Open Stack

We enthusiastically announce the release of:

tripleo-heat-templates 7.0.4: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the pike release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo

For more details, please see below.

7.0.4
^^^^^


New Features
************

* When using RHSM proxy, TripleO will now verify that the proxy can
  be reached otherwise we'll stop early and not try to subscribe
  nodes.


Upgrade Notes
*************

* The format to use for the CephPools parameter needs to be updated
  into the form expected by ceph-ansible. For example, for a new pool
  named *mypool* it should change from: { "mypool": { "size": 3,
  "pg_num": 128, "pgp_num": 128 } } into: [ { "name": "mypool",
  "pg_num": 128, "rule_name": "" } ] The first is a map where each key
  is a pool name and its value the pool properties, the second is a
  list where each item describes all properties of a pool, including
  its name.

* Changed default address of docker0 bridge to be in the last class
  B private network -- 172.31.0.1/24 -- to stop conflicting with the
  default network range for InternalApiNetCidr. The docker0 bridge is
  normally unused in TripleO deployment.

* When deploying with RHSM, sat-tools 6.2 will be installed instead
  of 6.1. The new version is supported by RHEL 7.4 and provides
  katello- agent package.


Security Issues
***************

* Live migration over TLS has been disabled since the settings it
  was using don't meet the required security standards. It is
  currently not possible to enable it via t-h-t.


Other Notes
***********

* With the migration from puppet-ceph to ceph-ansible for the
  deployment of Ceph, the format of CephPools parameter changes
  because the two tools use a different format to represent the list
  of additional pools to create.

Changes in tripleo-heat-templates 7.0.3..7.0.4
----------------------------------------------

994922a Disable live migration over TLS
3205096 Update default cell_v2 cell when it already exists
4217767 Refactor cellv2 host discovery logic to avoid races
fe9b223 Fix cinder-{backup,volume} container with pacemaker
2623100 Configure docker0 bridge address
b48c114 Re-enable containerized fluentd
c95a8a5 Env files for ODL deployments
efcd879 Fix rights to local_settings.d for dockerized Horizon
bcea7e7 Do not set cluster in maintenance mode during split stack upgrade
0ae06e1 Add --detailed-exitcodes when running puppet via ansible
2e286ec Temporarily disable fluentd from scenario001-multinode-containers
8484676 Set bind mount propegatation to shared for /var/lib/nova.
211149c Fix wrong permission on database during mysql_init tasks.
0c44d5a Set metric procssing delay for metricd
7d8b3c4 cinder: switch CinderCronDbPurgeUser to 'cinder'
ba80b2b Fix iptables rules override bug in clustercheck docker service
ce4bce4 mysql: Only set certificate specs if TLS everywhere is enabled
4d5686b Set ipc=host for services attaching encrypted volumes
1b1739c RHSM: when using proxy, test its connectivity first
b9a04a7 Upgrade rhel_reg_sat_repo to 6.2
c1e7ff1 Add all services to container scenarios
4a08ce6 Fix nova-cpu/collectd hieradata
7779bc8 Add NetIpMap to hieradata for *ExtraConfig overrides
8f0ae91 RHSM: do not use retry to deploy katello-agent
b3277ed Only mount selinux sysfs in nova_libvirt container
a73cfc0 added level of indirection causes incorrect hiera config
3ac5cce Add tags to baremetal cron removal tasks
39d4fa3 Force memcached container log to file
0ec618e Fix standalone ControllerOpenstack vars
f0bd09d Update CephPools format in the docker templates to fit ceph-ansible
505cecb Switch scenario004-containers to use ceph-ansible
94c624c Enable Cinder as a backend for Glance
6a7c88f Disable MongoDB in scenario002
bfbef94 Enable neutron-lbaasv2 UI in Horizon
8dff0be Run containerized mistral-api eventlet
e3e0f84 Fix /etc/openstack-dashboard/ permissions for access to *policy.json
9326e34 nova-placement: switch auth_uri to keystone versionless endpoint
7e3f35d Switch RabbitFDLimit to a Puppet integer
34c286a mysql: expose IPv6 configuration to mysql puppet modules
f42b2b8 Providing required priviledges to the mounted NFS volume


Diffstat (except docs and test files)
-------------------------------------

ci/environments/multinode-containers.yaml          | 23 ++++--
.../scenario001-multinode-containers.yaml          | 48 ++++++-----
.../scenario002-multinode-containers.yaml          | 38 +++++++--
ci/environments/scenario002-multinode.yaml         |  4 +-
.../scenario003-multinode-containers.yaml          | 17 ++--
.../scenario004-multinode-containers.yaml          | 36 ++++----
common/deploy-steps-tasks.yaml                     |  5 +-
common/deploy-steps.j2                             |  6 ++
common/services.yaml                               | 27 ++++++
environments/composable-roles/standalone.yaml      | 12 +--
.../deployed-server-pacemaker-environment.yaml     |  4 +-
environments/network-isolation-v6.j2.yaml          |  2 +
environments/neutron-opendaylight-dpdk.yaml        | 12 +--
environments/neutron-opendaylight-sriov.yaml       |  9 --
.../services-docker/neutron-opendaylight-dpdk.yaml | 37 +++++++++
.../neutron-opendaylight-sriov.yaml                | 22 +++++
environments/storage/enable-ceph.yaml              |  2 +-
environments/storage/external-ceph.yaml            |  2 +-
environments/storage/glance-nfs.yaml               |  2 +-
.../environment-rhel-registration.yaml             |  2 +-
.../rhel-registration/scripts/rhel-registration    | 40 +++++++--
overcloud.j2.yaml                                  | 15 ++++
puppet/all-nodes-config.j2.yaml                    |  6 ++
.../pre_deploy/compute/neutron-ml2-bigswitch.yaml  | 21 +++--
.../controller/neutron-ml2-bigswitch.yaml          | 19 ++---
puppet/role.role.j2.yaml                           | 12 +++
puppet/services/cinder-base.yaml                   |  2 +-
puppet/services/database/mysql.yaml                | 50 ++++++-----
puppet/services/docker.yaml                        | 12 ++-
puppet/services/glance-api.yaml                    |  4 +-
puppet/services/gnocchi-metricd.yaml               |  5 ++
puppet/services/neutron-lbaas.yaml                 |  3 +
puppet/services/nova-compute.yaml                  |  2 +-
puppet/services/nova-libvirt.yaml                  | 19 +++--
puppet/services/nova-placement.yaml                |  2 +-
puppet/services/rabbitmq.yaml                      |  2 +-
...h-pools-with-ceph-ansible-f82425e585f90ef6.yaml | 17 ++++
...e_default_docker0_address-6a017b7078825996.yaml |  7 ++
.../notes/libvirtd-tls-6de6fb35e0ac0ab1.yaml       |  6 ++
.../notes/rhsm_proxy_verify-548f104c97cf5f90.yaml  |  5 ++
releasenotes/notes/sat-tools-0d0f0c53de9d34a5.yaml |  5 ++
sample-env-generator/composable-roles.yaml         | 25 ++++--
tools/yaml-validate.py                             | 10 ++-
63 files changed, 702 insertions(+), 235 deletions(-)