Note that we found some issues regarding this initial release, here is a summary of the bugs fixed:
* The integrated hypervisor-oci didn't deploy correctly on a private
network. Some tasks, such as the telegraph configuration,
assumed the host had access to internal endpoints.
* The nodepool user's private ssh keys changed from jenkins_rsa to
nodepool_rsa. As a result, dib-image needs to be rebuilt after the upgrade.
Apply the procedure below[0] on sf-2.6, before the upgrade, to ease the
transition.
* The Github payload web hook wasn't redirected to the zuulv3 webapp.
The release repository has been updated with updated packages,
please run "yum update" on the install-server as well as the nodepool-builder
instance.
[0]: In preparation of the 2.7 upgrade, use this playbook to update dib images:
- hosts: install-server
tasks:
- name: Create nodepool_rsa key
command: ssh-keygen -t rsa -N "" -f
/var/lib/software-factory/bootstrap-data/ssh_keys/nodepool_rsa -q
- name: Read nodepool_rsa.pub
command: cat
/var/lib/software-factory/bootstrap-data/ssh_keys/nodepool_rsa.pub
register: nodepool_rsa_pub
- hosts: nodepool-builder
tasks:
- name: Update nodepool-minimal element
lineinfile:
dest:
/usr/share/sf-elements/nodepool-minimal/extra-data.d/01-nodepool-public-key
insertafter: "^sudo cp /var/lib/nodepool/.ssh/id_rsa.pub
$TMP_HOOKS_PATH/nodepool_rsa.pub"
line: "echo {{ hostvars[groups['install-server'][0]]['nodepool_rsa_pub'].stdout }}
>> $TMP_HOOKS_PATH/nodepool_rsa.pub"
On November 20, 2017 10:51 am, Fabien Boucher wrote:
Hello everyone, We are pleased to announce the release of the 2.7 version of Software Factory. Please find the changelog, digests and packages diff below. Release Notes =========== New Features -------------------- - Add a --provision-demo sfconfig argument to create demo projects and user. - Add --disable-fqdn-redirection sfconfig argument to disable fqdn redirection when gateway is accessed with ip address. - A nodepool OCI driver is provided to running jobs in OCI containers. - sfconfig's nodepool/nodepool3 sections get new OpenStack domain-related options, these are necessary when using version 3 and above of keystone's authentication API. - A new sfconfig.yaml logserver expiry option enable old logs purge configuration, default to 2 months. - The Zuul and Nodepool v3 services are now part of the minimal reference architecture. - NodepoolV3 services are running with the rh-python35 SCL which allows to run the new services on the same node as the previous one (allinone). - ZuulV3 services are running with the rh-python35 SCL which allows to run the new services on the same node as the previous one (allinone). - A new sfconfig.yaml setting enable to setup custom static nodes. - sfconfig won't restart zuul services if jobs are running, it will wait up to 10 minutes before giving up and sending a mail to an adminstrator to request a manual restart. This prevent loosing pipeline queues when changing operator setting such as zuul_log_level or when adding an external gerrit. - New --zuul-ssh-key and --zuul3-ssh-key sfconfig argument enable using user provided ssh key for the Zuul services. - A new sfconfig argument is added to simplify third-party-ci configuration, "--zuul3-gerrit-connections name#hostname#port#puburl#username" - A new sfconfig option and argument is added to re-use the openstack.org/openstack-infra/zuul-jobs collections, "--zuul3-upstream-zuul-jobs" Bug Fixes --------------- - Cloud-init services are now disabled after first deployment to prevent ssh authorized keys modification. - The zuul-launcher service is no longer hard restarted, instead a graceful command is performed before to prevent leaking nodepool attached instance. Security fixes -------------------- - The zuul-merger script used to merge the zuul configuration was using the insecure yaml.load instead of yaml.safe_load. Deprecation Notes --------------------------- - The export-backup feature has been removed. The new backup/restore documentation reflect that change. Software Factory, now, only provides a local backup playbook and a recover command. Backup data extraction should be managed by the operator. - The zuul-swift-upload is no longer supported and logs swift settings are removed from sfconfig.yaml. New Packages ---------------------- ansible-lint-3.4.17-1.el7 ara-0.14.4-1.el7 bubblewrap-0.1.8-2.el7 cauth-0.10.0-3.el7 etherpad-1.6.1-2.el7 gerrit-2.11.10-2.el7 managesf-0.15.1-3.el7 nodepool-0.4.0-10.20170713.56e0172.el7 pysflib-0.9.1-2.el7 python-oic-0.9.4-6.el7 python-sfmanager-0.4.0-3.el7 python-testinfra-1.6.5-2.el7 repoxplorer-1.0.2-1.el7 rh-python35-GitPython-2.1.7-1.el7 rh-python35-ara-0.14.5-1.el7 rh-python35-diskimage-builder-2.8.0-1.el7 rh-python35-enable-py3-0.1-2.el7 rh-python35-nodepool-0.4.0-8.20171102.d20a13d.el7 rh-python35-pyflakes-1.5.0-1.el7 rh-python35-python-XStatic-1.0.1-1.el7 rh-python35-python-XStatic-Bootstrap-SCSS-3.3.7.1-1.el7 rh-python35-python-XStatic-DataTables-1.10.15.1-1.el7 rh-python35-python-XStatic-Patternfly-3.21.0.1-1.el7 rh-python35-python-XStatic-Patternfly-Bootstrap-Treeview-2.1.3.2-1.el7 rh-python35-python-XStatic-jQuery-1.10.2.1-1.el7 rh-python35-python-aiohttp-2.2.3-1.el7 rh-python35-python-appdirs-1.4.3-1.el7 rh-python35-python-babel-2.5.0-1.el7 rh-python35-python-cinderclient-3.1.0-1.el7 rh-python35-python-click-6.7-1.el7 rh-python35-python-cliff-2.8.0-1.el7 rh-python35-python-cmd2-0.7.6-1.el7 rh-python35-python-debtcollector-1.17.0-1.el7 rh-python35-python-decorator-4.1.2-1.el7 rh-python35-python-deprecation-1.0.1-1.el7 rh-python35-python-dogpile-cache-0.6.4-1.el7 rh-python35-python-flake8-3.4.1-1.el7 rh-python35-python-flask-0.12.2-1.el7 rh-python35-python-flask-frozen-0.15-1.el7 rh-python35-python-flask-migrate-2.1.0-1.el7 rh-python35-python-flask-script-2.0.5-1.el7 rh-python35-python-flask-sqlalchemy-2.2-1.el7 rh-python35-python-glanceclient-2.8.0-1.el7 rh-python35-python-ipaddress-1.0.18-1.el7 rh-python35-python-ironicclient-1.16.0-1.el7 rh-python35-python-itsdangerous-0.24-1.el7 rh-python35-python-jinja2-2.9.6-1.el7 rh-python35-python-jmespath-0.9.3-1.el7 rh-python35-python-jsonpatch-1.16-1.el7 rh-python35-python-jsonpointer-1.10-1.el7 rh-python35-python-jsonschema-2.6.0-1.el7 rh-python35-python-junit-xml-1.7-1.el7 rh-python35-python-keystoneauth1-3.1.0-1.el7 rh-python35-python-keystoneclient-3.13.0-1.el7 rh-python35-python-mccabe-0.6.1-1.el7 rh-python35-python-monotonic-1.3-1.el7 rh-python35-python-munch-2.2.0-1.el7 rh-python35-python-netaddr-0.7.19-1.el7 rh-python35-python-netifaces-0.10.6-1.el7 rh-python35-python-networkx-1.11-1.el7 rh-python35-python-novaclient-9.1.0-1.el7 rh-python35-python-openstackclient-3.12.0-1.el7 rh-python35-python-openstacksdk-0.9.17-1.el7 rh-python35-python-os-client-config-1.28.0-1.el7 rh-python35-python-osc-lib-1.7.0-1.el7 rh-python35-python-oslo-config-4.11.0-1.el7 rh-python35-python-oslo-i18n-3.17.0-1.el7 rh-python35-python-oslo-serialization-2.20.0-1.el7 rh-python35-python-oslo-utils-3.28.0-1.el7 rh-python35-python-paho-mqtt-1.1-1.el7 rh-python35-python-positional-1.2.1-1.el7 rh-python35-python-pycodestyle-2.3.1-1.el7 rh-python35-python-pyfakefs-3.2-1.el7 rh-python35-python-pygments-2.2.0-1.el7 rh-python35-python-pyperclip-1.5.27-1.el7 rh-python35-python-pytest-runner-2.11.1-1.el7 rh-python35-python-requestsexceptions-1.3.0-1.el7 rh-python35-python-rfc3986-1.1.0-1.el7 rh-python35-python-shade-1.22.2-1.el7 rh-python35-python-simplejson-3.11.1-1.el7 rh-python35-python-stevedore-1.25.0-1.el7 rh-python35-python-subunit-1.2.0-1.el7 rh-python35-python-testtools-2.3.0-1.el7 rh-python35-python-unicodecsv-0.14.1-1.el7 rh-python35-python-vcversioner-2.16.0.0-1.el7 rh-python35-python-warlock-1.2.0-1.el7 rh-python35-python-werkzeug-0.12.2-1.el7 rh-python35-python-wrapt-1.10.11-1.el7 rh-python35-zuul-3.0.0-12.20171103.d646c12.el7 sf-config-2.7.3-2.el7 sf-docs-2.7.1-1.el7 sf-elements-0.3.0-2.el7 sf-release-2.7.1-1.el7 umurmur-0.2.17-1.el7 zookeeper-lite-3.4.10-3.el7 zuul-2.5.1-21.20170920.5c273594.el7 The release 2.7 RPM, image and digest: - Release RPM: https://softwarefactory-project.io/repos/sf-release-2.7.rpm - Qcow2 image: https://softwarefactory-project.io/releases/sf-2.7/sf-2.7.qcow2 - Signed Release digest: https://softwarefactory-project.io/releases/sf-2.7/sf-2.7.digest Digest --------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 16839d114dcdd827ca99609570d9d880692617f7c308af664edd905a14b41b9b sf-2.7-allinone-fixed-ip.hot a66e3385faff2e11c96512878790a61cbf2d5a37ee473fac4432248b3fd402e0 sf-2.7-allinone.hot ec3f85b58eb282fd72d7b95b3009429170a263e5e60a609f5494807e973d57f0 sf-2.7-distributed-fixed-ip.hot 28fb38d85a44a1f87dc014b7239fdc610b4714e09d029ad41643b361569b0087 sf-2.7-distributed.hot 957c197d1ec1f390723bbbb702aff61b80de85d744172d1d04cfcc034d58f98c sf-2.7-minimal-fixed-ip.hot a0f6dacd2c88ae605dd5e82a338bd6bb9f3370d5d1469764d5fe73d39f664f05 sf-2.7-minimal.hot 42fae9ddcdf7a24b87353ba287dce491ebd56d9a0ef8b82bb8e94a755bc8ac97 sf-2.7.qcow2 -----BEGIN PGP SIGNATURE----- iQIcBAEBAgAGBQJaEq7DAAoJEOjCA6ccO65LavEP/jWforC9b0n3Z/K46imXaLtB UPpzYKAGDAgxWeBFlrFxPaKdvW6IBDBOMkYu6vJCXVaAuZJtPxcccmvRvFSBPUu/ ngO9waP/PGMO64nNBtV49csuPKkHS+tJQM/aE/sreLbM6GKAZkmguUy2A7tXcgS6 yGwtG3TnKhjKh/Mk2Vm4Jm2EnPBb55jAjP+M3tp6oT2oKaXsngoS4hne9dF9kf2T fGMRBIKLmoEvTjefwYuPavox7SmPIGSNP0mNS7GRkK9DsWXF3lNKqpCZKK2/dnpy 9rbWZMmo4ydictLjgueI8FYNQUWijbMvUEMupqnjHFx2STyIpNHI4x5HLjg5dyl/ gNDVH48axjo2ff4tdD7fzndmwG1LKksPzGzCDpngDmNKG4XqdVhJg8oWpn/gOHiV vVRmogbbGt0mNbmSnKLrpxEdmmhzICVI3geC6lMhcoTgi6bPzff7wWy8JGmFV7sb baZcIOD8WOrrQNQ8Mf2K1RX5sya7q0jQPRqrbkuufqpDmsm7WZgVvZxH53kTeCy5 aElbmC+Ur0sYq+PRSmCMUK/NOoBxQ6UGY7vBObABJFljV0uUUgd+cokFI3PjnMlE KTRyx/UHBUFrzqhXCclzQrkourQLvXGrDPRKOGgsJhoc5tKqNYJsXk2idci6T9dn mlHO1qlKk6hSCHr3hqoy =zJWz -----END PGP SIGNATURE----- Best regards, The Software Factory Team _______________________________________________ Softwarefactory-dev mailing list [email protected] https://www.redhat.com/mailman/listinfo/softwarefactory-dev
pgpggcWpuC_CX.pgp
Description: PGP signature
_______________________________________________ Softwarefactory-dev mailing list [email protected] https://www.redhat.com/mailman/listinfo/softwarefactory-dev
