@@ -186,7 +186,108 @@ For example:
186
186
Known issues
187
187
============
188
188
189
- * None so far!
189
+ Pulp Upgrade
190
+ ------------
191
+
192
+ It was found that if pulp is upgraded from 3.43.1 to 3.81.0, most of pulp
193
+ APIs become unusable because of a bug related to missing response header
194
+ when docker clients expect it.
195
+
196
+ Generally pulp is considered to be safe to completely destroy and re-deploy.
197
+ So, users are encouraged to upgrade pulp in this method.
198
+
199
+ If your pulp has custom built images, we recommended either not doing pulp
200
+ upgrade by pinning pulp version at ``seed_pulp_container.pulp.tag `` in
201
+ ``$KAYOBE_CONFIG_PATH/seed.yml `` (``$KAYOBE_CONFIG_PATH/environments/<env>/seed.yml ``
202
+ if using environments) to 3.43.1,
203
+
204
+ or pulling all custom built images before destroying pulp then push them again
205
+ after pulp upgrade is done.
206
+
207
+ Let's Encrypt
208
+ -------------
209
+
210
+ `Let's Encrypt TLS settings fix <https://review.opendev.org/c/openstack/kolla-ansible/+/925971 >`__
211
+ brought a breaking change to Let’s Encrypt ansible role. Now users have to explicitly set the target
212
+ Let’s Encrypt ACME server as a kolla ansible variable ``letsencrypt_external_cert_server ``/
213
+ ``letsencrypt_internal_cert_server `` if they were using Let’s Encrypt as a CA of their
214
+ external/internal TLS certificates.
215
+
216
+ Cinder
217
+ ------
218
+
219
+ `Enhancement of Ceph integration of multiple clusters
220
+ <https://review.opendev.org/c/openstack/kolla-ansible/+/907166> `__
221
+ means the Cinder role now requires ``user `` and ``pool `` set to the each item of kolla dict
222
+ variable ``cinder_ceph_backends `` at ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
223
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments)
224
+ For example,
225
+
226
+ .. code :: yaml
227
+
228
+ cinder_ceph_backends :
229
+ - name : rbd-1
230
+ cluster : ceph
231
+ user : cinder
232
+ pool : volumes
233
+ enabled : true
234
+ - name : rbd-2
235
+ cluster : ceph-hdd
236
+ user : cinder
237
+ pool : volumes-hdd
238
+ enabled : true
239
+
240
+ You can find the name of pools from ``cephadm_pools `` in cephadm.yml and name of the users
241
+ will be ``cinder `` unless changed to otherwise.
242
+
243
+ The K-A upstream change `#909974 <https://review.opendev.org/c/openstack/kolla-ansible/+/909974 >`__
244
+ requires users to manually set Cinder cluster name.
245
+ You can find the current name of the cluster from ``cluster `` variable in
246
+ ``DEFAULT `` category in ``cinder.conf ``.
247
+
248
+ For example,
249
+
250
+ .. code ::
251
+
252
+ [DEFAULT]
253
+ cluster = ceph
254
+
255
+ Match the name of the cluster by setting ``cinder_cluster_name `` in ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
256
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments).
257
+
258
+ .. code :: yaml
259
+
260
+ cinder_cluster_name : ceph
261
+
262
+ CloudKitty
263
+ ----------
264
+
265
+ The Elasticsearch storage driver is no longer compatible with Opensearch storage backend.
266
+ Set CloudKitty storage backend to ``opensearch `` if it was set to be ``elasticsearch `` before.
267
+ This can be set at ``$KAYOBE_CONFIG_PATH/kolla/globals.yml ``
268
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/globals.yml `` if using environments)
269
+
270
+ .. code :: yaml
271
+
272
+ cloudkitty_storage_backend : opensearch
273
+
274
+ Ironic
275
+ ------
276
+
277
+ From Dalmatian, `Kayobe no longer provides its own default driver & interfaces
278
+ <https://review.opendev.org/c/openstack/kayobe/+/836999> `__
279
+ for Ironic and follows Ironic's default.
280
+ This can cause your Ironic configuration ``ironic.conf `` to regress.
281
+ Check the configuration difference before applying and re-add your options at
282
+ ``$KAYOBE_CONFIG_PATH/kolla/ironic.conf ``
283
+ (``$KAYOBE_CONFIG_PATH/environments/<env>/kolla/ironic.conf `` if using environments)
284
+
285
+ For example,
286
+
287
+ .. code :: yaml
288
+
289
+ [DEFAULT]
290
+ enabled_network_interfaces = neutron
190
291
191
292
Security baseline
192
293
=================
0 commit comments