[release-announce] [tripleo] puppet-tripleo 7.4.11 (pike)
no-reply at openstack.org
no-reply at openstack.org
Mon Mar 26 18:18:41 UTC 2018
We are thrilled to announce the release of:
puppet-tripleo 7.4.11: Puppet module for OpenStack TripleO
This release is part of the pike release series.
The source is available from:
http://git.openstack.org/cgit/openstack/puppet-tripleo
Download the package from:
https://tarballs.openstack.org/puppet-tripleo/
Please report issues through launchpad:
http://bugs.launchpad.net/tripleo (tag: puppet)
For more details, please see below.
7.4.11
^^^^^^
Security Issues
* TLS v1.0 connections are no longer accepted by our HAProxy
configuration.
Changes in puppet-tripleo 7.4.10..7.4.11
----------------------------------------
c780d20 Release 7.4.11 (pike)
a525507 Replace perl with awk
ebfdb8a Extract local CA if it expired
2df761b Disallow TLS v1.0 from HAProxy
c95c51c firewall: don't reload IPtables after cleanup
8777c29 Pin puppet-systemd
6e4aeda Fix stack update with rabbitmq containers
e1bd129 Correct Neutron RabbitMQ User Param Mapping
7a1b8c7 Ensure ip_forward set before Docker
6f41f74 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone
dcebe43 Use --live-restore when setting up the docker service
Diffstat (except docs and test files)
-------------------------------------
Puppetfile_extras | 3 +-
manifests/certmonger/ca/local.pp | 2 +-
manifests/firewall.pp | 35 ++++++++--------------
manifests/haproxy.pp | 4 +--
manifests/profile/base/ceph/rgw.pp | 22 +++++++-------
manifests/profile/base/docker.pp | 7 +++--
manifests/profile/base/neutron.pp | 8 ++---
manifests/profile/base/rabbitmq.pp | 24 +++++++++------
metadata.json | 2 +-
.../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 +++
spec/classes/tripleo_certmonger_ca_local_spec.rb | 2 +-
spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 +++++-----
spec/classes/tripleo_profile_base_docker_spec.rb | 2 +-
templates/logrotate/containers_logrotate.conf.erb | 2 +-
14 files changed, 70 insertions(+), 63 deletions(-)
More information about the Release-announce
mailing list