Current Series Release Notes

23.0.0.0rc1-23

New Features

  • Adds support in the kolla_docker module to clear Docker’s default MaskedPaths/ReadonlyPaths container hardening (equivalent to docker run --security-opt systempaths=unconfined) via the new systempaths_unconfined module parameter. Docker only; ignored under Podman.

  • neutron-ovn-agent now supports running metadata subprocesses in separate containers when neutron_agents_wrappers is true (which is the default).

Upgrade Notes

  • neutron-ovn-metadata-agent has been removed, following it’s removal in Neutron. Metadata is now served using neutron-ovn-agent. If you are using any config overrides for neutron-ovn-metadata-agent you need to adapt them to point to neutron-ovn-agent.

  • The neutron-ovn-agent now runs metadata service, since the neutron-ovn-metadata-agent has been dropped in Neutron.

  • The octavia-certificates role has been reworked to stop leaking octavia_ca_password and octavia_client_ca_password in Ansible output. As a result, the octavia_certs_openssl_cnf_path variable has been removed, and a custom OpenSSL configuration file is no longer supported.

Bug Fixes

  • Fixes an issue with missing directories and incorrect permissions in the LetsEncrypt deployment. LP#2152679

  • Set a unique oslo.messaging queue manager process name for trove-api to prevent shared-memory file collisions under uWSGI. LP#2170958

  • Fixes kolla-ansible check skip unhealthy containers. LP#2156900