-
Notifications
You must be signed in to change notification settings - Fork 10
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add kolla image update information (#121)
* add kolla image build history * add guide for updating kolla images
- Loading branch information
Showing
5 changed files
with
116 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,51 @@ | ||
# Kolla Image Build History | ||
|
||
This page tracks the history of when Kolla images have been built. Images are | ||
built when major security issues are patched in the base image operating system | ||
and when changes to OpenStack services, like bug fixes and improvements, are | ||
released. OpenStack service changes can be found in the [release notes](https://docs.openstack.org/releasenotes/) | ||
index. | ||
|
||
## Current OpenStack release | ||
|
||
We are currently deploying OpenStack 2023.2 with Ubuntu 22.04 as the base | ||
operating system. | ||
|
||
## Image tagging | ||
|
||
When images are built, the date they were built is appended to the image tag, in | ||
the format "YYYY-MM-DD". Images built on October 10, 2024 for the 2023.2 release | ||
will be tagged with `2023.2-ubuntu-jammy-2024-10-10`. The latest images built | ||
will have two tags applied, one being the base tag (`2023.2-ubuntu-jammy`, for | ||
example), and the other including the appended date. This allows for rolling | ||
back to previous images if necessary. | ||
|
||
## How to update your cloud | ||
|
||
See [Update Kolla Images](../operators-manual/day-2/update-kolla-images.md) for | ||
the steps needed to update your cloud. | ||
|
||
## OpenStack 2023.2 | ||
|
||
Latest image tag: `2023.2-ubuntu-jammy` | ||
|
||
### Ubuntu 22.04 LTS (Jammy) Security updates | ||
|
||
See the [Ubuntu Security Notices](https://ubuntu.com/security/notices?order=newest&release=jammy&details=&offset=0) | ||
page for information relating to security updates. | ||
|
||
### OpenStack service updates | ||
|
||
OpenStack service changes can be found in the [release notes](https://docs.openstack.org/releasenotes/) | ||
index. | ||
|
||
### Image Update History | ||
|
||
| Tag | Build Date | Notes | | ||
|--------------------------------|------------|-----------------------------------------------------------------------------------------------------------------------------------------------------| | ||
| 2023.2-ubuntu-jammy-2024-10-10 | 10/10/2024 | - [Ubuntu security updates](https://ubuntu.com/security/notices?order=newest&release=jammy&details=&offset=0) | | ||
| | | - [Cinder (23.2.0-12) new features and bug fixes](https://docs.openstack.org/releasenotes/cinder/2023.2.html#relnotes-23-2-0-12-stable-2023-2) | | ||
| | | - [Neutron (23.2.0-18) security issues and bug fixes](https://docs.openstack.org/releasenotes/neutron/2023.2.html#relnotes-23-2-0-18-stable-2023-2) | | ||
| | | - [Nova (28.3.0-11) bug fixes](https://docs.openstack.org/releasenotes/nova/2023.2.html#relnotes-28-3-0-11-stable-2023-2) | | ||
| | | - [Octavia (13.0.0-32) bug fixes](https://docs.openstack.org/releasenotes/octavia/2023.2.html#relnotes-13-0-0-32-stable-2023-2) | | ||
| | 9/5/2024 | | |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
3 changes: 3 additions & 0 deletions
3
docs/operators-manual/day-2/manage-node-firewall-with-iptables.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,6 @@ | ||
--- | ||
sidebar_position: 6 | ||
--- | ||
# Manage Node Firewall Using iptables | ||
|
||
## Use Case | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
--- | ||
sidebar_position: 7 | ||
--- | ||
# How to Update Kolla images | ||
|
||
Updating your cloud's Kolla images is an important part of improving the | ||
security of your OpenStack cloud. Improvements, bug fixes, and security patches | ||
for OpenStack services are also a benefit of updating your cloud's images. | ||
|
||
## Prepare Kolla Ansible | ||
|
||
To update the Kolla images, first [prepare your Kolla Ansible environment](../day-4/kolla-ansible/prepare-kolla-ansible.md). | ||
|
||
## Freeze changes to cloud | ||
|
||
Make sure the OpenStack service databases are not modified during this | ||
maintenance window. This includes things like creating/deleting VMs, networks, | ||
routers, etc. | ||
|
||
## Backup OpenStack databases | ||
|
||
Back up your cloud's MariaDB databases, just in case. | ||
|
||
```sh | ||
kolla-ansible -i inventory.yml -i ansible/inventory/multinode mariadb_backup | ||
``` | ||
|
||
## Pull images | ||
|
||
Pull in updated Kolla images. You can confirm when image updates are available | ||
by visiting [Kolla Image Build History](../../kolla-image-update/build-history.md). | ||
|
||
```sh | ||
kolla-ansible -i inventory.yml -i ansible/inventory/multinode pull | ||
``` | ||
|
||
## Kolla deploy-containers | ||
|
||
Deploy updated containers. | ||
|
||
```sh | ||
kolla-ansible -i inventory.yml -i ansible/inventory/multinode deploy-containers | ||
``` | ||
|
||
## (Optional) MariaDB recovery | ||
|
||
If you run into issues with MariaDB containers not starting up during the | ||
deployment of containers, you can try recovering MariaDB. | ||
|
||
```sh | ||
kolla-ansible -i inventory.yml -i ansible/inventory/multinode mariadb_recovery | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters