Open Stack

We are overjoyed to announce the release of:

puppet-tripleo 8.3.1: Puppet module for OpenStack TripleO

This release is part of the queens release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/puppet-tripleo

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo (tag: puppet)

For more details, please see below.

8.3.1
^^^^^


New Features
************

* Add support via hiera keys like
  'tripleo::haproxy::${name}::listen_options' to customize the options
  of an haproxy service stanza. For example passing the by setting the
  'tripleo::haproxy::cinder::options' hiera key to a hash made
  composed of: 'timeout client': '90m' 'timeout server': '90m'


Security Issues
***************

* TLS v1.0 connections are no longer accepted by our HAProxy
  configuration.


Bug Fixes
*********

* Fixes a bug where TLS certificates for ODL could not be generated
  correctly for deployment due to wrong owner/group applied to the
  files.

Changes in puppet-tripleo 8.3.0..8.3.1
--------------------------------------

933e386 Release 8.3.1 (queens)
4105d44 Replace perl with awk
a364a9d Fixes incorrect ownership of ODL TLS cert/key
be6b5ca Pin puppet-collectd
ea2ce7d Allow custom per-service listen_options for haproxy
08792df Create vhost_socket_dir with proper permissions
61deef7 Extract local CA if it expired
fb7a34b Disallow TLS v1.0 from HAProxy
4143238 firewall: don't reload IPtables after cleanup
3a443b3 Pin puppet-systemd
9454f38 Fix stack update with rabbitmq containers
bce78ef Correct Neutron RabbitMQ User Param Mapping
2083903 Ensure ip_forward set before Docker
9868c03 Reload iptables instead of restart
ed3285e Update UPPER_CONSTRAINTS_FILE for stable/queens
88a34af Update .gitreview for stable/queens


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |  1 +
Puppetfile_extras                                  |  6 +-
manifests/certmonger/ca/local.pp                   |  2 +-
manifests/certmonger/opendaylight.pp               |  4 --
manifests/firewall.pp                              | 32 ++++-----
manifests/haproxy.pp                               |  4 +-
manifests/haproxy/endpoint.pp                      | 10 +--
manifests/haproxy/horizon_endpoint.pp              | 10 +--
manifests/profile/base/docker.pp                   |  3 +
manifests/profile/base/neutron.pp                  |  8 +--
manifests/profile/base/neutron/ovs.pp              |  4 +-
.../base/neutron/plugins/ovs/opendaylight.pp       | 47 +++++++++++---
manifests/profile/base/rabbitmq.pp                 | 24 ++++---
metadata.json                                      |  2 +-
.../notes/No-TLS-v1.0-0edeac680bb51f94.yaml        |  4 ++
.../notes/fix-odl-tls-owner-77d2d71fe39ea3e7.yaml  |  5 ++
...r-service-options-haproxy-75f5f00cf5243ecb.yaml |  9 +++
spec/classes/tripleo_certmonger_ca_local_spec.rb   |  2 +-
.../tripleo_certmonger_opendaylight_spec.rb        |  4 --
...o_profile_base_neutron_ovs_opendaylight_spec.rb | 75 +++++++++++++++-------
.../tripleo_profile_base_neutron_ovs_spec.rb       | 14 ++--
spec/defines/tripleo_haproxy_endpoint_spec.rb      | 13 ++--
spec/fixtures/hieradata/default.yaml               |  8 +++
spec/fixtures/hieradata/step4.yaml                 |  2 -
templates/logrotate/containers_logrotate.conf.erb  |  2 +-
tox.ini                                            |  2 +-
26 files changed, 191 insertions(+), 106 deletions(-)