3.0.0 Camellia

This is the first release in the Camellia 3.0 series.

Notable Changes

Upgrades

  • Upgrade OS to Rocky Linux 9.6.

  • Upgrade kubernetes to 1.32.5.

  • Upgrade openstack to 2024.1 (Caracal).

  • Upgrade ceph to 19.2.2 (squid).

  • Upgrade btx to 3.0.0.

New

  • The default neutron ML2 driver is OVN.

  • Mariadb controller is added for mariadb HA service.

Deprecate

  • Deprecate nova_vnc_cert submodule playbook. It is replaced by OpenStack-Helm nova chart. It will be removed in the future release.

  • Deprecate nova_compute_sshkey_copy submodule playbook. It is replaced by OpenStack-Helm nova chart. It will be removed in the future release.

Removed

  • ML2/LinuxBridge is not supported any more.

  • Mariadb ingress controller is removed (Replaced by mariadb controller).

Changelog

  • openstack(mariadb): add service and mgmt cidr to mariadb netpol

  • openstack(cinder): set cinder-volume replica to 1

  • descheduler: add a variable install_descheduler(default: false)

  • descheduler: remove Role and RoleBinding in rbac.yaml

  • common: add python3-libselinux in prerequiresite package

  • remove runsc off of bin.txt

  • script: add close action in milestone script

  • feature/begonia/security hardening (#276)

  • descheduler: upgrade to 0.32.1

  • openstack(ovn): Set db and northd to a single replica

  • script: remove curl download in create_tarball.sh

  • openstack(neutron): fix tenant_network_types

  • openstack(neutron): metadata_proxy_shared_secret in vault

  • openstack(glance): modify useHostNetwork.api in glance.yml.j2

  • openstack(neutron): add ovn_metadata_agent TLS configuration; set ovn_db_sync mode to repair

  • openstack(nova): add security.conf in apache configuration

  • openstack(neutron): use public endpoint for metadata service

  • mariadb: upgrade version to 10.11.13

  • openstack-helm: update version information

  • openstack(ovn): add ovn_controller_gw label

  • ansible: modify hosts.sample to update node_labels

  • openstack(ovn): Change PVC mountpoint from /etc/ovn to /var/lib/ovn where db file is

  • openstack(neutron): add neutron_ovn_db_sync image entry in neutron.yml.j2

  • openstack: keep the order of item list in osh_infra_charts and osh_charts

  • openstack(neutron): add {runtime,priority}ClassName for cron-job-ovn-db-sync

  • openstack-helm: add neutron ovn db sync in configmap-bin.yaml

  • openstack-helm: add _kubernetes_pod_priority_class.tpl in helm-toolkit

  • openstack(neutron): Add ovn db sync cron job

  • openstack(mariadb): move db_acl_cidrs variable to defaults/main

  • openstack(mariadb): add db_acl_cidrs

  • openstack(mariadb): add network policy

  • openstack(libvirt): add kubectl image url

  • openstack(mariadb): support multiple db acl cidr

  • fix(nova): add back instances_path in nova conf

  • update netapp_vars.yml

  • add openstack-helm git commit ID in VERSIONS

  • update btx submodule to 3.0.0

  • update VERSIONS file

  • add csi-powerstore helm chart files which were missing

  • vars: update versions

  • patch: include 02, 03, 04 patch files

  • update genesisregistry and localrepo roles

  • patch: comment out validate in kubeadm-secondary.yml

  • patches: update 02, 03, 04 patch files

  • update download url variables

  • update kubelet csr approver version in vars.yml.sample

  • upgrade kubelet-csr-approver to 1.2.10

  • prepare.sh: bump up python version to 3.12

  • vars: override coredns_deployment_nodeselector variable to run coredns pods on control plane nodes

  • openstack(nova): fix ssh keypair variables

  • update image list

  • update binary and image list files

  • vars: update variables

  • burrito.openstack: add openvswitch in osh_infra chart group

  • openstack(mariadb): remove backup variables

  • openstack(openvswitch): fix –remote parameter value

  • openstack(nova): add –yes-i-really-mean-it in storage init script

  • remove –apiserver-count from kube-apiserver manifest since it is deprecated

  • ceph: fix templating tasks

  • add nova ssh public/private keys in vault

  • install helm-diff plugin for online installation

  • nova: add nova-compute-ssh configuration

  • upgrade ceph_version variable to v19.2.2

  • add never tag to nova_vnc_cert and nova_compute_sshkey_copy playbook since they are replaced by openstack-helm chart

  • upgrade kubespray to v2.28.0 and k8s v1.32.5

  • upgrade openstack-helm charts and burrito.openstack role

  • update mariadb chart

  • ceph: bump up to v19.2.1

  • ceph: bump up to v19.2.1

  • update ceph-provisioners openstack-helm chart

  • update nova_vnc_cert submodule

  • Update vars files to support Rocky Linux 9

  • update vars.yml.sample

  • update patch.sh script to exclude 02,03,04 patch files

  • update bin.txt and images.txt

  • openstack: upgrade to 2024.1 (Caracal)

  • ceph: upgrade version to v19.2.0

  • update dellemc.powerflex version from 1.7.0 to 2.6.0 in pfx_requirements.yml

  • kubespray: update patches