Open Stack

We eagerly announce the release of:

tripleo-heat-templates 8.0.7: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the queens stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through launchpad:

    https://bugs.launchpad.net/tripleo

For more details, please see below.

8.0.7
^^^^^


New Features
************

* Add cleanup services for neutron bridges that work with container
  based deployments.

* Introduce NovaLibvirtRxQueueSize and NovaLibvirtTxQueueSize to set
  virtio-net queue sizes as a role parameter. Valid values are 256,
  512 and 1024


Deprecation Notes
*****************

* The following parameters are deprecated when deploying Manila with
  CephFS: ManilaCephFSNativeShareBackendName, use
  ManilaCephFSShareBackendName instead ManilaCephFSNativeBackendName,
  use ManilaCephFSBackendName instead ManilaCephFSNativeCephFSAuthId,
  use ManilaCephFSCephFSAuthId instead
  ManilaCephFSNativeDriverHandlesShareServers, use
  ManilaCephFSDriverHandlesShareServers instead
  ManilaCephFSNativeCephFSEnableSnapshots, use
  ManilaCephFSCephFSEnableSnapshots instead
  ManilaCephFSNativeCephFSClusterName, matches CephClusterName
  parameter ManilaCephFSNativeCephFSConfPath, autogenerated from
  CephClusterName

* Environment file "ovs-dpdk-permissions.yaml" is deprecated and the
  mandatory parameter "VhostuserSocketGroup" is added to the roles
  data file of the missing OvS-DPDK role. Using this environment file
  is redundant and it will be removed in S-release.


Bug Fixes
*********

* Previously the default throughput-performance was set on the
  computes. Now virtual-host is set as default for the Compute roles.
  For compute NFV use case cpu-partitioning, RT realtime-virtual-host
  and HCI throughput-performance.

* Previously, when blacklisting all servers of the primary role, the
  stack would fail since the bootstrap server id was empty. The value
  is now defaulted in case all primary role servers are blacklisted.

* Instance create fails due to wrong default secontext with NFS

  With NovaNfsEnabled instance create fails due to wrong default
  secontext. The default in THT is set to nova_var_lib_t in
  Ie4fe217bd119b638f42c682d21572547f02f17b2 while
  system_u:object_r:nfs_t:s0 should have access. The virt_use_nfs
  boolean, which is turned on by openstack-selinux, should cover this
  use case.

  This changes the default to context=system_u:object_r:nfs_t:s0

* manila-backend-vnx.yaml:

     1. Remove ManilaVNXServerMetaPool since meta_pool is not used
        by Manila VNX.

     2. Add ManilaVNXServerContainer.

* cinder-dellemc-vnx-config.yaml:

     1. Remove default value of
        CinderDellEMCVNXStorageSecurityFileDir since it is not
        mandatory option for Cinder VNX driver.


Other Notes
***********

* BlacklistedHostnames has been added as a stack output. The value
  of the output is a list of blacklisted hostnames.

Changes in tripleo-heat-templates 8.0.5..8.0.7
----------------------------------------------

78358da [Queens] Don't stop docker on config changes
dded2d4 Run online data migrations
5b9945b Add validation on role names
fe4f6e2 Don't use keystone admin endpoint for nova placement
c68f853 Fix interfaces in boot_param_tasks
be05b9b Make redeploy idempotent
cfa7039 Add BlacklistedIpAddresses stack output
60dc6c0 Add BlacklistedHostnames stack output
cc9c898 Always lowercase role name
bb503cb Remove unused config file when start ovs agent
9684486 Add FFU upgrade steps to Sahara services
acba675 import zuul job settings from project-config
18710ec IHA Default the compute endpoint check script to internal
f606c84 Edit some post update tasks logic
08e0aee Redis: Mount certificates on TLS proxy
fdcdb90 undercloud/mysql: remove useless task for upgrade
7d81e25 Add role parameter for rx/tx virtio-net queue size
fd5f080 Add OVS-DPDK parameter as part of roles file
64938d5 Set tuned profile for compute roles
c6fa26d Revert "SSL support for haproxy -> novnc proxy connection"
a01dc10 Add cleanup service for neutron ovs bridges
9060b17 Make VhostuserSocketGroup param as mandatory for ComputeOvsDpdkRT role
406d25d Remove ceph-osd where not needed
8717890 Default bootstrap_server_id
1a079fe Generate and mount wrappers for haproxy in OVN metadata agent
6855b9d OVN: Add exec puppet tag to ovn-controller service file
8c19bd0 undercloud: enable KernelIpNonLocalBind
e0adcc6 OVN: Set sysctl value 'net.ipv4.ip_nonlocal_bind' to 1
9881eab SSL support for haproxy -> novnc proxy connection
d675eb5 Upgrades: Refactor package removal to step3
1adbf76 ovn: Fix minor update failure with OVN db pacemaker HA resource
4e25ce0 Correct Cinder NetApp backend name parameter mapping
36a977f Skip Ceph packages when running tripleo-packages
c6acdc9 Use fqdn for live_migration_inbound_addr
49f2e01 Upgrades: Refactor playbooks to set facts
6d4a336 Move the shebang to /usr/bin/python
2959f0d Fix manila update, upgrade, and FFU tasks
388d54e Fixed wrong when condition in mounting staging location
4765282 Lower reserved memory for nova-compute
024a1c6 Fix Neutron SFC environment file
6499f09 Disable pid file usage in the swift_rsync container
3e5fb26 Remove unecessary back-slashes in CephManilaClientKey caps mon
d40980e Uses new format for CephX keys caps
fb86ba1 nova: add parameters to configure nova::cron::archive_deleted_rows
8d48f83 Fix parameter name used to create the Manila CephX keyring
0cdb5b3 Set CephX user for Ganesha
9cfc081 remove scenario005 from experimental
481396a Revert shebang change for InstanceHA startup script
0033569 Instance create fails due to wrong default secontext with NFS
5b2d0f4 Add release note for vnx and unity template changes


Diffstat (except docs and test files)
-------------------------------------

common/deploy-steps.j2                             |   6 +-
environments/low-memory-usage.yaml                 |   2 +
environments/neutron-ml2-ovn-dvr-ha.yaml           |   1 +
environments/neutron-ml2-ovn-ha.yaml               |   1 +
environments/ovs-dpdk-permissions.yaml             |   4 +
environments/services/neutron-ovn-dvr-ha.yaml      |   1 +
environments/services/neutron-ovn-ha.yaml          |   1 +
.../services/neutron-sfc-opendaylight.yaml         |   3 +-
environments/storage-environment.yaml              |   2 +-
environments/storage/nova-nfs.yaml                 |   2 +-
environments/undercloud.yaml                       |   1 +
extraconfig/pre_network/ansible_host_config.yaml   |   4 +-
.../tasks/instanceha/check-run-nova-compute        |  24 +++-
network/endpoints/endpoint_data.yaml               |   4 +-
network/endpoints/endpoint_map.yaml                |  32 ++---
overcloud.j2.yaml                                  |   6 +
puppet/role.role.j2.yaml                           |   8 +-
puppet/services/ceph-base.yaml                     |   4 +-
puppet/services/ceph-external.yaml                 |   4 +-
puppet/services/ceph-mds.yaml                      |   4 +-
puppet/services/cinder-backend-netapp.yaml         |   2 +-
puppet/services/docker.yaml                        |   8 +-
puppet/services/glance-api.yaml                    |   2 +-
puppet/services/kernel.yaml                        |   8 ++
puppet/services/nova-api.yaml                      |  30 +++++
puppet/services/nova-compute.yaml                  |  24 +++-
puppet/services/nova-libvirt.yaml                  |   2 +-
puppet/services/nova-placement.yaml                |   2 +-
puppet/services/opendaylight-ovs.yaml              |  72 ++++-------
puppet/services/tripleo-packages.yaml              |  30 ++++-
...tedhostnames-stack-output-02c9f93f9d1ce7d8.yaml |   4 +
.../compute-tuned-profile-cbe4e22b1e185c5e.yaml    |   7 ++
...fault-bootstrap-server-id-eff49ef40bfde414.yaml |   5 +
...a-cephfsnative-parameters-e24978c8b344573b.yaml |  11 ++
.../neutron-cleanup-services-3a8579cd03fac953.yaml |   4 +
...virt_queue_size_parameter-b4409a91c553ce1b.yaml |   6 +
...ova_nfs_default_secontext-5ad33675aaf0b521.yaml |  13 ++
.../ovs-dpdk-perms-deprecate-cfddb148fce9656d.yaml |   7 ++
...ate-dellemc-vnx-templates-74a0596fac39b488.yaml |  11 ++
roles/Compute.yaml                                 |   2 +
roles/ComputeAlt.yaml                              |   2 +
roles/ComputeDVR.yaml                              |   2 +
roles/ComputeHCI.yaml                              |   2 +
roles/ComputeInstanceHA.yaml                       |   2 +
roles/ComputeLiquidio.yaml                         |   2 +
roles/ComputeOvsDpdk.yaml                          |   3 +
roles/ComputeOvsDpdkRT.yaml                        |   1 +
roles/ComputeSriov.yaml                            |   2 +
roles/ControllerStorageNfs.yaml                    |   4 +-
roles/HciCephAll.yaml                              |   2 +
roles/HciCephFile.yaml                             |   2 +
roles/HciCephMon.yaml                              |   2 +
roles/HciCephObject.yaml                           |   2 +
roles_data.yaml                                    |   2 +
tools/yaml-validate.py                             |  12 ++
zuul.d/layout.yaml                                 |  14 +--
138 files changed, 2434 insertions(+), 1690 deletions(-)