@@ -35,178 +35,15 @@ Notable changes in the |current_release| Release
35
35
There are many changes in the OpenStack |current_release | release described in
36
36
the release notes for each project. Here are some notable ones.
37
37
38
- Heat disabled by default
39
- ------------------------
38
+ .. TODO Add notable changes
40
39
41
- The Heat OpenStack service is no longer enabled by default.
42
-
43
- This behavior can be overridden manually:
44
-
45
- .. code-block :: yaml
46
- :caption : ` ` kolla.yml``
47
-
48
- kolla_enable_heat : true
49
-
50
- Wherever possible, Magnum deployments should be migrated to the CAPI Helm
51
- driver. Instructions for enabling the driver can be found `here
52
- <../configuration/magnum-capi.rst> `_. Enable the driver, recreate any clusters
53
- using Heat, and disable the service.
54
-
55
- After the upgrade (so that alerts don't fire) you can remove Heat with the
56
- following:
57
-
58
- .. code-block :: console
59
-
60
- kayobe overcloud host command run --command "rm /etc/kolla/haproxy/services.d/heat-api.cfg" -l network -b
61
- kayobe overcloud host command run --command "rm /etc/kolla/haproxy/services.d/heat-api-cfn.cfg" -l network -b
62
-
63
- kayobe overcloud host command run --command "systemctl restart kolla-haproxy-container.service" -l network[0] -b
64
- kayobe overcloud host command run --command "systemctl restart kolla-haproxy-container.service" -l network[1] -b
65
- kayobe overcloud host command run --command "systemctl restart kolla-haproxy-container.service" -l network[2] -b
66
-
67
- kayobe overcloud host command run --command "systemctl stop kolla-heat_api-container.service kolla-heat_api_cfn-container.service kolla-heat_engine-container.service" -l controllers -b
68
- kayobe overcloud host command run --command "systemctl disable kolla-heat_api-container.service kolla-heat_api_cfn-container.service kolla-heat_engine-container.service" -l controllers -b
69
- kayobe overcloud host command run --command "rm /etc/systemd/system/kolla-heat_api-container.service" -l controllers -b
70
- kayobe overcloud host command run --command "rm /etc/systemd/system/kolla-heat_api_cfn-container.service" -l controllers -b
71
- kayobe overcloud host command run --command "rm /etc/systemd/system/kolla-heat_engine-container.service" -l controllers -b
72
-
73
- kayobe overcloud host command run --command "docker rm heat_api heat_api_cfn heat_engine" -l controllers
74
-
75
- kayobe overcloud host command run --command "rm -rf /etc/kolla/heat-api /etc/kolla/heat-api-cfn /etc/kolla/heat-engine" --limit controllers -b
76
-
77
- Then from the OpenStack CLI:
78
-
79
- .. code-block :: console
80
-
81
- openstack service delete heat
82
- openstack user delete heat
83
- openstack domain set --disable heat_user_domain
84
- openstack domain delete heat_user_domain
85
- openstack endpoint list --service heat -c ID -f value | xargs openstack endpoint delete
86
- openstack endpoint list --service heat-cfn -c ID -f value | xargs openstack endpoint delete
87
-
88
- You can drop the ``heat `` database too, unless you want to keep historical content.
89
-
90
- .. code-block :: console
91
-
92
- docker exec -it mariadb mysql -u root -p
93
- Enter the database password when prompted.
94
- drop database heat;
95
-
96
- Designate sink disabled by default
97
- ----------------------------------
98
-
99
- Designate sink is an optional Designate service which listens for event
100
- notifications, primarily from Nova and Neutron. It is disabled by default (when
101
- designate is enabled) in Caracal. It is not required for Designate to function.
102
-
103
- If you still wish to use it, you should set the flag manually:
104
-
105
- .. code-block :: yaml
106
- :caption : ` ` kolla/globals.yml``
107
-
108
- designate_enable_notifications_sink : true
109
-
110
- If you are using Designate and do not make this change, the Antelope
111
- ``designate-sink `` container will remain on the controllers after the upgrade.
112
- It must be removed manually.
113
-
114
- Grafana Volume
115
- --------------
116
- The Grafana container volume is no longer used. If you wish to automatically
117
- remove the old volume, set ``grafana_remove_old_volume `` to ``true `` in
118
- ``kolla/globals.yml ``. Note that doing this will lose any plugins installed via
119
- the CLI directly and not through Kolla. If you have previously installed
120
- Grafana plugins via the Grafana UI or CLI, you must change to installing them
121
- at image build time. The Grafana volume, which contains existing custom
122
- plugins, will be automatically removed in the next release.
123
-
124
- Prometheus HAproxy Exporter
125
- ---------------------------
126
- Due to the change from using the ``prometheus-haproxy-exporter `` to using the
127
- native support for Prometheus which is now built into HAProxy, metric names may
128
- have been replaced and/or removed, and in some cases the metric names may have
129
- remained the same but the labels may have changed. Alerts and dashboards may
130
- also need to be updated to use the new metrics. Please review any configuration
131
- that references the old metrics as this is not a backwards compatible change.
132
-
133
- Horizon configuration
134
- ---------------------
135
- The Horizon role has been reworked to the preferred ``local_settings.d ``
136
- configuration model. Files ``local_settings `` and ``custom_local_settings ``
137
- have been renamed to ``_9998-kolla-settings.py `` and
138
- ``_9999-custom-settings.py `` respectively. Users who use Horizon's custom
139
- configuration must change the names of those files in
140
- ``etc/kolla/config/horizon `` as well.
141
-
142
- Neutron DNS Domain
143
- ------------------
144
- When Designate is enabled and the default Neutron DNS integration has not been
145
- disabled, ``neutron_dns_domain `` must be configured manually in
146
- ``kolla/globals.yml ``.
147
-
148
- The ``neutron_dns_domain `` must end with a period ``. `` e.g. ``example.com. ``.
149
- The domain set should be something that is not use anywhere else such as
150
- ``internal.compute.example.com. ``
151
-
152
- The Neutron DNS integration can be disabled by setting
153
- ``neutron_dns_integration: false `` in ``kolla/globals.yml ``
154
-
155
- Redis Default User
156
- ------------------
157
-
158
- The ``redis_connection_string `` has changed the username used from ``admin ``
159
- to ``default ``. Whilst this does not have any negative impact on services
160
- that utilise Redis it will feature prominently in any preview of the overcloud
161
- configuration.
162
-
163
- AvailabilityZoneFilter removal
164
- ------------------------------
165
-
166
- Support for the ``AvailabilityZoneFilter `` filter has been dropped in Nova.
167
- Remove it from any Nova config files before upgrading. It will cause errors in
168
- Caracal and halt the Nova scheduler.
40
+ Placeholder
41
+ -----------
169
42
170
43
Known issues
171
44
============
172
45
173
- * Due to an incorrect default value NGS will attempt to use v3alpha for the api
174
- path when communicating with etcd3. This isn't possible as in Caracal etcd is
175
- running a newer version that has dropped support for v3alpha. You can work
176
- around this in custom config, see the SMS PR for an example:
177
- https://github.com/stackhpc/smslab-kayobe-config/pull/354
178
-
179
- * Due to a `security-related change in the GRUB package on Rocky Linux 9
180
- <https://access.redhat.com/security/cve/CVE-2023-4001> `__, the operating
181
- system can become unbootable (boot will stop at a ``grub> `` prompt). Remove
182
- the ``--root-dev-only `` option from ``/boot/efi/EFI/rocky/grub.cfg `` after
183
- applying package updates. This will happen automatically as a post hook when
184
- running the ``kayobe overcloud host package update `` command.
185
-
186
- * After upgrading OpenSearch to the latest 2023.1 container image, we have seen
187
- cluster routing allocation be disabled on some systems. See bug for details:
188
- https://bugs.launchpad.net/kolla-ansible/+bug/2085943.
189
- This will cause the "Perform a flush" handler to fail during the 2024.1
190
- OpenSearch upgrade. To workaround this, you can run the following PUT request
191
- to enable allocation again:
192
-
193
- .. code-block :: console
194
-
195
- curl -X PUT "https://<kolla-vip>:9200/_cluster/settings?pretty" -H 'Content-Type: application/json' -d '{ "transient" : { "cluster.routing.allocation.enable" : "all" } } '
196
-
197
- * Cinder database migrations fail during the upgrade process when the
198
- ``use_quota `` column is set to ``NULL ``, which can be the case on deleted
199
- volumes and snapshots if OpenStack has been in operation for several
200
- releases. See `Launchpad bug 2070475
201
- <https://bugs.launchpad.net/cinder/+bug/2070475> `__ for details. Until the
202
- `database migrations are fixed
203
- <https://review.opendev.org/c/openstack/cinder/+/923635> `__, the data can be
204
- fixed with the following MySQL queries:
205
-
206
- .. code-block :: mysql
207
-
208
- UPDATE volumes SET use_quota = 1 WHERE use_quota IS NULL AND deleted_at IS NOT NULL;
209
- UPDATE snapshots SET use_quota = 1 WHERE use_quota IS NULL AND deleted_at IS NOT NULL;
46
+ * None so far!
210
47
211
48
Security baseline
212
49
=================
0 commit comments