@@ -186,7 +186,97 @@ For example:
186
186
Known issues
187
187
============
188
188
189
- * None so far!
189
+ Pulp Upgrade
190
+ ------------
191
+
192
+ It was found that if pulp is upgraded from 3.43.1 to 3.81.0, most of pulp
193
+ APIs become unusable because of a bug related to missing response header
194
+ when docker clients expect it.
195
+
196
+ Generally pulp is considered to be safe to completely destroy and re-deploy.
197
+ So, users are encouraged to upgrade pulp in this method.
198
+
199
+ If your pulp has custom built images, we recommended either not doing pulp
200
+ upgrade by pinning pulp version at ``seed_pulp_container.pulp.tag``in
201
+ ``$KAYOBE_CONFIG_PATH/seed.yml `` (``$KAYOBE_CONFIG_PATH/environments/<env>/seed.yml ``
202
+ if using environments) to 3.43.1,
203
+
204
+ or pulling all custom built images before destroying pulp then push them again
205
+ after pulp upgrade is done.
206
+
207
+ Let's Encrypt
208
+ -------------
209
+
210
+ `Let's Encrypt TLS settings fix <https://review.opendev.org/c/openstack/kolla-ansible/+/925971 >`__
211
+ brought breaking change to Let’s Encrypt ansible role. Now users have to explictly set the target
212
+ Let’s Encrypt ACME server as a kolla ansible variable ``letsencrypt_external_cert_server ``/
213
+ ``letsencrypt_internal_cert_server `` if they were using Let’s Encrypt as a CA of their
214
+ external/internal TLS certificates.
215
+
216
+ Cinder
217
+ ------
218
+
219
+ `Enhancement of Ceph integration of multiple clusters
220
+ <https://review.opendev.org/c/openstack/kolla-ansible/+/907166> `__
221
+ made Cinder role now requires ``user `` and ``pool `` set to the each item of kolla dict
222
+ variable ``cinder_ceph_backends `` at ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
223
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments)
224
+ For example,
225
+
226
+ .. code :: yaml
227
+
228
+ cinder_ceph_backends :
229
+ - name : rbd-1
230
+ cluster : ceph
231
+ user : cinder
232
+ pool : volumes
233
+ enabled : true
234
+ - name : rbd-2
235
+ cluster : ceph-hdd
236
+ user : cinder
237
+ pool : volumes-hdd
238
+ enabled : true
239
+
240
+ You can find the name of pools from ``cephadm_pools `` in cephadm.yml.
241
+
242
+ The K-A upstream change `<https://review.opendev.org/c/openstack/kolla-ansible/+/909974 >`__
243
+ requires users to manually set Cinder cluster name at ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
244
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments).
245
+ It should be matching with current cluster name. You can find the name from ``cinder.conf ``.
246
+
247
+ .. code :: yaml
248
+
249
+ cinder_cluster_name : ceph
250
+
251
+ CloudKitty
252
+ ----------
253
+
254
+ Elasticseach storage driver is no longer compatible with Opensearch storage backend.
255
+ Need to set CloudKitty storage backend to Opensearch if it was set to be Elasticseach before.
256
+ This can be set at ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
257
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments)
258
+
259
+ .. code :: yaml
260
+
261
+ cloudkitty_storage_backend : opensearch
262
+
263
+ Ironic
264
+ ------
265
+
266
+ From Dalmatian, `Kayobe no longer provides its own default driver & interfaces
267
+ <https://review.opendev.org/c/openstack/kayobe/+/836999> `__
268
+ for Ironic and follows Ironic's default.
269
+ This can cause your Ironic configuration ``ironic.conf `` to have regression.
270
+ Check the configuration difference before applying and re-add your options at
271
+ ``$KAYOBE_CONFIG_PATH/kolla/ironic.conf ``
272
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/ironic.conf `` if using environments)
273
+
274
+ For example,
275
+
276
+ .. code :: yaml
277
+
278
+ [DEFAULT]
279
+ enabled_network_interfaces = neutron
190
280
191
281
Security baseline
192
282
=================
0 commit comments