blob: 58131554af2919c018c9f1e297a99f565284918d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
---
prelude: |
The Kolla Ansible ``22.0.0`` (Prelude) release continues the momentum of
the previous cycle with a strong focus on service modernisation, role
restructuring, and operator quality-of-life improvements. Highlights
include:
* **Service retirements and removals.**
- ``Zun`` and ``Kuryr`` dropped (``Zun`` is broken in 2026.1).
- ``InfluxDB`` (community EOL v1) and ``Telegraf`` removed.
- ``Venus`` removed due to the project being inactive.
- ``Neutron`` Linux Bridge mechanism driver support removed following
its upstream retirement.
* **Role restructuring.**
- The ``common`` role has been renamed to ``kolla_toolbox`` (inventory
group ``kolla-toolbox`` → ``kolla_toolbox``).
- Log-rotation tasks extracted into a dedicated ``cron`` role.
- Log collection tasks extracted into a dedicated ``kolla_logs`` role.
- Host bootstrap tasks moved into ``ansible-collection-kolla``.
* **Unified uWSGI for all API services.**
- All OpenStack API services now run under uWSGI using the shared
``service-uwsgi-config`` role, dropping Apache WSGI support entirely.
- The remaining services (``Barbican``, ``Designate``, ``Glance``, and
``Magnum``) have been migrated in this cycle.
- The now-unnecessary ``glance-tls-proxy`` container is removed during
upgrade.
- HTTP chunked input and configurable thread counts are available to all
uWSGI services.
* **RabbitMQ 4.2 support and upgrade paths.**
- Dynamic upgrade path validation via ``rabbitmq_allowed_upgrades`` and
seamless 4.2 upgrade paths are provided out of the box.
- Management interface TLS support via ``rabbitmq_enable_tls``.
- Stream retention policy configurable via
``rabbitmq_stream_max_segment_size_bytes`` and
``rabbitmq_stream_segment_max_age``.
* **Cinder deployment group changes.**
- ``cinder-volume`` and ``cinder-backup`` now default to the ``cinder``
(control) group instead of ``storage``.
- New inventory groups ``cinder-volume-lvm``, ``cinder-volume-multiple``,
``cinder-backup-lvm``, and ``cinder-backup-multiple`` support advanced
LVM back-end topologies.
* **Neutron and OVN enhancements.**
- ``neutron-ovn-vpn-agent`` is now deployable to enable VPNaaS in OVN
environments.
- Neutron agent wrappers are enabled by default, allowing DHCP and L3
agents to restart without disturbing the main container processes and
reducing dataplane disruption.
- OVN metadata-agent HAProxy processes run in separate wrapper containers.
- ``ovn-northd`` command-line arguments and OVN DB environment variables
are configurable.
* **Observability additions.**
- New ``OpenStack Network Exporter`` for Prometheus gathers OVS/OVN
metrics.
- ``Valkey Exporter`` for Prometheus is now supported.
- Grafana gains an Alertmanager datasource and optional LDAP
authentication.
- ``OpenSearch Dashboards`` index patterns are created automatically.
- ``Fluentd`` ships logs directly to OpenSearch node IPs and
``OpenSearch Dashboards`` connects directly to data nodes, removing
intermediate HAProxy hops.
- API health-check endpoints have been standardised across all services.
* **Ironic improvements.**
- Multiple Nova Compute Ironic instances on the same host are now
supported for large bare-metal deployments.
- The experimental ``ironic-pxe-filter`` service is available.
- Legacy (non-rolling) Ironic upgrade support has been dropped.
- DNS configuration can now be supplied through Ironic DHCP ranges for
IPA NTP and FQDN endpoint reachability.
* **Security hardening.**
- HAProxy TLS settings hardened to follow Mozilla SSL Modern
recommendations for HAProxy 2.8+ / OpenSSL 3.x.
- ``Skyline`` gains TLS 1.2/1.3 support for HTTPS upstream endpoints.
- Keystone ``mod_auth_openidc`` now supports templated OIDC metadata
files and customisable authentication error pages.
* **Ansible version bump.** The minimum supported version is now Ansible
``12`` (ansible-core 2.19) and the maximum is Ansible ``13``
(ansible-core 2.20).
|
