Zed Series Release Notes¶
18.0.0.0b1-164¶
New Features¶
Support separate oslo.messaging services for RPC and Notifications to enable operation of separate and different messaging backend servers in trove.
The trove service setup in keystone will now be executed through delegation to the
trove_service_setup_host
which, by default, islocalhost
(the deploy host). Deployers can opt to rather change this to the utility container by implementing the following override inuser_variables.yml
.trove_service_setup_host: "{{ groups['utility_all'][0] }}"
Added guest image upload functionality into Trove role. In order to use this functionality, you need to define
trove_guestagent_images
variable which may contain list of images that are required for upload and set required tags for them.
Added variable
trove_management_security_groups
to set list of security groups that will be set for management interface of Trove guest instances.
Added following variables to control endpoint types that trove will search in the catalog:
trove_service_endpoint_type
trove_service_neutron_endpoint_type
trove_service_cinder_endpoint_type
trove_service_nova_endpoint_type
trove_service_glance_endpoint_type
trove_service_swift_endpoint_type
trove_guest_endpoint_type
Added following variables to control when to add specific service blocks to the config file and enable support for these services:
trove_swift_enabled
trove_designate_enabled
trove_cinder_enabled
Added following variables to ease designate integration with trove:
trove_dns_domain_name
trove_dns_domain_id
trove_notifications_designate
Added Trove guest specific variables to be able to use standalone rabbitmq along with defaulting behaviour to enable guests to use
trove_container_net_name
for rabbitmq servers:trove_guest_oslomsg_rpc_hostgroup
trove_guest_oslomsg_notify_hostgroup
Upgrade Notes¶
Trove service specific config files, like
trove-conductor.conf
andtrove-taskmanager.conf
, were removed and all functionality was merged to thetrove.conf
file. So you need to ensure, that all overriden options are now placed for the trove.conf file.
Default Trove service username has been changed from
admin_trove_user
totrove
. You might want to manually deleteadmin_trove_user
after upgrade or override new default.
Default Trove service project name has been changed from
trove_for_trove_usage
toservice
. You might want to manually deletetrove_for_trove_usage
project after upgrade or override new default.
Default value for
trove_service_net_subnet_cidr
has been changed from “192.168.20.0/24” to “172.29.252.0/22”. Along with that pool start and pool end has changed as well, which is represented with variablestrove_service_net_allocation_pool_start
andtrove_service_net_allocation_pool_end
. Please, define these variables user_variables in case you used default values in production endironments.
Deprecation Notes¶
The rabbitmq server parameters have been replaced by corresponding oslo.messaging RPC and Notify parameters in order to abstract the messaging service from the actual backend server deployment. - trove_oslomsg_rpc_servers replaces trove_rabbitmq_servers - trove_oslomsg_rpc_port replaces trove_rabbitmq_port - trove_oslomsg_rpc_use_ssl replaces trove_rabbitmq_use_ssl - trove_oslomsg_rpc_userid replaces trove_rabbitmq_userid - trove_oslomsg_rpc_vhost replaces trove_rabbitmq_vhost - added trove_oslomsg_notify_servers - added trove_oslomsg_notify_port - added trove_oslomsg_notify_use_ssl - added trove_oslomsg_notify_userid - added trove_oslomsg_notify_vhost - added trove_oslomsg_notify_password
The variable
trove_requires_pip_packages
is no longer required and has therefore been removed.
Variables
trove_taskmanager_config_overrides
andtrove_conductor_config_overrides
were removed along with affected config files. You should usetrove_config_overrides
to override trove configuration.
Removed variable
trove_provider_ip_from_q
andtrove_container_net_name
. If you need to change network which will be used for guests inside trove containers, please use variablestrove_provider_network
ortrove_provider_net_iface
.
Removed variables
trove_admin_user_name
andtrove_service_tenant_name
. Please usetrove_service_user_name
andtrove_service_project_name
correspondingly to manage username and project name which will be used for auth in keystone.
Security Issues¶
The default TLS version has been set to TLS1.2. This only allows version 1.2 of the protocol to be used when terminating or creating TLS connections. You can change the value with the trove_ssl_protocol variable.
16.0.0.0b3¶
New Features¶
You can set the
endpoint_type
used when creating the Trove service network by specifying thetrove_service_net_endpoint_type
variable. This will default tointernal
. Other possible options arepublic
andadmin
.
Deprecation Notes¶
Remove
trove_rpc_backend
option due to deprecation of rpc_backend option in oslo.messaging.
16.0.0.0b2¶
New Features¶
New variables have been added to allow a deployer to customize a trove systemd unit file to their liking.
The task dropping the trove systemd unit files now uses the
config_template
action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and pollute the generic systemd unit file with jinja2 variables and conditionals.
For the
os_trove
role, the systemd unitTimeoutSec
value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. TheRestartSec
value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using thetrove_*_init_config_overrides
variables which use theconfig_template
task to change template defaults.
Upgrade Notes¶
For the
os_trove
role, the systemd unitTimeoutSec
value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. TheRestartSec
value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using thetrove_*_init_config_overrides
variables which use theconfig_template
task to change template defaults.
16.0.0.0b1¶
New Features¶
In the Ocata release, Trove added support for encrypting the rpc communication between the guest DBaaS instances and the control plane. The default values for
trove_taskmanager_rpc_encr_key
andtrove_inst_rpc_key_encr_key
should be overridden to specify installation specific values.
Deprecation Notes¶
The
trove_keystone_auth_plugin
variable has been deprecated.trove_keystone_auth_type
should be used instead to configure authentication type.
Bug Fixes¶
The openstack service uri protocol variables were not being used to set the Trove specific uris. This resulted in ‘http’ always being used for the public, admin and internal uris even when ‘https’ was intended.
15.0.0.0b1¶
Upgrade Notes¶
The variables
trove_requirements_git_repo
andtrove_requirements_git_install_branch
have been removed in favour of using the URL/path to the upper-constraints file using the variablepip_install_upper_constraints
instead.