " "and configure Octavia to make use of a custom haproxy template file with " "with ``octavia_haproxy_amphora_template`` variable." msgstr "" #: ../../:310 stable/ussuri>:434 msgid "" "Deployers may require custom CA certificates installing on their openstack " "hosts or service containers. A new variable openstack_host_ca_certificates " "is added which is a list of certificates that should be copied from the " "deploy host to the target hosts. Certificates may be selectively deployed by " "defining the variable either in user_variables.yml or via host/group vars." msgstr "" #: ../../:1650 msgid "" "Deployers now have the option to prevent the EPEL repository from being " "installed by the role. Setting ``security_epel_install_repository`` to " "``no`` prevents EPEL from being installed. This setting may prevent certain " "packages from installing, such as ClamAV." msgstr "" #: ../../:676 msgid "" "Deployers of CentOS 7 environments can use the " "``openstack_hosts_enable_yum_fastestmirror`` variable to enable or disable " "yum's fastestmirror plugin. The default setting of ``yes`` ensures that " "fastestmirror is enabled." msgstr "" #: ../../:790 msgid "" "Deployers should review the defaults provided in ``playbooks/os_keystone/" "defaults/main.yml`` and adjust any variables in ``user_variables.yml`` if " "they exist there." msgstr "" #: ../../:2009 msgid "" "Deployers should review the new RHEL 7 STIG variables in ``defaults/main." "yml`` to provide custom configuration for the Ansible tasks." msgstr "" #: ../../:1697 msgid "" "Deployers that need a graphical interface will need to set the following " "Ansible variable:" msgstr "" #: ../../:43 origin/stable/mitaka>:191 #: origin/stable/newton>:1636 msgid "" "Deployers that need this logging enabled will need to set the following " "Ansible variable:" msgstr "" #: ../../:2409 msgid "" "Deployments on ppc64le are limited to Ubuntu 16.04 for the Newton release of " "OpenStack-Ansible." msgstr "" #: ../../:438 msgid "" "Deployments which follows distro path (services are installed from distro " "packages rather then in virtualenvs) should upgrade Ubuntu 18.04 -> 20.04 " "before performing OpenStack Ussuri -> Victoria upgrade, since Ubuntu Cloud " "Archive does not provide Victoria system packages for 18.04." msgstr "" #: ../../:271 stable/ussuri>:381 msgid "" "Deployments will now default to using python3 when a python3 interpreter is " "present in the operating system. Each openstack-ansible role has a new " "variable for the form _venv_python_executable which defaults to " "python2 but a global variable openstack_venv_python_executable in the " "openstack-ansible group variables sets this to python3 on supporting " "operating systems. This enables a deployer is to selectively use python2 or " "python3 on a per service basis if required. The ansible-runtime venv is also " "created using python3 on the deploy host if possible." msgstr "" #: ../../:48 branch>:310 current origin/liberty>:616 #: origin/liberty>:695 origin/stable/mitaka>:39 origin/stable/mitaka>:882 #: origin/stable/mitaka>:1143 origin/stable/newton>:784 #: origin/stable/newton>:861 origin/stable/newton>:924 #: origin/stable/newton>:998 origin/stable/newton>:3206 origin/stable/ocata>:69 #: origin/stable/ocata>:337 origin/stable/ocata>:793 origin/stable/ocata>:1186 #: origin/stable/ocata>:1301 origin/stable/ocata>:2038 stable/2023.1>:99 #: stable/2023.1>:154 stable/2023.1>:263 stable/2023.1>:385 stable/2023.1>:721 #: stable/2023.2>:120 stable/2023.2>:249 stable/2023.2>:516 stable/2024.1>:200 #: stable/2024.1>:624 stable/pike>:127 stable/pike>:364 stable/pike>:596 #: stable/pike>:700 stable/pike>:1829 stable/queens>:87 stable/queens>:283 #: stable/queens>:345 stable/queens>:949 stable/rocky>:122 stable/rocky>:237 #: stable/rocky>:407 stable/rocky>:1019 stable/stein>:41 stable/stein>:1119 #: stable/train>:105 stable/train>:493 stable/ussuri>:28 stable/ussuri>:661 #: stable/yoga>:151 stable/yoga>:751 unmaintained/victoria>:102 #: unmaintained/victoria>:178 unmaintained/victoria>:490 #: unmaintained/wallaby>:681 unmaintained/xena>:506 unmaintained/zed>:113 #: unmaintained/zed>:221 unmaintained/zed>:623 msgid "Deprecation Notes" msgstr "" #: ../../:1013 msgid "" "Developers can specify additional python packages for the repo build process " "by creating YAML files within ``/etc/openstack_deploy/``. Refer to the " "`documentation on adding packages `_ for more details." msgstr "" #: ../../:55 stable/queens>:208 stable/rocky>:374 #: stable/stein>:480 msgid "" "Disable HTTPS entirely by setting ``haproxy_ssl: no`` (which will also " "disable https on haproxy. This setting is inherited by the new " "``horizon_enable_ssl`` variable by default. This is a new option." msgstr "" #: ../../:915 unmaintained/wallaby>:121 #: unmaintained/xena>:320 msgid "" "Do not duplicate records in /etc/hosts file by rabbitmq role when hosts file " "is already managed by OSA." msgstr "" #: ../../:146 msgid "" "Download and install the neutron-fwaas-dashboard if being enabled within the " "os_horizon role by the ``horizon_enable_neutron_fwaas`` var." msgstr "" #: ../../:3234 msgid "" "Downloading and unarchiving a .tar.gz has been removed. The related tempest " "options ``ami_img_file``, ``aki_img_file``, and ``ari_img_file`` have been " "removed from tempest.conf.j2." msgstr "" #: ../../:1184 msgid "" "Dragonflow is no longer maintained as an OpenStack project and has therefore " "been removed from OpenStack-Ansible as a supported ML2 driver for neutron." msgstr "" #: ../../:137 msgid "" "Due to OSSA-2023-003, value of ``openstack_service_token_roles_required`` " "has been changed to ``true``. With that, major upgrades to Yoga release " "might struggle from prolonged dowtimes. Sensetive to API downtime " "environments can perform major upgrade to any prior release with subsequent " "minor upgrade that will enable ``openstack_service_token_roles_required`` " "and install safe versions of services. Other way around would be to manually " "create and assign ``service`` role to all \"service\" users." msgstr "" #: ../../:860 stable/train>:332 msgid "" "Due to a change in how backend_host is defined when using Ceph, all the " "Cinder volumes will restart under the same backend name. This will mean " "that any volumes which previously were assigned to the host or container " "that hosted the volume will no longer be managable. The workaround for this " "is to use the `cinder-manage volume update_host` command to move those " "volumes to the new backend host. This known issue will be resolved soon " "with an upgrade playbook." msgstr "" #: ../../:456 msgid "" "Due to a change in how backend_host is defined when using Ceph, all the " "Cinder volumes will restart under the same backend name. This will mean " "that any volumes which previously were assigned to the host or container " "that hosted the volume will no longer be manageable. The workaround for " "this is to use the `cinder-manage volume update_host` command to move those " "volumes to the new backend host. This known issue will be resolved soon " "with an upgrade playbook." msgstr "" #: ../../:2467 msgid "" "Due to a new bind mount at \"/var/log\" all containers will be restarted. " "This is a required restart. It is recommended that deployers run the " "container restarts in serial to not impact production workloads." msgstr "" #: ../../:703 msgid "" "Due to issue in env.d defenition for Cloudkitty, service was installed not " "only inside LXC containers, but also to all LXC hosts, which was not " "intended. This was fixed in env.d definition for the service, and it was " "renamed from ``cloudkitty_hosts`` to ``rating_hosts``, which should be " "reflected in your ``openstack_user_config.yml`` or conf.d files." msgstr "" #: ../../:174 stable/2024.1>:753 msgid "" "Due to missing parameter Nova cell0 used to be configured to not use TLS for " "MySQL communication even when ``nova_galera_use_ssl`` was explicitly enabled." " It is fixed now and cell0 should be updated on the next playbook run." msgstr "" #: ../../:1074 msgid "" "Due to the smart-reources implementation, variables, related to custom git " "path of exact config files were removed. Now all config files are taken from " "upstream git repo, but overrides and client configs are still supported. The " "following variables are not supported now: * " "ceilometer_git_config_lookup_location * ceilometer_data_meters_git_file_path " "* ceilometer_event_definitions_git_file_path * " "ceilometer_gnocchi_resources_git_file_path * " "ceilometer_loadbalancer_v2_meter_definitions_git_file_path * " "ceilometer_osprofiler_event_definitions_git_file_path * " "ceilometer_polling_git_file_path If you are maintaining custom ceilometer " "git repository, you still may use ``ceilometer_git_repo`` variable, to " "provide url to your git repository." msgstr "" #: ../../:205 current stable/2023.2>:14 #: stable/2024.1>:75 msgid "" "Due to the underlying `bug `_ in Ansible collections for OpenStack, ``Default`` " "domain name can be renamed to ``default`` under certain conditions. One " "known example is having ``domain: default`` defenition under ``keystone_sp -" "> trusted_idp_list -> federated_identities`` structure." msgstr "" #: ../../:576 stable/ussuri>:809 msgid "" "Due to usage of systemd-journald mapping of /openstack/log/ to /var/log/" "$SERVICE is not present anymore. Also rsyslog_client role is not called for " "projects since logs are stored in journald. Also variables like " "service_log_dir are not supported anymore and have no effect." msgstr "" #: ../../:186 msgid "" "During a kilo to liberty upgrade, container and service restarts for the " "mariadb/galera cluster were being triggered multiple times and causing the " "cluster to become unstable and often unrecoverable. This situation has been " "improved immensely, and we now have tight control such that restarts of the " "galera containers only need to happen once, and are done so in a controlled, " "predictable and repeatable way." msgstr "" #: ../../:123 msgid "" "During an upgrade using the run-upgrade script, the neutron agents will now " "automatically be migrated from the neutron_agents containers on to the " "network_hosts. The neutron_agents containers will be deleted as they are no " "longer necessary. Any environments which previously upgraded to Queens can " "make use of the same playbooks to handle to migration, or inspect the " "playbooks to determine how to do it by hand if preferred." msgstr "" #: ../../:777 msgid "" "During the keepalived role upgrade the keepalived process will restart and " "introduce a brief service disruption." msgstr "" #: ../../:263 msgid "" "During the upgrade from Kilo to Liberty, this change deletes the repo " "containers and recreates them to fix an upgrade issue with dependencies." msgstr "" #: ../../:677 msgid "" "During the upgrade process new secrets, such as passwords and keys, will be " "generated and added to ``/etc/openstack_deploy/user_secrets.yml``. Existing " "values will not be changed." msgstr "" #: ../../:664 msgid "" "During upgrade password for ``galera_monitoring_user_password`` will be " "generated and set while running galera-server role. In case any third-party " "software relies on this user, it should be updated to use password. You can " "also override variable to ``galera_monitoring_user_password: \"\"`` to not " "use password for auth and preserve previous behaviour." msgstr "" #: ../../:469 stable/ussuri>:637 msgid "" "During upgrade process role will drop `gnocchi_service_port` from apache " "listeners (ports.conf) and gnocchi virtualhost, which by default means " "misconfigured apache service (since it won't have any listeners) unless it's " "aio build and this apache server is in use by other role/service. Apache " "server won't be dropped from gnocchi_api hosts, so deployers are encoureged " "to remove it manually." msgstr "" #: ../../:482 stable/ussuri>:650 msgid "" "During upgrade process role will drop `panko_service_port` from apache " "listeners (ports.conf) and panko virtualhost, which by default means " "misconfigured apache service (since it won't have any listeners) unless it's " "aio build and this apache server is in use by other role/service. Apache " "server won't be dropped from panko_api hosts, so deployers are encoureged to " "remove it manually." msgstr "" #: ../../:592 msgid "" "During upgrade your current Nova cell mapings will be converted to usage of " "the `Template URLs `_. This means, that your changes of " "transport_url or [database]/connection in ``nova.conf`` will be reflected by " "nova-conductor in cells just after service restart, without need to " "explicitly run ``nova-manage cell_v2 update_cell``." msgstr "" #: ../../:387 origin/stable/newton>:2640 msgid "" "During upgrades, container and service restarts for the mariadb/galera " "cluster were being triggered multiple times and causing the cluster to " "become unstable and often unrecoverable. This situation has been improved " "immensely, and we now have tight control such that restarts of the galera " "containers only need to happen once, and are done so in a controlled, " "predictable and repeatable way." msgstr "" #: ../../:439 stable/2023.2>:399 stable/yoga>:89 #: unmaintained/zed>:162 msgid "" "Each backup archive is stored in a dedicated directory, alongside the backup " "metadata." msgstr "" #: ../../:197 stable/ussuri>:218 msgid "" "Each openstack service role has a new variable _bind_address which " "defaults to 0.0.0.0. A global override openstack_service_bind_address may be " "used by a deployer either in group_vars or user_variables to define an " "alternative IP address for services to bind to. This feature allows a " "deployer to bind all of the services to a specific network, for example the " "openstack management network. In this release the default binding remains 0." "0.0.0, and future releases may default the binding to the management network." "" msgstr "" #: ../../:416 msgid "" "Each service also has corresponsive variables prefixed with service name, " "like ``_oslomsg_rabbit_stream_fanout`` to control them separately." msgstr "" #: ../../:752 msgid "Each service using RabbitMQ now has a separate vhost and user." msgstr "" #: ../../:840 msgid "" "Each service using RabbitMQ now has a separate vhost and user. The shared / " "vhost is cleaned up so that it contains only the default data. The shared " "user 'openstack' is removed." msgstr "" #: ../../:334 msgid "Enable Ceilometer resource cache, using Memcached." msgstr "" #: ../../:51 stable/queens>:204 stable/rocky>:370 #: stable/stein>:476 msgid "" "Enable HTTPS on the horizon host without a load balancer. This is the role's " "default behaviour which matches what it always has been." msgstr "" #: ../../:693 stable/queens>:829 msgid "" "Enable Kernel Shared Memory support by setting ``nova_compute_ksm_enabled`` " "to ``True``." msgstr "" #: ../../:362 msgid "" "Enable VeNCrypt authentication scheme from noVNC proxy to compute nodes. " "When using HTTPS, the TLS encryption only applies to data between the tenant " "user and proxy server. To provide protection from the noVNC proxy to the " "Compute Nodes, it is necessary to enable the VeNCrypt authentication scheme " "for VNC." msgstr "" #: ../../:557 msgid "" "Enable networking-bgpvpn ml2 neutron driver to make ``OpenDaylight SDN " "Controller`` to support BGPVPN for external network connectivity. You can " "set the ``neutron_plugin_type`` to ``ml2.opendaylight`` and " "``neutron_plugin_base`` to ``odl-router_v2`` and ``bgpvpn`` to enable BGPVPN " "on the OpenDaylight." msgstr "" #: ../../:695 origin/stable/newton>:2375 msgid "" "Enable rsync module per object server drive by setting the " "``swift_rsync_module_per_drive`` setting to ``True``. Set this to configure " "rsync and swift to utilise individual configuration per drive. This is " "required when disabling rsyncs to individual disks. For example, in a disk " "full scenario." msgstr "" #: ../../:524 msgid "" "Ensure that in openstack_user_config.yml / conf.d ``cloudkitty_hosts`` are " "replaced with ``rating_hosts``. For deployments with LXC containers: after " "upgrade is completed make sure that Cloudkitty is not running on your LXC " "hosts anymore, after which you should be able to remove LXC hosts from " "cloudkitty_all group in inventory." msgstr "" #: ../../:165 msgid "" "Erlang version is changed from ``24.1-1`` to ``24.1.3-1``. Depending on when " "deployment was done, that could be different minor releases. This means that " "your erlang version might be either minorly upgraded or downgraded. This " "should not lead to incompatabilities with RabbitMQ in any scenario." msgstr "" #: ../../:209 msgid "" "Erlang version is now synced between Ubuntu/Debian and CentOS 8 Stream." msgstr "" #: ../../:253 msgid "" "Erlang version was bumped to 24.3.4.7 to cover CVE-2022-37026 which has " "critical severity" msgstr "" #: ../../:206 msgid "" "Erlang will is updated to version 25.0.4, RabbitMQ will be upgraded to " "version 3.10.7. This will also harmonize RabbitMQ/Erlang versioning for " "Debian Bullseye." msgstr "" #: ../../:14 msgid "" "Erlang will is updated to version 25.0.4, RabbitMQ will be upgraded to " "version 3.9.28. This will also harmonize RabbitMQ/Erlang versioning for " "Debian Bullseye." msgstr "" #: ../../:2102 msgid "" "Errors relating to groups containing both hosts and other groups as children " "now raise a more descriptive error. See inventory documentation for more " "details. Fixes bug" msgstr "" #: ../../:916 msgid "Example, for an override like:" msgstr "" #: ../../:568 origin/stable/mitaka>:1067 msgid "" "Existing LBaaS v1 load balancers and agents will not be altered by the new " "OpenStack-Ansible release." msgstr "" #: ../../:600 msgid "" "Existing use of the variable ``openstack_hosts_centos_mirror_url`` will " "continue to work as in previous releases, but the new variable " "``centos_mirror_url`` can be used to define the mirror location for the " "whole deployment." msgstr "" #: ../../:362 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Adjutant service when hosts are present in the host group " "``registration_hosts``." msgstr "" #: ../../:1865 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Bare Metal Service (Ironic). Details for how to set it up are available in " "the `OpenStack-Ansible Install Guide for Ironic `_." msgstr "" #: ../../:820 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Bare Metal Service (Ironic). Details for how to set it up are available in " "the `OpenStack-Ansible Install Guide for Ironic `_." msgstr "" #: ../../:1377 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Designate service when hosts are present in the host group ``dnsaas_hosts``." msgstr "" #: ../../:1454 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Magnum service when hosts are present in the host group ``magnum-" "infra_hosts``." msgstr "" #: ../../:214 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Masakari service when hosts are present in the host group ``masakari-" "infra_hosts``." msgstr "" #: ../../:899 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Octavia Load Balancing service when hosts are present in the host group " "``octavia-infra_hosts``." msgstr "" #: ../../:368 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "Senlin service when hosts are present in the host group ``senlin-" "infra_hosts``." msgstr "" #: ../../:1401 msgid "" "Experimental support has been added to allow the deployment of the OpenStack " "trove service when hosts are present in the host group ``trove-infra_hosts``." "" msgstr "" #: ../../:2308 msgid "" "Experimental support has been added to allow the deployment of the Sahara " "data-processing service. To deploy sahara hosts should be present in the " "host group ``sahara-infra_hosts``." msgstr "" #: ../../:289 origin/stable/ocata>:399 #: stable/pike>:1130 msgid "" "Extra headers can be added to Keystone responses by adding items to " "``keystone_extra_headers``. Example:" msgstr "" #: ../../:543 msgid "" "FWaaS V2 has been added to neutron. To enable this service simply add " "\"firewall_v2\" to the \"neutron_plugin_base\" list." msgstr "" #: ../../:281 origin/stable/mitaka>:731 #: origin/stable/newton>:3373 msgid "" "Failed access logging is now disabled by default and can be enabled by " "changing ``security_audit_failed_access`` to ``yes``. The rsyslog daemon " "checks for the existence of log files regularly and this audit rule was " "triggered very frequently, which led to very large audit logs." msgstr "" #: ../../:592 msgid "" "Failure to define any of these variables will result in playbook failures " "and neutron misconfiguration." msgstr "" #: ../../:1865 msgid "Fedora 25 support is deprecated and no longer tested on each commit." msgstr "" #: ../../:1145 msgid "Fedora 26 is now supported." msgstr "" #: ../../:45 stable/train>:109 stable/ussuri>:707 msgid "Fedora is no longer tested in CI for each commit." msgstr "" #: ../../:688 msgid "" "File ``/etc/openstack_deploy/openstack_hostnames_ips.yml`` is not used " "anymore and can be safely removed from your deployment configuration." msgstr "" #: ../../:709 msgid "" "Fix bug https://bugs.launchpad.net/openstack-ansible/+bug/1553796 by " "ensuring that the --insecure flag is passed to the cinder CLI tool during " "task execution" msgstr "" #: ../../:614 msgid "" "Fix high water mark memory usage on Cinder Volume and Backup services and " "reduce peak memory usage." msgstr "" #: ../../:14 msgid "" "Fix run-upgrade.sh so that it correctly calls nova-flavor-migration.yml and " "no longer fails due to the non-existent playbook nova-extra-migrations.yml." msgstr "" #: ../../:204 msgid "" "Fixed Erlang installation from Cloudsmith repository for CentOS 8 Stream by " "adjusting version that will be installed." msgstr "" #: ../../:334 stable/2023.2>:600 stable/yoga>:34 #: unmaintained/zed>:75 msgid "" "Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc " "if >= v2.4.9 including on Ubuntu Jammy." msgstr "" #: ../../:167 msgid "Fixed Ubuntu Focal ceph deployments" msgstr "" #: ../../:803 msgid "" "Fixed behaviour of variable ``nova_spice_console_agent_enabled``. It can be " "safely used now to disable spice agent when needed." msgstr "" #: ../../:24 stable/train>:78 stable/ussuri>:163 msgid "Fixed ceph_client role for distro installs" msgstr "" #: ../../:890 unmaintained/xena>:275 msgid "Fixed facts gathering when tags were provided with playbook run." msgstr "" #: ../../:26 unmaintained/wallaby>:149 #: unmaintained/xena>:619 msgid "" "Fixed inconsistency in ``haproxy_frontend_raw`` key naming between " "documentation and service template. Previously, template generation was " "expecting ``haproxy_raw`` instead of the ``haproxy_frontend_raw``." msgstr "" #: ../../:789 unmaintained/zed>:287 msgid "" "Fixed issue where neutron-metadata-agent and neutron-dhcp-agent were started " "on network_hosts for OVN scenario along with neutron-ovn-metadata-agent. " "These services will be disabled and masked for existing environments. Manual " "clean-up of systemd services and correpsonsive neutron agents is still " "needed. New deployments won't have these services deployed from the " "beginning." msgstr "" #: ../../:159 msgid "Fixed manila support for CentOS 8" msgstr "" #: ../../:885 unmaintained/xena>:270 msgid "" "Fixes a Content Security Policy error which prevented image uploads via the " "Horizon interface." msgstr "" #: ../../:900 stable/yoga>:905 stable/yoga>:910 #: unmaintained/wallaby>:106 unmaintained/wallaby>:111 #: unmaintained/wallaby>:116 unmaintained/xena>:305 unmaintained/xena>:310 #: unmaintained/xena>:315 msgid "" "Fixes a file descriptor leak which may impact services which use the oslo." "messaging RabbitMQ heartbeat mechanism." msgstr "" #: ../../:255 stable/rocky>:1509 #: stable/stein>:1585 msgid "" "Fixes bug https://bugs.launchpad.net/openstack-ansible/+bug/1778098 where " "playbook failed, if ``horizon_custom_themes`` is specified, and directory " "for theme is not provided" msgstr "" #: ../../:284 stable/2023.2>:288 #: stable/2024.1>:711 msgid "" "Fixes format of ``ceph_conf_overrides_rgw`` variable by converting override " "dictionary to Jinja2 format to workaround Ansible limitation on usage of " "variables as keys in dictionary." msgstr "" #: ../../:777 stable/yoga>:179 #: unmaintained/zed>:249 msgid "" "Fixes incorrect definition of ceilometer ``polling_namespaces``, when host " "is part of both central and compute groups (ie metal/aio scenario)" msgstr "" #: ../../:178 stable/stein>:1589 msgid "" "Fixes neutron HA routers, by enabling ``neutron-l3-agent`` to invoke the " "required helper script." msgstr "" #: ../../:782 stable/yoga>:184 #: unmaintained/zed>:254 msgid "" "Fixes the absence of ``libvirtd.service`` on compute nodes. With CentOS " "upgrading the libvirt version to 9.3.0, they do not install libvirt-deamon " "as a dependency to libvirt-deamon-kvm anymore. libvirt-deamon is installed " "explicitly now." msgstr "" #: ../../:404 stable/2023.2>:595 stable/yoga>:29 #: unmaintained/zed>:127 msgid "" "Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new " "OIDCXForwardedHeaders configuration option is required." msgstr "" #: ../../:171 stable/2023.2>:167 #: stable/2024.1>:691 msgid "" "Fixes user-collection-requirements bootstrap process, when defied by " "deployer collection uses \"git+file\" as a source scheme. Previously an " "unexpected version of collection could get installed when using \"git+file\" " "scheme." msgstr "" #: ../../:518 msgid "" "Floating IP plugin for Blazar (virtual.floatingip.plugin) is now enabled by " "default. Use ``blazar_manager_plugins`` variable to change the list of " "enabled plugins if needed." msgstr "" #: ../../:643 msgid "" "Following roles are not going to be part of 2024.1 release due to services " "being trafered to `Inactive state `_: - Murano - Senlin - Sahara" msgstr "" #: ../../:779 msgid "" "Following tempest related variables were deprecated and have no effect:" msgstr "" #: ../../:558 msgid "" "Following variables were removed in favor of PKI ones and have no effect " "anymore:" msgstr "" #: ../../:234 msgid "" "For Barbican in ``[simple_crypto_plugin]`` section of the barbican.conf kek " "has been hardcoded. Now it's dynamically generated in secrets.yml and unique " "per deployment. However, before upgrade you must set " "``barbican_simple_crypto_key`` to the current value, which is passed through " "base64 decoding first. Most likely decoded value will be " "`abcdefghijklmnopqrstuvwxyz123456` since that value has been hardcoded in " "the template. Upgrade script will set the value of " "``barbican_simple_crypto_key`` in user_secrets.yml to the " "`abcdefghijklmnopqrstuvwxyz123456` unless variable has been already defined. " "So everyone who used overrides to modify kek for simple_crypto_plugin should " "manually define valid barbican_simple_crypto_key in user_secrets.yml" msgstr "" #: ../../:520 msgid "" "For Designate ``designate_pool_uuid`` was hardcoded in os_designate role. " "Now it's dynamically generated in secrets.yml and unique per deployment. " "However, before upgrade you must set ``designate_pool_uuid`` to the current " "uuid. Most likely it is `794ccc2c-d751-44fe-b57f-8894c9f5c842` since that " "value has been defaulted in the role and it would remain the same unless " "explicitly overwritten. You can check your pool uuid with the command `/" "openstack/venvs/designate-20.1.1.dev7/bin/designate-manage pool show_config` " "that should be executed from the Designate venv." msgstr "" #: ../../:133 msgid "" "For OpenStack-Ansible Liberty releases earlier than 12.2.2 the default " "container apt source used was ``https://mirror.rackspace.com/ubuntu``. This " "mirror seems to sometimes have broken package indexes or missing packages. " "The default package source has therefore been changed to make use of ``http:/" "/archive.ubuntu.com/ubuntu`` for packages and ``http://security.ubuntu.com/" "ubuntu`` for security packages." msgstr "" #: ../../:591 msgid "" "For OpenStack-Ansible Liberty versions <12.0.9 and Kilo versions <11.2.12 " "the package ``pywbem`` will fail to build due to the update to v0.8.0 " "including new requirements which are not met by the repo server. This issue " "has been resolved in 12.0.9. A workaround for this is to set ``pywbem<0.8." "0`` in the file ``global-requirement-pins.txt``." msgstr "" #: ../../:600 msgid "" "For OpenStack-Ansible Liberty versions >12.0.7,<12.0.9 the wheel version " "pinned in OpenStack-Ansible (0.29.0) is higher that the OpenStack upper-" "constraint (0.26.0). This causes an issue where the repo-server install may " "fail because it cannot find a version of wheel to install that meets the " "requirements of <0.26.0 and ==0.29.0. A workaround for this issue is to " "change the wheel package pin in the following files ``wheel==0.26.0``." msgstr "" #: ../../:442 msgid "" "For OpenStack-Ansible Mitaka releases earlier than 13.3.1 the default " "container apt source used was ``http://mirror.rackspace.com/ubuntu``. This " "mirror seems to sometimes have broken package indexes or missing packages. " "The default package source has therefore been changed to make use of ``http:/" "/archive.ubuntu.com/ubuntu/`` for packages and ``http://security.ubuntu.com/" "ubuntu`` for security packages." msgstr "" #: ../../:14 unmaintained/wallaby>:137 msgid "" "For Ubuntu Focal (20.04) with minor upgrade UCA repo will be added. " "Deployments using ``distro`` install method will result in major OpenStack " "version upgrade." msgstr "" #: ../../:596 origin/stable/ocata>:617 #: stable/pike>:1588 stable/pike>:1609 msgid "For additional information, refer to the following bugs:" msgstr "" #: ../../:144 msgid "" "For all newton releases up to 14.2.14 when executing the os-nova-install.yml " "playbook the ``nova-novncproxy`` and ``nova-spicehtml5proxy`` services will " "fail. The workaround to resolve this issue is to restart the services." msgstr "" #: ../../:246 msgid "" "For all ocata releases prior to OpenStack-Ansible 15.1.16, several of the " "magnum requirements were not constrained. This resulted in the kubernetes " "version changing over time unexpectedly, rather than by intention. Most " "recently this lack of constraint causes the repo build to fail when trying " "to build the magnum venv due to incompatible requirements." msgstr "" #: ../../:207 msgid "" "For all ocata releases up to 15.1.16 when executing the os-nova-install.yml " "playbook the ``nova-novncproxy`` and ``nova-spicehtml5proxy`` services will " "fail. The workaround to resolve this issue is to restart the services." msgstr "" #: ../../:428 msgid "" "For all pike releases up to 16.0.7 when executing the os-nova-install.yml " "playbook the ``nova-novncproxy`` and ``nova-spicehtml5proxy`` services will " "fail. The workaround to resolve this issue is to restart the services." msgstr "" #: ../../:175 current msgid "" "For backwards compatability we left old playbooks names/paths, though they " "contain simple import of corresponsive playbook from the collection." msgstr "" #: ../../:517 msgid "" "For consistency reasons, ``neutron_db_pool_size`` was deprecated in favor of " "``neutron_db_max_pool_size`` which is in a standardized format used in other " "repositories. However, it will be supported until Yoga release." msgstr "" #: ../../:510 msgid "" "For consistency reasons, ``octavia_db_pool_size`` was deprecated in favor of " "``octavia_db_max_pool_size`` which is in a standardized format used in other " "repositories. ``octavia_db_pool_size`` support it will be removed in Yoga " "release." msgstr "" #: ../../:524 msgid "" "For consistency reasons, the following variables were deprecated in favor of " "the new ones in a standardized format used in other repositories. " "``keystone_database_pool_timeout`` -> ``keystone_db_pool_timeout`` " "``keystone_database_max_pool_size`` -> ``keystone_db_max_pool_size`` " "``keystone_database_idle_timeout`` -> " "``keystone_db_connection_recycle_time`` However, they will be supported " "until next Yoga release." msgstr "" #: ../../:625 msgid "" "For deployers using Keystone as an OIDC-based Service Provider there has " "been a spelling fix for the OIDCScope setting. Please use ``keystone_sp." "trusted_idp_list.0.oidc_scope`` instead of ``keystone_sp.trusted_idp_list.0." "idc_scope``." msgstr "" #: ../../:538 msgid "" "For deployments with ``nova_backend_ssl: True`` TLS certificates for Nova " "API backends will be re-generated during upgrade. From now on they will be " "suffixed with `_api`." msgstr "" #: ../../:3155 msgid "" "For example, a deployer could have disabled direct root ssh logins with the " "following variable:" msgstr "" #: ../../:26 stable/rocky>:107 stable/stein>:343 msgid "" "For example, to enable the `InstanceLocalityFilter` in addition to the " "normally enabled scheduler filters, use the following variable." msgstr "" #: ../../:580 msgid "For more information about SFC in Neutron, refer to the following:" msgstr "" #: ../../:132 msgid "" "For newton releases 14.2.14 and earlier, we recommend pinning the LXD " "version for all newton deployments at a version less than 2.0.11. For newton " "releases 14.2.15 onwards, the newer release of LXD should be usable again." msgstr "" #: ../../:1847 msgid "" "For systems using the APT package manager, the sources file for the MariaDB " "repo now has a consistent name, 'MariaDB.list'." msgstr "" #: ../../:1855 msgid "" "For systems using the APT package manager, the sources files for the MariaDB " "and Percona repos now have consistent names, 'MariaDB.list' and 'Percona." "list'." msgstr "" #: ../../:525 origin/stable/newton>:667 #: origin/stable/ocata>:894 origin/stable/ocata>:1060 stable/pike>:939 #: stable/pike>:1623 msgid "" "For the ``os_aodh`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``aodh_*_init_config_overrides`` variables which use the ``config_template`` " "task to change template defaults." msgstr "" #: ../../:898 origin/stable/ocata>:1064 #: stable/pike>:951 stable/pike>:1627 msgid "" "For the ``os_barbican`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``barbican_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:537 origin/stable/newton>:671 #: origin/stable/ocata>:910 origin/stable/ocata>:1068 stable/pike>:1027 #: stable/pike>:1631 msgid "" "For the ``os_ceilometer`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``ceilometer_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:755 origin/stable/ocata>:1176 #: stable/pike>:1077 msgid "" "For the ``os_cinder`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``cinder_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:280 stable/ussuri>:502 msgid "" "For the ``os_cloudkitty`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``cloudkitty_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:746 origin/stable/ocata>:775 #: stable/pike>:1118 stable/pike>:1666 msgid "" "For the ``os_designate`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``designate_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:557 origin/stable/newton>:675 #: origin/stable/ocata>:930 origin/stable/ocata>:1072 stable/pike>:1166 #: stable/pike>:1678 msgid "" "For the ``os_glance`` role, the systemd unit ``RestartSec`` value which " "controls the time between the service stop and start when restarting has " "been reduced from 150 seconds to 2 seconds to make the restart happen faster." " This value can be adjusted by using the ``glance_*_init_config_overrides`` " "variables which use the ``config_template`` task to change template defaults." "" msgstr "" #: ../../:569 origin/stable/newton>:679 #: origin/stable/ocata>:942 origin/stable/ocata>:1076 stable/pike>:1186 #: stable/pike>:1682 msgid "" "For the ``os_gnocchi`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``gnocchi_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:581 origin/stable/newton>:683 #: origin/stable/ocata>:954 origin/stable/ocata>:1080 stable/pike>:1215 #: stable/pike>:1686 msgid "" "For the ``os_heat`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``heat_*_init_config_overrides`` variables which use the ``config_template`` " "task to change template defaults." msgstr "" #: ../../:593 origin/stable/newton>:687 #: origin/stable/ocata>:966 origin/stable/ocata>:1084 stable/pike>:1251 #: stable/pike>:1714 msgid "" "For the ``os_ironic`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``ironic_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:605 origin/stable/newton>:691 #: origin/stable/ocata>:978 origin/stable/ocata>:1088 stable/pike>:1267 #: stable/pike>:1735 msgid "" "For the ``os_keystone`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``keystone_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:621 origin/stable/newton>:695 #: origin/stable/ocata>:990 origin/stable/ocata>:1092 stable/pike>:1308 #: stable/pike>:1751 msgid "" "For the ``os_magnum`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``magnum_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:633 origin/stable/newton>:699 #: origin/stable/ocata>:1002 origin/stable/ocata>:1096 stable/pike>:1335 #: stable/pike>:1755 msgid "" "For the ``os_neutron`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``neutron_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:645 origin/stable/newton>:703 #: origin/stable/ocata>:1014 origin/stable/ocata>:1100 stable/pike>:1374 #: stable/pike>:1759 msgid "" "For the ``os_nova`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``nova_*_init_config_overrides`` variables which use the ``config_template`` " "task to change template defaults." msgstr "" #: ../../:1390 stable/pike>:1771 msgid "" "For the ``os_octavia`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``octavia_*_init_overrides`` variables which use the ``config_template`` " "task to change template defaults." msgstr "" #: ../../:1030 origin/stable/ocata>:1104 #: stable/pike>:1436 stable/pike>:1806 msgid "" "For the ``os_sahara`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``sahara_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:657 origin/stable/newton>:707 #: stable/pike>:1479 stable/pike>:1810 msgid "" "For the ``os_swift`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``swift_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:1050 origin/stable/ocata>:1108 #: stable/pike>:1495 stable/pike>:1818 msgid "" "For the ``os_trove`` role, the systemd unit ``TimeoutSec`` value which " "controls the time between sending a SIGTERM signal and a SIGKILL signal when " "stopping or restarting the service has been reduced from 300 seconds to 120 " "seconds. This provides 2 minutes for long-lived sessions to drain while " "preventing new ones from starting before a restart or a stop. The " "``RestartSec`` value which controls the time between the service stop and " "start when restarting has been reduced from 150 seconds to 2 seconds to make " "the restart happen faster. These values can be adjusted by using the " "``trove_*_init_config_overrides`` variables which use the " "``config_template`` task to change template defaults." msgstr "" #: ../../:51 msgid "Fork the ``openstack/openstack-ansible-os_neutron`` git repository." msgstr "" #: ../../:22 msgid "Fork the ``openstack/openstack-ansible-repo_build`` git repository." msgstr "" #: ../../:27 origin/stable/newton>:56 msgid "Fork the ``openstack/openstack-ansible`` git repository." msgstr "" #: ../../:158 stable/2023.2>:253 #: stable/2024.1>:628 msgid "" "Format of ``client`` key inside ``ceph_extra_components`` variable has been " "deprecated in favor of a mapping with one required attribute ``name``. " "Having ``client`` key defined as a simple list is kept for backwards " "compatibility but will be removed in future releases." msgstr "" #: ../../:544 msgid "" "Format of ``magnum_glance_images`` has changed to the one compatible with " "``openstack_resources`` role. Please reffer to os_magnum role documentation " "for a relevant example." msgstr "" #: ../../:270 msgid "" "From 15.1.16 onwards, these values are set as defaults and will be updated " "from time to time after verifying that the new versions work. As such, " "setting these overrides is not required for 15.1.16 onwards." msgstr "" #: ../../:405 msgid "" "From 16.0.8 onwards, these values are set as defaults and will be updated " "from time to time after verifying that the new versions work. As such, " "setting these overrides is not required for 16.0.8 onwards." msgstr "" #: ../../:1194 msgid "" "From now on, a deployer can override any group_var in userspace, by creating " "a folder ``/etc/openstack_deploy/group_vars/``. This folder has precedence " "over OpenStack-Ansible default group_vars, and the merge behavior is similar " "to Ansible merge behavior. The group_vars folder precedence can still be " "changed with the GROUP_VARS_PATH. Same applies for host vars." msgstr "" #: ../../:963 origin/stable/ocata>:2144 #: stable/pike>:2153 msgid "" "From now on, external repo management (in use for RDO/UCA for example) will " "be done inside the pip-install role, not in the repo_build role." msgstr "" #: ../../:163 current msgid "" "Functional code for playbooks were moved from playbooks/ folder of the " "OpenStack-Ansible repository to a openstack.osa collection." msgstr "" #: ../../:572 msgid "" "Functionality of ``venv_rebuild`` has been adjusted to the correct scope. " "Now setting this variable to true will not trigger wheels rebuild - it will " "just remove and re-create your virtualenv. If you want to rebuild wheels, a " "new variable ``venv_wheels_rebuild`` has been implemented." msgstr "" #: ../../:67 current msgid "" "Functionality of providing different haproxy service settings per haproxy " "host has been restored through ``haproxy_limit_hosts`` key which provides " "filtering of target HAProxy hosts, to which this configuration should be " "applied. Before moving ``_haproxy_services`` from `haproxy_all` " "group_vars it was possible to supply a completely independent set of " "backends that will be configured on the HAProxy server. With moving backend " "defenition to specific service group_vars, this ability was lost, as there " "was no way to tell what config to apply to which HAProxy server." msgstr "" #: ../../:1355 origin/stable/ocata>:2019 msgid "" "Functionality to support Ubuntu Trusty (14.04) has been removed from the " "code base." msgstr "" #: ../../:110 origin/stable/ocata>:323 #: stable/pike>:503 stable/queens>:716 msgid "" "Galera healthcheck has been improved, and relies on an xinetd service. By " "default, the service is unaccessible (filtered with the no_access directive)." " You can override the directive by setting any xinetd valid value to " "``galera_monitoring_allowed_source``." msgstr "" #: ../../:543 msgid "" "Galera privileged username has changed from ``root`` to ``admin``. Old " "'root'@'%' user can be removed after upgrade process." msgstr "" #: ../../:391 msgid "" "Galera role now leverages PKI role for creation and distribution of the " "certificates and certificate authorities. This introduces bunch of new " "variables which controls CA and certificates generation details. If user SSL " "certificates are provided - they would be used instead of the generated ones." "" msgstr "" #: ../../:655 msgid "" "Galera will now additionally listen on port 3307 by default, with this port " "being used by the monitoring user to check cluster status. Ensure that any " "firewall rules permit access to this port before upgrading. If an " "'extra_port' was already configured, ensure that any conflicting " "configuration is removed and set your preferred values via " "'galera_monitoring_port' and 'galera_monitoring_max_connections'." msgstr "" #: ../../:199 unmaintained/wallaby>:814 msgid "" "Gate jobs for OpenDaylight, SFC, and OVS w/ NSH have been removed in " "preparation for deprecation of those deployment scenarios and related code." msgstr "" #: ../../:669 msgid "" "Generating and validating checksums for all files installed by packages is " "now disabled by default. The check causes delays in playbook runs and it can " "consume a significant amount of CPU and I/O resources. Deployers can re-" "enable the check by setting ``security_check_package_checksums`` to ``yes``." msgstr "" #: ../../:271 stable/2024.1>:665 msgid "" "Generation of SSH keypairs for Ironic users has been deprecated and removed. " "A variable ``ironic_recreate_keys`` has been removed and has no effect." msgstr "" #: ../../:547 msgid "" "Generation of SSH keypairs for Zun and Kuryr users has been deprecated and " "removed. A variable ``zun_recreate_keys`` has been removed and has no effect." "" msgstr "" #: ../../:495 msgid "" "Generation of records for `/etc/hosts` is now made with blockinfile ansible " "module. During upgrade you will have records doubled in yours `/etc/hosts` " "as we don't drop previously created records for safety reasons if " "`openstack_host_manage_hosts_file` is set to true." msgstr "" #: ../../:60 stable/train>:143 stable/ussuri>:236 msgid "" "Get ceph keyrings from files, if variable``ceph_keyrings_dir`` is defined " "the keyrings will be extracted from files. All files in the directory must " "have ``.keyring`` extention and be named with its corresponding " "``ceph_client`` name. For example, if ``cinder_ceph_client`` is ``cinder`` " "the cinder keyring file must be named ``cinder.keyring``. Each file must " "contain username and the key and nothing more, below an example for cinder." "keyring content." msgstr "" #: ../../:964 msgid "" "Glance containers will be rebooted to add the glance cache bind mount if " "glance_default_store is set to file and nfs is not in use." msgstr "" #: ../../:410 msgid "" "Glance containers will now bind mount the default glance cache directory " "from the host when glance_default_store is set to file and nfs is not in use." " With this change, the glance file cache size is no longer restricted to " "the size of the container file system." msgstr "" #: ../../:766 msgid "Glance is using uWSGI when Ceph is used as a storage." msgstr "" #: ../../:502 msgid "Glance registry service has been finally removed" msgstr "" #: ../../:1784 msgid "" "Gnocchi is available for deploy as a metrics storage service. At this time " "it does not integrate with Aodh or Ceilometer. To deploy Aodh or Ceilometer " "to use Gnocchi as a storage / query API, each must be configured " "appropriately with the use of overrides as described in the configuration " "guides for each of these services." msgstr "" #: ../../:1416 msgid "Gnocchi is now used as the default publisher." msgstr "" #: ../../:461 stable/ussuri>:629 msgid "" "Gnocchi migrated from usage of Apache mod_wsgi or native daemon to uWSGI " "daemon. This means, that some variables are not available and has no effect " "anymore, specifically * `gnocchi_use_mod_wsgi` * `gnocchi_apache_*` * " "`gnocchi_ssl*` (except `gnocchi_ssl_external` - it's still in place) * " "`gnocchi_user_ssl_*`" msgstr "" #: ../../:917 origin/stable/ocata>:2023 #: stable/pike>:1822 msgid "" "Gnocchi service endpoint variables were not named correctly. Renamed " "variables to be consistent with other roles." msgstr "" #: ../../:253 current msgid "" "Group name for HAProxy destination hosts in `openstack_user_config.yml`` was " "renamed from ``haproxy_hosts`` to ``load_balancer_hosts``. While backwards " "compatability is kept, it is recommended to replace defenition with the new " "group during the upgrade." msgstr "" #: ../../:569 msgid "" "HAProxy ``haproxy_whitelist_networks`` key inside " "``haproxy_service_configs`` dictionary has been replaced with " "``haproxy_allowlist_networks``." msgstr "" #: ../../:541 msgid "" "HAProxy now verifies if repo server is healthy by ``repo_sync_complete`` " "file that is created with repo_server role. This should prevent non-synced " "repo containers from participating in load balancing." msgstr "" #: ../../:374 stable/2023.2>:377 msgid "" "HAProxy services can now override the path of the certificate with " "``haproxy_ssl_path`` if set under the service definition." msgstr "" #: ../../:117 origin/stable/ocata>:304 #: stable/pike>:467 stable/queens>:723 msgid "" "HAProxy services that use backend nodes that are not in the Ansible " "inventory can now be specified manually by setting ``haproxy_backend_nodes`` " "to a list of ``name`` and ``ip_addr`` settings." msgstr "" #: ../../:363 stable/2023.2>:323 msgid "" "HAProxy services that use backend nodes that are not in the Ansible " "inventory can now have the ``backend_port`` specified in the list, along " "with ``name`` or ``ip_addr`` settings. This allow to have the service bound " "to different port on different backend servers." msgstr "" #: ../../:455 msgid "" "HTTP/2 is enabled by default for frontends that are covered with TLS. You " "can disable this behaviour by setting ``haproxy_frontend_h2: false``" msgstr "" #: ../../:2529 msgid "" "Haproxy has a new backend to support using the repo server nodes as a git " "server. The new backend is called \"repo_git\" and uses port \"9418\". " "Default ACLs have been created to lock down the port's availability to only " "internal networks originating from an RFC1918 address." msgstr "" #: ../../:2533 msgid "" "Haproxy has a new backend to support using the repo server nodes as a " "package manager cache. The new backend is called \"repo_cache\" and uses " "port \"3142\" and a single active node. All other nodes within the pool are " "backups and will be promoted if the active node goes down. Default ACLs have " "been created to lock down the port's availability to only internal networks " "originating from an RFC1918 address." msgstr "" #: ../../:841 msgid "" "Haproxy service definitions(along with their overrides) are no longer stored " "in haproxy group vars. They were moved to service variables, so for example " "``glance_haproxy_services`` are stored in glance_all group variables." msgstr "" #: ../../:643 msgid "" "Haproxy services are now configured separately at the beginning of each " "service playbook." msgstr "" #: ../../:759 origin/stable/ocata>:1180 #: stable/pike>:1239 msgid "" "Haproxy-server role allows to set up tunable parameters. For doing that it " "is necessary to set up a dictionary of options in the config files, " "mentioning those which have to be changed (defaults for the remaining ones " "are programmed in the template). Also \"maxconn\" global option made to be " "tunable." msgstr "" #: ../../:207 msgid "" "Historically, Open vSwitch (OVS) could not interact directly with iptables " "to implement security groups. Thus, the OVS agent and Compute service use a " "Linux bridge between each instance (VM) and the OVS integration bridge br-" "int to implement security groups. Now the OVS agent includes an optional " "firewall driver that natively implements security groups as flows in OVS " "rather than the Linux bridge device and iptables. This increases scalability " "and performance." msgstr "" #: ../../:969 msgid "" "Horizon deployment now supports an operator provided customization module " "which can be configured using the ``horizon_customization_module`` variable. " "Please see `the Horizon documentation `_ for more " "information." msgstr "" #: ../../:462 origin/stable/newton>:3414 msgid "" "Horizon deployments were broken due to an incorrect hostname setting being " "placed in the apache ServerName configuration. This caused Horizon startup " "failure any time debug was disabled." msgstr "" #: ../../:900 origin/stable/newton>:3300 msgid "" "Horizon disables password autocompletion in the browser by default, but " "deployers can now enable autocompletion by setting " "``horizon_enable_password_autocomplete`` to ``True``." msgstr "" #: ../../:40 stable/queens>:193 stable/rocky>:359 #: stable/stein>:465 msgid "" "Horizon has, since OSA's inception, been deployed with HTTPS access enabled, " "and has had no way to turn it off. Some use-cases may want to access via " "HTTP instead, so this patch enables the following." msgstr "" #: ../../:336 msgid "" "Horizon is now co-installabe with Skyline dashboard. In case both Horizon " "and Skyline are deployed, Horizon will be served by `/horizon` URI." msgstr "" #: ../../:1956 msgid "" "Horizon now has a boolean variable named ``horizon_enable_ha_router`` to " "enable Neutron HA router management." msgstr "" #: ../../:411 msgid "" "Horizon now has the ability to run directly from uWSGI. To support this " "feature the new Boolean variable `horizon_use_uwsgi` has been added. The new " "variable, when set to **true**, will omit the apache2 install process and " "instead run horizon from a uWSGI process leveraging a systemd service file." msgstr "" #: ../../:481 origin/stable/newton>:1816 msgid "" "Horizon now has the ability to set arbitrary configuration options using " "global option ``horizon_config_overrides`` in YAML format. The overrides " "follow the same pattern found within the other OpenStack service overrides. " "`General documentation on overrides can be found here `_." msgstr "" #: ../../:673 msgid "" "Horizon's IPv6 support is now configurable with Ansible variables. Deployers " "can enable IPv6 support in Horizon by setting the following variable:" msgstr "" #: ../../:1960 msgid "" "Horizon's IPv6 support is now enabled by default. This allows users to " "manage subnets with IPv6 addresses within the Horizon interface. Deployers " "can disable IPv6 support in Horizon by setting the following variable:" msgstr "" #: ../../:1677 msgid "" "Host security hardening is now applied by default using the ``openstack-" "ansible-security`` role. Developers can opt out by setting the " "``apply_security_hardening`` Ansible variable to ``false``. For more " "information about the role and the changes it makes, refer to the `openstack-" "ansible-security documentation `_." msgstr "" #: ../../:3178 msgid "" "Hosts running LXC on Ubuntu 14.04 will now need to enable the \"trusty-" "backports\" repository. The backports repo on Ubuntu 14.04 is now required " "to ensure LXC is updated to the latest stable version." msgstr "" #: ../../:1328 origin/stable/ocata>:1644 msgid "" "IPv6 support has been added for the LXC bridge network. This can be " "configured using ``lxc_net6_address``, ``lxc_net6_netmask``, and " "``lxc_net6_nat``." msgstr "" #: ../../:2541 msgid "" "If HAProxy is used as the loadbalancer for a deployment it will generate a " "self-signed certificate by default. If HAProxy is NOT used, an SSL " "certificate should be installed on the external loadbalancer. The " "installation of an SSL certificate on an external load balancer is not " "covered by the deployment tooling." msgstr "" #: ../../:511 msgid "" "If Horizon dashboard of OSA installation has a public FQDN, is it now " "possible to use LetsEncrypt certification service. Certificate will be " "generated within HAProxy installation and a cron entry to renew the " "certificate daily will be setup. Note that there is no certificate " "distribution implementation at this time, so this will only work for a " "single haproxy-server environment." msgstr "" #: ../../:480 msgid "" "If ``oslomsg_rabbit_quorum_queues`` is enabled, RabbitMQ vhosts will be re-" "created without leading ``/``. Ensure to reflect these changes in your " "monitoring software if vhosts are not auto-discovered. Also changing vhost " "name will result in prolonged downtime for services, as not re-configured " "yet backends will fail to connect to RabbitMQ until restart. It also might " "be worth to process upgrade with extra caution for some serivices that are " "sensetive to RabbitMQ downtime or even disabling usage of quorum queues for " "these services. Good examples of such services are Trove or Neutron with ML2 " "LXB or ML2 OVS drivers." msgstr "" #: ../../:623 msgid "" "If a deployment uses local copies or caches of the openstack requirements " "repo or upper-constraints files, the repo server is now able to natively " "host copies of the relevant upper-constraints files and serve them to pip " "during wheel builds. It is now also possible to supply custom constraints " "files in the deploy host /etc/openstack_deploy/upper-constraints directory. " "Deployers should take account of the new capability in the repo server and " "adjust any special handling of downloading upper-constraints that they may " "have made via overrides, in particular requirements_git_url." msgstr "" #: ../../:551 msgid "" "If defined in applicable host or group vars the variable " "``container_extra_networks`` will be merged with the existing " "``container_networks`` from the dynamic inventory. This allows a deployer to " "specify special interfaces which may be unique to an indivdual container. An " "example use for this feature would be applying known fixed IP addresses to " "public interfaces on BIND servers for designate." msgstr "" #: ../../:14 msgid "" "If newton is still in use and a new build is executed, the repo-build " "process will fail due to a new PBR library release which was issued after " "newton was declared end-of-life (EOL). This issue will show up if gnocchi is " "being used in the environment and may also show up as a venv build failure " "for other services. This issue can be resolved either by upgrading the " "environment to a recent OpenStack-Ansible Ocata release, or by doing the " "following." msgstr "" #: ../../:565 msgid "" "If the ``ironic_drivers_enabled`` variable from the os_ironic role includes " "a driver which uses the ``ipmitool-socat`` console interface, that interface " "is now enabled automatically in the ``ironic.conf`` " "``enabled_console_interfaces`` config option. New variables " "``ironic_socat_bind_address`` and ``ironic_socat_port_range`` are added to " "support further customisation of the serial console data flow." msgstr "" #: ../../:707 stable/pike>:1551 msgid "" "If the `galera_server` role is deployed on a bare metal host, the MariaDB " "default is maintained (`PrivateDevices=true`). If the `galera_server` role " "is deployed within a container, the `PrivateDevices` configuration is set to " "`true` to work around a systemd bug with a bind mounted `/dev/ptmx`." msgstr "" #: ../../:721 stable/pike>:1565 msgid "" "If the `memcached_server` role is deployed on a bare metal host, the default " "is maintained (`PrivateDevices=true`). If the role is deployed within a " "container, the `PrivateDevices` configuration is set to `true` to work " "around a systemd bug with a bind mounted `/dev/ptmx`." msgstr "" #: ../../:1182 origin/stable/ocata>:1607 msgid "" "If the cinder backup service is enabled with " "``cinder_service_backup_program_enabled: True``, then heat will be " "configured to use the cinder backup service. The " "``heat_cinder_backups_enabled`` variable will automatically be set to " "``True``." msgstr "" #: ../../:173 origin/stable/ocata>:356 msgid "" "If the protocol of either the keystone admin or internal endpoints is " "'https' and SSL is being terminated at a load balancer, tasks which verify " "that services are responsive and perform the initial service setup through " "through the keystone hosts' web server ports may fail." msgstr "" #: ../../:1681 origin/stable/newton>:2502 msgid "" "If there are swift hosts in the environment, then the value for " "``cinder_service_backup_program_enabled`` will automatically be set to " "``True``. This negates the need to set this variable in ``user_variables." "yml``, but the value may still be overridden at the deployer discretion." msgstr "" #: ../../:1685 origin/stable/newton>:2506 msgid "" "If there are swift hosts in the environment, then the value for " "``glance_default_store`` will automatically be set to ``swift``. This " "negates the need to set this variable in ``user_variables.yml``, but the " "value may still be overridden at the deployer discretion." msgstr "" #: ../../:539 msgid "" "If you are using cinder in active/active mode (ie with Ceph backend), it's " "highly recommended to define ``coordination_hosts`` before upgrade to deploy " "zookeeper coordination cluster which is required for proper work of cinder " "active/active mode." msgstr "" #: ../../:911 msgid "" "If you do not make this change, the Cinder backup service will refuse to " "start properly." msgstr "" #: ../../:1718 msgid "" "If you had your own keepalived configuration file, please rename and move it " "to the openstack-ansible user space, for example by moving it to ```/etc/" "openstack_deploy/keepalived/keepalived.yml```. Our haproxy playbook does not " "load an external variable files anymore. The keepalived variable override " "system has been standardised to the same method used elsewhere." msgstr "" #: ../../:673 unmaintained/xena>:259 msgid "" "If you have database named as ``#tmp`` you should change ``galera_tmp_dir`` " "path and adjust ``galera_ignore_db_dirs`` or rename database." msgstr "" #: ../../:687 unmaintained/xena>:173 msgid "" "If you have defined ``haproxy_tuning_params`` in your deployment, make sure " "that before upgrade all keys are valid haproxy options. For example, instead " "of ``chksize: 16384`` you should set ``tune.chksize: 16384``. Otherwise " "invalid config will be generated and haproxy will fail on startup. No " "upgrade scripts are provided for this change as well as no backwards " "compatability." msgstr "" #: ../../:911 msgid "" "If you have overriden your ``openstack_host_specific_kernel_modules``, " "please remove its group matching, and move that override directly to the " "appropriate group." msgstr "" #: ../../:178 msgid "" "If you still want to preserve old versions of OVS/OVN, you can define a " "following variable:" msgstr "" #: ../../:687 msgid "" "If you're using NSX or Nuage network drivers, make sure you have replaced " "definition of ``nova_network_type`` to appropriate " "``nova_nova_conf_overrides``. Please, consult with os_neutron documenteation " "on the required overrides." msgstr "" #: ../../:163 stable/rocky>:334 stable/stein>:998 msgid "" "If your configuration previously set the ``libvirt/cpu_model`` and/or " "``libvirt/cpu_model_extra_flags`` variables in a " "``nova_nova_conf_overrides`` dictionary, you should consider moving those to " "``nova_cpu_model`` and ``nova_cpu_model_extra_flags`` in the appropriate " "entry (normally ``kvm``) in the ``nova_virt_types`` dictionary." msgstr "" #: ../../:523 msgid "Implementation Example:" msgstr "" #: ../../:150 unmaintained/wallaby>:217 msgid "" "Implemented ``openstack_hosts_package_manager_extra_conf`` variable. It " "allows to add extra content into package manager's configuration (works with " "apt,yum and dnf)." msgstr "" #: ../../:720 msgid "" "Implemented ``tempest_extra_plugins`` variable which allows to define extra " "tempest plugins without overriding the whole `tempest_plugins` list." msgstr "" #: ../../:286 msgid "" "Implemented horizon WEBSSO auto redirects. Following new variables were " "added to manage redirects configuration:" msgstr "" #: ../../:462 msgid "" "Implemented installation of extra Python packages inside Ansible virtual " "environment. By default, extra requirements should be defined in ``/etc/" "openstack_deploy/user-ansible-venv-requirements.txt`` file. Path to the " "requirements file can be overriden using ``USER_ANSIBLE_REQUIREMENTS_FILE`` " "environment variable." msgstr "" #: ../../:387 msgid "" "Implemented new variable ``connection_recycle_time`` responsible for " "SQLAlchemy's connection recycling" msgstr "" #: ../../:404 msgid "Implemented new variables to control new oslo.messaging behaviour:" msgstr "" #: ../../:424 msgid "" "Implemented possibility to natively define ``gnocchi_incoming_driver`` " "separately from ``gnocchi_storage_driver``. Default behaviour is that " "``[incoming]`` is left unconfigured which means ``[storage]`` is used when " "gnocchi_incoming_driver and gnocchi_storage_driver are equal. Role will " "install incoming driver dependencies if required." msgstr "" #: ../../:1828 msgid "" "Implemented support for Ubuntu 16.04 Xenial. percona-xtrabackup packages " "will be installed from distro repositories, instead of upstream percona " "repositories due to lack of available packages upstream at the time of " "implementing this feature." msgstr "" #: ../../:392 msgid "" "Implemented variable ``galera_data_dir`` that control datadir for MariaDB " "databases. Defaults to `/var/lib/mysql`." msgstr "" #: ../../:442 msgid "" "Implemented variable ``gnocchi_metricd_workers`` that is designed to " "controll amount of gnocchi-metricd workers spawned. By default it is equal " "to number of CPU cores, but no more than 16 workers." msgstr "" #: ../../:136 current msgid "" "Implemented variable ``horizon_extra_local_settings`` that allows to insert " "arbitrary parameters defined as a regular mapping inside local_settings.py " "of Horizon. Parameters will be inserted at the end of the config file." msgstr "" #: ../../:420 stable/2023.2>:343 stable/yoga>:70 #: unmaintained/zed>:143 msgid "" "Implemented variable ``lxc_image_cache_expiration`` that controlls for how " "long cached LXC image will be valid. Default value is `1year`. Variable " "format should be compatible with community.general.to_time_unit filter." msgstr "" #: ../../:457 msgid "" "Implemented variable ``magnum_conductor_workers`` that is designed to " "controll amount of magnum-conductor workers spawned. By default it is equal " "to number of CPU cores, but no more then 16 workers." msgstr "" #: ../../:143 current msgid "" "Implemented variable `neutron_l3_agent_extensions` to control list of " "enabled L3 agent extensions." msgstr "" #: ../../:318 unmaintained/xena>:152 #: unmaintained/zed>:479 msgid "" "Implemented variables ``rally_openstack_git_repo`` and " "``rally_openstack_git_install_branch`` that allow to override installation " "source for rally-openstack package as well as control installed version of " "the package." msgstr "" #: ../../:47 msgid "" "Implemented variables ``rally_openstack_git_repo`` and " "``rally_openstack_git_install_branch`` that allow to override installation " "source for rally-openstack package as well as controll installed version of " "the package." msgstr "" #: ../../:552 msgid "" "Implemented variables ``tempest_public_net_create``, " "``tempest_private_net_create``, ``tempest_router_create``, " "``tempest_images_create``, ``tempest_flavors_create``, " "``tempest_projects_create`` which allow to skip creating specific resources." msgstr "" #: ../../:726 origin/stable/ocata>:1129 #: stable/pike>:1235 msgid "" "Implements SSL connection ability to MySQL. ``galera_use_ssl`` option has to " "be set to ``true`` (default), in this case playbooks create self-signed SSL " "bundle and sets up MySQL configs to use it or distributes user-provided " "bundle throughout Galera nodes." msgstr "" #: ../../:273 msgid "" "Implements variable ``blazar_manager_plugins`` that allows to configure list " "of enabled plugins for Blazar." msgstr "" #: ../../:965 msgid "" "In OSA deployments prior to Queens, if ``repo_git_cache_dir`` was set to a " "folder which existed on a repo container host then that folder would be " "symlinked to the repo container bind mount instead of synchronising its " "contents to the repo container. This functionality is deprecated in Queens " "and will be removed in Rocky. The ability to make use of the git cache still " "exists, but the folder contents will be synchronised from the deploy host to " "the repo container. If you have made use of the symlink functionality " "previously, please move the contents to a standard folder and remove the " "symlink." msgstr "" #: ../../:904 msgid "" "In Stein, Cinder stopped supporting configuring backup drivers without the " "full class path. This means that you must now use the following values for " "``cinder_service_backup_driver``." msgstr "" #: ../../:323 origin/stable/ocata>:506 #: stable/pike>:2099 msgid "" "In Ubuntu the ``dnsmasq`` package actually includes init scripts and service " "configuration which conflict with LXC and are best not included. The actual " "dependent package is ``dnsmasq-base``. The package list has been adjusted " "and a task added to remove the ``dnsmasq`` package and purge the related " "configuration files from all LXC hosts." msgstr "" #: ../../:526 stable/queens>:1123 msgid "" "In addition, this should speed up playbook runs since ``yum`` can check a " "locally-hosted repository instead of a remote repository with availability " "and performance challenges." msgstr "" #: ../../:476 msgid "" "In case deployer wants to switch into using RabbitMQ quorum queues instead " "of traditional HA policies during OpenStack upgrade, they need to define " "variable ``oslomsg_rabbit_quorum_queues: True`` in user_variables.yml." msgstr "" #: ../../:357 current stable/2023.1>:29 #: stable/2023.2>:49 stable/2024.1>:123 msgid "" "In case of switching Neutron from uWSGI to old eventlet, `neutron-rpc-" "server` service will be disabled and stopped by the role." msgstr "" #: ../../:156 unmaintained/wallaby>:248 msgid "" "In deployments where a separate host is used to manage the OpenStack Ansible " "configuration, the '/etc/hosts' file on that host will now include a section " "adding hostname to IP resolution for all hosts in the inventory. This can be " "enabled/disabled via 'openstack_host_manage_deploy_hosts_file'." msgstr "" #: ../../:262 stable/stein>:1611 msgid "" "In https://review.openstack.org/582633 an adjustment was made to the " "``openstack-ansible`` wrapper which mistakenly changed the intended " "behaviour. The wrapper is only meant to include the extra-vars and invoke " "the inventory if ``ansible-playbook`` was executed from inside the " "``openstack-ansible`` repository clone (typically ``/opt/openstack-" "ansible``), but the change made the path irrelevant. This has now been fixed " "- ``ansible-playbook`` and ``ansible`` will only invoke the inventory and " "include extra vars if it is invoked from inside the git clone path." msgstr "" #: ../../:504 msgid "" "In order to accomodate Centos-8 Stream support, it is necessary require the " "minimum version of Centos-8 Classic to be 8.3. There are breaking changes " "between Stream and Classic versions prior to 8.3 which break ansible code " "that detects major/minor versions of Centos. Before upgrading to Wallaby, " "deployers should ensure that their Centos hosts are updated to 8.3." msgstr "" #: ../../:260 current stable/2024.1>:104 msgid "" "In order to align used Apache MPM across the board, Horizon default MPM is " "switched from ``worker`` to ``event``. A variable " "``horizon_apache_mpm_backend`` was introduced to define the MPM in use." msgstr "" #: ../../:390 current stable/2023.1>:56 #: stable/2023.2>:77 stable/2024.1>:185 msgid "" "In order to align with oslo.messaging `reverted default `_ of " "``heartbeat_in_pthread`` value we remove own logic of handling the value " "based on host groups. You still can use ``oslomsg_heartbeat_in_pthread`` or " "specific role variables to alter the behaviour." msgstr "" #: ../../:910 origin/stable/newton>:3385 msgid "" "In order to ensure that the appropriate data is delivered to requesters from " "the repo servers, the slave repo_server web servers are taken offline during " "the synchronisation process. This ensures that the right data is always " "delivered to the requesters through the load balancer." msgstr "" #: ../../:520 msgid "" "In order to follow ansible naming conventions for variables, following " "variables were renamed:" msgstr "" #: ../../:828 origin/stable/newton>:1877 msgid "" "In order to make use of the latest stable keepalived version, the variable " "``keepalived_use_latest_stable`` must be set to ``True``" msgstr "" #: ../../:84 stable/pike>:151 #: stable/queens>:364 stable/rocky>:1513 msgid "" "In order to prevent further issues with a libvirt and python-libvirt version " "mismatch, KVM-based compute nodes will now use the distribution package " "python library for libvirt. This should resolve the issue seen with pike " "builds on CentOS 7.5." msgstr "" #: ../../:1524 origin/stable/newton>:2443 msgid "" "In order to reduce the time taken for fact gathering, the default subset " "gathered has been reduced to a smaller set than the Ansible default. This " "may be changed by the deployer by setting the ``ANSIBLE_GATHER_SUBSET`` " "variable in the bash environment prior to executing any ansible commands." msgstr "" #: ../../:314 current msgid "" "In order to unify Ceph client installation approaches for EL and Debian " "platforms following variables were deprecated and are silently ignored:" msgstr "" #: ../../:317 msgid "" "In order to use dedicated net nodes, override of env.d is no longer required." " Deployers can set ``network-infra_hosts`` to their infra (LXC) hosts and " "``network-agent_hosts`` to their net nodes inside their " "openstack_user_config.yml or conf.d files." msgstr "" #: ../../:2545 msgid "" "In previous releases connections to Horizon originally terminated SSL at the " "Horizon container. While that is still an option, SSL is now assumed to be " "terminated at the load balancer. If you wish to terminate SSL at the horizon " "node change the ``horizon_external_ssl`` option to **false**." msgstr "" #: ../../:1018 stable/pike>:1420 msgid "" "In the Ocata release, Trove added support for encrypting the rpc " "communication between the guest DBaaS instances and the control plane. The " "default values for ``trove_taskmanager_rpc_encr_key`` and " "``trove_inst_rpc_key_encr_key`` should be overridden to specify installation " "specific values." msgstr "" #: ../../:336 msgid "" "In the Xena release, TLS for VNC is enabled by default, for existing " "deployments this will prevent console access to existing virtual machines, " "as this configuration change does not apply to existing virtual machines. " "Virtual machines created after the configuration change are not affected." msgstr "" #: ../../:1145 stable/train>:497 #: stable/ussuri>:665 msgid "" "In the ``ceph_client`` role, the only valid values for ``ceph_pkg_source`` " "are now ``ceph`` and ``distro``. For Ubuntu, the Ubuntu Cloud Archive apt " "source is already setup by the ``openstack_hosts`` role, so there is no need " "for it to also be setup by the ``ceph_client`` role." msgstr "" #: ../../:65 msgid "" "In the ``lxc_hosts`` role execution, we make use of the images produced on a " "daily basis by images.linuxcontainers.org. Recent changes in the way those " "images are produced have resulted in changes to the default ``/etc/resolve." "conf`` in that default image. As such, when executing the cache preparation " "it fails. For all newton queens releases the workaround to get past the " "error is to add the following to the ``/etc/openstack_deploy/user_variables." "yml`` file." msgstr "" #: ../../:166 msgid "" "In the ``lxc_hosts`` role execution, we make use of the images produced on a " "daily basis by images.linuxcontainers.org. Recent changes in the way those " "images are produced have resulted in changes to the default ``/etc/resolve." "conf`` in that default image. As such, when executing the cache preparation " "it fails. For ocata releases prior to 15.1.21 the workaround to get past the " "error is to add the following to the ``/etc/openstack_deploy/user_variables." "yml`` file." msgstr "" #: ../../:233 msgid "" "In the ``lxc_hosts`` role execution, we make use of the images produced on a " "daily basis by images.linuxcontainers.org. Recent changes in the way those " "images are produced have resulted in changes to the default ``/etc/resolve." "conf`` in that default image. As such, when executing the cache preparation " "it fails. For pike releases prior to 16.0.13 the workaround to get past the " "error is to add the following to the ``/etc/openstack_deploy/user_variables." "yml`` file." msgstr "" #: ../../:471 msgid "" "In the ``lxc_hosts`` role execution, we make use of the images produced on a " "daily basis by images.linuxcontainers.org. Recent changes in the way those " "images are produced have resulted in changes to the default ``/etc/resolve." "conf`` in that default image. As such, when executing the cache preparation " "it fails. For queens releases prior to 17.0.4 the workaround to get past the " "error is to add the following to the ``/etc/openstack_deploy/user_variables." "yml`` file." msgstr "" #: ../../:3058 msgid "" "In the ``rsyslog_client`` role, the variable ``rsyslog_client_repos`` has " "been removed as it is no longer used." msgstr "" #: ../../:846 origin/stable/newton>:2417 msgid "" "In the latest stable version of keepalived there is a problem with the " "priority calculation when a deployer has more than five keepalived nodes. " "The problem causes the whole keepalived cluster to fail to work. To work " "around this issue it is recommended that deployers limit the number of " "keepalived nodes to no more than five or that the priority for each node is " "set as part of the configuration (cf. ``haproxy_keepalived_vars_file`` " "variable)." msgstr "" #: ../../:1288 msgid "" "In the lxc_container_create role, the keys ``preup``, ``postup``, " "``predown``, and ``postdown`` are now supported in the " "``container_networks`` dict for Ubuntu systems. This allows operators to " "configure custom scripts to be run by Ubuntu's ifupdown system when network " "interface states are changed." msgstr "" #: ../../:169 unmaintained/zed>:239 msgid "Includes SHA bumps for Nova, Cinder and Glance to cover OSSA-2023-003." msgstr "" #: ../../:117 stable/2023.2>:138 #: stable/2024.1>:218 msgid "" "Includes safe (non-vulnerable) versions of services regarding `OSSA-2024-001 " "`_" msgstr "" #: ../../:45 stable/2024.1>:162 msgid "" "Includes safe (non-vulnerable) versions of services regarding `OSSA-2024-002 " "`_" msgstr "" #: ../../:371 msgid "" "Initially to help with the transition from unencrypted VNC to VeNCrypt, " "compute nodes auth scheme allows for both encrypted and unencrypted sessions " "using the variable `nova_vencrypt_auth_scheme`, this will be removed in " "future releases." msgstr "" #: ../../:3274 msgid "" "Installation of Ansible on the root system, outside of a virtual " "environment, will no longer be supported." msgstr "" #: ../../:2739 msgid "" "Installation of aodh and its dependent pip packages will now only occur " "within a Python virtual environment. The ``aodh_venv_enabled`` and " "``aodh_venv_bin`` variables have been removed." msgstr "" #: ../../:2743 msgid "" "Installation of ceilometer and its dependent pip packages will now only " "occur within a Python virtual environment. The ``ceilometer_venv_enabled`` " "and ``ceilometer_venv_bin`` variables have been removed." msgstr "" #: ../../:2747 msgid "" "Installation of cinder and its dependent pip packages will now only occur " "within a Python virtual environment. The ``cinder_venv_enabled`` and " "``cinder_venv_bin`` variables have been removed." msgstr "" #: ../../:557 msgid "" "Installation of cloudkitty and its dependent pip packages will now only " "occur within a Python virtual environment. The ``cloudkitty_venv_bin`` and " "``cloudkitty_venv_enabled`` variables have been removed." msgstr "" #: ../../:1891 msgid "" "Installation of designate and its dependent pip packages will now only occur " "within a Python virtual environment. The ``designate_venv_enabled``, " "``designate_venv_bin``, ``designate_venv_etc_dir`` and " "``designate_non_venv_etc_dir`` variables have been removed." msgstr "" #: ../../:2711 msgid "" "Installation of glance and its dependent pip packages will now only occur " "within a Python virtual environment. The ``glance_venv_bin``, " "``glance_venv_enabled``, ``glance_venv_etc_dir``, and " "``glance_non_venv_etc_dir`` variables have been removed." msgstr "" #: ../../:2715 msgid "" "Installation of glance and its dependent pip packages will now only occur " "within a Python virtual environment. The ``gnocchi_venv_bin``, " "``gnocchi_venv_enabled``, ``gnocchi_venv_etc_dir``, and " "``gnocchi_non_venv_etc_dir`` variables have been removed." msgstr "" #: ../../:2719 msgid "" "Installation of heat and its dependent pip packages will now only occur " "within a Python virtual environment. The ``heat_venv_bin`` and " "``heat_venv_enabled`` variables have been removed." msgstr "" #: ../../:2723 msgid "" "Installation of horizon and its dependent pip packages will now only occur " "within a Python virtual environment. The ``horizon_venv_bin``, " "``horizon_venv_enabled``, ``horizon_venv_lib_dir``, and " "``horizon_non_venv_lib_dir`` variables have been removed." msgstr "" #: ../../:2727 msgid "" "Installation of ironic and its dependent pip packages will now only occur " "within a Python virtual environment. The ``ironic_venv_bin`` and " "``ironic_venv_enabled`` variables have been removed." msgstr "" #: ../../:2731 msgid "" "Installation of keystone and its dependent pip packages will now only occur " "within a Python virtual environment. The ``keystone_venv_enabled`` variable " "has been removed." msgstr "" #: ../../:2751 msgid "" "Installation of magnum and its dependent pip packages will now only occur " "within a Python virtual environment. The ``magnum_venv_bin``, " "``magnum_venv_enabled`` variables have been removed." msgstr "" #: ../../:2755 msgid "" "Installation of neutron and its dependent pip packages will now only occur " "within a Python virtual environment. The ``neutron_venv_enabled``, " "``neutron_venv_bin``, ``neutron_non_venv_lib_dir`` and " "``neutron_venv_lib_dir`` variables have been removed." msgstr "" #: ../../:2759 msgid "" "Installation of nova and its dependent pip packages will now only occur " "within a Python virtual environment. The ``nova_venv_enabled``, " "``nova_venv_bin`` variables have been removed." msgstr "" #: ../../:2763 msgid "" "Installation of rally and its dependent pip packages will now only occur " "within a Python virtual environment. The ``rally_venv_bin``, " "``rally_venv_enabled`` variables have been removed." msgstr "" #: ../../:2767 msgid "" "Installation of sahara and its dependent pip packages will now only occur " "within a Python virtual environment. The ``sahara_venv_bin``, " "``sahara_venv_enabled``, ``sahara_venv_etc_dir``, and " "``sahara_non_venv_etc_dir`` variables have been removed." msgstr "" #: ../../:2771 msgid "" "Installation of swift and its dependent pip packages will now only occur " "within a Python virtual environment. The ``swift_venv_enabled``, " "``swift_venv_bin`` variables have been removed." msgstr "" #: ../../:669 stable/stein>:533 msgid "" "Instead of downloading images to the magnum API servers, the images will now " "download to the ``magnum_service_setup_host`` to the folder set in " "``magnum_image_path`` owned by ``magnum_image_path_owner``." msgstr "" #: ../../:601 msgid "" "Introduce this feature to empty compute nodes, and migrate VMs over once the " "agents have been restarted." msgstr "" #: ../../:512 unmaintained/wallaby>:91 #: unmaintained/xena>:290 msgid "" "Introduced new variable ``cinder_volume_usage_audit_send_actions_enabled`` " "to allow the deployer to disable the send actions option in cinder-volume-" "usage-audit service unit. To have lowest possible footprint, the default " "value would be true to not change the behaviour of the cinder-volume-usage-" "audit in existing deployments." msgstr "" #: ../../:2117 msgid "" "Introduced option to deploy Keystone behind Nginx. A new variable " "``keystone_apache_enabled`` is introduced to toggle this behavior. The " "default is ``true`` which continues to deploy with Apache. Additional " "configuration can be delivered to Nginx through the use of the " "``keystone_nginx_extra_conf`` list variable. Federation features are not " "supported with this configuration at this time. Use of this option requires " "``keystone_mod_wsgi_enabled`` to be set to ``false`` which will deploy " "Keystone under Uwsgi." msgstr "" #: ../../:2113 msgid "" "Introduced option to deploy Keystone under Uwsgi. A new variable " "``keystone_mod_wsgi_enabled`` is introduced to toggle this behavior. The " "default is ``true`` which continues to deploy with mod_wsgi for Apache. The " "ports used by Uwsgi for socket and http connection for both public and admin " "Keystone services are configurable (see also the ``keystone_uwsgi_ports`` " "dictionary variable). Other Uwsgi configuration can be overridden by using " "the ``keystone_uwsgi_ini_overrides`` variable as documented under " "\"Overriding OpenStack configuration defaults\" in the OpenStack-Ansible " "Install Guide. Federation features should be considered _experimental_ with " "this configuration at this time." msgstr "" #: ../../:369 msgid "" "Introduces 3 new variables cinder_default_availability_zone, " "octavia_cinder_volume_size and octavia_cinder_volume_type. using these " "variables, enables Octavia to use different Cinder configurations." msgstr "" #: ../../:136 msgid "" "Ironic Inspector service was bumped to master version instead of stable/" "ussuri. Which means that during upgrade to this version Inspector version " "will be downgraded, which may result in problems with migrations. We " "recommend to ensure you have full DB backup before Inspector upgrade or " "overwrite ironic_inspector_git_install_branch with 10.4.0 tag" msgstr "" #: ../../:514 msgid "" "It is commonly considered bad practice to downlaod random images from the " "Internet expecially the test images the Octavia team provides which could " "potentially include unpatched operating system packages - so for any " "production deploy adjust the download url to an artifact storage your " "organization controls. The system also does not authenticate the image (e.g. " "with an md5) so should only be used on networks your organization controls." msgstr "" #: ../../:604 msgid "" "It is highly recommended to explicitly disable " "``trove_guest_oslomsg_rabbit_quorum_queues`` during upgrade in case " "``oslomsg_rabbit_quorum_queues: True``, which is default behaviour since " "2024.1 (Caracal). Migration to Quorum queues for Trove Guestagent is not " "supported and might be troublesome, as already spawned agents will not " "reload configuration. New deployments though may utilize quorum queues from " "the very beginning safely." msgstr "" #: ../../:273 stable/2023.2>:266 #: stable/2024.1>:660 msgid "" "It is highly recommended to provide ``filename`` parameter explicitly " "whenever you define ``systemd_netdevs`` or ``systemd_networks`` structures." msgstr "" #: ../../:131 msgid "" "It is not possible to override the ceph client credential for nova and " "cinder with ansible 1.9.4." msgstr "" #: ../../:606 msgid "" "It is now mandatory to use a verifiable SSL certificate and Certificate " "Authority trust chain for the RabbitMQ installation. This can be achieved " "automatically through the new ansible role ansibe-role-pki with appropriate " "addition of openstack_pki_* variables. Any existing deployments which use " "the rabbitmq_user_ssl_* variables must ensure that the supplied certificates " "can be verified by a CA certificate installed into the trust store of each " "host and container. This can be achieved through supplying the CA " "certificate on the deploy host and using overrides from the openstack_hosts " "role to install it." msgstr "" #: ../../:558 msgid "" "It is now possible for deployers to enable or disable the `mysqlcheck` " "capability. The Boolean option `galera_monitoring_check_enabled` has been " "added which has a default value of **true**." msgstr "" #: ../../:562 msgid "" "It is now possible to change the port used by `mysqlcheck`. The integer " "option `galera_monitoring_check_port` has been added with the default value " "of **9200**." msgstr "" #: ../../:484 msgid "" "It is now possible to create and manage third-party services, mount points " "and networks on hosts managed by OpenStack-Ansible. This also inlcudes " "networks, that are required for OpenStack-Ansible installation, like br-mgmt " "or br-storage. In order to configure specific resources on selected set of " "hosts, usage of group_vars or host_vars is appreciated." msgstr "" #: ../../:1037 origin/stable/ocata>:1405 msgid "" "It is now possible to customise the location of the configuration file " "source for the All-In-One (AIO) bootstrap process using the " "``bootstrap_host_aio_config_path`` variable." msgstr "" #: ../../:1041 origin/stable/ocata>:1409 msgid "" "It is now possible to customise the location of the scripts used in the All-" "In-One (AIO) boostrap process using the ``bootstrap_host_aio_script_path`` " "variable." msgstr "" #: ../../:1049 origin/stable/ocata>:1417 msgid "" "It is now possible to customise the name of the ``user_secrets.yml`` file " "created by the All-In-One (AIO) bootstrap process using the " "``bootstrap_host_user_secrets_filename`` variable." msgstr "" #: ../../:1045 origin/stable/ocata>:1413 msgid "" "It is now possible to customise the name of the ``user_variables.yml`` file " "created by the All-In-One (AIO) bootstrap process using the " "``bootstrap_host_user_variables_filename`` variable." msgstr "" #: ../../:328 msgid "" "It is now possible to have a service which only have a frontend. by using " "`haproxy_frontend_only` inside your service." msgstr "" #: ../../:77 stable/rocky>:193 stable/stein>:302 msgid "" "It is now possible to modify the NTP server options in chrony using " "``security_ntp_server_options``." msgstr "" #: ../../:73 stable/queens>:270 stable/rocky>:935 #: stable/stein>:798 msgid "" "It is now possible to specify a list of tests for tempest to blacklist when " "executing using the ``tempest_test_blacklist`` list variable." msgstr "" #: ../../:285 stable/stein>:230 msgid "" "It is now possible to use NFS mountpoints with the role by using the " "nova_nfs_client variable, which is useful for using NFS for instance data " "and saves." msgstr "" #: ../../:349 msgid "" "It is now possible to use multiple variables with a specific prefix to " "define the whole contents of the tempest test include/exclude lists. Any " "variable from host/group or ansible extra-vars whose name is prefixed with " "the value in the os_tempest role default " "`tempest_test_search_includelist_pattern` or " "`tempest_test_search_excludelist_pattern` will be combined with the existing " "`tempest_test_includelist` or `tempest_test_excludelist` variables into a " "single include/exclude list." msgstr "" #: ../../:1275 msgid "" "It is now possible to use the horizon_launch_instance_defaults variable that " "allows customizing the default values for properties found in the Launch " "Instance modal, using the LAUNCH_INSTANCE_DEFAULTS config option. See https:/" "/docs.openstack.org/developer/horizon/install/settings.html#launch-instance-" "defaults" msgstr "" #: ../../:187 stable/train>:383 stable/ussuri>:534 msgid "" "It is possible that you may need to use the cinder-manage command to migrate " "volumes to a specific host. In addition, you will have to remove the old " "``rbd:volumes`` service which will be stale." msgstr "" #: ../../:464 stable/stein>:206 msgid "" "It is possible to configure Glance to allow cross origin requests by " "specifying the allowed origin address using the " "``glance_cors_allowed_origin`` variable. By default, this will be the load " "balancer address." msgstr "" #: ../../:897 msgid "" "It is recommended for deployers to clean up the **neutron_agents** " "container(s) after an upgrade is complete and the cluster has been verified " "as stable. This can be done by simply disabling the neutron agents running " "in the **neutron_agent** container(s), re-balancing the agent services " "targeting the new baremetal agents, deleting the container(s), and finally " "removing the container(s) from inventory." msgstr "" #: ../../:436 stable/rocky>:1470 msgid "" "It is recommended that the certificate generation is always reviewed by " "security professionals since algorithms and key-lengths considered secure " "change all the time." msgstr "" #: ../../:943 origin/stable/ocata>:1615 msgid "" "It's now possible to change the behavior of ``DISALLOW_IFRAME_EMBED`` by " "defining the variable ``horizon_disallow_iframe_embed`` in the user " "variables." msgstr "" #: ../../:393 origin/stable/ocata>:566 #: stable/pike>:1223 msgid "" "It's now possible to disable heat stack password field in horizon. " "``horizon_enable_heatstack_user_pass`` variable has been added and default " "to True." msgstr "" #: ../../:877 msgid "" "KSM configuration is changed to disabled by default on Ubuntu. If you " "overcommit the RAM on your hypervisor it's a good idea to set " "``nova_compute_ksm_enabled`` to ``True``." msgstr "" #: ../../:730 msgid "" "Key ``is_container_address`` that is used for definition of the " "`provider_networks` has been renamed to ``is_management_address``, to avoid " "confusion for bare metal deployments. Backwards compatability was kept." msgstr "" #: ../../:319 stable/2023.2>:467 stable/yoga>:14 #: unmaintained/zed>:60 msgid "" "Keystone OIDC parameter 'oidc_redirect_uri' is replaced with " "'oidc_redirect_path'. This parameter no longer needs to be set explicitly " "unless you run additional services which may collide with the default on the " "same port as Keystone. Your OIDC provider may need to be updated to reflect " "this change in redirect URI which defaults to the Keystone public URL plus " "the path /oidc_redirect." msgstr "" #: ../../:883 msgid "" "Keystone can now be configured for multiple LDAP or Active Directory " "identity back-ends. Configuration of this feature is documented in the " "`Keystone Configuration `_ section of the `Install " "Guide `_." msgstr "" #: ../../:981 msgid "" "Keystone can now be configured for multiple LDAP or Active Directory " "identity back-ends. Configuration of this feature is documented in the " "`Keystone Configuration `_ section of the " "`Install Guide `_." msgstr "" #: ../../:710 msgid "" "Keystone now uses common uwsgi role for uWSGI deployment. Along with that " "variable ``keystone_services`` has been extended with required arguments for " "uWSGI. If you override this variable locally make sure to update it's " "structure accordingly." msgstr "" #: ../../:1731 msgid "" "Keystone now uses uWSGI exclusively (instead of Apache with mod_wsgi) and " "has the web server acting as a reverse proxy. The default web server is now " "set to Nginx instead of Apache, but Apache will automatically used if " "federation is configured." msgstr "" #: ../../:728 origin/stable/mitaka>:973 msgid "Keystone's v3 API is now the default for all services." msgstr "" #: ../../:201 current origin/liberty>:129 #: origin/liberty>:414 origin/liberty>:484 origin/liberty>:550 #: origin/liberty>:587 origin/liberty>:659 origin/stable/mitaka>:10 #: origin/stable/mitaka>:127 origin/stable/mitaka>:438 #: origin/stable/mitaka>:769 origin/stable/mitaka>:842 origin/stable/newton>:10 #: origin/stable/newton>:123 origin/stable/newton>:169 #: origin/stable/newton>:474 origin/stable/newton>:898 #: origin/stable/newton>:1113 origin/stable/newton>:2405 #: origin/stable/ocata>:54 origin/stable/ocata>:98 origin/stable/ocata>:162 #: origin/stable/ocata>:203 origin/stable/ocata>:242 origin/stable/ocata>:352 #: origin/stable/ocata>:579 origin/stable/ocata>:699 origin/stable/ocata>:1263 #: origin/stable/ocata>:1821 stable/2023.1>:190 stable/2023.1>:230 #: stable/2023.2>:10 stable/2023.2>:216 stable/2024.1>:71 stable/2024.1>:472 #: stable/pike>:112 stable/pike>:165 stable/pike>:229 stable/pike>:390 #: stable/pike>:1530 stable/queens>:46 stable/queens>:330 stable/queens>:391 #: stable/queens>:467 stable/queens>:851 stable/rocky>:152 stable/rocky>:383 #: stable/rocky>:955 stable/stein>:82 stable/stein>:173 stable/stein>:856 #: stable/train>:328 stable/ussuri>:452 stable/yoga>:280 stable/yoga>:582 #: unmaintained/victoria>:165 unmaintained/victoria>:405 #: unmaintained/wallaby>:480 unmaintained/xena>:332 unmaintained/xena>:482 #: unmaintained/zed>:521 msgid "Known Issues" msgstr "" #: ../../:985 msgid "" "LBaaS v2 is available for deployment in addition to LBaaS v1. Both versions " "are mutually exclusive and cannot be running at the same time. Deployers " "will need to re-create any existing load balancers if they switch between " "LBaaS versions. Switching to LBaaS v2 will stop any existing LBaaS v1 load " "balancers." msgstr "" #: ../../:532 msgid "" "LBaaS v2 is available for deployment in addition to LBaaS v1. Both versions " "are mutually exclusive and cannot be running at the the same time. Deployers " "will need to re-create any existing load balancers if they switch between " "LBaaS versions. Switching to LBaaS v2 will stop any existing LBaaS v1 load " "balancers." msgstr "" #: ../../:287 msgid "" "LBaaS v2 panels in Horizon will automatically be enabled when LBaaS v2 is " "included in ``neutron_plugin_base``." msgstr "" #: ../../:3048 msgid "" "LBaaSv1 has been removed from the ``neutron-lbaas`` project in the Newton " "release and it has been removed from OpenStack-Ansible as well." msgstr "" #: ../../:1730 msgid "LBaaSv2 is now enabled by default in all-in-one (AIO) deployments." msgstr "" #: ../../:354 msgid "" "LXC containers will have their TZ data sync with their physical host " "machines. This is being done because containers have been assumed to use UTC " "while a host could be using something else. This causes issues in some " "services like celiometer and can result in general time differences in " "logging." msgstr "" #: ../../:73 origin/stable/newton>:1669 #: origin/stable/ocata>:1535 msgid "" "LXC containers will now generate a fixed mac address on all network " "interfaces when the option `lxc_container_fixed_mac` is set to **true**. " "This feature was implemented to resolve issues with dynamic mac addresses in " "containers generally experienced at scale with network intensive services." msgstr "" #: ../../:788 origin/stable/mitaka>:856 #: origin/stable/newton>:1407 origin/stable/newton>:2431 msgid "" "LXC containers will now have a proper RFC1034/5 hostname set during post " "build tasks. A localhost entry for 127.0.1.1 will be created by converting " "all of the \"_\" in the ``inventory_hostname`` to \"-\". Containers will be " "created with a default domain of *openstack.local*. This domain name can be " "customized to meet your deployment needs by setting the option " "``lxc_container_domain``." msgstr "" #: ../../:83 origin/stable/newton>:3365 #: origin/stable/ocata>:2073 msgid "" "LXC containers will now have the ability to use a fixed mac address on all " "network interfaces when the option `lxc_container_fixed_mac` is set **true**." " This change will assist in resolving a long standing issue where network " "intensive services, such as neutron and rabbitmq, can enter a confused state " "for long periods of time and require rolling restarts or internal system " "resets to recover." msgstr "" #: ../../:463 stable/2023.2>:590 stable/yoga>:113 #: unmaintained/zed>:209 msgid "" "LXC image cache expiration mechanism has being fixed. Previously LXC images " "were valid forever." msgstr "" #: ../../:1639 stable/pike>:1283 msgid "" "LXC on CentOS is now installed via package from a COPR repository rather " "than installed from the upstream source." msgstr "" #: ../../:383 origin/stable/mitaka>:397 #: origin/stable/newton>:2632 origin/stable/newton>:3443 msgid "" "LXC package installation and cache preparation will now occur by default " "only on hosts which will actually implement containers." msgstr "" #: ../../:127 msgid "" "LXD 2.0.11 grew a new feature ('description' tag for a container) and this " "has been added to the stable Ubuntu Xenial 16.04 release. Unfortunately, " "pylxd 2.0.5 can't handle this extra attribute and crashes out." msgstr "" #: ../../:738 msgid "" "Limitation on group naming in `physical_skel` section of env.d files " "regarding usage of underscore symbol was released." msgstr "" #: ../../:45 stable/queens>:198 stable/rocky>:364 #: stable/stein>:470 msgid "" "Listen via HTTPS on a load balancer, but via HTTP on the horizon host and " "have the load balancer forward the correct headers. It will do this by " "default in the integrated build due to the presence of the load balancer, so " "the current behaviour is retained." msgstr "" #: ../../:3353 msgid "" "Logging within the container has been bind mounted to the hosts this reslves " "issue `1588051 _`" msgstr "" #: ../../:965 msgid "" "Logs for haproxy can now be found in ``/openstack/log/-" "haproxy/`` on the container host (if haproxy is in a container), or ``/var/" "log/haproxy/`` if haproxy is installed directly on a host." msgstr "" #: ../../:1444 msgid "" "MAC addresses for containers with a fixed MAC (`lxc_container_fixed_mac` " "variable) are now saved to the ``/etc/ansible/facts.d/mac.fact`` file. " "Should such a container be destroyed but not removed from inventory, the " "interfaces will be recreated with the same MAC address when the container is " "recreated." msgstr "" #: ../../:638 origin/stable/mitaka>:928 #: origin/stable/mitaka>:1026 msgid "Main: Officially supported software." msgstr "" #: ../../:364 msgid "" "MariaDB 10.0.32 released on Aug 17 which, when configured to use xtrabackup " "for the SST, requires percona xtrabackup version 2.3.5 or higher. As " "xtrabackup is the default SST mechanism in the ``galera_server`` role, the " "version used has been updated from 2.2.13 to 2.3.5 for the x86_64 hardware " "architecture. See `the percona release notes for 2.3.2 `_ for more details of what was included in the fix." msgstr "" #: ../../:604 stable/pike>:1596 msgid "" "MariaDB 10.1+ includes `PrivateDevices=true` in its systemd unit files to " "add extra security around mount namespaces for MariaDB. While this is useful " "when running MariaDB on a bare metal host with other services, it is less " "useful when MariaDB is already in a container with its own namespaces. In " "addition, LXC 2.0.8 presents `/dev/ptmx` as a bind mount within the " "container and systemd 219 (on CentOS 7) cannot make an additional bind mount " "of `/dev/ptmx` when `PrivateDevices` is enabled." msgstr "" #: ../../:60 msgid "" "MariaDB has been updated to version 10.5.16 by default. This covers " "following CVEs:" msgstr "" #: ../../:189 msgid "" "MariaDB has been updated to version 10.6.8 by default. This covers following " "CVEs:" msgstr "" #: ../../:403 unmaintained/xena>:416 msgid "" "MariaDB now uses TLS encryption by default. Certificate will be issued and " "signed with internal CA using PKI role. Deployers can disable encrypting " "MariaDB connections by setting ``galera_use_ssl: false`` in their " "user_variables.yml Client certificates could be still provided and they will " "be distributed with PKI role as well." msgstr "" #: ../../:548 msgid "" "MariaDB version 10.5.9 is know to have `bug `_ which results in broken root permissions after upgrade. We " "have implemented a workarond for it which will be triggered automatically. " "This note is informative only." msgstr "" #: ../../:732 msgid "MariaDB version 10.x is now the default in OpenStack-Ansible." msgstr "" #: ../../:92 msgid "" "MariaDB version is been upgraded by default to 10.6.9 that fixes mariaback " "incremental backup diskspace consumption - incremental backups were " "containing also binlogs which was not needed." msgstr "" #: ../../:14 stable/train>:59 msgid "MariaDB version updated to 10.3.25, which covers CVE-2020-2574" msgstr "" #: ../../:3530 msgid "Mariadb version upgrade gate checks removed." msgstr "" #: ../../:583 stable/pike>:1575 msgid "" "MemcacheD sets `PrivateDevices=true` in its systemd unit file to add extra " "security around mount namespaces. While this is useful when running " "MemcacheD on a bare metal host with other services, it is less useful when " "MemcacheD is already in a container with its own namespaces. In addition, " "LXC 2.0.8 presents `/dev/ptmx` as a bind mount within the container and " "systemd 219 (on CentOS 7) cannot make an additional bind mount of `/dev/" "ptmx` when `PrivateDevices` is enabled." msgstr "" #: ../../:953 origin/stable/ocata>:2098 #: stable/pike>:2121 msgid "" "Metal hosts were being inserted into the ``lxc_hosts`` group, even if they " "had no containers (Bug 1660996). This is now corrected for newly configured " "hosts. In addition, any hosts that did not belong in ``lxc_hosts`` will be " "removed on the next inventory run or playbook call." msgstr "" #: ../../:675 msgid "" "Mistral Cron Triggers do not create Workflow Executions, when mistral-api " "service runs within uWSGI, so we introduce ``mistral_api_use_uwsgi`` which " "bounds Cron Trigger service status with Mistral API execution environment." msgstr "" #: ../../:54 msgid "" "Modify the handler named ``Reload systemd daemon`` and all references to it " "in the role to something else (e.g. ``os_neutron Reload systemd daemon``)." msgstr "" #: ../../:475 msgid "" "More information can be found here: https://docs.openstack.org/nova/latest/" "admin/secure-live-migration-with-qemu-native-tls.html" msgstr "" #: ../../:43 origin/stable/newton>:3250 msgid "" "Moved ``haproxy_service_configs`` var to ``haproxy_default_service_configs`` " "so that ``haproxy_service_configs`` can be modified and added to without " "overriding the entire default service dict." msgstr "" #: ../../:251 msgid "" "Multiple HAProxy nodes can now be deployed in an HA configuration with " "keepalived and LetsEncrypt certificates. Certbot can be treated as a backend " "service for haproxy and acme-challenge requests from LetsEncrypt can be " "directed to whichever HAProxy server is running a certificate renewal. New " "variables are defined for frontend ACLs and options to be passed to Certbot " "which enable this new feature, but the majority of the required " "configuration is done via the existing HAProxy service setup. An example is " "provided in the documentation." msgstr "" #: ../../:298 stable/2023.2>:302 #: stable/2024.1>:743 msgid "" "Multiple routes can be supplied to the systemd network and they will be " "placed to a separate configuration file `/etc/systemd/network/{{ filename }}." "d/routes.conf`" msgstr "" #: ../../:643 origin/stable/mitaka>:933 #: origin/stable/mitaka>:1031 msgid "Multiverse: Software that is not free." msgstr "" #: ../../:516 stable/pike>:2113 msgid "" "Mysql cnf files can now be properly overridden. The config_template module " "has been extended to support valueless options, such as those that are found " "in the my.cnf file(i.e. `quick` under the `mysqldump` section). To use " "valueless options, use the `ignore_none_type` attribute of the " "config_template module." msgstr "" #: ../../:234 msgid "" "Naming convention for containers has changed in Ansible inventory to match " "requirements defined by RFC1034. From now on, all newly added containers " "will not have underscore (``_``) symbol neither in their " "``inventory_hostname`` nor in ``container_name`` This change does not touch " "or alter already existing containers in the inventory. In order to apply new " "naming convention for an existing environment you need to delete containers " "on the host and from the inventory. After that new container name will be " "generated and container can be created again." msgstr "" #: ../../:2000 msgid "" "Neutron BGP dynamic routing plugin can now optionally be deployed and " "configured. Please see `OpenStack Networking Guide: BGP dynamic routing " "`_ for details about what the service is and what it provides." msgstr "" #: ../../:1551 msgid "" "Neutron DHCP options have been set to allow a DHCP server running dnsmasq to " "coexist with other DHCP servers within the same network. This works by " "instructing dnsmasq to ignore any clients which are not specified in dhcp-" "host files." msgstr "" #: ../../:1555 msgid "" "Neutron DHCP options have been set to provide for logging which makes " "debugging DHCP and connectivity issues easier by default." msgstr "" #: ../../:989 msgid "" "Neutron Firewall as a Service (FWaaS) can now optionally be deployed and " "configured. Please see the `FWaaS Configuration Reference `_ for details about the what the service is and what " "it provides. See the `FWaaS Install Guide `_ for " "implementation details." msgstr "" #: ../../:1952 msgid "" "Neutron HA router capabilities in Horizon will be enabled automatically if " "the neutron plugin type is ML2 and environment has >=2 L3 agent nodes." msgstr "" #: ../../:888 origin/stable/ocata>:1660 msgid "" "Neutron SR-IOV can now be optionally deployed and configured. For details " "about the what the service is and what it provides, see the `SR-IOV " "Installation Guide `_ for " "more information." msgstr "" #: ../../:836 origin/stable/newton>:2038 msgid "" "Neutron VPN as a Service (VPNaaS) can now optionally be deployed and " "configured. Please see the `OpenStack Networking Guide `_ for details about the what the " "service is and what it provides. See the `VPNaaS Install Guide `_ for implementation " "details." msgstr "" #: ../../:473 unmaintained/wallaby>:14 #: unmaintained/xena>:119 msgid "" "Neutron VPN as a Service (VPNaaS) with customized configuration files can " "now be defined with the variable ``neutron_vpnaas_custom_config``. deployers " "should define ``neutron_vpnaas_custom_config`` in 'user_variables.yml'. " "Example:" msgstr "" #: ../../:712 msgid "" "Neutron connectivity agents will now be deployed on baremetal within the " "\"network_hosts\" defined within the ``openstack_user_config.yml``." msgstr "" #: ../../:667 msgid "" "Neutron currently does not support enabling the ``port_security`` extension " "driver cleanly for existing networks. If networks are created and the plugin " "is enabled afterwards, VMs connected to those networks will not start. See " "bug https://bugs.launchpad.net/neutron/+bug/1509312" msgstr "" #: ../../:1075 origin/stable/mitaka>:1201 msgid "" "Neutron notifications to nova will now use the internal API endpoint instead " "of the public endpoint." msgstr "" #: ../../:3186 msgid "" "Neutron now makes use of Ubuntu Cloud Archive by default. This can be " "disabled by setting ``neutron_uca_enable`` to ``False``." msgstr "" #: ../../:10 branch>:98 current origin/liberty>:25 #: origin/liberty>:164 origin/liberty>:232 origin/liberty>:313 #: origin/liberty>:404 origin/liberty>:449 origin/liberty>:524 #: origin/liberty>:631 origin/liberty>:724 origin/liberty>:879 #: origin/stable/mitaka>:25 origin/stable/mitaka>:69 origin/stable/mitaka>:109 #: origin/stable/mitaka>:173 origin/stable/mitaka>:258 #: origin/stable/mitaka>:369 origin/stable/mitaka>:412 #: origin/stable/mitaka>:473 origin/stable/mitaka>:534 #: origin/stable/mitaka>:562 origin/stable/mitaka>:656 #: origin/stable/mitaka>:784 origin/stable/mitaka>:921 #: origin/stable/newton>:102 origin/stable/newton>:212 #: origin/stable/newton>:281 origin/stable/newton>:340 #: origin/stable/newton>:375 origin/stable/newton>:444 #: origin/stable/newton>:459 origin/stable/newton>:513 #: origin/stable/newton>:718 origin/stable/newton>:747 #: origin/stable/newton>:821 origin/stable/newton>:880 #: origin/stable/newton>:939 origin/stable/newton>:978 #: origin/stable/newton>:1033 origin/stable/newton>:1138 #: origin/stable/newton>:1173 origin/stable/newton>:1308 #: origin/stable/newton>:1403 origin/stable/ocata>:44 origin/stable/ocata>:188 #: origin/stable/ocata>:300 origin/stable/ocata>:315 origin/stable/ocata>:395 #: origin/stable/ocata>:461 origin/stable/ocata>:531 origin/stable/ocata>:546 #: origin/stable/ocata>:672 origin/stable/ocata>:738 origin/stable/ocata>:849 #: origin/stable/ocata>:882 origin/stable/ocata>:1119 origin/stable/ocata>:1164 #: origin/stable/ocata>:1211 origin/stable/ocata>:1361 stable/2023.1>:71 #: stable/2023.1>:220 stable/2023.1>:359 stable/2023.1>:416 stable/2023.1>:490 #: stable/2023.2>:92 stable/2023.2>:319 stable/2024.1>:10 stable/2024.1>:38 #: stable/2024.1>:252 stable/pike>:36 stable/pike>:69 stable/pike>:102 #: stable/pike>:255 stable/pike>:270 stable/pike>:293 stable/pike>:350 #: stable/pike>:453 stable/pike>:489 stable/pike>:539 stable/pike>:637 #: stable/pike>:750 stable/pike>:840 stable/pike>:875 stable/queens>:10 #: stable/queens>:73 stable/queens>:149 stable/queens>:174 stable/queens>:189 #: stable/queens>:222 stable/queens>:266 stable/queens>:320 stable/queens>:378 #: stable/queens>:493 stable/queens>:545 stable/queens>:636 stable/rocky>:10 #: stable/rocky>:25 stable/rocky>:83 stable/rocky>:142 stable/rocky>:189 #: stable/rocky>:281 stable/rocky>:316 stable/rocky>:355 stable/rocky>:456 #: stable/stein>:56 stable/stein>:112 stable/stein>:131 stable/stein>:163 #: stable/stein>:198 stable/train>:20 stable/train>:95 stable/train>:120 #: stable/train>:139 stable/train>:181 stable/ussuri>:45 stable/ussuri>:73 #: stable/ussuri>:109 stable/ussuri>:184 stable/yoga>:59 stable/yoga>:219 #: stable/yoga>:270 stable/yoga>:314 stable/yoga>:357 #: unmaintained/victoria>:131 unmaintained/victoria>:146 #: unmaintained/victoria>:212 unmaintained/victoria>:273 #: unmaintained/wallaby>:10 unmaintained/wallaby>:87 unmaintained/wallaby>:213 #: unmaintained/xena>:43 unmaintained/xena>:115 unmaintained/xena>:243 #: unmaintained/xena>:286 unmaintained/xena>:358 unmaintained/zed>:27 #: unmaintained/zed>:100 unmaintained/zed>:139 unmaintained/zed>:313 msgid "New Features" msgstr "" #: ../../:683 msgid "" "New hypervisor groups have been added allowing deployers to better define " "their compute workloads. While the generic \"compute_hosts\" group will " "still work explicit definitions for compute hosts can now be defined using " "the `ironic-compute_hosts`, `kvm-compute_hosts`, `lxd-compute_hosts`, `qemu-" "compute_hosts`, and `powervm-compute_hosts` groups accordingly" msgstr "" #: ../../:90 origin/stable/mitaka>:144 #: origin/stable/newton>:3122 msgid "" "New overrides are provided to allow for better customization around logfile " "retention and rate limiting for UDP/TCP sockets. " "``rsyslog_server_logrotation_window`` defaults to 14 days " "``rsyslog_server_ratelimit_interval`` defaults to 0 seconds " "``rsyslog_server_ratelimit_burst`` defaults to 10000" msgstr "" #: ../../:536 msgid "" "New rabbitmq-server role override rabbitmq_async_threads defaults to 128 " "threads for IO operations inside the RabbitMQ erlang VM. This setting " "doubled the threads for IO operations." msgstr "" #: ../../:540 msgid "" "New rabbitmq-server role override rabbitmq_process_limit defaults to 1048576 " "for number of concurrent processes inside the erlang VM. Each network " "connection and file handle does need its own process inside erlang." msgstr "" #: ../../:1760 msgid "" "New variable ``ceph_extra_confs`` may be defined to support deployment of " "extra Ceph config files. This is useful for cinder deployments that utilize " "multiple Ceph clusters as cinder backends." msgstr "" #: ../../:366 msgid "" "New variable ``openstack_ca_bundle_path`` has been added which defines the " "path to the ca-bundle certificate which contains all system-trusted CA and " "will be used by the Python Requests module." msgstr "" #: ../../:295 msgid "" "New variables 'keepalived_internal_ping_address' and " "'keepalived_external_ping_address' allow deployments to decouple liveness " "checks for HAProxy accessibility via internal and external networks. The " "previous 'keepalived_ping_address' variable is maintained for backwards " "compatibility." msgstr "" #: ../../:397 unmaintained/xena>:247 msgid "" "New variables ``galera_tmp_dir`` and ``galera_ignore_db_dirs`` were " "implemented to control path to tmp dir and what directories should be " "ignored when listing databases." msgstr "" #: ../../:506 msgid "" "New variables ``nova_glance_rbd_inuse`` and ``nova_glance_images_rbd_pool`` " "have been implemented that allows deployer to easily configure nova to " "retrieve glance images from RBD directly, if nova uses local storage for " "ephemeral drives." msgstr "" #: ../../:648 msgid "" "New variables ``openstack_opendev_base_url`` and " "``openstack_github_base_url`` have been implemented that allow to quickly " "change base url of repositories for all used service. This might be useful " "for environments with limited connectivity or in case of issues with one of " "the mirrors." msgstr "" #: ../../:328 msgid "" "New variables are added to allow a user defined playbooks to be specified " "that run pre and post the existing code in setup-hosts, setup-infrastructure " "and setup-openstack. OpenStack-Ansible deployments may be extended and have " "additional user defined functions added using these hooks, which will have " "full access to the OSA inventory and host variables." msgstr "" #: ../../:517 origin/stable/ocata>:886 #: stable/pike>:931 msgid "" "New variables have been added to allow a deployer to customize a aodh " "systemd unit file to their liking." msgstr "" #: ../../:943 msgid "" "New variables have been added to allow a deployer to customize a barbican " "systemd unit file to their liking." msgstr "" #: ../../:529 origin/stable/ocata>:902 #: stable/pike>:1011 stable/pike>:1019 msgid "" "New variables have been added to allow a deployer to customize a ceilometer " "systemd unit file to their liking." msgstr "" #: ../../:541 origin/stable/ocata>:914 #: stable/pike>:1055 msgid "" "New variables have been added to allow a deployer to customize a cinder " "systemd unit file to their liking." msgstr "" #: ../../:853 msgid "" "New variables have been added to allow a deployer to customize a designate " "systemd unit file to their liking." msgstr "" #: ../../:549 origin/stable/ocata>:922 #: stable/pike>:1158 msgid "" "New variables have been added to allow a deployer to customize a glance " "systemd unit file to their liking." msgstr "" #: ../../:561 origin/stable/ocata>:934 #: stable/pike>:1178 msgid "" "New variables have been added to allow a deployer to customize a gnocchi " "systemd unit file to their liking." msgstr "" #: ../../:573 origin/stable/ocata>:946 #: stable/pike>:1207 msgid "" "New variables have been added to allow a deployer to customize a heat " "systemd unit file to their liking." msgstr "" #: ../../:585 origin/stable/ocata>:958 #: stable/pike>:1243 msgid "" "New variables have been added to allow a deployer to customize a ironic " "systemd unit file to their liking." msgstr "" #: ../../:597 origin/stable/ocata>:970 #: stable/pike>:1255 msgid "" "New variables have been added to allow a deployer to customize a keystone " "systemd unit file to their liking." msgstr "" #: ../../:613 origin/stable/ocata>:982 #: stable/pike>:1300 msgid "" "New variables have been added to allow a deployer to customize a magnum " "systemd unit file to their liking." msgstr "" #: ../../:625 origin/stable/ocata>:994 #: stable/pike>:1320 msgid "" "New variables have been added to allow a deployer to customize a neutron " "systemd unit file to their liking." msgstr "" #: ../../:637 origin/stable/ocata>:1006 #: stable/pike>:1343 msgid "" "New variables have been added to allow a deployer to customize a nova " "systemd unit file to their liking." msgstr "" #: ../../:1382 msgid "" "New variables have been added to allow a deployer to customize a octavia " "systemd unit file to their liking." msgstr "" #: ../../:1022 stable/pike>:1428 msgid "" "New variables have been added to allow a deployer to customize a sahara " "systemd unit file to their liking." msgstr "" #: ../../:649 origin/stable/ocata>:1034 #: stable/pike>:1471 msgid "" "New variables have been added to allow a deployer to customize a swift " "systemd unit file to their liking." msgstr "" #: ../../:1042 stable/pike>:1487 msgid "" "New variables have been added to allow a deployer to customize a trove " "systemd unit file to their liking." msgstr "" #: ../../:295 msgid "" "New variables have been added to allow a deployer to enable iPXE support for " "Ironic Conductor, which uses HTTP rather than TFTP, and can speed up " "baremetal provisioning considerably. To enable, simply set the " "``ironic_ipxe_enabled`` override to ``True``." msgstr "" #: ../../:360 msgid "New variables have been added to manage used cache backends:" msgstr "" #: ../../:358 stable/queens>:838 msgid "" "New variables have been added to the glance role allowing a deployer to set " "the UID and GID of the glance user. The new options are, " "``glance_system_user_uid`` and ``glance_system_group_uid``. These options " "are useful when deploying glance with shared storage as the back-end for " "images and will only set the UID and GID of the glance user when defined." msgstr "" #: ../../:516 msgid "" "New variables that provide better control over RabbitMQ management interface " "have been implemented:" msgstr "" #: ../../:407 stable/ussuri>:565 msgid "" "New virtual environments will be created using python3, giving a " "straightforward transition from python2 to python3 during the major upgrade. " "The ansible-runtime virtual environment on the deployment host will also be " "upgraded from python2 to python3 where the operating system allows." msgstr "" #: ../../:1489 msgid "" "Newer releases of CentOS ship a version of libnss that depends on the " "existance of /dev/random and /dev/urandom in the operating system in order " "to run. This causes a problem during the cache preparation process which " "runs inside chroot that does not contain this, resulting in errors with the " "following message." msgstr "" #: ../../:143 stable/pike>:210 #: stable/queens>:448 msgid "" "Newer releases of CentOS ship a version of libnss that depends on the " "existance of /dev/random and /dev/urandom in the operating system in order " "to run. This causes a problem during the cache preparation process which " "runs inside chroot that does not contain this, resulting in errors with the " "following message:" msgstr "" #: ../../:579 msgid "" "Nginx web server will be removed and replaced with Apache during upgrade." msgstr "" #: ../../:1215 origin/stable/ocata>:1878 msgid "" "Note that the value for ``openstack_distrib_release`` will be taken from the " "variable ``openstack_release`` if it is set." msgstr "" #: ../../:73 stable/ussuri>:154 msgid "" "Notifications are enabled now if either ceilometer or designate service is " "present in the inventory" msgstr "" #: ../../:2061 msgid "" "Nova UCA repository support is implemented by default. This will allow the " "users to benefit from the updated packages for KVM. The ``nova_uca_enable`` " "variable controls the install source for the KVM packages. By default this " "value is set to ``True`` to make use of UCA repository. User can set to " "``False`` to disable." msgstr "" #: ../../:1672 stable/pike>:1359 msgid "" "Nova cell_v2 support has been added. The default cell is ``cell1`` which can " "be overridden by the ``nova_cell1_name``. Support for multiple cells is not " "yet available." msgstr "" #: ../../:736 origin/stable/ocata>:1153 msgid "" "Nova features that use libguestfs (libvirt password/key injection) now work " "on compute hosts running Ubuntu. When Nova is deployed to Ubuntu compute " "hosts and either ``nova_libvirt_inject_key`` or " "``nova_libvirt_inject_password`` are set to True, then kernels stored in /" "boot/vmlinuz-* will be made readable to nova user. See launchpad bug 1507915." "" msgstr "" #: ../../:1370 stable/pike>:2057 msgid "" "Nova may now use an encrypted database connection. This is enabled by " "setting ``nova_galera_use_ssl`` to ``True``." msgstr "" #: ../../:467 msgid "" "Nova now defaults to to using the \"QEMU-native TLS\" feature for live " "migrations, rather than the deprecated SSH method. A pre-existing PKI " "(Public Key Infrastructure) setup is required." msgstr "" #: ../../:844 msgid "" "Nova now utilizes version 2 of the Cinder API. Tempest is now configured to " "use the v2 Cinder API as well." msgstr "" #: ../../:494 msgid "" "Now you can define ``execstartpres`` and ``execstopposts`` keys for the " "`systemd_services` structure. They will allow to define pre-start and post-" "stop service executables and must be defined as lists." msgstr "" #: ../../:16 unmaintained/victoria>:50 #: unmaintained/wallaby>:173 msgid "OSSA-2021-005: https://security.openstack.org/ossa/OSSA-2021-005.html" msgstr "" #: ../../:17 unmaintained/victoria>:51 #: unmaintained/wallaby>:174 msgid "OSSA-2021-006: https://security.openstack.org/ossa/OSSA-2021-006.html" msgstr "" #: ../../:600 msgid "" "OVN is now configured with SSL enabled by default, upgrading existing ovn " "deployment is not tested. When upgrading it might be wise to set " "`neutron_ovn_ssl` to `false` and manage the ssl configuration at a later " "stage." msgstr "" #: ../../:474 msgid "" "OVN is now protected via SSL. you can disable it via `neutron_ovn_ssl`. It " "is not supported to switch from non-ssl to ssl." msgstr "" #: ../../:755 unmaintained/xena>:537 msgid "" "OVN-related HAProxy configuration is deprecated and has been replaced with " "built-in clustering functionality. OVN-related endpoints will be completely " "removed in the Z release." msgstr "" #: ../../:230 stable/rocky>:579 stable/stein>:404 msgid "" "Octavia is creating vms, securitygroups, and other things in its project. In " "most cases the default quotas are not big enough. This will adjust them to " "(configurable) reasonable values." msgstr "" #: ../../:382 stable/rocky>:532 msgid "" "Octavia requires SSL certificates for communication with the amphora. This " "adds the automatic creation of self signed certificates for this purpose. It " "uses different certificate authorities for amphora and control plane thus " "insuring maximum security." msgstr "" #: ../../:346 current msgid "" "Octavia role now handles quota defenition properly when BFV is set for " "Amphorae by defining ``octavia_cinder_enabled: True``" msgstr "" #: ../../:535 msgid "" "Old variable names were kept for backwards compatibility but will be removed " "in next releases. It is highly adviced to use new variable names in your " "deployments." msgstr "" #: ../../:260 msgid "" "Older deployments should check for the presence of legacy '127.0.1.1' " "entries in their /etc/hosts files. These will need to be removed before " "upgrading, particularly on RabbitMQ hosts and containers." msgstr "" #: ../../:371 stable/ussuri>:517 msgid "" "On OpenStack-Ansible Train release you should upgrade your Debian from 9 " "(stretch) to 10 (buster). Debian 9 support will be deprecated during the " "next release of OpenStack-Ansible (Ussuri)." msgstr "" #: ../../:31 msgid "" "Once this is done, the repo build process should complete as it did before " "and the updated software can now be deployed." msgstr "" #: ../../:60 msgid "" "Once this is done, the upgrade process for neutron services will work " "properly." msgstr "" #: ../../:1369 stable/pike>:883 msgid "Only Ceph repos are supported for now." msgstr "" #: ../../:532 msgid "" "Only minimal facts are gathered when calculating the 'dynamic address fact' " "for the neutron, nova and cinder playbooks. If overrides are in use for " "setting the neutron tunnel address, or various storage or management " "addresses which rely on ansible fact gathering to provide variables of the " "form ansible_, it is likley that these facts will no longer be " "gathered by default. The new variable dynamic_address_gather_filter is " "available to specify a shell-style (fnmatch) wildcard to specify the set of " "facts gathered early in the neutron/nova/cinder playbooks." msgstr "" #: ../../:255 msgid "" "Only minimal facts are gathered when calculating the 'dynamic address fact' " "for the neutron, nova and cinder playbooks. On compute and network nodes " "this previously took a significant amount of time, and gathering minimal " "facts will speed this up. Facts are instead gathered for interfaces " "specified in provider_networks for the storage, overlay and management " "networks." msgstr "" #: ../../:727 msgid "" "Open vSwitch dataplane with NSH support has been implemented. This feature " "may be activated by setting ``ovs_nsh_support: True`` in ``/etc/" "openstack_deploy/user_variables.yml``." msgstr "" #: ../../:2074 msgid "" "Open vSwitch driver support has been implemented. This includes the " "implementation of the appropriate Neutron configuration and package " "installation. This feature may be activated by setting ``neutron_plugin_type:" " ml2.ovs`` in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:1005 origin/stable/mitaka>:1109 #: origin/stable/mitaka>:1173 msgid "" "OpenStack services have been set to communicate with RabbitMQ using SSL by " "default. This feature may be disabled by setting ``rabbit_use_ssl`` to " "``false`` in ``/etc/openstack_deploy/user_variables.yml``. The default " "behaviour will be to use a self-signed certificate for communications. This " "can be changed by the procedure referred to in `the SSL documentation `_." msgstr "" #: ../../:436 msgid "" "OpenStack-Ansible can now be used to deploy Skyline, an alternantive " "dashboard. New example files have been added to `env.d` and `conf.d` to " "support the Skyline infrastructure, and a playbook named `os-skyline-install." "yml` has been added to deploy the API and console service." msgstr "" #: ../../:350 msgid "" "OpenStack-Ansible now provided corosync and pacemaker cluster setup as part " "of the os-masakari-install playbook. Corosync/pacemaker cluster is required " "for the proper work of masakari hostmonitors, as they identify hosts state " "with help of corosync." msgstr "" #: ../../:212 stable/ussuri>:291 msgid "OpenStack-Ansible now support deployments on Debian 10 (buster)" msgstr "" #: ../../:903 stable/queens>:646 msgid "" "OpenStack-Ansible now supports the openSUSE Leap 42.X distributions mainly " "targeting the latest 42.3 release." msgstr "" #: ../../:703 stable/pike>:1547 msgid "" "OpenStack-Ansible sets a new variable, `galera_disable_privatedevices`, that " "controls whether the `PrivateDevices` configuration in MariaDB's systemd " "unit file is enabled." msgstr "" #: ../../:717 stable/pike>:1561 msgid "" "OpenStack-Ansible sets a new variable, `memcached_disable_privatedevices`, " "that controls whether the `PrivateDevices` configuration in MemcacheD's " "systemd unit file is enabled." msgstr "" #: ../../:312 msgid "" "Openstack services and infrastructure such as galera, rabbitmq and memcached " "already have defaults in their ansible roles to control the IP address which " "those services bind to. Prior to this release the default of 0.0.0.0 was " "used. A global setting in the openstack-ansible group variables now " "overrides those default bind address to be the local address on the " "openstack management network (typically br-mgmt) for the relevant host or " "container." msgstr "" #: ../../:386 current origin/stable/mitaka>:519 #: origin/stable/mitaka>:1197 origin/stable/newton>:87 #: origin/stable/newton>:804 origin/stable/newton>:959 #: origin/stable/newton>:1018 origin/stable/newton>:3510 #: origin/stable/ocata>:227 origin/stable/ocata>:1334 origin/stable/ocata>:2132 #: stable/2023.1>:52 stable/2023.1>:341 stable/2023.1>:804 stable/2023.2>:73 #: stable/2023.2>:621 stable/2024.1>:141 stable/2024.1>:181 stable/2024.1>:762 #: stable/pike>:331 stable/pike>:375 stable/pike>:473 stable/pike>:512 #: stable/pike>:622 stable/pike>:2141 stable/queens>:526 stable/queens>:1105 #: stable/rocky>:1527 stable/stein>:1634 stable/ussuri>:845 stable/yoga>:41 #: stable/yoga>:202 stable/yoga>:922 unmaintained/victoria>:195 #: unmaintained/victoria>:537 unmaintained/wallaby>:71 #: unmaintained/wallaby>:810 unmaintained/xena>:10 unmaintained/xena>:73 #: unmaintained/xena>:100 unmaintained/xena>:221 unmaintained/xena>:641 #: unmaintained/zed>:82 unmaintained/zed>:684 msgid "Other Notes" msgstr "" #: ../../:2285 msgid "" "Our general config options are now stored in an \"/usr/local/bin/openstack-" "ansible.rc\" file and will be sourced when the \"openstack-ansible\" wrapper " "is invoked. The RC file will read in BASH environment variables and should " "any Ansible option be set that overlaps with our defaults the provided value " "will be used." msgstr "" #: ../../:3174 msgid "" "Overrides for ceilometer ``aodh_connection_string`` will no longer work. " "Specifying an Aodh connection string in Ceilometer was deprecated within " "Ceilometer in a prior release so this option has been removed." msgstr "" #: ../../:725 msgid "" "PKI role idempotence has been fixed for the ``metal`` scenario when nova-" "compute was placed on the same hosts as nova-api. Previously, certificates " "were re-generated each run due to non-unique names." msgstr "" #: ../../:478 stable/ussuri>:646 msgid "" "Panko migrated from usage of Apache mod_wsgi or native daemon to uWSGI " "daemon. This means, that `panko_apache_*` variables are not available and " "has no effect anymore." msgstr "" #: ../../:488 origin/stable/mitaka>:773 #: origin/stable/newton>:2421 msgid "" "Paramiko version 2.0 Python requires the Python cryptography library. New " "system packages must be installed for this library. For OpenStack-Ansible " "versions <12.0.12, <11.2.15, <13.0.2 the system packages must be installed " "on the **deployment host** manually by executing ``apt-get install -y build-" "essential libssl-dev libffi-dev``." msgstr "" #: ../../:135 stable/train>:220 stable/ussuri>:299 msgid "" "Passed --extra-vars flag to the openstack-ansible should have precedence " "over the user-variables*.yml now." msgstr "" #: ../../:1931 msgid "" "Per https://review.openstack.org/#/c/413920/20, the ceilometer-collector " "service is now deprecated and its respective container is no longer deployed " "by default. Gnocchi is now used as the default publisher." msgstr "" #: ../../:876 origin/stable/newton>:3062 msgid "Percona Xtrabackup has been removed from the Galera client role." msgstr "" #: ../../:741 msgid "" "Persistent systemd journals are now enabled. This allows deployers to keep " "older systemd journals on disk for review. The disk space requirements are " "extremely low since the journals are stored in binary format. The default " "location for persistent journals is in ``/var/log/journal``." msgstr "" #: ../../:1505 msgid "" "Playbooks for `ceph-ansible `_ have " "been added to facilitate gate testing of the OpenStack-Ansible integration " "with Ceph clusters, and can be used to integrate the two projects so that " "OpenStack-Ansible can deploy and consume its own Ceph installation using " "ceph-ansible. This should be considered an experimental integration until " "further testing is been completed by deployers and the OpenStack-Ansible " "gate to fine tune its stability and completeness. The ceph-install playbook " "can be activated by adding hosts to the ``ceph-mon_hosts`` and ``ceph-" "osd_hosts`` in the OSA inventory. A variety of ceph-ansible specific " "variables will likely need to be configured in ``user_variables.yml`` to " "configure ceph-ansible for your environment. Please reference the `ceph-" "ansible repo `_ for a list of variables the project supports." msgstr "" #: ../../:565 msgid "" "Playbooks for managing services can be found inside role examples, ie: ``/" "etc/ansible/roles/os_/examples/playbook.yml``" msgstr "" #: ../../:649 msgid "" "Playbooks for managing these services were also removed out of the tree and " "can be found only under specific role `examples` folder." msgstr "" #: ../../:594 msgid "" "Playbooks have been added to facilitate this process through automation. " "Please see the ``Major upgrades`` chapter in the Operations Guide." msgstr "" #: ../../:586 msgid "" "Please check `RabbitMQ maintenance `_ documentation for more infromation on how to switch between these " "2 modes with reduced downtime." msgstr "" #: ../../:368 msgid "" "Please mention, that double stack of HTTP/1.1 and HTTP/2 is only available " "for TLS protected frontends. In case frontend is just TCP " "haproxy_frontend_h2 will be ignored." msgstr "" #: ../../:681 origin/stable/newton>:1968 msgid "" "Please note: Horizon will still display IPv6 addresses in various panels " "with IPv6 support disabled. However, it will not allow any direct management " "of IPv6 configuration." msgstr "" #: ../../:389 msgid "Please reffer to the role documentation and examples for more details." msgstr "" #: ../../:247 current stable/2023.2>:37 #: stable/2024.1>:98 msgid "" "Please, make sure that in case of federation usage you define domain name " "instead of it's ID (ie. ``Default`` instead of ``default``) under " "``keystone_sp -> trusted_idp_list -> federated_identities``" msgstr "" #: ../../:318 msgid "Power off one Galera container" msgstr "" #: ../../:321 msgid "Power on the Galera container" msgstr "" #: ../../:87 current origin/stable/ocata>:1351 #: stable/2023.1>:480 stable/2024.1>:230 stable/pike>:865 stable/train>:10 #: stable/ussuri>:99 unmaintained/wallaby>:203 unmaintained/zed>:303 msgid "Prelude" msgstr "" #: ../../:302 stable/2023.2>:306 #: stable/2024.1>:747 msgid "" "Previously defining multiple routes will result in squashing them together " "under same section name, while for them to work properly each descriped " "route must be placed in it's own section." msgstr "" #: ../../:389 origin/stable/mitaka>:610 #: origin/stable/newton>:3488 msgid "" "Previously, the ``ansible_managed`` var was being used to insert a header " "into the ``swift.conf`` that contained date/time information. This meant " "that swift.conf across different nodes did not have the same MD5SUM, causing " "``swift-recon --md5`` to break. We now insert a piece of static text instead " "to resolve this issue." msgstr "" #: ../../:1158 origin/stable/ocata>:2086 msgid "" "Properly distrubute client keys to nova hypervisors when extra ceph clusters " "are being deployed." msgstr "" #: ../../:1162 origin/stable/ocata>:2090 msgid "" "Properly remove temporary files used to transfer ceph client keys from the " "deploy host and hypervisors." msgstr "" #: ../../:2549 msgid "" "Public endpoints will need to be updated using the Keystone admin API to " "support secure endpoints. The Keystone ansible module will not recreate the " "endpoints automatically. Documentation on the `Keystone service catalog can " "be found here `_." msgstr "" #: ../../:529 msgid "" "Python 2.7 support has been dropped. Last release of openstack ansible to " "support python 2.7 is OpenStack Train." msgstr "" #: ../../:378 current stable/2023.1>:128 #: stable/2023.2>:65 stable/2024.1>:173 msgid "" "Python wheels build no longer fails in case of issues with a repo host and " "should succeed as long as there at least one reachable repo host with " "matching Distro/Version/Architecture." msgstr "" #: ../../:395 msgid "" "Python-tempestconf is a tool that generates a tempest.conf file, based only " "on the credentials from an openstack installation. It uses the discoverable " "api from openstack to check for services, features, etc." msgstr "" #: ../../:472 msgid "" "QEMU-native TLS requires all compute hosts to accept TCP connections on port " "16514 and port range 49152 to 49261." msgstr "" #: ../../:52 current msgid "" "RabbitMQ HA (mirrored) queues are no longer supported by RabbitMQ, so " "respective policy was deprecated and removed in favor of quorum queues. " "Migration to Quorum Queues is expected to be performed on 2024.1 (Caracal) " "release. Please check the `Migrate between HA and Quorum Queues `_ documentation for more details " "on the migration path." msgstr "" #: ../../:241 msgid "" "RabbitMQ Quorum Queues are enabled by default along with other significant " "improvements to oslo.messaging, like Queue Manager, Transient Queues to use " "Quorum, usage of Stream Queues for fanout. You can check more details for " "these options in `oslo.messaging release notes `_" msgstr "" #: ../../:1097 origin/stable/ocata>:1750 msgid "" "RabbitMQ Server can now be installed from different methods: a deb file " "(default), from standard repository package and from external repository. " "Current behavior is unchanged. Please define ``rabbitmq_install_method: " "distro`` to use packages provided by your distribution or " "``rabbitmq_install_method: external_repo`` to use packages stored in an " "external repo. In the case ``external_repo`` is used, the process will " "install RabbitMQ from the packages hosted by packagecloud.io, as recommended " "by RabbitMQ." msgstr "" #: ../../:14 msgid "RabbitMQ has been updated to new minor version 3.13.7" msgstr "" #: ../../:764 msgid "" "RabbitMQ is now installed via an RPM repository provided by RabbitMQ " "developers. The version is kept constant via yum's versionlock plugin. This " "allows the tasks to lock the RabbitMQ version to a particular revision and " "prevent changes to that version." msgstr "" #: ../../:756 stable/2023.2>:571 stable/yoga>:155 #: unmaintained/zed>:225 msgid "" "RabbitMQ packages are no longer provided by PackageCloud due to the upstream " "repository being no longer available after 2023-05-28. Installations will " "now utilize a community mirror of CloudSmith repositories for rabbitmq and " "erlang." msgstr "" #: ../../:261 msgid "" "RabbitMQ policies now support the `apply_to` parameter to e.g have a policy " "target only classic_queues, exchanges, ..." msgstr "" #: ../../:717 msgid "" "RabbitMQ was migrated to the new-style config, which resides in ``/etc/" "rabbitmq/rabbitmq.conf``. Old config ``rabbitmq.config`` will be removed " "during upgrade." msgstr "" #: ../../:929 stable/stein>:792 msgid "" "Rather than a hard-coded set of projects and users, tempest can now be " "configured with a custom list with the variables ``tempest_projects`` and " "``tempest_users``." msgstr "" #: ../../:325 msgid "" "Re-added ``nova_dhcp_domain`` variable that defaults to the ``dhcp_domain``. " "When set to empty string, only the hostname without a domain will be " "configured for the instances." msgstr "" #: ../../:109 msgid "" "Recently the spice-html5 git repository was entirely moved from ``https://" "github.com/SPICE/spice-html5`` to ``https://gitlab.freedesktop.org/spice/" "spice-html5``. This results in a failure in the git clone stage of the " "``repo-build.yml`` playbook for OSA ocata releases earlier than ``15.1.22``. " "To fix the issue, deployers may upgrade to the most recent release, or may " "implement the following override in ``user_variables.yml``." msgstr "" #: ../../:176 msgid "" "Recently the spice-html5 git repository was entirely moved from ``https://" "github.com/SPICE/spice-html5`` to ``https://gitlab.freedesktop.org/spice/" "spice-html5``. This results in a failure in the git clone stage of the " "``repo-build.yml`` playbook for OSA pike releases earlier than ``16.0.14``. " "To fix the issue, deployers may upgrade to the most recent release, or may " "implement the following override in ``user_variables.yml``." msgstr "" #: ../../:402 msgid "" "Recently the spice-html5 git repository was entirely moved from ``https://" "github.com/SPICE/spice-html5`` to ``https://gitlab.freedesktop.org/spice/" "spice-html5``. This results in a failure in the git clone stage of the " "``repo-build.yml`` playbook for OSA queens releases earlier than ``17.0.5``. " "To fix the issue, deployers may upgrade to the most recent release, or may " "implement the following override in ``user_variables.yml``." msgstr "" #: ../../:137 msgid "Related-Bugs:" msgstr "" #: ../../:557 stable/ussuri>:775 msgid "" "Removal of the magnum module. Please use the ansible native module " "'os_coe_cluster_template'. More information: https://docs.ansible.com/" "ansible/latest/modules/os_coe_cluster_template_module.html This module was " "not used in the openstack repos therefore no updates were required." msgstr "" #: ../../:564 stable/ussuri>:782 msgid "" "Removal of the netloc, netloc_no_port and netorigin filters. Please use the " "urlsplit filter instead. All usages of the deprecated filters in openstack " "repos have been updated." msgstr "" #: ../../:421 msgid "" "Remove ``CONF.scenario.img_dir`` option as it is being removed from Tempest " "after ~4 year deprecation period. ``CONF.scenario.img_file`` option needs to " "contain the full path to an image to upload to glance." msgstr "" #: ../../:1954 stable/pike>:1959 msgid "" "Remove ``cinder_glance_api_version`` option due to deprecation of " "glance_api_version option in Cinder." msgstr "" #: ../../:1988 msgid "" "Remove ``cinder_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:798 msgid "" "Remove ``cloudkitty_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:2018 msgid "" "Remove ``designate_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:2013 msgid "" "Remove ``glance_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:1973 msgid "" "Remove ``heat_rpc_backend`` option due to deprecation of rpc_backend option " "in oslo.messaging." msgstr "" #: ../../:1983 msgid "" "Remove ``keystone_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:2008 msgid "" "Remove ``magnum_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:1998 msgid "" "Remove ``neutron_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:32 unmaintained/victoria>:182 #: unmaintained/wallaby>:729 msgid "" "Remove ``octavia_amp_image_id`` option as the corresponding configuration " "option in Octavia ``amp_image_id`` is deprected and image tags should be " "used instead." msgstr "" #: ../../:1978 msgid "" "Remove ``octavia_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:2003 msgid "" "Remove ``sahara_rpc_backend`` option due to deprecation of rpc_backend " "option in oslo.messaging." msgstr "" #: ../../:1993 msgid "" "Remove ``trove_rpc_backend`` option due to deprecation of rpc_backend option " "in oslo.messaging." msgstr "" #: ../../:788 msgid "" "Removed PKI token support and the ``cloudkitty_signing_dir`` parameter." msgstr "" #: ../../:3214 msgid "" "Removed ``cirros_img_url`` and in most places replaced with " "``tempest_img_url``." msgstr "" #: ../../:3210 msgid "" "Removed ``cirros_tgz_url`` and in most places replaced with " "``tempest_img_url``." msgstr "" #: ../../:928 origin/stable/ocata>:2059 #: stable/pike>:2023 msgid "" "Removed ``tempest_volume_backend1_name`` and " "``tempest_volume_backend1_name`` since ``backend1_name`` and " "``backend2_name`` were removed from tempest in commit 27905cc (merged 26/04/" "2016)" msgstr "" #: ../../:609 origin/stable/ocata>:1133 #: stable/pike>:1279 msgid "" "Removed dependency for ``cinder_backends_rbd_inuse`` in nova.conf when " "setting ``rbd_user`` and ``rbd_secret_uuid`` variables. Cinder delivers all " "necessary values via RPC when attaching the volume, so those variables are " "only necessary for ephemeral disks stored in Ceph. These variables are " "required to be set up on cinder-volume side under backend section." msgstr "" #: ../../:3226 msgid "Removed deprecated variable ``tempest_compute_image_alt_ssh_password``" msgstr "" #: ../../:3218 msgid "Removed deprecated variable ``tempest_compute_image_alt_ssh_user``" msgstr "" #: ../../:3222 msgid "Removed deprecated variable ``tempest_compute_image_ssh_password``" msgstr "" #: ../../:769 msgid "" "Removed variable ``trove_provider_ip_from_q`` and " "``trove_container_net_name``. If you need to change network which will be " "used for guests inside trove containers, please use variables " "``trove_provider_network`` or ``trove_provider_net_iface``." msgstr "" #: ../../:776 msgid "" "Removed variables ``trove_admin_user_name`` and " "``trove_service_tenant_name``. Please use ``trove_service_user_name`` and " "``trove_service_project_name`` correspondingly to manage username and " "project name which will be used for auth in keystone." msgstr "" #: ../../:3357 msgid "" "Removed various deprecated / no longer supported features from tempest.conf." "j2. Some variables have been moved to their new sections in the config." msgstr "" #: ../../:3230 msgid "Renamed ``cirros_img_disk_format`` to ``tempest_img_disk_format``" msgstr "" #: ../../:735 msgid "" "Renamed ``tempest_test_whitelist`` to ``tempest_test_includelist`` and " "``tempest_test_blacklist`` to ``tempest_test_excludelist`` Dependant " "projects should update to use the new variables" msgstr "" #: ../../:576 msgid "" "Renaming process will also lead for prolonged downtime of services during " "upgrade which will last from vhost renaming until service role execution " "completition. This might be especially important for services like Nova and " "Neutron where role runtime may take a while to cover all hosts." msgstr "" #: ../../:322 msgid "Repeat for the other Galera containers" msgstr "" #: ../../:1009 msgid "" "Repeatable deployments are now easier since the manifest files for OpenStack " "software uses the exact content from an upstream repository. Specific " "commits or tags can be referenced within the manifest. The ``yaprt`` " "package is no longer used to build the repo." msgstr "" #: ../../:639 origin/stable/mitaka>:929 #: origin/stable/mitaka>:1027 msgid "" "Restricted: Supported software that is not available under a completely free " "license." msgstr "" #: ../../:926 unmaintained/xena>:225 msgid "" "Restriction on parameters that can be passed to ``haproxy_tuning_params`` " "has been released. This means, that any tuning parameter can be passed in " "key/value format." msgstr "" #: ../../:642 msgid "" "Roles ``rsyslog_client`` and ``rsyslog_server`` are deprecated and removed " "from OpenStack-Ansible. Since Train service were configured to save logs in " "journald instead of regular log files. Journald from containers passed to " "hosts, so you can read and manipulate logs from metal hosts. Journald can be " "transformed and collected by many tools, including rsyslog. At the same time " "rsyslog is not ideal as it stores data in plain text, which is hard to index " "and search later, while journald has is structured so logs can be consumed " "way more efficiently with other tools. You can also check out our ELK role " "from `OPS repository `_ as alternative." msgstr "" #: ../../:638 msgid "" "S3 API is now enabled by default for deployments using integrated ceph-" "ansible." msgstr "" #: ../../:1097 msgid "" "SELinux policy for neutron on CentOS 7 is now provided to fix SELinux AVCs " "that occur when neutron's agents attempt to start daemons such as haproxy " "and dnsmasq." msgstr "" #: ../../:834 msgid "" "SHA of services that are used during source install were moved from " "`playbooks/defaults/repo_packages` folder to `inventory/group_vars/" "/source_git.yml` files that correspond to each individual " "service." msgstr "" #: ../../:541 msgid "" "SSHD and rsync are no longer installed or configured for all containers. " "This also deprecates usage of ``lxc_container_ssh_key`` and variable has no " "effect any longer." msgstr "" #: ../../:2537 msgid "" "SSL termination is assumed enabled for all public endpoints by default. If " "this is not needed it can be disabled by setting the " "``openstack_external_ssl`` option to **false** and the " "``openstack_service_publicuri_proto`` to **http**." msgstr "" #: ../../:58 origin/stable/newton>:1293 #: origin/stable/ocata>:2082 msgid "SSLv3 is now disabled in the haproxy daemon configuration by default." msgstr "" #: ../../:566 stable/queens>:842 msgid "" "Searching for world-writable files is now disabled by default. The search " "causes delays in playbook runs and it can consume a significant amount of " "CPU and I/O resources. Deployers can re-enable the search by setting " "``security_find_world_writable_dirs`` to ``yes``." msgstr "" #: ../../:459 origin/liberty>:854 #: origin/stable/mitaka>:892 origin/stable/mitaka>:1157 #: origin/stable/newton>:241 origin/stable/newton>:3288 #: origin/stable/ocata>:421 origin/stable/ocata>:490 origin/stable/ocata>:830 #: origin/stable/ocata>:1315 stable/2023.1>:41 stable/2023.1>:113 #: stable/2023.2>:134 stable/2023.2>:188 stable/2024.1>:158 stable/2024.1>:214 #: stable/pike>:719 stable/pike>:816 stable/pike>:2039 stable/queens>:238 #: stable/queens>:432 stable/queens>:510 stable/queens>:1056 stable/rocky>:1466 #: stable/stein>:10 stable/stein>:142 stable/stein>:1508 stable/train>:55 #: stable/ussuri>:10 stable/yoga>:165 stable/yoga>:249 stable/yoga>:856 #: unmaintained/victoria>:44 unmaintained/wallaby>:56 unmaintained/wallaby>:167 #: unmaintained/xena>:27 unmaintained/xena>:185 unmaintained/xena>:590 #: unmaintained/zed>:235 unmaintained/zed>:272 msgid "Security Issues" msgstr "" #: ../../:1644 msgid "" "See `Bug 1702167 `_ for more details." msgstr "" #: ../../:712 origin/stable/ocata>:726 #: stable/pike>:1556 stable/pike>:1570 msgid "" "See `Launchpad Bug 1697531 `_ for more details." msgstr "" #: ../../:181 origin/stable/ocata>:364 msgid "" "See `Launchpad Bug 1699191 `_ for more details." msgstr "" #: ../../:134 msgid "" "See `bug 1605302 `_ for more details." msgstr "" #: ../../:114 origin/stable/mitaka>:243 #: origin/stable/newton>:3341 msgid "" "See `bug 1616281 `_ for more details." msgstr "" #: ../../:605 msgid "" "Service ``nova-archive-deleted`` will execute `nova-manage db " "archive_deleted_rows` while ``nova-archive-deleted`` will execute `nova-" "manage db purge`. Please correspond to nova-manage documentation for more " "information on what these commands do: https://docs.openstack.org/nova/" "latest/cli/nova-manage.html" msgstr "" #: ../../:267 current msgid "" "Service type in catalog has been changed from ``ha`` to ``instance-ha`` in " "order to align service types with `service deployment guide `_" msgstr "" #: ../../:544 msgid "" "Services deploy into virtual environments by default when the service relies " "on Python. Find the virtualenv for each service under ``/openstack/venvs/`` " "on the host or in the container where the service is deployed. Disable the " "use of virtualenv by overriding the service-specific variable (for example " "``cinder_venv_enabled``) which defaults to ``True``." msgstr "" #: ../../:558 msgid "" "Services deploy into virtual environments by default when the service relies " "on Python. On upgrade any Python packages installed on the host or container " "are not upgraded with the release unless the virtualenv for that service is " "disabled. There might be older and possibly broken packages left on the " "system outside of the virtualenv, which can cause confusion for those who " "attempt to use Python-based tools or services without using the virtualenv. " "These left over packages can be manually removed at the operator's " "discretion." msgstr "" #: ../../:567 msgid "" "Services will remain in your previously generated inventory until you " "explicitly remove them." msgstr "" #: ../../:550 msgid "" "Services, that were makred as Inactive (Murano, Senlin, Sahara) will not be " "upgraded as they were not released for 2024.1 (Caracal). In order to keep " "managing these services on older versions you will need to do following " "actions:" msgstr "" #: ../../:178 origin/stable/ocata>:361 msgid "" "Set ``keystone_mod_wsgi_enabled`` to ``false`` to deploy Keystone under " "Uwsgi and allow the web server to be bypassed during these tasks." msgstr "" #: ../../:645 msgid "" "Set a new default value for ``galera_wait_timeout`` which is inherited from " "global ``openstack_db_connection_recycle_time``." msgstr "" #: ../../:387 msgid "Set diff return variable to a dict of changes applied." msgstr "" #: ../../:649 msgid "" "Set new default values for db pooling variables which are inherited from the " "global ones." msgstr "" #: ../../:1591 msgid "" "Set the ``glance_swift_store_auth_insecure`` variable to override the " "``swift_store_auth_inscure`` value in ``/etc/glance/glance-api.conf``. Set " "this value when using an external Swift store that does not have the same " "``insecure`` setting as the local Keystone." msgstr "" #: ../../:1297 origin/stable/ocata>:2106 msgid "" "Setting the haproxy_bind list on a service is now used as an override to the " "other VIPs defined in the environment. Previously it was being treated as an " "append to the other VIPs so there was no path to override the VIP binds for " "a service. For example, haproxy_bind could be used to bind a service to the " "internal VIP only." msgstr "" #: ../../:1917 msgid "" "Settings related to nginx and the placement will no longer serve any " "purpose, and should be removed. Those settings are as follows - " "``nova_placement_nginx_access_log_format_extras``, " "``nova_placement_nginx_access_log_format_combined``, " "``nova_placement_nginx_extra_conf``, ``nova_placement_uwsgi_socket_port``, " "and ``nova_placement_pip_packages``." msgstr "" #: ../../:1248 origin/stable/ocata>:2126 msgid "" "Setup for the PowerVM driver was not properly configuring the system to " "support RMC configuration for client instances. This fix introduces an " "interface template for PowerVM that properly supports mixed IPV4/IPV6 " "deploys and adds documentation for PowerVM RMC. For more information see bug " "1643988." msgstr "" #: ../../:1912 msgid "" "Several ``nova.conf`` options that were deprecated have been removed from " "the ``os_nova`` role. The following OpenStack-Ansible variables are no " "longer used and should be removed from any variable override files. * " "``nova_dhcp_domain`` * ``nova_quota_fixed_ips`` * " "``nova_quota_floating_ips`` * ``nova_quota_security_group_rules`` * " "``nova_quota_security_groups``" msgstr "" #: ../../:1501 stable/pike>:1031 msgid "" "Several configuration files that were not templated for the " "``os_ceilometer`` role are now retrieved from git. The git repository used " "can be changed using the ``ceilometer_git_config_lookup_location`` variable. " "By default this points to ``git.openstack.org``. These files can still be " "changed using the ``ceilometer_x_overrides`` variables." msgstr "" #: ../../:1603 stable/pike>:1190 msgid "" "Several configuration files that were not templated for the ``os_gnocchi` " "role are now retrieved from git. The git repository used can be changed " "using the ``gnocchi_git_config_lookup_location`` variable. By default this " "points to ``git.openstack.org``. These files can still be changed using the " "``gnocchi_x_overrides`` variables." msgstr "" #: ../../:282 stable/ussuri>:398 msgid "" "Several environment variables have been added in the bootstrapping functions " "used by the gate-check-commit script. These variables can be used to skip " "various phases of the bootstrap during the gate-check-commit or bootstrap-" "ansible script execution." msgstr "" #: ../../:434 msgid "" "Simmilar variables were also implemented for each service, while variables " "above aim to change behaviour globally." msgstr "" #: ../../:891 msgid "Simplifies configuration of lbaas-mgmt network." msgstr "" #: ../../:28 stable/train>:82 stable/ussuri>:171 #: unmaintained/victoria>:512 msgid "" "Since Ubuntu has dropped older base images, which resulted in all previous " "tags being broken, we've switched to downloading always latest base image " "available. This should guarantee that we retrieve relevant images only." msgstr "" #: ../../:613 msgid "" "Since Yoga release ``service`` role is being assigned to all service users. " "Though, service_token_roles_required was set to ``False`` for upgrade " "purposes. Now ``service_token_roles_required`` is set to ``True`` by default." " If you still want to preserve old behaviour, you can define " "``openstack_service_token_roles_required: False`` in your user_variables." msgstr "" #: ../../:739 msgid "" "Since certificates and CA distribution are now handled with PKI role, " "variable ``openstack_host_ca_location`` has been deprecated and removed." msgstr "" #: ../../:1072 msgid "" "Since we use neutron's credentials to access the queue, security conscious " "people might want to set up an extra user for octavia on the neutron queue " "restricted to the topics octavia posts to." msgstr "" #: ../../:372 current stable/2024.1>:133 msgid "" "Skyline is not getting installed anymore by default as part of ``os-" "infra_hosts``, which might result in unwanted dashboard changes during " "OpenStack upgrade process." msgstr "" #: ../../:404 current stable/2024.1>:145 msgid "" "Skyline was removed from being assigned to ``os-infra_hosts``. If you want " "to install Skyline as your dashboard, you need to define " "``skyline_dashboard_hosts`` explicitly." msgstr "" #: ../../:689 msgid "" "Some variables names have been changed to reflect upstream design decisions " "(such as Nova's default API version), or to provide clarity. These require " "updating in ``/etc/openstack_deploy/user_*.yml`` for any overrides to " "continue to work. See the `upgrade documentation ` for details." msgstr "" #: ../../:1595 msgid "" "Specify the ``gnocchi_auth_mode`` var to set the ``auth_mode`` for gnocchi. " "This defaults to ``basic`` which has changed from ``noauth`` to match " "upstream. If ``gnocchi_keystone_auth`` is ``true`` or ``yes`` this value " "will default to ``keystone``." msgstr "" #: ../../:1599 msgid "" "Specify the ``gnocchi_git_config_lookup_location`` value to specify the git " "repository where the ``gnocchi`` config files can be retrieved. The ``api-" "paste.ini`` and ``policy.json`` files are now retrieved from the specified " "git repository and are not carried in the ``os_gnocchi`` role." msgstr "" #: ../../:92 stable/2023.2>:113 #: stable/2024.1>:592 msgid "" "Stable RabbitMQ feature flags will be enabled automatically pre-upgrade in " "order to prevent failures during the upgrade process." msgstr "" #: ../../:3479 msgid "" "Static route information for provider networks now *must* include the `cidr` " "and `gateway` information. If either key is missing, an error will be raised " "and the dynamic_inventory.py script will halt before any Ansible action is " "taken. Previously, if either key was missing, the inventory script would " "continue silently without adding the static route information to the " "networks. Note that this check does not validate the CIDR or gateway values, " "just just that the values are present." msgstr "" #: ../../:46 stable/ussuri>:129 msgid "" "String value of `nova_scheduler_default_filters` is converted to the list At " "the moment there is compatability for overriden values, that are string, but " "this support will be removed in the Wallaby release. So deployers are " "recommended to replace their string overrides with list ones." msgstr "" #: ../../:466 msgid "" "String value of `nova_scheduler_default_filters` is converted to the list At " "the moment there is compatability for overriden values, that are string, but " "this support will be removed in the future releases. So deployers are " "recommended to replace their string overrides with list ones." msgstr "" #: ../../:274 unmaintained/zed>:490 msgid "Support Rocky Linux 9 as a Deployment and Target host" msgstr "" #: ../../:2387 msgid "" "Support added to allow deploying on ppc64le architecture using the Ubuntu " "distributions." msgstr "" #: ../../:501 msgid "" "Support and documentation is added to the ceph_client role for enabling the " "Ceph Immutable Object Cache and the Peristent Write Log cache." msgstr "" #: ../../:2042 msgid "" "Support for Neutron distributed virtual routing has been added to the " "``os_neutron`` role. This includes the implementation of Networking Guide's " "suggested agent configuration. This feature may be activated by setting " "``neutron_plugin_type: ml2.ovs.dvr`` in ``/etc/openstack_deploy/" "user_variables.yml``." msgstr "" #: ../../:565 msgid "" "Support for OpenDaylight driver has been deprecated by Neutron team during " "2023.2 (Bobcat) development cycle and it's support has been removed from " "OpenStack-Ansible." msgstr "" #: ../../:744 msgid "" "Support for an Open vSwitch dataplate with NSH support using the " "``ovs_nsh_support`` variable has been immediately deprecated and removed due " "to built-in support for NSH in recent Open vSwitch releases. The prior PPA " "provided a custom release of OVS 2.9, which is no longer appropriate for " "recent releases of OSA and respective operating systems." msgstr "" #: ../../:802 msgid "" "Support for openSUSE in Ussuri is moved from fully supported to experimental " "due to insufficient resources to maintain reliable CI jobs. The zuul jobs " "are moved to be non-voting. Support will be removed entirely in the Victoria " "cycle." msgstr "" #: ../../:714 msgid "" "Support for the calico ml2 driver is removed. It will not be possible to " "upgrade an existing deployment using calico networking." msgstr "" #: ../../:2395 msgid "" "Support for the deployment of Unbound caching DNS resolvers has been added " "as an optional replacement for /etc/hosts management across all hosts in the " "environment. To enable the Unbound DNS containers, add ``unbound_hosts`` " "entries to the environment." msgstr "" #: ../../:435 msgid "" "Support for the networking-baremetal mechanism driver and agent has been " "implemented. The ironic-neutron-agent is a neutron agent that populates the " "host to physical network mapping for baremetal nodes in neutron. Neutron " "uses this to calculate the segment to host mapping information. This feature " "may be enabled by adding ``ml2.baremetal`` to the ``neutron_plugin_types`` " "list in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:338 msgid "" "Support for the networking-generic-switch mechanism driver has been " "implemented. This allows Ironic to interface with Neutron when the " "``neutron`` network interface has been configured. This feature may be " "enabled by adding ``ml2.genericswitch`` to the ``neutron_plugin_types`` list " "in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:2391 msgid "" "Support had been added to allow the functional tests to pass when deploying " "on ppc64le architecture using the Ubuntu distributions." msgstr "" #: ../../:1575 msgid "" "Support had been added to install the ceph_client packages and dependencies " "from Ceph.com, Ubuntu Cloud Archive (UCA), or the operating system's default " "repository." msgstr "" #: ../../:460 stable/stein>:202 msgid "" "Support has been added for deploying on Ubuntu 18.04 LTS hosts. The most " "significant change is a major version increment of LXC from 2.x to 3.x which " "deprecates some previously used elements of the container configuration file." "" msgstr "" #: ../../:1381 msgid "" "Support has been added for the horizon designate-ui dashboard. The dashboard " "will be automatically enabled if any hosts are in the ``dnsaas_hosts`` " "inventory group." msgstr "" #: ../../:1389 msgid "" "Support has been added for the horizon trove-ui dashboard. The dashboard " "will be automatically enabled if any hosts are defined in the ``trove-" "infra_hosts`` inventory group." msgstr "" #: ../../:135 msgid "" "Support has been added to allow the deployment of the Cloudkitty service " "when hosts are present in the host group `cloudkitty_hosts` in " "openstack_user_config or conf.d files. `os-cloudkitty-install.yml` has been " "added and is now part of `setup-openstack.yml`" msgstr "" #: ../../:1445 msgid "" "Support has been added to allow the deployment of the OpenStack barbican " "service when hosts are present in the host group ``key-manager_hosts``." msgstr "" #: ../../:188 unmaintained/victoria>:277 msgid "" "Support is added for deploying OpenStack on CentOS 8 with source and distro " "based installs. However, nspawn support can't be offered, as machinectl " "relies on btrfs which has been dropped by CentOS." msgstr "" #: ../../:195 unmaintained/victoria>:284 msgid "" "Support is added for deploying OpenStack on Ubuntu Focal (20.04) with source " "based installs. Ubuntu Cloud Archive is not available for Focal at this " "point so it is not possible to offer distro package based installs for Focal." "" msgstr "" #: ../../:86 stable/2023.2>:107 #: stable/2024.1>:532 msgid "" "Support is added to enable all stable RabbitMQ feature flags by default. " "This happens automatically post upgrade, and avoids compatibility issues " "which could occur when installing a new version of RabbitMQ." msgstr "" #: ../../:587 msgid "" "Support is added to the os_nova ansible role to deploy resource provider " "config files to nova compute nodes. This allows automatic configuraion of " "resource providers without having to use the openstack API or command line." msgstr "" #: ../../:323 current msgid "Support of Debian 11 (Bullseye) has been removed." msgstr "" #: ../../:521 stable/ussuri>:702 msgid "" "Support of the legacy neutron L3 tool has been dropped. Deployers are " "appreciated to use built-in l3-agent options for configuring HA." msgstr "" #: ../../:841 stable/stein>:708 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in aodh." msgstr "" #: ../../:833 stable/stein>:704 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in barbican." msgstr "" #: ../../:849 stable/stein>:712 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in ceilometer." msgstr "" #: ../../:821 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in cinder." msgstr "" #: ../../:857 stable/stein>:716 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in designate." msgstr "" #: ../../:845 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in glance." msgstr "" #: ../../:837 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in heat." msgstr "" #: ../../:829 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in ironic." msgstr "" #: ../../:869 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in keystone." msgstr "" #: ../../:865 stable/stein>:720 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in magnum." msgstr "" #: ../../:861 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in neutron." msgstr "" #: ../../:825 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in nova." msgstr "" #: ../../:877 stable/stein>:728 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in octavia." msgstr "" #: ../../:853 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in sahara." msgstr "" #: ../../:873 stable/stein>:724 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in swift." msgstr "" #: ../../:817 stable/stein>:700 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers in trove." msgstr "" #: ../../:364 msgid "" "Support separate oslo.messaging services for RPC and Notifications to enable " "operation of separate and different messaging backend servers." msgstr "" #: ../../:1198 origin/stable/ocata>:1790 msgid "" "Swift ``versioned_writes`` middleware is added to the pipeline by default. " "Additionally the ``allow_versioned_writes`` settings in the middleware " "configuration is set to ``True``. This follows the Swift defaults, and " "enables the use of the ``X-History-Location`` metadata Header." msgstr "" #: ../../:1483 msgid "" "Swift container-sync has been updated to use ``internal-client``. This means " "a new configuration file ``internal-client.conf`` has been added. " "Configuration can be overridden using the variable " "``swift_internal_client_conf_overrides``." msgstr "" #: ../../:1786 msgid "" "Swift tempauth users now be specified. The ``swift_tempauth_users`` variable " "can be defined as a list of tempauth users, and their permissions. You will " "still need to specify the appropriate Swift middleware using the " "``swift_middleware_list`` variable, in order to utilise tempauth." msgstr "" #: ../../:1012 origin/stable/ocata>:2094 msgid "" "Systems using systemd (like Ubuntu Xenial) were incorrectly limited to a low " "amount of open files. This was causing issues when restarting galera. A " "deployer can still define the maximum number of open files with the variable " "``galera_file_limits`` (Defaults to 65536)." msgstr "" #: ../../:977 msgid "" "TLS certificate chain verification during the download of LXC cached images " "can now be toggled using the configuration variable " "'lxc_cache_validate_certs'. The default behavior is to validate the " "certificate chain." msgstr "" #: ../../:346 msgid "" "TLS for VNC can be disabled by setting ``nova_qemu_vnc_tls`` variable to " "``0`` in the ``/etc/openstack_deploy/user_variables.yml`` file." msgstr "" #: ../../:1090 stable/train>:453 #: stable/ussuri>:621 msgid "" "Tacker role now uses default systemd_service role. Due to this upstart is " "not supported anymore. Was added variable tacker_init_config_overrides, with " "wich deployer may override predifined options. Also variable " "program_override has no effect now, and tacker_service_names was removed in " "favor of tacker_service_name." msgstr "" #: ../../:285 origin/stable/ocata>:1231 #: stable/pike>:1085 msgid "" "Tags have been added to all of the common tags with the prefix \"common-\". " "This has been done to allow a deployer to rapidly run any of the common on a " "need basis without having to rerun an entire playbook." msgstr "" #: ../../:770 msgid "" "Tags matching service names have been removed from os--install.yml " "playbooks. For example 'nova', 'neutron', 'cinder' etc. These tags were only " "useful in conjunction with setup-openstack.yml, but were found to have " "unexpected behaviour, potentially causing important tasks to be skipped." msgstr "" #: ../../:2321 msgid "" "Tasks were added to search for any device files without a proper SELinux " "label on CentOS systems. If any of these device labels are found, the " "playbook execution will stop with an error message." msgstr "" #: ../../:3162 msgid "That variable would become:" msgstr "" #: ../../:2077 msgid "" "The 'container_cidr' key has been restored back to openstack_inventory.json " "The fix to remove deleted global override keys mistakenly deleted the " "'container_cidr' key, as well. This was used by downstream consumers, and " "cannot be reconstructed with other information inside the inventory file. " "Regression tests were also added." msgstr "" #: ../../:1415 msgid "" "The **openstack_hosts** role will setup an RFC1034/5 hostname and create an " "alias for all hosts in inventory." msgstr "" #: ../../:2084 msgid "" "The Ansible SSH plugin has been modified to support running commands within " "containers without having to directly ssh into them. The change will detect " "presence of a container. If a container is found the physical host will be " "used as the SSH target and commands will be run directly. This will improve " "system reliability and speed while also opening up the possibility for SSH " "to be disabled from within the container itself." msgstr "" #: ../../:3182 msgid "" "The Aodh data migration script should be run to migrate alarm data from " "MongoDB storage to Galera due to the pending removal of MongoDB support." msgstr "" #: ../../:1235 stable/pike>:1098 msgid "" "The COPR repository for installing LXC on CentOS 7 is now set to a higher " "priority than the default to ensure that LXC packages always come from the " "COPR repository." msgstr "" #: ../../:977 msgid "" "The Ceilometer API is no longer available in the Queens release of " "OpenStack, this patch removes all references to API related configurations " "as they are no longer needed." msgstr "" #: ../../:844 stable/pike>:854 stable/queens>:650 #: stable/queens>:873 msgid "" "The Ceph stable release used by openstack-ansible and its ceph-ansible " "integration has been changed to the recent `Ceph LTS `_ Luminous release." msgstr "" #: ../../:815 msgid "" "The Datagram Congestion Control Protocol (DCCP) kernel module is now " "disabled by default, but a reboot is required to make the change effective." msgstr "" #: ../../:1050 msgid "The Designate V1 API has been removed, and cannot be enabled." msgstr "" #: ../../:1839 stable/pike>:1662 msgid "" "The Designate pools.yaml file can now be generated via the " "designate_pools_yaml attribute, if desired. This ability is toggled by the " "designate_use_pools_yaml_attr attribute. In the future this behavior may " "become default and designate_pools_yaml may become a required variable." msgstr "" #: ../../:1543 stable/pike>:1114 msgid "" "The Designate pools.yaml file can now be generated via the " "designate_pools_yaml attribute, if desired. This allows users to populate " "the Designate DNS server configuration using attributes from other plays and " "obviates the need to manage the file outside of the Designate role." msgstr "" #: ../../:1286 stable/pike>:1797 msgid "The EPEL repository is now removed in favor of the RDO repository." msgstr "" #: ../../:1639 msgid "" "The EPEL repository is only installed and configured when the deployer sets " "``security_enable_virus_scanner`` to ``yes``. This allows the ClamAV " "packages to be installed. If ``security_enable_virus_scanner`` is set to " "``no`` (the default), the EPEL repository will not be added." msgstr "" #: ../../:2293 msgid "" "The GPG key checks for package verification in V-38476 are now working for " "Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for " "GPG keys from Red Hat and any other GPG keys, such as ones imported from the " "EPEL repository, are skipped." msgstr "" #: ../../:2451 msgid "" "The Galera client role now has a dependency on the apt package pinning role." msgstr "" #: ../../:748 msgid "" "The Galera installation process has been optimized and takes less time to " "complete." msgstr "" #: ../../:563 msgid "The HAProxy role now supports TLS v1.3 by default, alongside TLS v1.2." msgstr "" #: ../../:1808 msgid "" "The HAProxy role provided by OpenStack-Ansible now terminates SSL using a " "self-signed certificate by default. While this can be disabled the inclusion " "of SSL services on all public endpoints as a default will help make " "deployments more secure without any additional user interaction. More " "information on SSL and certificate generation can be `found here `_." msgstr "" #: ../../:778 msgid "" "The Keystone configuration has been updated for liberty. Several variables " "that may appear in the ``user_config.yml`` file may need to be updated. " "Those variables include:" msgstr "" #: ../../:370 msgid "" "The Kilo upgrade playbook `glance-db-storage-url-fix.yml` to Liberty will " "migrate all existing Swift backed Glance images inside the image_locations " "database table from a Keystone v2 API URL to a v3 URL. This will force the " "Swift client to operate against a v3 Keystone URL. A backup of the old " "image_locations table is stored inside a new database table " "`image_locations_keystone_v3_mig_pre_liberty` and can be safely removed " "after a successfull upgrade to Liberty." msgstr "" #: ../../:2289 msgid "" "The LBaaSv2 device driver is now set by the Ansible variable " "``neutron_lbaasv2_device_driver``. The default is set to use the " "``HaproxyNSDriver``, which allows for agent-based load balancers." msgstr "" #: ../../:1911 msgid "" "The LBaaSv2 service provider configuration can now be adjusted with the " "``neutron_lbaasv2_service_provider`` variable. This allows a deployer to " "choose to deploy LBaaSv2 with Octavia in a future version." msgstr "" #: ../../:3052 msgid "" "The LVM configuration tasks and ``lvm.conf`` template have been removed from " "the ``openstack_hosts`` role since they are no longer needed. All of the LVM " "configuration is properly handled in the ``os_cinder`` role." msgstr "" #: ../../:2490 msgid "" "The LXC container cache preparation process now copies DNS resolution " "configuration from the host instead of implementing its own configuration. " "The ``lxc_cache_resolvers`` variable is therefore unnecessary and has been " "removed." msgstr "" #: ../../:2479 msgid "" "The LXC container cache preparation process now copies package repository " "configuration from the host instead of implementing its own configuration. " "The following variables are therefore unnecessary and have been removed:" msgstr "" #: ../../:590 msgid "" "The LXC container create option `lxc_container_backing_store` is now defined " "by default and has a value of \"dir\". Prior to this release the backend " "store option was using several auto-detection methods to try and guess the " "store type based on facts fed into the role and derived from the physical " "host. While the auto-detection methods worked, they created a cumbersome set " "of conditionals and limited our ability to leverage additional container " "stores. Having this option be a default allows deployers to mix and match " "container stores to suit the needs of the deployment. Existing deployments " "should set this option within group or user variables to ensure there's no " "change in the backend store when new container be provisioned." msgstr "" #: ../../:626 msgid "" "The LXC container create role will now check for the LXC volume group if the " "option `lxc_container_backing_store` is set to \"lvm\". If this volume group " "is not found, the role will halt and instruct the deployer to update their " "configuration options and inspect their host setup." msgstr "" #: ../../:2070 msgid "" "The LXC container creation and modification process now supports online " "network additions. This ensures a container remains online when additional " "networks are added to a system." msgstr "" #: ../../:121 origin/stable/newton>:1931 msgid "" "The LXC container creation process now has a configurable delay for the task " "which waits for the container to start. The variable " "``lxc_container_ssh_delay`` can be set to change the default delay of five " "seconds." msgstr "" #: ../../:1734 msgid "" "The Linux Security Module (LSM) that is appropriate for the Linux " "distribution in use will be automatically enabled by the security role by " "default. Deployers can opt out of this change by setting the following " "Ansible variable:" msgstr "" #: ../../:820 msgid "" "The LinuxBridge configuration that was in ``plugins/ml2/ml2_conf.ini`` is " "now found in ``plugins/ml2/linuxbridge_agent.ini``." msgstr "" #: ../../:820 stable/stein>:824 msgid "The MariaDB version has been bumped to 10.2" msgstr "" #: ../../:513 origin/stable/mitaka>:860 #: origin/stable/newton>:2494 msgid "" "The MariaDB wait_timeout setting is decreased to 1h to match the SQL Alchemy " "pool recycle timeout, in order to prevent unnecessary database session " "buildups." msgstr "" #: ../../:3282 msgid "" "The Neutron HA tool written by AT&T has been deprecated and will be removed " "in the Ocata release." msgstr "" #: ../../:3110 msgid "" "The Neutron HA tool written by AT&T is no longer enabled by default. This " "tool was providing HA capabilities for networks and routers that were not " "using the native Neutron L3HA. Because native Neutron L3HA is stable, " "compatible with the Linux Bridge Agent, and is a better means of enabling HA " "within a deployment this tool is no longer being setup by default. If legacy " "L3HA is needed within a deployment the deployer can set " "`neutron_legacy_ha_tool_enabled` to **true** to enable the legacy tooling." msgstr "" #: ../../:2735 msgid "" "The Neutron L3 Agent configuration for the handle_internal_only_routers " "variable is removed in order to use the Neutron upstream default setting. " "The current default for handle_internal_only_routers is True, which does " "allow Neutron L3 router without external networks attached (as discussed per " "https://bugs.launchpad.net/neutron/+bug/1572390)." msgstr "" #: ../../:566 msgid "" "The Neutron Service Function Chaining Extension (SFC) can optionally be " "deployed and configured by defining the following service plugins:" msgstr "" #: ../../:699 msgid "" "The Nova 2.1 variables (``nova_v21_``), Heat name variables ( " "``heat_project_domain_name``, ``heat_user_domain``) and Galera SST Method " "(``galera_sst_method``) variables have changed. See the `upgrade " "documentation ` for details." msgstr "" #: ../../:828 msgid "" "The Nova project has set the v2.1 API as the default and those configuration " "variables have changed. Variables that began with ``nova_v21_*`` in the " "Kilo release are now renamed to ``nova_*``. All new Liberty deployments will " "have only the v2.1 API registered in the service catalog." msgstr "" #: ../../:2261 origin/stable/ocata>:1742 msgid "" "The PATH environment variable that is configured on the remote system can " "now be set using the ``openstack_host_environment_path`` list variable." msgstr "" #: ../../:2087 msgid "" "The PKI-based authentication checks for RHEL-07-040030, RHEL-07-040040, and " "RHEL-07-040050 are no longer included in the RHEL 7 STIG. The tasks and " "documentation for these outdated configurations are removed." msgstr "" #: ../../:1060 msgid "" "The PermitRootLogin in sshd_config changed from 'yes' to 'prohibit-password' " "in the containers. By default there is no password set in the containers but " "the ssh pub key from the deployment host is injected in the targets nodes " "authorized_keys." msgstr "" #: ../../:517 stable/ussuri>:698 msgid "" "The PowerVM driver has been removed as it is not tested and it has been " "broken since late 2016 due to the driver name being renamed to powervm_ext " "instead of powervm." msgstr "" #: ../../:2016 msgid "" "The Project Calico Neutron networking plugin is now integrated into the " "``os_neutron`` role. This can be activated using the instructions located in " "the role documentation." msgstr "" #: ../../:2004 msgid "" "The Project Calico Neutron networking plugin is now integrated into the " "deployment. For setup instructions please see ``os_neutron`` role " "documentation." msgstr "" #: ../../:2277 msgid "" "The RabbitMQ Management UI is now available through HAProxy on port 15672. " "The default userid is ``monitoring``. This user can be modified by changing " "the parameter ``rabbitmq_monitoring_userid`` in the file ``user_variables." "yml``. Please note that ACLs have been added to this HAProxy service by " "default, such that it may only be accessed by common internal clients. " "Reference ``playbooks/vars/configs/haproxy_config.yml``" msgstr "" #: ../../:331 unmaintained/zed>:606 msgid "" "The RabbitMQ management interface surfaced via HAProxy defaults to using TLS " "from the Yoga release. Note that when using TLS the default port switches " "from 15672 to 15671. TLS can be disabled if required by adjusting " "'rabbitmq_management_ssl'." msgstr "" #: ../../:2054 msgid "" "The Red Hat Enteprise Linux 6 STIG content has been deprecated. The tasks " "and variables for the RHEL 6 STIG will be removed in a future release." msgstr "" #: ../../:1764 msgid "" "The Red Hat Enterprise Linux (RHEL) 7 STIG content is now deployed by " "default. Deployers can continue using the RHEL 7 STIG content by setting the " "following Ansible variable:" msgstr "" #: ../../:1606 stable/train>:598 #: stable/ussuri>:831 msgid "" "The RyuBgpDriver is no longer available and replaced by the OsKenBgpDriver " "of the neutron_dynamic_routing project." msgstr "" #: ../../:832 msgid "" "The S3, v3, and EC2 API's have been deprecated by the Nova project in the " "liberty release. Those variables have been removed. They include variables " "that begin with ``nova_s3_*``, ``nova_ec2_*``, and ``nova_v3_*``." msgstr "" #: ../../:2312 msgid "" "The Sahara dashboard is available in Horizon. Deployers can enable the panel " "by setting the following Ansible variable:" msgstr "" #: ../../:1798 msgid "" "The Trove dashboard is available in Horizon. Deployers can enable the panel " "by setting the following Ansible variable:" msgstr "" #: ../../:1392 origin/stable/ocata>:2118 msgid "" "The URL of NovaLink uses 'ftp' protocol to provision apt key. It causes " "apt_key module to fail to retrieve NovaLink gpg public key file. Therefore, " "change the protocol of URL to 'http'. For more information, see bug 1637348." msgstr "" #: ../../:618 msgid "" "The Wallaby release of openstack-ansible does not support deployment of the " "control plane in nspawn containers." msgstr "" #: ../../:498 origin/stable/mitaka>:743 #: origin/stable/newton>:3492 msgid "" "The XFS filesystem is excluded from the daily mlocate crond job in order to " "conserve disk IO for large IOPS bursts due to updatedb/mlocate file indexing." "" msgstr "" #: ../../:640 msgid "" "The Yoga release of OpenStack-Ansible removes support for Centos-8. " "Deployments should be upgraded from Centos-8 to an alternative supported " "operating system during the Xena release before upgrading to Yoga." msgstr "" #: ../../:634 msgid "" "The Yoga release of OpenStack-Ansible removes support for Debian Buster. " "Deployments should be upgraded from Buster to Bullseye before or during the " "Xena release before upgrading to Yoga." msgstr "" #: ../../:628 msgid "" "The Yoga release of OpenStack-Ansible removes support for Ubuntu Bionic. " "Deployments should be upgraded from Bionic to Focal before or during the " "Xena release before upgrading to Yoga." msgstr "" #: ../../:1619 msgid "" "The ``--check`` parameter for ``dynamic_inventory.py`` will now raise " "warnings if there are any groups defined in the user configuration that are " "not also found in the environment definition." msgstr "" #: ../../:153 origin/stable/mitaka>:401 #: origin/stable/newton>:3504 msgid "" "The ``--compact`` flag has been removed from xtrabackup options. This had " "been shown to cause crashes in some SST situations" msgstr "" #: ../../:104 origin/stable/mitaka>:233 #: origin/stable/newton>:3331 msgid "" "The ``/run`` directory is excluded from AIDE checks since the files and " "directories there are only temporary and often change when services start " "and stop." msgstr "" #: ../../:393 origin/stable/mitaka>:645 #: origin/stable/newton>:3496 msgid "" "The ``/var/lib/libvirt/qemu/save`` directory is now a symlink to ``{{ " "nova_system_home_folder }}/save`` to resolve an issue where the default " "location used by the libvirt managed save command can result with the root " "partitions on compute nodes becoming full when ``nova image-create`` is run " "on large instances." msgstr "" #: ../../:3238 msgid "" "The ``[boto]`` section of tempest.conf.j2 has been removed. These tests " "have been completely removed from tempest for some time." msgstr "" #: ../../:438 msgid "" "The ``ansible-role-requirements.yml`` reference to the ``ceph-ansible`` role " "has been fixed to refer to the current ``HEAD`` of that role's ``stable-3." "1`` branch. It previously pointed to the pre-release 3.2.0beta1 version." msgstr "" #: ../../:1849 msgid "" "The ``aodh_keystone_auth_plugin`` variable has been deprecated. " "``aodh_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:2439 msgid "" "The ``ca-certificates`` package has been included in the LXC container build " "process in order to prevent issues related to trying to connect to public " "websites which make use of newer certificates than exist in the base CA " "certificate store." msgstr "" #: ../../:3082 msgid "" "The ``ceilometer-api`` init service is removed since ``ceilometer-api`` is " "deployed as an apache ``mod_wsgi`` service." msgstr "" #: ../../:2046 msgid "" "The ``ceilometer_gnocci_resources_yaml_overrides`` variable is deprecated " "and scheduled for removal in the Pike cycle. This is replaced with the " "correctly spelled variable, which should now be used " "``ceilometer_gnocchi_resources_yaml_overrides``." msgstr "" #: ../../:1853 msgid "" "The ``ceilometer_keystone_auth_plugin`` variable has been deprecated. " "``ceilometer_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:29 msgid "" "The ``ceph-ansible`` individual role repositories were all removed from " "github on around 16 January 2019, causing the bootstrap-ansible script to " "fail for any new deployments, or during upgrades for environments which had " "these roles previously. To replace them, the ``ceph-ansible`` git repository " "is used instead." msgstr "" #: ../../:18 msgid "" "The ``ceph-ansible`` individual role repositories were all removed from " "github on around 16 January 2019, causing the bootstrap-ansible script to " "fail for any new deployments, or during upgrades for environments which had " "these roles previously. To replace them, the ``ceph-ansible`` git repository " "is used instead. In order to prevent clashes between the old and new roles, " "the existing ``/etc/ansible/roles/ceph*`` folders should be removed prior to " "running ``scripts/bootstrap-ansible.sh`` during the minor upgrade process." msgstr "" #: ../../:1573 msgid "" "The ``ceph-rgw`` playbooks now include the ``AUTH_%(tenant_id)s`` suffix in " "the Keystone ``object-store`` endpoint. This aligns radosgw's behavior with " "that of native Swift. It also enables radosgw to support public read ACLs on " "containers, and temporary URLs on objects, in the same way that Swift does " "(`bug 1800637 `_)." "" msgstr "" #: ../../:920 msgid "" "The ``ceph-rgw`` playbooks now set ``rgw_swift_account_in_url = true`` and " "update the corresponding Keystone service catalog entry accordingly. " "Applications (such as monitoring scripts) that do *not* rely on service " "catalog lookup must be updated with the new endpoint URL that includes " "``AUTH_%(tenant_id)s`` just like native Swift does --- or, alternatively, " "should be updated to honor the service catalog after all." msgstr "" #: ../../:924 msgid "" "The ``ceph-rgw`` playbooks now set ``rgw_swift_versioning_enabled = true``, " "adding support for object versioning for the ``object-store`` service." msgstr "" #: ../../:1579 msgid "" "The ``ceph_pkg_source`` variable controls the install source for the Ceph " "packages. Valid values include:" msgstr "" #: ../../:1081 msgid "" "The ``cinder-api`` service has moved to run as a uWSGI application. You can " "set the max number of WSGI processes, the number of processes, threads, and " "buffer size utilizing the ``cinder_wsgi_processes_max``, " "``cinder_wsgi_processes``, ``cinder_wsgi_threads``, and " "``cinder_wsgi_buffer_size``. Additionally, you can override any settings in " "the uWSGI ini configuration file using the " "``cinder_api_uwsgi_ini_overrides`` setting. The uWSGI application will " "listen on the address specified by ``cinder_uwsgi_bind_address`` which " "defaults to ``0.0.0.0``." msgstr "" #: ../../:1833 msgid "" "The ``cinder_keystone_auth_plugin`` variable has been deprecated. " "``cinder_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:2032 msgid "" "The ``cinder`` project removed the ``shred`` value for the ``volume_clear`` " "option. The default for the ``os_cinder`` OpenStack-Ansible role has changed " "to ``zero``." msgstr "" #: ../../:2081 msgid "" "The ``cn_map`` permissions and ownership adjustments included as part of " "RHEL-07-040070 and RHEL-07-040080 has been removed. This STIG configuration " "was removed in the most recent release of the RHEL 7 STIG." msgstr "" #: ../../:1638 msgid "" "The ``config_template`` action module has now been moved into its own git " "repository (``openstack/ansible-config_template``). This has been done to " "simplify the ability to use the plugin in other non OpenStack-Ansible " "projects." msgstr "" #: ../../:1234 msgid "" "The ``container_cidr`` key has been restored back to ``openstack_inventory." "json``." msgstr "" #: ../../:741 msgid "" "The ``container_interface`` provider network option is no longer required " "for Neutron provider network definitions when related agents or OVN " "controllers are deployed on bare metal." msgstr "" #: ../../:1656 stable/pike>:1316 msgid "" "The ``dragonflow`` plugin for neutron is now available. You can set the " "``neutron_plugin_type`` to ``ml2.dragonflow`` to utilize this code path. The " "``dragonflow`` code path is currently experimental." msgstr "" #: ../../:1047 origin/stable/mitaka>:1147 msgid "" "The ``dynamic_inventory.py`` script now takes a ``--config`` argument rather " "than a ``--file`` argument." msgstr "" #: ../../:2347 msgid "" "The ``fallocate_reserve` option can now be set (in bytes or as a percentage) " "for swift by using the ``swift_fallocate_reserve`` variable in ``/etc/" "openstack_deploy/user_variables.yml``. This value is the amount of space to " "reserve on a disk to prevent a situation where swift is unable to remove " "objects due to a lack of available disk space to work with. The default " "value is 1% of the total disk size." msgstr "" #: ../../:1863 msgid "" "The ``galera_apt_repo_url`` and ``galera_yum_repo_url`` variables have been " "renamed to ``galera_repo_url``." msgstr "" #: ../../:368 stable/queens>:981 msgid "" "The ``galera_client_opensuse_mirror_obs_url`` variable has been removed " "since the OBS repository is no longer used to install the MariaDB packages." msgstr "" #: ../../:1579 msgid "" "The ``galera_client_package_install`` option can now be specified to handle " "whether packages are installed as a result of the ``openstack-ansible-" "galera_client`` role running. This will default to ``true``, but can be set " "to ``false`` to prevent package installs. This is useful when deploying the " "``my.cnf`` client configuration file on hosts that already have Galera " "installed." msgstr "" #: ../../:825 origin/stable/ocata>:1241 #: stable/pike>:1149 msgid "" "The ``galera_client`` role will default to using the ``galera_repo_url`` URL " "if the value for it is set. This simplifies using an alternative mirror for " "the MariaDB server and client as only one variable needs to be set to cover " "them both." msgstr "" #: ../../:1859 msgid "" "The ``galera_mariadb_apt_server_package`` and " "``galera_mariadb_yum_server_package`` variables have been renamed to " "``galera_mariadb_server_package``." msgstr "" #: ../../:953 msgid "" "The ``galera_percona_xtrabackup_repo_url`` variable which was used on Ubuntu " "distributions to select the upstream Percona repository has been dropped and " "the default upstream repository is always used from now on." msgstr "" #: ../../:832 stable/train>:302 stable/ussuri>:426 msgid "" "The ``galera_server`` role now ships with the latest MariaDB release of 10.3." "13." msgstr "" #: ../../:828 stable/train>:298 stable/ussuri>:422 msgid "" "The ``galera_server`` role now uses mariabackup in order to complete SST " "operations due to the fact that this is the recommended choice from MariaDB." msgstr "" #: ../../:808 msgid "" "The ``galera_upgrade`` variable is now provided to allow the MariaDB role to " "update existing installs." msgstr "" #: ../../:1059 stable/stein>:1190 msgid "" "The ``get_gested`` filter has been removed, as it is not used by any roles/" "plays." msgstr "" #: ../../:1170 msgid "" "The ``glance-api`` service has moved to run as a uWSGI application. You can " "set the max number of WSGI processes, the number of processes, threads, and " "buffer size utilizing the ``glance_wsgi_processes_max``, " "``glance_wsgi_processes``, ``glance_wsgi_threads``, and " "``glance_wsgi_buffer_size``. Additionally, you can override any settings in " "the uWSGI ini configuration file using the " "``glance_api_uwsgi_ini_overrides`` setting." msgstr "" #: ../../:2521 msgid "" "The ``glance_apt_packages`` variable has been renamed to " "``glance_distro_packages`` so that it applies to multiple operating systems." msgstr "" #: ../../:858 msgid "" "The ``glance_digest_algorithm`` has changed from ``sha1`` to ``sha256`` and " "this improves integrity verification of stored images." msgstr "" #: ../../:600 stable/queens>:986 msgid "" "The ``glance_enable_v1_registry`` variable has been removed. When using the " "glance v1 API the registry service is required, so having a variable to " "disable it makes little sense. The service is now enabled/disabled for the " "v1 API using the ``glance_enable_v1_api`` variable." msgstr "" #: ../../:1907 msgid "" "The ``glance`` library has been removed from OpenStack-Ansible's plugins. " "Upstream Ansible modules for managing OpenStack image resources should be " "used instead." msgstr "" #: ../../:341 stable/pike>:1857 msgid "" "The ``gnocchi_keystone_auth_plugin`` variable has been deprecated. " "``gnocchi_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:2050 msgid "" "The ``gnocchi_keystone_auth`` is deprecated, and will be removed in the " "``Queen`` cycle. Setting ``gnocchi_auth_mode`` to ``keystone`` will achieve " "the same result." msgstr "" #: ../../:1710 msgid "" "The ``haproxy_bufsize`` variable has been removed and made a part of the " "``haproxy_tuning_params`` dictionary." msgstr "" #: ../../:1792 msgid "" "The ``haproxy`` role installs *hatop* from source to ensure that the same " "operator tooling is available across all supported distributions. The " "download URL for the source can be set using the variable " "``haproxy_hatop_download_url``." msgstr "" #: ../../:1219 msgid "" "The ``heat-api``, ``heat-api-cfn``, and ``heat-api-cloudwatch`` services " "have moved to run as a uWSGI applications. You can set the max number of " "WSGI processes, the number of processes, threads, and buffer size utilizing " "the ``heat_wsgi_processes_max``, ``heat_wsgi_processes``, " "``heat_wsgi_threads``, and ``heat_wsgi_buffer_size``. Additionally, you can " "override any settings in the uWSGI ini configuration file using the " "``heat_api_uwsgi_ini_overrides``, ``heat_api_cfn_uwsgi_ini_overrides``, and " "``heat_api_cloudwatch_uwsgi_ini_overrides`` settings. The uWSGI applications " "will listen on the addresses specified by ``heat_api_uwsgi_bind_address``, " "``heat_api_cfn_uwsgi_bind_address``, and " "``heat_api_cloudwatch_uwsgi_bind_address`` respectively. Which all default " "to ``0.0.0.0``." msgstr "" #: ../../:1147 origin/stable/ocata>:1519 msgid "" "The ``heat_cinder_backups_enabled`` variable is set to ``false`` by default." msgstr "" #: ../../:448 origin/stable/ocata>:686 #: stable/pike>:1227 msgid "" "The ``horizon_images_allow_location`` variable is added to support the " "``IMAGES_ALLOW_LOCATION`` setting in the horizon_local_settings.py file to " "allow to specify and external location during the image creation." msgstr "" #: ../../:262 origin/stable/newton>:1446 msgid "" "The ``horizon_keystone_admin_roles`` variable is added to support the " "``OPENSTACK_KEYSTONE_ADMIN_ROLES`` list in the horizon_local_settings.py " "file." msgstr "" #: ../../:3066 msgid "" "The ``infra_hosts`` and ``infra_containers`` inventory groups have been " "removed. No containers or services were assigned to these groups " "exclusively, and the usage of the groups has been supplanted by the ``shared-" "infra_*`` and ``os-infra_*`` groups for some time. Deployers who were using " "the groups should adjust any custom configuration in the ``env.d`` directory " "to assign containers and/or services to other groups." msgstr "" #: ../../:767 origin/stable/ocata>:1627 msgid "" "The ``ironic_neutron_provisioning_network_name`` and " "``ironic_neutron_cleaning_network_name`` variable can be set to the name of " "the neutron network to use for provisioning and cleaning. The ansible tasks " "will determine the appropriate UUID for that network. Alternatively, " "``ironic_neutron_provisioning_network_uuid`` or " "``ironic_neutron_cleaning_network`` can be used to directly specify the UUID " "of the networks. If both ``ironic_neutron_provisioning_network_name`` and " "``ironic_neutron_provisioning_network_uuid`` are specified, the specified " "UUID will be used. If only the provisioning network is specified, the " "cleaning network will default to the same network." msgstr "" #: ../../:1861 msgid "The ``ironic`` role now supports Ubuntu 16.04 and SystemD." msgstr "" #: ../../:897 origin/stable/mitaka>:1063 msgid "" "The ``keystone_ldap_identity_driver`` variable has been removed. The driver " "for an LDAP back-end in Keystone now simply uses the value 'ldap'. There are " "no other back-end options for Keystone at this time." msgstr "" #: ../../:345 stable/2023.2>:625 stable/yoga>:45 #: unmaintained/zed>:86 msgid "" "The ``localhost`` target was explicitly added to OSA inventory due to bug " "#2041717. As a result, the 'all' group now contains localhost, and custom " "playbooks targeting 'all' may need adjustment, e.g.: ``hosts: all:" "!localhost``" msgstr "" #: ../../:1649 msgid "" "The ``lxc-container-create`` role now consumes the variable " "``lxc_container_bind_mounts`` which should contain a list of bind mounts to " "apply to a newly created container. The appropriate host and container " "directory will be created and the configuration applied to the container " "config. This feature is designed to be used in group_vars to ensure that " "containers are fully prepared at the time they are created, thus cutting " "down the number of times containers are restarted during deployments and " "upgrades." msgstr "" #: ../../:1657 msgid "" "The ``lxc-container-create`` role now consumes the variable " "``lxc_container_commands`` which should contain any shell commands that " "should be executed in a newly created container. This feature is designed to " "be used in group_vars to ensure that containers are fully prepared at the " "time they are created, thus cutting down the number of times containers are " "restarted during deployments and upgrades." msgstr "" #: ../../:1653 msgid "" "The ``lxc-container-create`` role now consumes the variable " "``lxc_container_config_list`` which should contain a list of the entries " "which should be added to the LXC container config file when the container is " "created. This feature is designed to be used in group_vars to ensure that " "containers are fully prepared at the time they are created, thus cutting " "down the number of times containers are restarted during deployments and " "upgrades." msgstr "" #: ../../:2584 msgid "" "The ``lxc_container_create`` role no longer uses the distro specific lxc " "container create template." msgstr "" #: ../../:1927 msgid "" "The ``lxc_container_create`` role now supports Ubuntu 14.04, 16.04, and RHEL/" "CentOS 7" msgstr "" #: ../../:1923 msgid "" "The ``lxc_container_create`` role will now build a container based on the " "distro of the host OS." msgstr "" #: ../../:1935 msgid "" "The ``lxc_host`` cache prep has been updated to use the LXC download " "template. This removes the last remaining dependency the project has on the " "`rpc-trusty-container.tgz image `_." msgstr "" #: ../../:1943 msgid "" "The ``lxc_host`` role introduces support for CentOS 7 and Ubuntu 16.04 " "container types." msgstr "" #: ../../:2610 msgid "" "The ``lxc_host`` role no longer uses the distro specific lxc container " "create template." msgstr "" #: ../../:1939 msgid "" "The ``lxc_host`` role will build lxc cache using the download template built " "from `images found here `_. These images " "are upstream builds from the greater LXC/D community." msgstr "" #: ../../:457 stable/queens>:702 msgid "" "The ``lxcbr0`` bridge now allows NetworkManager to control it, which allows " "for networks to start in the correct order when the system boots. In " "addition, the ``NetworkManager-wait-online.service`` is enabled to ensure " "that all services that require networking to function, such as " "``keepalived``, will only start when network configuration is complete. " "These changes are only applied if a deployer is actively using " "NetworkManager in their environment." msgstr "" #: ../../:3270 msgid "" "The ``main`` function in ``dynamic_inventory.py`` now takes named arguments " "instead of dictionary. This is to support future code changes that will move " "construction logic into separate files." msgstr "" #: ../../:1132 msgid "" "The ``molteniron`` service is no longer included in the OSA integrated build." " Any deployers wishing to use it may still use the playbook and " "configuration examples from the ``os_molteniron`` role." msgstr "" #: ../../:245 origin/stable/ocata>:425 #: stable/pike>:820 msgid "" "The ``net.bridge.bridge-nf-call-*`` kernel parameters were set to ``0`` in " "previous releases to improve performance and it was left up to neutron to " "adjust these parameters when security groups are applied. This could cause " "situations where bridge traffic was not sent through iptables and this " "rendered security groups ineffective. This could allow unexpected ingress " "and egress traffic within the cloud." msgstr "" #: ../../:623 msgid "" "The ``neutron_db_pool_size`` variable was previously deprecated and is now " "removed. A replacement variable was introduced in the Xena release." msgstr "" #: ../../:812 msgid "" "The ``neutron_driver_network_scheduler`` variable default has changed from " "ChanceScheduler to WeightScheduler to match the new Neutron defaults." msgstr "" #: ../../:816 msgid "" "The ``neutron_driver_quota`` variable default has changed slightly to match " "the new upstream driver paths." msgstr "" #: ../../:1837 msgid "" "The ``neutron_keystone_auth_plugin`` variable has been deprecated. " "``neutron_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:1125 msgid "" "The ``neutron_plugin_base`` variable has been modifed to use the friendly " "names. Deployers should change any customisations to this variable to ensure " "that the customisation makes use of the short names instead of the full " "class path." msgstr "" #: ../../:1779 msgid "" "The ``neutron`` library has been removed from OpenStack-Ansible's plugins. " "Upstream Ansible modules for managing OpenStack network resources should be " "used instead." msgstr "" #: ../../:1378 msgid "" "The ``nova-api``, and ``nova-metadata`` services have moved to run as uWSGI " "applications. You can override their uwsgi configuration files using the " "``nova_api_os_compute_uwsgi_ini_overrides``, and " "``nova_api_metadata_uwsgi_ini_overrides`` settings." msgstr "" #: ../../:1668 stable/pike>:1355 msgid "" "The ``nova-placement`` api service will run as its own ansible group " "``nova_api_placement``." msgstr "" #: ../../:1664 stable/pike>:1351 msgid "" "The ``nova-placement`` service is now configured by default. " "``nova_placement_service_enabled`` can be set to ``False`` to disable the " "``nova-placement`` service." msgstr "" #: ../../:1767 msgid "" "The ``nova-placement`` service now runs as a uWSGI application that is not " "fronted by an nginx web-server by default. After upgrading, if the ``nova-" "placement`` service was running on a host or container without any other " "services requiring nginx, you should manually remove nginx." msgstr "" #: ../../:822 msgid "" "The ``nova.conf`` template still includes these variables and it sets the " "keymap configuration option. Deployers who have customized this setting will " "not see a change in their ``nova.conf``." msgstr "" #: ../../:1964 msgid "" "The ``nova_cpu_mode`` Ansible variable has been removed by default, to allow " "Nova to detect the default value automatically. Hard-coded values can cause " "problems. You can still set ``nova_cpu_mode`` to enforce a ``cpu_mode`` for " "Nova. Additionally, the default value for the ``qemu`` ``libvirt_type`` is " "set to ``none`` to avoid issues caused with ``qemu`` 2.6.0." msgstr "" #: ../../:611 msgid "" "The ``octaiva_db_pool_size`` variable was previously deprecated and is now " "removed. A replacement variable was introduced in the Xena release." msgstr "" #: ../../:1394 msgid "" "The ``octavia-api`` service has moved to run as a uWSGI application. You can " "set the max number of WSGI processes, the number of processes, threads, and " "buffer size utilizing the ``octavia_wsgi_processes_max``, " "``octavia_wsgi_processes``, ``octavia_wsgi_threads``, and " "``octavia_wsgi_buffer_size``. Additionally, you can override any settings in " "the uWSGI ini configuration file using the " "``octavia_api_uwsgi_ini_overrides`` setting. The uWSGI application will " "listen on the address specified by ``octavia_uwsgi_bind_address`` which " "defaults to ``0.0.0.0``." msgstr "" #: ../../:1861 msgid "" "The ``octavia_keystone_auth_plugin`` variable has been deprecated. " "``octavia_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:117 origin/stable/newton>:1768 msgid "" "The ``openstack-ansible-galera_server`` role will now prevent deployers from " "changing the ``galera_cluster_name`` variable on clusters that already have " "a value set in a running galera cluster. You can set the new " "``galera_force_change_cluster_name`` variable to ``True`` to force the " "``galera_cluster_name`` variable to be changed. We recommend setting this by " "running the galera-install.yml playbook with ``-e " "galera_force_change_cluster_name=True``, to avoid changing the " "``galera_cluster_name`` variable unintentionally. Use with caution, changing " "the ``galera_cluster_name`` value can cause your cluster to fail, as the " "nodes won't join if restarted sequentially." msgstr "" #: ../../:2351 msgid "" "The ``openstack-ansible-os_swift`` role will now prevent deployers from " "changing the ``swift_hash_path_prefix`` and ``swift_hash_path_suffix`` " "variables on clusters that already have a value set in ``/etc/swift/swift." "conf``. You can set the new ``swift_force_change_hashes`` variable to " "``True`` to force the ``swift_hash_path_`` variables to be changed. We " "recommend setting this by running the os-swift.yml playbook with ``-e " "swift_force_change_hashes=True``, to avoid changing the ``swift_hash_path_`` " "variables unintentionally. Use with caution, changing the " "``swift_hash_path_`` values causes end-user impact." msgstr "" #: ../../:3242 msgid "" "The ``openstack_host_apt_packages`` variable has been deprecated. " "``openstack_host_packages`` should be used instead to override packages " "required to install on all OpenStack hosts." msgstr "" #: ../../:1295 stable/pike>:1814 msgid "" "The ``openstack_tempest_gate.sh`` script has been removed as it requires the " "use of the ``run_tempest.sh`` script which has been deprecated in Tempest. " "In order to facilitate the switch, the default for the variable " "``tempest_run`` has been set to ``yes``, forcing the role to execute tempest " "by default. This default can be changed by overriding the value to ``no``. " "The test whitelist may be set through the list variable " "``tempest_test_whitelist``." msgstr "" #: ../../:383 origin/stable/ocata>:676 #: stable/pike>:1063 msgid "" "The ``os-cinder-install.yml`` playbook will now execute a rolling upgrade of " "cinder including database migrations (both schema and online) as per the " "procedure described in the `cinder documentation `_. When haproxy is used as the load balancer, " "the backend being changed will be drained before changes are made, then " "added back to the pool once the changes are complete." msgstr "" #: ../../:1539 msgid "The ``os-designate`` role now supports Ubuntu 16.04 and SystemD." msgstr "" #: ../../:397 origin/stable/ocata>:690 #: stable/pike>:1328 msgid "" "The ``os-neutron-install.yml`` playbook will now execute a rolling upgrade " "of neutron including database migrations (both expand and contract) as per " "the procedure described in the `neutron documentation `_." msgstr "" #: ../../:404 origin/stable/ocata>:570 #: stable/pike>:1363 msgid "" "The ``os-nova-install.yml`` playbook will now execute a rolling upgrade of " "nova including database migrations as per the procedure described in the " "`nova documentation `_." msgstr "" #: ../../:1815 msgid "" "The ``os_barbican`` role now supports deployment on Ubuntu 16.04 using " "SystemD." msgstr "" #: ../../:742 stable/pike>:1110 msgid "" "The ``os_ceilometer`` role now includes a facility where you can place your " "own templates in ``/etc/openstack_deploy/ceilometer`` (by default) and it " "will be deployed to the target host after being interpreted by the template " "engine. If no file is found there, the fallback of the git sourced template " "is used." msgstr "" #: ../../:379 origin/stable/ocata>:554 #: stable/pike>:1051 msgid "" "The ``os_cinder`` role now provides for doing online data migrations once " "the db sync has been completed. The data migrations will not be executed " "until the boolean variable ``cinder_all_software_updated`` is true. This " "variable will need to be set by the playbook consuming the role." msgstr "" #: ../../:2121 msgid "The ``os_cinder`` role now supports Ubuntu 16.04." msgstr "" #: ../../:1780 msgid "The ``os_glance`` role now supports Ubuntu 16.04 and SystemD." msgstr "" #: ../../:750 stable/pike>:1174 msgid "" "The ``os_gnocchi`` role now includes a facility where you can place your own " "default ``api-paste.ini`` or ``policy.json`` file in ``/etc/openstack_deploy/" "gnocchi`` (by default) and it will be deployed to the target host after " "being interpreted by the template engine." msgstr "" #: ../../:420 origin/stable/newton>:1820 msgid "" "The ``os_horizon`` role now supports configuration of custom themes. " "Deployers can use the new ``horizon_custom_themes`` and " "``horizon_default_theme`` variables to configure the dashboard with custom " "themes and default to a specific theme respectively." msgstr "" #: ../../:226 stable/rocky>:571 stable/stein>:391 msgid "" "The ``os_horizon`` role now supports distribution of user custom themes. " "Deployers can use the new key ``theme_src_archive`` of " "``horizon_custom_themes`` dictionary to provide absolute path to the " "archived theme. Only .tar.gz, .tgz, .zip, .tar.bz, .tar.bz2, .tbz, .tbz2 " "archives are supported. Structure inside archive should be as a standard " "theme, without any leading folders." msgstr "" #: ../../:1263 msgid "" "The ``os_keystone`` role will now (by default) source the ``keystone-paste." "ini``, ``policy.json`` and ``sso_callback_template.html`` templates from the " "service git source instead of from the role. It also now includes a facility " "where you can place your own templates in ``/etc/openstack_deploy/keystone`` " "(by default) and it will be deployed to the target host after being " "interpreted by the template engine." msgstr "" #: ../../:2137 msgid "" "The ``os_magnum`` role now supports deployment on Ubuntu 16.04 using systemd." "" msgstr "" #: ../../:553 stable/train>:238 stable/ussuri>:320 msgid "" "The ``os_masakari`` role now covers the monitors installation and " "configuration, completing the full service configuration." msgstr "" #: ../../:1726 msgid "" "The ``os_neutron`` role now configures neutron ml2 to load the " "``l2_population`` mechanism driver by default based on the value of " "``neutron_l2_population``. Deployers may directly control the neutron ml2 " "mechanism drivers list by overriding the ``mechanisms`` variable in the " "``neutron_plugins`` dictionary." msgstr "" #: ../../:1722 msgid "" "The ``os_neutron`` role now determines the default configuration for " "openvswitch-agent ``tunnel_types`` and the presence or absence of " "``local_ip`` configuration based on the value of " "``neutron_ml2_drivers_type``. Deployers may directly control this " "configuration by overriding the ``neutron_tunnel_types`` variable ." msgstr "" #: ../../:2020 msgid "" "The ``os_neutron`` role will now default to the OVS firewall driver when " "``neutron_plugin_type`` is ``ml2.ovs`` and the host is running Ubuntu 16.04 " "on PowerVM. To override this default behavior, deployers should define " "``neutron_ml2_conf_ini_overrides`` and " "'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example " "below" msgstr "" #: ../../:344 origin/stable/ocata>:535 #: stable/pike>:1339 msgid "" "The ``os_nova`` role now provides for doing online data migrations once the " "db sync has been completed. The data migrations will not be executed until " "the boolean variable ``nova_all_software_updated`` is true. This variable " "will need to be set by the playbook consuming the role." msgstr "" #: ../../:428 origin/stable/newton>:2355 msgid "" "The ``os_swift`` role has 3 new variables that will allow a deployer to " "change the hard, soft and fs.file-max limits. the hard and soft limits are " "being added to the limits.conf file for the swift system user. The fs.file-" "max settings are added to storage hosts via kernel tuning. The new options " "are ``swift_hard_open_file_limits`` with a default of 10240 " "``swift_soft_open_file_limits`` with a default of 4096 " "``swift_max_file_limits`` with a default of 24 times the value of " "``swift_hard_open_file_limits``." msgstr "" #: ../../:2379 msgid "" "The ``os_swift`` role will now include the swift \"staticweb\" middleware by " "default." msgstr "" #: ../../:234 msgid "" "The ``os_tempest`` role now has the ability to install from distribution " "packages by setting ``tempest_install_method`` to ``distro``." msgstr "" #: ../../:737 stable/queens>:1091 msgid "" "The ``os_tempest`` tempest role was downloading images twice - once " "arbitrarily, and once to use for testing. This has been consolidated into a " "single download to a consistent location." msgstr "" #: ../../:1043 msgid "" "The ``pip_get_pip_options`` override has been removed from group_vars, " "resulting in the empty default being used. Previously this method was used " "to lock the pip install source appropriately, but this has been handled " "through the pip_lock_down role for several cycles. If a deployer has " "implemented an override in user_variables based on the previous group_vars " "settings then the settings should be reviewed. This override may now be used " "for catering to situations where the pip installation requires extra options " "set to allow installing through a proxy, or disabling certificate validation." "" msgstr "" #: ../../:3467 msgid "" "The ``pip_packages_tmp`` variable has been renamed ``pip_tmp_packages`` to " "avoid unintended processing by the py_pkgs lookup plugin." msgstr "" #: ../../:2359 msgid "" "The ``pretend_min_part_hours_passed`` option can now be passed to swift-ring-" "builder prior to performing a rebalance. This is set by the " "``swift_pretend_min_part_hours_passed`` boolean variable. The default for " "this variable is False. We recommend setting this by running the os-swift." "yml playbook with ``-e swift_pretend_min_part_hours_passed=True``, to avoid " "resetting ``min_part_hours`` unintentionally on every run. Setting " "``swift_pretend_min_part_hours_passed`` to True will reset the clock on the " "last time a rebalance happened, thus circumventing the min_part_hours check. " "This should only be used with extreme caution. If you run this command and " "deploy rebalanced rings before a replication pass completes, you may " "introduce unavailability in your cluster. This has an end-user imapct." msgstr "" #: ../../:463 unmaintained/xena>:443 msgid "" "The ``provider_networks`` library has been updated to support the definition " "of bond member interfaces that can automatically be added as bond ports to " "OVS provider bridges setup during a deployment. This feature is currently " "limited to DPDK-based deployments. To activate this feature, add the " "``network_bond_interfaces`` key to the respective provider network " "definition in ``openstack_user_config.yml``. For more information, refer to " "the latest Open vSwitch w/ DPDK deployment guide." msgstr "" #: ../../:977 msgid "" "The ``provider_networks`` library has been updated to support the definition " "of network interfaces that can automatically be added as ports to OVS " "provider bridges setup during a deployment. As a result, the " "``network_interface`` value applied to the ``neutron_provider_networks`` " "override in ``user_variables.yml``, as described in previous Open vSwitch " "deployment guides, is no longer effective. If overrides are necessary, use " "``network_interface_mappings`` within the provider network override and " "specify the respective bridge-to-interface mapping (e.g. \"br-provider:" "bond1\"). For more information, refer to the latest Open vSwitch deployment " "guide." msgstr "" #: ../../:587 msgid "" "The ``provider_networks`` library has been updated to support the definition " "of network interfaces that can automatically be added as ports to OVS " "provider bridges setup during a deployment. To activate this feature, add " "the ``network_interface`` key to the respective flat and/or vlan provider " "network definition in ``openstack_user_config.yml``. For more information, " "refer to the latest Open vSwitch deployment guide." msgstr "" #: ../../:570 stable/ussuri>:792 msgid "" "The ``py_pkgs`` and ``packages_file`` Ansible lookups are no longer used in " "OSA and have been removed from the plugins repository." msgstr "" #: ../../:172 origin/stable/mitaka>:416 #: origin/stable/newton>:1764 msgid "" "The ``py_pkgs`` lookup plugin now has strict ordering for requirement files " "discovered. These files are used to add additional requirements to the " "python packages discovered. The order is defined by the constant, " "``REQUIREMENTS_FILE_TYPES`` which contains the following entries, 'test-" "requirements.txt', 'dev-requirements.txt', 'requirements.txt', 'global-" "requirements.txt', 'global-requirement-pins.txt'. The items in this list are " "arranged from least to most priority." msgstr "" #: ../../:3246 msgid "" "The ``rabbitmq_apt_packages`` variable has been deprecated. " "``rabbitmq_dependencies`` should be used instead to override additional " "packages to install alongside rabbitmq-server." msgstr "" #: ../../:1645 msgid "" "The ``rabbitmq_server`` now supports a configurable inventory host group. " "Deployers can override the ``rabbitmq_host_group`` variable if they wish to " "use the role to create additional RabbitMQ clusters on a custom host group." msgstr "" #: ../../:1812 msgid "" "The ``rabbitmq_server`` role now supports configuring HiPE compilation of " "the RabbitMQ server Erlang code. This configuration option may improve " "server performance for some workloads and hardware. Deployers can override " "the ``rabbitmq_hipe_compile`` variable, setting a value of ``True`` if they " "wish to enable this feature." msgstr "" #: ../../:2273 msgid "" "The ``rabbitmq_server`` role now supports deployer override of the RabbitMQ " "policies applied to the cluster. Deployers can override the " "``rabbitmq_policies`` variable, providing a list of desired policies." msgstr "" #: ../../:1081 origin/stable/ocata>:1547 msgid "" "The ``rabbitmq_server`` role now supports disabling listeners that do not " "use TLS. Deployers can override the ``rabbitmq_disable_non_tls_listeners`` " "variable, setting a value of ``True`` if they wish to enable this feature." msgstr "" #: ../../:1079 msgid "" "The ``repo-clone-mirror.yml`` play has been removed as it is no longer used " "by the project." msgstr "" #: ../../:1133 msgid "" "The ``repo-store-source.yml`` playbook has been removed as it is no longer " "needed." msgstr "" #: ../../:3114 msgid "" "The ``repo_build_apt_packages`` variable has been renamed. " "``repo_build_distro_packages`` should be used instead to override packages " "required to build Python wheels and venvs." msgstr "" #: ../../:196 origin/stable/mitaka>:513 #: origin/stable/newton>:3471 msgid "" "The ``repo_build`` role now correctly applies OpenStack requirements upper-" "constraints when building Python wheels. This resolves https://bugs." "launchpad.net/openstack-ansible/+bug/1605846" msgstr "" #: ../../:3118 msgid "" "The ``repo_build`` role now makes use of Ubuntu Cloud Archive by default. " "This can be disabled by setting ``repo_build_uca_enable`` to ``False``." msgstr "" #: ../../:176 origin/stable/mitaka>:432 #: origin/stable/newton>:2399 msgid "" "The ``repo_build`` role now provides the ability to override the upper-" "constraints applied which are sourced from OpenStack and from the global-" "requirements-pins.txt file. The variable " "``repo_build_upper_constraints_overrides`` can be populated with a list of " "upper constraints. This list will take the highest precedence in the " "constraints process, with the exception of the pins set in the git source " "SHAs." msgstr "" #: ../../:1571 msgid "The ``rsyslog_server`` role now has support for CentOS 7." msgstr "" #: ../../:523 origin/stable/newton>:3534 msgid "" "The ``run-playbooks.sh`` script has been refactored to run all playbooks " "using our core tool set and run order. The refactor work updates the old " "special case script to a tool that simply runs the integrated playbooks as " "they've been designed." msgstr "" #: ../../:1440 msgid "" "The ``sahara-api`` service has moved to run as a uWSGI application. You can " "set the max number of WSGI processes, the number of processes, threads, and " "buffer size utilizing the ``sahara_wsgi_processes_max``, " "``sahara_wsgi_processes``, ``sahara_wsgi_threads``, and " "``sahara_wsgi_buffer_size``. Additionally, you can override any settings in " "the uWSGI ini configuration file using the " "``sahara_api_uwsgi_ini_overrides`` setting. The uWSGI application will " "listen on the address specified by ``sahara_uwsgi_bind_address`` which " "defaults to ``0.0.0.0``." msgstr "" #: ../../:562 stable/queens>:737 msgid "" "The ``security_sshd_permit_root_login`` setting can now be set to change the " "``PermitRootLogin`` setting in ``/etc/ssh/sshd_config`` to any of the " "possible options. Set ``security_sshd_permit_root_login`` to one of " "``without-password``, ``prohibit-password``, ``forced-commands-only``, " "``yes`` or ``no``." msgstr "" #: ../../:681 msgid "" "The ``signing_dir`` configuration option has changed from ``/var/cache/" "heat`` to ``/var/lib/heat/cache/heat``. This only applies to heat " "deployments that use PKI tokens." msgstr "" #: ../../:3130 msgid "" "The ``swift_fallocate_reserve`` default value has changed from 10737418240 " "(10GB) to 1% in order to match the OpenStack swift default setting." msgstr "" #: ../../:1841 msgid "" "The ``swift_keystone_auth_plugin`` variable has been deprecated. " "``swift_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:717 origin/stable/newton>:3142 msgid "" "The ``swift_max_rsync_connections`` default value has changed from 2 to 4 in " "order to match the OpenStack swift documented value." msgstr "" #: ../../:1774 msgid "" "The ``swift_rsync_reverse_lookup`` option has been added. This setting will " "handle whether rsync performs reverse lookups on client IP addresses, and " "will default to ``False``. We recommend leaving this option at ``False``, " "unless DNS or host entries exist for each swift host's replication address." msgstr "" #: ../../:808 msgid "" "The ``sysctl`` parameter ``kernel.randomize_va_space`` is now set to ``2`` " "by default. This matches the default of most modern Linux distributions and " "it ensures that Address Space Layout Randomization (ASLR) is enabled." msgstr "" #: ../../:197 origin/stable/ocata>:380 #: stable/pike>:801 msgid "" "The ``sysstat`` package was installed on all distributions, but it was only " "configured to run on Ubuntu and OpenSUSE. It would not run on CentOS due to " "bad SELinux contexts and file permissions on ``/etc/cron.d/sysstat``. This " "has been fixed and ``sysstat`` now runs properly on CentOS." msgstr "" #: ../../:669 stable/queens>:778 msgid "" "The ``tempest_images`` data structure for the ``os_tempest`` role now " "expects the values for each image to include ``name`` (optionally) and " "``format`` (the disk format). Also, the optional variable ``checksum`` may " "be used to set the checksum expected for the file in the format " "``:``." msgstr "" #: ../../:1845 msgid "" "The ``trove_keystone_auth_plugin`` variable has been deprecated. " "``trove_keystone_auth_type`` should be used instead to configure " "authentication type." msgstr "" #: ../../:869 origin/stable/ocata>:1309 #: stable/pike>:1894 msgid "" "The ``update`` state for the ``ensure_endpoint`` method of the ``keystone`` " "module is now deprecated, and will be removed in the Queens cycle. Setting " "state to ``present`` will achieve the same result." msgstr "" #: ../../:3190 msgid "" "The ``utility-all.yml`` playbook will no longer distribute the deployment " "host's root user's private ssh key to all utility containers. Deployers who " "desire this behavior should set the ``utility_ssh_private_key`` variable." msgstr "" #: ../../:1600 msgid "" "The `dynamic_inventory.py` file now takes a new argument, ``--check``, which " "will run the inventory build without writing any files to the file system. " "This is useful for checking to make sure your configuration does not contain " "known errors prior to running Ansible commands." msgstr "" #: ../../:1153 msgid "" "The `get_nested` filter has been added, allowing for simplified value " "lookups inside of nested dictionaries. " "`ansible_local|get_nested('openstack_ansible.swift')`, for example, will " "look 2 levels down and return the result." msgstr "" #: ../../:91 origin/stable/ocata>:231 #: stable/pike>:379 stable/queens>:1141 stable/rocky>:1539 msgid "" "The `max_fail_percentage` playbook option has been used with the default " "playbooks since the first release of the playbooks back in **Icehouse**. " "While the intention was to allow large-scale deployments to succeed in cases " "where a single node fails due to transient issues, this option has produced " "more problems that it solves. If a failure occurs that is transient in " "nature but is under the set failure percentage the playbook will report a " "success, which can cause silent failures depending on where the failure " "happened. If a deployer finds themselves in this situation the problems are " "are then compounded because the tools will report there are no known issues. " "To ensure deployers have the best deployment experience and the most " "accurate information a change has been made to remove the " "`max_fail_percentage` option from all of the default playbooks. The removal " "of this option has the side effect of requiring the deploy to skip specific " "hosts should one need to be omitted from a run, but has the benefit of " "eliminating silent, hard to track down, failures. To skip a failing host for " "a given playbook run use the `--limit '!$HOSTNAME'` CLI switch for the " "specific run. Once the issues have been resolved for the failing host rerun " "the specific playbook without the `--limit` option to ensure everything is " "in sync." msgstr "" #: ../../:1001 msgid "" "The `openstack-ansible-security role `_ is now integrated with OpenStack-Ansible. " "Refer to the `Security Hardening `_ section of the OpenStack-Ansible documentation for details on " "how to deploy host security hardening along with OpenStack-Ansible." msgstr "" #: ../../:627 msgid "" "The `pxe_append_params` configuration option has been deprecated by Ironic " "and replaced with `kernel_append_params`. The corresponding configuration " "override, `ironic_pxe_append_params`, has been replaced by " "`ironic_kernel_append_params` but will continue to be supported until a " "future undetermined release." msgstr "" #: ../../:402 msgid "" "The ability to define trusted Cross-Site Request Forgery domains hsa been " "added with the `horizon_ssl_csrf_trusted_origins` variable. The new variable " "is a array of strings and when defined will render the django built-in " "variable **CSRF_TRUSTED_ORIGINS**." msgstr "" #: ../../:758 stable/pike>:1452 msgid "" "The ability to disable the certificate validation when checking and " "interacting with the internal cinder endpoint has been implemented. In order " "to do so, set the following in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:220 origin/stable/ocata>:562 #: stable/pike>:1126 msgid "" "The ability to set the RabbitMQ repo URL for both erlang and RabbitMQ itself " "has been added. This has been done to allow deployers to define the location " "of a given repo without having to fully redefine the entire set of " "definitions for a specific repository. The default variables " "`rabbitmq_gpg_keys`, `rabbitmq_repo_url`, and `rabbitmq_erlang_repo_url` " "have been created to facilitate this capability." msgstr "" #: ../../:328 origin/stable/mitaka>:792 #: origin/stable/newton>:1604 msgid "" "The ability to support MultiStrOps has been added to the config_template " "action plugin. This change updates the parser to use the ``set()`` type to " "determine if values within a given key are to be rendered as ``MultiStrOps``." " If an override is used in an INI config file the set type is defined using " "the standard yaml construct of \"?\" as the item marker." msgstr "" #: ../../:266 origin/stable/newton>:1881 msgid "" "The ability to support login user domain and login project domain has been " "added to the keystone module." msgstr "" #: ../../:341 origin/stable/newton>:3422 msgid "" "The ability to support login user domain and login project domain has been " "added to the keystone module. This resolves https://bugs.launchpad.net/" "openstack-ansible/+bug/1574000" msgstr "" #: ../../:713 origin/stable/mitaka>:1187 msgid "" "The addition of multi-domain LDAP configuration support left behind a " "configuration file for the default domain that causes problems with Keystone." " This file will automatically be removed if the deployer is not using the " "Default domain with an LDAP back end. (`Bug 1547542 `_)" msgstr "" #: ../../:476 msgid "" "The addition of the ``container_tech`` option and the inclusion of " "**nspawn** support deployers now have the availability to define a desired " "containerization strategy globally or on specific hosts." msgstr "" #: ../../:3304 msgid "" "The admin_token_auth middleware presents a potential security risk and will " "be removed in a future release of keystone. Its use can be removed by " "setting the ``keystone_keystone_paste_ini_overrides`` variable." msgstr "" #: ../../:189 stable/ussuri>:210 msgid "" "The ansible version used by OSA is updated from the 2.7 to the 2.8 series. " "This requires an upgrade of ceph-ansible to 4.0 and this in turn requires an " "upgrade of ceph from Mimic to Nautilus. This version dependancy applies " "where OSA uses ceph-ansible directly to deploy the ceph infrastructure, but " "not when OSA is integrated with an externally provisioned ceph cluster." msgstr "" #: ../../:2343 msgid "" "The ansible-hardening role supports the application of the Red Hat " "Enterprise Linux 6 STIG configurations to systems running CentOS 7 and " "Ubuntu 16.04 LTS." msgstr "" #: ../../:3078 msgid "" "The aodh-api init service is removed since aodh-api is deployed as an apache " "mod_wsgi service." msgstr "" #: ../../:180 current msgid "" "The apt repository setup for the rabbitmq_server role is migrated to use the " "deb822_repository ansible module rather than the legacy apt_key and " "apt_repository modules. The format of the `rabbitmq_repo` and " "`rabbitmq_erlang_repo` ole default variables are changed to match the " "requirements of the new module, and are now lists allowing multiple " "repositories to be configured if required." msgstr "" #: ../../:1244 origin/stable/ocata>:2122 msgid "" "The apt-cacher-ng daemon does not use the proxy server specified in " "environment variables. The proxy server specified in the ``proxy_env_url`` " "variable is now set inside the apt-cacher-ng configuration file." msgstr "" #: ../../:236 origin/stable/mitaka>:577 #: origin/stable/newton>:1844 msgid "" "The audit rules added by the security role now have key fields that make it " "easier to link the audit log entry to the audit rule that caused it to " "appear." msgstr "" #: ../../:118 origin/stable/mitaka>:247 #: origin/stable/newton>:3459 msgid "" "The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly " "labeled in the auditd logs with the key of ``export-V-38568``. They are now " "correctly logged with the key ``filesystem_mount-V-38568``." msgstr "" #: ../../:1532 msgid "" "The auditd rules template included a rule that audited changes to the " "AppArmor policies, but the SELinux policy changes were not being audited. " "Any changes to SELinux policies in ``/etc/selinux`` are now being logged by " "auditd." msgstr "" #: ../../:332 msgid "" "The bind mount for logs on the galera container was found to be broken in " "`bug 1609862 ` and it has been fixed." msgstr "" #: ../../:281 msgid "" "The blazar dashboard is available in Horizon. Deployers can enable the panel " "by setting the following Ansible variable:" msgstr "" #: ../../:14 msgid "" "The bootstrap-ansible script may fail with an incompatible requirement when " "installing OpenStack-Ansible 13.3.12 and before. See https://bugs.launchpad." "net/openstack-ansible/+bug/1658948 for more details." msgstr "" #: ../../:1117 msgid "" "The bootstrap-ansible script may fail with an incompatible requirement when " "installing OpenStack-Ansible 14.0.6 and before. See https://bugs.launchpad." "net/openstack-ansible/+bug/1658948 for more details." msgstr "" #: ../../:1925 msgid "" "The ceilometer API service is now deprecated. OpenStack-Ansible no longer " "deploys this service. To make queries against metrics, alarms, and/or " "events, please use the the gnocchi, aodh, and panko APIs, respectively." msgstr "" #: ../../:762 msgid "" "The ceilometer alarming functionality has been moved into aodh. The " "``ceilometer_alarm_notifier`` and ``ceilometer_alarm_evaluator`` entries are " "removed from the ``/etc/openstack_deploy/env.d/ceilometer.yml`` file." msgstr "" #: ../../:1497 msgid "" "The ceilometer configuration files other than ``ceilometer.conf`` are now " "retrieved from upstream. You can override the repository from which these " "are retrieved by setting the ``ceilometer_git_config_lookup_location`` " "variable which defaults to the git.openstack.org." msgstr "" #: ../../:1783 msgid "" "The ceilometer-api service/container can be removed as part of O->P upgrades." " A ceilometer-central container will be created to contain the central " "ceilometer agents." msgstr "" #: ../../:781 stable/queens>:869 msgid "" "The ceph-ansible common roles are no longer namespaced with a galaxy-style '." "' (ie. ``ceph.ceph-common`` is now cloned as ``ceph-common``), due to a " "change in the way upstream meta dependencies are handled in the ceph roles. " "The roles will be cloned according to the new naming, and an upgrade " "playbook ``ceph-galaxy-removal.yml`` has been added to clean up the stale " "galaxy-named roles." msgstr "" #: ../../:777 stable/pike>:791 stable/queens>:865 #: stable/queens>:1046 msgid "" "The ceph-ansible integration has been updated to support the ceph-ansible v3." "0 series tags. The new v3.0 series brings a significant refactoring of the " "ceph-ansible roles and vars, so it is strongly recommended to consult the " "upstream `ceph-ansible documentation `_ to perform any required vars migrations before you upgrade." msgstr "" #: ../../:2891 msgid "" "The ceph_client role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``ceph_client_package_state`` should be " "set to ``present``." msgstr "" #: ../../:2145 msgid "" "The ceph_client role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``ceph_client_package_state`` to ``present``." msgstr "" #: ../../:540 stable/train>:234 stable/ussuri>:316 msgid "" "The ceph_client role will now look for and configure manila services to work " "with ceph and cephfs." msgstr "" #: ../../:758 origin/stable/newton>:3475 msgid "" "The check to validate whether an appropriate ssh public key is available to " "copy into the container cache has been corrected to check the deployment " "host, not the LXC host." msgstr "" #: ../../:322 msgid "" "The cloudkitty dashboard is available in Horizon. Deployers can enable the " "panel by setting the following Ansible variable:" msgstr "" #: ../../:1171 stable/train>:504 #: stable/ussuri>:677 msgid "" "The compression option in the ``galera_server`` role has been removed due to " "the fact that it is not recommended by MariaDB anymore. This means that all " "the dependencies from Percona such as QPress are no longer necessary." msgstr "" #: ../../:90 stable/queens>:308 stable/rocky>:1520 #: stable/stein>:1627 msgid "" "The conditional that determines whether the ``sso_callback_template.html`` " "file is deployed for federated deployments has been fixed." msgstr "" #: ../../:1915 msgid "" "The config_template action plugin now has a new option to toggle list " "extension for JSON or YAML formats. The new option is ``list_extend`` and is " "a boolean. The default is True which maintains the existing API." msgstr "" #: ../../:465 stable/pike>:1089 msgid "" "The config_template template module now supports writing out valueless INI " "options without suffixing them with '=' or ':'. This is done via the " "'ignore_none_type' attribute. If ignore_none_type is set to true, these key/" "value entries will be ignored, if it's set to false, then " "ConfigTemplateParser will write out only the option name without the '=' or " "':' suffix. The default is true." msgstr "" #: ../../:535 msgid "" "The configuration for serving port 80/443 in haproxy was previously " "associated with the Horizon service, but additional features such as " "handling certificate issuance with certbot and serving security.txt also " "need configuration in the same haproxy frontend. The existing variable " "``haproxy_horizon_service`` now only describes the haproxy backend for " "horizon, and a new variable ``haproxy_base_service`` configures the haproxy " "frontend for any services using port 80/443." msgstr "" #: ../../:280 current msgid "" "The configuration of apt repositories for the rabbitmq_server role through " "the `rabbitmq_repo` variable is changed to match the deb822_repository " "ansible module. Any deployments that customise the repository configuration " "should adjust their `rabbitmq_repo` and `rabbitmq_erlang_repo` overrides to " "suit." msgstr "" #: ../../:219 current msgid "" "The configuration of repositories for the ceph_client role through the " "`ceph_yum_repo_url` and `ceph_repo_url` variable is changed. These variables " "were replaced by unified `ceph_repo_url` variable. With that " "`ceph_apt_repos` has bee replaced by `ceph_repos` variable which should " "follow deb822_repository format for Debian/Ubuntu and `yum_repository` for " "CentOS Stream/Rocky Linux." msgstr "" #: ../../:1539 msgid "" "The container cache preparation process now allows ``copy-on-write`` to be " "set as the ``lxc_container_backing_method`` when the " "``lxc_container_backing_store`` is set to ``lvm``. When this is set a base " "container will be created using a name of the form ``-" "`distribution-release>`-``. The container will be " "stopped as it is not used for anything except to be a backing store for all " "other containers which will be based on a snapshot of the base container." msgstr "" #: ../../:1547 msgid "" "The container cache preparation process now allows ``overlayfs`` to be set " "as the ``lxc_container_backing_store``. When this is set a base container " "will be created using a name of the form ``-" "`distribution-release>`-``. The container will be " "stopped as it is not used for anything except to be a backing store for all " "other containers which will be based on a snapshot of the base container. " "The ``overlayfs`` backing store is not recommended to be used for production " "unless the host kernel version is 3.18 or higher." msgstr "" #: ../../:1661 msgid "" "The container creation process now allows ``copy-on-write`` to be set as the " "``lxc_container_backing_method`` when the ``lxc_container_backing_store`` is " "set to ``lvm``. When this is set it will use a snapshot of the base " "container to build the containers." msgstr "" #: ../../:1665 msgid "" "The container creation process now allows ``overlayfs`` to be set as the " "``lxc_container_backing_store``. When this is set it will use a snapshot of " "the base container to build the containers. The ``overlayfs`` backing store " "is not recommended to be used for production unless the host kernel version " "is 3.18 or higher." msgstr "" #: ../../:339 msgid "" "The container image cache within machinectl has been set to \"64G\" by " "default." msgstr "" #: ../../:3040 msgid "" "The container property ``container_release`` has been removed as this is " "automatically set to the same version as the host in the container creation " "process." msgstr "" #: ../../:1190 origin/stable/ocata>:1676 msgid "" "The copy of the ``/etc/openstack-release`` file is now optional. To disable " "the copy of the file, set ``openstack_distrib_file`` to ``no``." msgstr "" #: ../../:708 msgid "" "The custom PowerVM code has been removed as it is not tested. The code in " "question can be replaced with the following setting;" msgstr "" #: ../../:57 stable/stein>:1098 msgid "" "The data structure for ``ceph_gpg_keys`` has been changed to be a list of " "dicts, each of which is passed directly to the applicable apt_key/rpm_key " "module. As such any overrides would need to be reviewed to ensure that they " "do not pass any key/value pairs which would cause the module to fail." msgstr "" #: ../../:295 stable/stein>:936 msgid "" "The data structure for ``galera_client_gpg_keys`` has been changed to be a " "dict passed directly to the applicable apt_key/rpm_key module. As such any " "overrides would need to be reviewed to ensure that they do not pass any key/" "value pairs which would cause the module to fail." msgstr "" #: ../../:207 stable/stein>:950 msgid "" "The data structure for ``galera_gpg_keys`` has been changed to be a dict " "passed directly to the applicable apt_key/rpm_key module. As such any " "overrides would need to be reviewed to ensure that they do not pass any key/" "value pairs which would cause the module to fail." msgstr "" #: ../../:221 stable/stein>:1009 msgid "" "The data structure for ``rabbitmq_gpg_keys`` has been changed to be a dict " "passed directly to the applicable apt_key/rpm_key module. As such any " "overrides would need to be reviewed to ensure that they do not pass any key/" "value pairs which would cause the module to fail." msgstr "" #: ../../:3098 msgid "" "The database and user creates have been removed from the ``os_horizon`` role." " These tasks have been relocated to the playbooks." msgstr "" #: ../../:3102 msgid "" "The database create and user creates have been removed from the " "``os_cinder`` role. These tasks have been relocated to the playbooks." msgstr "" #: ../../:3094 msgid "" "The database create and user creates have been removed from the " "``os_glance`` role. These tasks have been relocated to the playbooks." msgstr "" #: ../../:3086 msgid "" "The database create and user creates have been removed from the ``os_heat`` " "role. These tasks have been relocated to the playbooks." msgstr "" #: ../../:3106 msgid "" "The database create and user creates have been removed from the " "``os_neutron`` role. These tasks have been relocated to the playbooks." msgstr "" #: ../../:3090 msgid "" "The database create and user creates have been removed from the ``os_nova`` " "role. These tasks have been relocated to the playbooks." msgstr "" #: ../../:294 msgid "" "The default Ceph release deployed in the openstack-ansible all-in-one is " "switched from the Quicny to Reef. It remains that this integration is " "primarily a test fixture and that the recommendation for production " "deployments is to deploy an independant ceph cluster." msgstr "" #: ../../:1031 stable/train>:414 #: stable/ussuri>:572 msgid "" "The default Mnesia ``dump_log_write_threshold`` value has changed to ``300`` " "instead of ``100`` for efficiency. ``dump_log_write_threshold`` specifies " "the maximum number of writes allowed to the transaction log before a new " "dump of the log is performed. Increasing this value can increase the " "performances during the queues/exchanges/bindings creation/destroying. The " "values should be between 100 and 1000. More detail [1]." msgstr "" #: ../../:1539 msgid "" "The default TLS verion has been set to TLS1.2. This only allows version 1.2 " "of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the keystone_ssl_protocol variable." msgstr "" #: ../../:1525 msgid "" "The default TLS version has been set to TLS1.2. This only allows version 1." "2 of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the barbican_ssl_protocol variable." msgstr "" #: ../../:1546 msgid "" "The default TLS version has been set to TLS1.2. This only allows version 1." "2 of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the gnocchi_ssl_protocol variable." msgstr "" #: ../../:1532 msgid "" "The default TLS version has been set to TLS1.2. This only allows version 1." "2 of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the horizon_ssl_protocol variable." msgstr "" #: ../../:1519 msgid "" "The default TLS version has been set to TLS1.2. This only allows version 1." "2 of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the ssl_protocol variable." msgstr "" #: ../../:1560 msgid "" "The default TLS version has been set to TLS1.2. This only allows version 1." "2 of the protocol to be used when terminating or creating TLS connections. " "You can change the value with the trove_ssl_protocol variable." msgstr "" #: ../../:1553 msgid "" "The default TLS version has been set to force-tlsv12. This only allows " "version 1.2 of the protocol to be used when terminating or creating TLS " "connections. You can change the value with the haproxy_ssl_bind_options " "variable." msgstr "" #: ../../:935 origin/stable/mitaka>:1033 msgid "" "The default apt sources configuration is now set to only include the " "``main`` and ``universe`` components as those are the only required " "components for a functional deployment. If deployers wish to include other " "components then the variable ``lxc_container_template_apt_components`` may " "be set in ``/etc/openstack_deploy/user_variables.yml`` with the full list of " "desired components." msgstr "" #: ../../:645 msgid "" "The default apt sources configuration uses all components. If deployers wish " "to change this to reduce the components configured then the variable " "``lxc_container_template_apt_components`` may be set in ``/etc/" "openstack_deploy/user_variables.yml`` with the full list of desired " "components." msgstr "" #: ../../:833 origin/stable/ocata>:1245 #: stable/pike>:1271 msgid "" "The default behaviour of ``ensure_endpoint`` in the keystone module has " "changed to update an existing endpoint, if one exists that matches the " "service name, type, region and interface. This ensures that no duplicate " "service entries can exist per region." msgstr "" #: ../../:2015 msgid "" "The default behaviour of rsync, to perform reverse lookups, has been changed " "to ``False``. This can be set to ``True`` by setting the " "``swift_rsync_reverse_lookup`` variable to ``True``." msgstr "" #: ../../:428 msgid "" "The default bind address for all openstack services and infrastructure " "services such as galera, rabbitmq and memcached has changed from 0.0.0.0 to " "the IP address of the openstack mangement network on the relevent host or " "container. Deployers should ensure that any additional systems that expect " "to communicate with internal components of their openstack-ansible " "deployment do so over the managment network. Services which are bound to the " "management network IP will not be accessible via other interfaces." msgstr "" #: ../../:452 msgid "" "The default container apt sources have been changed from using ``http://" "mirror.rackspace.com/ubuntu`` to ``http://archive.ubuntu.com/ubuntu/`` for " "packages and ``http://security.ubuntu.com/ubuntu`` for security packages. " "This is to resolve issues with unavailable packages during the install " "process due to incomplete mirror updates." msgstr "" #: ../../:143 msgid "" "The default container apt sources have been changed from using ``https://" "mirror.rackspace.com/ubuntu`` to ``http://archive.ubuntu.com/ubuntu`` for " "packages and ``http://security.ubuntu.com/ubuntu`` for security packages. " "This is to resolve issues with unavailable packages during the install " "process due to incomplete mirror updates." msgstr "" #: ../../:2475 msgid "" "The default database collation has changed from `utf8_unicode_ci` to " "`utf8_general_ci`. Existing databases and tables will need to be converted." msgstr "" #: ../../:2676 msgid "" "The default horizon instance launch panels have been changed to the next " "generation panels. To enable legacy functionality set the following options " "accordingly:" msgstr "" #: ../../:677 stable/queens>:786 msgid "" "The default location for the image downloads in the ``os_tempest`` role set " "by the ``tempest_image_dir`` variable has now been changed to be ``/opt/" "cache/files`` in order to match the default location in nodepool. This " "improves the reliability of CI testing in OpenStack CI as it will find the " "file already cached there." msgstr "" #: ../../:244 msgid "" "The default location of the default tempest configuration is now ``/etc/" "tempest/tempest.conf`` rather than the previous default of ``$HOME/.tempest/" "etc``." msgstr "" #: ../../:14 msgid "" "The default method for download roles has been switched from ``galaxy`` to " "``git-clone``. This has no functional effect, but is now required in order " "to successfully download the ``ceph-ansible`` repository. In order to " "prevent clashes between the old and new roles, the existing ``/etc/ansible/" "roles/ceph*`` folders should be removed prior to running ``scripts/bootstrap-" "ansible.sh`` during the minor upgrade process." msgstr "" #: ../../:401 stable/ussuri>:551 msgid "" "The default nova console type has been changed to novnc. Spice is still " "supported however due to novnc being more actively maintained it is now a " "better default option." msgstr "" #: ../../:1023 msgid "" "The default queue policy has changed to ``^(?!(amq\\.)|(." "*_fanout_)|(reply_)).*`` instead of ``^(?!amq\\.).*`` for efficiency. The " "new HA policy excludes reply queues (these queues have a single consumer and " "TTL policy), fanout queues (they have the TTL policy) and amq queues (they " "are auto-delete queues, with a single consumer)." msgstr "" #: ../../:224 origin/stable/ocata>:414 #: stable/pike>:1507 msgid "" "The default ulimit for RabbitMQ is now 65536. Deployers can still adjust " "this limit using the ``rabbitmq_ulimit`` Ansible variable." msgstr "" #: ../../:2471 msgid "" "The default value of ``service_credentials/os_endpoint_type`` within " "ceilometer's configuration file has been changed to **internalURL**. This " "may be overridden through the use of the " "``ceilometer_ceilometer_conf_overrides`` variable." msgstr "" #: ../../:64 stable/stein>:1105 msgid "" "The default values for ``ceph_gpg_keys`` have been changed for all supported " "platforms and now use vendored keys. This means that the task execution will " "no longer reach out to the internet to add the keys, making offline or proxy-" "based installations easier and more reliable." msgstr "" #: ../../:302 stable/stein>:943 msgid "" "The default values for ``galera_client_gpg_keys`` have been changed for all " "supported platforms will use vendored keys. This means that the task " "execution will no longer reach out to the internet to add the keys, making " "offline or proxy-based installations easier and more reliable." msgstr "" #: ../../:214 stable/stein>:957 msgid "" "The default values for ``galera_gpg_keys`` have been changed for all " "supported platforms will use vendored keys. This means that the task " "execution will no longer reach out to the internet to add the keys, making " "offline or proxy-based installations easier and more reliable." msgstr "" #: ../../:228 stable/stein>:1016 msgid "" "The default values for ``rabbitmq_gpg_keys`` have been changed for all " "supported platforms will use vendored keys. This means that the task " "execution will no longer reach out to the internet to add the keys, making " "offline or proxy-based installations easier and more reliable." msgstr "" #: ../../:278 stable/queens>:561 msgid "" "The default variable `nova_default_schedule_zone` was previously set by " "default to ``nova``. This default has been removed to allow the default to " "be set by the nova code instead. Deployers wishing to maintain the default " "availability zone of nova must now set the variable as a user_variables.yml " "or group_vars override." msgstr "" #: ../../:841 origin/stable/ocata>:1253 #: stable/pike>:1520 msgid "" "The deployer can now define an environment variable ``GROUP_VARS_PATH`` with " "the folders of its choice (separated by the colon sign) to define an user " "space group_vars folder. These vars will apply but be (currently) overriden " "by the OpenStack-Ansible default group vars, by the set facts, and by the " "user_* variables. If the deployer defines multiple paths, the variables " "found are merged, and precedence is increasing from left to right (the last " "defined in GROUP_VARS_PATH wins)" msgstr "" #: ../../:845 origin/stable/ocata>:1257 #: stable/pike>:1524 msgid "" "The deployer can now define an environment variable ``HOST_VARS_PATH`` with " "the folders of its choice (separated by the colon sign) to define an user " "space host_vars folder. These vars will apply but be (currently) overriden " "by the OpenStack-Ansible default host vars, by the set facts, and by the " "user_* variables. If the deployer defines multiple paths, the variables " "found are merged, and precedence is increasing from left to right (the last " "defined in HOST_VARS_PATH wins)" msgstr "" #: ../../:1097 msgid "" "The deployment configuration file ``openstack_environment.yml`` has been " "removed and is no longer used in the dynamic inventory generation process. " "This file was previously rendered functionally irrelevant to the inventory " "generation process in the Liberty release." msgstr "" #: ../../:526 stable/ussuri>:715 msgid "" "The deprecated Neutron LBaaS v2 plugin has been removed from the Neutron " "role." msgstr "" #: ../../:531 stable/ussuri>:720 msgid "" "The deprecated Neutron LBaaS v2 plugin support has been removed from " "openstack-ansible." msgstr "" #: ../../:277 origin/stable/mitaka>:727 #: origin/stable/newton>:3369 msgid "" "The dictionary-based variables in ``defaults/main.yml`` are now individual " "variables. The dictionary-based variables could not be changed as the " "documentation instructed. Instead it was required to override the entire " "dictionary. Deployers must use the new variable names to enable or disable " "the security configuration changes applied by the security role. For more " "information, see `Launchpad Bug 1577944 `_." msgstr "" #: ../../:1165 msgid "" "The distribution of the ``.my.cnf`` database access configuration file which " "contains sensitive root credentials has now been limited to only be " "distributed to containers and hosts which require it for troubleshooting " "purposes." msgstr "" #: ../../:1055 msgid "" "The distribution of the ``.my.cnf`` database access configuration file which " "contains sensitive root credentials has now been limited to only be " "distributed to containers and hosts which require it for troubleshooting " "purposes. It is recommended that this file be removed from all hosts and " "containers. The only containers that should have the file are the Utility " "container and the Galera containers. This may be done by executing ``ansible " "'all:!galera:!utility' -m shell -a 'rm -f /root/.my.cnf'`` from the ``/opt/" "openstack-ansible/`` directory." msgstr "" #: ../../:129 stable/pike>:196 #: stable/queens>:422 stable/rocky>:999 msgid "" "The distribution package lookup and data output has been removed from the " "py_pkgs lookup so that the repo-build use of py_pkgs has reduced output and " "the lookup is purpose specific for python packages only." msgstr "" #: ../../:1743 msgid "" "The documentation for STIG V-51337 has more information about how each LSM " "is enabled along with special notes for SELinux." msgstr "" #: ../../:2636 msgid "" "The dynamic_inventory script previously set the provider network attributes " "``is_container_address`` and ``is_ssh_address`` to True for the management " "network regardless of whether a deployer had them configured this way or not." " Now, these attributes must be configured by deployers and the " "dynamic_inventory script will fail if they are missing or not True." msgstr "" #: ../../:779 stable/pike>:1670 msgid "" "The endpoint which designate uses to communicate with neutron has been set " "to the internalURL by default. This change has been done within the template " "``designate.conf.j2`` and can be changed using the " "``designate_designate_conf_overrides`` variable." msgstr "" #: ../../:417 origin/stable/ocata>:635 #: stable/pike>:1690 msgid "" "The entire repo build process is now idempotent. From now on when the repo " "build is re-run, it will only fetch updated git repositories and rebuild the " "wheels/venvs if the requirements have changed, or a new release is being " "deployed." msgstr "" #: ../../:1852 msgid "" "The env.d directory included with OpenStack-Ansible is now used as the first " "source for the environment skeleton, and ``/etc/openstack_deploy/env.d`` " "will be used only to override values. Deployers without customizations will " "no longer need to copy the env.d directory to /etc/openstack_deploy. As a " "result, the env.d copy operation has been removed from the node bootstrap " "role." msgstr "" #: ../../:2447 msgid "" "The environment variable ``FORKS`` is no longer used. The standard Ansible " "environment variable ``ANSIBLE_FORKS`` should be used instead." msgstr "" #: ../../:287 stable/ussuri>:403 msgid "The environment variables added are:" msgstr "" #: ../../:751 msgid "" "The extra packages percona packages used by the ppc64le are now downloaded " "by the Ansible deployment host by default, as opposed to the target hosts. " "Once downloaded the packages are pushed up to the target hosts. This " "behaviour may be adjusted by setting " "``galera_server_extra_package_downloader`` to ``target-host``. The packages " "are downloaded to the path set in ``galera_server_extra_package_path``." msgstr "" #: ../../:1069 origin/stable/ocata>:1437 msgid "" "The filename of the apt source can now be defined with the variable " "``filename`` inside the dicts ``galera_repo`` and " "``galera_percona_xtrabackup_repo``." msgstr "" #: ../../:1073 msgid "" "The filename of the apt source for the haproxy ppa can now be defined with " "the ``filename`` section of the dict ``haproxy_repo``." msgstr "" #: ../../:1053 origin/stable/newton>:1061 #: origin/stable/newton>:1077 origin/stable/ocata>:1421 #: origin/stable/ocata>:1429 origin/stable/ocata>:1441 msgid "" "The filename of the apt source for the ubuntu cloud archive can now be " "defined with the variable ``uca_apt_source_list_filename``." msgstr "" #: ../../:1057 origin/stable/ocata>:1425 msgid "" "The filename of the apt source for the ubuntu cloud archive used in ceph " "client can now be defined by giving a filename in the uca part of the dict " "``ceph_apt_repos``." msgstr "" #: ../../:1065 origin/stable/ocata>:1433 msgid "" "The filename of the apt/yum source can now be defined with the variable " "``mariadb_repo_filename``." msgstr "" #: ../../:869 msgid "" "The first release of the Red Hat Enterprise Linux 7 STIG was entirely " "renumbered from the pre-release versions. Many of the STIG configurations " "simply changed numbers, but some were removed or changed. A few new " "configurations were added as well." msgstr "" #: ../../:893 origin/stable/mitaka>:1059 msgid "" "The first tier of the ``keystone_ldap`` dictionary variable now relates to " "the Keystone Domain name. An existing ``keystone_ldap`` configuration entry " "can be converted by renaming the ``ldap`` key to the domain name 'Default'. " "**Note** that the domain name entry is case-sensitive." msgstr "" #: ../../:301 msgid "" "The fix for the broken bind mounts in the galera container (see `bug 1609862 " "` for details) will be applied to the " "LXC container configuration file, but a restart of each galera container is " "required to put the change into effect." msgstr "" #: ../../:1237 msgid "" "The fix to remove deleted global override keys mistakenly deleted the " "``container_cidr`` key. This was used by downstream consumers, and cannot be " "reconstructed with other information inside the inventory file. Regression " "tests were also added." msgstr "" #: ../../:443 stable/ussuri>:605 msgid "" "The following Nova tunables have been removed, users need to start using the " "`nova_nova_conf_overrides` dictionary to override them. If those values were " "not previously overridden, there should be no need to override them. - " "nova_quota_cores - nova_quota_injected_file_content_bytes - " "nova_quota_injected_file_path_length - nova_quota_injected_files - " "nova_quota_instances - nova_quota_key_pairs - nova_quota_metadata_items - " "nova_quota_ram - nova_quota_server_group_members - nova_quota_server_groups -" " nova_max_instances_per_host - nova_scheduler_available_filters - " "nova_scheduler_weight_classes - nova_scheduler_driver - " "nova_scheduler_driver_task_period - nova_rpc_conn_pool_size - " "nova_rpc_thread_pool_size - nova_rpc_response_timeout - " "nova_force_config_drive - nova_enable_instance_password - " "nova_default_schedule_zone - nova_fatal_deprecations - " "nova_resume_guests_state_on_host_boot - nova_cross_az_attach - " "nova_remove_unused_resized_minimum_age_seconds - nova_cpu_model - " "nova_cpu_model_extra_flags" msgstr "" #: ../../:448 stable/ussuri>:610 msgid "" "The following Nova variables have been removed because they have no effect " "in the current release of Nova. - nova_max_age - nova_osapi_compute_workers -" " nova_metadata_workers" msgstr "" #: ../../:723 stable/queens>:1064 msgid "" "The following headers were added as additional default (and static) values. " "`X-Content-Type-Options nosniff`, `X-XSS-Protection \"1; mode=block\"`, and " "`Content-Security-Policy \"default-src 'self' https: wss:;\"`. " "Additionally, the `X-Frame-Options DENY` header was added, defaulting to " "DENY. You may override the header via the `keystone_x_frame_options` " "variable." msgstr "" #: ../../:616 msgid "" "The following keystone role variables were previously deprecated, and are " "now removed. Replacement variables were introduced in the Xena release. " "``keystone_database_pool_timeout`` ``keystone_database_max_pool_size`` " "``keystone_database_idle_timeout``" msgstr "" #: ../../:398 msgid "The following new variables were introduced:" msgstr "" #: ../../:1919 msgid "" "The following secrets are no longer used by OpenStack-Ansible and can be " "removed from user_secrets.yml:" msgstr "" #: ../../:860 unmaintained/xena>:594 msgid "" "The following security headers were added to the haproxy Horizon service: " "`strict-transport-security`, `x-content-type-options`, `referrer-policy` and " "`content-security-policy`. Care should be taken when deploying the `strict-" "transport-security` header, as this header implements Trust on First Use " "security, meaning that after a browser first visits the page the browser " "will enforce the use of HTTPS until the max age time has expired. For the " "time being the `strict-transport-security` `preload` token which indicates " "that you are happy to have your site included in the HSTS preload list that " "is built into browsers has been excluded. The headers can be disabled by " "setting `haproxy_security_headers: []` and the CSP (Content Security Policy) " "for Horizon can be overridden to support things like federated login by " "setting `haproxy_horizon_csp`. There is the option to extend to all haproxy " "services in the future, but as the headers are only used by browsers there " "maybe limited benefit to doing this other than for keystone and console " "services." msgstr "" #: ../../:2588 origin/stable/newton>:2614 msgid "" "The following variable changes have been made in the ``lxc_host`` role:" msgstr "" #: ../../:91 stable/rocky>:241 stable/stein>:1257 msgid "" "The following variable name changes have been implemented in order to better " "reflect their purpose." msgstr "" #: ../../:1033 stable/stein>:1133 msgid "" "The following variables are no longer used and have therefore been removed." msgstr "" #: ../../:685 msgid "The following variables have been deprecated and will have no effect:" msgstr "" #: ../../:1007 msgid "" "The following variables have been removed as they no longer serve any " "purpose." msgstr "" #: ../../:1175 stable/train>:508 #: stable/ussuri>:681 msgid "" "The following variables have been removed because they are no longer used. * " "``galera_percona_xtrabackup_repo`` * ``use_percona_upstream`` * " "``galera_xtrabackup_compression`` * " "``galera_server_percona_distro_packages``" msgstr "" #: ../../:480 stable/pike>:1789 msgid "" "The following variables have been removed from the ``haproxy_server`` role " "as they are no longer necessary or used. - haproxy_repo - haproxy_gpg_keys - " "haproxy_required_distro_packages" msgstr "" #: ../../:1657 msgid "" "The following variables have been removed from the ``os_ceilometer`` role as " "their respective upstream files are no longer present. * " "``ceilometer_event_definitions_yaml_overrides`` * " "``ceilometer_event_pipeline_yaml_overrides``" msgstr "" #: ../../:704 stable/queens>:1027 msgid "" "The following variables have been removed from the ``os_tempest`` role to " "simplify it. They have been replaced through the use of the data structure " "``tempest_images`` which now has equivalent variables per image. - " "cirros_version - tempest_img_url - tempest_image_file - " "tempest_img_disk_format - tempest_img_name - tempest_images.sha256 (replaced " "by checksum)" msgstr "" #: ../../:3194 msgid "" "The following variables have been renamed in order to make the variable " "names neutral for multiple operating systems." msgstr "" #: ../../:1461 msgid "The following variables therefore have been removed." msgstr "" #: ../../:1022 msgid "" "The functionality previously using these variables has been transitioned to " "using a simpler data structure." msgstr "" #: ../../:106 origin/stable/ocata>:319 #: stable/pike>:499 stable/queens>:654 msgid "" "The galera cluster now supports cluster health checks over HTTP using port " "9200. The new cluster check ensures a node is healthy by running a simple " "query against the wsrep sync status using monitoring user. This change will " "provide for a more robust cluster check ensuring we have the most fault " "tolerant galera cluster possible." msgstr "" #: ../../:2887 msgid "" "The galera_client role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``galera_client_package_state`` should " "be set to ``present``." msgstr "" #: ../../:1843 msgid "The galera_client role now installs MariaDB client version 10.1." msgstr "" #: ../../:2141 msgid "" "The galera_client role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``galera_client_package_state`` to ``present``." msgstr "" #: ../../:2979 msgid "" "The galera_server role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``galera_server_package_state`` should " "be set to ``present``." msgstr "" #: ../../:506 msgid "" "The galera_server role now includes the functionality from the galera_client " "role, and as a result a number of the variables from the galera_client " "defaults are now available to override in the galera_server role defaults. " "In addition, a number of default variables have been generalised, removing " "the specific `_client_` or `_server_` parts of the names. Users of this role " "should check that any overrides they are using have the correct variables " "names for the new combined role." msgstr "" #: ../../:284 msgid "" "The galera_server role now includes the functionality from the galera_client " "role, and can optionally install the client and server components. This is " "controlled using two booleans, galera_install_server and " "galera_install_client, both of which default to false." msgstr "" #: ../../:1851 msgid "The galera_server role now installs MariaDB server version 10.1." msgstr "" #: ../../:2233 msgid "" "The galera_server role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``galera_server_package_state`` to ``present``." msgstr "" #: ../../:421 origin/stable/ocata>:639 #: stable/pike>:1694 msgid "" "The git clone part of the repo build process now only happens when the " "requirements change. A git reclone can be forced by using the boolean " "variable ``repo_build_git_reclone``." msgstr "" #: ../../:1105 msgid "" "The git source for python2_lxc was used in the past as the package was not " "available on pypi. Now that the package `has been published `_ the `py_from_git` role dependency has been " "removed from the `lxc_hosts` playbook, the role has been removed from the " "required roles list and the repo details have been removed from the " "repo_packages files as none of these details are required any more." msgstr "" #: ../../:579 msgid "" "The glance registry service for the v2 API is now disabled by default as it " "is not required and is scheduled to be removed in the future. The service " "can be enabled by setting ``glance_enable_v2_registry`` to ``True``. As the " "glance v1 API is still enabled by default, and it requires the registry " "service, the glance-registry service will still remain running and " "operational as before. If the variable ``glance_enable_v1_api`` is set to " "``False`` then both the v1 API and the registry service will be disabled and " "removed." msgstr "" #: ../../:886 msgid "" "The glance registry service is now disabled by default as it is not required " "for the v2 API and is scheduled to be removed in the future. The service can " "be enabled by setting ``glance_enable_v2_registry`` to ``True``." msgstr "" #: ../../:881 msgid "" "The glance v1 API is now disabled by default as the API is scheduled to be " "removed in Queens." msgstr "" #: ../../:1011 stable/stein>:1064 msgid "" "The glance v1 API is now removed upstream and the deployment code is now " "removed from this glance ansible role. The variable ``glance_enable_v1_api`` " "is removed." msgstr "" #: ../../:992 origin/stable/newton>:1002 #: origin/stable/ocata>:1835 msgid "" "The global override ``cinder_nfs_client`` is replaced in favor of fully " "supporting multi backends configuration via the cinder_backends stanza." msgstr "" #: ../../:1906 msgid "" "The gnocchi ceph component has been moved out as a default component " "required by the ceph_client role. It can now be optionally specified through " "the use of the ``ceph_extra_components`` variable." msgstr "" #: ../../:1915 msgid "" "The gnocchi_archive_policies and gnocchi_archive_policy_rules variables " "never had full support in the role so were ineffective at the intended " "purpose. The task references to them have been removed and the library to " "perform gnocchi operations has also been removed. This eliminates the need " "for the gnocchi client to be installed outside the virtual environment as " "well." msgstr "" #: ../../:2110 msgid "" "The haproxy daemon is now able to bind to any port on CentOS 7. The " "``haproxy_connect_any`` SELinux boolean is now set to ``on``." msgstr "" #: ../../:528 origin/stable/mitaka>:961 msgid "" "The haproxy-install.yml playbook will now be run as a part of setup-" "infrastructure.yml." msgstr "" #: ../../:2967 msgid "" "The haproxy_server role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option ``haproxy_package_state`` " "should be set to ``present``." msgstr "" #: ../../:2221 msgid "" "The haproxy_server role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``haproxy_package_state`` to ``present``." msgstr "" #: ../../:2049 msgid "" "The horizon next generation instance management panels have been enabled by " "default. This changes horizon to use the upstream defaults instead of the " "legacy panels. `Documentation can be found here `_." msgstr "" #: ../../:3526 msgid "" "The in tree \"ansible.cfg\" file in the playbooks directory has been removed." " This file was making compatibility difficult for deployers who need to " "change these values. Additionally this files very existance forced Ansible " "to ignore any other config file in either a users home directory or in the " "default \"/etc/ansible\" directory." msgstr "" #: ../../:754 msgid "" "The installation of Erlang and is now optimized for CentOS. Erlang 19.x is " "now installed via a single package that is maintained by RabbitMQ developers " "and it provides the minimal features required for RabbitMQ to function. It " "also includes HiPE support for increased performance." msgstr "" #: ../../:1177 origin/stable/ocata>:1509 msgid "" "The installation of ``chrony`` is still enabled by default, but it is now " "controlled by the ``security_enable_chrony`` variable." msgstr "" #: ../../:530 msgid "" "The internal variable ``python_ceph_package`` has been renamed to " "``python_ceph_packages`` and is now a list instead of a string. If you are " "using gnocchi with ceph and are using this internal variable in your " "``ceph_extra_components`` overrides, please update it to " "``python_ceph_packages``." msgstr "" #: ../../:2149 msgid "" "The inventory generation code has been switched to use standard Python " "packaging tools. For most, this should not be a visible change. However, " "running the dynamic inventory script on a local development environment " "should now be called via ``python dynamic_inventory.py``." msgstr "" #: ../../:1947 msgid "" "The inventory script will now dynamically populate the ``lxc_hosts`` group " "dynamically based on which machines have container affinities defined. This " "group is not allowed in user-defined configuration." msgstr "" #: ../../:584 msgid "" "The ironic conductor service has been consolidated into the " "``ironic_api_container``. The previously implemented " "``ironic_conductor_container`` can be removed." msgstr "" #: ../../:86 stable/train>:336 stable/ussuri>:460 msgid "" "The journald-remote is disabled from execution inside setup-infrastructure " "until https://github.com/systemd/systemd/issues/2376 has been incorporated " "in current systemd packages. The playbook can be enabled by setting " "``journald_remote_enabled`` to ``True``" msgstr "" #: ../../:99 stable/train>:377 stable/ussuri>:523 msgid "" "The journald-remote playbook is disabled from execution inside setup-" "infrastructure until setting ``journald_remote_enabled`` is set to ``True`` " "due to https://github.com/systemd/systemd/issues/2376" msgstr "" #: ../../:808 origin/stable/ocata>:1338 msgid "" "The keepalived role was updated, and now includes an optional way to " "configure vrrp scripts timeouts. See also: `VRRP timeout PR on keepalived " "role `_." msgstr "" #: ../../:995 msgid "" "The key **is_ssh_address** has been removed from the `openstack_user_config." "yml` and the dynamic inventory. This key was responsible mapping an address " "to the container which was used for SSH connectivity. Because we've created " "the SSH connectivity plugin, which allows us the ability to connect to " "remote containers without SSH, this option is no longer useful. To keep the " "`openstack_user_config.yml` clean deployers can remove the option however " "moving forward it no longer has any effect." msgstr "" #: ../../:787 origin/stable/ocata>:838 #: stable/pike>:1747 stable/pike>:2053 msgid "" "The keystone endpoints for instances spawned by magnum will now be provided " "with the public endpoints by default. Previously this was set to use " "internal endpoints." msgstr "" #: ../../:1727 msgid "" "The keystone endpoints now have versionless URLs. Any existing endpoints " "will be updated." msgstr "" #: ../../:697 msgid "" "The keystone installation now uses ansible-role-pki to create and install a " "server certificate for Apache when keystone_ssl is true. The same role is " "also used to create a CA certificate and key for SAML federation when " "keystone_idp is populated by the deployer. For an existing keystone SAML " "setup the certificate and key will be re-created which may be undesirable, " "unless the existing ones are first copied to the relevant directories in ``/" "etc/openstack_deploy/pki/roots`` on the deploy host. The variables " "``keystone_ssl_self_signed_regen`` and ``keystone_ssl_self_signed_subject`` " "are removed and are replaced with equivalent functionality via the new " "``keystone_pki_*`` variables." msgstr "" #: ../../:711 msgid "" "The keystone role can now has the ability to run a minimal uWSGI process for " "keystone when the option `keystone_use_uwsgi` is set **true**. This feature " "provides operators the ability to run a minimal install without apache. " "While the minimal deployment is functional, it is not featureful. Things " "like modshib and oath are not supported when running the minimal setup." msgstr "" #: ../../:424 msgid "" "The keystone role now supports the option `keystone_use_uwsgi`, which will " "allow deployers the ability to run keystone via uWSGI without needing the " "apache webserver. When the `keystone_use_uwsgi` option is enabled, it will " "setup the uWSGI process on port 5000." msgstr "" #: ../../:253 msgid "" "The kubernetes version deployed with ocata is now constrained to version 2.0." "0, matching the same version as deployed in all pike releases." msgstr "" #: ../../:1867 msgid "" "The latest stable release of Ceph, Jewel, is now used as the default client " "version since Hammer was scheduled for EOL in November 2016." msgstr "" #: ../../:2074 msgid "" "The latest version of the RHEL 7 STIG requires that a standard login banner " "is presented to users when they log into the system (V-71863). The security " "role now deploys a login banner that is used for console and ssh sessions." msgstr "" #: ../../:1113 msgid "" "The liberty release notes list the configuration options scrubber_datadir, " "cleanup_scrubber and cleanup_scrubber_time as being deprecated. Accordingly, " "they have been removed from the OSA glance role." msgstr "" #: ../../:1022 msgid "" "The limits.conf file for galera servers will now be deployed under ``/etc/" "security/limits.d/99-limits.conf``. This is being done to ensure our changes " "do not clobber existing settings within the system's default ``/etc/security/" "limits.conf`` file when the file is templated." msgstr "" #: ../../:14 stable/rocky>:95 stable/stein>:331 msgid "" "The list of enabled filters for the Cinder scheduler, " "`scheduler_default_filters` in `cinder.conf`, could previously be defined " "only via an entry in ``cinder_cinder_conf_overrides``. You now have the " "option to instead define a list variable, " "``cinder_scheduler_default_filters``, that defines the enabled filters. This " "is helpful if you either want to disable one of the filters enabled by " "default (at the time of writing, these are `AvailabilityZoneFilter`, " "`CapacityFilter`, and `CapabilitiesFilter`), or if conversely you want to " "add a filter that is normally not enabled, such as `DifferentBackendFilter` " "or `InstanceLocalityFilter`." msgstr "" #: ../../:1194 origin/stable/ocata>:1680 msgid "" "The location of the ``/etc/openstack-release`` file placement can now be " "changed. Set the variable ``openstack_distrib_file_path`` to place it in a " "different path." msgstr "" #: ../../:1105 stable/stein>:1240 msgid "" "The log path, ``/var/log/aodh`` is no longer used to capture service logs. " "All logging for the aodh service will now be sent directly to the systemd " "journal." msgstr "" #: ../../:1089 stable/stein>:1220 msgid "" "The log path, ``/var/log/barbican`` is no longer used to capture service " "logs. All logging for the barbican service will now be sent directly to the " "systemd journal." msgstr "" #: ../../:1236 msgid "" "The log path, ``/var/log/blazar`` is no longer used to capture service logs. " "All logging for the blazar service will now be sent directly to the systemd " "journal." msgstr "" #: ../../:1109 stable/stein>:1244 msgid "" "The log path, ``/var/log/ceilometer`` is no longer used to capture service " "logs. All logging for the ceilometer service will now be sent directly to " "the systemd journal." msgstr "" #: ../../:1101 stable/stein>:1232 msgid "" "The log path, ``/var/log/cinder`` is no longer used to capture service logs. " "All logging for the cinder service will now be sent directly to the systemd " "journal." msgstr "" #: ../../:711 msgid "" "The log path, ``/var/log/cloudkitty`` is no longer used to capture service " "logs. All logging for the cloudkitty service will now be sent directly to " "the systemd journal." msgstr "" #: ../../:1097 stable/stein>:1228 msgid "" "The log path, ``/var/log/congress`` is no longer used to capture service " "logs. All logging for the congress service will now be sent directly to the " "systemd journal." msgstr "" #: ../../:1113 stable/stein>:1248 msgid "" "The log path, ``/var/log/designate`` is no longer used to capture service " "logs. All logging for the designate service will now be sent directly to the " "systemd journal." msgstr "" #: ../../:1093 stable/stein>:1224 msgid "" "The log path, ``/var/log/keystone`` is no longer used to capture service " "logs. All logging for the Keystone service will now be sent directly to the " "systemd journal." msgstr "" #: ../../:2987 msgid "" "The lxc_hosts role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``lxc_hosts_package_state`` should be " "set to ``present``." msgstr "" #: ../../:1919 msgid "" "The lxc_hosts role can now make use of a primary and secondary gpg keyserver " "for gpg validation of the downloaded cache. Setting the servers to use can " "be done using the ``lxc_image_cache_primary_keyserver`` and " "``lxc_image_cache_secondary_keyserver`` variables." msgstr "" #: ../../:2241 msgid "" "The lxc_hosts role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``lxc_hosts_package_state`` to ``present``." msgstr "" #: ../../:431 msgid "" "The lxc_hosts role now supports the ability to omit lxc network interface " "deployment. The option `lxc_net_managed` is a Boolean operator and defaults " "to **true**. When this option is set to **false** the role will not deploy " "an interface file or attempt to manage the state of the interface." msgstr "" #: ../../:783 origin/stable/ocata>:834 #: stable/pike>:1743 stable/pike>:2049 msgid "" "The magnum client interaction will now make use of the public endpoints by " "default. Previously this was set to use internal endpoints." msgstr "" #: ../../:544 msgid "" "The masakari dashboard is available in Horizon. Deployers can enable the " "panel by setting the following Ansible variable:" msgstr "" #: ../../:800 msgid "" "The max connections setting for Galera is now determined automatically by " "taking the number of vCPUs available and multiplying it by 100. Deployers " "may override this default via the ``galera_max_connections`` variable." msgstr "" #: ../../:547 stable/queens>:691 msgid "" "The maximum amount of time to wait until forcibly failing the LXC cache " "preparation process is now configurable using the ``lxc_cache_prep_timeout`` " "variable. The value is specified in seconds, with the default being 20 " "minutes." msgstr "" #: ../../:1093 msgid "" "The maximum erlang process limit for RabbitMQ has been set to 1048576 in " "order to prevent virtual machine lockups which are caused when this limit " "has been reached." msgstr "" #: ../../:536 msgid "" "The mechanism used previously to syncronise repo server contents between " "highly available sets of repo servers in a multinode deployment (lsyncd and " "rsync over ssh) is removed and replaced with a shared filesystem mount. This " "permits much easier support for multi operating system and multi processor " "architectures in the deployment when building and serving python wheels " "using the repo server. The default deployment will run a glusterfs server in " "each repo server host, and mount the glusterfs fileystem at /var/www/repo " "using the system_mount ansible role. If a deployment wishes to use an " "alternative external shared filesystem, the new variable " "`openstack_repo_server_enable_glusterfs` can be set to `false` and " "alternative mounts created by overriding the new " "`repo_server_systemd_mounts` variable. It is mandatory to use some type of " "shared filesystem for the repo server in all deployments." msgstr "" #: ../../:2644 msgid "" "The memcached log is removed from /var/log/memcached.log and is now stored " "in the /var/log/memcached folder." msgstr "" #: ../../:2903 msgid "" "The memcached_server role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option ``memcached_package_state`` " "should be set to ``present``." msgstr "" #: ../../:2157 msgid "" "The memcached_server role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``memcached_package_state`` to ``present``." msgstr "" #: ../../:329 msgid "" "The murano dashboard is available in Horizon. Deployers can enable the panel " "by setting the following Ansible variable:" msgstr "" #: ../../:660 origin/stable/newton>:1902 msgid "" "The new LBaaS v2 dashboard is available in Horizon. Deployers can enable the " "panel by setting the following Ansible variable:" msgstr "" #: ../../:2668 msgid "" "The new host group ``neutron_openvswitch_agent`` has been added to the ``env." "d/neutron.yml`` and ``env.d/nova.yml`` environment configuration files in " "order to support the implementation of Open vSwitch. Deployers must ensure " "that their environment configuration files are updated to include the above " "group name. Please see the example implementations in `env.d/neutron.yml " "`_ and `env.d/nova.yml `_." msgstr "" #: ../../:463 origin/stable/ocata>:754 #: stable/pike>:1203 msgid "" "The new option `haproxy_backend_arguments` can be utilized to add arbitrary " "options to a HAProxy backend like tcp-check or http-check." msgstr "" #: ../../:884 origin/stable/ocata>:1652 msgid "" "The new provider network attribute ``sriov_host_interfaces`` is added to " "support SR-IOV network mappings inside Neutron. The provider_network adds " "new items network_sriov_mappings and network_sriov_mappings_list to the " "provider_networks dictionary. Multiple interfaces can be defined by comma " "separation." msgstr "" #: ../../:239 msgid "" "The new variable ``tempest_workspace`` has been introduced to set the " "location of the tempest workspace." msgstr "" #: ../../:678 msgid "" "The new variable `openstack_hosts_apt_pinned_packages` is added to the " "openstack_hosts ansible role and sets the value of `apt_pinned_packages` for " "the apt_package_pinning role run as a dependancy of the openstack_hosts role." " Existing use of the `apt_pinned_packages` variable by deployers in " "user_variables should be reviewed to ensure that those pins are applied by " "the intended ansible roles, and swapped to this new variable if necessary." msgstr "" #: ../../:33 origin/stable/newton>:2053 msgid "" "The nova SSH public key distribution has been made a lot faster especially " "when deploying against very large clusters. To support larger clusters the " "role has moved away from the \"authorized_key\" module and is now generating " "a script to insert keys that may be missing from the authorized keys file. " "The script is saved on all nova compute nodes and can be found at ``/usr/" "local/bin/openstack-nova-key.sh``. If ever there is a need to reinsert keys " "or fix issues on a given compute node the script can be executed at any time " "without directly running the ansible playbooks or roles." msgstr "" #: ../../:438 origin/stable/mitaka>:739 #: origin/stable/newton>:3455 msgid "" "The nova admin endpoint is now correctly registered as ``/v2.1/" "%(tenant_id)s`` instead of ``/v2/%(tenant_id)s``." msgstr "" #: ../../:360 msgid "" "The nova configuration is updated to always specify an LXD storage pool name " "when 'nova_virt_type' is 'lxd'. The variable 'lxd_storage_pool' is defaulted " "to 'default', the LXD default storage pool name. A new variable " "'lxd_init_storage_pool' is introduced which specifies the underlying storage " "pool name. 'lxd_init_storage_pool' is used by lxd init when setting up the " "storage pool. If not provided, lxd init will not use this parameter at all. " "Please see the lxd man page for further information about the storage pool " "parameter." msgstr "" #: ../../:1887 msgid "" "The nova-cert service has been deprecated, is marked for removal in the " "Ocata release, and will no longer be deployed by the os_nova role." msgstr "" #: ../../:542 stable/ussuri>:760 msgid "" "The nova-lxd driver is no longer supported upstream, and the git repo for " "it's source code has been retired on the master branch. All code for " "deploying or testing nova-lxd has been removed from the os_nova ansible role." " The following variables have been removed:" msgstr "" #: ../../:993 msgid "" "The nova_placement database which was implemented in the ocata release of " "OpenStack-Ansible was never actually used for anything due to reverts in the " "upstream code. The database should be empty and can be deleted. With this " "the following variables also no longer have any function and have been " "removed." msgstr "" #: ../../:1089 msgid "" "The number of erlang asynchronous threads used by RabbitMQ have been " "increased from the default of 32 to 128 in order to speed up message " "processing." msgstr "" #: ../../:50 stable/rocky>:156 stable/stein>:868 msgid "" "The number of inotify watch instances available is limited system wide via a " "sysctl setting. It is possible for certain processes, such as pypi-server, " "or elasticsearch from the ops repo to consume a large number of inotify " "watches. If the system wide maximum is reached then any process on the host " "or in any container on the host will be unable to create a new inotify watch." " Systemd uses inotify watches, and if there are none available it is unable " "to restart services. The processes which synchronise the repo server " "contents between infra nodes also relies on inotify watches. If the repo " "servers fail to synchronise, or services fail to restart when expected check " "the the inotify watch limit which is defined in the sysctl value fs.inotify." "max_user_watches. Patches have merged to increase these limits, but for " "existing environments or those which have not upgraded to a recent enough " "point release may have to apply an increased limit manually." msgstr "" #: ../../:1449 stable/pike>:955 msgid "" "The number of worker threads for neutron will now be capped at 16 unless a " "specific value is specified. Previously, the calculated number of workers " "could get too high on systems with a large number of processors. This was " "particularly evident on POWER systems." msgstr "" #: ../../:1151 msgid "" "The old class path names used within the ``neutron_plugin_base`` have been " "deprecated in favor of the friendly names. Support for the use of the class " "path plugins will be removed in the OpenStack Newton cycle." msgstr "" #: ../../:804 msgid "" "The openrc role will no longer be executed on all OpenStack service " "containers/hosts. Instead a single host is designated through the use of the " "``openstack_service_setup_host`` variable. The default is ``localhost`` (the " "deployment host). Deployers can opt to change this to the utility container " "by implementing the following override in ``user_variables.yml``." msgstr "" #: ../../:1200 stable/pike>:2125 msgid "" "The openstack service uri protocol variables were not being used to set the " "Trove specific uris. This resulted in 'http' always being used for the " "public, admin and internal uris even when 'https' was intended." msgstr "" #: ../../:1980 msgid "" "The openstack-ansible-memcached_server role includes a new override, " "``memcached_connections`` which is automatically calculated from the number " "of memcached connection limit plus additional 1k to configure the OS nofile " "limit. Without proper nofile limit configuration, memcached will crash in " "order to support higher parallel connection TCP/Memcache counts." msgstr "" #: ../../:408 origin/stable/mitaka>:687 msgid "" "The openstack-ansible-memcached_server role includes a new " "override,`memcached_connections` which is automatically calculated from the " "number of memcached connection limit plus additional 1k to configure the OS " "nofile limit. Without proper nofile limit configuration, memcached will " "crash in order to support higher parallel connection TCP/Memcache counts." msgstr "" #: ../../:1728 msgid "" "The openstack-ansible-security role is now configured to apply the security " "configurations from the Red Hat Enterprise Linux 7 STIG to OpenStack-Ansible " "deployments." msgstr "" #: ../../:310 msgid "" "The openstack-ansible-security role is now retired and the ansible-hardening " "role replaces it. The ansible-hardening role provides the same functionality " "and will be the maintained hardening role going forward." msgstr "" #: ../../:2975 msgid "" "The openstack_hosts role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option " "``openstack_hosts_package_state`` should be set to ``present``." msgstr "" #: ../../:2229 msgid "" "The openstack_hosts role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``openstack_hosts_package_state`` to ``present``." msgstr "" #: ../../:1411 msgid "" "The option ``openstack_domain`` has been added to the **openstack_hosts** " "role. This option is used to setup proper hostname entries for all hosts " "within a given OpenStack deployment." msgstr "" #: ../../:106 stable/queens>:324 stable/rocky>:575 msgid "" "The option ``rabbitmq_erlang_version_spec`` has been added allowing " "deployers to set the version of erlang used on a given installation." msgstr "" #: ../../:555 stable/stein>:356 msgid "" "The option ``repo_venv_default_pip_packages`` has been added which will " "allow deployers to insert any packages into a service venv as needed. The " "option expects a list of strings which are valid python package names as " "found on PYPI." msgstr "" #: ../../:1043 stable/train>:426 #: stable/ussuri>:584 msgid "" "The option `rabbitmq_disable_non_tls_listeners` has been removed in favor of " "setting the bind address and port configuration directly using a new option " "`rabbitmq_port_bindings`. This new option is a hash allowing for multiple " "bind addresses and port configurations." msgstr "" #: ../../:825 stable/rocky>:897 msgid "" "The options ``lxc_host_machine_qgroup_space_limit`` and " "``lxc_host_machine_qgroup_compression_limit`` have been added allowing a " "deployer to set **qgroup** limits as they see fit. The default value for " "these options is \"none\" which is effectively **unlimited**. These options " "accept any nominal size value followed by the single letter type, example " "``64G``. These options are only effective when the option " "``lxc_host_machine_quota_disabled`` is set to **false**." msgstr "" #: ../../:424 origin/stable/newton>:2304 msgid "" "The options of application logrotate configuration files are now " "configurable. ``rsyslog_client_log_rotate_options`` can be used to provide a " "list of directives, and ``rsyslog_client_log_rotate_scripts`` can be used to " "provide a list of postrotate, prerotate, firstaction, or lastaction scripts." msgstr "" #: ../../:387 msgid "" "The original ``stable/rocky`` release (18.0.x) contained a reference to a " "pre-release state of the ceph-ansible role (its 3.2.0beta1 release). That " "role --- and hence, any OpenStack-Ansible ``stable/rocky`` release prior to " "18.1.0 --- should not be used to deploy production Ceph clusters. As of this " "release, ``stable/rocky`` tracks the ceph-ansible role's ``stable-3.1`` " "branch." msgstr "" #: ../../:2971 msgid "" "The os_aodh role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``aodh_package_state`` should be set to " "``present``." msgstr "" #: ../../:2225 msgid "" "The os_aodh role now supports the ability to configure whether apt/yum tasks " "install the latest available package, or just ensure that the package is " "present. The default action is to ensure that the latest package is present. " "The action taken may be changed to only ensure that the package is present " "by setting ``aodh_package_state`` to ``present``." msgstr "" #: ../../:1895 msgid "" "The os_barbican role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``barbican_package_state`` should be set " "to ``present``." msgstr "" #: ../../:1734 msgid "" "The os_barbican role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``barbican_package_state`` to ``present``." msgstr "" #: ../../:2991 msgid "" "The os_ceilometer role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``ceilometer_package_state`` should be " "set to ``present``." msgstr "" #: ../../:2245 msgid "" "The os_ceilometer role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``ceilometer_package_state`` to ``present``." msgstr "" #: ../../:2943 msgid "" "The os_cinder role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``cinder_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2197 msgid "" "The os_cinder role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``cinder_package_state`` to ``present``." msgstr "" #: ../../:561 msgid "" "The os_cloudkitty role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``cloudkitty_package_state`` should be " "set to ``present``." msgstr "" #: ../../:377 msgid "" "The os_cloudkitty role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``cloudkitty_package_state`` to ``present``." msgstr "" #: ../../:1899 msgid "" "The os_designate role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``designate_package_state`` should be " "set to ``present``." msgstr "" #: ../../:1738 msgid "" "The os_designate role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``designate_package_state`` to ``present``." msgstr "" #: ../../:2927 msgid "" "The os_glance role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``glance_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2181 msgid "" "The os_glance role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``glance_package_state`` to ``present``." msgstr "" #: ../../:2947 msgid "" "The os_gnocchi role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``gnocchi_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2201 msgid "" "The os_gnocchi role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``gnocchi_package_state`` to ``present``." msgstr "" #: ../../:2907 msgid "" "The os_heat role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``heat_package_state`` should be set to " "``present``." msgstr "" #: ../../:2161 msgid "" "The os_heat role now supports the ability to configure whether apt/yum tasks " "install the latest available package, or just ensure that the package is " "present. The default action is to ensure that the latest package is present. " "The action taken may be changed to only ensure that the package is present " "by setting ``heat_package_state`` to ``present``." msgstr "" #: ../../:3003 msgid "" "The os_horizon role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``horizon_package_state`` should be set " "to ``present``." msgstr "" #: ../../:1385 msgid "" "The os_horizon role now has support for the horizon designate-ui dashboard. " "The dashboard may be enabled by setting ``horizon_enable_designate_ui`` to " "``True`` in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:1430 msgid "" "The os_horizon role now has support for the horizon ironic-ui dashboard. The " "dashboard may be enabled by setting ``horizon_enable_ironic_ui`` to ``True`` " "in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:1438 msgid "" "The os_horizon role now has support for the horizon magnum-ui dashboard. The " "dashboard may be enabled by setting ``horizon_enable_magnum_ui`` to ``True`` " "in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:210 msgid "" "The os_horizon role now has support for the horizon manila-ui dashboard. The " "dashboard may be enabled by setting ``horizon_enable_manila_ui`` to ``True`` " "in ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:2257 msgid "" "The os_horizon role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``horizon_package_state`` to ``present``." msgstr "" #: ../../:389 msgid "" "The os_ironic ansible role can now upload the ironic deploy image to glance. " "Several new variables are defined as ironic_deploy_image_* which control " "this. It is possible to disable the upload to glance and also to specify " "custom locations to stage the images from if required." msgstr "" #: ../../:2895 msgid "" "The os_ironic role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``ironic_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2149 msgid "" "The os_ironic role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``ironic_package_state`` to ``present``." msgstr "" #: ../../:2939 msgid "" "The os_keystone role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``keystone_package_state`` should be set " "to ``present``." msgstr "" #: ../../:1684 msgid "" "The os_keystone role now performs a rolling upgrade without downtime during " "installation. `The process for rolling upgrades is documented here `_." msgstr "" #: ../../:2193 msgid "" "The os_keystone role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``keystone_package_state`` to ``present``." msgstr "" #: ../../:2951 msgid "" "The os_magnum role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``magnum_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2205 msgid "" "The os_magnum role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``magnum_package_state`` to ``present``." msgstr "" #: ../../:2999 msgid "" "The os_neutron role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``neutron_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2253 msgid "" "The os_neutron role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``neutron_package_state`` to ``present``." msgstr "" #: ../../:36 msgid "" "The os_neutron role uses the same handler name as the etcd role for " "executing ``systemcl daemon-reload``. Given that newton uses Ansible 2.1.x " "and that version of Ansible cannot process more than one handler by the same " "name in a single playbook, only one handler ends up being executed. The " "handler that does get executed is the etcd handler which is skipped unless " "the deployment is using Calico." msgstr "" #: ../../:2899 msgid "" "The os_nova role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``nova_package_state`` should be set to " "``present``." msgstr "" #: ../../:113 origin/stable/newton>:1473 msgid "" "The os_nova role can now deploy the a custom /etc/libvirt/qemu.conf file by " "defining ``qemu_conf_dict``." msgstr "" #: ../../:1469 msgid "" "The os_nova role can now deploy the nova-lxd hypervisor. This can be " "achieved by setting ``nova_virt_type`` to ``lxd`` on a per-host basis in " "``openstack_user_config.yml`` or on a global basis in ``user_variables.yml``." "" msgstr "" #: ../../:1689 msgid "" "The os_nova role can now detect a PowerNV environment and set the " "virtualization type to 'kvm'." msgstr "" #: ../../:2057 msgid "" "The os_nova role can now detect and support basic deployment of a PowerVM " "environment. This sets the virtualization type to 'powervm' and installs/" "updates the PowerVM NovaLink package and nova-powervm driver." msgstr "" #: ../../:2153 msgid "" "The os_nova role now supports the ability to configure whether apt/yum tasks " "install the latest available package, or just ensure that the package is " "present. The default action is to ensure that the latest package is present. " "The action taken may be changed to only ensure that the package is present " "by setting ``nova_package_state`` to ``present``." msgstr "" #: ../../:2923 msgid "" "The os_rally role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``rally_package_state`` should be set to " "``present``." msgstr "" #: ../../:2177 msgid "" "The os_rally role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``rally_package_state`` to ``present``." msgstr "" #: ../../:2959 msgid "" "The os_sahara role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``sahara_package_state`` should be set " "to ``present``." msgstr "" #: ../../:2213 msgid "" "The os_sahara role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``sahara_package_state`` to ``present``." msgstr "" #: ../../:1121 msgid "" "The os_swift and os_swift_sync role have been merged into the single " "os_swift role. Two variables (``swift_do_setup`` and ``swift_do_sync``) have " "been implemented to action the install and synchronise code paths. The " "separate playbooks have been adjusted to make use of these variables to " "ensure that the behaviour is exactly the same as before." msgstr "" #: ../../:2995 msgid "" "The os_swift role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``swift_package_state`` should be set to " "``present``." msgstr "" #: ../../:2383 msgid "" "The os_swift role now allows the permissions for the log files created by " "the swift account, container and object servers to be set. The variable is " "``swift_syslog_log_perms`` and is set to ``0644`` by default." msgstr "" #: ../../:2249 msgid "" "The os_swift role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``swift_package_state`` to ``present``." msgstr "" #: ../../:550 stable/pike>:907 msgid "" "The os_swift role now supports the swift3 middleware, allowing access to " "swift via the Amazon S3 API. This feature can enabled by setting " "``swift_swift3_enabled`` to ``true``." msgstr "" #: ../../:617 stable/train>:243 stable/ussuri>:345 msgid "" "The override ``rabbitmq_memory_high_watermark`` can be used to set the " "maximum size of the erlang Virtual Machine before the garbage collection is " "triggered. The default is lowered to ``0.2``, from ``0.4`` as the garbage " "collection can require 2x of allocated amount during its operation. This can " "result in a equivalent use of ``0.4``, resulting in 40% of memory usage, " "visible to the rabbitMQ container. The original default setting of ``0.4`` " "can lead to 80% memory allocation of rabbitMQ, potentially leading to a " "scenario where the underlying Linux kernel is killing the process due to " "shortage of virtual memory." msgstr "" #: ../../:411 stable/stein>:1434 msgid "" "The package cache on the repo server has been removed. If caching of " "packages is desired, it should be setup outside of OpenStack-Ansible and the " "variable ``lxc_container_cache_files`` (for LXC containers) or " "``nspawn_container_cache_files_from_host`` (for nspawn containers) can be " "used to copy the appropriate host configuration from the host into the " "containers on creation. Alternatively, environment variables can be set to " "use the cache in the host /etc/environment file prior to container creation, " "or the ``deployment_environment_variables`` can have the right variables set " "to use it. The following variables have been removed." msgstr "" #: ../../:1405 msgid "" "The password minimum and maximum lifetimes are now opt-in changes that can " "take action against user accounts instead of printing debug warnings. Refer " "to the documentation for STIG requirements V-71927 and V-71931 to review the " "opt-in process and warnings." msgstr "" #: ../../:1127 origin/stable/ocata>:2114 msgid "" "The percona repository stayed in placed even after a change of the variable " "``use_percona_upstream``. From now on, the percona repository will not be " "present unless the deployer decides to ``use_percona_upstream``. This also " "fixes a bug of the presence of this apt repository after an upgdrade from " "Mitaka." msgstr "" #: ../../:736 msgid "" "The percona-xtrabackup repository is now enabled in OpenStack-Ansible and it " "allows deployers to install and use `Percona's XtraBackup project `_ to perform " "online backups of data stored in MariaDB." msgstr "" #: ../../:1007 msgid "" "The ping check that happens inside keepalived to make sure that the server " "that runs it can reach 193.0.14.129 has been removed by default. The " "functionality can continue to be used if you define the " "`keepalived_ping_address` in your `user_variables.yml` file to `193.0.14." "129` or any IP of your choice." msgstr "" #: ../../:2915 msgid "" "The pip_install role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``pip_install_package_state`` should be " "set to ``present``." msgstr "" #: ../../:1596 msgid "" "The pip_install role can now configure pip to be locked down to the " "repository built by OpenStack-Ansible. To enable the lockdown configuration, " "deployers may set ``pip_lock_to_internal_repo`` to ``true`` in ``/etc/" "openstack_deploy/user_variables.yml``." msgstr "" #: ../../:2169 msgid "" "The pip_install role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``pip_install_package_state`` to ``present``." msgstr "" #: ../../:158 origin/stable/newton>:3389 msgid "" "The pip_install_options variable is now honored during repo building. This " "variable allows deployers to specify trusted CA certificates by setting the " "variable to \"--cert /etc/ssl/certs/ca-certificates.crt\"" msgstr "" #: ../../:969 msgid "The plugin names for the classifier and sfc changed:" msgstr "" #: ../../:1101 msgid "" "The plugins folders have been renamed to the default names used in Ansible 2." "x. This is part of the preparation for Ansible 2.x readiness. The renames " "are specifically ``actions > action``, ``callbacks > callback``, ``filters > " "filter``, ``lookups > lookup``." msgstr "" #: ../../:1950 msgid "" "The plumgrid network provider has been removed. This is being dropped " "without a full deprecation cycle because the company, plumgrid, no longer " "exists." msgstr "" #: ../../:177 stable/train>:343 stable/ussuri>:467 msgid "" "The previous way of using a common backend_host across all deployments was " "not recommended by the Cinder team and it will cause duplicate messages that " "cause problems in the environment." msgstr "" #: ../../:501 msgid "" "The previously deprecated variables `tempest_test_whitelist` and " "`tempest_test_blacklist` are removed. The replacement include/exclude lists " "should be used instead to define tempest tests to run." msgstr "" #: ../../:189 current msgid "" "The previously used apt/yum package repositories for rabbitmq located at " "novemberain.com are have been replaced with those found at rabbitmq.com, in " "accordance with changes to the rabbitmq installation guide." msgstr "" #: ../../:295 current msgid "" "The previously used apt/yum package repositories for rabbitmq located at " "novemberain.com are have been replaced with those found at rabbitmq.com, in " "accordance with changes to the rabbitmq installation guide. Any local " "mirrors should be adjusted to use the recommended upstream sources." msgstr "" #: ../../:288 stable/pike>:423 msgid "" "The problem has been registered upstream and progresson the issue can be " "followed there: https://jira.mariadb.org/browse/MDEV-15254" msgstr "" #: ../../:868 origin/stable/mitaka>:1191 msgid "" "The python packages `pip`, `setuptools` and `wheel` are now all pinned on a " "per-tag basis. The pins are updated along with every OpenStack Service " "update. This is done to ensure a consistent build experience with the latest " "available packages at the time the tag is released. A deployer may override " "the pins by adding a list of required pins using the `pip_packages` variable " "in `user_variables.yml`." msgstr "" #: ../../:429 origin/stable/ocata>:647 #: stable/pike>:1702 msgid "" "The python venv build process now only happens when requirements change. A " "venv rebuild may be forced by using the boolean variable " "``repo_build_venv_rebuild``." msgstr "" #: ../../:425 origin/stable/ocata>:643 #: stable/pike>:1698 msgid "" "The python wheel build process now only happens when requirements change. A " "wheel rebuild may be forced by using the boolean variable " "``repo_build_wheel_rebuild``." msgstr "" #: ../../:442 stable/stein>:1593 msgid "" "The quota for security group rules was erroneously set to 100 with the aim " "to have 100 security group rules per security group instead of to " "100*#security group rules. This patch fixes this discrepancy." msgstr "" #: ../../:990 stable/train>:393 stable/ussuri>:543 msgid "" "The rabbitMQ high watermark is set to ``0.2`` rather than ``0.4`` to prevent " "possible OOM situations, which limits the maximum memory usage by rabbitMQ " "to 40% rather than 80% of the memory visible to the rabbitMQ container. The " "override ``rabbitmq_memory_high_watermark`` can be used to alter the limit." msgstr "" #: ../../:1390 stable/stein>:1395 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging Notify parameters in order to abstract the messaging service from " "the actual backend server deployment. - swift_oslomsg_notify_servers " "replaces swift_rabbitmq_telemetry_servers - swift_oslomsg_notify_port " "replaces swift_rabbitmq_telemetry_port - swift_oslomsg_notify_use_ssl " "replaces swift_rabbitmq_telemetry_use_ssl - swift_oslomsg_notify_userid " "replaces swift_rabbitmq_telemetry_userid - swift_oslomsg_notify_vhost " "replaces swift_rabbitmq_telemetry_vhost - swift_oslomsg_notify_password " "replaces swift_rabbitmq_telemetry_password" msgstr "" #: ../../:1262 stable/stein>:1332 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "aodh_oslomsg_rpc_servers replaces aodh_rabbitmq_servers - " "aodh_oslomsg_rpc_port replaces aodh_rabbitmq_port - aodh_oslomsg_rpc_use_ssl " "replaces aodh_rabbitmq_use_ssl - aodh_oslomsg_rpc_userid replaces " "aodh_rabbitmq_userid - aodh_oslomsg_rpc_vhost replaces aodh_rabbitmq_vhost - " "aodh_oslomsg_rpc_password replaces aodh_rabbitmq_password" msgstr "" #: ../../:1227 stable/stein>:1315 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "barbican_oslomsg_rpc_servers replaces rabbitmq_servers - " "barbican_oslomsg_rpc_port replaces rabbitmq_port - " "barbican_oslomsg_rpc_userid replaces barbican_rabbitmq_userid - " "barbican_oslomsg_rpc_vhost replaces barbican_rabbitmq_vhost - added " "barbican_oslomsg_rpc_use_ssl - added barbican_oslomsg_notify_servers - added " "barbican_oslomsg_notify_port - added barbican_oslomsg_notify_use_ssl - added " "barbican_oslomsg_notify_userid - added barbican_oslomsg_notify_vhost - added " "barbican_oslomsg_notify_password" msgstr "" #: ../../:1291 stable/stein>:1344 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "ceilometer_oslomsg_rpc_servers replaces rabbitmq_servers - " "ceilometer_oslomsg_rpc_port replaces rabbitmq_port - " "ceilometer_oslomsg_rpc_userid replaces ceilometer_rabbitmq_userid - " "ceilometer_oslomsg_rpc_vhost replaces ceilometer_rabbitmq_vhost - added " "ceilometer_oslomsg_rpc_use_ssl - added ceilometer_oslomsg_notify_servers - " "added ceilometer_oslomsg_notify_port - added " "ceilometer_oslomsg_notify_use_ssl - added ceilometer_oslomsg_notify_userid - " "added ceilometer_oslomsg_notify_vhost - added " "ceilometer_oslomsg_notify_password" msgstr "" #: ../../:1183 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "cinder_oslomsg_rpc_servers replaces cinder_rabbitmq_servers - " "cinder_oslomsg_rpc_port replaces cinder_rabbitmq_port - " "cinder_oslomsg_rpc_use_ssl replaces cinder_rabbitmq_use_ssl - " "cinder_oslomsg_rpc_userid replaces cinder_rabbitmq_userid - " "cinder_oslomsg_rpc_vhost replaces cinder_rabbitmq_vhost - " "cinder_oslomsg_notify_servers replaces cinder_rabbitmq_telemetry_servers - " "cinder_oslomsg_notify_port replaces cinder_rabbitmq_telemetry_port - " "cinder_oslomsg_notify_use_ssl replaces cinder_rabbitmq_telemetry_use_ssl - " "cinder_oslomsg_notify_userid replaces cinder_rabbitmq_telemetry_userid - " "cinder_oslomsg_notify_vhost replaces cinder_rabbitmq_telemetry_vhost" msgstr "" #: ../../:731 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "cloudkitty_oslomsg_rpc_servers replaces rabbitmq_servers - " "cloudkitty_oslomsg_rpc_port replaces rabbitmq_port - " "cloudkitty_oslomsg_rpc_userid replaces rabbitmq_userid - " "cloudkitty_oslomsg_rpc_vhost replaces rabbitmq_vhost - " "cloudkitty_oslomsg_rpc_use_ssl replaces rabbitmq_use_ssl - added " "cloudkitty_oslomsg_notify_servers - added cloudkitty_oslomsg_notify_port - " "added cloudkitty_oslomsg_notify_use_ssl - added " "cloudkitty_oslomsg_notify_userid - added cloudkitty_oslomsg_notify_vhost" msgstr "" #: ../../:1324 stable/stein>:1361 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "designate_oslomsg_rpc_servers replaces designate_rabbitmq_servers - " "designate_oslomsg_rpc_port replaces designate_rabbitmq_port - " "designate_oslomsg_rpc_use_ssl replaces designate_rabbitmq_use_ssl - " "designate_oslomsg_rpc_userid replaces designate_rabbitmq_userid - " "designate_oslomsg_rpc_vhost replaces designate_rabbitmq_vhost - " "designate_oslomsg_notify_servers replaces " "designate_rabbitmq_telemetry_servers - designate_oslomsg_notify_port " "replaces designate_rabbitmq_telemetry_port - " "designate_oslomsg_notify_use_ssl replaces " "designate_rabbitmq_telemetry_use_ssl - designate_oslomsg_notify_userid " "replaces designate_rabbitmq_telemetry_userid - " "designate_oslomsg_notify_vhost replaces designate_rabbitmq_telemetry_vhost - " "designate_oslomsg_notify_password replaces " "designate_rabbitmq_telemetry_password" msgstr "" #: ../../:1274 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "glance_oslomsg_rpc_servers replaces glance_rabbitmq_servers - " "glance_oslomsg_rpc_port replaces glance_rabbitmq_port - " "glance_oslomsg_rpc_use_ssl replaces glance_rabbitmq_use_ssl - " "glance_oslomsg_rpc_userid replaces glance_rabbitmq_userid - " "glance_oslomsg_rpc_vhost replaces glance_rabbitmq_vhost - " "glance_oslomsg_notify_servers replaces glance_rabbitmq_telemetry_servers - " "glance_oslomsg_notify_port replaces glance_rabbitmq_telemetry_port - " "glance_oslomsg_notify_use_ssl replaces glance_rabbitmq_telemetry_use_ssl - " "glance_oslomsg_notify_userid replaces glance_rabbitmq_telemetry_userid - " "glance_oslomsg_notify_vhost replaces glance_rabbitmq_telemetry_vhost - " "glance_oslomsg_notify_password replaces glance_rabbitmq_telemetry_password" msgstr "" #: ../../:1244 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "heat_oslomsg_rpc_servers replaces heat_rabbitmq_servers - " "heat_oslomsg_rpc_port replaces heat_rabbitmq_port - heat_oslomsg_rpc_use_ssl " "replaces heat_rabbitmq_use_ssl - heat_oslomsg_rpc_userid replaces " "heat_rabbitmq_userid - heat_oslomsg_rpc_vhost replaces heat_rabbitmq_vhost - " "heat_oslomsg_rpc_password replaces heat_rabbitmq_password - " "heat_oslomsg_notify_servers replaces heat_rabbitmq_telemetry_servers - " "heat_oslomsg_notify_port replaces heat_rabbitmq_telemetry_port - " "heat_oslomsg_notify_use_ssl replaces heat_rabbitmq_telemetry_use_ssl - " "heat_oslomsg_notify_userid replaces heat_rabbitmq_telemetry_userid - " "heat_oslomsg_notify_vhost replaces heat_rabbitmq_telemetry_vhost - " "heat_oslomsg_notify_password replaces heat_rabbitmq_telemetry_password" msgstr "" #: ../../:1216 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "ironic_oslomsg_rpc_servers replaces ironic_rabbitmq_servers - " "ironic_oslomsg_rpc_port replaces ironic_rabbitmq_port - " "ironic_oslomsg_rpc_use_ssl replaces ironic_rabbitmq_use_ssl - " "ironic_oslomsg_rpc_userid replaces ironic_rabbitmq_userid - " "ironic_oslomsg_rpc_vhost replaces ironic_rabbitmq_vhost" msgstr "" #: ../../:1374 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "keystone_oslomsg_rpc_servers replaces keystone_rabbitmq_servers - " "keystone_oslomsg_rpc_port replaces keystone_rabbitmq_port - " "keystone_oslomsg_rpc_use_ssl replaces keystone_rabbitmq_use_ssl - " "keystone_oslomsg_rpc_userid replaces keystone_rabbitmq_userid - " "keystone_oslomsg_rpc_vhost replaces keystone_rabbitmq_vhost - " "keystone_oslomsg_notify_servers replaces keystone_rabbitmq_telemetry_servers " "- keystone_oslomsg_notify_port replaces keystone_rabbitmq_telemetry_port - " "keystone_oslomsg_notify_use_ssl replaces keystone_rabbitmq_telemetry_use_ssl " "- keystone_oslomsg_notify_userid replaces keystone_rabbitmq_telemetry_userid " "- keystone_oslomsg_notify_vhost replaces keystone_rabbitmq_telemetry_vhost" msgstr "" #: ../../:1357 stable/stein>:1378 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "magnum_oslomsg_rpc_servers replaces rabbitmq_servers - " "magnum_oslomsg_rpc_port replaces rabbitmq_port - magnum_oslomsg_rpc_userid " "replaces magnum_rabbitmq_userid - magnum_oslomsg_rpc_vhost replaces " "magnum_rabbitmq_vhost - added magnum_oslomsg_rpc_use_ssl - added " "magnum_oslomsg_notify_servers - added magnum_oslomsg_notify_port - added " "magnum_oslomsg_notify_use_ssl - added magnum_oslomsg_notify_userid - added " "magnum_oslomsg_notify_vhost - added magnum_oslomsg_notify_password" msgstr "" #: ../../:1341 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "neutron_oslomsg_rpc_servers replaces neutron_rabbitmq_servers - " "neutron_oslomsg_rpc_port replaces neutron_rabbitmq_port - " "neutron_oslomsg_rpc_use_ssl replaces neutron_rabbitmq_use_ssl - " "neutron_oslomsg_rpc_userid replaces neutron_rabbitmq_userid - " "neutron_oslomsg_rpc_vhost replaces neutron_rabbitmq_vhost - " "neutron_oslomsg_notify_servers replaces neutron_rabbitmq_telemetry_servers - " "neutron_oslomsg_notify_port replaces neutron_rabbitmq_telemetry_port - " "neutron_oslomsg_notify_use_ssl replaces neutron_rabbitmq_telemetry_use_ssl - " "neutron_oslomsg_notify_userid replaces neutron_rabbitmq_telemetry_userid - " "neutron_oslomsg_notify_vhost replaces neutron_rabbitmq_telemetry_vhost" msgstr "" #: ../../:1199 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "nova_oslomsg_rpc_servers replaces nova_rabbitmq_servers - " "nova_oslomsg_rpc_port replaces nova_rabbitmq_port - nova_oslomsg_rpc_use_ssl " "replaces nova_rabbitmq_use_ssl - nova_oslomsg_rpc_userid replaces " "nova_rabbitmq_userid - nova_oslomsg_rpc_vhost replaces nova_rabbitmq_vhost - " "nova_oslomsg_notify_servers replaces nova_rabbitmq_telemetry_servers - " "nova_oslomsg_notify_port replaces nova_rabbitmq_telemetry_port - " "nova_oslomsg_notify_use_ssl replaces nova_rabbitmq_telemetry_use_ssl - " "nova_oslomsg_notify_userid replaces nova_rabbitmq_telemetry_userid - " "nova_oslomsg_notify_vhost replaces nova_rabbitmq_telemetry_vhost - " "nova_oslomsg_notify_password replaces nova_rabbitmq_telemetry_password" msgstr "" #: ../../:1402 stable/stein>:1407 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "octavia_oslomsg_rpc_servers replaces octavia_rabbitmq_servers - " "octavia_oslomsg_rpc_port replaces octavia_rabbitmq_port - " "octavia_oslomsg_rpc_use_ssl replaces octavia_rabbitmq_use_ssl - " "octavia_oslomsg_rpc_userid replaces octavia_rabbitmq_userid - " "octavia_oslomsg_rpc_vhost replaces octavia_rabbitmq_vhost - " "octavia_oslomsg_notify_servers replaces octavia_rabbitmq_telemetry_servers - " "octavia_oslomsg_notify_port replaces octavia_rabbitmq_telemetry_port - " "octavia_oslomsg_notify_use_ssl replaces octavia_rabbitmq_telemetry_use_ssl - " "octavia_oslomsg_notify_userid replaces octavia_rabbitmq_telemetry_userid - " "octavia_oslomsg_notify_vhost replaces octavia_rabbitmq_telemetry_vhost - " "octavia_oslomsg_notify_password replaces octavia_rabbitmq_telemetry_password" msgstr "" #: ../../:1308 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "sahara_oslomsg_rpc_servers replaces sahara_rabbitmq_servers - " "sahara_oslomsg_rpc_port replaces sahara_rabbitmq_port - " "sahara_oslomsg_rpc_use_ssl replaces sahara_rabbitmq_use_ssl - " "sahara_oslomsg_rpc_userid replaces sahara_rabbitmq_userid - " "sahara_oslomsg_rpc_vhost replaces sahara_rabbitmq_vhost - " "sahara_oslomsg_notify_servers replaces sahara_rabbitmq_telemetry_servers - " "sahara_oslomsg_notify_port replaces sahara_rabbitmq_telemetry_port - " "sahara_oslomsg_notify_use_ssl replaces sahara_rabbitmq_telemetry_use_ssl - " "sahara_oslomsg_notify_userid replaces sahara_rabbitmq_telemetry_userid - " "sahara_oslomsg_notify_vhost replaces sahara_rabbitmq_telemetry_vhost" msgstr "" #: ../../:1166 stable/stein>:1298 msgid "" "The rabbitmq server parameters have been replaced by corresponding oslo." "messaging RPC and Notify parameters in order to abstract the messaging " "service from the actual backend server deployment. - " "trove_oslomsg_rpc_servers replaces trove_rabbitmq_servers - " "trove_oslomsg_rpc_port replaces trove_rabbitmq_port - " "trove_oslomsg_rpc_use_ssl replaces trove_rabbitmq_use_ssl - " "trove_oslomsg_rpc_userid replaces trove_rabbitmq_userid - " "trove_oslomsg_rpc_vhost replaces trove_rabbitmq_vhost - added " "trove_oslomsg_notify_servers - added trove_oslomsg_notify_port - added " "trove_oslomsg_notify_use_ssl - added trove_oslomsg_notify_userid - added " "trove_oslomsg_notify_vhost - added trove_oslomsg_notify_password" msgstr "" #: ../../:2983 msgid "" "The rabbitmq_server role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option ``rabbitmq_package_state`` " "should be set to ``present``." msgstr "" #: ../../:2237 msgid "" "The rabbitmq_server role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``rabbitmq_package_state`` to ``present``." msgstr "" #: ../../:1772 msgid "" "The repo build process is now able to make use of a pre-staged git cache. If " "the ``/var/www/repo/openstackgit`` folder on the repo server is found to " "contain existing git clones then they will be updated if they do not already " "contain the required SHA for the build." msgstr "" #: ../../:1984 msgid "" "The repo build process is now able to support building and synchronizing " "artifacts for multiple CPU architectures. Build artifacts are now tagged " "with the appropriate CPU architecture by default, and synchronization of " "build artifacts from secondary, architecture-specific repo servers back to " "the primary repo server is supported." msgstr "" #: ../../:1776 msgid "" "The repo build process is now able to synchronize a git cache from the " "deployment node to the repo server. The git cache path on the deployment " "node is set using the variable ``repo_build_git_cache``. If the deployment " "node hosts the repo container, then the folder will be symlinked into the " "bind mount for the repo container. If the deployment node does not host the " "repo container, then the contents of the folder will be synchronised into " "the repo container." msgstr "" #: ../../:1455 msgid "" "The repo build process no longer builds packaged venvs. Instead, the venvs " "are created on the target hosts as the install process for each service " "needs to. This opens up the opportunity for roles to be capable of creating " "multiple venvs, and for any role to create venvs - neither of these options " "were possible in previous releases." msgstr "" #: ../../:2265 msgid "" "The repo build process now has the ability to store the pip sources within " "the build archive. This ability is useful when deploying environments that " "are \"multi-architecture\", \"multi-distro\", or \"multi-interpreter\" where " "specific pre-build wheels may not be enough to support all of the deployment." " To enable the ability to store the python source code within a given " "release, set the new option ``repo_build_store_pip_sources`` to ``true``." msgstr "" #: ../../:433 origin/stable/ocata>:651 #: stable/pike>:1706 msgid "" "The repo build process now only has the following tags, providing a clear " "path for each deliverable. The tag ``repo-build-install`` completes the " "installation of required packages. The tag ``repo-build-wheels`` completes " "the wheel build process. The tag ``repo-build-venvs`` completes the venv " "build process. Finally, the tag ``repo-build-index`` completes the manifest " "preparation and indexing of the os-releases and links folders." msgstr "" #: ../../:2335 msgid "" "The repo build process now selectively builds python packages based on " "whether each OpenStack service group has any hosts in it. If there are no " "hosts in the group, the list of python packages for the service will not be " "built. This behaviour can be optionally changed to force all python packages " "to be built by setting ``repo_build_wheel_selective`` to ``no``." msgstr "" #: ../../:2331 msgid "" "The repo build process now selectively builds venvs based on whether each " "OpenStack service group has any hosts in it. If there are no hosts in the " "group, the venv will not be built. This behaviour can be optionally changed " "to force all venvs to be built by setting ``repo_build_venv_selective`` to " "``yes``." msgstr "" #: ../../:2327 msgid "" "The repo build process now selectively clones git repositories based on " "whether each OpenStack service group has any hosts in it. If there are no " "hosts in the group, the git repo for the service will not be cloned. This " "behaviour can be optionally changed to force all git repositories to be " "cloned by setting ``repo_build_git_selective`` to ``no``." msgstr "" #: ../../:1988 msgid "" "The repo install process is now able to support building and synchronizing " "artifacts for multiple CPU architectures. To support multiple architectures, " "one or more repo servers must be created for each CPU architecture in the " "deployment. When multiple CPU architectures are detected among the repo " "servers, the repo-discovery process will automatically assign a repo master " "to perform the build process for each architecture." msgstr "" #: ../../:837 origin/stable/newton>:855 #: origin/stable/ocata>:1249 origin/stable/ocata>:1282 stable/pike>:1312 msgid "" "The repo server file system structure has been updated to allow for multiple " "Operating systems running multiple architectures to be run at the same time " "and served from a single server without impacting pools, venvs, wheel " "archives, and manifests. The new structure follows the following pattern " "`$RELEASE/$OS_TYPE-$ARCH` and has been applied to *os-releases*, *venvs*, " "and *pools*." msgstr "" #: ../../:734 msgid "" "The repo server hosts will stop and uninstall existing lsyncd and rsync " "services from the repo server hosts. This functionality will be replaced by " "default with a glusterfs shared filesystem. If a deployment uses a firewall " "on the control plane, the rules should be updated to allow the glusterfs " "traffic between the repo server hosts. Alternative external shared " "filesystems (eg NFS, cephfs, others) may be used if required and the new " "variables `repo_server_systemd_mounts` and " "`openstack_repo_server_enable_glusterfs` allow a deployment to override the " "default use of glusterfs." msgstr "" #: ../../:1047 stable/train>:430 #: stable/ussuri>:588 msgid "" "The repo server no longer uses pypiserver, so it has been removed. Along " "with this, the following variables have also been removed." msgstr "" #: ../../:2269 msgid "" "The repo server now has a Package Cache service for distribution packages. " "To leverage the cache, deployers will need to configure the package manager " "on all hosts to use the cache as a proxy. If a deployer would prefer to " "disable this service, the variable ``repo_pkg_cache_enabled`` should be set " "to ``false``." msgstr "" #: ../../:763 msgid "" "The repo server now implements nginx as a reverse proxy for python packages " "sourced from pypi. The initial query will be to a local deployment of " "pypiserver in order to serve any locally built packages, but if the package " "is not available locally it will retry the query against the upstream pypi " "mirror set in the variable ``repo_nginx_pypi_upstream`` (defaults to pypi) " "and cache the response." msgstr "" #: ../../:1804 msgid "The repo server will now be used as a package manager cache." msgstr "" #: ../../:287 stable/rocky>:1419 #: stable/stein>:1424 msgid "" "The repo server's reverse proxy for pypi has now been removed, leaving only " "the pypiserver to serve packages already on the repo server. The attempt to " "reverse proxy upstream pypi turned out to be very unstable with increased " "complexity for deployers using proxies or offline installs. With this, the " "variables ``repo_nginx_pypi_upstream`` and ``repo_nginx_proxy_cache_path`` " "have also been removed." msgstr "" #: ../../:620 msgid "" "The repo-clone-mirror.yml file is being deprecated, effective immediately. " "The playbook itself has been changed to no longer sync and will be removed " "from the tree in the Mitaka branch." msgstr "" #: ../../:162 origin/stable/newton>:3484 msgid "" "The repo_build play now correctly evaluates environment variables configured " "in /etc/environment. This enables deployments in an environment with http " "proxies." msgstr "" #: ../../:2919 msgid "" "The repo_build role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``repo_build_package_state`` should be " "set to ``present``." msgstr "" #: ../../:2173 msgid "" "The repo_build role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``repo_build_package_state`` to ``present``." msgstr "" #: ../../:2963 msgid "" "The repo_server role always checks whether the latest package is installed " "when executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``repo_server_package_state`` should be " "set to ``present``." msgstr "" #: ../../:2217 msgid "" "The repo_server role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``repo_server_package_state`` to ``present``." msgstr "" #: ../../:349 msgid "" "The repository server can now retrieve and cache upper-constraints files and " "serve them as required to pip during the build of python wheels. By default " "the relevant version of upper-constraints will be downloaded once from https:" "//releases.openstack.org/constraints/upper/, or the url in a new override " "user_requirements_git_url. Additional constraints files can be placed in /" "etc/openstack_deploy/upper-constraints on the deploy host and these will be " "copied to the repo server and will be available to reference in other " "overrides such as magnum_upper_constraints_url. This is useful if deploying " "a different branch of a service such as magnum/master onto a deployment of " "openstack/victoria. If the target hosts are in an air-gapped environment, " "setting requirements_git_repo to an empty string will disable downloading of " "upper-constraints to the repo server and rely on the deployer providing " "suitable copies of upper-constraints in through the deploy host /etc/" "openstack_deploy/upper-constraints directory." msgstr "" #: ../../:146 msgid "" "The requirements version has bumped to pull in os-vif 1.15.2, which contains " "the fix for OSSA-2019-004 / CVE-2019-15753. Operators using linuxbridge " "networking (the default in openstack-ansible) should update immediately. The " "fixed package will be installed in the nova venv upon re-deployment of nova " "using the os-nova-install.yml playbook. Afterwards, verify that the ageing " "timer on neutron-controlled linux bridges displays as \"300.00\" raher than " "\"0.00\" using ``brctl showstp ``." msgstr "" #: ../../:1477 msgid "" "The role now enables auditing during early boot to comply with the " "requirements in V-38438. By default, the GRUB configuration variables in ``/" "etc/default/grub.d/`` will be updated and the active ``grub.cfg`` will be " "updated." msgstr "" #: ../../:1463 stable/pike>:1467 msgid "" "The role now supports SUSE based distributions. Required packages can now be " "installed using the `zypper` package manager." msgstr "" #: ../../:77 unmaintained/victoria>:381 msgid "" "The role now supports creating system scoped credentials alongside project " "scoped credentials. The default behavior of the role did not changed, until " "``openrc_system_scope`` variable was set to ``true``. If the " "``openrc_system_scope`` is ``true`` the default cloud in clouds.yaml will " "set to system scoped credentials and another credentials named " "``default_project_scope`` will get created with project scoped credentials. " "Due to usage of openrc file in other roles, the opposite logic applies to " "openrc files, which means if ``openrc_system_scope`` is set to ``true`` the " "credentials in openrc will set to project scoped credentials and another " "openrc filec named ``openrc.system_scope`` will get created with system " "scoped credentials and will be placed in destination of " "``openrc_system_file_dest`` variable." msgstr "" #: ../../:741 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``aodh_install_method`` variable to " "``distro``." msgstr "" #: ../../:776 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``barbican_install_method`` variable to " "``distro``." msgstr "" #: ../../:769 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``ceilometer_install_method`` variable " "to ``distro``." msgstr "" #: ../../:727 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``cinder_install_method`` variable to " "``distro``.--" msgstr "" #: ../../:748 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``designate_install_method`` variable " "to ``distro``." msgstr "" #: ../../:734 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``glance_install_method`` variable to " "``distro``." msgstr "" #: ../../:720 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``heat_install_method`` variable to " "``distro``." msgstr "" #: ../../:783 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``keystone_install_method`` variable to " "``distro``." msgstr "" #: ../../:790 stable/stein>:682 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``neutron_install_method`` variable to " "``distro``." msgstr "" #: ../../:762 stable/rocky>:797 stable/stein>:675 #: stable/stein>:689 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``nova_install_method`` variable to " "``distro``." msgstr "" #: ../../:255 stable/ussuri>:357 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``octavia_install_method`` variable to " "``distro``." msgstr "" #: ../../:755 msgid "" "The role now supports using the distribution packages for the OpenStack " "services instead of the pip ones. This feature is disabled by default and " "can be enabled by simply setting the ``swift_install_method`` variable to " "``distro``." msgstr "" #: ../../:520 stable/queens>:1117 msgid "" "The role now syncs the LXC packages down from COPR to each host and builds a " "local LXC package repository in `/opt/thm-lxc2.0`. This greatly reduces the " "amount of times that packages must be downloaded from the COPR server during " "deployments, which will reduce failures until the packages can be hosted " "with a more reliable source." msgstr "" #: ../../:273 origin/stable/mitaka>:599 #: origin/stable/newton>:3349 msgid "" "The role previously did not restart the audit daemon after generating a new " "rules file. The `bug `_ has been fixed " "and the audit daemon will be restarted after any audit rule changes." msgstr "" #: ../../:94 origin/stable/mitaka>:148 #: origin/stable/newton>:3126 msgid "The rsyslog.conf is now using v7+ style configuration settings" msgstr "" #: ../../:2955 msgid "" "The rsyslog_client role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option " "``rsyslog_client_package_state`` should be set to ``present``." msgstr "" #: ../../:2209 msgid "" "The rsyslog_client role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``rsyslog_client_package_state`` to ``present``." msgstr "" #: ../../:2911 msgid "" "The rsyslog_server role always checks whether the latest package is " "installed when executed. If a deployer wishes to change the check to only " "validate the presence of the package, the option " "``rsyslog_server_package_state`` should be set to ``present``." msgstr "" #: ../../:2165 msgid "" "The rsyslog_server role now supports the ability to configure whether apt/" "yum tasks install the latest available package, or just ensure that the " "package is present. The default action is to ensure that the latest package " "is present. The action taken may be changed to only ensure that the package " "is present by setting ``rsyslog_server_package_state`` to ``present``." msgstr "" #: ../../:2931 msgid "" "The security role always checks whether the latest package is installed when " "executed. If a deployer wishes to change the check to only validate the " "presence of the package, the option ``security_package_state`` should be set " "to ``present``." msgstr "" #: ../../:302 origin/stable/mitaka>:735 #: origin/stable/newton>:3410 msgid "" "The security role now handles ``ssh_config`` files that contain ``Match`` " "stanzas. A marker is added to the configuration file and any new " "configuration items will be added below that marker. In addition, the " "configuration file is validated for each change to the ssh configuration " "file." msgstr "" #: ../../:1693 msgid "" "The security role now has tasks that will disable the graphical interface on " "a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7)." " These changes take effect after a reboot." msgstr "" #: ../../:2185 msgid "" "The security role now supports the ability to configure whether apt/yum " "tasks install the latest available package, or just ensure that the package " "is present. The default action is to ensure that the latest package is " "present. The action taken may be changed to only ensure that the package is " "present by setting ``security_package_state`` to ``present``." msgstr "" #: ../../:285 origin/stable/mitaka>:635 #: origin/stable/newton>:3393 msgid "" "The security role previously set the permissions on all audit log files in " "``/var/log/audit`` to ``0400``, but this prevents the audit daemon from " "writing to the active log file. This will prevent ``auditd`` from starting " "or restarting cleanly." msgstr "" #: ../../:1903 msgid "" "The security role will accept the currently installed version of a package " "rather than attempting to update it. This reduces unexpected changes on the " "system from subsequent runs of the security role. Deployers can still set " "``security_package_state`` to ``latest`` to ensure that all packages " "installed by the security role are up to date." msgstr "" #: ../../:1319 stable/pike>:2043 msgid "" "The security role will no longer fix file permissions and ownership based on " "the contents of the RPM database by default. Deployers can opt in for these " "changes by setting ``security_reset_perm_ownership`` to ``yes``." msgstr "" #: ../../:982 origin/stable/ocata>:1778 msgid "" "The security-hardening playbook hosts target can now be filtered using the " "``security_host_group`` var." msgstr "" #: ../../:488 stable/stein>:249 msgid "" "The service setup in keystone for aodh will now be executed through " "delegation to the ``aodh_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:500 stable/stein>:261 msgid "" "The service setup in keystone for barbican will now be executed through " "delegation to the ``barbican_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:520 stable/stein>:290 msgid "" "The service setup in keystone for ceilometer will now be executed through " "delegation to the ``ceilometer_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:539 stable/stein>:310 msgid "" "The service setup in keystone for cinder will now be executed through " "delegation to the ``cinder_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:268 msgid "" "The service setup in keystone for cloudkitty will now be executed through " "delegation to the ``cloudkitty_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:559 stable/stein>:371 msgid "" "The service setup in keystone for designate will now be executed through " "delegation to the ``designate_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:585 stable/stein>:417 msgid "" "The service setup in keystone for glance will now be executed through " "delegation to the ``glance_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:597 stable/stein>:429 msgid "" "The service setup in keystone for gnocchi will now be executed through " "delegation to the ``gnocchi_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:609 stable/stein>:441 msgid "" "The service setup in keystone for heat will now be executed through " "delegation to the ``heat_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:621 stable/stein>:453 msgid "" "The service setup in keystone for horizon will now be executed through " "delegation to the ``horizon_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:633 stable/stein>:487 msgid "" "The service setup in keystone for ironic will now be executed through " "delegation to the ``ironic_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:657 stable/stein>:521 msgid "" "The service setup in keystone for magnum will now be executed through " "delegation to the ``magnum_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:676 stable/stein>:596 msgid "" "The service setup in keystone for neutron will now be executed through " "delegation to the ``neutron_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:688 stable/stein>:651 msgid "" "The service setup in keystone for nova will now be executed through " "delegation to the ``nova_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:700 stable/stein>:663 msgid "" "The service setup in keystone for octavia will now be executed through " "delegation to the ``octavia_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:881 stable/stein>:747 msgid "" "The service setup in keystone for sahara will now be executed through " "delegation to the ``sahara_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:901 stable/stein>:759 msgid "" "The service setup in keystone for swift will now be executed through " "delegation to the ``swift_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:917 stable/stein>:780 msgid "" "The service setup in keystone for tempest will now be executed through " "delegation to the ``tempest_service_setup_host`` which, by default, is " "``localhost`` (the deploy host). Deployers can opt to rather change this to " "the utility container by implementing the following override in " "``user_variables.yml``." msgstr "" #: ../../:645 stable/stein>:499 msgid "" "The service updates for keystone will now be executed through delegation to " "the ``keystone_service_setup_host`` which, by default, is ``localhost`` (the " "deploy host). Deployers can opt to rather change this to the utility " "container by implementing the following override in ``user_variables.yml``." msgstr "" #: ../../:505 origin/stable/newton>:3361 msgid "" "The standard collectstatic and compression process in the os_horizon role " "now happens after horizon customizations are installed, so that all static " "resources will be collected and compressed." msgstr "" #: ../../:848 msgid "" "The structure of ``haproxy_default_services`` and ``haproxy_extra_services`` " "was simplified. Now it's just a list of dicts. It has the same format as " "``haproxy_service_configs``." msgstr "" #: ../../:981 stable/stein>:900 msgid "" "The supported upgrade path from Xenial to Bionic is via re-installation of " "the host OS across all nodes and redeployment of the required services. The " "Rocky branch of OSA is intended as the transition point for such upgrades " "from Xenial to Bionic. At this time there is no support for in-place " "operating system upgrades (typically via ``do-release-upgrade``)." msgstr "" #: ../../:444 stable/pike>:2129 msgid "" "The sysctl configuration task was not skipping configurations where " "``enabled`` was set to ``no``. Instead, it was removing configurations when " "``enabled: no`` was set." msgstr "" #: ../../:771 msgid "" "The tacker dashboard is available in Horizon. Deployers can enable the panel " "by setting the following Ansible variable:" msgstr "" #: ../../:558 msgid "" "The tag options when creating an LXC container have been simplified. The two " "tags now supported by the `lxc_container_create` role are **lxc-" "{create,config}**." msgstr "" #: ../../:521 origin/stable/ocata>:890 #: stable/pike>:935 msgid "" "The task dropping the aodh systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:947 msgid "" "The task dropping the barbican systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:1015 msgid "" "The task dropping the ceilometer systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and pollute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:533 origin/stable/ocata>:906 #: stable/pike>:1023 msgid "" "The task dropping the ceilometer systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:545 origin/stable/ocata>:918 #: stable/pike>:1059 msgid "" "The task dropping the cinder systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:857 msgid "" "The task dropping the designate systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:553 origin/stable/ocata>:926 #: stable/pike>:1162 msgid "" "The task dropping the glance systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:565 origin/stable/ocata>:938 #: stable/pike>:1182 msgid "" "The task dropping the gnocchi systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:577 origin/stable/ocata>:950 #: stable/pike>:1211 msgid "" "The task dropping the heat systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:589 origin/stable/ocata>:962 #: stable/pike>:1247 msgid "" "The task dropping the ironic systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:601 origin/stable/ocata>:974 #: stable/pike>:1259 msgid "" "The task dropping the keystone systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:617 origin/stable/ocata>:986 #: stable/pike>:1304 msgid "" "The task dropping the magnum systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:629 origin/stable/ocata>:998 #: stable/pike>:1324 msgid "" "The task dropping the neutron systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:641 origin/stable/ocata>:1010 #: stable/pike>:1347 msgid "" "The task dropping the nova systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:1386 msgid "" "The task dropping the octavia systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:1026 stable/pike>:1432 msgid "" "The task dropping the sahara systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:653 origin/stable/ocata>:1038 #: stable/pike>:1475 msgid "" "The task dropping the swift systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:1046 stable/pike>:1491 msgid "" "The task dropping the trove systemd unit files now uses the " "``config_template`` action plugin allowing deployers access to customize the " "unit files as they see fit without having to load extra options into the " "defaults and polute the generic systemd unit file with jinja2 variables and " "conditionals." msgstr "" #: ../../:290 origin/stable/mitaka>:640 #: origin/stable/newton>:3398 msgid "" "The task now removes any permissions that are not allowed by the STIG. Any " "log files that meet or exceed the STIG requirements will not be modified." msgstr "" #: ../../:1002 msgid "" "The tasks creating a keystone service user have been removed, along with " "related variables ``keystone_service_user_name`` and " "``keystone_service_password``. This user can be deleted in existing " "deployments." msgstr "" #: ../../:667 msgid "" "The tasks in the os_horizon role will determine which LBaaS version is in " "use (via ``neutron_plugin_base``) and activate the correct panel for LBaaS " "v1 or v2." msgstr "" #: ../../:1325 stable/pike>:2061 msgid "" "The tasks that search for ``.shosts`` and ``shosts.equiv`` files (STIG ID: " "RHEL-07-040330) are now skipped by default. The search takes a long time to " "complete on systems with lots of files and it also causes a significant " "amount of disk I/O while it runs." msgstr "" #: ../../:802 msgid "" "The tasks within the ansible-hardening role are now based on Version 1, " "Release 3 of the Red Hat Enteprise Linux Security Technical Implementation " "Guide." msgstr "" #: ../../:941 stable/stein>:808 msgid "" "The trove service setup in keystone will now be executed through delegation " "to the ``trove_service_setup_host`` which, by default, is ``localhost`` (the " "deploy host). Deployers can opt to rather change this to the utility " "container by implementing the following override in ``user_variables.yml``." msgstr "" #: ../../:58 msgid "" "The upgrade playbook `nova-flavor-migration.yml` will perform a migration of " "nova flavor data. This will need to be completed prior to upgrading to " "Liberty. It is recommended that Kilo be deployed from the `eol-kilo` tag " "prior to upgrading to Liberty to ensure that this task is completed " "successfully." msgstr "" #: ../../:848 msgid "" "The upgrade process will backup and re-configure the /etc/openstack_deploy " "directory. This includes inserting new environment details, updating changed " "variable names, and generating newly added secrets." msgstr "" #: ../../:221 msgid "" "The upgrade step to remove legacy MariaDB apt sources was failing due to the " "destruction of the repo containers. This issue has now been fixed by " "skipping the repo containers in this step." msgstr "" #: ../../:804 msgid "" "The upstream MariaDB init script has replaced the custom init script that " "was provided by OpenStack-Ansible in previous versions." msgstr "" #: ../../:814 msgid "" "The upstream noVNC developers recommend that the keymap be automatically " "detected for virtual machine consoles. The defaults for three Ansible " "variables have been removed:" msgstr "" #: ../../:1937 msgid "" "The upstream noVNC developers recommend that the keymap be automatically " "detected for virtual machine consoles. Three Ansible variables have been " "removed:" msgstr "" #: ../../:131 stable/queens>:349 stable/rocky>:1055 msgid "" "The use of the ``apt_package_pinning`` role as a meta dependency has been " "removed from the rabbitmq_server role. While the package pinning role is " "still used, it will now only be executed when the apt task file is executed." msgstr "" #: ../../:647 msgid "" "The use of the nginx package repository on RedHat derived operating systems " "is no longer required as there is a new enough version of the nginx package " "in the standard distro repos now. The variables ``repo_centos_nginx_mirror`` " "and ``repo_centos_nginx_key`` are removed from the repo_server role and no " "longer have any effect." msgstr "" #: ../../:1145 msgid "The use_neutron option was marked to be removed in sahara." msgstr "" #: ../../:1739 msgid "" "The var ``lxc_container_ssh_delay`` along with SSH specific ping checks have " "been removed in favor of using Ansible's wait_for_connection module, which " "will not rely on SSH to the container to verify connectivity. A new variable " "called ``lxc_container_wait_params`` has been added to allow configuration " "of the parameters passed to the ``wait_for_connection`` module." msgstr "" #: ../../:1898 msgid "" "The var ``lxc_container_ssh_delay`` along with SSH specific ping checks have " "been removed in favor of using Ansible's wait_for_connection module, which " "will not rely on SSH to the container." msgstr "" #: ../../:836 msgid "" "The variable 'haproxy_ssl_cipher_suite' is deprecated in favour of " "'haproxy_ssl_cipher_suite_tls12' which will continue to manage configuration " "of ciphers for TLS v1.2 and earlier." msgstr "" #: ../../:848 msgid "" "The variable 'horizon_ssl_cipher_suite' is deprecated in favour of " "'horizon_ssl_cipher_suite_tls12' which will continue to manage configuration " "of ciphers for TLS v1.2 and earlier." msgstr "" #: ../../:830 msgid "" "The variable 'keystone_ssl_cipher_suite' is deprecated in favour of " "'keystone_ssl_cipher_suite_tls12' which will continue to manage " "configuration of ciphers for TLS v1.2 and earlier." msgstr "" #: ../../:842 msgid "" "The variable 'ssl_cipher_suite' is deprecated in favour of " "'ssl_cipher_suite_tls12' which will continue to manage configuration of " "ciphers for TLS v1.2 and earlier." msgstr "" #: ../../:2799 msgid "" "The variable ``aodh_apt_packages`` has been renamed to " "``aodh_distro_packages``." msgstr "" #: ../../:1023 stable/stein>:1123 msgid "" "The variable ``aodh_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:1028 stable/stein>:1128 msgid "" "The variable ``barbican_requires_pip_packages`` is no longer required and " "has therefore been removed." msgstr "" #: ../../:2867 msgid "" "The variable ``ceilometer_apt_packages`` has been renamed to " "``ceilometer_distro_packages``." msgstr "" #: ../../:2871 msgid "" "The variable ``ceilometer_developer_mode_apt_packages`` has been renamed to " "``ceilometer_developer_mode_distro_packages``." msgstr "" #: ../../:2803 msgid "" "The variable ``cinder_apt_packages`` has been renamed to " "``cinder_distro_packages``." msgstr "" #: ../../:2811 msgid "" "The variable ``cinder_lvm_volume_apt_packages`` has been renamed to " "``cinder_lvm_volume_distro_packages``." msgstr "" #: ../../:1045 stable/stein>:1152 msgid "" "The variable ``cinder_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2807 msgid "" "The variable ``cinder_volume_apt_packages`` has been renamed to " "``cinder_volume_distro_packages``." msgstr "" #: ../../:672 msgid "" "The variable ``cloudkitty_requires_pip_packages`` is no longer required and " "has therefore been removed." msgstr "" #: ../../:1050 stable/stein>:1166 msgid "" "The variable ``designate_requires_pip_packages`` is no longer required and " "has therefore been removed." msgstr "" #: ../../:2648 msgid "" "The variable ``galera_client_apt_packages`` has been replaced by " "``galera_client_distro_packages``." msgstr "" #: ../../:2831 msgid "" "The variable ``galera_packages`` has been renamed to " "``galera_server_mariadb_distro_packages``." msgstr "" #: ../../:2827 msgid "" "The variable ``galera_pre_packages`` has been renamed to " "``galera_server_required_distro_packages``." msgstr "" #: ../../:1180 stable/train>:513 #: stable/ussuri>:686 msgid "" "The variable ``galera_xtrabackup_threads`` has been renamed to " "``galera_mariabackup_threads`` to reflect the change in the SST provider." msgstr "" #: ../../:2791 msgid "" "The variable ``glance_apt_packages`` has been renamed to " "``glance_distro_packages``." msgstr "" #: ../../:1064 stable/stein>:1195 msgid "" "The variable ``glance_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:1224 origin/stable/ocata>:2028 msgid "" "The variable ``gnocchi_required_pip_packages`` was incorrectly named and has " "been renamed to ``gnocchi_requires_pip_packages`` to match the standard " "across all roles." msgstr "" #: ../../:1069 stable/stein>:1200 msgid "" "The variable ``gnocchi_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2839 msgid "" "The variable ``haproxy_packages`` has been renamed to " "``haproxy_distro_packages``." msgstr "" #: ../../:2835 msgid "" "The variable ``haproxy_pre_packages`` has been renamed to " "``haproxy_required_distro_packages``." msgstr "" #: ../../:2863 msgid "" "The variable ``heat_apt_packages`` has been renamed to " "``heat_distro_packages``." msgstr "" #: ../../:1074 stable/stein>:1205 msgid "" "The variable ``heat_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2795 msgid "" "The variable ``horizon_apt_packages`` has been renamed to " "``horizon_distro_packages``." msgstr "" #: ../../:1079 stable/stein>:1210 msgid "" "The variable ``horizon_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2815 msgid "" "The variable ``ironic_api_apt_packages`` has been renamed to " "``ironic_api_distro_packages``." msgstr "" #: ../../:2819 msgid "" "The variable ``ironic_conductor_apt_packages`` has been renamed to " "``ironic_conductor_distro_packages``." msgstr "" #: ../../:2823 msgid "" "The variable ``ironic_conductor_standalone_apt_packages`` has been renamed " "to ``ironic_conductor_standalone_distro_packages``." msgstr "" #: ../../:1084 stable/stein>:1215 msgid "" "The variable ``ironic_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:797 stable/pike>:1873 msgid "" "The variable ``keepalived_uca_enable`` is deprecated, and replaced by " "``keepalived_ubuntu_src``. The ``keepalived_uca_enable`` variable will be " "removed in future versions of the keepalived role. The value of " "``keepalived_ubuntu_src`` should be either \"uca\", \"ppa\", or \"native\", " "for respectively installing from the Ubuntu Cloud archive, from keepalived " "stable ppa, or not installing from an external source." msgstr "" #: ../../:806 stable/pike>:1882 msgid "" "The variable ``keepalived_use_latest_stable`` is deprecated, and replaced by " "``keepalived_package_state``. The ``keepalived_use_latest_stable`` variable " "will be removed in future versions of the keepalived role. The value of " "``keepalived_package_state`` should be either \"latest\" or \"present\"." msgstr "" #: ../../:2775 msgid "" "The variable ``keystone_apt_packages`` has been renamed to " "``keystone_distro_packages``." msgstr "" #: ../../:2787 msgid "" "The variable ``keystone_developer_apt_packages`` has been renamed to " "``keystone_developer_mode_distro_packages``." msgstr "" #: ../../:332 current stable/2023.1>:103 #: stable/2023.2>:124 stable/2024.1>:204 msgid "" "The variable ``keystone_external_ssl`` was deprecated and is no longer used. " "You still can control if communication between HAProxy and Keystone should " "be covered with TLS through ``keystone_backend_ssl`` or ``haproxy_ssl``/" "``haproxy_ssl_all_vips`` for communication between clients and HAProxy on " "frontend." msgstr "" #: ../../:2779 msgid "" "The variable ``keystone_idp_apt_packages`` has been renamed to " "``keystone_idp_distro_packages``." msgstr "" #: ../../:1117 stable/stein>:1252 msgid "" "The variable ``keystone_requires_pip_packages`` is no longer required and " "has therefore been removed." msgstr "" #: ../../:2783 msgid "" "The variable ``keystone_sp_apt_packages`` has been renamed to " "``keystone_sp_distro_packages``." msgstr "" #: ../../:2879 msgid "" "The variable ``lxc_apt_packages`` has been renamed to " "``lxc_hosts_distro_packages``." msgstr "" #: ../../:1648 msgid "" "The variable ``lxc_cache_environment`` has been added. This dictionary can " "be overridden by deployers to set HTTP proxy environment variables that will " "be applied to all lxc container download tasks." msgstr "" #: ../../:3044 msgid "" "The variable ``lxc_container_release`` has been removed from the ``lxc-" "container-create.yml`` playbook as it is no longer consumed by the container " "creation process." msgstr "" #: ../../:335 msgid "" "The variable ``lxc_host_machine_volume_size`` is used to set the size of the " "default sparse file as well as define a limit within the ``machinectl`` " "quota system. When the ``machinectl`` quota system is enabled deployers " "should appropriately set this value to the size of the container volume, " "even when not using a sparse file." msgstr "" #: ../../:313 msgid "" "The variable ``lxc_host_machine_volume_size`` now accepts any valid size " "modifier acceptable by ``truncate -s`` and ``machinectl set-limit``. prior " "to this change the option assumed an integer was set for some value in " "gigabytes. All acceptable values can be seen within the `documentation for " "machinectl `_" msgstr "" #: ../../:1292 msgid "" "The variable ``lxc_image_cache_server_mirrors`` has been added to the " "\"lxc_hosts\" role. This is a list type variable and gives deployers the " "ability to specify multiple lxc-image mirrors at the same time." msgstr "" #: ../../:1902 msgid "" "The variable ``lxc_image_cache_server`` has been deprecated in the " "\"lxc_hosts\" role. By default this value will pull the first item out of " "``lxc_image_cache_server_mirrors`` list which is only done for compatibility " "(legacy) purposes. The default string type variable, " "``lxc_image_cache_server``, will be removed from the \"lxc_hosts\" role in " "the in \"R\" release." msgstr "" #: ../../:48 stable/pike>:1296 msgid "" "The variable ``lxc_net_manage_iptables`` has been added. This variable can " "be overridden by deployers if system wide iptables rules are already in " "place or managed by deployers chioce." msgstr "" #: ../../:1127 stable/stein>:1266 msgid "" "The variable ``magnum_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2843 msgid "" "The variable ``memcached_apt_packages`` has been renamed to " "``memcached_distro_packages``." msgstr "" #: ../../:2672 msgid "" "The variable ``neutron_agent_mode`` has been removed from the ``os_neutron`` " "role. The appropriate value for ``l3_agent.ini`` is now determined based on " "the ``neutron_plugin_type`` and host group membership." msgstr "" #: ../../:2847 msgid "" "The variable ``neutron_apt_packages`` has been renamed to " "``neutron_distro_packages``." msgstr "" #: ../../:2859 msgid "" "The variable ``neutron_apt_remove_packages`` has been renamed to " "``neutron_remove_distro_packages``." msgstr "" #: ../../:1883 stable/pike>:1775 msgid "" "The variable ``neutron_dhcp_domain`` has been renamed to " "``neutron_dns_domain``." msgstr "" #: ../../:2703 msgid "" "The variable ``neutron_driver_firewall`` has been removed. The appropriate " "value for ``neutron.conf`` is now determined based on the " "``neutron_plugin_type``." msgstr "" #: ../../:2699 msgid "" "The variable ``neutron_driver_interface`` has been removed. The appropriate " "value for ``neutron.conf`` is now determined based on the " "``neutron_plugin_type``." msgstr "" #: ../../:2851 msgid "" "The variable ``neutron_lbaas_apt_packages`` has been renamed to " "``neutron_lbaas_distro_packages``." msgstr "" #: ../../:2695 msgid "" "The variable ``neutron_linuxbridge`` has been removed as it is no longer " "used." msgstr "" #: ../../:2707 msgid "" "The variable ``neutron_ml2_mechanism_drivers`` has been removed. The " "appropriate value for ml2_conf.ini is now determined based on the " "``neutron_plugin_type``." msgstr "" #: ../../:1139 stable/stein>:1271 msgid "" "The variable ``neutron_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:1137 msgid "" "The variable ``neutron_service_names`` has been removed. A more efficient " "way of determining the list of Neutron services for service restarts has " "been implemented." msgstr "" #: ../../:2855 msgid "" "The variable ``neutron_vpnaas_apt_packages`` has been renamed to " "``neutron_vpnaas_distro_packages``." msgstr "" #: ../../:73 stable/pike>:135 #: stable/queens>:353 stable/rocky>:1122 msgid "" "The variable ``nova_compute_pip_packages`` is no longer used and has been " "removed." msgstr "" #: ../../:1144 stable/stein>:1276 msgid "" "The variable ``nova_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:1160 stable/stein>:1292 msgid "" "The variable ``octavia_ansible_endpoint_type`` has been removed. The " "endpoint used for ansible tasks has been hard set to the 'admin' endpoint as " "is commonly used across all OSA roles." msgstr "" #: ../../:1154 stable/stein>:1286 msgid "" "The variable ``octavia_image_downloader`` has been removed. The image " "download now uses the same host designated by the " "``octavia_service_setup_host`` for the image download." msgstr "" #: ../../:1149 stable/stein>:1281 msgid "" "The variable ``octavia_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2883 msgid "" "The variable ``openstack_host_apt_packages`` has been renamed to " "``openstack_host_distro_packages``." msgstr "" #: ../../:1220 origin/stable/ocata>:1911 msgid "" "The variable ``proxy_env_url`` is now used by the apt-cacher-ng jinja2 " "template to set up an HTTP/HTTPS proxy if needed." msgstr "" #: ../../:3015 msgid "" "The variable ``rabbitmq_monitoring_password`` has been added to " "``user_secrets.yml``. If this variable does not exist, the RabbitMQ " "monitoring user will not be created." msgstr "" #: ../../:1921 msgid "" "The variable ``repo_build_pip_extra_index`` has been removed. The " "replacement list variable ``repo_build_pip_extra_indexes`` should be used " "instead." msgstr "" #: ../../:1429 stable/stein>:1475 msgid "" "The variable ``repo_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2498 msgid "" "The variable ``repo_server_packages`` that defines the list of packages " "required to install a repo server has been replaced by " "``repo_server_distro_packages``." msgstr "" #: ../../:3007 msgid "" "The variable ``rsyslog_client_packages`` has been replaced by " "``rsyslog_client_distro_packages``." msgstr "" #: ../../:3011 msgid "" "The variable ``rsyslog_server_packages`` has been replaced by " "``rsyslog_server_distro_packages``." msgstr "" #: ../../:1438 stable/stein>:1480 msgid "" "The variable ``sahara_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:2455 msgid "" "The variable ``security_audit_apparmor_changes`` is now renamed to " "``security_audit_mac_changes`` and is enabled by default. Setting " "``security_audit_mac_changes`` to ``no`` will disable syscall auditing for " "any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS)." "" msgstr "" #: ../../:2510 msgid "" "The variable ``security_sysctl_enable_tcp_syncookies`` has replaced " "``security_sysctl_tcp_syncookies`` and it is now a boolean instead of an " "integer. It is still enabled by default, but deployers can disable TCP " "syncookies by setting the following Ansible variable:" msgstr "" #: ../../:2875 msgid "" "The variable ``swift_apt_packages`` has been renamed to " "``swift_distro_packages``." msgstr "" #: ../../:1443 stable/stein>:1485 msgid "" "The variable ``swift_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:53 stable/stein>:1060 msgid "" "The variable ``tempest_image_dir_owner`` is removed in favour of using " "default ansible user to create the image directory." msgstr "" #: ../../:1453 stable/stein>:1495 msgid "" "The variable ``tempest_image_downloader`` has been removed. The image " "download now uses the same host designated by the " "``tempest_service_setup_host`` for the image download." msgstr "" #: ../../:1448 stable/stein>:1490 msgid "" "The variable ``tempest_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:1807 msgid "" "The variable ``trove_conductor_workers`` can be configured for defining the " "number of workers for the trove conductor service. The default value is half " "the number of vCPUs available on the machine with a capping value of 16." msgstr "" #: ../../:1459 stable/stein>:1501 msgid "" "The variable ``trove_requires_pip_packages`` is no longer required and has " "therefore been removed." msgstr "" #: ../../:494 msgid "" "The variable ``uwsgi_bind_address`` can now be a single IP address passed as " "a string, or a list of IP addresses passed in a yaml list to the uwsgi role. " "This allows uwsgi to listen on a specific set of IP addresses rather than " "just a single one." msgstr "" #: ../../:3074 msgid "" "The variable ``verbose`` has been removed. Deployers should rely on the " "``debug`` var to enable higher levels of logging." msgstr "" #: ../../:3070 msgid "" "The variable ``verbose`` has been removed. Deployers should rely on the " "``debug`` var to enable higher levels of memcached logging." msgstr "" #: ../../:991 stable/stein>:932 msgid "" "The variable `cinder_iscsi_helper` has been replaced by the new variable " "which is `cinder_target_helper` due to the fact that iscsi_helper has been " "deprecated in Cinder." msgstr "" #: ../../:494 msgid "" "The variable lxc_cache_map is removed as the lxc_hosts ansible role has only " "been able to create containers matching the host architecture and OS for " "several releases, and lxc_cache_map simply carried copies of data from " "ansible_facts." msgstr "" #: ../../:2557 msgid "" "The variable used to store the mysql password used by the ironic service " "account has been changed. The following variable:" msgstr "" #: ../../:886 origin/stable/newton>:3278 msgid "" "The variables ```galera_client_package_*``` and " "```galera_client_apt_percona_xtrabackup_*``` have been removed from the role " "as Xtrabackup is no longer deployed." msgstr "" #: ../../:1370 origin/stable/ocata>:1985 msgid "" "The variables ``aodh_requirements_git_repo`` and " "``aodh_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1989 msgid "" "The variables ``barbican_requirements_git_repo`` and " "``barbican_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:401 stable/stein>:1070 msgid "" "The variables ``ceilometer_oslomsg_rpc_servers`` and " "``ceilometer_oslomsg_notify_servers`` have been removed in favour of using " "``ceilometer_oslomsg_rpc_host_group`` and " "``ceilometer_oslomsg_notify_host_group`` instead." msgstr "" #: ../../:1378 origin/stable/ocata>:2005 msgid "" "The variables ``ceilometer_requirements_git_repo`` and " "``ceilometer_requirements_git_install_branch`` have been removed in favour " "of using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1354 origin/stable/ocata>:1965 msgid "" "The variables ``cinder_requirements_git_repo`` and " "``cinder_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:788 origin/stable/ocata>:1190 msgid "" "The variables ``cinder_sigkill_timeout`` and ``cinder_restart_wait`` have " "been deprecated and will be removed in Pike." msgstr "" #: ../../:1635 msgid "" "The variables ``cinder_sigkill_timeout`` and ``cinder_restart_wait`` have " "been removed. The previous default values have now been set in the template " "directly and can be adjusted by using the ``cinder_*_init_overrides`` " "variables which use the ``config_template`` task to change template defaults." "" msgstr "" #: ../../:601 msgid "" "The variables ``cloudkitty_requirements_git_repo`` and " "``cloudkitty_requirements_git_install_branch`` have been removed in favour " "of using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:865 origin/stable/ocata>:1305 #: stable/pike>:1869 msgid "" "The variables ``galera_client_apt_repo_url`` and " "``galera_client_yum_repo_url`` are deprecated in favour of the common " "variable ``galera_client_repo_url``." msgstr "" #: ../../:1362 origin/stable/ocata>:1977 msgid "" "The variables ``glance_requirements_git_repo`` and " "``glance_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1358 origin/stable/ocata>:1973 msgid "" "The variables ``gnocchi_requirements_git_repo`` and " "``gnocchi_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:2413 origin/stable/ocata>:1825 msgid "" "The variables ``haproxy_keepalived_(internal|external)_cidr`` now has a " "default set to ``169.254.(2|1).1/24``. This is to prevent Ansible undefined " "variable warnings. Deployers must set values for these variables for a " "working haproxy with keepalived environment when using more than one haproxy " "node." msgstr "" #: ../../:1346 origin/stable/ocata>:1953 msgid "" "The variables ``heat_requirements_git_repo`` and " "``heat_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1338 origin/stable/ocata>:1937 msgid "" "The variables ``horizon_requirements_git_repo`` and " "``horizon_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1342 origin/stable/ocata>:1945 msgid "" "The variables ``ironic_requirements_git_repo`` and " "``ironic_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1890 msgid "" "The variables ``keystone_apache_enabled`` and ``keystone_mod_wsgi_enabled`` " "have been removed and replaced with a single variable " "``keystone_web_server`` to optionally set the web server used for keystone." msgstr "" #: ../../:959 msgid "" "The variables ``keystone_memcached_servers`` and " "``keystone_cache_backend_argument`` have been deprecated in favor of " "``keystone_cache_servers``, a list of servers for caching purposes." msgstr "" #: ../../:1366 origin/stable/ocata>:1981 msgid "" "The variables ``keystone_requirements_git_repo`` and " "``keystone_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1350 origin/stable/ocata>:1957 msgid "" "The variables ``magnum_requirements_git_repo`` and " "``magnum_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1271 origin/stable/ocata>:1949 msgid "" "The variables ``neutron_requirements_git_repo`` and " "``neutron_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1283 origin/stable/ocata>:1997 msgid "" "The variables ``nova_lxd_requirements_git_repo`` and " "``nova_lxd_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1279 origin/stable/ocata>:1993 msgid "" "The variables ``nova_requirements_git_repo`` and " "``nova_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1133 msgid "" "The variables ``nova_scheduler_use_baremetal_filters`` and " "``nova_metadata_host`` have been removed, matching upstream nova changes. " "The ``nova_virt_types`` dict no longer needs the " "``nova_scheduler_use_baremetal_filters`` and ``nova_firewall_driver`` keys " "as well." msgstr "" #: ../../:1374 origin/stable/ocata>:2001 msgid "" "The variables ``rally_requirements_git_repo`` and " "``rally_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1275 origin/stable/ocata>:1961 msgid "" "The variables ``sahara_requirements_git_repo`` and " "``sahara_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1267 origin/stable/ocata>:1941 msgid "" "The variables ``swift_requirements_git_repo`` and " "``swift_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1263 origin/stable/ocata>:1933 msgid "" "The variables ``tempest_requirements_git_repo`` and " "``tempest_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:1969 msgid "" "The variables ``trove_requirements_git_repo`` and " "``trove_requirements_git_install_branch`` have been removed in favour of " "using the URL/path to the upper-constraints file using the variable " "``pip_install_upper_constraints`` instead." msgstr "" #: ../../:723 msgid "" "The variables `haproxy_ssl_self_signed_regen` and " "`haproxy_ssl_self_signed_subject` are removed and the equivalent " "functionaility from the ansible-role-pki variables should be used instead." msgstr "" #: ../../:507 msgid "" "The variables `tempest_test_includelist_file_path` and " "`tempest_test_excludelist_file_path` are renamed to " "`tempest_includelist_file_path` and `tempest_excludelist_file_path`. Any " "overrides using these variables should be updated to account for the new " "variable names." msgstr "" #: ../../:836 msgid "" "The variables beginning with ``openstack_host_systat_`` in the " "openstack_hosts role have been renamed to ``openstack_host_sysstat_``. This " "was done to better reflect their dependency to sysstat." msgstr "" #: ../../:553 msgid "" "The variables ironic_inspector_ipa_initrd_name and " "ironic_inspector_ipa_initrd_name are removed from the os_ironic role and " "more flexible functionality is now provided with the ironic_deplo_image_* " "variables. Review any overrides you have for the ironic service and adjust " "these new variables if necessary." msgstr "" #: ../../:1208 origin/stable/ocata>:1871 msgid "" "The variables used to produce the ``/etc/openstack-release`` file have been " "changed in order to improve consistency in the name spacing according to " "their purpose." msgstr "" #: ../../:1149 msgid "" "The vars plugin ``override_folder.py`` has been removed. With the move to " "Ansible 2.4 [\"https://review.openstack.org/#/c/522778\"] this plugin is no " "longer required. The functionality this plugin provided has been replaced " "with the native Ansible inventory plugin." msgstr "" #: ../../:2042 msgid "" "The vars to set ``source_sample_interval`` for the ``os_ceilometer`` role " "are deprecated and will be removed in the Queen cycle. To override these " "variables after Queen, utilize the ``ceilometer_pipeline_yaml_overrides`` " "file." msgstr "" #: ../../:760 msgid "The version of Erlang is kept constant using yum's versionlock plugin." msgstr "" #: ../../:341 msgid "" "The virtual machines will run correctly, but your are not able to access " "them via the console. There are three possible solutions to enable console " "access for existing virtual machines; disable TLS for VNC, restart the " "virtual machine or live migrate the virtual machine." msgstr "" #: ../../:836 msgid "" "The watcher dashboard is available in Horizon. Deployers can enable the " "panel by setting the following Ansible variable:" msgstr "" #: ../../:498 msgid "" "The workaround of requiring the addition of gnocchiclient to the " "``repo_build_upper_constraints_overrides`` variable is no longer required. " "The appropriate constraints have been implemented as a global pin." msgstr "" #: ../../:729 msgid "" "The xinetd script and configuration to run the 'clustercheck' script is " "replaced with a systemd socket activated service." msgstr "" #: ../../:845 msgid "" "The zun dashboard is available in Horizon. Deployers can enable the panel by " "setting the following Ansible variable:" msgstr "" #: ../../:663 msgid "" "There is a bug in the version of keepalived which ships with Ubuntu 14.04 " "which results in all backup nodes having the same priority. This causes the " "automatic failover to fail when more than two keepalived hosts are " "configured. To work around this issue it is recommended that deployers limit " "the number of keepalived hosts to no more than two, or that each host is " "configured with different priorities." msgstr "" #: ../../:824 origin/stable/newton>:1873 msgid "" "There is a new default configuration for keepalived, supporting more than 2 " "nodes." msgstr "" #: ../../:864 origin/stable/newton>:2572 msgid "" "There is a new default configuration for keepalived. When running the " "haproxy playbook, the configuration change will cause a keepalived restart " "unless the deployer has used a custom configuration file. The restart will " "cause the virtual IP addresses managed by keepalived to be briefly " "unconfigured, then reconfigured." msgstr "" #: ../../:902 origin/stable/ocata>:1267 #: stable/pike>:1538 msgid "" "There is currently an Ansible bug in regards to ``HOSTNAME``. If the host ``." "bashrc`` holds a var named ``HOSTNAME``, the container where the " "``lxc_container`` module attaches will inherit this var and potentially set " "the wrong ``$HOSTNAME``. See `the Ansible fix `_ which will be released in Ansible version 2.3." msgstr "" #: ../../:448 stable/pike>:2133 msgid "" "There is now a fix in place that ensures any sysctl configuration with " "``enabled: no`` will be skipped and the configuration will be left unaltered " "on the system." msgstr "" #: ../../:1373 stable/pike>:887 msgid "" "There is now experimental support to deploy OpenStack-Ansible on CentOS 7 " "for both development and test environments." msgstr "" #: ../../:126 stable/stein>:1157 msgid "" "There was previously an environment variable (``ANSIBLE_ROLE_FETCH_MODE``) " "to set whether the roles in ansible-role-requirements.yml were fetched using " "ansible-galaxy or using git, however the default has been git for some time " "ansible since the use of the ``ceph-ansible`` respoitory for ceph " "deployment, using ansible-galaxy to download the roles does not work " "properly. This functionality has therefore been removed." msgstr "" #: ../../:586 unmaintained/xena>:486 msgid "" "There's a `known issue `_ with " "upgrade to Ceph Pacific release prior to version 16.2.7. Please, make sure " "that 16.2.7 or later has been released before performing Ceph upgrade. " "Otherwise, override ``ceph_stable_release: octopus`` in your user_variables." "yml" msgstr "" #: ../../:459 msgid "" "There's no need in keeping `letsencrypt` service in haproxy_extra_services " "as well as copying and maintaining whole haproxy_default_services in order " "to get overrides for horizon. From now on required adjustments are provided " "by defualt and letsecrypt installation path has been simplified." msgstr "" #: ../../:451 msgid "" "There's no need in providing neither `http-01-address` nor `http-01-port` " "options with `haproxy_ssl_letsencrypt_setup_extra_params`, as they are now " "configured with corresponding variables " "`haproxy_ssl_letsencrypt_certbot_bind_address` and " "`haproxy_ssl_letsencrypt_certbot_backend_port`" msgstr "" #: ../../:252 origin/stable/ocata>:432 #: stable/pike>:827 msgid "" "These kernel parameters are now set to ``1`` on all hosts by the " "``openstack_hosts`` role, which ensures that bridge traffic is always sent " "through iptables." msgstr "" #: ../../:692 msgid "" "These variables were responsible for the path haproxy looked for " "certificates on the destination hosts." msgstr "" #: ../../:362 msgid "" "This also add new variables to control default behavoir for frontends and " "backends:" msgstr "" #: ../../:33 origin/stable/mitaka>:181 #: origin/stable/newton>:1518 msgid "" "This also allows the initialization to become a blocking process and Ansible " "will wait for the initialization to complete prior to running the next task." msgstr "" #: ../../:501 msgid "" "This consolidates the amphora image tasks in a common file and adds a way to " "download an amphora image from an artefact storage over http(s). With the " "Octavia team providing test images the tests were modified to not build " "images any longer but download them." msgstr "" #: ../../:789 msgid "" "This feature requires kernel and user space support for conntrack, thus " "requiring minimum versions of the Linux kernel and Open vSwitch. All cases " "require Open vSwitch version 2.5 or newer. Kernel version 4.3 or newer " "includes conntrack support. Kernel version 3.3, but less than 4.3, does not " "include conntrack support and requires building the OVS modules." msgstr "" #: ../../:150 stable/pike>:217 #: stable/queens>:455 stable/rocky>:1498 msgid "" "This has been resolved by introducing a /dev/random and /dev/urandom inside " "the chroot-ed environment." msgstr "" #: ../../:14 stable/ussuri>:103 msgid "" "This is minor bugfix release that brings up overall improvements and " "bugfixes to the roles." msgstr "" #: ../../:48 msgid "" "This issue can be resolved either by upgrading the environment to a recent " "OpenStack-Ansible Ocata release, or by doing the following." msgstr "" #: ../../:158 msgid "This issue has been resolved in the 14.2.15 release." msgstr "" #: ../../:221 msgid "This issue has been resolved in the 15.1.17 release." msgstr "" #: ../../:442 msgid "This issue has been resolved in the 16.0.8 release." msgstr "" #: ../../:244 stable/2023.2>:230 #: stable/2024.1>:486 msgid "" "This limitation boils down to Ansible design and will be true for any other " "module as well. In order to overcome it, you can transform the dictionary to " "a Jinja2 format:" msgstr "" #: ../../:166 current msgid "" "This means, you can control versions of playbooks separately from the " "OpenStack-Ansible repository itself. This also enables to call playbooks " "without providing explicit path to them, but through FQCN, for example: " "``openstack-ansible openstack.osa.setup_openstack``" msgstr "" #: ../../:116 msgid "" "This release addresses an issue when upgrading from Ubuntu Bionic to Ubuntu " "Focal during the Victoria release cycle. By default the same RabbitMQ " "version will now be installed for both Bionic and Focal to avoid a downgrade " "from being attempted. It is strongly recommended to upgrade to this release " "before attempting an upgrade to Ubuntu Focal." msgstr "" #: ../../:66 unmaintained/wallaby>:189 #: unmaintained/xena>:632 msgid "" "This release addresses an issue which could cause wheels to fail to be built " "when upgrading from one operating system to another. Upgrading to this " "release is recommended before attempting an operating system upgrade." msgstr "" #: ../../:14 unmaintained/victoria>:48 #: unmaintained/wallaby>:171 msgid "This release eliminates following security issues:" msgstr "" #: ../../:258 unmaintained/xena>:31 #: unmaintained/zed>:276 msgid "" "This release includes SHA bump for Cinder, Nova and Glance that covers OSSA-" "2023-002 vulnarability (CVE-2022-47951)." msgstr "" #: ../../:43 msgid "" "This results in any upgrades to the newton software to never end up running " "the version of neutron software as intended. This can be seen by observing " "that the running processes are still using the older software venv." msgstr "" #: ../../:3327 msgid "" "This role assumes that there is a network named \"public|private\" and a " "subnet named \"public|private-subnet\". These names are made configurable by " "the addition of two sets of variables; ``tempest_public_net_name`` and " "``tempest_public_subnet_name`` for public networks and " "``tempest_private_net_name`` and ``tempest_private_subnet_name`` for private " "networks This addresses `bug 1588818 `_" msgstr "" #: ../../:178 stable/rocky>:320 stable/stein>:226 msgid "" "This role now optionally enables your compute nodes' KVM kernel module " "nested virtualization capabilities, by setting nova_nested_virt_enabled to " "true. Depending on your distribution and libvirt version, you might need to " "set additional variables to fully enabled nested virtualization. For " "details, please see https://docs.openstack.org/nova/latest/admin/" "configuration/hypervisor-kvm.html#nested-guest-support." msgstr "" #: ../../:378 msgid "" "This upgrade task is related to `bug 1582279 `_." msgstr "" #: ../../:64 msgid "" "This upgrade task is related to `bug 1594584 `_." msgstr "" #: ../../:477 msgid "" "This version is the minimum version necessary to upgrade from Pike to Queens " "for deployers using ANSIBLE_ROLE_FETCH_MODE=\"git-clone\"." msgstr "" #: ../../:313 msgid "" "This will also cause the old error logs in ``/var/log/mysql_logs`` in the " "container to become unavailable since the new bind mount is mounted on top " "of the existing logs directory within the container. If these logs are " "critical for a deployer to keep, the deployer should:" msgstr "" #: ../../:1869 msgid "" "To ensure the deployment system remains clean the Ansible execution " "environment is contained within a virtual environment. The virtual " "environment is created at \"/opt/ansible-runtime\" and the \"ansible.*\" CLI " "commands are linked within /usr/local/bin to ensure there is no interruption " "in the deployer workflow." msgstr "" #: ../../:576 msgid "" "To fix this issue the ``pip.conf`` file needs to be removed from all " "repository servers. The upgrade playbook ``repo-server-pip-conf-removal." "yml`` will remove the pip.conf file from the repository servers if it's " "found." msgstr "" #: ../../:430 msgid "To implement that following variables introduced:" msgstr "" #: ../../:690 unmaintained/victoria>:494 msgid "" "To provide compatibility with Centos-8 the LXC cache preparation has been " "greatly simplified to remove the requirement for machinectl and btrfs, which " "is a combination not available on Centos-8. This has the side effect of " "machinectl no longer being a supported backing store for LXC." msgstr "" #: ../../:266 stable/pike>:401 msgid "" "To work around this issue, the recommendation is to set the following " "overrides in ``/etc/openstack_deploy/user_variables.yml`` to ensure that the " "last known good version of MariaDB is used." msgstr "" #: ../../:452 msgid "" "Trove role introduced variables to independently configure RPC/Notification " "communication for Guest Agent: - trove_guest_oslomsg_rabbit_quorum_queues - " "trove_guest_oslomsg_rpc_port - trove_guest_oslomsg_rpc_userid - " "trove_guest_oslomsg_rpc_password - trove_guest_oslomsg_rpc_vhost" msgstr "" #: ../../:650 msgid "" "Trove service specific config files, like ``trove-conductor.conf`` and " "``trove-taskmanager.conf``, were removed and all functionality was merged to " "the ``trove.conf`` file. So you need to ensure, that all overriden options " "are now placed for the trove.conf file." msgstr "" #: ../../:824 msgid "" "Two Neutron variables have been deprecated and are now removed from " "OpenStack-Ansible - ``neutron_l3_router_delete_namespaces`` and " "``neutron_dhcp_delete_namespaces``." msgstr "" #: ../../:774 msgid "" "Two new options were added for handling authentication with Swift storage " "backends - ``glance_swift_store_user_domain`` and " "``glance_swift_store_project_domain``. Both are set to ``default`` and can " "be adjusted if deployers use a different Keystone domain to authenticate to " "swift." msgstr "" #: ../../:997 msgid "" "Two new variables (`rabbitmq_async_threads` and `rabbitmq_process_limit`) " "have been added to the openstack-ansible-rabbitmq_server role. The variable " "`rabbitmq_async_threads` limits the number of asynchronous threads for file " "and socket I/O. The variable `rabbitmq_process_limit` limits the overall " "number of supported processes inside the erlang VM." msgstr "" #: ../../:373 unmaintained/xena>:378 msgid "" "UEFI boot support has been added. To migrate from Legacy BIOS mode, define " "`boot_mode:uefi` as a capability for baremetal nodes that support UEFI. In " "addition, corresponding flavor(s) will need to be created or modified to " "include `boot_mode:uefi` as a capability for scheduling to occur against " "UEFI nodes." msgstr "" #: ../../:409 msgid "" "Ubuntu Cloud Archive (UCA) does not contain Ubuntu Bionic distro packages " "for Victoria, so only source install/upgrade path (default) will work " "correctly for Ubuntu 18.04." msgstr "" #: ../../:32 unmaintained/wallaby>:155 msgid "" "Ubuntu Cloud Archive (UCA) repo has not been added properly for Ubuntu 20.04 " "setups." msgstr "" #: ../../:967 msgid "" "Ubuntu Cloud Archive (UCA) was installed by default on repo, nova, neutron " "nodes, but not on the other nodes. From now on, we are using UCA everywhere " "to avoid dependency issues (like having virtualenv build with incompatible " "versions of python-cryptography). The same reasoning applies to CentOS and " "RDO packages." msgstr "" #: ../../:849 msgid "" "Ubuntu Trusty (14.04) support is now removed from the os_cloudkitty role." msgstr "" #: ../../:635 origin/stable/mitaka>:925 #: origin/stable/mitaka>:1023 msgid "" "Ubuntu has 4 different 'components' - main, universe, multiverse and " "restricted:" msgstr "" #: ../../:641 origin/stable/mitaka>:931 #: origin/stable/mitaka>:1029 msgid "" "Universe: Community maintained software, i.e. not officially supported " "software." msgstr "" #: ../../:34 branch>:215 current origin/liberty>:54 #: origin/liberty>:139 origin/liberty>:182 origin/liberty>:207 #: origin/liberty>:259 origin/liberty>:366 origin/liberty>:424 #: origin/liberty>:509 origin/liberty>:564 origin/liberty>:673 #: origin/liberty>:758 origin/liberty>:889 origin/stable/mitaka>:94 #: origin/stable/mitaka>:140 origin/stable/mitaka>:202 #: origin/stable/mitaka>:297 origin/stable/mitaka>:379 #: origin/stable/mitaka>:448 origin/stable/mitaka>:487 #: origin/stable/mitaka>:621 origin/stable/mitaka>:701 #: origin/stable/mitaka>:852 origin/stable/mitaka>:1019 #: origin/stable/newton>:231 origin/stable/newton>:306 #: origin/stable/newton>:350 origin/stable/newton>:413 #: origin/stable/newton>:663 origin/stable/newton>:773 #: origin/stable/newton>:851 origin/stable/newton>:913 #: origin/stable/newton>:988 origin/stable/newton>:1204 #: origin/stable/newton>:1259 origin/stable/newton>:1334 #: origin/stable/newton>:2427 origin/stable/ocata>:10 origin/stable/ocata>:125 #: origin/stable/ocata>:476 origin/stable/ocata>:627 origin/stable/ocata>:771 #: origin/stable/ocata>:1056 origin/stable/ocata>:1278 #: origin/stable/ocata>:1831 stable/2023.1>:10 stable/2023.1>:82 #: stable/2023.1>:141 stable/2023.1>:315 stable/2023.1>:446 stable/2023.1>:663 #: stable/2023.2>:24 stable/2023.2>:103 stable/2023.2>:150 stable/2023.2>:441 #: stable/2024.1>:20 stable/2024.1>:85 stable/2024.1>:505 stable/pike>:192 #: stable/pike>:303 stable/pike>:575 stable/pike>:773 stable/pike>:850 #: stable/pike>:1619 stable/queens>:119 stable/queens>:159 stable/queens>:418 #: stable/queens>:571 stable/queens>:607 stable/queens>:861 stable/rocky>:49 #: stable/rocky>:203 stable/rocky>:291 stable/rocky>:330 stable/rocky>:393 #: stable/rocky>:977 stable/stein>:95 stable/stein>:183 stable/stein>:896 #: stable/train>:42 stable/train>:165 stable/train>:349 stable/ussuri>:56 #: stable/ussuri>:125 stable/ussuri>:473 stable/yoga>:10 stable/yoga>:96 #: stable/yoga>:133 stable/yoga>:234 stable/yoga>:294 stable/yoga>:327 #: stable/yoga>:596 unmaintained/victoria>:10 unmaintained/victoria>:80 #: unmaintained/victoria>:230 unmaintained/victoria>:256 #: unmaintained/victoria>:417 unmaintained/wallaby>:133 #: unmaintained/wallaby>:493 unmaintained/xena>:58 unmaintained/xena>:161 #: unmaintained/xena>:255 unmaintained/xena>:496 unmaintained/zed>:56 #: unmaintained/zed>:169 unmaintained/zed>:535 msgid "Upgrade Notes" msgstr "" #: ../../:24 msgid "" "Upgrade to this release is required before moving forward with Major " "OpenStack upgrade due to minimal RabbitMQ version requirement of 3.13 for " "transitioning to 4.0 which happens in 2024.2 (Dalmatian). RabbitMQ 3.12 is " "being used before this release by default." msgstr "" #: ../../:2553 msgid "" "Upgrades will not replace entries in the /etc/openstack_deploy/env.d " "directory, though new versions of OpenStack-Ansible will now use the shipped " "env.d as a base, which may alter existing deployments." msgstr "" #: ../../:867 msgid "" "Upgrading from Newton to Ocata will now correctly add existing Nova " "instances to the ``nova_cell1_name`` cell. For more information see `bug " "1682169 `_." msgstr "" #: ../../:194 msgid "" "Upgrading from Ubuntu from Focal Fossa (20.04) to Jammy Jellyfish (22.04) " "while using ML2.OVN Neutron driver is known to have issues. Please check Bug " "Report for more details: https://bugs.launchpad.net/openstack-ansible/+bug/" "2059721" msgstr "" #: ../../:502 origin/stable/ocata>:871 msgid "Upstream is now depending on version 2.1.0 of ldappool." msgstr "" #: ../../:327 current msgid "" "Usage of ``haproxy_hosts`` in `openstack_user_config.yml`` has been " "deprecated in favor of ``load_balancer_hosts``." msgstr "" #: ../../:836 msgid "" "Usage of tempest_tempest_conf_overrides, where it could have 2 different " "formats. one for config_template and another one for tempestconf.profile Now " "for tempestconf.profile overrides `tempest_tempestconf_profile_overrides` " "variable should be used." msgstr "" #: ../../:351 current stable/2024.1>:117 msgid "" "Used Apache MPMs are aligned across services and will not conflict with each " "other on `metal` deployments. Apache MPM `event` is being used by default." msgstr "" #: ../../:307 stable/queens>:611 stable/rocky>:985 msgid "" "Users should purge the 'ntp' package from their hosts if ceph-ansible is " "enabled. ceph-ansible previously was configured to install ntp by default " "which conflicts with the OSA ansible-hardening role chrony service." msgstr "" #: ../../:608 msgid "" "VPNaaS dashboard is again available in Horizon. Deployers can enable the " "panel by setting the following Ansible variable:" msgstr "" #: ../../:761 msgid "" "Vaiables ``tempest_service_available_congress`` and " "``tempest_service_available_nova_lxd`` have been removed and have no effect " "since corresponding services are not supported anymore." msgstr "" #: ../../:1752 origin/stable/ocata>:1559 msgid "" "Variable ``ceph_extra_confs`` has been expanded to support retrieving " "additional ceph.conf and keyrings from multiple ceph clusters automatically." msgstr "" #: ../../:513 msgid "" "Variable ``cinder_enable_v2_api`` is set to ``False`` by default. This will " "result in Cinder v2 API removal from keystone catalog during upgrade. If you " "want to preserve v2 API you must override ``cinder_enable_v2_api`` in " "user_variables.yml" msgstr "" #: ../../:575 msgid "" "Variable ``cinder_service_internaluri_insecure`` has been replaced with " "``keystone_service_internaluri_insecure`` that is used across all roles for " "the exact same purpose." msgstr "" #: ../../:737 msgid "" "Variable ``container_address`` has been deprecated in favor of " "``management_address``. Variable ``management_address`` is available since " "Victoria release and was defaulted to the value of ``container_address``." msgstr "" #: ../../:805 msgid "" "Variable ``glance_nfs_client`` has been replaced with " "``glance_remote_client``. New variable has new keys for defining mounts to " "cover wider range of supported filesystems. Compatability for " "``glance_nfs_client`` has been kept until Zed release." msgstr "" #: ../../:798 msgid "" "Variable ``glance_nfs_local_directory`` has been renamed to " "``glance_images_local_directory`` to better reflect purpose of the variable. " "``glance_nfs_local_directory`` remains for backwards compatability but will " "be removed in Zed release." msgstr "" #: ../../:60 unmaintained/victoria>:445 #: unmaintained/wallaby>:563 msgid "" "Variable ``haproxy_hatop_downloader`` has been removed, Deployers supposed " "to use ``haproxy_hatop_download_url`` override if needed to install in " "deployments with limited internet connection." msgstr "" #: ../../:635 msgid "" "Variable ``heat_deferred_auth_method`` has been deprecated and has no effect." " Default behaviour is to use trusts as deferred method, and that is the only " "working option as of today. Usage of password is broken with keystonev3 and " "should not be used." msgstr "" #: ../../:682 msgid "" "Variable ``keystone_ssl`` was deprecated in favor of " "``keystone_backend_ssl``." msgstr "" #: ../../:701 msgid "" "Variable ``masakari_policy_json_overrides`` has been deprecated in favor of " "the ``masakari_policy_overrides`` and will be removed after X release. As " "for now ``masakari_policy_overrides`` defaults to " "``masakari_policy_json_overrides`` for compatability." msgstr "" #: ../../:671 msgid "" "Variable ``neutron_ovs_socket_path`` has been deprecated and will be " "silently ignored. Please use ``neutron_ovsdb_manager_connection`` in order " "to override connection to OVS." msgstr "" #: ../../:583 msgid "" "Variable ``nova_enabled_vgpu_types`` has been deprecated and is replaced " "with ``nova_enabled_mdev_types``." msgstr "" #: ../../:767 msgid "" "Variable ``nova_glance_api_servers`` has been removed and has no effect due " "to corresponsive upstream api_servers being deprecated." msgstr "" #: ../../:635 msgid "" "Variable ``nova_memcached_servers`` has been deprecated and replaced with " "``nova_cache_servers`` that defaults to ``memcached_servers``. For " "backpwards compatability ``nova_memcached_servers`` is still respected but " "will be removed in future releases." msgstr "" #: ../../:823 stable/2023.2>:632 msgid "" "Variable ``openstack_service_accept_both_protocols`` was implemented to " "temporarily accept both HTTP and HTTPS traffic on haproxy frontends. It is " "useful when changing protocol of service endpoints." msgstr "" #: ../../:543 msgid "" "Variable ``systemd_lock_path`` has been dropped and has no effect now. In " "order to customize lock dir path please use ``systemd_lock_dir``. Please " "keep in mind, that for ``systemd_lock_dir`` you don't need to provide full " "path like it was with ``systemd_lock_path`` since service name is added to " "the end of the path." msgstr "" #: ../../:169 stable/ussuri>:538 msgid "" "Variable `libvirt_package` in ceph_client role has been renamed to " "`libvirt_packages` and converted from string to a list." msgstr "" #: ../../:756 msgid "" "Variable `rabbitmq_release_version` has been removed as not used anymore." msgstr "" #: ../../:757 msgid "" "Variable `swift_gnocchi_enabled` has been removed and won't have any effect" msgstr "" #: ../../:488 msgid "" "Variable `uca_repo` has been removed. Deployers are appreciated to use " "`user_external_repos_list` instead if they want to define extra repository " "Variable `uca_apt_repo_url` was renamed to `apt_repo_url` in order to " "correspond it's usage as it also affect Debian deployments now." msgstr "" #: ../../:448 msgid "" "Variables ``gnocchi_storage_redis_url`` and ``gnocchi_incoming_redis_url`` " "were added to manage redis connection if it's picked as an storage/incoming " "driver. Default value is redis://localhost:6379/ Please mention, that " "OpenStack-Ansible does not provide isntallation of Redis as of today." msgstr "" #: ../../:118 unmaintained/zed>:667 msgid "" "Variables ``haproxy_fall`` and ``haproxy_rise`` are now respected again and " "will be used for defining amount of checks before haproxy will mark backend " "as UP or DOWN. Keys ``backend_rise`` and ``haproxy_fall`` that are set " "inside service definition are still respected and will have prescedence over " "global ones." msgstr "" #: ../../:743 msgid "" "Variables ``horizon_ssl_self_signed_regen`` and " "``horizon_ssl_self_signed_subject`` are deprecated. Horizon role uses " "ansible-role-pki now so they are no longer needed." msgstr "" #: ../../:812 msgid "" "Variables ``nova_external_ssl`` and ``nova_secure_proxy_ssl_header`` have " "been removed since secure_proxy_ssl_header option from nova.conf they " "controlled has been deprecated and has no effect." msgstr "" #: ../../:749 msgid "" "Variables ``nova_network_type`` and ``nova_network_services`` have been " "deptecated and will be silently ignored in the future. Please, use " "``nova_nova_conf_overrides`` if you need to define ``ovs_bridge`` option for " "specific network drivers, like nsx or nuage." msgstr "" #: ../../:715 msgid "" "Variables ``nova_novncproxy_agent_enabled``, " "``nova_serialconsoleproxy_enabled`` and ``nova_console_agent_enabled`` are " "removed and won't have any effect in the future. If you want to disable " "console functionality, set ``nova_console_type: disabled`` in your " "user_variables.yml" msgstr "" #: ../../:762 msgid "" "Variables ``trove_taskmanager_config_overrides`` and " "``trove_conductor_config_overrides`` were removed along with affected config " "files. You should use ``trove_config_overrides`` to override trove " "configuration." msgstr "" #: ../../:267 stable/2023.2>:260 #: stable/2024.1>:654 msgid "" "Variables controlling systemd-networkd default filename templating when one " "is not supplied were deprecated and has no effect from now on." msgstr "" #: ../../:695 msgid "" "Variables were replaced in favor of ``haproxy_ssl_cert_path`` since the " "exact path to certificates will be dynamically set based on the VIP that is " "used for the frontend" msgstr "" #: ../../:829 msgid "" "Version of RabbitMQ is bumped to 3.11.7, Erlang version is bumped to 25.2." msgstr "" #: ../../:171 current msgid "" "We also have renamed some playbooks to better reflect their purpose. For " "instance ``playbooks/os-nova-install.yml`` become ``openstack.osa.nova``" msgstr "" #: ../../:884 msgid "" "We are limiting the tarred inventory backups to 15 in addition to changes " "that only apply backups when the config has changed. These changes are to " "address an issue where the inventory was corruped with parallel runs on " "large clusters." msgstr "" #: ../../:473 msgid "" "We have changed a way of the deployment of ceilometer pipeline.yml. Now we " "use overrides to leave the behaviour and defaults, however you might want to " "double check if no conflicts with your current overrides exist." msgstr "" #: ../../:607 unmaintained/xena>:500 msgid "" "We have changed default values for variables related to database connection " "pooling. For some services(like nova) default pool sizes will be " "significantly lower, we have also decreased default connection_recycle_time " "to 10 minutes. It should not cause any issues, but we recommended to double " "check these values, especially for large environments." msgstr "" #: ../../:595 msgid "" "We have covered this step with upgrade script that will create a " "``user_neutron_migration.yml`` file with assumed defaults." msgstr "" #: ../../:567 msgid "" "We removed multiple web server support for keystone and left only Apache " "since nginx is missing features required for federation setup. With this " "change following variables are deprecated and have no effect:" msgstr "" #: ../../:490 unmaintained/wallaby>:31 #: unmaintained/xena>:136 msgid "" "We should be also define ``neutron_l3_agent_ini_overrides`` in " "'user_variables.yml' to tell ``l3_agent`` use the new config file. Example:" msgstr "" #: ../../:344 unmaintained/zed>:661 msgid "" "Wheels build for multi-arch and multi-distro setups is fixed. For that you " "still need to have set of venv_build_targets that will define targets for " "each operating system and architecture." msgstr "" #: ../../:770 msgid "" "When Glance is configured to use a swift store backend, it will use Keystone " "v3 authentication by default via the ``glance_swift_store_auth_version`` " "variable." msgstr "" #: ../../:781 msgid "" "When Skyline is attempted to be deployed with Horizon, Skyline will take " "precedence by serving on port 80/443. In the meanwhile Horizon will be " "available in \"subdirectory\" ``/horizon``." msgstr "" #: ../../:777 msgid "" "When Skyline is deployed with the built-in HAProxy server it will, by " "default, listen on port 80 when ssl is disabled and port 443 when ssl is " "enabled. Skyline backend in it's term will listen on port 9999." msgstr "" #: ../../:512 msgid "" "When ``venvwithindex=True`` and ``ignorerequirements=True`` are both " "specified in ``rally_git_install_fragments`` (as was previously the " "default), this results in rally being installed from PyPI without any " "constraints being applied. This results in inconsistent builds from day to " "day, and can cause build failures for stable implementations due to new " "library releases. Going forward, we remove the ``rally_git_*`` overrides in " "``playbooks/defaults/repo_packages/openstack_testing.yml`` so that the " "integrated build installs rally from PyPI, but with appropriate constraints " "applied." msgstr "" #: ../../:192 stable/pike>:259 #: stable/queens>:497 stable/rocky>:516 msgid "" "When `venvwithindex=True` and `ignorerequirements=True` are both specified " "in `tempest_git_install_fragments` (as was previously the default), this " "results in tempest being installed from PyPI without any constraints being " "applied. This could result in the version of tempest being installed in the " "integrated build being different than the version being installed in the " "independent role tests. Going forward, we remove the `tempest_git_*` " "overrides in playbooks/defaults/repo_packages/openstack_testing.yml so that " "the integrated build installs tempest from PyPI, but with appropriate " "constraints applied." msgstr "" #: ../../:1388 origin/stable/ocata>:2069 msgid "" "When a task fails while executing a playbook, the default behaviour for " "Ansible is to fail for that host without executing any notifiers. This can " "result in configuration changes being executed, but services not being " "restarted. OpenStack-Ansible now sets ``ANSIBLE_FORCE_HANDLERS`` to ``True`` " "by default to ensure that all notified handlers attempt to execute before " "stopping the playbook execution." msgstr "" #: ../../:518 msgid "" "When defining provider networks, vlan ranges are no longer required. When a " "vlan range is not specified, the provider label ``net_name`` still be set in " "``network_vlan_ranges``, but automatic VLAN allocation will not be available." "" msgstr "" #: ../../:1169 msgid "" "When enabled, Neutron Firewall as a Service (FWaaS) provides projects the " "option to implement perimeter security (filtering at the router), adding to " "filtering at the instance interfaces which is provided by 'Security Groups'." msgstr "" #: ../../:478 msgid "" "When executing a deployment which includes the telemetry systems " "(ceilometer, gnocchi, aodh), the repo build will fail due to the inability " "for pip to read the constraints properly from the extras section in " "ceilometer's setup.cfg. The current workaround for this is to add the " "following content to ``/etc/openstack_deploy/user_variables.yml``." msgstr "" #: ../../:98 msgid "" "When migrating from Liberty to Mitaka neutron does not automatically set or " "migrate networks MTU settings. Neutron has no migration to correctly set the " "MTU on existing networks so we've created an OSA MTU migration playbook to " "work-around this issue. The playbook will set the MTU on networks created " "before the upgrade by iterating on known values from the user_variables and " "facts. Should any known network name be encountered the MTU will be set to " "the known value. If no MTU and no global override is present the playbook " "will fall back to using 1500 for vlan/flat networks and 1450 for vxlan " "networks." msgstr "" #: ../../:1535 stable/stein>:1649 msgid "" "When running aodh with apache(httpd) all apache logs will be stored in the " "standard apache log directory which is controlled by the distro specific " "variable ``aodh_apache_default_log_folder``." msgstr "" #: ../../:1531 stable/stein>:1645 msgid "" "When running keystone with apache(httpd) all apache logs will be stored in " "the standard apache log directory which is controlled by the distro specific " "variable ``keystone_apache_default_log_folder``." msgstr "" #: ../../:613 stable/queens>:1084 msgid "" "When the ``glance_enable_v2_registry`` variable is set to ``True`` the " "corresponding ``data_api`` setting is now correctly set. Previously it was " "not set and therefore the API service was not correctly informed that the " "registry was operating." msgstr "" #: ../../:703 msgid "" "When the option `horizon_use_uwsgi` is enabled, operators need to be aware " "that not all horizon capabilities will be present. The minimal uSGI process " "is just that, minimal, and not full featured. If the deployment requires " "full featured capabilities, the apache based deployment should remain " "enabled." msgstr "" #: ../../:295 origin/stable/mitaka>:603 #: origin/stable/newton>:3403 msgid "" "When the security role was run in Ansible's check mode and a tag was " "provided, the ``check_mode`` variable was not being set. Any tasks which " "depend on that variable would fail. This `bug is fixed `_ and the ``check_mode`` " "variable is now set properly on every playbook run." msgstr "" #: ../../:3146 msgid "" "When upgrading a Swift deployment from Mitaka to Newton it should be noted " "that the enabled middleware list has changed. In Newton the \"staticweb\" " "middleware will be loaded by default. While the change adds a feature it is " "non-disruptive in upgrades." msgstr "" #: ../../:2463 msgid "" "When upgrading deployers will need to ensure they have a backup of all " "logging from within the container prior to running the playbooks. If the " "logging node is present within the deployment all logs should already be " "sync'd with the logging server and no action is required. As a pre-step it's " "recommended that deployers clean up logging directories from within " "containers prior to running the playbooks. After the playbooks have run the " "bind mount will be in effect at \"/var/log\" which will mount over all " "previous log files and directories." msgstr "" #: ../../:685 msgid "" "When upgrading from Kilo to Liberty, the ``port_security`` extension driver " "will not be configured due to the known issues with enabling it after " "creating networks." msgstr "" #: ../../:572 msgid "" "When upgrading from early Kilo versions of OpenStack-Ansible, the RabbitMQ " "minor version may need to be upgraded during the upgrade process. This is " "noted in both the manual steps and the ``run-upgrade.sh`` script." msgstr "" #: ../../:575 msgid "" "When upgrading from pike to queens there are the following changes to the " "container/service setup." msgstr "" #: ../../:509 msgid "" "When upgrading it is possible for an old \"neutron-ns-metadata-proxy\" " "process to remain running in memory. If this happens the old version of the " "process can cause unexpected issues in a production environment. To fix this " "a task has been added to the os_neutron role that will execute a process " "lookup and kill any \"neutron-ns-metadata-proxy\" processes that are not " "running the current release tag. Once the old processes are removed the " "metadata agent running will respawn everything needed within 60 seconds." msgstr "" #: ../../:3447 msgid "" "When upgrading it is possible for an old ``neutron-ns-metadata-proxy`` " "process to remain running in memory. If this happens the old version of the " "process can cause unexpected issues in a production environment. To fix this " "a task has been added to the os_neutron role that will execute a process " "lookup and kill any ``neutron-ns-metadata-proxy`` processes that are not " "running the current release tag. Once the old processes are removed the " "metadata agent running will respawn everything needed within 60 seconds." msgstr "" #: ../../:1763 msgid "" "When upgrading nova the cinder ``catalog_info`` will change to use the " "``cinderv3`` endpoint. Ensure that you have upgraded cinder so that the " "``cinderv3`` endpoint exists in the keystone catalog." msgstr "" #: ../../:893 msgid "" "When upgrading there is nothing a deployer **must** immediately do to run " "neutron agent services on hosts within the ``network_hosts`` group. Simply " "executing the playbooks will deploy the neutron servers on the baremetal " "machines and will leave all existing agents containers alone." msgstr "" #: ../../:354 stable/queens>:834 msgid "" "When using Glance and NFS the NFS mount point will now be managed using a " "systemd mount unit file. This change ensures the deployment of glance is not " "making potentially system impacting changes to the ``/etc/fstab`` and " "modernizes how we deploy glance when using shared storage." msgstr "" #: ../../:106 stable/rocky>:256 #: stable/stein>:1600 msgid "" "When using LXC containers with a copy-on-write back-end, the ``lxc_hosts`` " "role execution would fail due to undefined variables with the " "``nspawn_host_`` prefix. This issue has now been fixed." msgstr "" #: ../../:145 stable/2023.2>:154 #: stable/2024.1>:597 msgid "" "When using RabbitMQ in a high availability cluster (non-quorum queues), " "transient 'reply\\_' queues are now included in the HA policy where they " "previously were not. Note that this will increase the load on the RabbitMQ " "cluster, particularly for deployments with large numbers of compute nodes." msgstr "" #: ../../:1635 msgid "" "When using a copy-on-write backing store, the lxc_container_base_name can " "now include a prefix defined by ``lxc_container_base_name_prefix``." msgstr "" #: ../../:1543 msgid "" "When using copy-on-write backing stores for containers, the base container " "name may be set using the variable ``lxc_container_base_name`` which " "defaults to ``-`distribution-release>`-``." msgstr "" #: ../../:484 msgid "" "When using the **nspawn** driver container networking is managed by systemd-" "networkd both on the host and within the container. This gives us a single " "interface to manage regardless of distro and allows systemd to efficiently " "manage the resources." msgstr "" #: ../../:480 msgid "" "When using the **nspawn** driver containers will connect to the system " "bridges using a MACVLAN, more on this type of network setup can be seen " "`here `_." msgstr "" #: ../../:888 msgid "" "When using the connection plugin's ``container_user`` option, " "``ansible_remote_tmp`` should be set to a system writable path such as '/var/" "tmp/'." msgstr "" #: ../../:1782 msgid "" "When using the pypy python interpreter you can configure the garbage " "collection (gc) settings for pypy. Set the minimum GC value using the " "``swift_pypy_gc_min`` variable. GC will only happen when the memory size is " "above this value. Set the maximum GC value using the ``swift_pypy_gc_max`` " "variable. This is the maximum memory heap size for pypy. Both variables are " "not defined by default, and will only be used if the values are defined and " "``swift_pypy_enabled`` is set to ``True``." msgstr "" #: ../../:169 unmaintained/wallaby>:484 msgid "" "Where a single OSA deploy host is used to manage multiple deployments, some " "delegated Ansible tasks are performed using hostnames rather than IP " "addresses due to Ansible issue 72776. Hostnames such as 'infra1' will be " "ambiguous, so use of separate hosts for each deployment is recommended." msgstr "" #: ../../:1718 msgid "" "Whether ceilometer should be enabled by default for each service is now " "dynamically determined based on whether there are any ceilometer hosts/" "containers deployed. This behaviour can still be overridden by toggling " "``_ceilometer_enabled`` in ``/etc/openstack_deploy/user_variables." "yml``." msgstr "" #: ../../:832 origin/stable/mitaka>:872 #: origin/stable/newton>:1996 origin/stable/newton>:2652 msgid "" "Whether the Neutron DHCP Agent, Metadata Agent or LinuxBridge Agent should " "be enabled is now dynamically determined based on the " "``neutron_plugin_type`` and the ``neutron_ml2_mechanism_drivers`` that are " "set. This aims to simplify the configuration of Neutron services and " "eliminate the need for deployers to override the entire ``neutron_services`` " "dict variable to disable these services." msgstr "" #: ../../:2363 msgid "" "While default python interpreter for swift is cpython, pypy is now an option." " This change adds the ability to greatly improve swift performance without " "the core code modifications. These changes have been implemented using the " "documentation provided by Intel and Swiftstack. Notes about the performance " "increase can be seen `here `_." msgstr "" #: ../../:457 msgid "" "With adding zookeeper as coordination backend Octavia will be configured to " "use amphorav2 as default provider driver. This will result in creating a new " "database and jobboard configuration. You can control database name with " "variable ``octavia_galera_persistence_database`` and existing octavia db " "user will be granted ALL permissions to that database." msgstr "" #: ../../:571 msgid "" "With enablement of RabbitMQ Quorum Queues by default, all vhosts will be re-" "created and re-named without leading slash ('/'). For instance, `/nova` " "vhost will be renamed to `nova`. This might affect configured monitoring " "alert rules or statistics gathering." msgstr "" #: ../../:576 msgid "" "With marking ML2/LinuxBridge driver as 'Experimental' in the upstream " "Neutron project OpenStack-Ansible has switched a default mechanism driver to " "ML2/OVN. In order to upgrade any existing deployment that was relying on " "defaults to the new OpenStack-Ansible version you must ensure that following " "variables are defined explicitly to ensure parity with existing " "functionality:" msgstr "" #: ../../:234 stable/2023.2>:220 #: stable/2024.1>:476 msgid "" "With recent changes to config_template module, it is not possible anymore to " "have variables as dictionary keys in overrides. Example below will not be " "renderred properly:" msgstr "" #: ../../:1434 msgid "" "With the implementation of `systemd-journal-remote` the `rsyslog_client` " "role is no longer run by default. To enable the legacy functionality, the " "variable `rsyslog_client_enabled` and `rsyslog_server_enabled` can be set to " "**true**." msgstr "" #: ../../:58 stable/pike>:116 #: stable/queens>:334 stable/rocky>:966 msgid "" "With the release of CentOS 7.5, all pike releases are broken due to a " "mismatch in version between the libvirt-python library specified by the " "OpenStack community, and the version provided in CentOS 7.5. As such OSA is " "unable build the appropriate python library for libvirt. The only recourse " "for this is to upgrade the environment to the latest queens release." msgstr "" #: ../../:14 stable/queens>:138 stable/rocky>:344 #: stable/stein>:1623 msgid "" "With the release of CentOS 7.6, deployments were breaking and becoming very " "slow when we restart dbus in order to catch some PolicyKit changes. However, " "those changes were never actaully used so they were happening for no reason. " "We no longer make any modifications to the systemd-machined configuration " "and/or PolicyKit to maintain upstream compatibility." msgstr "" #: ../../:772 unmaintained/xena>:551 msgid "" "With the retirement of upstram Panko project, os_panko role has been " "deprecated. Panko service API endpoint will be removed during upgrade. If " "you want to preserve Panko API working, you should override " "haproxy_panko_api_service." msgstr "" #: ../../:2525 msgid "" "Within the ``haproxy`` role *hatop* has been changed from a package " "installation to a source-based installation. This has been done to ensure " "that the same operator tooling is available across all supported " "distributions. The download URL for the source can be set using the variable " "``haproxy_hatop_download_url``." msgstr "" #: ../../:2140 msgid "" "XtraBackup is currently on version 2.4.5 for amd64 architecture when pulling " "rpm/deb packages from the repos. To pull the latest available 2.4 branch " "version from the yum/apt repository set the ``use_percona_upstream`` " "variable to ``True``. The default behavior using deb packages is unchanged." msgstr "" #: ../../:2136 msgid "" "XtraBackup is currently on version 2.4.5 for ppc64le architecture when " "pulling deb packages from the repos." msgstr "" #: ../../:1706 msgid "" "Yaml files used for ceilometer configuration will now allow a deployer to " "override a given list. If an override is provided that matches an already " "defined list in one of the ceilometer default yaml files the entire list " "will be replaced by the provided override. Previously, a nested lists of " "lists within the default ceilometer configration files would extend should a " "deployer provide an override matching an existing pipeline. The extension of " "the defaults had a high probability to cause undesirable outcomes and was " "very unpredictable." msgstr "" #: ../../:444 msgid "" "You can configure options for dnsmasq by adding those to the newly " "introduced ``neutron_dhcp_config_list`` list. This helps to configure e.g. " "``no-negcache`` to get around https://bugs.launchpad.net/ubuntu/+source/" "dnsmasq/+bug/1974230." msgstr "" #: ../../:924 msgid "" "You can create a file for the network_host group, inside its group vars " "folder ``/etc/openstack_deploy/group_vars/network_hosts``, with the content:" msgstr "" #: ../../:582 msgid "" "You can disable usage of Quorum Queues and use previous default of HA Queues " "by defining ``oslomsg_rabbit_quorum_queues: False`` in your user_variables." "yml" msgstr "" #: ../../:1516 msgid "" "You can force update the translations direct from Zanata by setting " "``horizon_translations_update`` to ``True``. This will call the " "``pull_catalog`` option built into ``horizon-manage.py``. You should only " "use this when testing translations, otherwise this should remain set to the " "default of ``False``." msgstr "" #: ../../:153 stable/rocky>:324 stable/stein>:647 msgid "" "You can now set the Libvirt CPU model and feature flags from the appropriate " "entry under the ``nova_virt_types`` dictionary variable (normally ``kvm``). " "``nova_cpu_model`` is a string value that sets the CPU model; this value is " "ignored if you set any ``nova_cpu_mode`` other than ``custom``. " "``nova_cpu_model_extra_flags`` is a list that allows you to specify extra " "CPU feature flags not normally passed through with ``host-model``, or the " "``custom`` CPU model of your choice." msgstr "" #: ../../:331 msgid "" "You can override the default ``iptables_hybrid`` firewall driver for Open " "vSwitch by setting ``neutron_firewall_driver: openvswitch``" msgstr "" #: ../../:116 stable/train>:208 msgid "" "You can set a private repository for epel, you must use " "``repo_centos_epel_mirror`` for the repo URL and if you need to get the GPG " "key from intranet or a mirror use ``repo_centos_epel_key`` for gpg key " "location." msgstr "" #: ../../:1448 msgid "" "You can set the ``endpoint_type`` used when creating the Trove service " "network by specifying the ``trove_service_net_endpoint_type`` variable. This " "will default to ``internal``. Other possible options are ``public`` and " "``admin``." msgstr "" #: ../../:1089 msgid "" "You can specify the ``galera_package_arch`` variable to force a specific " "architecture when installing percona and qpress packages. This will be " "automatically calculated based on the architecture of the ``galera_server`` " "host. Acceptable values are ``x86_64`` for ``Ubuntu-14.04`, ``Ubuntu-16.04`` " "and ``RHEL 7``, and ``ppc64le`` for ``Ubuntu-16.04``." msgstr "" #: ../../:1583 msgid "" "You can specify the ``galera_package_arch`` variable to force a specific " "architecture when installing percona and qpress packages. This will be " "automatically calculated based on the architecture of the ``galera_server`` " "host. Acceptable values are ``x86_64`` for ``Ubuntu-16.04`` and ``RHEL 7``, " "and ``ppc64le`` for ``Ubuntu-16.04``." msgstr "" #: ../../:1039 stable/train>:422 #: stable/ussuri>:580 msgid "[1] http://erlang.org/doc/man/mnesia.html#dump_log_write_threshold" msgstr "" #: ../../:70 stable/train>:153 stable/ussuri>:246 msgid "[client.cinder] key = XXXXXXXXXXX" msgstr "" #: ../../:615 msgid "" "`SESSION_ENGINE` has been changed to memcached by default. So that horizon " "do not require it's own database for storing session information anymore. " "`horizon_galera_*` variables has no effect now." msgstr "" #: ../../:582 msgid "" "`Service Function Chaining Extension for OpenStack Networking `_" msgstr "" #: ../../:430 stable/2023.2>:390 stable/yoga>:80 #: unmaintained/zed>:153 msgid "``--compress=True|False``" msgstr "" #: ../../:431 stable/2023.2>:391 stable/yoga>:81 #: unmaintained/zed>:154 msgid "``--compressor=``" msgstr "" #: ../../:258 origin/stable/ocata>:494 #: stable/pike>:2068 msgid "" "``PermitRootLogin`` in the ssh configuration has changed from ``yes`` to " "``without-password``. This will only allow ssh to be used to authenticate " "root via a key." msgstr "" #: ../../:291 stable/ussuri>:407 msgid "" "``SKIP_OSA_BOOTSTRAP_AIO``: Skip execution of the bootstrap-aio playbook in " "gate-check-commit" msgstr "" #: ../../:293 stable/ussuri>:409 msgid "" "``SKIP_OSA_ROLE_CLONE``: Skip execution of the get-role-requirements-" "playbook in the bootstrap-ansible.sh script" msgstr "" #: ../../:289 stable/ussuri>:405 msgid "" "``SKIP_OSA_RUNTIME_VENV_BUILD``: Skip bootstrapping of the OSA ansible venv " "in bootstrap-ansible.sh" msgstr "" #: ../../:1036 stable/stein>:1136 msgid "``ceilometer_requires_pip_packages``" msgstr "" #: ../../:1041 stable/stein>:1141 msgid "``ceilometer_service_description``" msgstr "" #: ../../:1037 stable/stein>:1137 msgid "``ceilometer_service_name``" msgstr "" #: ../../:1038 stable/stein>:1138 msgid "``ceilometer_service_port``" msgstr "" #: ../../:1039 stable/stein>:1139 msgid "``ceilometer_service_proto``" msgstr "" #: ../../:1040 stable/stein>:1140 msgid "``ceilometer_service_type``" msgstr "" #: ../../:511 msgid "``ceph-ansible`` version has been switched to v7 series" msgstr "" #: ../../:1582 msgid "" "``ceph``: This option installs Ceph from a ceph.com repo. Additional " "variables to adjust items such as Ceph release and regional download mirror " "can be found in the variables files." msgstr "" #: ../../:909 msgid "``cinder.backup.drivers.ceph.CephBackupDriver``" msgstr "" #: ../../:908 msgid "``cinder.backup.drivers.swift.SwiftBackupDriver``" msgstr "" #: ../../:393 stable/2023.2>:579 msgid "" "``common-playbooks/nova.yml`` has been deprecated and removed. All content " "from it now resides inside ``os-nova-install.yml`` directly." msgstr "" #: ../../:1590 msgid "" "``distro``: This options installs Ceph from the operating system's default " "repository and unlike the other options does not attempt to manage package " "keys or add additional package repositories." msgstr "" #: ../../:693 msgid "" "``external_lb_vip_address`` was added to the default value for " "``glance_cors_allowed_origin`` regardless of other variables." msgstr "" #: ../../:569 msgid "``flow_classifier``" msgstr "" #: ../../:436 stable/2023.2>:396 stable/yoga>:86 #: unmaintained/zed>:159 msgid "``galera_mariadb_backups_compress``" msgstr "" #: ../../:437 stable/2023.2>:397 stable/yoga>:87 #: unmaintained/zed>:160 msgid "``galera_mariadb_backups_compressor``" msgstr "" #: ../../:1010 msgid "``galera_package_arch``" msgstr "" #: ../../:555 msgid "" "``gnocchi_service_project_name`` now set by to ``service`` even for " "deployments involving Swift. Nowadays cielometer.middleware exclude " "``service`` project by default, so no additional protection is required. In " "case you want to preserve current ``gnocchi_service_project_name``, define " "it equal to ``gnocchi_swift`` in your user_variables.yml" msgstr "" #: ../../:362 current msgid "" "``haproxy_all`` group is no longer populated with bare metal hosts in case " "of installing haproxy/keepalived inside LXC containers." msgstr "" #: ../../:366 msgid "``haproxy_backend_h2: false``" msgstr "" #: ../../:365 msgid "``haproxy_frontend_h2: true``" msgstr "" #: ../../:322 msgid "" "``haproxy_pki_create_certificates`` was implemented. It allows users to " "explicitly disable certificates generation with PKI role but keep using it " "for certificates distribution." msgstr "" #: ../../:764 msgid "" "``haproxy_service_configs`` format was simplified. Now it's just a list of " "dicts. Usage of ``service`` key in ``haproxy_service_configs`` elements is " "deprecated and will be removed in 2023.2 release." msgstr "" #: ../../:690 msgid "``haproxy_ssl_ca_cert``" msgstr "" #: ../../:687 msgid "``haproxy_ssl_cert_path``" msgstr "" #: ../../:688 msgid "``haproxy_ssl_key``" msgstr "" #: ../../:689 msgid "``haproxy_ssl_pem``" msgstr "" #: ../../:813 msgid "" "``horizon_enable_ssl`` has been renamed to ``horizon_backend_ssl`` for " "consistency reasons." msgstr "" #: ../../:533 msgid "" "``keystone_database_min_pool_size`` was deprecated as it's deprecated in " "oslo.db" msgstr "" #: ../../:676 msgid "" "``keystone_security_txt_content`` variable name has changed to " "``haproxy_security_txt_content``. Security.txt file is now served directly " "from haproxy." msgstr "" #: ../../:2486 msgid "``lxc_container_template_apt_components``" msgstr "" #: ../../:2484 msgid "``lxc_container_template_main_apt_repo``" msgstr "" #: ../../:2485 msgid "``lxc_container_template_security_apt_repo``" msgstr "" #: ../../:96 stable/rocky>:246 stable/stein>:1262 msgid "" "``lxc_host_machine_qgroup_compression_limit`` -> " "``lxc_host_btrfs_qgroup_compression_limit``" msgstr "" #: ../../:95 stable/rocky>:245 stable/stein>:1261 msgid "" "``lxc_host_machine_qgroup_space_limit`` -> " "``lxc_host_btrfs_qgroup_space_limit``" msgstr "" #: ../../:94 stable/rocky>:244 stable/stein>:1260 msgid "" "``lxc_host_machine_quota_disabled`` -> ``lxc_host_btrfs_quota_disabled``" msgstr "" #: ../../:353 msgid "" "``neutron_availability_zone`` - Availability Zone of the current component. " "It is recommended to leverage group/host_vars for setting this variable. For " "OVN this variable can contain multiple values spearated by colon." msgstr "" #: ../../:350 msgid "" "``neutron_default_availability_zones`` - defines a list of AZs where l3/dhcp " "agents or OVN routers/ports will be scheduled to when hint is not provided " "in a request to Neutron API." msgstr "" #: ../../:399 msgid "" "``neutron_ovsdb_manager_connection``: Combines proto, host and port into a " "valid connection string for neutron plugins." msgstr "" #: ../../:396 msgid "``neutron_ovsdb_manager_host``: defaults to 127.0.0.1" msgstr "" #: ../../:397 msgid "``neutron_ovsdb_manager_port``: defaults to 6640" msgstr "" #: ../../:398 msgid "``neutron_ovsdb_manager_proto``: defaults to tcp" msgstr "" #: ../../:285 msgid "" "``nova_blazar_enabled`` (bool) - Control if Blazar integration should be " "configured" msgstr "" #: ../../:289 msgid "" "``nova_blazar_pip_packages`` (list) - Extra Python packages that will be " "installed on Nova scheduler hosts" msgstr "" #: ../../:287 msgid "" "``nova_blazar_scheduler_filters`` (list) - Extra filters that will be " "enabled in Nova scheduler" msgstr "" #: ../../:3522 msgid "``nova_compute_manager`` is now phased out." msgstr "" #: ../../:3514 msgid "" "``nova_libvirt_live_migration_flag`` is now phased out. Please create a nova " "configuration override with ``live_migration_tunnelled: True`` if you want " "to force the flag ``VIR_MIGRATE_TUNNELLED`` to libvirt. Nova \"chooses a " "sensible default\" otherwise." msgstr "" #: ../../:1001 msgid "``nova_placement_db_max_overflow``" msgstr "" #: ../../:1002 msgid "``nova_placement_db_max_pool_size``" msgstr "" #: ../../:1003 msgid "``nova_placement_db_pool_timeout``" msgstr "" #: ../../:1000 msgid "``nova_placement_galera_database``" msgstr "" #: ../../:999 msgid "``nova_placement_galera_user``" msgstr "" #: ../../:557 msgid "" "``nova_ram_weight_multiplier`` was deprecated. Multipliers should be defined " "using ``nova_nova_conf_overrides``. Please note that default value for " "``nova_ram_weight_multiplier`` was previously set to 5, while nova default " "is 1. This deprecation will slightly change weighing behavior in OSA." msgstr "" #: ../../:152 current stable/2024.1>:58 msgid "" "``octavia_resources_deploy_host`` (localhost): The host on which SSH key " "will be created." msgstr "" #: ../../:156 current stable/2024.1>:62 msgid "" "``octavia_ssh_key_comment`` (Generated-by-Nova): Comment for the keypair." msgstr "" #: ../../:154 current stable/2024.1>:60 msgid "" "``octavia_ssh_key_dir`` (${HOME}/.ssh): Directory under which keypair will " "be created on the ``octavia_resources_deploy_host``" msgstr "" #: ../../:157 current stable/2024.1>:63 msgid "``octavia_ssh_key_format`` (ssh): Format for the stored private key" msgstr "" #: ../../:150 current stable/2024.1>:56 msgid "" "``octavia_ssh_key_manage`` (True): Enables an Octavia role to generate and " "manage SSH keypair to be used for Amphoras." msgstr "" #: ../../:159 current stable/2024.1>:65 msgid "``octavia_ssh_key_size`` (2048): Private key length." msgstr "" #: ../../:158 current stable/2024.1>:64 msgid "``octavia_ssh_key_type`` (rsa): Type of the SSH keypair generated" msgstr "" #: ../../:365 msgid "" "``openstack_cache_backend_map``: maps selected backend to the oslo driver " "that should be installed and configured for it." msgstr "" #: ../../:362 msgid "" "``openstack_cache_backend``: defines driver, that will be used for caching. " "Default: oslo_cache.memcache_pool" msgstr "" #: ../../:1212 origin/stable/ocata>:1875 msgid "" "``openstack_code_name`` --> ``openstack_distrib_code_name`` " "``openstack_release`` --> ``openstack_distrib_release``" msgstr "" #: ../../:1011 msgid "``percona_package_download_validate_certs``" msgstr "" #: ../../:1013 msgid "``percona_package_fallback_url``" msgstr "" #: ../../:1015 msgid "``percona_package_path``" msgstr "" #: ../../:1014 msgid "``percona_package_sha256``" msgstr "" #: ../../:1012 msgid "``percona_package_url``" msgstr "" #: ../../:609 msgid "``playbooks/inventory/group_vars/hosts.yml``" msgstr "" #: ../../:1016 msgid "``qpress_package_download_validate_certs``" msgstr "" #: ../../:1018 msgid "``qpress_package_fallback_url``" msgstr "" #: ../../:1020 msgid "``qpress_package_path``" msgstr "" #: ../../:1019 msgid "``qpress_package_sha256``" msgstr "" #: ../../:1017 msgid "``qpress_package_url``" msgstr "" #: ../../:1466 msgid "``repo_build_concurrency``" msgstr "" #: ../../:1467 msgid "``repo_build_venv_build_dir``" msgstr "" #: ../../:1470 msgid "``repo_build_venv_command_options``" msgstr "" #: ../../:1468 msgid "``repo_build_venv_dir``" msgstr "" #: ../../:1469 msgid "``repo_build_venv_pip_install_options``" msgstr "" #: ../../:1464 msgid "``repo_build_venv_rebuild``" msgstr "" #: ../../:1463 msgid "``repo_build_venv_selective``" msgstr "" #: ../../:1465 msgid "``repo_build_venv_timeout``" msgstr "" #: ../../:424 stable/stein>:1447 msgid "``repo_pkg_cache_bind``" msgstr "" #: ../../:426 stable/stein>:1449 msgid "``repo_pkg_cache_dir``" msgstr "" #: ../../:425 stable/stein>:1448 msgid "``repo_pkg_cache_dirname``" msgstr "" #: ../../:422 stable/stein>:1445 msgid "``repo_pkg_cache_enabled``" msgstr "" #: ../../:428 stable/stein>:1451 msgid "``repo_pkg_cache_group``" msgstr "" #: ../../:427 stable/stein>:1450 msgid "``repo_pkg_cache_owner``" msgstr "" #: ../../:423 stable/stein>:1446 msgid "``repo_pkg_cache_port``" msgstr "" #: ../../:1053 stable/train>:436 #: stable/ussuri>:594 msgid "``repo_pypiserver_bin``" msgstr "" #: ../../:1056 stable/train>:439 #: stable/ussuri>:597 msgid "``repo_pypiserver_init_overrides``" msgstr "" #: ../../:1052 stable/train>:435 #: stable/ussuri>:593 msgid "``repo_pypiserver_package_path``" msgstr "" #: ../../:1051 stable/train>:434 #: stable/ussuri>:592 msgid "``repo_pypiserver_pip_packages``" msgstr "" #: ../../:1050 stable/train>:433 #: stable/ussuri>:591 msgid "``repo_pypiserver_port``" msgstr "" #: ../../:1055 stable/train>:438 #: stable/ussuri>:596 msgid "``repo_pypiserver_start_options``" msgstr "" #: ../../:1054 stable/train>:437 #: stable/ussuri>:595 msgid "``repo_pypiserver_working_dir``" msgstr "" #: ../../:1471 msgid "``repo_venv_default_pip_packages``" msgstr "" #: ../../:610 msgid "``requirements.txt``" msgstr "" #: ../../:570 msgid "``sfc``" msgstr "" #: ../../:1586 msgid "" "``uca``: This option installs Ceph from the Ubuntu Cloud Archive. Additional " "variables to adjust items such as the OpenStack/Ceph release can be found in " "the variables files." msgstr "" #: ../../:387 msgid "" "`horizon_listen_ports` variable was transformed to the dictionary with " "required keys `http` and `https` to have effect not only for apache ports." "conf file, but also for the virtual host." msgstr "" #: ../../:389 stable/2023.2>:553 #: unmaintained/zed>:117 msgid "" "`nova_pci_passthrough_whitelist` is now deprecated in favor of " "`nova_device_spec`." msgstr "" #: ../../:747 msgid "" "`rabbitmq_install_method: file` is deprecated now and will be removed in the " "Wallaby release. As for now supported options are only `external_repo` and " "`distro`. Among with that the following variables are deprecated and " "prepared for the removal:" msgstr "" #: ../../:766 msgid "" "aodh.yml and haproxy.yml will be copied into ``/etc/openstack_deploy/env.d``." " LBaaS agent information will be added to ``/etc/openstack_deploy/env.d/" "neutron.yml``." msgstr "" #: ../../:1577 stable/train>:590 #: stable/ussuri>:823 msgid "" "ceilometer-polling services running on compute nodes did not have the " "polling namespace configured. Because of this they used the default value of " "running all pollsters from the central and compute namespaces. But the " "pollsters from the central namespace don't have to run on every compute node." " This is fixed by only running the compute pollsters on compute nodes." msgstr "" #: ../../:323 stable/queens>:623 stable/rocky>:1503 msgid "" "ceph-ansible is no longer configured to install ntp by default, which " "creates a conflict with OSA's ansible-hardening role that is used to " "implement ntp using 'chrony'." msgstr "" #: ../../:318 current msgid "ceph_apt_repo_url" msgstr "" #: ../../:319 current msgid "ceph_apt_repos" msgstr "" #: ../../:317 current msgid "ceph_yum_repo_url" msgstr "" #: ../../:1924 msgid "cinder_v2_service_password" msgstr "" #: ../../:106 unmaintained/wallaby>:753 msgid "" "cloudkitty_collected_services is deprecated and should instead be configured " "in Cloudkitty metrics config" msgstr "" #: ../../:92 unmaintained/wallaby>:642 msgid "cloudkitty_galera_port inherits `galera_port` and defaults to \"3306\"" msgstr "" #: ../../:84 unmaintained/wallaby>:634 msgid "" "cloudkitty_package_state inherits `package_state` and defaults to \"latest\"" msgstr "" #: ../../:96 unmaintained/wallaby>:646 msgid "" "cloudkitty_service_region inherits `service_region` and defaults to " "\"RegionOne\"" msgstr "" #: ../../:88 unmaintained/wallaby>:638 msgid "" "cloudkitty_uwsgi_bind_address inherits `openstack_service_bind_address` and " "defaults to 0.0.0.0" msgstr "" #: ../../:451 msgid "config (optional)" msgstr "" #: ../../:1922 msgid "container_openstack_password" msgstr "" #: ../../:330 msgid "coordination_client_ssl" msgstr "" #: ../../:328 msgid "coordination_driver" msgstr "" #: ../../:329 msgid "coordination_group" msgstr "" #: ../../:332 msgid "coordination_port" msgstr "" #: ../../:331 msgid "coordination_verify_cert" msgstr "" #: ../../:148 stable/pike>:215 #: stable/queens>:453 msgid "error: Failed to initialize NSS library" msgstr "" #: ../../:3266 msgid "" "galera_package_download_validate_certs changed to " "percona_package_download_validate_certs for clarity" msgstr "" #: ../../:3262 msgid "galera_package_path changed to percona_package_path for clarity" msgstr "" #: ../../:3258 msgid "galera_package_sha256 changed to percona_package_sha256 for clarity" msgstr "" #: ../../:3254 msgid "galera_package_url changed to percona_package_url for clarity" msgstr "" #: ../../:406 msgid "galera_pki_authorities" msgstr "" #: ../../:404 msgid "galera_pki_certificates" msgstr "" #: ../../:409 msgid "galera_pki_certs_path" msgstr "" #: ../../:402 msgid "galera_pki_create_ca" msgstr "" #: ../../:401 msgid "galera_pki_dir" msgstr "" #: ../../:407 msgid "galera_pki_install_ca" msgstr "" #: ../../:412 msgid "galera_pki_install_certificates" msgstr "" #: ../../:410 msgid "galera_pki_intermediate_cert_name" msgstr "" #: ../../:411 msgid "galera_pki_intermediate_cert_path" msgstr "" #: ../../:408 msgid "galera_pki_keys_path" msgstr "" #: ../../:403 msgid "galera_pki_regen_ca" msgstr "" #: ../../:405 msgid "galera_pki_regen_cert" msgstr "" #: ../../:563 msgid "galera_ssl_ca_self_signed_subject" msgstr "" #: ../../:561 msgid "galera_ssl_self_signed_regen" msgstr "" #: ../../:562 msgid "galera_ssl_self_signed_subject" msgstr "" #: ../../:400 msgid "galera_ssl_verify" msgstr "" #: ../../:437 msgid "gnocchi_ceph_incoming_pool" msgstr "" #: ../../:438 msgid "gnocchi_ceph_incoming_username" msgstr "" #: ../../:434 msgid "gnocchi_incoming_driver" msgstr "" #: ../../:435 msgid "gnocchi_incoming_file_basepath" msgstr "" #: ../../:436 msgid "gnocchi_incoming_swift_container_prefix" msgstr "" #: ../../:432 msgid "gnocchi_storage_file_basepath" msgstr "" #: ../../:433 msgid "gnocchi_storage_swift_container_prefix" msgstr "" #: ../../:2564 msgid "has been changed to:" msgstr "" #: ../../:289 msgid "horizon_websso_default_redirect" msgstr "" #: ../../:291 msgid "horizon_websso_default_redirect_logout" msgstr "" #: ../../:290 msgid "horizon_websso_default_redirect_region" msgstr "" #: ../../:140 msgid "https://bugs.launchpad.net/nova-lxd/+bug/1746068" msgstr "" #: ../../:598 origin/stable/ocata>:619 #: stable/pike>:1590 stable/pike>:1611 msgid "https://bugs.launchpad.net/openstack-ansible/+bug/1697531" msgstr "" #: ../../:798 stable/2023.2>:610 stable/yoga>:191 #: unmaintained/zed>:261 msgid "https://bugs.launchpad.net/openstack-ansible/+bug/2021410" msgstr "" #: ../../:139 msgid "https://bugs.launchpad.net/ubuntu/+source/python-pylxd/+bug/1736454" msgstr "" #: ../../:407 msgid "" "https://docs.djangoproject.com/en/4.1/ref/settings/#csrf-trusted-origins" msgstr "" #: ../../:599 origin/stable/ocata>:620 #: stable/pike>:1591 stable/pike>:1612 msgid "https://github.com/lxc/lxc/issues/1623" msgstr "" #: ../../:760 stable/2023.2>:575 stable/yoga>:159 #: unmaintained/zed>:229 msgid "https://github.com/rabbitmq/rabbitmq-server/discussions/8386" msgstr "" #: ../../:600 origin/stable/ocata>:621 #: stable/pike>:1592 stable/pike>:1613 msgid "https://github.com/systemd/systemd/issues/6121" msgstr "" #: ../../:63 unmaintained/xena>:192 msgid "https://nvd.nist.gov/vuln/detail/CVE-2022-27376" msgstr "" #: ../../:64 unmaintained/xena>:193 msgid "https://nvd.nist.gov/vuln/detail/CVE-2022-27377" msgstr "" #: ../../:65 unmaintained/xena>:194 msgid "https://nvd.nist.gov/vuln/detail/CVE-2022-27380" msgstr "" #: ../../:786 msgid "keystone_assignment_driver" msgstr "" #: ../../:1923 msgid "keystone_auth_admin_token" msgstr "" #: ../../:573 msgid "keystone_centos_nginx_key" msgstr "" #: ../../:572 msgid "keystone_centos_nginx_mirror" msgstr "" #: ../../:782 msgid "keystone_identity_driver" msgstr "" #: ../../:788 msgid "keystone_ldap_identity_driver" msgstr "" #: ../../:574 msgid "keystone_nginx_access_log_format_combined" msgstr "" #: ../../:575 msgid "keystone_nginx_access_log_format_extras" msgstr "" #: ../../:577 msgid "keystone_nginx_extra_conf" msgstr "" #: ../../:576 msgid "keystone_nginx_ports" msgstr "" #: ../../:787 msgid "keystone_resource_driver" msgstr "" #: ../../:785 msgid "keystone_revocation_driver" msgstr "" #: ../../:783 msgid "keystone_token_driver" msgstr "" #: ../../:784 msgid "keystone_token_provider" msgstr "" #: ../../:571 msgid "keystone_web_server" msgstr "" #: ../../:1117 msgid "" "liberty release notes: https://wiki.openstack.org/wiki/ReleaseNotes/" "Liberty#OpenStack_Image_Service_.28Glance.29" msgstr "" #: ../../:549 stable/ussuri>:767 msgid "lxd_bind_address" msgstr "" #: ../../:550 stable/ussuri>:768 msgid "lxd_bind_port" msgstr "" #: ../../:551 stable/ussuri>:769 msgid "lxd_storage_backend" msgstr "" #: ../../:553 stable/ussuri>:771 msgid "lxd_storage_create_device" msgstr "" #: ../../:552 stable/ussuri>:770 msgid "lxd_trust_password" msgstr "" #: ../../:1974 msgid "" "memcached now logs with multiple levels of verbosity, depending on the user " "variables. Setting ``debug: True`` enables maximum verbosity while setting " "``verbose: True`` logs with an intermediate level." msgstr "" #: ../../:449 msgid "name (required)" msgstr "" #: ../../:971 msgid "" "networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin => " "flow_classifier" msgstr "" #: ../../:973 msgid "networking_sfc.services.sfc.plugin.SfcPlugin => sfc" msgstr "" #: ../../:711 msgid "neutron_firewall_driver: openvswitch" msgstr "" #: ../../:536 stable/ussuri>:725 msgid "" "nova-placement-api has been removed from the os_nova role, along with all " "`nova_placement_*` variables. Please review the `os_placement` role for " "information about how to configure the new placement service." msgstr "" #: ../../:3197 msgid "nova_apt_packages -> nova_distro_packages" msgstr "" #: ../../:3200 msgid "nova_compute_kvm_apt_packages -> nova_compute_kvm_distro_packages" msgstr "" #: ../../:548 stable/ussuri>:766 msgid "nova_compute_lxd_pip_packages" msgstr "" #: ../../:818 stable/pike>:1941 msgid "nova_console_keymap" msgstr "" #: ../../:1925 msgid "nova_ec2_service_password" msgstr "" #: ../../:3199 msgid "nova_novnc_apt_packages -> nova_novnc_distro_packages" msgstr "" #: ../../:819 stable/pike>:1942 msgid "nova_novncproxy_vnc_keymap" msgstr "" #: ../../:1928 msgid "nova_s3_service_password" msgstr "" #: ../../:3198 msgid "nova_spice_apt_packages -> nova_spice_distro_packages" msgstr "" #: ../../:820 stable/pike>:1943 msgid "nova_spice_console_keymap" msgstr "" #: ../../:547 stable/ussuri>:765 msgid "nova_supported_virt_types 'lxd' list entry" msgstr "" #: ../../:1927 msgid "nova_v21_service_password" msgstr "" #: ../../:1926 msgid "nova_v3_service_password" msgstr "" #: ../../:2145 stable/queens>:1109 msgid "" "openSUSE Leap 42.X support is still work in progress and not fully tested " "besides basic coverange in the OpenStack CI and individual manual testing. " "Even though backporting fixes to the Pike release will be done on best " "effort basis, it's advised to use the master branch when working on openSUSE " "hosts." msgstr "" #: ../../:620 msgid "openstack_hosts_systemd_mounts" msgstr "" #: ../../:621 msgid "openstack_hosts_systemd_networkd_devices" msgstr "" #: ../../:622 msgid "openstack_hosts_systemd_networkd_networks" msgstr "" #: ../../:623 msgid "openstack_hosts_systemd_networkd_prefix" msgstr "" #: ../../:624 msgid "openstack_hosts_systemd_services" msgstr "" #: ../../:625 msgid "openstack_hosts_systemd_slice" msgstr "" #: ../../:387 msgid "openstack_user_coe" msgstr "" #: ../../:384 msgid "openstack_user_compute" msgstr "" #: ../../:383 msgid "openstack_user_identity" msgstr "" #: ../../:386 msgid "openstack_user_image" msgstr "" #: ../../:385 msgid "openstack_user_network" msgstr "" #: ../../:410 msgid "" "oslomsg_rabbit_qos_prefetch_count: Must be set to a positive value if " "``oslomsg_rabbit_stream_fanout`` is `True`" msgstr "" #: ../../:412 msgid "" "oslomsg_rabbit_queue_manager: Disabled by default. There is a known issue of " "missing [oslo_concurrency]/lock_path defenition in some service configs, " "which is required for QManager SHM locking process." msgstr "" #: ../../:431 msgid "oslomsg_rabbit_quorum_delivery_limit (default: 0)" msgstr "" #: ../../:432 msgid "oslomsg_rabbit_quorum_max_memory_bytes (default: 0)" msgstr "" #: ../../:430 msgid "oslomsg_rabbit_quorum_queues (default: false)" msgstr "" #: ../../:406 msgid "" "oslomsg_rabbit_stream_fanout: Enabled if ``oslomsg_rabbit_quorum_queues`` is " "also set to `True`" msgstr "" #: ../../:408 msgid "" "oslomsg_rabbit_transient_quorum_queues: Enabled if " "``oslomsg_rabbit_stream_fanout`` is `True`" msgstr "" #: ../../:1848 msgid "" "pip can be installed via the deployment host using the new variable " "``pip_offline_install``. This can be useful in environments where the " "containers lack internet connectivity. Please refer to the `limited " "connectivity installation guide `_ for more information." msgstr "" #: ../../:547 msgid "" "pw-token-gen.py script will generate always 32 char string instead of random " "choice between 24 or 32 length." msgstr "" #: ../../:519 msgid "rabbitmq_management_bind_tcp_port" msgstr "" #: ../../:520 msgid "rabbitmq_management_bind_tls_port" msgstr "" #: ../../:521 msgid "rabbitmq_management_ssl" msgstr "" #: ../../:754 msgid "rabbitmq_package_path" msgstr "" #: ../../:753 msgid "rabbitmq_package_sha256" msgstr "" #: ../../:752 msgid "rabbitmq_package_url" msgstr "" #: ../../:1929 msgid "swift_container_mysql_password" msgstr "" #: ../../:527 msgid "systemd_BlockIOAccounting -> systemd_service_block_io_accounting" msgstr "" #: ../../:526 msgid "systemd_CPUAccounting -> systemd_service_cpu_accounting" msgstr "" #: ../../:528 msgid "systemd_MemoryAccounting -> systemd_service_memory_accounting" msgstr "" #: ../../:531 msgid "systemd_PrivateDevices -> systemd_service_private_devices" msgstr "" #: ../../:532 msgid "systemd_PrivateNetwork -> systemd_service_private_network" msgstr "" #: ../../:530 msgid "systemd_PrivateTmp -> systemd_service_private_tmp" msgstr "" #: ../../:533 msgid "systemd_PrivateUsers -> systemd_service_private_users" msgstr "" #: ../../:524 msgid "systemd_Restart -> systemd_service_restart" msgstr "" #: ../../:525 msgid "systemd_RestartSec -> systemd_service_restart_sec" msgstr "" #: ../../:529 msgid "systemd_TasksAccounting -> systemd_service_tasks_accounting" msgstr "" #: ../../:523 msgid "systemd_TimeoutSec -> systemd_service_timeout_sec" msgstr "" #: ../../:270 stable/2023.2>:263 #: stable/2024.1>:657 msgid "systemd_networkd_filename" msgstr "" #: ../../:271 stable/2023.2>:264 #: stable/2024.1>:658 msgid "systemd_networkd_filename_alt" msgstr "" #: ../../:785 msgid "tempest_compute_change_password" msgstr "" #: ../../:782 msgid "tempest_compute_console_output_enabled" msgstr "" #: ../../:783 msgid "tempest_compute_resize_enabled" msgstr "" #: ../../:784 msgid "tempest_compute_snapshot_enabled" msgstr "" #: ../../:781 msgid "tempest_compute_ssh_user" msgstr "" #: ../../:793 msgid "tempest_enable_instance_password" msgstr "" #: ../../:786 msgid "tempest_image_api_v1_enabled" msgstr "" #: ../../:787 msgid "tempest_image_api_v2_enabled" msgstr "" #: ../../:788 msgid "tempest_swift_container_sync" msgstr "" #: ../../:790 msgid "tempest_swift_discoverable_apis" msgstr "" #: ../../:789 msgid "tempest_swift_object_versioning" msgstr "" #: ../../:794 msgid "tempest_volume_backend_names" msgstr "" #: ../../:791 msgid "tempest_volume_backup_enabled" msgstr "" #: ../../:792 msgid "tempest_volume_multi_backend_enabled" msgstr "" #: ../../:445 msgid "trove_cinder_enabled" msgstr "" #: ../../:444 msgid "trove_designate_enabled" msgstr "" #: ../../:452 msgid "trove_dns_domain_id" msgstr "" #: ../../:451 msgid "trove_dns_domain_name" msgstr "" #: ../../:436 msgid "trove_guest_endpoint_type" msgstr "" #: ../../:462 msgid "trove_guest_oslomsg_notify_hostgroup" msgstr "" #: ../../:461 msgid "trove_guest_oslomsg_rpc_hostgroup" msgstr "" #: ../../:453 msgid "trove_notifications_designate" msgstr "" #: ../../:432 msgid "trove_service_cinder_endpoint_type" msgstr "" #: ../../:430 msgid "trove_service_endpoint_type" msgstr "" #: ../../:434 msgid "trove_service_glance_endpoint_type" msgstr "" #: ../../:431 msgid "trove_service_neutron_endpoint_type" msgstr "" #: ../../:433 msgid "trove_service_nova_endpoint_type" msgstr "" #: ../../:435 msgid "trove_service_swift_endpoint_type" msgstr "" #: ../../:443 msgid "trove_swift_enabled" msgstr "" #: ../../:450 msgid "type (required)" msgstr "" #: ../../:69 stable/ussuri>:150 msgid "" "uWSGI service restart is now properly triggered upon service config change" msgstr "" #: ../../:855 msgid "uWSGI support was implemented to os_blazar role." msgstr "" #: ../../:826 msgid "variable ``tempest_fatal_deprecations`` has been deprecated" msgstr "" #: ../../:818 msgid "variable ``tempest_network_tenant_network_cidr`` has been deprecated" msgstr "" #: ../../:822 msgid "" "variable ``tempest_network_tenant_network_mask_bits`` has been deprecated" msgstr "" #: ../source/2023.1.rst:3 msgid "2023.1 Series Release Notes" msgstr "" #: ../source/2023.2.rst:3 msgid "2023.2 Series Release Notes" msgstr "" #: ../source/2024.1.rst:3 msgid "2024.1 Series Release Notes" msgstr "" #: ../source/index.rst:3 msgid "OpenStack-Ansible Release Notes" msgstr "" #: ../source/liberty.rst:3 msgid "Liberty Series Release Notes" msgstr "" #: ../source/mitaka.rst:3 msgid "Mitaka Series Release Notes" msgstr "" #: ../source/newton.rst:3 msgid "Newton Series Release Notes" msgstr "" #: ../source/ocata.rst:3 msgid "Ocata Series Release Notes" msgstr "" #: ../source/pike.rst:3 msgid "Pike Series Release Notes" msgstr "" #: ../source/queens.rst:3 msgid "Queens Series Release Notes" msgstr "" #: ../source/rocky.rst:3 msgid "Rocky Series Release Notes" msgstr "" #: ../source/stein.rst:3 msgid "Stein Series Release Notes" msgstr "" #: ../source/train.rst:3 msgid "Train Series Release Notes" msgstr "" #: ../source/unreleased.rst:3 msgid "Current Series Release Notes" msgstr "" #: ../source/ussuri.rst:3 msgid "Ussuri Series Release Notes" msgstr "" #: ../source/victoria.rst:3 msgid "Victoria Series Release Notes" msgstr "" #: ../source/wallaby.rst:3 msgid "Wallaby Series Release Notes" msgstr "" #: ../source/xena.rst:3 msgid "Xena Series Release Notes" msgstr "" #: ../source/yoga.rst:3 msgid "Yoga Series Release Notes" msgstr "" #: ../source/zed.rst:3 msgid "Zed Series Release Notes" msgstr ""