Newton Series Release Notes¶
sysstatpackage was installed on all distributions, but it was only configured to run on Ubuntu and OpenSUSE. It would not run on CentOS due to bad SELinux contexts and file permissions on
/etc/cron.d/sysstat. This has been fixed and
sysstatnow runs properly on CentOS.
net.bridge.bridge-nf-call-*kernel parameters were set to
0in previous releases to improve performance and it was left up to neutron to adjust these parameters when security groups are applied. This could cause situations where bridge traffic was not sent through iptables and this rendered security groups ineffective. This could allow unexpected ingress and egress traffic within the cloud.
These kernel parameters are now set to
1on all hosts by the
openstack_hostsrole, which ensures that bridge traffic is always sent through iptables.
The copy of the
/etc/openstack-releasefile is now optional. To disable the copy of the file, set
The location of the
/etc/openstack-releasefile placement can now be changed. Set the variable
openstack_distrib_file_pathto place it in a different path.
The variables used to produce the
/etc/openstack-releasefile have been changed in order to improve consistency in the name spacing according to their purpose.
Note that the value for
openstack_distrib_releasewill be taken from the variable
openstack_releaseif it is set.
openstack_domainhas been added to the openstack_hosts role. This option is used to setup proper hostname entries for all hosts within a given OpenStack deployment.
The openstack_hosts role will setup an RFC1034/5 hostname and create an alias for all hosts in inventory.
The openstack_hosts role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting
The PATH environment variable that is configured on the remote system can now be set using the
openstack_host_apt_packageshas been renamed to
The openstack_hosts role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option
openstack_hosts_package_stateshould be set to
The LVM configuration tasks and
lvm.conftemplate have been removed from the
openstack_hostsrole since they are no longer needed. All of the LVM configuration is properly handled in the
openstack_host_apt_packagesvariable has been deprecated.
openstack_host_packagesshould be used instead to override packages required to install on all OpenStack hosts.