Open Stack

We are delighted to announce the release of:

tripleo-heat-templates 5.3.11: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the newton release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo

For more details, please see below.

5.3.11
^^^^^^


Security Issues
***************

* Restrict memcached service to TCP and internal_api network
  (CVE-2018-1000115).


Bug Fixes
*********

* As documented in launchpad bug 1708680 the templates for manila
  with the "generic" back end do not yield a successful manila
  deployment even if they do not cause the overall overcloud
  deployment to fail, so we are dropping these faulty and unmaintained
  manila "generic" back end templates.

* Fix Heat condition for RHEL registration yum update There were 2
  problems with this condition making the rhel-registration.yaml
  template broken: "conditions" should be "condition" and the
  condition should refer to just a condition name defined in the
  "conditions:" section of the template.  See
  https://bugs.launchpad.net/tripleo/+bug/1709916

Changes in tripleo-heat-templates 5.3.10..5.3.11
------------------------------------------------

067941d [CVE-2018-1000115] memcached: restrict to TCP & internal_api network
979143f Add reno for manila generic driver removal
f2be057 Fix networking settings for ObjectStorage role pt 2
0b256bc Removes manila-generic-config from TripleO
2735cfc Fix Heat condition for RHEL registration yum update
1fb9f1a Zuul: Remove project name
b7fa0d3 Optimize kernel neighbour table for large scale environments


Diffstat (except docs and test files)
-------------------------------------

capabilities-map.yaml                              |  8 --
environments/manila-generic-config.yaml            | 25 ------
environments/network-isolation-no-tunneling.yaml   |  9 ++-
environments/network-isolation-v6.yaml             |  6 +-
environments/network-isolation.yaml                | 12 +--
.../rhel-registration/rhel-registration.yaml       |  9 ++-
overcloud-resource-registry-puppet.j2.yaml         |  1 -
puppet/objectstorage-role.yaml                     | 12 +--
puppet/services/kernel.yaml                        | 29 +++++++
puppet/services/manila-backend-generic.yaml        | 93 ----------------------
puppet/services/memcached.yaml                     | 31 +++++++-
...-generic-driver-templates-b33e8966c263a1fd.yaml |  7 ++
...at-condition-for-rhel-reg-311a3dce76cc0ec1.yaml |  9 +++
.../memcached_hardening-2529734099da27f4.yaml      |  4 +
roles_data.yaml                                    |  1 -
zuul.d/layout.yaml                                 |  2 -
16 files changed, 107 insertions(+), 151 deletions(-)