Open Stack

We are chuffed to announce the release of:

puppet-tripleo 6.5.11: Puppet module for OpenStack TripleO

This release is part of the ocata release series.

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

For more details, please see below.

6.5.11
^^^^^^


New Features
************

* Adds composable service interface for Neutron LBaaSv2 service.


Security Issues
***************

* TLS v1.0 connections are no longer accepted by our HAProxy
  configuration.

Changes in puppet-tripleo 6.5.10..6.5.11
----------------------------------------

4cfd3bb Release 6.5.11 (ocata)
fef73cc Extract local CA if it expired
30c7009 Disallow TLS v1.0 from HAProxy
3d3201f firewall: don't reload IPtables after cleanup
598c712 Pin puppet-systemd
14bdcfb Fix ipv6 horizon haproxy endpoint
8396e8b Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone
7f54e79 Composable Role for Neutron LBaaS
5ca2ec8 Use rabbitmq ipv6 flag


Diffstat (except docs and test files)
-------------------------------------

Puppetfile_extras                                  |  3 +-
manifests/certmonger/ca/local.pp                   |  2 +-
manifests/firewall.pp                              | 35 ++++++-----------
manifests/haproxy.pp                               |  9 +++--
manifests/profile/base/ceph/rgw.pp                 | 22 ++++++-----
manifests/profile/base/neutron/lbaas.pp            | 44 ++++++++++++++++++++++
manifests/profile/base/rabbitmq.pp                 | 15 ++------
manifests/profile/pacemaker/neutron/lbaas.pp       | 44 ++++++++++++++++++++++
metadata.json                                      |  2 +-
...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml |  3 ++
.../notes/No-TLS-v1.0-0edeac680bb51f94.yaml        |  4 ++
spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 ++++----
12 files changed, 142 insertions(+), 57 deletions(-)