From no-reply at openstack.org Mon Jul 1 03:03:19 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:03:19 -0000 Subject: [release-announce] neutron 13.0.4 (rocky) Message-ID: We are psyched to announce the release of: neutron 13.0.4: OpenStack Networking This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 13.0.4 ^^^^^^ Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. * During the dependency resolution procedure, the code that loads service plugins was refactored to not raise an exception if one plugin is configured multiple times, with the last one taking effect. This is a change from the previous behavior. Bug Fixes ********* * Adds the "router" service plugin to the "port_forwarding" service plugin required list. For more info see https://bugs.launchpad.net/neutron/+bug/1809238 Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * If an instance port is under a dvr router, and the port already has binding port forwarding(s). Neutron will no longer allow binding a floating IP to that port again, because dvr floating IP traffic rules will break the existing port forwarding functionality. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. * Neutron now supports having service plugins require other plugin(s) as dependencies. For example, the "port_forwarding" service plugin requires the "router" service plugin to achieve full functionality. A new list, "required_service_plugins", was added to each service plugin so the required dependencies of each service plugin can be initialized. If one service plugin requires another, but the requirement is not set in the config file, neutron will now initialize it to the plugin directory. Changes in neutron 13.0.3..13.0.4 --------------------------------- feab3462b2 Release notes for dns_domain behavioural changes b1b0937eb4 DVR: on new port only send router update on port's host 3842bb21af Reset MAC on unbinding direct-physical port 1146526304 Optimize the code that fixes the race condition of DHCP agent. b681fe6754 SRIOV agent: wait VFs initialization on embedded switch create 8ed443ca66 Switch to new engine facade for Route objects 3e55534795 Make OVS controller inactivity_probe configurable cace923951 improve dvr port update under large scale deployment c80598dd58 Revert "Pass network's dns_domain to dnsmasq conf" 1dd35515d4 Packets getting lost during SNAT with too many connections 6af5ea2afc [DVR] Block ARP to dvr router's port instead of subnet's gateway 5424bdc38b Use list instead of six.viewkeys to avoid py2 to py3 problems 7f8c446d5f Only store segmenthostmapping when enable segment plugin 1559c79594 Wait to ipv6 accept_ra be really changed by L3 agent b84b9f2dcc Add port_forwarding to devstack plugin 663c727f99 Allow first address in an IPv6 subnet as valid unicast 252d80058c Show all SG rules belong to SG in group's details 946faaf361 [DHCP] Don't resync network if same port is alredy in cache 9a498d993f Remove rootwrap configuration from neutron-keepalived-state-change d908227050 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 2f91450fcf Ensure dvr ha router gateway port binding host 88a362df09 Async notify neutron-server for HA states 0bac076056 Fix handling of network:shared field in policy module 8e777c681f Fix creating policy rules from subattributes. 13cb3cd34c Keep HA ports info for HA router during entire lifecycle d3c757134d Don't count ports with inactive bindings as serviceable dvr ports cd53b51732 Use dynamic lazy mode for fetching security group rules 9b2dc84959 Not process port forwarding if no snat functionality 04e995be98 Revert iptables TCP checksum-fill code d9ff4aee20 Get ports query: extract limit and use it only at the end. d080a805c1 Move subnet postcommit out of transaction for bulk create 1214e59cc2 OpenDev Migration Patch c50bdf2329 Give some HA router case specific resources 8280d75723 Check master/backup router status in DVR functional tests 827d6434d7 Set HA failover bridges veth pair devices UP bdeae63365 neutron.conf needs lock_path set for router to operate This change is adding required configuration in neutron.conf to set the lock_path parameter, which was missing in compute-install-ubuntu.rst 5d705468de Do not call update_device_list in large sets fb0c062899 Avoid loading same service plugin more than once 2331e5fefc Add dependency for service plugin 087e8f6bee Prevent bind fip to port has port forwarding 21bbe03619 Make test service_plugins override simple ee2ed681c4 Choose random value for HA routes' vr_id f71767bd02 DVR: Correctly change MTU in fip namespace 14ed5515b9 Handle DBConnectionError in skip_if_timeout decorator 0e71c29155 Fix regression with SG read API with empty ruleset 8f93410716 Not set fip to ERROR if it exists on device ef8ecef922 Set router_id if floating IP has port_forwardings 26a9765afb Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 42 +++--- devstack/lib/fip_port_forwarding | 4 + devstack/plugin.sh | 4 + etc/policy.json | 8 +- neutron/agent/common/ovs_lib.py | 7 + neutron/agent/dhcp/agent.py | 12 +- neutron/agent/l3/agent.py | 2 +- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 13 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/extensions/port_forwarding.py | 4 + neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 22 ++- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++-- neutron/agent/linux/dhcp.py | 28 ++-- neutron/agent/linux/ip_lib.py | 1 + neutron/agent/linux/iptables_manager.py | 21 +++ neutron/agent/linux/keepalived.py | 2 + neutron/agent/metadata/driver.py | 10 -- neutron/agent/rpc.py | 29 +++- neutron/api/rpc/handlers/dhcp_rpc.py | 15 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 6 + neutron/common/utils.py | 7 + neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_db.py | 21 +++ neutron/db/l3_dvrscheduler_db.py | 31 ++-- neutron/db/l3_hamode_db.py | 31 +++- neutron/db/models/securitygroup.py | 2 +- neutron/db/securitygroups_db.py | 6 +- neutron/ipam/utils.py | 27 ++-- neutron/manager.py | 76 ++++++---- neutron/objects/base.py | 54 ++++++- neutron/objects/common_types.py | 23 +++ neutron/objects/securitygroup.py | 4 +- neutron/objects/subnet.py | 2 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 ++- neutron/policy.py | 54 ++++++- .../services/portforwarding/common/exceptions.py | 6 + neutron/services/portforwarding/pf_plugin.py | 24 ++++ neutron/services/segments/db.py | 27 +++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../portforwarding/test_port_forwarding.py | 23 ++- .../agent/l3/extensions/test_port_forwarding.py | 16 +++ .../test_expose_port_forwarding_in_fip.py | 127 ++++++++++++++++- .../mech_sriov/agent/test_eswitch_manager.py | 56 ++++++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../legacy/neutron-fullstack-python35/run.yaml | 6 +- .../legacy/neutron-fullstack-with-uwsgi/run.yaml | 6 +- playbooks/legacy/neutron-fullstack/run.yaml | 6 +- .../legacy/neutron-functional-python35/run.yaml | 6 +- .../legacy/neutron-functional-with-uwsgi/run.yaml | 6 +- playbooks/legacy/neutron-functional/run.yaml | 6 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 6 +- .../neutron-tempest-iptables_hybrid/run.yaml | 6 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 6 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 6 +- .../legacy/neutron-tempest-postgres-full/run.yaml | 6 +- .../neutron-tempest-with-ryu-master/run.yaml | 6 +- ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 14 +- .../fip-binding-limitation-1d2509950847b085.yaml | 7 + ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + ...service-plugin-dependency-c8bf620b2526b869.yaml | 22 +++ 108 files changed, 1719 insertions(+), 533 deletions(-) From no-reply at openstack.org Mon Jul 1 03:04:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:04:04 -0000 Subject: [release-announce] octavia-tempest-plugin 1.1.0 (train) Message-ID: We eagerly announce the release of: octavia-tempest-plugin 1.1.0: Tempest plugin for Octavia This release is part of the train release series. The source is available from: https://opendev.org/openstack/octavia-tempest-plugin Download the package from: https://tarballs.openstack.org/octavia-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia-tempest-plugin 1.0.0..1.1.0 ---------------------------------------------- 070297f Save amphora logs in gate 0f6c647 Fix tests not honoring the provider setting. 7c5b901 Fix the IPv6 tests for no ipv6-public-subnet 980f5de Replace git.openstack.org URLs with opendev.org URLs 2b9432f Fix ipv6 multinode gate (use private subnet) 564facf Add TLS Barbican jobs against stable branches 9777f11 Drop requirement on octavia-lib eed1c6b OpenDev Migration Patch ccf5254 Add octavia-v2-dsvm-scenario-ubuntu-xenial job cc7dbcd Add config option for pool algorithms c2e1216 Add iptables-based active/standby scenario test 37c9302 Add the provider flavor capabilities service client. 9028bd8 Run octavia-tempest-plugin against stable/stein bdf01df Fix octavia-tempest-plugin releasenotes theme 3bfe791 Adapt protocol and skip tests depending on config Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- octavia_tempest_plugin/clients.py | 5 + octavia_tempest_plugin/common/constants.py | 2 + octavia_tempest_plugin/config.py | 25 +- .../load_balancer/v2/flavor_capabilities_client.py | 76 ++++++ .../v2/test_active_standby_iptables.py | 303 +++++++++++++++++++++ .../barbican_scenario/v2/test_tls_barbican.py | 4 +- playbooks/act_stby_iptables/pre.yaml | 16 ++ releasenotes/source/conf.py | 47 ++-- requirements.txt | 1 - tox.ini | 6 +- zuul.d/jobs.yaml | 124 ++++++++- zuul.d/projects.yaml | 23 ++ 23 files changed, 641 insertions(+), 64 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c9f839c..3b78bc3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -octavia-lib>=1.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 1 03:07:19 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:07:19 -0000 Subject: [release-announce] ansible-role-chrony 1.0.0 Message-ID: We are satisfied to announce the release of: ansible-role-chrony 1.0.0: ansible-role-chrony - Ansible chrony role This is the first release of ansible-role-chrony. The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony f3352cd63407d136ececbd45a5eddcef582c8f00..1.0.0 ------------------------------------------------------------------------------ 494f3c4 Update to opendev bece846 OpenDev Migration Patch 068668b Force chrony restart on config change f1f09db Change openstack-dev to openstack-discuss 9baecd0 Move default values to defaults 20f7d9f Add tripleo-standalone for coverage aa3f21c Remove setup.py check from pep8 job 1c49217 Update min tox version to 2.0 ed0d7e3 Fix missing folders 3257982 Fix .gitreview e1d3b78 Add zuul configuration f9330ac Remove zuul configuration 9bf57a5 Fix gitignore From no-reply at openstack.org Mon Jul 1 03:09:24 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:09:24 -0000 Subject: [release-announce] ansible-role-tripleo-modify-image 1.1.0 Message-ID: We joyfully announce the release of: ansible-role-tripleo-modify-image 1.1.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.0.0..1.1.0 --------------------------------------------------------- 6dab9dd Fix dnf repoquery regression b25fe25 Allow devs to modify images with Python directories 8b366d2 Makes buildah retries more verbose 9f112a5 dev_install: fetch git/gerrit from opendev 60cb00d yum_update.sh: don't fail when plugin package is unavailable for install 8fa6dd7 Use 'dnf repoquery' when system uses DNF 367f3e0 Small yum_update.sh improvements f33cad7 Revert "yum_update.sh improvements" c475c83 yum_update.sh improvements f1dfdc6 OpenDev Migration Patch 012209a Convert readme to rst c0bcc3c Don't print commands during yum update 9014df9 Speed up execution time of yum_update.sh 8f0c6bf Fix dev install (yum -y...) 410408e Ported tripleo-modify-image to py3 b541c5e Run all linters via pre-commit e60ad5d yum_update_buildah: add retry x3 8b82f78 Track obsoleted packages replacements for updates d7d7592 Mount in yum_update.sh when running it 8dba05a Append to the tag on buildah commit f77b9a2 yum_update: cp the script in /tmp before buildah cp 0bdc068 Update hacking version to latest 9dac7d6 Use buildah commands for yum update to improve speed d67f1ef Replace scenario001-multinode with scenario001-standalone 08903c0 Fix line length for lint 970708d Use a tempfile for the modified Dockerfile 97b54c3 Set WORKDIR / in the dockerfiles 618d3ab Add dev mode install playbook for source installs 2cdc844 Use with_list for Ansible < 2.5 compatibility 20cefdf Update min tox version to 2.0 48a56c1 Add retries to docker_image_facts eb2b92f fix tox python3 overrides 04b52bd Remove release-openstack-server 79aed38 fix tox python3 overrides c9d0857 Remove compare_host_packages strategy 96b3971 Cleanup modify directory 821fcbf Don't use copy module for /etc/yum.repos.d b58b916 Don't yum update files which are not installed b47b569 Fix local (non-root) docker build support 678b93f Fix 'too many arguments' error 9d4b320 Install yum priorities to containers before update bca80b3 Fix type in variable which blocked updates 07a2358 Fix the roles_path to actually work in a venv 7b587fe Only do yum update when needed a2229e7 Add Buildah support Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 + .gitreview | 2 +- .pre-commit-config.yaml | 40 ++++++++ .yamllint | 7 ++ LICENSE | 1 - README.md | 114 --------------------- README.rst | 233 ++++++++++++++++++++++++++++++++++++++++++ ansible.cfg | 3 +- defaults/main.yml | 5 +- files/compare-package-json.py | 33 ------ files/dev_install.sh | 48 +++++++++ files/rpm_install.sh | 2 +- files/yum_update.sh | 51 +++++++-- meta/main.yml | 8 +- setup.cfg | 8 +- setup.py | 1 + tasks/dev_install.yml | 47 +++++++++ tasks/get_original_user.yml | 26 +++++ tasks/main.yml | 1 + tasks/modify_image.yml | 27 +++-- tasks/precheck.yml | 10 ++ tasks/rpm_install.yml | 19 ++-- tasks/yum_update.yml | 83 +-------------- tasks/yum_update_buildah.yml | 84 +++++++++++++++ tasks/yum_update_docker.yml | 57 +++++++++++ templates/Dockerfile-dev.j2 | 15 +++ templates/Dockerfile-rpm.j2 | 1 + templates/Dockerfile-yum.j2 | 8 +- test-requirements.txt | 2 +- tox.ini | 37 ++++--- vars/main.yml | 5 + zuul.d/layout.yaml | 6 +- 32 files changed, 691 insertions(+), 295 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c3ed418..94dba19 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +pre-commit # MIT From no-reply at openstack.org Mon Jul 1 03:11:51 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:11:51 -0000 Subject: [release-announce] ansible-role-container-registry 1.1.0 Message-ID: We eagerly announce the release of: ansible-role-container-registry 1.1.0: ansible-container-registry - Ansible role to deploy a container registry The source is available from: https://opendev.org/openstack/ansible-role-container-registry Download the package from: https://tarballs.openstack.org/ansible-role-container-registry/ For more details, please see below. Changes in ansible-role-container-registry 1.0.0..1.1.0 ------------------------------------------------------- 9bf5868 Add docker login support 80af0d2 Fix docker network option condition b54b8ac Update to opendev 1aee1a7 OpenDev Migration Patch 0cc1894 Improve condition checking about docker registry config 70a9413 docker: add reset_connection df0ca83 Fix become for tasks and handlers 30cdb28 Update min tox version to 2.0 2cba7e3 Fix linting issues 61760f2 docker: check if ftype exists 502ee19 Reduce the number of tripleo jobs 88c26d2 Allow to skip docker reconfiguration 5e1ba52 Add xfs ftype check during install 693c4f3 use include_tasks instead of include f0fab9b fix tox python3 overrides 119f525 Remove release-openstack-server a6263fe fix tox python3 overrides b33f893 Correctly set registry_pkg_manager d7e0e8f Add missing quotes in shell task. 4f89546 Add support for dnf Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 7 ++ ci-scripts/ansible-lint.sh | 4 +- defaults/main.yml | 2 + handlers/main.yml | 5 +- setup.cfg | 2 +- tasks/docker-distribution.yml | 5 +- tasks/docker-login.yml | 11 ++ tasks/docker-update.yml | 76 ++++++++----- tasks/docker.yml | 255 +++++++++++++++++++++++++----------------- tasks/main.yml | 4 +- tox.ini | 11 +- zuul.d/layout.yaml | 5 +- 13 files changed, 249 insertions(+), 140 deletions(-) From no-reply at openstack.org Mon Jul 1 03:12:56 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 01 Jul 2019 03:12:56 -0000 Subject: [release-announce] neutron 14.0.2 (stein) Message-ID: We are delighted to announce the release of: neutron 14.0.2: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.0.2 ^^^^^^ New Features ************ * Added support for custom scripts used to kill external processes managed by neutron agents, such as "dnsmasq" or "keepalived". Such custom scripts, if defined, will be used instead default "kill" command to kill such external processes. Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. Bug Fixes ********* * Previously a network's "dns_domain" attribute was ignored by the DHCP agent. With this release, OpenStack deployments using Neutron's DHCP agent will be able to specify a per network "dns_domain" and have instances configure that domain in their dns resolver configuration files (Linux's /etc/resolv.conf) to allow for local partial DNS lookups. The per-network "dns_domain" value will override the DHCP agent's default "dns_domain" configuration value. Note that it's also possible to update a network's "dns_domain", and that new value will be propogated to new instances or when instances renew their DHCP lease. However, existing leases will live on with the old "dns_domain" value. Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. Changes in neutron 14.0.1..14.0.2 --------------------------------- e3330b10a9 Release notes for dns_domain behavioural changes fc8861d9ef Join on explcit relationship paths 4cd7ba7fde DVR: on new port only send router update on port's host fb2a4c90a1 Revert "Pass network's dns_domain to dnsmasq conf" ea3aafcad7 Updating bgp driver to match what neutron-dynamic-routing supports e6cab0f414 rbac: Catch correct exception for duplicated entry 05804a325e Optimize the code that fixes the race condition of DHCP agent. a48f157db5 SRIOV agent: wait VFs initialization on embedded switch create aa7893bc1b Reset MAC on unbinding direct-physical port 64fb6dd3e2 Switch to new engine facade for Route objects 702d4b3214 Add kill hooks for external processes cb172b4c20 improve dvr port update under large scale deployment a7c9cc870e [DVR] Block ARP to dvr router's port instead of subnet's gateway 690e1824a0 Use list instead of six.viewkeys to avoid py2 to py3 problems 62e0bee820 Support multiple external networks in L3 agent dc80a2c4e6 Wait to ipv6 accept_ra be really changed by L3 agent acd081c298 Show all SG rules belong to SG in group's details 5339544a0d [Functional tests] Test keepalived in namespaces 6e661ecd2d Make OVS controller inactivity_probe configurable 89e9c45e86 [DHCP] Don't resync network if same port is alredy in cache fe4fc33f1c Add update_id for ResourceUpdate 49af575eff Allow first address in an IPv6 subnet as valid unicast 45135364f9 Remove rootwrap configuration from neutron-keepalived-state-change eded5d2d6a Packets getting lost during SNAT with too many connections fef6b12bfe Ensure dvr ha router gateway port binding host 68cb1239d2 Async notify neutron-server for HA states db2d3895d1 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 9fc95ca512 Change curl to osc for listing resource provider inventories 5c821a3fcf Keep HA ports info for HA router during entire lifecycle 70e3790210 List ha router count should not include dvr local router aba4b16ca6 Add RHEL8 platform-python to the L3 rootwrap filters 3b8f7a0179 Don't count ports with inactive bindings as serviceable dvr ports 5d0c27e836 Give some HA router case specific resources 3ed45a4584 Fix handling of network:shared field in policy module 83231738ea Fix creating policy rules from subattributes. 06a91226e8 Fix bandit and sphinx requirements for stable/stein fd88d5c1aa Move subnet postcommit out of transaction for bulk create fe09b40d57 Get ports query: extract limit and use it only at the end. 72077c79da Not process port forwarding if no snat functionality dde99aa719 Revert iptables TCP checksum-fill code 78555ee346 Check master/backup router status in DVR functional tests 4e43ce5414 Set HA failover bridges veth pair devices UP c9f98e63e3 OpenDev Migration Patch dc3a314674 Avoid fullstack QoS tests to handle other test ports ee682138b9 DVR: Correctly change MTU in fip namespace 2aa200bdb9 Choose random value for HA routes' vr_id d7764064d0 Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 34 ++--- etc/neutron/rootwrap.d/dhcp.filters | 2 + etc/neutron/rootwrap.d/dibbler.filters | 4 + etc/neutron/rootwrap.d/l3.filters | 12 ++ etc/rootwrap.conf | 2 +- neutron/agent/common/ovs_lib.py | 7 + neutron/agent/common/resource_processing_queue.py | 22 +++ neutron/agent/dhcp/agent.py | 12 +- neutron/agent/l3/agent.py | 33 +++-- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 6 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/extensions/port_forwarding.py | 4 + neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 25 +++- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++-- neutron/agent/linux/dhcp.py | 29 ++-- neutron/agent/linux/external_process.py | 10 +- neutron/agent/linux/iptables_manager.py | 21 +++ neutron/agent/linux/keepalived.py | 3 + neutron/agent/metadata/driver.py | 14 +- neutron/api/rpc/handlers/dhcp_rpc.py | 14 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 4 + neutron/common/utils.py | 7 + neutron/conf/agent/common.py | 9 ++ neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/conf/policies/port.py | 31 ++++- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_agentschedulers_db.py | 12 +- neutron/db/l3_dvrscheduler_db.py | 38 +++--- neutron/db/l3_hamode_db.py | 31 ++++- neutron/db/rbac_db_mixin.py | 4 +- neutron/db/securitygroups_db.py | 4 +- neutron/ipam/utils.py | 25 ++-- neutron/objects/subnet.py | 2 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 ++- neutron/policy.py | 54 +++++++- .../functional/agent/linux/test_keepalived.py | 20 ++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../agent/l3/extensions/test_port_forwarding.py | 16 +++ .../unit/agent/linux/test_external_process.py | 43 ++++++ .../mech_sriov/agent/test_eswitch_manager.py | 56 ++++++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- .../legacy/neutron-tempest-postgres-full/run.yaml | 6 +- .../neutron-tempest-with-os-ken-master/run.yaml | 6 +- .../add-custom-kill-scripts-af405ba49142d59c.yaml | 7 + ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 14 +- ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + test-requirements.txt | 2 +- 93 files changed, 1330 insertions(+), 514 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c1f849f4c5..3aca6003e0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0 From no-reply at openstack.org Wed Jul 3 14:48:36 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 03 Jul 2019 14:48:36 -0000 Subject: [release-announce] neutron-lib 1.28.0 (train) Message-ID: We are gleeful to announce the release of: neutron-lib 1.28.0: Neutron shared routines and utilities This release is part of the train release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 1.28.0 ^^^^^^ New Features ************ * A new exception named "NetworkAddressScopeAffinityError" has been added in neutron_lib/exceptions/address_scope.py. This is to be raised by consumers when network / address scope affinity constraints are violated on subnet creation and subnet pool updates. * Added two new parameters in "portbindings.port.vif_details": * "connectivity": a string informing about the back-end connectivity level (l2, l3 or not specified). * "bound_drivers": a dictionary mapping the binding level to the driver name. * The "SqlFixture" and "StaticSqlFixture" are now available in "neutron_lib.fixtures". * The "subnet-dns-publish-fixed-ip" API extension is added. It adds the "dns_publish_fixed_ip" attribute to subnets, indicating whether to publish DNS records for fixed IPs from this subnet in an external DNS service. For details see [bug 1784879 (https://launchpad.net/bugs/1784879)]. * Add "ETHERTYPE_RARP" constant which represents RARP protocol to support live-migration. Bug Fixes ********* * Static route validator should verify that routed CIDR isn't a loopback. Loopback addresses should not be routable. Bug: 1834012 (https://bugs.launchpad.net/neutron/+bug/1834012) Other Notes *********** * Parent resource mapping was added to "EXT_PARENT_RESOURCE_MAPPING" in "neutron_lib.services.constants" for the "l3-conntrack-helper" extension. Changes in neutron-lib 1.27.0..1.28.0 ------------------------------------- 7a58374 make sql fixtures public bf810d2 Update flake8 style enforcement d441518 Introduce NetworkAddressScopeAffinityError 8417717 Loopback address routing should be invalid c26573f Add new vif_details parameters d2cabd9 Fix subnet_dns_publish_fixed_ip extension 56e0979 Add 'dns_publish_fixed_ip' attribute to Subnet 7d11cd6 Add rarp protocol for neutron constants 7a0a41b Add conntrack helper to parent resource mapping 28e71cb placement client: fix routed prov networks working c977378 [api-ref] Update info about internal_ip_address in FIP port forwarding e02c4b2 [api-ref] Add short warning about ANY IP address in allowed address pair 2f9c969 fix doc periodic log url Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/parameters.yaml | 27 ++++++-- api-ref/source/v2/ports.inc | 7 ++ .../v2/samples/subnets/subnet-create-response.json | 1 + .../v2/samples/subnets/subnet-show-response.json | 1 + .../v2/samples/subnets/subnet-update-response.json | 1 + .../subnets/subnets-create-bulk-response.json | 2 + .../v2/samples/subnets/subnets-list-response.json | 2 + api-ref/source/v2/subnets.inc | 16 +++++ lower-constraints.txt | 6 +- neutron_lib/api/definitions/__init__.py | 2 + neutron_lib/api/definitions/base.py | 1 + neutron_lib/api/definitions/portbindings.py | 7 ++ .../api/definitions/subnet_dns_publish_fixed_ip.py | 80 ++++++++++++++++++++++ neutron_lib/api/validators/__init__.py | 2 + neutron_lib/constants.py | 1 + neutron_lib/exceptions/address_scope.py | 5 ++ neutron_lib/fixture.py | 4 +- neutron_lib/placement/client.py | 7 +- neutron_lib/plugins/constants.py | 1 + neutron_lib/services/constants.py | 3 +- .../test_subnet_dns_publish_fixed_ip.py | 21 ++++++ ...ress-scope-affinity-error-8f6b4493a92142d4.yaml | 7 ++ ...r-parent-resource-mapping-95a4a2cb6f6536fe.yaml | 6 ++ ...ew-vif-details-parameters-71e70ab5e7c26c45.yaml | 9 +++ .../public-sql-fixtures-35d0aa74a368e217.yaml | 4 ++ ...bnet-dns-publish-fixed-ip-031d78bbc85a419e.yaml | 8 +++ .../support-rarp-protocol-44f5c67784e74db4.yaml | 4 ++ ...ator_check_route_loopback-bc2166b10a754c77.yaml | 7 ++ tox.ini | 6 +- 36 files changed, 250 insertions(+), 20 deletions(-) From no-reply at openstack.org Thu Jul 4 10:26:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:26:04 -0000 Subject: [release-announce] oslo.config 6.11.0 (train) Message-ID: We joyfully announce the release of: oslo.config 6.11.0: Oslo Configuration API This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 6.10.0..6.11.0 ------------------------------------- 0f29826 Remove '.testr.conf' 2610dff Switch to sphinxcontrib-apidoc a2e8aa9 Deprecate ConfigFilter dc9b711 Add unit tests for validator 0c734ac Add special handling for keystone_authtoken group Diffstat (except docs and test files) ------------------------------------- .testr.conf | 4 -- lower-constraints.txt | 2 +- oslo_config/cfgfilter.py | 7 +++ oslo_config/sphinxext.py | 1 + oslo_config/validator.py | 22 +++++-- test-requirements.txt | 2 +- 21 files changed, 180 insertions(+), 127 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index dab06dd..ce22df6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27 +27 @@ sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD -mock>=2.0.0 # BSD +mock>=3.0.0 # BSD From no-reply at openstack.org Thu Jul 4 10:27:30 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:27:30 -0000 Subject: [release-announce] python-qinlingclient 2.2.0 (train) Message-ID: We are gleeful to announce the release of: python-qinlingclient 2.2.0: python-qinlingclient This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-qinlingclient Download the package from: https://pypi.org/project/python-qinlingclient Please report issues through: https://storyboard.openstack.org/#!/project/926 For more details, please see below. Changes in python-qinlingclient 2.1.0..2.2.0 -------------------------------------------- a3ce167 Update the Launchpad to Storyboard fb58059 Add doc/requirements.txt to releasenotes tox environment 0649ad4 Update json module to jsonutils 3ffe4d0 Fix unit test failure 36d3987 Fix the filter description for resource list 0d219b1 Replace git.openstack.org URLs with opendev.org URLs 52cab5a OpenDev Migration Patch 76d8811 Dropping the py35 testing b74e891 Update master for stable/stein 1d4dcfd add python 3.7 unit test job b5d3383 Change openstack-dev to openstack-discuss fbc139f Add Python 3.6 classifier to setup.cfg 6737ae7 add python 3.6 unit test job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- CONTRIBUTING.rst | 2 +- README.rst | 2 +- qinlingclient/osc/v1/base.py | 28 ++++++++++++++++++++-- qinlingclient/osc/v1/function.py | 16 ++++++------- qinlingclient/osc/v1/function_alias.py | 1 + qinlingclient/osc/v1/function_execution.py | 1 + qinlingclient/osc/v1/job.py | 1 + qinlingclient/osc/v1/webhook.py | 1 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++++ setup.cfg | 4 ++-- setup.sh | 2 +- tox.ini | 9 ++++--- 22 files changed, 91 insertions(+), 46 deletions(-) From no-reply at openstack.org Thu Jul 4 10:29:19 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:29:19 -0000 Subject: [release-announce] pbr 5.4.0 Message-ID: We eagerly announce the release of: pbr 5.4.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 5.4.0 ^^^^^ New Features * Add an option to print only the version of a package Example: $ pbr info -s pkgname 1.2.3 Changes in pbr 5.3.1..5.4.0 --------------------------- c715db6 option to print only the version of a package Diffstat (except docs and test files) ------------------------------------- pbr/cmd/main.py | 9 +++++++-- releasenotes/notes/cmd-e6664dcbd42d3935.yaml | 11 +++++++++++ 2 files changed, 18 insertions(+), 2 deletions(-) From no-reply at openstack.org Thu Jul 4 10:29:50 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:29:50 -0000 Subject: [release-announce] oslo.upgradecheck 0.3.0 (train) Message-ID: We contentedly announce the release of: oslo.upgradecheck 0.3.0: Common code for writing OpenStack upgrade checks This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.upgradecheck Download the package from: https://pypi.org/project/oslo.upgradecheck Please report issues through: https://bugs.launchpad.net/oslo.upgradecheck/+bugs For more details, please see below. 0.3.0 ^^^^^ New Features * oslo.upgradecheck now supports the command line flag "--json" to have the upgrade check results output in a compact, machine readable JSON format. The default output without this flag remains a human readable table of the results. Changes in oslo.upgradecheck 0.2.1..0.3.0 ----------------------------------------- 3a92c6e Enable JSON results output 1878153 Sync Sphinx requirement 0430df3 Replace git.openstack.org URLs with opendev.org URLs d723930 OpenDev Migration Patch 41f47ae Dropping the py35 testing b1a3426 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- HACKING.rst | 2 +- README.rst | 6 +-- oslo_upgradecheck/upgradecheck.py | 58 +++++++++++++++------- releasenotes/notes/.placeholder | 0 .../notes/json-output-78a9e19588b7b1e1.yaml | 7 +++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ setup.cfg | 1 - test-requirements.txt | 3 +- tox.ini | 2 +- 12 files changed, 66 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 270a8ea..cf3bc33 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ stestr>=2.0.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD From no-reply at openstack.org Thu Jul 4 10:30:00 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:30:00 -0000 Subject: [release-announce] sahara-tests 0.9.0 (stein) Message-ID: We are stoked to announce the release of: sahara-tests 0.9.0: Sahara tests This release is part of the stein release series. The source is available from: https://opendev.org/openstack/sahara-tests Download the package from: https://tarballs.openstack.org/sahara-tests/ Please report issues through: https://storyboard.openstack.org/#!/project/940 For more details, please see below. 0.9.0 ^^^^^ Prelude ******* Stein test templates are now available, while Ocata test templates have been removed. New Features ************ * Allow to enable boot_from_volume on node group templates when running scenario tests with APIv2. * sahara-scenario now supports testing the S3 API for job binaries and data sources, a feature introduced in Rocky. The code can be enabled using the "s3" feature and various templates now runs an S3-based job too when the feature is enabled from the command line. * A folder with scenario templates for Stein has been added. It is a subset of the templates in the main directory. Deprecation Notes ***************** * The Ocata-specific job templates have been removed. This means that starting from this release Ocata is not supported (it is under Extended Maintenance now). Bug Fixes ********* * Properly handle more use cases when only Keystone v3 is enabled and/or its service URI is missing the /v3 suffix. Changes in sahara-tests 0.8.0..0.9.0 ------------------------------------ 4ed9f32 scenario tests: allow to use boot_from_volume on NGT 1c8cb70 Properly handle authentication with Keystone v3 4c1d164 CLI tests: more testing and Python 3 fixes 3333341 Unblock the gates (fix for bandit, workaround for stestr) 4680504 Scenario tests: add the test templates for Stein baabb6f Replace git.openstack.org URLs with opendev.org URLs e663a7e OpenDev Migration Patch bfe9cc1 doc: update the references to rally commands 45985a7 Replace openstack.org git:// URLs with https:// 5e33889 Scenario test runner: support for S3 testing a5fee8c More Python 3 jobs: scenario (by default) and devstack Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .stestr.conf | 2 +- .zuul.yaml | 64 ++++++++------ README.rst | 2 +- etc/scenario/gate/credentials_s3.yaml.mako | 6 ++ etc/scenario/gate/edp_s3.yaml.mako | 25 ++++++ etc/scenario/gate/spark-1.6.0.yaml.mako | 2 + etc/scenario/simple-testcase.yaml | 8 +- .../notes/more-auth-fixes-9ba23ceb54ba042a.yaml | 5 ++ ...scenario-boot-from-volume-a87c680b03f560a0.yaml | 5 ++ .../notes/scenario-s3-20d41440d84af3a9.yaml | 8 ++ .../test-templates-stein-751a4344bfcca652.yaml | 11 +++ requirements.txt | 1 + roles/run-sahara-scenario/defaults/main.yaml | 3 +- roles/run-sahara-scenario/tasks/main.yaml | 9 +- roles/setup-sahara-scenario-env/defaults/main.yaml | 1 + roles/setup-sahara-scenario-env/tasks/main.yaml | 4 + .../setup-sahara-scenario-env/tasks/setup_s3.yaml | 29 +++++++ .../templates/sahara_scenario_conf.ini.j2 | 7 ++ .../scenario/defaults/ambari-2.4.yaml.mako | 3 + .../scenario/defaults/ambari-2.5.yaml.mako | 3 + .../scenario/defaults/ambari-2.6.yaml.mako | 3 + .../scenario/defaults/cdh-5.11.0.yaml.mako | 5 +- .../scenario/defaults/cdh-5.13.0.yaml.mako | 3 + .../scenario/defaults/credentials_s3.yaml.mako | 6 ++ .../scenario/defaults/mapr-5.2.0.mrv2.yaml.mako | 3 + .../scenario/defaults/pike/cdh-5.11.0.yaml.mako | 2 +- .../scenario/defaults/queens/cdh-5.11.0.yaml.mako | 2 +- .../scenario/defaults/rocky/ambari-2.4.yaml.mako | 3 + .../scenario/defaults/rocky/ambari-2.5.yaml.mako | 3 + .../scenario/defaults/rocky/ambari-2.6.yaml.mako | 3 + .../scenario/defaults/rocky/cdh-5.11.0.yaml.mako | 5 +- .../scenario/defaults/rocky/cdh-5.13.0.yaml.mako | 3 + .../scenario/defaults/rocky/cdh-5.9.0.yaml.mako | 3 + .../defaults/rocky/mapr-5.2.0.mrv2.yaml.mako | 3 + .../ambari-2.3.yaml.mako} | 4 +- .../scenario/defaults/stein/ambari-2.4.yaml.mako | 72 ++++++++++++++++ .../scenario/defaults/stein/ambari-2.5.yaml.mako | 72 ++++++++++++++++ .../scenario/defaults/stein/ambari-2.6.yaml.mako | 72 ++++++++++++++++ .../cdh-5.11.0.yaml.mako} | 11 ++- .../scenario/defaults/stein/cdh-5.13.0.yaml.mako | 97 ++++++++++++++++++++++ .../defaults/{ocata => stein}/cdh-5.9.0.yaml.mako | 3 + .../{ocata => stein}/mapr-5.2.0.mrv2.yaml.mako | 3 + .../spark-2.2.yaml.mako} | 6 +- .../scenario/defaults/stein/spark-2.3.yaml.mako | 37 +++++++++ .../storm-1.1.0.yaml.mako} | 6 +- .../scenario/defaults/stein/storm-1.2.0.yaml.mako | 37 +++++++++ .../{ocata => stein}/vanilla-2.7.1.yaml.mako | 0 .../defaults/stein/vanilla-2.7.5.yaml.mako | 84 +++++++++++++++++++ .../defaults/stein/vanilla-2.8.2.yaml.mako | 84 +++++++++++++++++++ .../scenario/defaults/storm-1.2.0.yaml.mako | 2 +- test-requirements.txt | 1 + tools/gate/scenario/dsvm-scenario-rc | 6 +- tox.ini | 8 +- 72 files changed, 1129 insertions(+), 101 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c0f8a5d..b5a7778 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,0 +8 @@ Mako>=0.4.0 # MIT +botocore>=1.5.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 83d727e..c99d2d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 +bandit!=1.6.0 From no-reply at openstack.org Thu Jul 4 10:33:07 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:33:07 -0000 Subject: [release-announce] osprofiler 2.8.1 (train) Message-ID: We are excited to announce the release of: osprofiler 2.8.1: OpenStack Profiler Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler Please report issues through: https://bugs.launchpad.net/osprofiler/+bugs For more details, please see below. Changes in osprofiler 2.8.0..2.8.1 ---------------------------------- ede0ec4 Bring env OSPROFILER_CONNECTION_STRING into effect 55b0542 Support standalone placement in the devstack Diffstat (except docs and test files) ------------------------------------- devstack/lib/osprofiler | 1 + osprofiler/cmd/commands.py | 13 +++++++++++-- 2 files changed, 12 insertions(+), 2 deletions(-) From no-reply at openstack.org Thu Jul 4 10:35:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:35:59 -0000 Subject: [release-announce] neutron 12.1.0 (queens) Message-ID: We are jazzed to announce the release of: neutron 12.1.0: OpenStack Networking This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 12.1.0 ^^^^^^ Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. Changes in neutron 12.0.6..12.1.0 --------------------------------- 05d6f0892f DVR: on new port only send router update on port's host 4091dc33d7 Use status_code instead of status in requests ae542f6854 metadata: use requests for comms with nova api 021008cd69 Reset MAC on unbinding direct-physical port ee85fd74cf Optimize the code that fixes the race condition of DHCP agent. 0fc1d32e52 SRIOV agent: wait VFs initialization on embedded switch create fc0e0a5725 improve dvr port update under large scale deployment 836f79e7b7 Packets getting lost during SNAT with too many connections 9b3e401533 [DVR] Block ARP to dvr router's port instead of subnet's gateway 7891c7cd05 Make OVS controller inactivity_probe configurable 8c7c26c5bd Revert "Pass network's dns_domain to dnsmasq conf" aa0d4f5f64 Use list instead of six.viewkeys to avoid py2 to py3 problems 90dfa1938d Only store segmenthostmapping when enable segment plugin 21f150dc5d Wait to ipv6 accept_ra be really changed by L3 agent 0cd42257aa Allow first address in an IPv6 subnet as valid unicast e02b66a858 Show all SG rules belong to SG in group's details 5505517295 [DHCP] Don't resync network if same port is alredy in cache 698a5e30f4 Remove rootwrap configuration from neutron-keepalived-state-change 8bff653d90 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 265d1cffdd Ensure dvr ha router gateway port binding host 14208661ae Async notify neutron-server for HA states d02b0bef21 Fix handling of network:shared field in policy module c3ee286a55 Fix creating policy rules from subattributes. b5f7bd333e Add missing policy actions to policy.json file a4ab08026e Keep HA ports info for HA router during entire lifecycle 2c6f733933 Get ports query: extract limit and use it only at the end. d075028146 Use dynamic lazy mode for fetching security group rules 8915febaaf objects: avoid deepcopying models in test_db_obj 31320156e4 Revert iptables TCP checksum-fill code b3a12e15f4 Give some HA router case specific resources 861f85056e Move subnet postcommit out of transaction for bulk create 66ac2f0ded OpenDev Migration Patch 03f65602df Fix attribute mismatch in router provider update 8ba5899942 Check master/backup router status in DVR functional tests 0e808b4a6a Set HA failover bridges veth pair devices UP 8693aede07 neutron.conf needs lock_path set for router to operate This change is adding required configuration in neutron.conf to set the lock_path parameter, which was missing in compute-install-ubuntu.rst 39afe0a129 Do not call update_device_list in large sets 72c9a7ef84 Choose random value for HA routes' vr_id 42a5a48c37 DVR: Correctly change MTU in fip namespace 3d434814ef Handle DBConnectionError in skip_if_timeout decorator dd5e89e717 Improve port dhcp Provisioning 2ec575f084 Rename router processing queue code to be more generic f0a88de46f Fix regression with SG read API with empty ruleset 5dbb26b423 Change ovs version we use in fullstack tests df4e0a5394 Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 28 +-- etc/policy.json | 8 + neutron/agent/common/ovs_lib.py | 7 + .../resource_processing_queue.py} | 120 +++++------ neutron/agent/dhcp/agent.py | 229 ++++++++++++++------- neutron/agent/l3/agent.py | 50 ++--- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 6 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 22 +- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++- neutron/agent/linux/dhcp.py | 27 +-- neutron/agent/linux/iptables_manager.py | 22 ++ neutron/agent/linux/keepalived.py | 2 + neutron/agent/metadata/agent.py | 47 +++-- neutron/agent/metadata/driver.py | 10 - neutron/agent/rpc.py | 29 ++- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 54 ++++- neutron/api/rpc/handlers/dhcp_rpc.py | 15 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 6 + neutron/common/utils.py | 7 + neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_dvrscheduler_db.py | 29 ++- neutron/db/l3_hamode_db.py | 31 ++- neutron/db/models/securitygroup.py | 2 +- neutron/db/securitygroups_db.py | 6 +- neutron/ipam/utils.py | 27 ++- neutron/objects/base.py | 66 +++++- neutron/objects/common_types.py | 23 +++ neutron/objects/ports.py | 17 +- neutron/objects/securitygroup.py | 4 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 +- neutron/policy.py | 54 ++++- .../service_providers/driver_controller.py | 7 +- neutron/services/segments/db.py | 27 ++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../test_resource_processing_queue.py} | 65 +++--- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 37 +++- .../mech_sriov/agent/test_eswitch_manager.py | 56 +++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 +- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../service_providers/test_driver_controller.py | 29 +++ playbooks/legacy/neutron-fullstack/run.yaml | 6 +- playbooks/legacy/neutron-functional/run.yaml | 6 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- playbooks/legacy/neutron-rally-neutron/run.yaml | 40 ++-- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 6 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 6 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-ovsfw/run.yaml | 6 +- ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 13 -- ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + requirements.txt | 1 + 99 files changed, 1905 insertions(+), 788 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b2cf2d0158..55210099fa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,0 +13 @@ httplib2>=0.9.1 # MIT +requests!=2.20.0,>=2.14.2 # Apache-2.0 From no-reply at openstack.org Thu Jul 4 10:49:52 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 04 Jul 2019 10:49:52 -0000 Subject: [release-announce] ansible-role-redhat-subscription 1.0.4 Message-ID: We are overjoyed to announce the release of: ansible-role-redhat-subscription 1.0.4: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.0.3..1.0.4 -------------------------------------------------------- fceb51c Fix issue with long description by using markdown format Diffstat (except docs and test files) ------------------------------------- setup.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Fri Jul 5 12:56:41 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 12:56:41 -0000 Subject: [release-announce] os-api-ref 1.6.2 Message-ID: We joyfully announce the release of: os-api-ref 1.6.2: Sphinx Extensions to support API reference sites in OpenStack The source is available from: https://opendev.org/openstack/os-api-ref Download the package from: https://tarballs.openstack.org/os-api-ref/ For more details, please see below. Changes in os-api-ref 1.6.1..1.6.2 ---------------------------------- 678238d Add Python 3 Train unit tests 2a3f534 Add support for Sphinx v2.1 f8557cb Update Testing for Train d9d4cb5 Replace git.openstack.org URLs with opendev.org URLs 525eee5 Add support for Sphinx 2.0 72de61e OpenDev Migration Patch c6874c7 trivial: Remove unused attribute Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 5 +- README.rst | 2 +- os_api_ref/__init__.py | 4 -- setup.cfg | 3 +- tox.ini | 8 +-- 8 files changed, 145 insertions(+), 18 deletions(-) From no-reply at openstack.org Fri Jul 5 12:59:19 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 12:59:19 -0000 Subject: [release-announce] renderspec 1.12.0 Message-ID: We are delighted to announce the release of: renderspec 1.12.0: Jinja2 template renderer for generating .spec files The source is available from: https://opendev.org/openstack/renderspec Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.11.1..1.12.0 ------------------------------------ 8083f1e Add contextfunctions 'py2' and 'py3' Diffstat (except docs and test files) ------------------------------------- renderspec/contextfuncs.py | 20 ++++++++++++++++++++ 3 files changed, 54 insertions(+) From no-reply at openstack.org Fri Jul 5 12:59:19 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 12:59:19 -0000 Subject: [release-announce] oslotest 3.8.0 (train) Message-ID: We jubilantly announce the release of: oslotest 3.8.0: Oslo test framework This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslotest Download the package from: https://pypi.org/project/oslotest Please report issues through: https://bugs.launchpad.net/oslotest/+bugs For more details, please see below. Changes in oslotest 3.7.1..3.8.0 -------------------------------- 52ac194 Sync Sphinx requirement c36485c Replace git.openstack.org URLs with opendev.org URLs f8f6b14 Stop testing mock functionality 1a3490d OpenDev Migration Patch d10fe40 Dropping the py35 testing 72a20f7 Replace openstack.org git:// URLs with https:// 010b47e Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 8 ++++---- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 2 +- test-requirements.txt | 3 ++- tox.ini | 4 ++-- 9 files changed, 18 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 88bee06..6b64bc4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13,2 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.5 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5;python_version>='3.4' # BSD From no-reply at openstack.org Fri Jul 5 13:00:34 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:00:34 -0000 Subject: [release-announce] paunch 4.5.0 (stein) Message-ID: We are satisfied to announce the release of: paunch 4.5.0: Utility to launch and manage containers using YAML based configuration data This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. 4.5.0 ^^^^^ New Features * When deploying with Podman, we can disable the container healthchecks by using paunch apply --healtcheck-disabled. * paunch learns 'hostname' wich maps to podman run --hostname and 'extra_hosts' mapping to podman run --add-host. Changes in paunch 4.4.0..4.5.0 ------------------------------ 210c0d6 Quote the health check command argument during a debug with print-cmd. fb76030 Revert "docker/compose: quote health-cmd" a7e28c3 Add upper constraints for testing 1a40ff9 Remove scenario008 jobs dd2da3f Ensure we don't have any trailing "requires" for paunch units cbc9607 Corrected how health check unit and link are removed 835c3d6 Introduce the systemctl module to provide simple systemctl commands wrap 04207b2 Add missing link between healthcheck unit and main service 300a275 Fix doc build 4ef4e63 Add 'hostname' and 'extra_hosts' to podman 8ebca97 Update .gitreview for stable/stein 251ca7e docker/compose: quote health-cmd 086209d Introduce paunch apply --healthcheck-disabled 9c73429 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- paunch/__init__.py | 19 ++++- paunch/builder/base.py | 6 +- paunch/builder/compose1.py | 3 +- paunch/builder/podman.py | 9 ++- paunch/cmd.py | 10 ++- paunch/runner.py | 11 +-- paunch/utils/systemctl.py | 66 ++++++++++++++++++ paunch/utils/systemd.py | 59 +++++++++------- .../healthcheck_disabled-373c8c26e8dc50c6.yaml | 5 ++ ...name-and-extra_hosts-args-27335af0a5694ba6.yaml | 5 ++ test-requirements.txt | 2 - tox.ini | 6 +- zuul.d/layout.yaml | 2 - 20 files changed, 289 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ad110d4..7ad08e8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD @@ -14 +12,0 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=1.18.1 # Apache-2.0 From no-reply at openstack.org Fri Jul 5 13:03:52 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:03:52 -0000 Subject: [release-announce] tripleo-heat-templates 10.6.0 (stein) Message-ID: We jubilantly announce the release of: tripleo-heat-templates 10.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.6.0 ^^^^^^ New Features ************ * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * Add GlanceImageCacheDir parameter to set base directory location that the Image Cache uses. Add GlanceImageCacheMaxSize parameter to set the upper limit on cache size, in bytes, after which the cache- pruner cleans up the image cache. Add GlanceImageCacheStallTime parameter to set the amount of time to let an image remain in the cache without being accessed. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * Introduce new tag into roles that will create external_bridge (usable only for multiple-nics). * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Add parameter *NovaLiveMigrationWaitForVIFPlug* which allows to set *live_migration_wait_for_vif_plug* which in turn allows whether to wait for "network-vif-plugged" events before starting guest transfer. The default value for the parameter is set to true and it is set to false when *ovn* is in *NeutronMechanismDrivers* list. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * Add role parameter NovaLibvirtNumPciePorts which sets *libvirt/num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. When using the 'q35' machine type, by default, it allows only a *single* PCIe device to be hotplugged. And Nova currently sets 'num_pcie_ports' to "0" (which means, it defaults to libvirt's "1"), which is not sufficient for hotplug use. Default for NovaLibvirtNumPciePorts is 16. * Added OVN-DPDK support * Introduced two new numeric parameters OvsRevalidatorCores and OvsHandlerCores to set values of n-revalidator-threads and n -handler-threads on openvswitch. Upgrade Notes ************* * During upgrade user will need to create custom roles_data.yaml and remove external_bridge from tags to be sure that bridge will be not added. * The new role variable update_serial is introduced allowing parallel update execution. On Controller role this variable defaults to 1 as pacemaker has to be taken down and up in rolling fashion. The default value is 25 as that is default value for parallel ansible execution used by tripleo. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixed launchpad bug 1831122 (https://bugs.launchpad.net/tripleo/+bug/1831122) with the NetApp Backend. * When changeing the "name_lower" of the "InternalApi" network and using the "service_net_map_replace" option in network data. The subnet referenced in "VipSubnetMapDefaults" did not take in account the custom lowercase name for the network, causing deployment error. See bug: 1832461 (https://bugs.launchpad.net/tripleo/+bug/1832461). * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * https://review.opendev.org/#/c/662109/ removed the bind mount from /run inside the nova_migration_target container. But the nova- migration-wrapper inside the container needs access to the libvirt socket - https://github.com/rdo-packages/nova-distgit/blob/rpm- master/nova-migration-wrapper#L31 . This adds the bind mount of /run/libvirt to the nova_migration_target container to fix live migration issues. * With 405366fa32583e88c34417e5f46fa574ed8f4e98 the parameters RpcPort, RpcUserName, RpcPassword and RpcUseSSL got deprecated and nova::rabbitmq_port removed. As a result the healtcheck get called with null parameter and fail. We now get the global_config_settings from RabbitMQService and use oslo_messaging_rpc_port for the healthcheck. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 10.5.0..10.6.0 ------------------------------------------------ 23d2bd9a7 Add missing tag 'role_specific' for NovaPciPassthrough parameter 9a1491a42 ceilometer_agent_notification: disable-panko.yaml 93ead16ca Avoid checking rc if we're in dry-run mode 534a23576 Setup cluster definition based on the ansible limit option. 1425671a3 Add /run/libvirt to nova_migration_target container f736d4471 Make comparisons case insensitive 80c40e03d Fix Ceph RGW listener port configuration 6f2877d98 Replace /var/log/containers/swift symlink with directories 1eaabaf36 Fix ipaclient script dcd135f99 Allow ssh from all ctlplane network subnets 273f9a32a Configure insecure registries before Pacemaker-managed image pulls 1cedab103 Change package installs for Stein and OS upgrade aaf25b8de Do not assume the CNI config directory exists 2accf4d25 Refactor ovn_dbs upgrade_tasks. 0af8eb1c6 Remove baremetal to containerized pacemaker upgrade_tasks. 34450cc63 Remove OpenStack packages right before upgrading the operating system 7f393a3d4 Add operating system upgrade preparation via Leapp 6c60a77c1 Reintroduce upgrade tasks for stopping pacemaker cluster 8d6b51b77 Stop all services before upgrading node's OS. 1f6a24f6a Don't create symlink for swift container logs 086238e91 Enable Ceph RGW 'account in url' option 04320fe1b Remove os-collect-config related poperties and attributes 99039a819 Override ovn::controller::hostname to use hiera:fqdn_canonical aa280e94c Remove duplicate mount destinations in containers 1d2d1b29a Revert "ceilometer_agent_notification: disable-panko.yaml" 5e70fa869 Disable iscsi.service to avoid iscsid on host from getting started 6b5defe6d Add new parameter NovaLiveMigrationWaitForVIFPlug eff837623 Fix bare reference of cinder_enable_iscsi_backend 126ab3981 Put on hold the Ansible package update until is fixed 459b873c2 Fix network rename + service_net_map_replace 247e8e86f Fix NovaNfs role parameters d5d227b54 Explicitly set ansible_python_interpreter in external upgrade playbook 0f5bc4d1b Set cache_backend for token caching d76839874 Remove scenario008 jobs c433f9258 Remove incorrect use of PlacementApi in ControllerStorageNfs 09465e426 Handle openvswitch meta-package on undercloud upgrade. 46741fc85 Fix RedisVirtualIP when overrdiing InternalApi name_lower 0339c45d9 Force ansible serial to 1 for the Controller 1d02e964d Fix log owner on computes during overcloud deploy runs d52e34b8c Re-enable manila dashboard e5e7fea69 Add networks to Standalone role 3ba431d30 Make NovaResumeGuestsStateOnHostBoot podman compatible 1797d56cc OVS Revalidator and handler threads e6c610ac6 Fix correct network for nova-vnc c2ceefcd5 Add panko_api_cron container b4779ec17 Add {{role.name}}RemovalPoliciesMode parameter aa2be6cbe Add ComputeHCIOvsDpdk role 242efd05c Fix disappearing Puppet logs b12c8035d Add more settings for glance image cache fb659ead8 DVR neutron template should enable ARP responder 96444da0e Clean metrics related environments c6294bd8a Add creating br-ex for compute node in ovn 13b693676 Add healthcheck to ironic_pxe_http b9992d965 Add new role parameter NovaLibvirtNumPciePorts bc9397f32 Configure Neutron API for Nova Placement... b74dad7a8 Fix ssl.yaml generating GaneshaInternal in the endpoint map 5b1ba9846 Do not bind /run on host to nova_migration_target a199e335b Set TenantNetPhysnetMtu to 0 to allow different MTUs fd5619871 Ensure openstack clients are installed 517175cce Fix service auth URL in Octavia 7d18d96a4 Add DPDK support for OVN c1865bafb Fix custom network.name_lower in krb-service-principals 152e46575 Fix netapp deployment manifest 8b3fceb0b Fix haproxy stats network binding 705fdb625 ceph-base: Update ceph-ansible default playbook d0eb1d939 Remove unnecessary openldap-clients package from overcloud controllers 5d1aa80d0 Adapt sensu on refactor 37ec3710a Configure server_certs_key_passphrase for Octavia 1f79242a0 Correct ceph configuration for scenario 10 environments 4514ed6c3 Re-add amphora flavor management settings 108b8469f Initialize ip(6)tables "raw" table ece7858d7 Fix manila-scheduler-container-puppet.yaml typo 9f3bb796f Add domain and no-ntp options to ipaclient e1f51a5f5 Add CephAnsibleEnvironmentVariables to nodes-uuid call 3fddb7711 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 6b4f03f9e Remove the iptables rules set via service_config_settings d033c1a3e Add ability to specify dns search domains 952511f65 Fix IPA client when doing brownfield deployment of internal TLS aa6dc4cbc Add mkhomedir option to ipa-client-install 5c014c674 Set force_config_drive only when OVNMetadata is disabled ed5f481aa standalone/undercloud - post: use EndpointMap to fetch Keystone URL 93f31d38b Enable serial execution for ansible host b23fd9f70 Try a timesync as part of first boot 3aa22c917 Add cinder credentials to nova conf 1616da335 Set arp_notify to match ndisc_notify 0c31f04f4 Activate health checks for cron containers 53fbc70e7 Fix NovaNfs role parameter precedence in conditions 999626d85 Ensure we aren't running some dry-run also for Pacemaker case 0317a5b7d Modified the way fluentd configures rsyslog 2b4268e7d Re-add undercloud-aodh.yaml 038d887d8 Fix haproxy firewall rules bfc0add03 Remove OVNTunnelEncapType 9118472dc Use RpcPort for container healthchecks 3978faeaa Adapt check-docker-health for podman 039ce1c3c Gracefully handle empty config json data ba1e21743 Fix the step_config input in the OvS-DPDK template 93155b544 Allow multiple same options in nova.conf 835b862c9 Enable zaqar healthchecks 5715c98b5 Copy keys for tripleo-admin user b15532ae0 Enable ndisc_notify sysctl setting to notify of MAC changes eb898e234 Use timesync service 0152ce48b Clean up leftover mount point after docker stop. 480100564 Enable Podman Service For Lacking Roles 9096b4941 Use oslo_messaging_rpc_port for nova rpc healthchecks f5ef977e1 Revert "mistral: configure heartbeat parameters to avoid action timeout" 125cecfcb Fix cinder-backup deployment templates 6e6d23838 Avoid issues with non-existing directories 28a0d3c53 Set debug level of nova container_config_scripts only when enabled 2ee3e849e Adjust deployed-server install package list for RHEL8 4e36f4918 Change setype for non container /var/log/nova-placement 2093cca40 Change setype for non container /var/log/ directories 44f39920b Remove ceph-ansible fetch directory as privileged user e6c0e71d7 Update UPPER_CONSTRAINTS_FILE for stable/stein 4d43cffd3 Update .gitreview for stable/stein 8437f6c9c ensure /var/run/redis is present upon reboot 1762e9b63 ceilometer_agent_notification: disable-panko.yaml 3a4a77356 Add parameter to configure maxdelay in db purge/archive job cc2517688 Remove ceph-ansible fetch directory after it is saved 517033961 Ensure there is no redis on host 2c0785069 Run nova_cell_v2_discover_hosts.py on every deploy run 4a6ba2bba Run nova-manage as root to prevent wrong nova-manage.log permissions 04a24ed7a Drop puppet/services/metrics/collectd.yaml 7fd94ab52 MetricsQdr: Build sslProfiles without internal TLS a32d70319 fix storage.yaml to write environments/storage/nova-nfs.yaml 0cd185954 Allow NovaNfs parameters to be role specific 63a7d6d92 heat: use oslo_messaging_rpc_port for nova rpc healthchecks 6dbd0d3fe Add ANSIBLE_GATHER_TIMEOUT=60 to ceph-ansible run d5234ca15 Move Manila backends into deployment 8b7590dd0 Override ceph_mon to v2 protocol 8fd58b4b8 Avoid concurrent nova cell_v2 discovery instances 847a2057c Use oslo_messaging_rpc_port for nova rpc healthchecks d4218d1f3 Evaluating ansible_check_mode as a boolean c630f13fd OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- ci/common/vbmc_setup.yaml | 5 + ci/environments/multinode-3nodes.yaml | 4 +- ci/environments/multinode-containers.yaml | 2 +- .../nic-configs/compute-dvr.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../multiple-nics/nic-configs/compute-dvr.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + .../scenario000-multinode-containers.yaml | 2 +- .../scenario001-multinode-containers.yaml | 2 +- ci/environments/scenario001-standalone.yaml | 1 + .../scenario002-multinode-containers.yaml | 2 +- .../scenario003-multinode-containers.yaml | 2 +- .../scenario004-multinode-containers.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 3 +- .../scenario006-multinode-containers.yaml | 2 +- ci/environments/scenario006-multinode.yaml | 4 +- .../scenario007-multinode-containers.yaml | 2 +- .../scenario008-multinode-containers.yaml | 2 +- ci/environments/scenario009-multinode.yaml | 2 +- .../scenario010-multinode-containers.yaml | 3 +- ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 2 +- common/container-puppet.py | 12 +- common/deploy-steps-tasks.yaml | 60 +-- common/deploy-steps.j2 | 31 +- .../nova_cell_v2_discover_hosts.py | 62 +++ .../nova_statedir_ownership.py | 9 +- ...er_host.py => nova_wait_for_compute_service.py} | 63 +-- .../nova_wait_for_placement_service.py | 29 +- deployed-server/deployed-server-bootstrap-rhel.sh | 4 +- deployed-server/deployed-server-roles-data.yaml | 10 +- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 10 +- ...ometer-agent-notification-container-puppet.yaml | 18 +- deployment/ceph-ansible/ceph-base.yaml | 18 +- deployment/ceph-ansible/ceph-rgw.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 19 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 45 +-- deployment/cinder/cinder-base.yaml | 8 +- .../cinder/cinder-common-container-puppet.yaml | 2 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 10 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 --- deployment/containers-common.yaml | 16 +- deployment/database/mysql-pacemaker-puppet.yaml | 110 +++--- deployment/database/redis-container-puppet.yaml | 18 +- deployment/database/redis-pacemaker-puppet.yaml | 95 +++-- .../logging/fluentd-container-puppet.yaml | 27 +- .../monitoring/sensu-client-container-puppet.yaml | 42 +- .../panko/panko-api-container-puppet.yaml | 28 ++ deployment/glance/glance-api-container-puppet.yaml | 23 ++ deployment/haproxy/haproxy-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 99 ++--- deployment/heat/heat-api-container-puppet.yaml | 2 + deployment/heat/heat-engine-container-puppet.yaml | 10 +- deployment/horizon/horizon-container-puppet.yaml | 8 +- .../ironic/ironic-conductor-container-puppet.yaml | 10 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 3 +- deployment/iscsid/iscsid-container-puppet.yaml | 9 + deployment/kernel/kernel-baremetal-puppet.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 2 + deployment/logging/files/barbican-api.yaml | 2 +- deployment/logging/files/heat-api-cfn.yaml | 2 +- deployment/logging/files/heat-api.yaml | 2 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 2 +- deployment/logging/files/neutron-api.yaml | 2 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 2 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 2 +- deployment/logging/files/nova-placement.yaml | 2 +- deployment/logging/files/opendaylight-api.yaml | 2 +- deployment/logging/files/panko-api.yaml | 2 +- .../logrotate-crond-container-puppet.yaml | 2 + .../manila}/manila-backend-cephfs.yaml | 0 .../manila}/manila-backend-isilon.yaml | 0 .../manila}/manila-backend-netapp.yaml | 0 .../manila}/manila-backend-unity.yaml | 0 .../manila}/manila-backend-vmax.yaml | 0 .../manila}/manila-backend-vnx.yaml | 0 .../manila/manila-share-pacemaker-puppet.yaml | 43 -- deployment/metrics/collectd-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 2 +- deployment/mistral/mistral-base.yaml | 35 -- .../mistral/mistral-executor-container-puppet.yaml | 1 + .../neutron/neutron-api-container-puppet.yaml | 10 + .../neutron/neutron-metadata-container-puppet.yaml | 10 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 91 +++++ .../neutron-ovs-agent-container-puppet.yaml | 1 - .../neutron-ovs-dpdk-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 10 +- .../nova/nova-compute-common-container-puppet.yaml | 11 +- deployment/nova/nova-compute-container-puppet.yaml | 287 +++++++++++--- deployment/nova/nova-ironic-container-puppet.yaml | 35 +- deployment/nova/nova-libvirt-container-puppet.yaml | 7 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 10 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 17 +- deployment/octavia/octavia-base.yaml | 8 +- .../octavia/octavia-deployment-config.j2.yaml | 11 +- .../ovn/ovn-controller-container-puppet.yaml | 13 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 112 +++--- deployment/podman/podman-baremetal-ansible.yaml | 40 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 83 ++-- .../sahara/sahara-engine-container-puppet.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 22 +- .../swift/swift-storage-container-puppet.yaml | 36 +- .../tripleo-firewall-baremetal-puppet.yaml | 60 ++- .../tripleo-packages-baremetal-puppet.yaml | 99 ++++- deployment/undercloud/undercloud-upgrade.yaml | 150 ++++++- deployment/zaqar/zaqar-container-puppet.yaml | 8 + environments/lifecycle/upgrade-prepare.yaml | 5 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 2 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 2 +- environments/manila-vmax-config.yaml | 2 +- environments/manila-vnx-config.yaml | 2 +- environments/metrics/collect-read-rabbitmq.yaml | 15 + .../collectd-standalone.yaml} | 2 +- .../collectd-write-qdr.yaml} | 4 +- environments/neutron-ovs-dvr.yaml | 3 + environments/services-baremetal/octavia.yaml | 5 +- environments/services/neutron-ovn-dpdk.yaml | 7 + environments/services/octavia.yaml | 5 +- environments/services/undercloud-aodh.yaml | 7 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 8 +- .../krb-service-principals/role.role.j2.yaml | 22 +- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 42 +- extraconfig/post_deploy/undercloud_post.yaml | 34 +- .../pre_network/host_config_and_reboot.yaml | 2 +- extraconfig/services/ipaclient.yaml | 67 +++- firstboot/userdata_timesync.yaml | 97 +++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 6 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 9 +- .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 147 +++---- network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 4 +- overcloud-resource-registry-puppet.j2.yaml | 4 + overcloud.j2.yaml | 44 +-- puppet/role.role.j2.yaml | 34 +- puppet/services/metrics/collectd.yaml | 433 --------------------- puppet/services/neutron-plugin-ml2-ovn.yaml | 21 + puppet/services/openvswitch.yaml | 18 + puppet/services/pacemaker.yaml | 107 ++++- ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../add_image_cache_settings-50af5ff56a7d7f75.yaml | 10 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...31122-fix-netapp-env-file-e5aeb0c2bf417d2b.yaml | 6 + ...alApi-name-lower-override-7ea2635877b753c7.yaml | 8 + .../create-br-ex-for-compute-b967312323d45d9b.yaml | 9 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + ...gration_wait_for_vif_plug-6d16da261a138fb8.yaml | 9 + .../notes/mistral_timeout-c00344d5b3d8c4b0.yaml | 6 - .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + ...va_libvirt_num_pcie_ports-f904bf0fb9a7b19e.yaml | 12 + ...ion_target_libvirt_socket-585fa579e5b2704d.yaml | 9 + .../nova_rpc_healthcheck-adbe5307dc04eeac.yaml | 9 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + releasenotes/notes/ovn-dpdk-15e8747068682f91.yaml | 3 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + ...ator-handler-threads.yaml-f5a12d1066b042f1.yaml | 3 + .../notes/update_serial-785ff794ff88fb2e.yaml | 9 + roles/BlockStorage.yaml | 1 + roles/CellController.yaml | 4 +- roles/CephAll.yaml | 2 + roles/CephFile.yaml | 2 + roles/CephObject.yaml | 2 + roles/CephStorage.yaml | 2 + roles/Compute.yaml | 4 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 3 + roles/ComputeHCI.yaml | 2 + roles/ComputeHCIOvsDpdk.yaml | 65 ++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 5 +- roles/ComputeOvsDpdkSriovRT.yaml | 5 +- roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 3 +- roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 2 + roles/HciCephAll.yaml | 2 + roles/HciCephFile.yaml | 2 + roles/HciCephMon.yaml | 2 + roles/HciCephObject.yaml | 2 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 3 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 2 + roles/OpenShiftAllInOne.yaml | 1 + roles/OpenShiftInfra.yaml | 1 + roles/OpenShiftMaster.yaml | 1 + roles/OpenShiftWorker.yaml | 1 + roles/README.rst | 3 + roles/Standalone.yaml | 11 + roles/Telemetry.yaml | 1 + roles_data.yaml | 11 + sample-env-generator/ssl.yaml | 2 +- sample-env-generator/storage.yaml | 3 +- tools/yaml-validate.py | 6 +- tox.ini | 2 +- validation-scripts/all-nodes.sh | 10 +- zuul.d/layout.yaml | 11 - 253 files changed, 2567 insertions(+), 1626 deletions(-) From no-reply at openstack.org Fri Jul 5 13:05:01 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:05:01 -0000 Subject: [release-announce] puppet-tripleo 10.5.0 (stein) Message-ID: We are pleased to announce the release of: puppet-tripleo 10.5.0: Puppet module for OpenStack TripleO This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 10.5.0 ^^^^^^ New Features ************ * Adds ovn_db_host and ovn_nb_port to configure ovn nb connection string for OVN Provider driver. Known Issues ************ * Allow a hiera key to add an additional rabbitmq policy in the resource agend. Changes in puppet-tripleo 10.4.1..10.5.0 ---------------------------------------- fa517262 Bump metadata for a stein release ecbec17a Allow enabling custom backends with manila 74a7262e Allow overriding pacemaker_node_ips for staged upgrade 53b3156e Force --hostonly when regenerating the initramfs d1893722 Do not invoke host config in agent config c1428dd2 Quote the hiera dot notation a2ceac8b IHA robustness improvements af8b1cfb RabbitMQ: always allow promotion on HA queue during failover 4ddddb44 Remove scenario008 jobs 584d3cfe Make sure we pass the proper new pcs 0.10 variables 0c81daf7 Add support for external Ganesha service in Manila Share profile 7317a2b2 Allow external Ganesha for the cephfs manila backend 1948495e Switch metrics qdrs to edge mode 7559e636 Rebuild initramfs after applying change in kernel parameters ef577909 Fix tripleo::haproxy::stats to be more correct and flexible 6b4c231c Fix amphora provider driver description f58d8af3 Fix horizon firewall rules in composable roles 61a73d12 Write TLS config under section [client] in tripleo.cnf 4b596a53 Make sure to set umask 022 for nova_migration_target logins 5a48995c Include 'octavia' driver on ML2/OVN deployments 96d970c5 Add nova::cinder to nova compute 4fc3d8a4 Let fluentd not create /etc/rsyslog.d/fluentd.conf file 153d6b5a Expose innodb_lock_wait_timeout via hieradata. 73168f04 Remove unused docker_distribution template 3edc3929 redis HA: allow SELinux relabel for /var/run/redis ad0e5975 Add support to set ovs_nb_connection 24fa66cf Fix keepalived VIP monitoring script a2e3f344 Set octavia provider_drivers config option correctly c60e80da Correct how podman exec is called for the neutron-keepalived-state-change 053528bb Update UPPER_CONSTRAINTS_FILE for stable/stein 45c4d4e0 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/firewall/service_rules.pp | 2 +- manifests/haproxy.pp | 13 +++- manifests/haproxy/horizon_endpoint.pp | 27 +++++++++ manifests/haproxy/service_endpoints.pp | 4 +- manifests/haproxy/stats.pp | 19 +++--- manifests/keepalived.pp | 2 +- manifests/profile/base/database/mysql.pp | 7 +++ manifests/profile/base/database/mysql/client.pp | 8 ++- manifests/profile/base/kernel.pp | 8 +++ manifests/profile/base/logging/fluentd.pp | 25 +++++--- manifests/profile/base/manila/share.pp | 69 +++++++++++++--------- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/metrics/qdr.pp | 11 ++-- manifests/profile/base/neutron/sriov.pp | 1 - manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/migration/target.pp | 7 +++ manifests/profile/base/octavia/api.pp | 16 ++++- manifests/profile/base/pacemaker.pp | 24 ++++++-- manifests/profile/base/pacemaker/instance_ha.pp | 1 + manifests/profile/base/pacemaker_remote.pp | 18 ++++++ .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 ++---- manifests/profile/pacemaker/rabbitmq_bundle.pp | 28 +++++++-- metadata.json | 2 +- ...octavia-ovn-nb-connection-9d5bc428c4ff35af.yaml | 5 ++ .../rabbitmq_extra_policies-69cbc0a4afeac963.yaml | 5 ++ spec/classes/tripleo_keepalive_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 20 +++++-- .../tripleo_profile_base_logging_fluentd_spec.rb | 9 ++- .../tripleo_profile_base_octavia_api_spec.rb | 13 ++-- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +-- .../docker_distribution/registry_config.yml.erb | 11 ---- .../neutron/neutron-keepalived-state-change.epp | 9 ++- tox.ini | 2 +- zuul.d/layout.yaml | 8 --- 36 files changed, 283 insertions(+), 124 deletions(-) From no-reply at openstack.org Fri Jul 5 13:05:15 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:05:15 -0000 Subject: [release-announce] tripleo-puppet-elements 10.3.1 (stein) Message-ID: We jubilantly announce the release of: tripleo-puppet-elements 10.3.1: Puppet building rules for OpenStack images. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 10.3.0..10.3.1 ------------------------------------------------- 79c0c76 Add element to install all openstack clients f18333d Add upper constraints 9ba1438 OpenDev Migration Patch 223633d Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ tox.ini | 4 +- 9 files changed, 96 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 5 13:06:34 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:06:34 -0000 Subject: [release-announce] tripleo-common 10.8.0 (stein) Message-ID: We are gleeful to announce the release of: tripleo-common 10.8.0: A common library for TripleO workflows. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 10.8.0 ^^^^^^ Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Fixed an issue were amphora load balancers would fail to create. The problem was because Octavia certificate files were being created in a wrong path and with invalid content. * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. Changes in tripleo-common 10.7.0..10.8.0 ---------------------------------------- f48331f3 Fix tripleo-upgrade-hiera key deleting 783a6924 remove plotnetcfg from overcloud image yaml 6763c998 Overcloud-full image templates for RHEL8 f08c6058 Update the Undercloud Services list in the inventory. 5cdd4692 Increase timeout of temp swift URLs from 1 to 4 hours c258f87e Remove scenario008 jobs 277902e6 Fix bare variable usage in ansible 571422a1 Add the ability to compute osds number counting lvm devices 728e59ed [CVE-2019-3895] Set image owner id c93be003 Adds redfish support to 'overcloud generate fencing'. 71c099f2 Fix Octavia certificate file path and content f38d89e7 fix 404 when requesting empty tripleo container image catalog af719c4c Fix validations_inputs temporary file name 93314d98 [Stein-Only] Switch container images to stein namespace 4ed86885 Add task to read remote pub key a9e05d47 Make get_enabled_services() more robust fac2c32d bootstrap: install network-scripts if EL8 6f55c891 Use oslo_rootwrap subprocess module in order to gain proper eventlet awareness 59738bd5 Use 'DEFAULT_VALIDATIONS_BASEDIR' variable from constants.py 27a4322b Fix chown command in write_inputs_file function 787ec853 Add new healthchecks for zaqar services 5de8867b tripleo-bootstrap: only enable network, not starting. 24c55464 tripleo-bootstrap: ensure network service is enabled & started 83d05ffc Update default Ceph container image to use to the Nautilus version f19863f3 docker-rm: check if rpm dependency is actually installed 992749c6 Check for file existance in file modification check 83526f8a OpenDev Migration Patch b90b0e61 Update UPPER_CONSTRAINTS_FILE for stable/stein 0917a3e6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .../container_image_prepare_defaults.yaml | 4 +- container-images/overcloud_containers.yaml | 210 ++++++++++----------- .../tripleo_kolla_template_overrides.j2 | 4 +- healthcheck/common.sh | 5 + healthcheck/zaqar-api | 6 + healthcheck/zaqar-socket | 15 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 9 +- image-yaml/overcloud-images-rhel8.yaml | 19 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute.yaml | 1 - lower-constraints.txt | 1 + playbooks/octavia-files.yaml | 1 + .../tasks/certificate.yml | 8 +- .../octavia-controller-config/tasks/octavia.yml | 12 ++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 45 ++++- ...ificates-path-and-content-e8acf1e859e75135.yaml | 6 + ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 + requirements.txt | 1 + roles/tripleo-bootstrap/tasks/main.yml | 23 +++ roles/tripleo-create-admin/tasks/create_user.yml | 7 +- roles/tripleo-docker-rm/tasks/main.yaml | 13 +- roles/tripleo-upgrade-hiera/tasks/remove.yml | 12 +- sudoers | 1 - tox.ini | 2 +- tripleo_common/actions/ansible.py | 26 +-- tripleo_common/actions/parameters.py | 14 +- tripleo_common/image/image_uploader.py | 11 +- tripleo_common/image/kolla_builder.py | 6 + tripleo_common/inventory.py | 6 +- tripleo_common/templates/deployments.yaml | 20 +- tripleo_common/utils/validations.py | 7 +- workbooks/deployment.yaml | 2 +- workbooks/derive_params_formulas.yaml | 8 +- zuul.d/layout.yaml | 5 - 42 files changed, 500 insertions(+), 263 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c304a4be..51b6b604 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.rootwrap>=5.8.0 # Apache-2.0 From no-reply at openstack.org Fri Jul 5 13:08:33 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:08:33 -0000 Subject: [release-announce] tripleo-validations 10.5.0 (stein) Message-ID: We are delighted to announce the release of: tripleo-validations 10.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.5.0 ^^^^^^ Deprecation Notes * All the validations in the *validations* directory have been migrated into their own Ansible roles from Stein release and will be removed from Train. You can now run the validations from the *playbooks* directory. For more information, please see: https://docs.openstack.org/tripleo-validations/latest/readme.html #directory-structure Changes in tripleo-validations 10.4.0..10.5.0 --------------------------------------------- fb838d3 Deprecate all the `validations` directory contents fae8a85 Documentation update with the new validations architecture 367fbf3 Add support for the chrony implementation 673148d Use sorted dictionary before iteration 7193778 Update the Undercloud Services list for the uc-service-status role 2d6b0da Improve stackrc file sourcing e0f9050 Use Undercloud local_ip to ensure the registry does answer or not 869ca65 Add pkg names better management between OS releases d0cece2 Add nova-status Ansible role 853d731 Update ceph-health for containers and failure options d5e22f8 Sync 'validations/check-network-gateway.yaml' with the new role 97ee5d4 Sync 'validations/lookup_plugins/tht.py' 8727fda Sync 'validations/callback_plugins/validation_output.py' 472d4a8 Sync 'validations/ceilometerdb-size.yaml' with the new role 73392f4 Sync 'validations/check-latest-minor-version.yaml' with the new role f233d2e Sync 'validations/ctlplane-ip-range.yaml' with the new role 983e33f Sync 'validations/controller-token.yaml' with the new role 2e75f97 Sync 'validations/haproxy.yaml' with the new role ea91001 Sync 'validations/ironic-boot-configuration.yaml' with the new role 41813f3 Sync 'validations/dhcp-provisioning.yaml' with the new role 40f33af Add run-validations.sh script 427f596 Sync 'validations/dhcp-introspection.yaml' with the new role f702793 Sync 'validations/no-op-firewall-nova-driver.yaml' with the new role 4ab6701 Fix typo in the command to get the file_descriptors total_limit 619e4d7 Sync 'validations/mysql-open-files-limit.yaml' with the new role 7a24b92 Sync 'validations/node-disks.yaml' with the new role 4f0edec Sync 'validations/nova-event-callback.yaml' with the new role e57d5b1 Sync 'validations/pacemaker-status.yaml' with the new role 337a9ff Sync 'validations/openstack-endpoints.yaml' with the new role 396e54a Sync 'validations/rabbitmq-limits.yaml' with the new role 4f94b30 Sync Sphinx requirement 8ee7475 Fix validations-specific Ansible output callback 7c4ab4a Sync 'validations/undercloud-debug.yaml' with the new role 5e96673 Sync 'validations/stonith-exists.yaml' with the new role 00b4857 Sync 'validations/repos.yaml' with the new role 5a8b859 Sync 'validations/switch-vlans.yaml' with the new role 8fb4099 Sync 'validations/tasks/disk_space.yaml' with the new role 637142b Sync 'validations/stack-health.yaml' with the new role 373d262 Sync 'validations/undercloud-cpu.yaml' with the new role 920710f Sync 'validations/undercloud-process-count.yaml' with the new role 3b784f2 Sync 'validations/undercloud-service-status.yaml' with the new role 80c5d07 Sync 'validations/undercloud-heat-purge-deleted.yaml' with the new role a6ee958 Sync 'validations/check-ftype.yaml' with the new role 448ea8d Sync 'validations/ceph-ansible-installed.yaml' with the new role 9d40d16 Sync 'validations/undercloud-tokenflush.yaml' with the new role 9aeeb97 Sync 'validations/undercloud-ram.yaml' with the new role 9d3d676 New validation: ensure image-serve service is working as expected 4af560c Add option to fail if ceph-ansible is not installed 904bd27 Clean up some old roles dependencies. 25012a4 Add collect-flavors-and-verify-profiles role a919cb3 Fix invalid 'ignore_missing_file' attribute in a task 1027a4f [Python3] Adds bytes to str conversion management db89c5d Makes rogue_dhcp.py script Python3 aware 6ead160 Fix Jinja2's default filter usage db08b15 Adds roles support in the script generating the validations doc. 47ad831 Update UPPER_CONSTRAINTS_FILE for stable/stein 001288a Migrate ansible-lint to pre-commit ebe7ad2 Fix Jinja2's default filter usage 9d08e89 OpenDev Migration Patch deaf09e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 23 +++ .gitreview | 3 +- .pre-commit-config.yaml | 29 +++ README.rst | 3 +- callback_plugins/validation_output.py | 172 +++++++++--------- library/switch_vlans.py | 18 +- lookup_plugins/tht.py | 5 + playbooks/ceph-ansible-installed.yaml | 1 + playbooks/ceph-health.yaml | 2 + playbooks/check-latest-minor-version.yaml | 2 - playbooks/collect-flavors-and-verify-profiles.yaml | 13 ++ playbooks/image-serve.yaml | 13 ++ playbooks/nova-status.yaml | 24 +++ playbooks/{ntpstat.yaml => ntp.yaml} | 6 +- ...ons-directory-deprecation-6ff07dae6f456743.yaml | 10 ++ roles/ceph/defaults/main.yml | 5 + roles/ceph/tasks/ceph-ansible-installed.yaml | 10 +- roles/ceph/tasks/ceph-health.yaml | 66 ++++++- roles/check-latest-minor-version/defaults/main.yml | 9 +- roles/check-network-gateway/tasks/main.yml | 6 +- .../meta/main.yml | 27 +++ .../tasks/main.yml | 11 ++ .../vars/main.yml | 9 + roles/ctlplane-ip-range/tasks/main.yml | 4 +- roles/dhcp-validations/files/rogue_dhcp.py | 31 ++-- .../dhcp-validations/tasks/dhcp-provisioning.yaml | 2 +- roles/image-serve/defaults/main.yaml | 2 + .../meta/main.yml => image-serve/meta/main.yaml} | 0 roles/image-serve/tasks/main.yaml | 40 +++++ roles/image-serve/vars/main.yml | 7 + roles/mysql-open-files-limit/tasks/main.yml | 4 +- roles/neutron-sanity-check/tasks/main.yml | 2 +- roles/no-op-firewall-nova-driver/meta/main.yml | 3 +- roles/nova-status/meta/main.yml | 27 +++ roles/nova-status/tasks/main.yml | 26 +++ roles/nova-status/vars/main.yml | 20 +++ roles/ntp/meta/main.yml | 28 +++ roles/ntp/tasks/main.yml | 26 +++ roles/{ntpstat => ntp}/vars/main.yml | 4 +- roles/ntpstat/tasks/main.yml | 5 - roles/rabbitmq-limits/tasks/main.yml | 5 +- roles/undercloud-debug/tasks/main.yml | 2 +- roles/undercloud-heat-purge-deleted/meta/main.yml | 3 +- roles/undercloud-heat-purge-deleted/tasks/main.yml | 2 +- roles/undercloud-process-count/meta/main.yml | 3 +- roles/undercloud-process-count/tasks/main.yml | 2 +- roles/undercloud-service-status/defaults/main.yml | 13 +- roles/undercloud-tokenflush/meta/main.yml | 3 +- roles/undercloud-tokenflush/tasks/main.yml | 2 +- scripts/run-validations.sh | 106 +++++++++++ setup.cfg | 1 + test-requirements.txt | 3 +- tools/ansible-lint.sh | 22 --- tools/validate-files.py | 6 +- tox.ini | 7 +- tripleo_validations/utils.py | 13 +- validations/512e.yaml | 1 + validations/callback_plugins/validation_output.py | 172 +++++++++--------- validations/ceilometerdb-size.yaml | 9 +- validations/ceph-ansible-installed.yaml | 12 +- validations/ceph-health.yaml | 1 + validations/check-ftype.yaml | 4 +- validations/check-latest-minor-version.yaml | 10 +- validations/check-network-gateway.yaml | 23 ++- .../collect-flavors-and-verify-profiles.yaml | 2 + validations/containerized-undercloud-docker.yaml | 1 + validations/controller-token.yaml | 9 +- validations/controller-ulimits.yaml | 2 + validations/ctlplane-ip-range.yaml | 9 +- validations/default-node-count.yaml | 3 +- validations/deployment-images.yaml | 2 + validations/dhcp-introspection.yaml | 15 +- validations/dhcp-provisioning.yaml | 4 +- validations/dns.yaml | 2 + validations/haproxy.yaml | 45 ++++- validations/ironic-boot-configuration.yaml | 13 +- validations/lookup_plugins/tht.py | 5 + validations/mysql-open-files-limit.yaml | 12 +- validations/network-environment.yaml | 2 + validations/neutron-sanity-check.yaml | 2 + validations/no-op-firewall-nova-driver.yaml | 8 +- validations/node-disks.yaml | 15 +- validations/node-health.yaml | 2 + validations/nova-event-callback.yaml | 126 +++++++------ validations/ntpstat.yaml | 2 + validations/openshift-hw-requirements.yaml | 2 +- validations/openshift-nw-requirements.yaml | 2 + validations/openstack-endpoints.yaml | 16 +- validations/ovs-dpdk-pmd-cpus-check.yaml | 2 + validations/pacemaker-status.yaml | 5 +- validations/rabbitmq-limits.yaml | 15 +- validations/repos.yaml | 7 + validations/stack-health.yaml | 6 +- validations/stonith-exists.yaml | 11 +- validations/switch-vlans.yaml | 15 +- validations/tasks/deprecation.yaml | 12 ++ validations/tasks/disk_space.yaml | 4 +- validations/undercloud-cpu.yaml | 7 +- validations/undercloud-debug.yaml | 19 +- validations/undercloud-disk-space-pre-upgrade.yaml | 1 + validations/undercloud-disk-space.yaml | 1 + validations/undercloud-heat-purge-deleted.yaml | 28 ++- validations/undercloud-neutron-sanity-check.yaml | 2 + validations/undercloud-process-count.yaml | 18 +- validations/undercloud-ram.yaml | 7 +- validations/undercloud-selinux-mode.yaml | 3 +- validations/undercloud-service-status.yaml | 10 +- validations/undercloud-tokenflush.yaml | 20 ++- 111 files changed, 1371 insertions(+), 460 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..25a16ff 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD From no-reply at openstack.org Fri Jul 5 13:10:31 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:10:31 -0000 Subject: [release-announce] tripleo-image-elements 10.4.1 (stein) Message-ID: We are delighted to announce the release of: tripleo-image-elements 10.4.1: Disk image builder elements for deploying OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.4.0..10.4.1 ------------------------------------------------ 2c8a6a57 Remove note in README regarding security hardened images 3228347d [Documentation] Migrate the format. 7d6edd9c OpenDev Migration Patch dceeba5e Update UPPER_CONSTRAINTS_FILE for stable/stein 067819e1 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- README.md => README.rst | 17 ++++++++++------- elements/overcloud-secure-uefi/README.rst | 4 ---- elements/overcloud-secure/README.rst | 4 ---- setup.cfg | 2 +- tox.ini | 2 +- 6 files changed, 14 insertions(+), 18 deletions(-) From no-reply at openstack.org Fri Jul 5 13:21:55 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 05 Jul 2019 13:21:55 -0000 Subject: [release-announce] python-tripleoclient 11.5.0 (stein) Message-ID: We are happy to announce the release of: python-tripleoclient 11.5.0: TripleO client This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 11.4.0..11.5.0 ---------------------------------------------- 9bd04ae3 Improve validations run outputs through the CLI f78809a3 Ensure files exist before building/uploading plan 7d41f81e Send terminal erase sequence on tripleo deploy 34bde896 Retry heat stack polling on gateway problems f36d8995 Drop the port from DockerInsecureRegistryAddress c67f4862 Fix sample_default for host_routes option 7c21abb2 Replace git.openstack.org URLs with opendev.org URLs a55573f2 Add ODL deprecation warning in CLI 94645382 Increase max_nested_stack_depth for heat 098fdb2c undercloud: resolve undercloud_*_host de5027d6 Get validations playbooks from playbooks directory f6862341 Do not log tracebacks for expected exceptions e7875ece Add a comment about nodes and roles options. 9808a162 Revert "Remove nodes and roles options." 97fe3def Update undercloud_nameserver help text 7b368365 Remove nodes and roles options. 0fe4fb67 undercloud: wire ContainerHealthcheckDisabled 61240a06 Remove service environment file and images file. 2bab41de OpenDev Migration Patch f09d8402 Add checking mechanism driver during upgrade 3ae5ac60 Make overcloud_config working with Python 3 0ca816dc Update UPPER_CONSTRAINTS_FILE for stable/stein 14f02dd6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- tox.ini | 6 +- tripleoclient/command.py | 4 +- tripleoclient/config/undercloud.py | 14 +- tripleoclient/constants.py | 15 +- tripleoclient/exceptions.py | 50 +++--- tripleoclient/heat_launcher.py | 3 +- .../healthcheck_disabled-d0878072273d1496.yaml | 5 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 7 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 11 ++ tripleoclient/utils.py | 186 ++++++++++++++++++++- tripleoclient/v1/container_image.py | 25 --- tripleoclient/v1/overcloud_config.py | 2 +- tripleoclient/v1/overcloud_deploy.py | 31 ++++ tripleoclient/v1/overcloud_update.py | 7 + tripleoclient/v1/overcloud_upgrade.py | 8 + tripleoclient/v1/tripleo_deploy.py | 19 ++- tripleoclient/v1/tripleo_validator.py | 22 +-- tripleoclient/v1/undercloud_config.py | 46 +++-- tripleoclient/workflows/plan_management.py | 2 +- tripleoclient/workflows/validations.py | 15 +- 24 files changed, 559 insertions(+), 116 deletions(-) From no-reply at openstack.org Mon Jul 8 11:00:02 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 08 Jul 2019 11:00:02 -0000 Subject: [release-announce] neutron-fwaas 13.0.2 (rocky) Message-ID: We are jazzed to announce the release of: neutron-fwaas 13.0.2: OpenStack Networking FWaaS This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 13.0.1..13.0.2 --------------------------------------- ea7590e4e netfilter_log: Correctly decode binary type prefix 55a5a41b4 OpenDev Migration Patch 0a7172bd0 Fix the verification method before creating and updating the firewall rule 54a8a5bc1 Replace openstack.org git:// URLs with https:// 5b31f2320 Subscribe Neutron port update events for FWG Logging handling 2f55bd16e Fix firewall rule 'shared' check in updating fwp 78159b799 Load neutron_fwaas.conf with '--config-file' for neutron-server 42ea1e0fa Correct package name libnetfilter-log on CentOS 90951a5ec Upper-constrain neutron to stable/rocky 5ece265b6 Move port validation support into the driver eafcbce19 Fix associating firewall group with DVR/L3HA port Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- devstack/plugin.sh | 15 +- lower-constraints.txt | 2 +- neutron_fwaas/common/exceptions.py | 4 +- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 40 ++-- .../privileged/netfilter_log/libnetfilter_log.py | 4 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 44 ++--- .../firewall/service_drivers/agents/agents.py | 17 ++ .../firewall/service_drivers/driver_api.py | 6 + .../logapi/agents/drivers/iptables/driver.py | 4 + neutron_fwaas/services/logapi/common/log_db_api.py | 19 +- .../services/logapi/common/port_callback.py | 40 ++++ .../unit/db/firewall/v2/test_firewall_db_v2.py | 64 +++++-- .../unit/services/firewall/test_fwaas_plugin_v2.py | 51 +++++- .../unit/services/logapi/common/test_log_db_api.py | 38 +++- .../services/logapi/common/test_port_callback.py | 203 +++++++++++++++++++++ playbooks/neutron-fwaas-fullstack/run.yaml | 6 +- requirements.txt | 2 +- 19 files changed, 483 insertions(+), 86 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4bd3c06a..5cf313b4c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) -neutron>=13.0.0.0b1 # Apache-2.0 +neutron>=13.0.0.0b1,<14.0.0.0b1 # Apache-2.0 From no-reply at openstack.org Tue Jul 9 14:56:56 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 09 Jul 2019 14:56:56 -0000 Subject: [release-announce] ironic-python-agent 4.0.0 (train) Message-ID: We joyfully announce the release of: ironic-python-agent 4.0.0: Ironic Python Agent Ramdisk This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 4.0.0 ^^^^^ New Features ************ * Adds a new CLI command "ironic-collect-introspection-data" to enable manually publishing into the "baremetal-introspection" service. Executing this command on a system unknown to the Bare Metal service will likely result in the machine becoming registered to Ironic, and as such this command should be used with caution. If the capability to update introspection data for running machines has been enabled in the Bare Metal introspection service, then an operator may use this command in the "active" or "rescue" states to update introspection data. Bug Fixes ********* * The "lshw" output no longer pollutes the debug logging. Instead, it's stored as part of the ramdisk logs. * Fixes the missing ipv6 module for TinyCore based IPA images which are used in CI testing. Changes in ironic-python-agent 3.7.0..4.0.0 ------------------------------------------- 696606f manual introspection trigger command f7740c7 improve error messages during node lookup failures 69064a8 Correct formatting of a warning when lshw cannot be run dc3e26a Add Python 3 Train unit tests 6f634c3 Adds bandit template and exclude some of tests 94048fe Stop logging lshw output, collect it with other logs instead cf30024 Add IPv6 module for tinycore dd7e7fd Removes tinyipa from IPA Diffstat (except docs and test files) ------------------------------------- imagebuild/README.rst | 2 - imagebuild/tinyipa/.gitignore | 13 - imagebuild/tinyipa/Makefile | 45 --- imagebuild/tinyipa/README.rst | 146 -------- imagebuild/tinyipa/add-ssh-tinyipa.sh | 139 ------- imagebuild/tinyipa/build-instance-images.sh | 36 -- imagebuild/tinyipa/build-iso.sh | 16 - imagebuild/tinyipa/build-tinyipa.sh | 197 ---------- imagebuild/tinyipa/build_files/bootlocal.sh | 74 ---- imagebuild/tinyipa/build_files/buildreqs.lst | 25 -- .../tinyipa/build_files/buildreqs_python2.lst | 2 - .../tinyipa/build_files/buildreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/dhcp.sh | 21 -- imagebuild/tinyipa/build_files/fakeuname | 110 ------ imagebuild/tinyipa/build_files/finalreqs.lst | 17 - .../tinyipa/build_files/finalreqs_python2.lst | 1 - .../tinyipa/build_files/finalreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/isolinux.cfg | 9 - imagebuild/tinyipa/common.sh | 56 --- imagebuild/tinyipa/finalise-tinyipa.sh | 246 ------------- imagebuild/tinyipa/install-deps.sh | 23 -- imagebuild/tinyipa/tc-mirror.sh | 53 --- imagebuild/tinyipa/udhcpc.script | 44 --- ironic_python_agent/agent.py | 9 +- ironic_python_agent/cmd/inspect.py | 30 ++ ironic_python_agent/config.py | 12 + ironic_python_agent/extensions/standby.py | 3 +- ironic_python_agent/hardware.py | 4 +- ironic_python_agent/inspect.py | 86 +++++ ironic_python_agent/inspector.py | 4 +- ironic_python_agent/ironic_api_client.py | 19 +- ironic_python_agent/utils.py | 1 + releasenotes/notes/lshw-cb89894be057bdc9.yaml | 5 + .../manual-introspection-b04b5c25f5e004ac.yaml | 13 + .../notes/tinycore-ipv6-1b620c61402b5720.yaml | 5 + setup.cfg | 17 +- tools/bandit.yml | 401 +++++++++++++++++++++ tox.ini | 3 +- zuul.d/ironic-python-agent-jobs.yaml | 3 +- zuul.d/project.yaml | 2 +- 44 files changed, 638 insertions(+), 1305 deletions(-) From no-reply at openstack.org Tue Jul 9 15:31:33 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 09 Jul 2019 15:31:33 -0000 Subject: [release-announce] ironic-inspector 9.1.0 (train) Message-ID: We are overjoyed to announce the release of: ironic-inspector 9.1.0: Hardware introspection for OpenStack Bare Metal This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Adds the capability for introspection data to be posted to the API when a baremetal node is in "active" or "rescue" states. This feature may be useful for data center operators who wish to update introspection data periodically. To enable this feature, set "[processing]permit_active_introspection" to "True". When this is set, the value of "[processing]power_off" is overridden for nodes in "active" or "rescue" states. * Adds support to enroll node with IPv6 BMC address. Introduces a configuration option "[discovery]enabled_bmc_address_version" to specify the order of preferred IP version of the BMC address. Upgrade Notes ************* * The deprecated options from the "ironic" section "os_region", "auth_strategy", "ironic_url", "os_service_type" and "os_endpoint_type" have been removed. Please use **keystoneauth** options instead. * The deprecation configuration options "os_service_type", "os_region" and "os_endpoint_type" from the "[swift]" section have been removed. Deprecation Notes ***************** * The configuration option "[swift]max_retries" is deprecated. It has been doing nothing for a few releases already. Bug Fixes ********* * No longer fails introspection if memory or CPU information is not provided in the inventory. These are no longer required for scheduling, introspection should not require them either. Changes in ironic-inspector 9.0.0..9.1.0 ---------------------------------------- 59a4c64 Move dbsync to the correct path 9d1c6a4 Use oslo_db.sqlalchemy.test_fixtures 46a90d6 Enable processing of active nodes a6509ba Revert "Lets temporarily disable broken templates so we can fix gate" da7d3bb Lets temporarily disable broken templates so we can fix gate f3fd8e9 Comment out race prone sqlite db model sync test b7bb387 add local bindep.txt 30a4e09 Adds bandit template and exclude some of tests 85a3186 Use openstacksdk for accessing Swift fcb0ca8 Use bmc ipv6 address while processing introspection data 40450dc Remove deprecated authentication options for accessing ironic 48d5d56 Document storage backends and migrating between them ca044c9 Remove deprecated options for accessing Swift 463d0a2 Stop failing on missing memory or CPU 686a64b Update Python 3 test runtimes for Train d571794 Simplify locking code f53cbe3 Remove pci_devices config option 52349c6 Incorporate bandit support in CI Diffstat (except docs and test files) ------------------------------------- bindep.txt | 6 + ironic_inspector/{ => cmd}/dbsync.py | 4 +- ironic_inspector/common/ironic.py | 65 ++-- ironic_inspector/common/swift.py | 42 +-- ironic_inspector/conf/discovery.py | 10 + ironic_inspector/conf/ironic.py | 35 -- ironic_inspector/conf/opts.py | 1 - ironic_inspector/conf/processing.py | 10 +- ironic_inspector/conf/swift.py | 22 +- ironic_inspector/introspect.py | 2 +- ironic_inspector/node_cache.py | 75 ++-- ironic_inspector/plugins/discovery.py | 13 +- ironic_inspector/plugins/pci_devices.py | 17 - ironic_inspector/plugins/standard.py | 32 +- ironic_inspector/process.py | 16 +- ironic_inspector/test/base.py | 4 +- ironic_inspector/test/functional.py | 2 +- ironic_inspector/test/unit/test_common_ironic.py | 20 +- ironic_inspector/test/unit/test_introspect.py | 12 +- ironic_inspector/test/unit/test_migrations.py | 100 ++---- ironic_inspector/test/unit/test_node_cache.py | 41 ++- .../test/unit/test_plugins_discovery.py | 34 +- .../test/unit/test_plugins_standard.py | 36 +- ironic_inspector/test/unit/test_process.py | 47 ++- ironic_inspector/test/unit/test_swift.py | 144 +++----- ironic_inspector/utils.py | 23 +- lower-constraints.txt | 4 +- .../active-introspection-949f4a50c9d5218a.yaml | 11 + .../notes/cpu-memory-cfdc72b625780871.yaml | 6 + .../notes/deprecated-ironic-1751ceec6295917d.yaml | 7 + ...-nodes-with-bmc-v6address-ba224f4a8a151c53.yaml | 6 + .../notes/swift-deprecations-d7680b867fae7f3d.yaml | 5 + .../notes/swift-max-retries-dfaecb74bd3aba9a.yaml | 5 + requirements.txt | 2 +- setup.cfg | 5 +- test-requirements.txt | 1 + tools/bandit.yml | 400 +++++++++++++++++++++ tox.ini | 6 + zuul.d/ironic-inspector-jobs.yaml | 21 ++ zuul.d/project.yaml | 5 +- 42 files changed, 894 insertions(+), 432 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d750d33..ae6ea25 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +18,0 @@ python-ironicclient>=2.3.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 @@ -20,0 +20 @@ pytz>=2013.6 # MIT +openstacksdk>=0.30.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2507ea4..ce3392e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 From no-reply at openstack.org Wed Jul 10 21:52:35 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 10 Jul 2019 21:52:35 -0000 Subject: [release-announce] os-testr 1.1.0 Message-ID: We joyfully announce the release of: os-testr 1.1.0: A testr wrapper to provide functionality for OpenStack projects The source is available from: https://opendev.org/openstack/os-testr Download the package from: https://pypi.org/project/os-testr For more details, please see below. 1.1.0 ^^^^^ Deprecation Notes * The "ostestr" command is now deprecated explicitly. We already switched to use "stestr" command instead. And we haven't maintained this command recently. For more information about stestr, see https://stestr.readthedocs.io/en/latest/ Changes in os-testr 1.0.0..1.1.0 -------------------------------- 414bbf6 Update hacking version ad00e6d Replace git.openstack.org URLs with opendev.org URLs a5bc990 Deprecate ostestr command 70f183c Fix warning message with double "to" 77002ea Dropping the py35 testing 5674bb0 OpenDev Migration Patch 595c06c Default concurrency to 0 to avoid TypeError in stestr a36d10a add python 3.7 unit test job bb4bfbf Removed older version of python3.4 from setup.cfg 59db2de Change openstack-dev to openstack-discuss 6a73644 Update the home-page URL ed3bc63 Use updated hacking url link dd00f4b add python 3.6 unit test job 1807cef switch documentation job to new PTI de316a6 import zuul job settings from project-config 9b412d7 fix tox python3 overrides ca7669b Trivial: Update pypi url to new url cc19ccf Updated from global requirements 2b3e2e8 Fix load command in pdb/no-discover path 3eba9cd Avoid tox_install.sh for constraints support 88bdf7d Remove useless links and indentations 96db910 Fix regex builder 22644f4 Updated from global requirements 3fd82f6 Updated from global requirements b6ac6ac Fix .testr.conf detection: test path follows discover Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 ++ CONTRIBUTING.rst | 6 +- HACKING.rst | 4 +- README.rst | 23 ++++- os_testr/ostestr.py | 63 +++++++----- os_testr/regex_builder.py | 68 +++++++------ os_testr/subunit2html.py | 22 ++--- ...deprecate-ostestr-command-3ac0bff93265fa09.yaml | 7 ++ releasenotes/source/conf.py | 96 ++++++++++++++++++ releasenotes/source/index.rst | 14 +++ releasenotes/source/unreleased.rst | 5 + requirements.txt | 4 +- setup.cfg | 7 +- test-requirements.txt | 8 +- tools/tox_install.sh | 30 ------ tox.ini | 35 +++++-- 26 files changed, 522 insertions(+), 227 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 95cd081..2b57d08 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7,2 @@ stestr>=1.0.0 # Apache-2.0 -python-subunit>=0.0.18 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +python-subunit>=1.0.0 # Apache-2.0/BSD +testtools>=2.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7e12060..01cca94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -8,3 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -13 +11 @@ ddt>=1.0.1 # MIT -six>=1.9.0 # MIT +six>=1.10.0 # MIT From no-reply at openstack.org Wed Jul 10 22:06:31 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 10 Jul 2019 22:06:31 -0000 Subject: [release-announce] nova 17.0.11 (queens) Message-ID: We are ecstatic to announce the release of: nova 17.0.11: Cloud computing fabric controller This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 17.0.11 ^^^^^^^ Upgrade Notes ************* * Live migration of instances with NUMA topologies is now disabled by default when using the libvirt driver. This includes live migration of instances with CPU pinning or hugepages. CPU pinning and huge page information for such instances is not currently re- calculated, as noted in bug #1289064. This means that if instances were already present on the destination host, the migrated instance could be placed on the same dedicated cores as these instances or use hugepages allocated for another instance. Alternately, if the host platforms were not homogeneous, the instance could be assigned to non-existent cores or be inadvertently split across host NUMA nodes. The long term solution to these issues is to recalculate the XML on the destination node. When this work is completed, the restriction on live migration with NUMA topologies will be lifted. For operators that are aware of the issues and are able to manually work around them, the "[workarounds] enable_numa_live_migration" option can be used to allow the broken behavior. For more information, refer to bug #1289064. (https://bugs.launchpad.net/nova/+bug/1289064) (https://blueprints.launchpad.net/nova/+spec/numa-aware-live- migration) Bug Fixes ********* * The os-volume_attachments update API, commonly referred to as the swap volume API will now return a "400" (BadRequest) error when attempting to swap from a multi attached volume with more than one active read/write attachment resolving bug #1775418. (https://developer.openstack.org/api-ref/compute/?expanded=update-a -volume-attachment-detail) (https://launchpad.net/bugs/1775418) Changes in nova 17.0.10..17.0.11 -------------------------------- 9cbd2aedde fix up numa-topology live migration hypervisor check 9999bce00f Fail to live migration if instance has a NUMA topology ab445a027a Allow driver to properly unplug VIFs on destination on confirm resize 8519b1ce6d Move get_pci_mapping_for_migration to MigrationContext d3bdeb2615 libvirt: Do not reraise DiskNotFound exceptions during resize 2009859b52 Include all network devices in nova diagnostics 20b90f2e26 Workaround missing RequestSpec.instance_group.uuid 581df2c986 Add regression recreate test for bug 1830747 95a3e0cf6a Restore connection_info after live migration rollback 88fd40fe5d DRY up test_rollback_live_migration_set_migration_status 58a140487c Block swap volume on volumes with >1 rw attachment 55deddf65d Fix live-migration when glance image deleted 944b24f462 Add functional confirm_migration_error test 5600309a1f [stable-only] Delete allocations even if _confirm_resize raises (part 2) b8435d6001 Delete allocations even if _confirm_resize raises 0cad3089d3 Stop logging traceback when skipping quiesce f9c2503609 Fix retry of instance_update_and_get_original 89063ecb61 Teardown networking when rolling back live migration even if shared disk 01141392db Use migration_status during volume migrating and retyping 99a63a6633 libvirt: Always disconnect volumes after libvirtError exceptions 63b45a87b8 libvirt: Stop ignoring unknown libvirtError exceptions during volume attach ba3ad2d65a Fix {min|max}_version in ironic Adapter setup 22cd12dbb7 Create request spec, build request and mappings in one transaction 5b0adaa0ca xenapi/agent: Change openssl error handling ec43a1348d libvirt: Avoid using os-brick encryptors when device_path isn't provided 899e881b18 Fix nova-grenade-live-migration run book for opendev migration d4dbbb645a Fix regression in glance client call 1cee746085 OpenDev Migration Patch 76418a32cb Move legacy-grenade-dsvm-neutron-multinode-live-migration in-tree 5d5e7be8cb Fix legacy-grenade-dsvm-neutron-multinode-live-migration c8ad9f4e19 libvirt: set device address tag only if setting disk unit ee52fb12bb libvirt: disconnect volume when encryption fails 5433dc6a75 Add missing libvirt exception during device detach c6a42cd3b3 Error out migration when confirm_resize fails f1554d1b52 prevent common kwargs from glance client failure dba9b722af Define irrelevant-files for tempest-full-py3 job 1b6f48354b Delete instance_id_mappings record in instance_destroy 8f1773a7af Do not persist RequestSpec.ignore_hosts 9fd4082d7c Add functional regression test for bug 1669054 99cbbcfd61 Update instance.availability_zone on revertResize 1b15a342e3 Add functional recreate test for bug 1819963 50a0c6a4b9 [Stable Only] hardware: Handle races during pinning ddc2c9118a Fix incomplete instance data returned after build failure ee07c1c67d Update instance.availability_zone during live migration 36d93675d9 Update resources once in update_available_resource 705284e18c Don't persist zero allocation ratios in ResourceTracker 7a3b072442 Document unset/reset wrinkle for *_allocation_ratio options 1265e9e8e2 Replace openstack.org git:// URLs with https:// 4a7575bf14 Ignore VolumeAttachmentNotFound exception in compute.manager Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 74 +++++-- api-ref/source/os-volume-attachments.inc | 3 + nova/api/openstack/compute/migrate_server.py | 6 +- nova/api/openstack/compute/volumes.py | 3 +- nova/compute/api.py | 108 ++++++++- nova/compute/manager.py | 246 +++++++++++++++------ nova/compute/resource_tracker.py | 32 ++- nova/conductor/manager.py | 22 +- nova/conductor/tasks/live_migrate.py | 34 +++ nova/conf/compute.py | 12 +- nova/conf/workarounds.py | 26 +++ nova/db/sqlalchemy/api.py | 23 +- nova/exception.py | 5 + nova/image/glance.py | 45 ++-- nova/network/neutronv2/api.py | 47 +--- nova/objects/migration_context.py | 32 +++ nova/objects/request_spec.py | 22 +- .../functional/regressions/test_bug_1669054.py | 84 +++++++ .../functional/regressions/test_bug_1830747.py | 131 +++++++++++ .../openstack/compute/admin_only_action_common.py | 37 ++-- .../api/openstack/compute/test_migrate_server.py | 8 +- .../unit/api/openstack/compute/test_volumes.py | 76 +++++++ .../unit/conductor/tasks/test_live_migrate.py | 54 ++++- nova/virt/fake.py | 6 +- nova/virt/hardware.py | 12 + nova/virt/ironic/client_wrapper.py | 8 +- nova/virt/libvirt/driver.py | 94 +++++--- nova/virt/libvirt/guest.py | 3 +- nova/virt/libvirt/imagebackend.py | 14 +- nova/virt/libvirt/volume/volume.py | 17 +- nova/virt/xenapi/agent.py | 18 +- nova/volume/cinder.py | 3 + playbooks/legacy/nova-cells-v1/run.yaml | 6 +- .../legacy/nova-grenade-live-migration/post.yaml | 15 ++ .../legacy/nova-grenade-live-migration/run.yaml | 58 +++++ playbooks/legacy/nova-live-migration/run.yaml | 6 +- playbooks/legacy/nova-lvm/run.yaml | 6 +- playbooks/legacy/nova-multiattach/run.yaml | 6 +- playbooks/legacy/nova-next/run.yaml | 6 +- .../notes/bug-1775418-754fc50261f5d7c3.yaml | 10 + ...-live-migration-with-numa-bc710a1bcde25957.yaml | 25 +++ 70 files changed, 2605 insertions(+), 508 deletions(-) From no-reply at openstack.org Thu Jul 11 09:29:31 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:29:31 -0000 Subject: [release-announce] python-cinderclient 4.2.1 (stein) Message-ID: We are pleased to announce the release of: python-cinderclient 4.2.1: OpenStack Block Storage API Client Library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-cinderclient Download the package from: https://pypi.org/project/python-cinderclient Please report issues through: https://bugs.launchpad.net/python-cinderclient/+bugs For more details, please see below. Changes in python-cinderclient 4.2.0..4.2.1 ------------------------------------------- 0a2bab1 Fix shell upload-to-image with no volume type Diffstat (except docs and test files) ------------------------------------- cinderclient/shell_utils.py | 13 +++++++------ cinderclient/v2/volumes.py | 2 ++ cinderclient/v3/shell.py | 25 +++++++++++++------------ cinderclient/v3/volumes.py | 1 + 5 files changed, 51 insertions(+), 18 deletions(-) From no-reply at openstack.org Thu Jul 11 09:33:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:33:11 -0000 Subject: [release-announce] os-brick 2.9.1 (train) Message-ID: We are stoked to announce the release of: os-brick 2.9.1: OpenStack Cinder brick library for managing local volume attaches This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 2.9.1 ^^^^^ Bug Fixes * Always check if we are dealing with a single WWNN Fibre Channel target, even when we receive an initiator_target_map. This allows us to exclude unconnected HBAs from our scan for storage arrays that automatically connect all target ports (due to their architecture and design) even if the Cinder driver returns the initiator_target_map, provided the target has a single WWNN. Excluding these HBAs prevents undesired volumes from being connected. Changes in os-brick 2.9.0..2.9.1 -------------------------------- 97b085f luks: Explicitly use the luks1 type to ensure LUKS v1 is used 4ec35ed Add Python 3 Train unit tests 9cf135c linuxscsi: Stop waiting for multipath devices during extend_volume 94312bd luks: Default to LUKS v1 when formatting volumes 70899a9 FC: Ignore some HBAs from map for single WWNN Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- os_brick/encryptors/luks.py | 3 +- os_brick/initiator/connectors/fibre_channel.py | 3 +- os_brick/initiator/connectors/iscsi.py | 3 +- os_brick/initiator/connectors/nvme.py | 6 ++-- os_brick/initiator/linuxfc.py | 42 +++++++++++----------- os_brick/initiator/linuxscsi.py | 40 +++++++++++---------- ...-always-check-single-wwnn-1595689da0eb673b.yaml | 10 ++++++ tox.ini | 2 +- 13 files changed, 104 insertions(+), 54 deletions(-) From no-reply at openstack.org Thu Jul 11 09:38:05 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:38:05 -0000 Subject: [release-announce] oslo.limit 0.1.0 (train) Message-ID: We are jazzed to announce the release of: oslo.limit 0.1.0: Limit enforcement library to assist with quota calculation. This is the first release of oslo.limit. This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 069881f2b01be4ee513c9a87413d03e16f390e52..0.1.0 --------------------------------------------------------------------- 90acc27 Rename filter_resource resource_filters 996edba Add skeleton enforce() method to Enforcer 5db5a59 Remove __enter__ and __exit__ methods from Enforcer 8bf64bb Remove verification functionality af18418 Remove ProjectClaim object from oslo.limit 767d284 Sync Sphinx requirement 0b26714 Replace git.openstack.org URLs with opendev.org URLs 74a10f7 OpenDev Migration Patch 259980c Update the min version of tox e089af1 Drop py35 jobs 09ce909 Add py36 and py37 tox envs 193f812 Add python3.7 job on Stein+ ac8ed14 add python 3.7 unit test job 1343391 Update hacking version f7bc4ad fix the url in doc a2674bb Use template for lower-constraints f31316a Update mailinglist from dev to discuss d702f1f Clean up .gitignore references to personal tools c91ca64 Fix doc grammar/spelling nits 03c5874 Use openstackdocstheme for documentation e575be7 Add a conceptual overview to docs a22aef3 Render API reference documentation 5b5d628 Ignore documentation builds 2773ea9 Add opts file 53854f6 add lib-forward-testing-python3 test job 825547f add python 3.6 unit test job f453212 import zuul job settings from project-config be1922b fix doc gate 5e34861 ADD i18n file 88684c2 Fix CI 0cb22a1 Add .zuul.yaml 9359e9c Implement basic Enforcer context manager 9f7fd57 Implement ProjectClaim objects e5d6b14 Convert tox.ini to using stestr 3f1f1d6 Update url in HACKING.rst f45c9d3 fix tox python3 overrides 69eb444 Init repo Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..d42afb2 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,6 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +keystoneauth1>=3.9.0 # Apache-2.0 +oslo.config>=5.2.0 # Apache-2.0 +oslo.i18n>=3.15.3 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..838e1e7 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,10 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. + +hacking>=1.1.0,<1.2.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 +stestr>=1.0.0 # Apache-2.0 + +# Bandit security code scanner +bandit>=1.4.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 11 09:43:06 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:43:06 -0000 Subject: [release-announce] ansible-role-chrony 1.0.1 Message-ID: We are happy to announce the release of: ansible-role-chrony 1.0.1: ansible-role-chrony - Ansible chrony role The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony 1.0.0..1.0.1 ------------------------------------------- 71b73d6 Avoid hard-coded value in a generic ansible role e289119 Ensure service is enabled Diffstat (except docs and test files) ------------------------------------- tasks/config.yml | 1 + 1 file changed, 1 insertion(+) From no-reply at openstack.org Thu Jul 11 09:45:50 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:45:50 -0000 Subject: [release-announce] os-brick 2.8.2 (stein) Message-ID: We are pumped to announce the release of: os-brick 2.8.2: OpenStack Cinder brick library for managing local volume attaches This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 2.8.2 ^^^^^ Bug Fixes * Always check if we are dealing with a single WWNN Fibre Channel target, even when we receive an initiator_target_map. This allows us to exclude unconnected HBAs from our scan for storage arrays that automatically connect all target ports (due to their architecture and design) even if the Cinder driver returns the initiator_target_map, provided the target has a single WWNN. Excluding these HBAs prevents undesired volumes from being connected. Changes in os-brick 2.8.1..2.8.2 -------------------------------- 4c2b253 luks: Explicitly use the luks1 type to ensure LUKS v1 is used 1ee6acb FC: Ignore some HBAs from map for single WWNN d7f9ff6 luks: Default to LUKS v1 when formatting volumes 735ace0 OpenDev Migration Patch 394294b Update UPPER_CONSTRAINTS_FILE for stable/stein e7daca3 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- os_brick/encryptors/luks.py | 3 +- os_brick/initiator/linuxfc.py | 42 +++++++++++----------- ...-always-check-single-wwnn-1595689da0eb673b.yaml | 10 ++++++ tox.ini | 4 +-- 7 files changed, 67 insertions(+), 27 deletions(-) From no-reply at openstack.org Thu Jul 11 09:49:38 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:49:38 -0000 Subject: [release-announce] os-brick 2.5.8 (rocky) Message-ID: We are ecstatic to announce the release of: os-brick 2.5.8: OpenStack Cinder brick library for managing local volume attaches This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 2.5.8 ^^^^^ Bug Fixes * Always check if we are dealing with a single WWNN Fibre Channel target, even when we receive an initiator_target_map. This allows us to exclude unconnected HBAs from our scan for storage arrays that automatically connect all target ports (due to their architecture and design) even if the Cinder driver returns the initiator_target_map, provided the target has a single WWNN. Excluding these HBAs prevents undesired volumes from being connected. Changes in os-brick 2.5.7..2.5.8 -------------------------------- 64cbaae FC: Ignore some HBAs from map for single WWNN 21a2266 Improve iSCSI device detection speed ab5d9a1 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- os_brick/initiator/connectors/iscsi.py | 26 +++++--- os_brick/initiator/linuxfc.py | 42 ++++++------- ...-always-check-single-wwnn-1595689da0eb673b.yaml | 10 +++ 6 files changed, 145 insertions(+), 33 deletions(-) From no-reply at openstack.org Thu Jul 11 09:50:56 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 09:50:56 -0000 Subject: [release-announce] cinder 14.0.1 (stein) Message-ID: We are pleased to announce the release of: cinder 14.0.1: OpenStack Block Storage This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 14.0.1 ^^^^^^ Upgrade Notes ************* * A new check is added to the "cinder-status upgrade check" CLI to check for the use of backup driver module path instead of full driver class path in the "backup_driver" configuration setting. * A warning has been added to the "cinder-status upgrade check" CLI if a "policy.json" file is present. Documentation has been updated to correct the file as "policy.yaml" if any policies need to be changed from their defaults. * A new check is added to the "cinder-status upgrade check" CLI to check for the configuration of CoprHD, HGST or ITRI DISCO drivers. These drivers were removed in the Stein release and should not be configured at the time of upgrade. * A new check is added to the "cinder-status upgrade check" CLI to check for the use of "cinder.volume.drivers.windows.windows.WindowsDriver" and a message is reported that the user needs to update the setting to "cinder.volume.drivers.windows.iscsi.WindowsISCSIDriver" if it is encountered. Bug Fixes ********* * Kaminario FC and iSCSI drivers: Fixed bug 1829398 (https://bugs.launchpad.net/cinder/+bug/1829398) where force detach would fail. * NetApp iSCSI drivers no longer use the discovery mechanism for multipathing and they always return all target/portals when attaching a volume. Thanks to this, volumes will be successfully attached even if the target/portal selected as primary is down, this will be the case for both, multipath and single path connections. Changes in cinder 14.0.0..14.0.1 -------------------------------- 2da46b234 Fix assertion methods in a unit test 8cd70f7ca PowerMax docs - add information on new and existing functionality bd07e5b87 Add OS-SCH-HNT in extensions list 9d6394088 Remove Sheepdog tests from zuul config 053c33cbf [VNX] Fix test case issue 1ff64f234 Add Upgrade Check for Drivers Removed in Stein 5f8940565 Add upgrade check for Windows iSCSI driver. f3bd5f7aa Add upgrade check for presence of policy.json file 520e6e065 Fix "connector=None" issue in Kaminario drivers 4910ca4d7 lvm: Only use initiators when comparing connector dicts aecb6100e Make sure we install cinder requirements during the correct tox phase bec06e6a7 3PAR: Provide an option duing creation of volume from snapshot 8d8676381 Fix swift backup driver crashing during service startup 84d3d1220 OpenDev Migration Patch dee7292b0 NetApp: Return all iSCSI targets-portals bc2209b61 Add upgrade checker for backup driver path 5ee13d14e Remove scanning upgrade checker from opts generation e9f617ca8 Add NetApp E-Series Driver to Removal List Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- .../extensions/extensions-list-response.json | 7 + cinder/api/contrib/scheduler_hints.py | 11 + cinder/api/extensions.py | 2 +- cinder/backup/drivers/swift.py | 6 +- cinder/cmd/status.py | 176 +++++++++++++- .../extensions/extensions-list-response.json.tpl | 7 + .../dell_emc/powermax/test_powermax_common.py | 4 +- .../volume/drivers/dell_emc/vnx/mocked_vnx.yaml | 13 +- .../volume/drivers/dell_emc/vnx/test_adapter.py | 12 +- .../drivers/netapp/dataontap/test_block_base.py | 50 ++-- .../drivers/netapp/dataontap/test_block_cmode.py | 13 - cinder/volume/drivers/hpe/hpe_3par_common.py | 74 +++++- .../volume/drivers/kaminario/kaminario_common.py | 11 +- cinder/volume/drivers/kaminario/kaminario_fc.py | 24 +- cinder/volume/drivers/lvm.py | 3 +- .../volume/drivers/netapp/dataontap/block_base.py | 32 +-- .../volume/drivers/netapp/dataontap/block_cmode.py | 23 -- cinder/volume/drivers/netapp/utils.py | 25 +- .../drivers/dell-emc-powermax-driver.rst | 103 ++++++++ .../cinder-tempest-dsvm-lvm-lio-barbican/run.yaml | 8 +- ...tatus-check-backup_driver-fe009985df2bc32f.yaml | 6 + ...r-status-check-policyjson-ef61826eab95372b.yaml | 7 + ...eck-stein_removed_drivers-8184abe8ce82f373.yaml | 7 + ...heck-windows_iscsi_driver-5f4e0b93c7b92f53.yaml | 8 + ...minario-cinder-driver-bug-44c728f026394a85.yaml | 6 + .../netapp-non-discovery-19af4e10f7b190ea.yaml | 8 + tools/config/generate_cinder_opts.py | 3 +- tox.ini | 1 + 40 files changed, 1044 insertions(+), 194 deletions(-) From no-reply at openstack.org Thu Jul 11 19:30:43 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 19:30:43 -0000 Subject: [release-announce] python-keystoneclient 3.20.0 (train) Message-ID: We are satisfied to announce the release of: python-keystoneclient 3.20.0: Client Library for OpenStack Identity This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-keystoneclient Download the package from: https://pypi.org/project/python-keystoneclient Please report issues through: https://bugs.launchpad.net/python-keystoneclient/+bugs For more details, please see below. Changes in python-keystoneclient 3.19.0..3.20.0 ----------------------------------------------- 319fd1a Blacklist bandit 1.6.0 & cap sphinx for 2.7 54a3baf Update the constraints url 890d3a1 Add Python 3 Train unit tests 7b7d81d Follow bandit B105: hardcoded_password_string 21efbe4 Replace git.openstack.org URLs with opendev.org URLs ab14eb4 OpenDev Migration Patch 199bb19 Update the min version of tox 146cd8d Update master for stable/stein 7569849 Drop py35 jobs acc21ff Make tests pass in 2020 7a8ed5e Update json module to jsonutils 147efb0 Add support for app cred access rules header Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +++---- README.rst | 2 +- examples/pki/gen_cmsz.py | 9 +++---- keystoneclient/auth/identity/v3/base.py | 4 ++-- keystoneclient/common/cms.py | 3 ++- keystoneclient/v3/tokens.py | 21 +++++++++++++--- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++++ setup.cfg | 2 +- test-requirements.txt | 5 ++-- tox.ini | 6 ++--- 21 files changed, 80 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 873b0e6..4683c46 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ fixtures>=3.0.0 # Apache-2.0/BSD -keyring>=5.5.1 # MIT/PSF +keyring>=5.5.1,<19.0.0;python_version=='2.7' # MIT/PSF +keyring>=5.5.1;python_version>='3.4' # MIT/PSF @@ -23 +24 @@ testtools>=2.2.0 # MIT -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 11 19:37:36 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 19:37:36 -0000 Subject: [release-announce] os-brick 2.3.8 (queens) Message-ID: We are satisfied to announce the release of: os-brick 2.3.8: OpenStack Cinder brick library for managing local volume attaches This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. Changes in os-brick 2.3.7..2.3.8 -------------------------------- bdd05d2 Fix FC case sensitive scanning 2915442 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- os_brick/initiator/connectors/fibre_channel.py | 16 +++++++++-- .../initiator/connectors/test_fibre_channel.py | 32 +++++++++++++++++++++- 3 files changed, 46 insertions(+), 4 deletions(-) From no-reply at openstack.org Thu Jul 11 20:12:24 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 11 Jul 2019 20:12:24 -0000 Subject: [release-announce] manila-tempest-plugin 0.3.0 (stein) Message-ID: We are gleeful to announce the release of: manila-tempest-plugin 0.3.0: Tempest plugin manila-tempest-plugin This release is part of the stein release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 0.2.0..0.3.0 --------------------------------------------- 0ac9541 Look for api microversion header in "Vary" header data 68a25a6 Cast block count to integer 00fd19d Cast block count to integer in test_create_shrink_and_write f38c4c3 Skip read-only test for CIFS 90c354b Clarify help text of network options 2e4f348 Fix CIFS access for non-multitenant setup 2cb85a6 Scenario test: Create/extend share and write data ad4507c Replace git.openstack.org URLs with opendev.org URLs b087b30 OpenDev Migration Patch c07415d Scenario test: Create/shrink share and write data 29ef852 Add devstack plugin to ease integration tests 7ded940 Use setup_clients classmethod for clients initialization Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 8 +- devstack/README.rst | 21 +++ devstack/plugin.sh | 16 ++ devstack/settings | 3 + tox.ini | 2 +- 13 files changed, 446 insertions(+), 37 deletions(-) From no-reply at openstack.org Mon Jul 15 15:02:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 15 Jul 2019 15:02:11 -0000 Subject: [release-announce] python-swiftclient 3.8.0 (train) Message-ID: We are overjoyed to announce the release of: python-swiftclient 3.8.0: OpenStack Object Storage API Client Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-swiftclient Download the package from: https://pypi.org/project/python-swiftclient Please report issues through: https://bugs.launchpad.net/python-swiftclient/+bugs For more details, please see below. 3.8.0 ^^^^^ New Features ************ * Added a new "--json" option to "swift list". Bug Fixes ********* * Fixed an issue introduced in 3.5.0 where re-uploading an SLO with the same size, mtime, and segment size would delete all of the just- uploaded segments. Changes in python-swiftclient 3.7.0..3.8.0 ------------------------------------------ 47d5f44 Authors/changelog for 3.8.0 936631e Optionally display listings in raw json 591c3e2 Bump the openstackdocstheme extension to 1.20 9021a58 Fix SLO re-upload 3b21157 Clean up warnings from newer flake8 113eacf Isolate docs requirements 7103da3 Replace git.openstack.org URLs with opendev.org URLs af4bac3 OpenDev Migration Patch 7e9717c Update master for stable/stein 7563d9c docs: Clean up formatting 5333f3e Remove oslosphinx usage fd6e760 Enable some off-by-default checks 0ee7c82 Make proper functions instead of assigning lambdas 097f4b2 Add missing value in command line docs 01f5a9f Support pdb in tests better Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 6 +- AUTHORS | 3 + ChangeLog | 12 +++ README.rst | 2 +- lower-constraints.txt | 3 +- .../notes/3_8_0_release-bd867fbdb8c895d3.yaml | 9 +++ releasenotes/source/conf.py | 12 --- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ swiftclient/client.py | 6 +- swiftclient/multithreading.py | 8 ++ swiftclient/service.py | 35 +++++---- swiftclient/shell.py | 22 +++++- swiftclient/utils.py | 32 +++++++- test-requirements.txt | 4 - tox.ini | 12 ++- 28 files changed, 378 insertions(+), 182 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 13cf1e9..b3ca5f8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,2 +5,0 @@ mock>=1.2.0 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD @@ -9,2 +6,0 @@ stestr>=2.0.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 -openstackdocstheme>=1.18.1 # Apache-2.0 From no-reply at openstack.org Mon Jul 15 15:03:31 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 15 Jul 2019 15:03:31 -0000 Subject: [release-announce] python-novaclient 14.2.0 (train) Message-ID: We are glad to announce the release of: python-novaclient 14.2.0: Client library for OpenStack Compute API This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. 14.2.0 ^^^^^^ New Features * Support is added for the 2.74 microversion which allows specifying the "--host" and "--hypervisor-hostname" options on the "nova boot" command. The "novaclient.v2.servers.ServerManager.create()" method now also supports "host" and "hypervisor_hostname" parameters. (https://docs.openstack.org/nova/latest/reference/api-microversion- history.html#id66) Changes in python-novaclient 14.1.0..14.2.0 ------------------------------------------- 41c25881 Add host and hypervisor_hostname to create servers 54904711 Modify the url of upper_constraints_file 77ad81bd Add Python 3 Train unit tests 12193fc5 Blacklist sphinx 2.1.0 (autodoc bug) 0a2d108e Add irrelevant files in dsvm job again 4bfcc1a9 Revert "Add irrelevant files in dsvm job" 52ae954b Add irrelevant files in dsvm job 76389868 Fix duplicate object description error edbe4192 Blacklist python-cinderclient 4.0.0 3df45452 Bump openstackdocstheme to 1.30.0 6ce10633 Add a description of --on-shared-storage Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- novaclient/__init__.py | 2 +- novaclient/v2/servers.py | 30 ++++++- novaclient/v2/shell.py | 21 +++++ .../notes/microversion-v2_74-43b128fe6b84b630.yaml | 9 ++ setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 10 +-- 13 files changed, 262 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 998e89a8..88cad0e4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ python-keystoneclient>=3.8.0 # Apache-2.0 -python-cinderclient>=3.3.0 # Apache-2.0 +python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 15 15:04:44 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 15 Jul 2019 15:04:44 -0000 Subject: [release-announce] keystoneauth1 3.15.0 (train) Message-ID: We high-spiritedly announce the release of: keystoneauth1 3.15.0: Authentication Library for OpenStack Identity This release is part of the train release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.15.0 ^^^^^^ New Features ************ * Fix handling of HTTP error payloads that conform to the API SIG formatting guidelines. * The "X-Openstack-Request-Id" header can now be set per-request via a "global_request_id" kwarg to "Adapter" and "Session" request methods ("request()", "get()", "put()", etc.) * The Adapter parameters "connect_retries" and "status_code_retries" can now be set via configuration options "connect-retries" and "status-code-retries" accordingly. Bug Fixes ********* * Add logic to handle HTTP error responses that do not conform to a known schema. * The retry interval for retries enabled by "connect_retries" and "status_code_retries" is now limited at 60 seconds. Previously it would grow exponentially. Changes in keystoneauth1 3.14.0..3.15.0 --------------------------------------- 3fd9ce7 reno: per-request global_request_id df57e0e Add a per-request global_request_id 92ec14c Add Python 3 Train unit tests b56a2a8 Cap bandit 34c005a Limit interval between retries to 1 minute 92921c6 Allow setting retry counts for Adapter via configuration options 96559d6 add a handler for unknown HTTP errors 01d2da9 add handling for multiple error returns 0682135 Replace git.openstack.org URLs with opendev.org URLs 70720ff Blacklist bandit 1.6.0 & cap sphinx for 2.7 2bb7f12 Resolves a typo in a link to use Application Credentials 9f1b960 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 3 +- README.rst | 2 +- keystoneauth1/exceptions/http.py | 26 +++ keystoneauth1/loading/adapter.py | 62 ++++--- keystoneauth1/session.py | 25 ++- .../notes/api-sig-error-guideline-handler.yaml | 4 + ...al_request_id-per-request-bd66c7e0f1a71d9f.yaml | 6 + .../notes/improve-http-error-handling.yaml | 4 + .../notes/retries-limit-dbaedcb3207934ae.yaml | 6 + .../notes/retries-options-99e4dbc240941557.yaml | 6 + test-requirements.txt | 3 +- tox.ini | 8 +- 18 files changed, 330 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cbe7e9e..879b3f4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ flake8-import-order>=0.17.1 #LGPLv3 -bandit>=1.1.0 # Apache-2.0 +bandit<1.6.0,>=1.1.0 # Apache-2.0 @@ -20 +19,0 @@ requests-mock>=1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD From no-reply at openstack.org Tue Jul 16 15:26:01 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 16 Jul 2019 15:26:01 -0000 Subject: [release-announce] openstack-ansible 19.0.0 (stein) Message-ID: We are chuffed to announce the release of: openstack-ansible 19.0.0: Ansible playbooks for deploying OpenStack This release is part of the stein release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 19.0.0 ^^^^^^ New Features ************ * The ceph_client role will now look for and configure manila services to work with ceph and cephfs. * The "os_masakari" role now covers the monitors installation and configuration, completing the full service configuration. * The override "rabbitmq_memory_high_watermark" can be used to set the maximum size of the erlang Virtual Machine before the garbage collection is triggered. The default is lowered to "0.2", from "0.4" as the garbage collection can require 2x of allocated amount during its operation. This can result in a equivalent use of "0.4", resulting in 40% of memory usage, visible to the rabbitMQ container. The original default setting of "0.4" can lead to 80% memory allocation of rabbitMQ, potentially leading to a scenario where the underlying Linux kernel is killing the process due to shortage of virtual memory. * Added 2 new varibles for all groups - *oslomsg_notify_policies* and *oslomsg_rpc_policies*. These variables contain default rabbitmq policies, which will be applied for every rabbitmq vhost. As for now they will enable [HA mode](https://www.rabbitmq.com/ha.html) for all vhosts. If you would like to disable HA mode just set these variables to empty lists inside your *user_config.yml* * The "galera_server" role now uses mariabackup in order to complete SST operations due to the fact that this is the recommended choice from MariaDB. * The "galera_server" role now ships with the latest MariaDB release of 10.3.13. Known Issues ************ * Due to a change in how backend_host is defined when using Ceph, all the Cinder volumes will restart under the same backend name. This will mean that any volumes which previously were assigned to the host or container that hosted the volume will no longer be managable. The workaround for this is to use the *cinder-manage volume update_host* command to move those volumes to the new backend host. This known issue will be resolved soon with an upgrade playbook. Upgrade Notes ************* * The rabbitMQ high watermark is set to "0.2" rather than "0.4" to prevent possible OOM situations, which limits the maximum memory usage by rabbitMQ to 40% rather than 80% of the memory visible to the rabbitMQ container. The override "rabbitmq_memory_high_watermark" can be used to alter the limit. * The default Mnesia "dump_log_write_threshold" value has changed to "300" instead of "100" for efficiency. "dump_log_write_threshold" specifies the maximum number of writes allowed to the transaction log before a new dump of the log is performed. Increasing this value can increase the performances during the queues/exchanges/bindings creation/destroying. The values should be between 100 and 1000. More detail [1]. [1] http://erlang.org/doc/man/mnesia.html#dump_log_write_threshold * The option *rabbitmq_disable_non_tls_listeners* has been removed in favor of setting the bind address and port configuration directly using a new option *rabbitmq_port_bindings*. This new option is a hash allowing for multiple bind addresses and port configurations. * The repo server no longer uses pypiserver, so it has been removed. Along with this, the following variables have also been removed. * "repo_pypiserver_port" * "repo_pypiserver_pip_packages" * "repo_pypiserver_package_path" * "repo_pypiserver_bin" * "repo_pypiserver_working_dir" * "repo_pypiserver_start_options" * "repo_pypiserver_init_overrides" * Tacker role now uses default systemd_service role. Due to this upstart is not supported anymore. Was added variable tacker_init_config_overrides, with wich deployer may override predifined options. Also variable program_override has no effect now, and tacker_service_names was removed in favor of tacker_service_name. Deprecation Notes ***************** * In the "ceph_client" role, the only valid values for "ceph_pkg_source" are now "ceph" and "distro". For Ubuntu, the Ubuntu Cloud Archive apt source is already setup by the "openstack_hosts" role, so there is no need for it to also be setup by the "ceph_client" role. * The compression option in the "galera_server" role has been removed due to the fact that it is not recommended by MariaDB anymore. This means that all the dependencies from Percona such as QPress are no longer necessary. * The following variables have been removed because they are no longer used. * "galera_percona_xtrabackup_repo" * "use_percona_upstream" * "galera_xtrabackup_compression" * "galera_server_percona_distro_packages" * The variable "galera_xtrabackup_threads" has been renamed to "galera_mariabackup_threads" to reflect the change in the SST provider. Bug Fixes ********* * ceilometer-polling services running on compute nodes did not have the polling namespace configured. Because of this they used the default value of running all pollsters from the central and compute namespaces. But the pollsters from the central namespace don't have to run on every compute node. This is fixed by only running the compute pollsters on compute nodes. * The RyuBgpDriver is no longer available and replaced by the OsKenBgpDriver of the neutron_dynamic_routing project. Changes in openstack-ansible 18.0.0.0rc1..19.0.0 ------------------------------------------------ 406d93359 Bump SHAs for stable/stein 24728a69a Restrict the number of octavia processes and threads in AIO 97e9ac1f2 Bump SHAs for stable/stein 6b9f13086 Bump SHAs for stable/stein 98093fe00 Bump SHAs for stable/stein a64fb127e Revert "Set CentOS 7 distro job to non-voting" 48f2f68dc Bootstrap host using stein RDO mirror in CI f051e434d Load extra variables correctly in wrapper 0d23f7b74 rgw keystone setup fix python interpreter bb6a1d592 Bump SHAs for stable/stein 8505173f6 Revert "Pin ARA to <1.0.0" ec9baa445 Move hosts file management toggle to all group vars b4cbd2e76 Utility container venv is missing python libs for ansible openstack modules 2e9bd836f Correct os-cinder-install task serialisation 8cb8b2de6 Use stable ARA setup interface for defining the callback location dd412f707 Pin ARA to <1.0.0 d094ebbbc Bump os_neutron SHA to pull in fixed Calico 34dad039f Fix mistral metal deploy 65f1e3e2f config: Enable OSA_CONFIG_DIR to customize configuration folder c052ba794 Bump tempest role SHA to pull in ping test fix ee5ce224c Bump SHAs for stable/stein c18affdcd Collect openstack_deploy in gate log collection script 856a6acfe Add Calico networking AIO scenario 273a4e964 Use copy-links when collecting logs a00f835a8 Prepare OSA release for Stein 0398f8f82 Add /v2 to mistral api endpoint. 5b92d28ae Fix Fwaas Dashboard URL d896ff202 Use hashes for the upgrade playbook markers b1b016436 Bump global-requirement-pins before release 9ea2e687b Make utility install playbook idempotent c0332f050 Re-add the upgrade playbook removing pip.conf 6fdb90574 Ensure that pip/setuptools/wheel python wheels are built c87d88ce3 Replace git.openstack.org with opendev.org af63d20ae Use opendev links 8024dc873 Set CentOS 7 distro job to non-voting 1d4dc430e Skip boostrap-ansible on upgrades if already run 03405f8f7 Ensure that global-requirement-pins.txt is applied ed6eb528d Create Stein 6c250c303 Add global HA policy for rabbitmq cb7524f12 OpenDev Migration Patch 0653935d9 Update Stein doc index 4171f605b debian: add job template for aio-lxc 45000f230 Rename flat-db network for trove bca5d12ea Add trove_service_net_setup to aio deploy 8b9e11f56 Ensure debian is part of the bootstrap os list e39e1d260 debian: add job template for telemetry bb0aae3da debian: add support cb17ed57e Add masakari-monitors to openstack_services 74728caec Update .gitreview for stable/stein 7941d9e79 Remove subprocess call 86f85545b Update UPPER_CONSTRAINTS_FILE for stable/stein 1cbaa1d2a gate: drop sphinxmark 33c4f9df3 Use non-broken commit for NoVNC 6520d0bb2 glance: stop using healthcheck endpoint 7a17a6b51 Add trackbranch for manila a9bd6cbf1 octavia: use br-lbaas IP for health managers 9f1eb3993 rally: add empty rally.yml.aio file 90ce23ec1 gate: cache /etc/pip.conf inside containers 14bfceb56 Track Stein when we can de92efc0f Add the manila service to OSA aad13b822 Add telemetry service bundle to AIO tests 48266cefb Add panko to integrated build b1f0ba926 metal: sync all containers to add is_metal c0db5c423 repo: stop using repo_build + pip_install c4577ab8e gate: switch all public URLs to use HTTP for metal 529f9c295 zuul: bump timeout to 3 hours cb43e60d2 barbican: run without SSL inside gate for metal jobs 574e550a1 swift: move to br-storage always 27ae5dbb7 ironic: deploy swift at the same time 566d7e48c Remove experimetal scenarios e2ffd245a Add zero-container AIO distro install jobs 1f1cca42c nova: refactor common playbook to use role instead of include_role c69080f38 Extend AIO build timeout to 2.5hrs 5eb7d01f1 Update the congress service egg name to openstack_congress d531895e8 Imported Translations from Zanata 4f9e923ee Added Openstack Masakari role for the deployment 5cc756644 Include package pins for OpenStack services 3b160216a Bump SHAs for master 9ef40798e Run a periodic openSUSE Leap 15 job 518619ad0 Remove openSUSE Leap 42.3 jobs 05ca340d8 Add track branch to master 8dad0ddc0 Replace usage of netloc filters to urlsplit ac28ad132 Automatically prune the inventory backup 08be5b267 Update ansible to 2.7.9 9fd0fdc77 Change docs build to openstackdocstheme logic ff31b374d Imported Translations from Zanata 524146d1a Imported Translations from Zanata 6f87d74b9 Imported Translations from Zanata fb4df180e Pass ceph_mons as a list of inventory hosts 21a660194 Fix connectivity between octavia and amphorae. 475d45473 Fix bashate b790a6344 Add blank line to end of log-collect.sh to fix lint check 7a1d76e20 Revert "Freeze for milestone release" d626d6456 Bump SHAs for master 84cb3ff05 Freeze for milestone release 35777b93e Add qdrouterd role for rpc messaging backend deployment 2b17af753 Port role test log collection into the integrated gate 5b9b6d4b7 Add support to deploy mistral 934f73ad3 Convert the nova playbook to use newer ansible syntax 817c95fda nova: restart instead of reloading services 1930244bd Set tempest_image_dir to /opt/cache/files in openstack CI cf4a3d96c Fix keepalive pingable_check_script d4e3e0e08 Apply the OpenStack policies in rabbit by default 0abb9e3bc Enable the tempest role ping test for AIO testing 65b1f90a9 Adding Note on SELinux for CentOS 7 c73091967 Add http proxy test scenario fdcde0dbb Update ansible to the latest stable release d9c69b872 Remove broken conditions when including playbooks 662181646 Convert include to either import_playbook or include_tasks c5260b4d5 Remove all uses of private in include_role cd45e710d add links to readme for release announce script 3c7005360 Add a known issue release note regarding inotify watch limits 71a067abf Dynamic inventory backup corruption fix 2fd7e4c7f Include package pins for glance playbook a30ce4784 Use runtime venv to determine OSA version 1858cf50b Add the deployment guide job to our standard templates d63b5610e Correct the quickstart docs for ubuntu AIO installation 9229315a1 Add option to disable container builds on specific hosts 3621ce76b Update the heat service egg name to openstack_heat 0ee07525e Use the config_template module from the dedicated repo 7e0d2e5e5 Use an env lookup to determine the OSA version c44fbcbbe Mark OSA version in the wrapper script df43c5119 [docs] Apply provider network config on per-group basis b6f7fa6c7 Remove an extra comment about Tempest settings 6f0a218ef Fix typo btrfs -> zfs 826a032a8 Bump SHAs for master e7f116234 Add release note for wrapper fix bae0da54a nspawn: use correct network range for tempest 52f37cdac nspawn: use mv-flat for host_bind_overrides 270955fe0 nspawn: fix restart-service.yml service list filtering 8de5d35d2 nspawn: add container_network config f91b88078 Make keepalived configuration future-proof ecdd3822b Define OSA clone dir in the openstack-ansible.sh script 72a87f674 Remove ANSIBLE_ROLE_FETCH_MODE 09f6b6d29 Bump SHAs for master c10a92a02 Imported Translations from Zanata 1c8448aab Add documentation for hybrid messaging configuration fd04ab82d Fix journal remote playbook 3fb15ad78 Clean-up and simplify the major upgrade 3289f62e7 Some small spelling fixes 8d9c0336e Make container_interface optional for provider network e2267e82f Remove tempest service enable vars cc58bfe34 Use yaml instead of parsing the text acf9be557 Bump pins e28433fca Spice console doesn't work on aarch64+kvm. 40f332ec8 Make OVN track master branch 8f088db5d Update inventory generator to support container gateway override 09569c30f Fixes empty metal_query c2b42d75b zuul: Add required project openstack/openstack-ansible dcf448ec8 Call ceph-facts role as required by changes to ceph-ansible 66316a0cf Update hacking version to latest bc17087ac Imported Translations from Zanata 5e11cf3b7 Imported Translations from Zanata 862b4c667 Update ansible to 2.7.5 05d9f6a03 Force force-tlsv12 only 38b61e102 Ensure that control plane hosts are also updated correctly 74fc795ea Remove the log container in the AIO config 9e6c9e2bf Refactor ceph server playbooks ab0b3abb7 Zuul: Simplify the integrated test playbooks cf69f701e netstat does not exist in all systems 2fc7aac54 [DOCS] Fix user guide to source admin openrc 8c8e21a5a Only enable OVN VIPs when ml2.ovn plugin is used ed9a605a5 Imported Translations from Zanata 879d58f86 Remove xenial from Vagrantfile ae34c2218 Add bionic to Vagrantfile 64bf985a3 Fix ansible deprecation warnings c16dcb07e Add retries for utility container distro package installs a524ec1f8 Update ansible to 2.7.4 92427a653 Fix "configure container (other services)" when statement e29bc2203 Document how to use the utility container for service setup 5b6fc9c42 bootstrap: stop creating swap d6ca5af79 Set Keepalived script_user to root ada265c84 Implement AIO changes to allow test usage by roles 9dbdf71de Include Swift AUTH_%(tenant_id)s suffix in rgw Keystone endpoint 5a6ade7eb Fix Chinese quotes 11a71e113 Ensure that a consistent mirror is used for RDO 0b2b7c99a Update doc to use chrony instead of ntp 8fdcd5fd5 Add os_octavia to the list in the deploy guide 9ef46ba5e Adds haproxy endpoints for networking-ovn support 4195f032a Update ansible to 2.7.2 ae5541f17 Use discuss ML instead of dev/operators 6ed6eaabd Update playbook to newer syntax. 56b3bd1e2 [docs] Clean up the AIO user story 74bebf5d5 Ensure AIO container_tech/install_method vars are namespaced 6bd8ee085 nspawn: correct task names e55960fe3 Remove unnecessary octavia scenario AIO bootstrap 28f71196c Add MariaDB infrastructure mirrors 9b1a9f587 Added masakari-dashboard repo to openstack_services 822127e9d [trivial] Point to the new openstack-discuss ML 9380222d1 Remove the repetition words in firewalls.rst 93831a609 Move ARA install to end of bootstrap 54fb1055e Publish readable journal files in the gate 40812a7e4 Track a stable branch, not master, for ceph-ansible 80c7c23a6 Add extra volume types to AIO cd0c3ab46 Imported Translations from Zanata f87466638 Fix blazar-nova Git field names 8fbd1cbea Adds option to enable ARA plugin install aec4b9a88 Remove Dragonflow ML2 driver 878d758ea Update ansible to 2.7.1 802fb4649 Delegate check of db connectivity during upgrade 329cdbde9 Update master index with current series status 93ce5fa10 Pin argparse for idempotent pip installs a7875b042 Add new tox doc and publishing job a6d8c79be Docs: Fix VLAN bridge interface in example setup a960e83a6 SUSE: Add support for openSUSE Leap 15 7c8c31fd3 RGW haproxy backend return code can be 200 or 405 fa662ca09 [tools] build-docs.sh: matches po files in Zanata c1e9a5f90 Restart cinder-scheduler instead of reloading df54583ca Integrate Blazar with OpenStack Ansible 93affdca7 Aodh group vars has wrong admin and internal endpoint url ed3a00954 Upgrade ceph to mimic release 406078fdd Use file module instead of shell to remove roles 0e245655e Imported Translations from Zanata d9f210952 Restore OpenSUSE voting jobs 6e00f579c Update ansible to latest stable 2.6.x 1fd9fdc6d Set an upper pin for Cython to please gnocchi 953938a29 Make system_crontab_coordination idempotent fefb377f2 zuul: SUSE: Fix scenario for ceph jobs 829d3f5f0 Use loop_var name in when clause 9f6bf94d1 Fixed ability of usage interfaces/bridges with dots (aliases) 47afa27bf Restore bionic/ceph voting jobs 2c09adcfa Ensure ceph server apt pinning is well defined 5e233dea5 Fix rgw playbook pre_tasks c3d326226 releasenotes: oslo-messaging-separate-backends add project name 340853170 fix typo in releasenotes 6716cc5dc Add one test case to the TestMergeDictUnit for same key dict merge 8d25033f7 Use the compute kit + horizon for all distros 3200de090 Fix healthcheck-hosts to work when behind a proxy a9c72408b scripts: sources-branch-updater: Make regexp for master branch stricter 8f54cd1cb Restore Bionic jobs to voting 9f7802219 Imported Translations from Zanata 208513dfa Fix for proper package name depending on base OS distribution 2792b1d9e Add stackviz directory to the list of find_log_files 180001718 Update variable migration script for Stein 49a1d8666 Fix order for restarts 138fdef0a Build translated docs in tox 43a5c874e Remove apt-cacher-ng e1aabd05b Disable nested virt and set SUSE+Bionic jobs to non-voting 42a06f1dd [trivial] docs: fix sphinx warnings unknown options 3e458a8ef Imported Translations from Zanata fefb0822e Example setup for gnocchi with ceph and redis d90e74350 Add openstackclient bash completion 0ac819c00 Add ceph-handler role b76f098c0 Imported Translations from Zanata a45467abe Remove keystone_admin-back load balancer manipulation 8440e3816 Remove glance CORS overrides ef4360488 Unfreeze networking-odl 889e05990 Remove broken uptime tests during upgrade 41d7c63d2 Fix identification of OpenSUSE Leap 15 ce26ee644 Imported Translations from Zanata 67f0790b5 Imported Translations from Zanata 63f5d0e4f Avoid using loop_var in endpoint manage c31826087 Ensure ceilometer repo gets installed with neutron cec52b199 fix tox python3 overrides 13c405da7 Change into correct path 9553e89e6 Remove non-working dynamic build of AIO scenario table e1a7ab847 Move dynamic documentation into extra directory (2/2) 86fa326a0 Move dynamic documentation into extra directory (1/2) 4a07e2612 Minimal(ist) network config for nspawn gating 9d10db61d Ensure package cache is updated for nspawn containers bfcb44aac Add xinetd config to make an AIO survive a reboot b35949b30 Move ara to scripts-library 1e8ba763e Add nspawn to experimental jobs 7af917268 ignore files on translation job 11e601fa8 Revert "Add lxc3 compatibility" d71db06bf Add LXC COPR cache e8621387b Remove obsolete instruction 6e3e63c0b playbooks: healthcheck-infrastructure: Ensure netcat is installed 8bd064eb7 Update the outdated URL 2bc1ca0c8 Bootstrap ansible virtualenv with --never-download a9d422151 Move bionic jobs to voting, add release note. 6e8904062 Update docs & upgrade scripts for Stein 1062bb7f0 Update documentation index to include Rocky b95c0e1e2 Use a common python build/install role 77f550607 Allow openstack healthcheck and tempest to co-exist c5dbad487 Gather facts for host healthcheck cd667c588 Fix issues with infrastructure healthcheck 1c6e80974 Remove molteniron playbook mistakenly left behind 528a163ec docs: Add links to very useful Galera recovery docs 24bd4a781 Update ansible to 2.5.8 69cf1a56e scripts: Fix getting external role SHA when working on master 41fc67502 [DOC] fix some typos and fix some stuff ec5cda3dc zuul: Add ceph jobs for distribution installations ac8e91733 ansible-role-requirements: Unpin ceph-ansible role fb5a5cff7 Bind mount glance cache directory 59275230d Track master branch for tempest 1297b96a6 Update VNC path to correct one 87296d112 Enable CentOS 7 basekit jobs cad69ee25 Add missing congress_oslomsg_rpc_password d65906c48 Add aio host conf for barbican role 2a288e1b1 Make sure the branch to track is in YAML 4383ae312 Add pinned SHA for networking-ovn repo 7d061c7d2 Refactor jobs to use project-templates 703da30ed Disable verbose output of log collection 348e406d9 Fix nspawn bind mount register process c194535fd Remove bonds from AIO network config 50712078a switch documentation job to new PTI 066a5c0c1 import zuul job settings from project-config 4b0f18d87 Add test for Ubuntu Bionic 420df0153 Ensure that tests fail early if network interfaces are down 7f8ee6d2f Gather facts for openstack_openrc role af0f439ec Provides group_names for use with provider_network plugin fffc8d476 Introduce OpenStack Healthchecks 2daeba940 Remove the last remnants of get-pip.py 829b7940b Use operating system specific IP utilities 2d96bff9a Remove un-used bootstrap variables 80dfbe783 Temporarily use tempest master for all builds and fix configs 1c260fa63 Remove the duplicated word ee4344409 Use the TESTING_BRANCH env var for constraints b7b18f405 Change AIO ZFS pool to be at /pool 440c87a80 Add lxc3 compatibility e7e732818 Imported Translations from Zanata dc421891f Prepare master branch for M1 cb8230048 Update reno for stable/rocky 191e0b866 Eliminate installing pip on host/containers dc0788dab AIO: Tune down the glance uwsgi processes db7d6d440 AIO: Tune the nova scheduler workers down 8d92c1339 Bump OpenStack versions dd976c878 Add networkd prefix when creating networks 677357dd7 How to configure Telemetry for radosgw 089e1d0af Add octavia_service_region to octavia_all vars Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 +- .gitreview | 4 +- README.rst | 23 +- Vagrantfile | 21 +- ansible-role-requirements.yml | 288 +- bindep.txt | 4 +- deploy-guide/source/conf.py | 22 +- deploy-guide/source/configure.rst | 16 +- deploy-guide/source/deploymenthost.rst | 5 +- deploy-guide/source/overview-requirements.rst | 2 +- deploy-guide/source/targethosts-prepare.rst | 31 +- deploy-guide/source/verify-operation.rst | 6 + .../admin/maintenance-tasks/ansible-modules.rst | 4 +- .../openstack-operations/managing-networks.rst | 4 +- .../upgrades/major-upgrades-manual-upgrade.rst | 263 -- .../admin/upgrades/major-upgrades-with-script.rst | 29 - .../{minor-updates.rst => minor-upgrades.rst} | 0 .../locale/de/LC_MESSAGES/doc-contributor.po | 2827 ++++++++++++++ .../architecture/container-networking.rst | 15 + .../reference/configuration/extending-osa.rst | 2 +- .../figures/networking-compute-nobridge.png | Bin 0 -> 186291 bytes .../figures/networking-neutronagents-nobridge.png | Bin 0 -> 221607 bytes .../reference/upgrades/reference-scripts.rst | 45 - .../upgrades/reference-upgrade-playbooks.rst | 101 - .../figures/arch-layout-provnet-groups-custom.png | Bin 0 -> 317164 bytes .../user/figures/arch-layout-provnet-groups.png | Bin 0 -> 253248 bytes .../user/figures/network-arch-multiple-bonds.png | Bin 0 -> 369583 bytes .../figures/network-arch-multiple-interfaces.png | Bin 0 -> 277647 bytes .../user/figures/network-arch-single-bond.png | Bin 0 -> 331757 bytes .../user/figures/network-arch-single-interface.png | Bin 0 -> 272200 bytes .../openstack_interface.cfg.multibond.example | 137 + .../openstack_interface.cfg.singlebond.example | 124 + .../openstack_interface.cfg.test.example | 2 +- etc/openstack_deploy/conf.d/barbican.yml.aio | 4 + etc/openstack_deploy/conf.d/blazar.yml.aio | 4 + etc/openstack_deploy/conf.d/cinder.yml.aio | 27 + etc/openstack_deploy/conf.d/etcd.yml.aio | 4 + .../conf.d/{etcd.conf.example => etcd.yml.example} | 0 etc/openstack_deploy/conf.d/manila.yml.aio | 7 + etc/openstack_deploy/conf.d/manila.yml.example | 16 + etc/openstack_deploy/conf.d/masakari.yml.aio | 4 + etc/openstack_deploy/conf.d/masakari.yml.example | 9 + etc/openstack_deploy/conf.d/mistral.yml.aio | 3 + etc/openstack_deploy/conf.d/mistral.yml.example | 8 + etc/openstack_deploy/conf.d/panko.yml.aio | 3 + etc/openstack_deploy/conf.d/panko.yml.example | 8 + etc/openstack_deploy/conf.d/qdrouterd.yml.aio | 3 + etc/openstack_deploy/conf.d/rally.yml.aio | 5 + etc/openstack_deploy/conf.d/swift.yml.aio | 4 +- etc/openstack_deploy/env.d/aio_metal.yml.example | 53 +- .../openstack_deploy/env.d/calico.yml.example | 27 +- etc/openstack_deploy/openstack_user_config.yml.aio | 2 +- .../openstack_user_config.yml.aio-nspawn.j2 | 140 + .../openstack_user_config.yml.aio.j2 | 33 +- .../openstack_user_config.yml.example | 82 +- .../openstack_user_config.yml.multibond.example | 313 ++ ...openstack_user_config.yml.provnet-group.example | 351 ++ .../openstack_user_config.yml.singlebond.example | 313 ++ etc/openstack_deploy/user_secrets.yml | 41 + etc/openstack_deploy/user_variables.yml | 12 + global-requirement-pins.txt | 21 +- inventory/dynamic_inventory.py | 2 +- inventory/env.d/blazar.yml | 39 + inventory/env.d/manila.yml | 57 + inventory/env.d/masakari.yml | 54 + inventory/env.d/mistral.yml | 46 + inventory/env.d/neutron.yml | 2 - inventory/env.d/panko.yml | 36 + .../env.d/qdrouterd.yml | 34 +- inventory/group_vars/all/all.yml | 17 +- inventory/group_vars/all/ceph-rgw.yml | 6 +- inventory/group_vars/all/ceph.yml | 13 +- inventory/group_vars/all/glance.yml | 14 - inventory/group_vars/all/infra.yml | 17 + inventory/group_vars/all/oslo-messaging.yml | 14 +- .../group_vars/all/panko.yml | 7 +- inventory/group_vars/all/ssl.yml | 2 +- inventory/group_vars/aodh_all.yml | 8 +- inventory/group_vars/barbican_all.yml | 4 - .../group_vars/{all/pip.yml => blazar_all.yml} | 11 +- inventory/group_vars/ceilometer_all.yml | 4 - inventory/group_vars/ceph-rgw.yml | 4 +- inventory/group_vars/cinder_all.yml | 4 - inventory/group_vars/congress_all.yml | 4 - inventory/group_vars/designate_all.yml | 4 - inventory/group_vars/glance_all.yml | 6 +- inventory/group_vars/gnocchi_all.yml | 4 - inventory/group_vars/haproxy/haproxy.yml | 91 +- inventory/group_vars/haproxy/keepalived.yml | 11 +- inventory/group_vars/heat_all.yml | 4 - inventory/group_vars/horizon_all.yml | 6 +- inventory/group_vars/hosts.yml | 3 - inventory/group_vars/ironic_all.yml | 4 - inventory/group_vars/keystone_all.yml | 4 - inventory/group_vars/magnum_all.yml | 4 - inventory/group_vars/manila_all.yml | 33 + inventory/group_vars/mistral_all.yml | 25 + inventory/group_vars/neutron_all.yml | 4 - inventory/group_vars/nova_all.yml | 7 +- inventory/group_vars/octavia_all.yml | 5 +- inventory/group_vars/panko_all.yml | 24 + inventory/group_vars/rabbitmq_all.yml | 1 + inventory/group_vars/repo_all.yml | 60 +- inventory/group_vars/sahara_all.yml | 4 - inventory/group_vars/swift_all.yml | 4 - inventory/group_vars/tacker_all.yml | 4 - inventory/group_vars/trove_all.yml | 4 - inventory/group_vars/utility_all.yml | 29 +- inventory/inventory.ini | 37 + osa_toolkit/filesystem.py | 22 +- osa_toolkit/generate.py | 29 +- playbooks/ceph-install.yml | 134 +- playbooks/ceph-rgw-install.yml | 21 +- playbooks/ceph-rgw-keystone-setup.yml | 153 +- playbooks/common-playbooks/cinder.yml | 22 +- playbooks/common-playbooks/glance.yml | 16 +- playbooks/common-playbooks/neutron.yml | 16 +- playbooks/common-playbooks/nova.yml | 63 +- playbooks/common-tasks/ceph-server.yml | 84 + playbooks/common-tasks/dynamic-address-fact.yml | 2 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 4 +- playbooks/common-tasks/os-lxc-container-setup.yml | 8 +- .../common-tasks/os-nspawn-container-setup.yml | 9 +- playbooks/common-tasks/package-cache-proxy.yml | 48 +- playbooks/common-tasks/restart-service.yml | 2 +- playbooks/common-tasks/rsyslog-client.yml | 1 - playbooks/common-tasks/set-pip-vars.yml | 111 - playbooks/containers-deploy.yml | 8 +- playbooks/containers-lxc-create.yml | 4 +- playbooks/containers-lxc-host.yml | 2 - playbooks/containers-nspawn-create.yml | 77 +- playbooks/defaults/distro_install.yml | 6 - playbooks/defaults/healthchecks-vars.yml | 107 + playbooks/defaults/repo_packages/gnocchi.yml | 3 +- playbooks/defaults/repo_packages/nova_consoles.yml | 10 +- .../defaults/repo_packages/openstack_services.yml | 272 +- playbooks/defaults/source_install.yml | 29 +- playbooks/etcd-install.yml | 6 +- playbooks/galera-install.yml | 10 +- playbooks/haproxy-install.yml | 8 +- playbooks/healthcheck-hosts.yml | 7 +- playbooks/healthcheck-infrastructure.yml | 45 +- playbooks/healthcheck-openstack.yml | 552 +++ playbooks/infra-journal-remote.yml | 48 +- playbooks/memcached-install.yml | 8 +- playbooks/openstack-hosts-setup.yml | 12 +- playbooks/os-aodh-install.yml | 9 +- playbooks/os-barbican-install.yml | 9 +- playbooks/os-blazar-install.yml | 56 + playbooks/os-ceilometer-install.yml | 9 +- playbooks/os-cinder-install.yml | 12 +- playbooks/os-congress-install.yml | 11 +- playbooks/os-designate-install.yml | 9 +- playbooks/os-gnocchi-install.yml | 19 +- playbooks/os-heat-install.yml | 8 +- playbooks/os-horizon-install.yml | 9 +- playbooks/os-ironic-install.yml | 7 +- playbooks/os-keystone-install.yml | 43 +- playbooks/os-magnum-install.yml | 9 +- playbooks/os-manila-install.yml | 89 + playbooks/os-masakari-install.yml | 70 + playbooks/os-mistral-install.yml | 56 + playbooks/os-molteniron-install.yml | 56 - playbooks/os-nova-install.yml | 23 +- playbooks/os-octavia-install.yml | 9 +- playbooks/os-panko-install.yml | 42 + playbooks/os-rally-install.yml | 4 +- playbooks/os-sahara-install.yml | 9 +- playbooks/os-swift-install.yml | 9 +- playbooks/os-swift-sync.yml | 1 + playbooks/os-tacker-install.yml | 6 +- playbooks/os-tempest-install.yml | 7 + playbooks/os-trove-install.yml | 9 +- playbooks/qdrouterd-install.yml | 53 + playbooks/rabbitmq-install.yml | 6 +- playbooks/repo-build.yml | 86 - playbooks/repo-install.yml | 50 +- playbooks/repo-server.yml | 73 - playbooks/repo-use.yml | 33 - .../templates/crontab.j2 | 2 +- playbooks/rsyslog-install.yml | 6 +- playbooks/setup-everything.yml | 6 +- playbooks/setup-hosts.yml | 6 +- playbooks/setup-infrastructure.yml | 29 +- playbooks/setup-openstack.yml | 57 +- playbooks/unbound-install.yml | 8 +- playbooks/utility-install.yml | 106 +- .../notes/add-bionic-support-999217a9f7f213cc.yaml | 13 + .../notes/add-cors-config-6326223fe7fa7423.yaml | 5 + ...-manila-dashboard-support-4fcddedffb83bc28.yaml | 5 + .../add-masakari-to-repo-40cce14de6f39670.yaml | 5 + .../add-mistral-to-repo-deddfe1034291765.yaml | 5 + .../notes/add-nested-virt-1db2270e73d1b34.yaml | 7 + .../notes/add-nfs-support-5aacc81dbf3c2270.yaml | 5 + .../notes/add-random-devices-38671b23cb1319b8.yaml | 2 +- .../add-support-for-distro-89611067ce74fc2c.yaml | 11 + .../aodh-service-setup-host-d28f6974160fd939.yaml | 17 + .../backup-driver-rename-ca4424a0814ee8af.yaml | 12 + ...rbican-service-setup-host-a5da4ed51d164fb5.yaml | 17 + .../notes/blacklist-format-26c6097cf4e813c9.yaml | 12 + .../blazar-horizon-panel-d5ba19273b21d7aa.yaml | 9 + ...ometer-service-setup-host-18179a1f9b71fb14.yaml | 25 + .../ceph-backend-host-change-968edfbc15b59b0a.yaml | 9 + .../ceph-pkg-src-remove-uca-4ef147673821ed9b.yaml | 7 + .../ceph-rgw-swift-account-93350d92f0f33b20.yaml | 30 + ...hrony-ntp-server-defaults-7cd2e3a80723e0bd.yaml | 6 + ...chrony-ntp-server-options-f8f87225a5282e1a.yaml | 4 + .../notes/chrony-rtc-sync-f46b9a526aec0889.yaml | 4 + ...cinder-service-setup-host-712ca5e7b7b9d578.yaml | 17 + .../cloudkitty-horizon-panel-c3b616273b21d7aa.yaml | 9 + .../config-template-move-a0f08aff8e54f62f.yaml | 7 + ...gurable-scheduler-filters-17ea2ed9d4aa0708.yaml | 25 + ...figure-polling-namespaces-226573c37a44b5a6.yaml | 8 + .../custom-pip-package-add-4c17638c6e5b3373.yaml | 6 + .../notes/default-lxd-pool-1aa179bd77868cb0.yaml | 11 + ...e-ansible-role-fetch-mode-281d9fcb7389e163.yaml | 9 + .../deprecated-iscsi_helper-98fd2aebfd72fdf6.yaml | 5 + .../designate-1604-support-d397681dd302eda9.yaml | 1 + ...ignate-service-setup-host-78466665a752dadd.yaml | 17 + releasenotes/notes/diffmode-e8f9a041f662a2ef.yaml | 6 + .../disable-compression-e4074dcef9f85c36.yaml | 15 + .../notes/dragonflow-removed-6285225b5525cd50.yaml | 6 + .../notes/drop-custom-themes-724c40e5cd69b8e2.yaml | 10 + ...nable-tempestconf-support-0bd13c8393c9450b.yaml | 9 + ...agent-ha-keepalive-helper-5f1f82c437c8a430.yaml | 3 + releasenotes/notes/fix_quota-e3d4bf0b896dc393.yaml | 12 + .../fixes_sec_grp_rule_quota-2755da6c2c2ab434.yaml | 8 + .../galera-client-gpg-keys-8b674cee476885d0.yaml | 12 + .../notes/galera-gpg-keys-96ed45fd1ec4cb14.yaml | 12 + .../notes/get-nested-removed-779b8d2648d2e8b4.yaml | 5 + .../notes/glance-cache-4d5f8036c5e8f5b1.yaml | 11 + ...glance-service-setup-host-b0e71be408de074b.yaml | 17 + ...nocchi-service-setup-host-ef418b0e709ae796.yaml | 17 + .../heat-service-setup-host-e15eb9aa40414697.yaml | 17 + ...orizon-service-setup-host-9728b772d2514dd9.yaml | 17 + .../http-access-horizon-94c27a0aadb9f1b4.yaml | 22 + .../notes/inotify-exhaustion-77f7ecab13358c4c.yaml | 16 + .../notes/install-local-019edab04ffc8347.yaml | 2 +- ...ironic-service-setup-host-658842e1875ea7bf.yaml | 17 + .../notes/journal-log-ccba504642b49612.yaml | 5 + .../notes/journal-log-ccbb504642b49611.yaml | 9 + .../notes/journal-log-ccbb504642b49614.yaml | 5 + .../notes/journal-log-cwbr504hd9b59612.yaml | 5 + .../notes/journal-log-cwbr789hd9b59612.yaml | 5 + .../notes/journal-log-cxcb512642b49617.yaml | 9 + .../notes/journal-log-xcba504642b49619.yaml | 6 + .../notes/journal-log-ycba504642b47619.yaml | 5 + ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 2 +- ...ystone-service-setup-host-cd3ee3346af823e6.yaml | 17 + ...tworking-convert-networkd-5b514e604df7c429.yaml | 2 +- ...encrypt-ssl-certification-129a80cb88d8e6ff.yaml | 10 + ...t-inventory-backkups.yaml-c96577e9de284cf2.yaml | 7 + .../lxc-host-machine-vars-5d11b1f269167fd3.yaml | 15 + ...magnum-service-setup-host-ea285f161e625980.yaml | 22 + releasenotes/notes/manila-63e49e98c888385d.yaml | 4 + .../masakari-horizon-panel-c058881e1268b3b7.yaml | 9 + ...ari_monitors_installation-bbed280cbed6fd49.yaml | 5 + .../notes/mysqlcheck-options-60fae226d8d4f3ca.yaml | 8 + ...-opendaylight-sfc-support-8b249b8f8efbc087.yaml | 29 + ...tron-opendaylight-support-453dc9324eafaae7.yaml | 2 +- ...on-ovs-interface-mappings-789902128b82e721.yaml | 22 + ...eutron-service-setup-host-895ececec99d7a51.yaml | 17 + .../notes/neutron-sriov-50c0099554574d01.yaml | 2 +- .../neutron-vpnaas-dashboard-19f4ef09faae1f70.yaml | 9 + ...bgp_speaker_driver-update-789404b846221290.yaml | 5 + ...tmq_memory_high_watermark-1d12effe59153605.yaml | 19 + .../no_containers_option-39034d48825e8966.yaml | 18 + .../notes/nova-cpu-model-006da20048168842.yaml | 18 + ...ova-init-config-overrides-ffce7e419061c4da.yaml | 2 +- .../nova-service-setup-host-f62d2eaede77d23c.yaml | 17 + ...ctavia-service-setup-host-d57533fdea394394.yaml | 25 + ...ack-distribution-packages-bbec587237b8bc80.yaml | 7 + ...ack-distribution-packages-f5d3174b96fc2372.yaml | 7 + ...ack-distribution-packages-fcb6220fdeb3668c.yaml | 7 + ...stone-remove-service-user-f2100fa3127c7c2e.yaml | 7 + ...inder-private-volume-type-9b2cc92c6c74c277.yaml | 5 + .../osa-wrapper-path-fix-91e8c56b72c968b0.yaml | 12 + .../oslo-messaging-backends-65287400dba86fce.yaml | 21 + ...ssaging-separate-backends-06a1b30ffb228f22.yaml | 3 +- ...ssaging-separate-backends-1fbdb77e93e29542.yaml | 3 +- ...ssaging-separate-backends-3b2dac9462595b31.yaml | 3 +- ...ssaging-separate-backends-401c97b4c48a9b31.yaml | 21 + ...ssaging-separate-backends-4491e7c099bee4f5.yaml | 3 +- ...ssaging-separate-backends-60f81dae397b1c96.yaml | 16 + ...ssaging-separate-backends-61d279ded1bc999e.yaml | 3 +- ...ssaging-separate-backends-652f63d5c21b1884.yaml | 21 + ...ssaging-separate-backends-702d7b33fda7a9f5.yaml | 3 +- ...ssaging-separate-backends-87f2d1a15c202f73.yaml | 21 + ...ssaging-separate-backends-9b3fcaaa21a0d9f4.yaml | 3 +- ...ssaging-separate-backends-a3af6957a984ac51.yaml | 21 + ...ssaging-separate-backends-e68c98d4f9d9a79c.yaml | 3 +- ...ssaging-separate-backends-e82ea3162d2d383f.yaml | 16 + ...ssaging-separate-backends-e8a0b6857f2a9749.yaml | 21 + .../notes/oslomsg_policies-7ac27a5c2a7fbed2.yaml | 9 + ...container-user-remote-tmp-0efec059fd04eae2.yaml | 6 + ...k-container-interface-opt-80263aebc5b8e7c3.yaml | 6 + .../notes/pypi-cache-removed-c03a9a0658c9d89f.yaml | 10 + .../notes/rabbitmq-gpg-keys-042a47164265ea40.yaml | 12 + ...rabbitmq-server-ha-policy-d4e9b46cb5922032.yaml | 8 + ...rabbitmq-server-mnesia-io-d9067e226c7cb19c.yaml | 12 + ..._non_tls_listeners-remove-54e04c51021ff301.yaml | 6 + .../remove-ceilometer-api-2bada67ecc58e18b.yaml | 2 +- ...ve-machinectl-workarounds-d67a4739f6385f54.yaml | 7 + .../notes/remove-pkg-cache-afba3577138dc0a0.yaml | 22 + .../remove-proxy-no-cache-9b514030c87e7d1b.yaml | 14 + .../notes/remove-pypiserver-baa6476999104ea4.yaml | 13 + ...e-tempest-image-dir-owner-ec10dfa5bb9f87f1.yaml | 5 + .../notes/remove-v1-api-4c66f43c4f8404b6.yaml | 6 + .../remove_oslomsg_server-6b5c19e03a001e85.yaml | 6 + .../repo-build-venv-removed-80686a21b693b0cd.yaml | 21 + ...-server-required-packages-9a5b1a5c1236030f.yaml | 5 + ...sahara-service-setup-host-18f57fbc1671adfc.yaml | 17 + .../notes/smart-sources-59cd0811dcf1ae49.yaml | 16 + .../sso-callback-template-cf720ab7f6fc2461.yaml | 5 + ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 2 +- .../swift-service-setup-host-b3d0aca53522a887.yaml | 17 + .../notes/systemd_service-d564b5464d854fa7.yaml | 8 + .../tacker-horizon-panel-c3x916273c21d70a.yaml | 9 + ...empest-service-setup-host-da08c1d4775ea0d1.yaml | 25 + .../tempest-test-blacklist-4ec6cc32798874ce.yaml | 6 + .../notes/tls12-only-08825fd013f0a244.yaml | 6 + .../notes/tls12-only-2025a08207fd562e.yaml | 7 + .../notes/tls12-only-40fea49efdb9d4dd.yaml | 7 + .../notes/tls12-only-75222cbe8c32ad57.yaml | 7 + .../notes/tls12-only-9b74e96cfd47a634.yaml | 7 + .../notes/tls12-only-a22d5f3f8198617f.yaml | 7 + .../notes/tls12-only-d7221a33188dc7a0.yaml | 7 + .../notes/top_ini_section-c28d7acadf5fe836.yaml | 5 + .../trove-service-setup-host-5bb64b2356ca81e2.yaml | 17 + .../update-mariadb-to-10.2-a70764ae400aadf6.yaml | 4 + .../update-mariadb-to-10.2-b99a87ed0bb60b37.yaml | 4 + .../notes/use-mariabackup-46ae988b43abda06.yaml | 5 + .../use-mariadb-10.3.13-7801fd46c5c9ce89.yaml | 4 + .../use_vendored_gpg_keys-f268bd4f4cb7d105.yaml | 16 + .../watcher-horizon-panel-c3b616273c21d70a.yaml | 9 + .../notes/zun-horizon-panel-c3b616283b21d9ba.yaml | 9 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 2 +- scripts/bootstrap-aio.sh | 29 +- scripts/bootstrap-ansible.sh | 49 +- scripts/gate-check-commit.sh | 81 +- scripts/get-ansible-role-requirements.yml | 10 +- scripts/keepalived_haproxy_check.sh | 16 + scripts/keepalived_pingable_check.sh | 16 + scripts/log-collect.sh | 280 ++ scripts/openstack-ansible.rc | 10 +- scripts/openstack-ansible.sh | 18 +- scripts/rabbitmq-test.py | 2 +- scripts/run-upgrade.sh | 102 +- scripts/scripts-library.sh | 136 +- scripts/sources-branch-updater-lib.sh | 16 +- scripts/sources-branch-updater.sh | 2 +- .../upgrade-utilities/deploy-config-changes.yml | 97 + .../galera-cluster-rolling-restart.yml | 4 +- .../{playbooks => }/pip-conf-removal.yml | 3 +- .../playbooks/ceph-galaxy-removal.yml | 31 - .../playbooks/deploy-config-changes.yml | 89 - .../playbooks/memcached-flush.yml | 34 - .../playbooks/user-secrets-adjustment.yml | 84 - .../upgrade-utilities/scripts/make_rst_table.py | 45 - .../scripts/migrate_openstack_vars.py | 70 - .../scripts/test_migrate_openstack_vars.py | 86 - setup.cfg | 2 +- test-requirements.txt | 2 +- .../bootstrap-host/tasks/check-requirements.yml | 29 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 82 +- .../bootstrap-host/tasks/prepare_data_disk.yml | 8 +- .../bootstrap-host/tasks/prepare_hostname.yml | 14 +- .../tasks/prepare_loopback_manila.yml | 77 + .../bootstrap-host/tasks/prepare_networking.yml | 155 +- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 80 - .../templates/user_variables.aio.yml.j2 | 106 +- .../templates/user_variables_barbican.yml.j2 | 22 + .../templates/user_variables_calico.yml.j2 | 33 + .../templates/user_variables_manila.yml.j2 | 47 + .../templates/user_variables_translations.yml.j2 | 7 + .../bootstrap-host/vars/{ubuntu.yml => debian.yml} | 0 tox.ini | 27 +- zuul.d/jobs.yaml | 266 +- zuul.d/playbooks/post.yml | 26 +- zuul.d/playbooks/run.yml | 24 +- zuul.d/project-templates.yaml | 157 + zuul.d/project.yaml | 69 +- 442 files changed, 28984 insertions(+), 4089 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0787567de..3064f4781 100644 --- a/requirements.txt +++ b/requirements.txt @@ -26 +26 @@ python-openstackclient>=3.14.2 -shade>=1.17.0 # Apache-2.0 +openstacksdk>=0.14.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 20122f76d..84b3e0c3e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking<0.11,>=0.10.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 18 00:54:38 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 18 Jul 2019 00:54:38 -0000 Subject: [release-announce] os-resource-classes 0.5.0 Message-ID: We are happy to announce the release of: os-resource-classes 0.5.0: Resource Classes for OpenStack The source is available from: https://opendev.org/openstack/os-resource-classes Download the package from: https://pypi.org/project/os-resource-classes For more details, please see below. Changes in os-resource-classes 0.4.0..0.5.0 ------------------------------------------- c547287 Propose FPGA and PGPU resource classes 0fceade Add Python 3 Train unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +-- os_resource_classes/__init__.py | 4 ++++ setup.cfg | 1 + tox.ini | 2 +- 5 files changed, 9 insertions(+), 5 deletions(-) From no-reply at openstack.org Thu Jul 18 02:48:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 18 Jul 2019 02:48:11 -0000 Subject: [release-announce] oslo.messaging 9.8.0 (train) Message-ID: We contentedly announce the release of: oslo.messaging 9.8.0: Oslo Messaging API This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 9.7.2..9.8.0 -------------------------------------- 1c31abc7 Add Python 3 Train unit tests c50076b4 Implement mandatory flag for RabbitMQ driver e804874c Implement the transport options 73c0c007 Add the "transport_options" parameter to the amqp1 and kafka drivers. 54356899 fix typos 83266cc6 Add transport_options parameter 70b03bcf Download kafka from archive.apache.org Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- lower-constraints.txt | 2 +- oslo_messaging/_drivers/amqpdriver.py | 10 ++-- oslo_messaging/_drivers/base.py | 12 +++-- oslo_messaging/_drivers/common.py | 2 +- oslo_messaging/_drivers/impl_amqp1.py | 5 +- oslo_messaging/_drivers/impl_fake.py | 8 +-- oslo_messaging/_drivers/impl_kafka.py | 2 +- oslo_messaging/_drivers/impl_rabbit.py | 58 ++++++++++++++-------- oslo_messaging/exceptions.py | 13 ++++- oslo_messaging/rpc/client.py | 39 +++++++++------ oslo_messaging/transport.py | 16 +++++- requirements.txt | 2 +- setup-test-env-kafka.sh | 2 +- setup.cfg | 1 + tox.ini | 2 +- 22 files changed, 211 insertions(+), 71 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2e05118b..7ed73945 100644 --- a/requirements.txt +++ b/requirements.txt @@ -29 +29 @@ amqp>=2.4.1 # BSD -kombu!=4.0.2,>=4.0.0 # BSD +kombu!=4.0.2,>=4.6.1 # BSD From no-reply at openstack.org Thu Jul 18 02:49:51 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 18 Jul 2019 02:49:51 -0000 Subject: [release-announce] pbr 5.4.1 Message-ID: We are overjoyed to announce the release of: pbr 5.4.1: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 5.4.0..5.4.1 --------------------------- 79ef8d9 Resolve some issue with tox.ini, setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 28 ++++++++++++++-------------- tox.ini | 15 +++------------ 2 files changed, 17 insertions(+), 26 deletions(-) From no-reply at openstack.org Thu Jul 18 03:03:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 18 Jul 2019 03:03:04 -0000 Subject: [release-announce] openstacksdk 0.17.3 (rocky) Message-ID: We are chuffed to announce the release of: openstacksdk 0.17.3: An SDK for building applications to work with OpenStack This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.17.3 ^^^^^^ Deprecation Notes ***************** * **REMINDER** "openstack.profile.Profile" is deprecated and will be removed in the next release. Bug Fixes ********* * Adds support for error messages from the bare metal service. * Correct updating bare metal resources. Previously an incorrect body used to be sent. * Fixed an issue where the Profile compat code wasn't setting microversion. Changes in openstacksdk 0.17.2..0.17.3 -------------------------------------- 3c7dfb3d fixing timing 391e072b OpenDev Migration Patch 2b35c9be Replace openstack.org git:// URLs with https:// 67690039 Fixes for Unicode characters in python 2 requests 8a64dfc0 Fix functional tests on stable/rocky 5b15ccf0 Correct updating baremetal nodes by name or ID 28aa2bbd Support bare metal service error messages 9fdbb229 import zuul job settings from project-config 09328683 Correct update operations for baremetal 26456e21 Add simple create/show/delete functional tests for all baremetal resources f0b0fa40 Add a simple baremetal functional job 42575ff9 Pass microversion info through from Profile Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 137 +++++++++++++++------ openstack/baremetal/v1/chassis.py | 1 + openstack/baremetal/v1/node.py | 1 + openstack/baremetal/v1/port.py | 1 + openstack/baremetal/v1/port_group.py | 1 + openstack/config/cloud_region.py | 1 + openstack/exceptions.py | 31 +++-- openstack/profile.py | 4 + openstack/resource.py | 41 +++++- .../functional/baremetal/test_baremetal_chassis.py | 51 ++++++++ .../functional/baremetal/test_baremetal_node.py | 120 ++++++++++++++++++ .../functional/baremetal/test_baremetal_port.py | 66 ++++++++++ .../baremetal/test_baremetal_port_group.py | 58 +++++++++ openstack/utils.py | 4 +- .../notes/baremetal-errors-5cc871e8df4c9d95.yaml | 4 + .../notes/baremetal-update-80effb38aae8e02d.yaml | 5 + .../profile-microversion-65f55c8066e2d5bb.yaml | 8 ++ tox.ini | 2 +- 27 files changed, 722 insertions(+), 58 deletions(-) From no-reply at openstack.org Thu Jul 18 03:08:34 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 18 Jul 2019 03:08:34 -0000 Subject: [release-announce] tooz 1.66.0 (train) Message-ID: We are satisfied to announce the release of: tooz 1.66.0: Coordination library for distributed systems. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 1.65.0..1.66.0 ------------------------------ 535121d Move grpcio from requirements.txt to extras 771a3e9 Blacklist sphinx 2.1.0 Diffstat (except docs and test files) ------------------------------------- requirements.txt | 1 - setup.cfg | 1 + 3 files changed, 2 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9dab502..1af5228 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +15,0 @@ oslo.serialization>=1.10.0 # Apache-2.0 -grpcio>=1.18.0 From no-reply at openstack.org Mon Jul 22 20:25:08 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 20:25:08 -0000 Subject: [release-announce] swift 2.22.0 (train) Message-ID: We are chuffed to announce the release of: swift 2.22.0: OpenStack Object Storage This release is part of the train release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.22.0 ^^^^^^ New Features ************ * Experimental support for Python 3.6 and 3.7 is now available. Note that this requires "eventlet>=0.25.0". All unit tests pass, and running functional tests under Python 2 will pass against services running under Python 3. Expect full support in the next minor release. * Log formats are now more configurable and include support for anonymization. See the "log_msg_template" option in "proxy- server.conf" and the Swift documentation for more information. * Added an operator tool, "swift-container-deleter", to asynchronously delete some or all objects in a container using the object expirers. * Swift-all-in-one Docker images are now built and published to https://hub.docker.com/r/openstackswift/saio. These are intended for use as development targets, but will hopefully be useful as a starting point for other work involving containerizing Swift. Upgrade Notes ************* * The "object-expirer" may now be configured in "object- server.conf". This is in anticipation of a future change to allow the "object- expirer" to be deployed on all nodes that run the "object-server". * **Dependency updates**: we've increased our minimum supported version of "cryptography" to 2.0.2 and "netifaces" to 0.8. This is largely due to the difficulty of continuing to test with the old versions. If running Swift under Python 3, "eventlet" must be at least 0.25.0. Bug Fixes ********* * Correctness improvements * The "proxy-server" now ignores 404 responses from handoffs without databases when deciding on the correct response for account and container requests. * Object writes to a container whose existence cannot be verified now 503 instead of 404. * Sharding improvements * The "container-replicator" now only attempts to fetch shard ranges if the remote indicates that it has shard ranges. Further, it does so with a timeout to prevent the process from hanging in certain cases. * The "proxy-server" now caches 'updating' shards, improving write performance for sharded containers. A new config option, "recheck_updating_shard_ranges", controls the cache time; set it to 0 to disable caching. * The "container-replicator" now correctly enqueues "container- reconciler" work for sharded containers. * S3 API improvements * Unsigned payloads work with v4 signatures once more. * Multipart upload parts may now be copied from other multipart uploads. * CompleteMultipartUpload requests with a "Content-MD5" now work. * "Content-Type" can now be updated when copying an object. * Fixed v1 listings that end with a non-ASCII object name. * Background corruption-detection improvements * Detect and remove invalid entries from "hashes.pkl" * When object path is not a directory, just quarantine it, rather than the whole suffix. * Various other minor bug fixes and improvements. Changes in swift 2.21.0..2.22.0 ------------------------------- a48ac28ef Authors/changelog for 2.22.0 a1af3811a sharding: Cache shard ranges for object writes 0ae1ad63c Update auth_url in install docs f4bb1bea2 reconciler: Enqueue right work for shard containers c1d170225 functests: Make test_PUT_metadata less flakey 9d1b74974 py3: port staticweb and domain_remap func tests 38a24571a functests: make container creation less flakey in test_object 4c4bd778e container-replicator: Add a timeout for get_shard_ranges 345f577ff s3token: fix conf option name 76fde8926 py3: Be able to read and write non-ASCII headers 4f7c44a9d Add information about secret_cache_duration to sample config 072b40451 s3api: add unit test case for s3acl c46b88ab7 Fix invalid assert states 88cec2c39 s3api: Put more information in the str() for InternalError e02b9b798 Use get_container_info to check existence before container PUT 044c91987 More tests for 404 handoff skipping 563e1671c Return 503 when primary containers can't respond 82169ead1 Don't handle object without container 55b04d16c Run all func tests under py2 against services running py3 39a54fecd py3: add swift-dsvm-functional-py3 job ff4459ed6 Move call to global_conf_callback after loadapp() 9f1ef3563 py3: Port the tempurl middleware a57085edc py3: port the test of locale b10f4bae2 func tests: tolerate more 404s when deleting 4ab3706b7 Remove nobarrier option 876ce231d py3: increase _MAXHEADERS for eventlet, too 557335465 Move calls to self.app outside of error handling 6374734d7 Stop manually installing eventlet for our py3 tests 014358018 py3: Decode some things in s3api ef664700d py3: Specify an encoding when loading db.pending pickles e6c971b7e Stop sending non-UTF-8 prefixes in func tests ccd3b890c Enable s3api in saio docker container ef8818a63 Fix up how we memcache on py3 0f46ace8a Fix :param: in docstring aa2f1db1b Ensure get_*_info keys are native strings b7b92b97b Bump up minimum cryptography version 668e45af6 Update mailmap for Kota Tsuyuzaki 06e4533c2 py3: Fix header_to_environ_key e8e7106d1 py3: port obj/reconstructor tests dca658103 Fix swift with python <2.7.9 d9cafca24 py3: port ssync a122b720e Dockerfile cleanup 17fd72570 Installing liberasurecode from Alpine Linux repos instead of building from source. 2eb245168 Increase some middleware test coverage 98637dc1e Bump openstackdocstheme to 1.30.0 79ab3a490 Note s3api compatability requirements in sample.conf eaf180c68 Fix a few Sphinx warnings 37fa12cd8 Do not sync suffixes when remote rejects reconstructor sync c9e78d15e Remove invalid dict entries from hashes.pkl 2e35376c6 py3: symlink follow-up 4f9595f11 py3: port symlink middleware 2c4f28405 Modify the version path URL of the configuration file ff04ef05c Rework private-request-method interface e28bc3c29 Fix incorrect setting of symlink_target_account 04c8015b8 Add more tests for async expirer e22960fd7 s3api: Fix ETag when copying a MU part from another MU 40bd9f16a py3: port diskfile 8868e2cd5 Clean up test_write_read_metadata 83d016199 Add operator tool to async-delete some or all objects in a container 4927b1f29 Specify pickle protocol in REPLICATE() 61a4567a8 Controller install Debian missing proxy-server.conf configuration 6008b0a83 Fix quarantine when object path is not a directory d4e794045 Start transition to boto3 in s3api tests. 53f8ccb4a container: Unify storage-policy error paths 350bc8cbe s3api: stop adding etag quotes when there are already etag quotes 82e446a8a s3api: Allow clients to upload with UNSIGNED-PAYLOAD bd8c3067b py3: slo ad034023f Be explicit that a code path is just for py2 add5a411a Make build/upload/promote image jobs non-voting bec2cccd4 py3: port expirer 8b6438137 Set Content-Type with s3api metadata updates. 5cd2a2ac2 py3: bulk -- alternate approach 89c9c6f0b Have a separate s3api functional test suite 51e415b74 py3: port proxy/test_mem_server.py 8b3d0a6c6 py3: finish porting proxy/test_server.py 4f4456561 Add py37 func test job 506279235 Get functional/tests.py running under py3 259224f00 py3: port unit/proxy/test_server.py dade632b0 S3Api: handle non-ASCII markers in v1 listings. 032cf3b3b Update docker secret. 37e257913 Add Dockerfile to build a SAIO container image 211cf3983 Require logger passed to broker in unit tests for account-reaper 6d63297f0 [Trivial fix]Remove unnecessary slash 767872210 py3: port unit/proxy/test_sysmeta.py fed0204e8 py3: Make StoragePolicy objects hashable b8284538b py3: start porting for unit/proxy/test_server.py 34bd4f7fa Clarify usage of dequeue_from_legacy option 9290f29e1 Wait longer for log lines in unit test 443f029a5 Enable to configure object-expirer in object-server.conf 1e4cdca33 Fix ostestr invocation f5b472cdc Fix wrong tox env name from func-post-ec to func-ec 359d136c2 Unify auth_host/port/ssl/prefix func test options into auth_uri a239f4ec3 Remove py35 unit test job a4cc35337 Make log format for requests configurable 3a9f3f841 py3: port s3api c0ae48ba9 py3: Stop using stdlib's putrequest(); it only does ASCII 93b49c5e4 py3: Be able to parse non-RFC-compliant request lines 4b2ac606b Pass logger instances to AccountBroker/ContainerBroker 58352b285 s3api multi upload test clean up c51db382c s3api: Block ETag header from CompleteMultipartUpload requests 32bf43990 Replace git.openstack.org URLs with opendev.org URLs 89eced960 OpenDev Migration Patch 9468e28cc Make test_read_write_acl_listings more robust b6ebabee7 Clean up dlo unit tests 893acffbc py3: port dlo 7cb276da4 Move from py35 to py37 for gating py3 jobs 65d3cb75f Use assertIn to check whether substring is in str e5ff405ec Make staticweb return URL-encoded Location headers 049e56a5d Remove our urlparse wrapper 5b40f69ed Add tests for unexpected names in part dir b86bc5160 py3: port staticweb middleware 621e92488 Update openstack repo for libec install 08d59ebcd Change partition name from string to integer e5e22ebeb Make symlink work with Unicode account names 52bc11f09 Use labels to mount filesystems in the guide 0294836d9 py3: test/unit/common/middleware/s3api/test_s3token.py adc826f37 Clean up more things before running unit tests 9d9f8b0ff add more detail to s3api test failure e3e79a6e4 Remove "gross hack" for py3pep8 env; run releasenotes under py3 6c93c5768 Run docs tox env under py3 ffe51501c api-ref: add link to SLO docs from multipart-manifest=put param 9b694a332 s3token: Add an underscore to the end of reseller_prefix if not present 8f23dbad6 Make reconciler test more stable in the gate 89e5927f7 Fix mocking time 50715acb1 Update master for stable/stein 10cb205fe Fix lower-constraint deps handling 8e045d0de versioned_writes: stop trying to catch HTTPPreconditionFailed 771963c92 Increase node_timeout in gate a4298fb3a s3api: Fix get_container_info missing some sysmeta info. 29b877de7 s3api: fix partition between S3 and Swift headers Diffstat (except docs and test files) ------------------------------------- .dockerignore | 11 + .gitreview | 2 +- .mailmap | 4 + .zuul.yaml | 152 +- AUTHORS | 15 +- CHANGELOG | 77 +- CONTRIBUTING.rst | 2 +- Dockerfile | 71 + api-ref/source/conf.py | 5 + api-ref/source/parameters.yaml | 2 + .../finalize-installation-ubuntu-debian.rst | 2 +- .../install/storage-install-ubuntu-debian.rst | 10 +- .../15_install_python_and_pip_src.sh | 57 + .../rootfs/etc/socklog.rules/swift_account_server | 3 + .../etc/socklog.rules/swift_container_server | 3 + .../rootfs/etc/socklog.rules/swift_object_server | 3 + etc/account-server.conf-sample | 11 + etc/container-server.conf-sample | 11 + etc/object-server.conf-sample | 77 + etc/proxy-server.conf-sample | 38 +- lower-constraints.txt | 9 +- .../notes/2_22_0_release-f60d29508b3c1283.yaml | 87 + releasenotes/source/index.rst | 2 + releasenotes/source/stein.rst | 6 + requirements.txt | 14 +- setup.cfg | 1 + swift/account/auditor.py | 2 +- swift/account/reaper.py | 3 +- swift/account/server.py | 8 +- swift/cli/container_deleter.py | 174 ++ swift/cli/recon.py | 3 +- swift/common/base_storage_server.py | 6 +- swift/common/bufferedhttp.py | 31 +- swift/common/db.py | 6 +- swift/common/db_replicator.py | 11 +- swift/common/manager.py | 69 +- swift/common/memcached.py | 12 +- swift/common/middleware/acl.py | 4 +- swift/common/middleware/bulk.py | 117 +- swift/common/middleware/copy.py | 3 + swift/common/middleware/crypto/decrypter.py | 3 + swift/common/middleware/dlo.py | 54 +- swift/common/middleware/formpost.py | 10 +- swift/common/middleware/list_endpoints.py | 11 +- swift/common/middleware/listing_formats.py | 4 + swift/common/middleware/proxy_logging.py | 149 +- swift/common/middleware/ratelimit.py | 3 +- .../common/middleware/s3api/controllers/bucket.py | 28 +- .../middleware/s3api/controllers/multi_upload.py | 77 +- swift/common/middleware/s3api/controllers/obj.py | 2 +- .../common/middleware/s3api/controllers/service.py | 4 +- swift/common/middleware/s3api/etree.py | 4 +- swift/common/middleware/s3api/s3api.py | 10 +- swift/common/middleware/s3api/s3request.py | 122 +- swift/common/middleware/s3api/s3response.py | 24 +- swift/common/middleware/s3api/s3token.py | 9 +- .../middleware/s3api/schema/list_bucket_result.rng | 4 +- swift/common/middleware/s3api/subresource.py | 14 +- swift/common/middleware/s3api/utils.py | 6 +- swift/common/middleware/slo.py | 144 +- swift/common/middleware/staticweb.py | 43 +- swift/common/middleware/symlink.py | 32 +- swift/common/middleware/tempurl.py | 20 +- swift/common/middleware/versioned_writes.py | 75 +- swift/common/middleware/x_profile/html_viewer.py | 3 +- swift/common/storage_policy.py | 3 + swift/common/swob.py | 67 +- swift/common/utils.py | 216 +- swift/common/wsgi.py | 66 +- swift/container/auditor.py | 2 +- swift/container/reconciler.py | 4 +- swift/container/replicator.py | 7 +- swift/container/server.py | 51 +- swift/container/sharder.py | 5 +- swift/container/sync.py | 10 +- swift/obj/diskfile.py | 58 +- swift/obj/expirer.py | 115 +- swift/obj/mem_diskfile.py | 16 +- swift/obj/reconstructor.py | 15 +- swift/obj/replicator.py | 4 +- swift/obj/server.py | 14 +- swift/obj/ssync_receiver.py | 52 +- swift/obj/ssync_sender.py | 80 +- swift/proxy/controllers/base.py | 185 +- swift/proxy/controllers/container.py | 35 +- swift/proxy/controllers/obj.py | 11 +- swift/proxy/server.py | 35 +- test-requirements.txt | 2 + test/functional/__init__.py | 51 +- test/functional/s3api/__init__.py | 23 +- test/functional/s3api/s3_test_client.py | 62 +- test/functional/s3api/test_bucket.py | 557 ++--- test/functional/s3api/test_multi_upload.py | 95 +- test/functional/swift_test_client.py | 153 +- test/functional/test_container.py | 16 +- test/functional/test_dlo.py | 25 +- test/functional/test_domain_remap.py | 25 +- test/functional/test_object.py | 2 +- test/functional/test_slo.py | 55 +- test/functional/test_staticweb.py | 96 +- test/functional/test_symlink.py | 260 +- test/functional/test_tempurl.py | 152 +- test/functional/test_versioned_writes.py | 9 +- test/probe/common.py | 8 +- test/probe/test_container_failures.py | 5 +- test/probe/test_sharder.py | 23 +- test/s3api/__init__.py | 142 ++ test/s3api/test_service.py | 91 + test/sample.conf | 27 +- test/unit/__init__.py | 32 +- test/unit/account/test_auditor.py | 3 +- test/unit/account/test_reaper.py | 56 +- test/unit/account/test_server.py | 14 +- test/unit/cli/test_container_deleter.py | 278 +++ .../common/middleware/crypto/test_crypto_utils.py | 8 + .../middleware/crypto/test_kmip_keymaster.py | 24 +- test/unit/common/middleware/s3api/__init__.py | 2 + test/unit/common/middleware/s3api/helpers.py | 7 + test/unit/common/middleware/s3api/test_acl.py | 14 +- test/unit/common/middleware/s3api/test_bucket.py | 114 +- test/unit/common/middleware/s3api/test_etree.py | 15 +- .../common/middleware/s3api/test_multi_delete.py | 29 +- .../common/middleware/s3api/test_multi_upload.py | 270 +- test/unit/common/middleware/s3api/test_obj.py | 64 +- test/unit/common/middleware/s3api/test_s3_acl.py | 9 +- test/unit/common/middleware/s3api/test_s3api.py | 58 +- .../unit/common/middleware/s3api/test_s3request.py | 114 +- .../common/middleware/s3api/test_s3response.py | 2 + test/unit/common/middleware/s3api/test_s3token.py | 17 +- test/unit/common/middleware/s3api/test_service.py | 2 +- test/unit/common/middleware/test_bulk.py | 144 +- test/unit/common/middleware/test_crossdomain.py | 2 +- test/unit/common/middleware/test_dlo.py | 117 +- test/unit/common/middleware/test_proxy_logging.py | 42 + test/unit/common/middleware/test_recon.py | 2 +- test/unit/common/middleware/test_slo.py | 402 +-- test/unit/common/middleware/test_staticweb.py | 96 +- test/unit/common/middleware/test_symlink.py | 131 +- test/unit/common/middleware/test_tempurl.py | 312 +-- test/unit/common/test_db.py | 17 + test/unit/common/test_internal_client.py | 2 +- test/unit/common/test_manager.py | 117 + test/unit/common/test_memcached.py | 4 + test/unit/common/test_storage_policy.py | 16 +- test/unit/common/test_swob.py | 38 +- test/unit/common/test_utils.py | 143 +- test/unit/common/test_wsgi.py | 53 +- test/unit/container/test_auditor.py | 2 +- test/unit/container/test_reconciler.py | 6 +- test/unit/container/test_replicator.py | 195 +- test/unit/container/test_server.py | 128 +- test/unit/container/test_sync.py | 41 +- test/unit/obj/test_auditor.py | 4 +- test/unit/obj/test_diskfile.py | 382 +-- test/unit/obj/test_expirer.py | 201 +- test/unit/obj/test_reconstructor.py | 154 +- test/unit/obj/test_replicator.py | 24 +- test/unit/obj/test_server.py | 91 +- test/unit/obj/test_ssync.py | 80 +- test/unit/obj/test_ssync_receiver.py | 432 ++-- test/unit/obj/test_ssync_sender.py | 268 +- test/unit/proxy/controllers/test_base.py | 51 +- test/unit/proxy/controllers/test_container.py | 16 +- test/unit/proxy/controllers/test_obj.py | 28 +- test/unit/proxy/test_server.py | 2569 ++++++++++++-------- test/unit/proxy/test_sysmeta.py | 31 +- test/unit/test_locale/eo.po | 5 + test/unit/test_locale/messages.mo | Bin 83 -> 181 bytes test/unit/test_locale/test_locale.py | 65 +- .../multinode_setup/configure_loopback.yaml | 2 +- tools/playbooks/multinode_setup/make_rings.yaml | 1 + .../saio_single_node_setup/setup_saio.yaml | 8 +- tools/test-setup.sh | 2 +- tox.ini | 114 +- 237 files changed, 9413 insertions(+), 4332 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index df5d26b69..609e540e6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ -dnspython>=1.14.0;python_version=='2.7' # http://www.dnspython.org/LICENSE -eventlet>=0.17.4,!=0.23.0 # MIT +dnspython>=1.14.0;python_version=='2.7' # http://www.dnspython.org/LICENSE +eventlet>=0.17.4,!=0.23.0 # MIT @@ -8 +8 @@ greenlet>=0.3.1 -netifaces>=0.5,!=0.10.0,!=0.10.1 +netifaces>=0.8,!=0.10.0,!=0.10.1 @@ -11 +11 @@ lxml>=3.4.1 -requests>=2.14.2 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 @@ -13 +13 @@ six>=1.9.0 -xattr>=0.4 +xattr>=0.4;sys_platform!='win32' # MIT @@ -15,2 +15,2 @@ PyECLib>=1.3.1 # BSD -cryptography!=2.0,>=1.6 # BSD/Apache-2.0 -ipaddress>=1.0.16;python_version<'3.3' # PSF +cryptography>=2.0.2 # BSD/Apache-2.0 +ipaddress>=1.0.16;python_version<'3.3' # PSF diff --git a/test-requirements.txt b/test-requirements.txt index cf97918f0..ff86a01dd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,0 +18,2 @@ boto>=2.32.1 +boto3>=1.9 +botocore>=1.12 From no-reply at openstack.org Mon Jul 22 21:08:26 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:08:26 -0000 Subject: [release-announce] python-magnumclient 2.14.0 (train) Message-ID: We are thrilled to announce the release of: python-magnumclient 2.14.0: Client library for Magnum API This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-magnumclient Download the package from: https://pypi.org/project/python-magnumclient Please report issues through: https://bugs.launchpad.net/python-magnumclient/+bugs For more details, please see below. Changes in python-magnumclient 2.13.0..2.14.0 --------------------------------------------- c72512d Conditional hidden arg for backward compatibility 440f4b1 Fix coverage test 3d6e9bd Blacklist bandit 1.6.0 and cap Sphinx on Python2 d91d4c7 Display project_id for cluster show d3d04b7 OpenDev Migration Patch 9f5b8c7 Dropping the py35 testing 6b756aa Support upgrade API Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - magnumclient/osc/v1/cluster_templates.py | 7 +- magnumclient/osc/v1/clusters.py | 43 ++++++++++++ magnumclient/v1/clusters.py | 15 ++++ setup.cfg | 2 +- test-requirements.txt | 2 +- tools/cover.sh | 79 ---------------------- tox.ini | 15 ++-- 13 files changed, 163 insertions(+), 92 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f625855..49dfa5c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 22 21:13:51 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:13:51 -0000 Subject: [release-announce] keystonemiddleware 7.0.0 (train) Message-ID: We are pumped to announce the release of: keystonemiddleware 7.0.0: Middleware for OpenStack Identity This release is part of the train release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 7.0.0 ^^^^^ New Features * [spec (http://specs.openstack.org/openstack/keystone- specs/specs/keystone/train/capabilities-app-creds.html)] The auth_token middleware now has support for accepting or denying incoming requests based on access rules provided by users in their keystone application credentials. Changes in keystonemiddleware 6.1.0..7.0.0 ------------------------------------------ 5f093bf Add validation of app cred access rules 2d3765e Add Python 3 Train unit tests d040cf6 Remove Diablo compatibility tests 0c3b3f5 Fix bandit warning b3e84aa Remove PKI/PKIZ support fe36fa6 print auth version for request strategy in debug Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- examples/pki/certs/cacert.pem | 23 -- examples/pki/certs/middleware.pem | 50 --- examples/pki/certs/signing_cert.pem | 22 -- examples/pki/certs/ssl_cert.pem | 22 -- examples/pki/cms/auth_token_revoked.json | 85 ---- examples/pki/cms/auth_token_revoked.pem | 75 ---- examples/pki/cms/auth_token_revoked.pkiz | 1 - examples/pki/cms/auth_token_scoped.json | 88 ----- examples/pki/cms/auth_token_scoped.pem | 77 ---- examples/pki/cms/auth_token_scoped.pkiz | 1 - examples/pki/cms/auth_token_scoped_expired.json | 85 ---- examples/pki/cms/auth_token_scoped_expired.pem | 75 ---- examples/pki/cms/auth_token_scoped_expired.pkiz | 1 - examples/pki/cms/auth_token_unscoped.json | 23 -- examples/pki/cms/auth_token_unscoped.pem | 25 -- examples/pki/cms/auth_token_unscoped.pkiz | 1 - examples/pki/cms/auth_v3_token_revoked.json | 88 ----- examples/pki/cms/auth_v3_token_revoked.pem | 76 ---- examples/pki/cms/auth_v3_token_revoked.pkiz | 1 - examples/pki/cms/auth_v3_token_scoped.json | 123 ------ examples/pki/cms/auth_v3_token_scoped.pem | 100 ----- examples/pki/cms/auth_v3_token_scoped.pkiz | 1 - examples/pki/cms/revocation_list.json | 20 - examples/pki/cms/revocation_list.pem | 24 -- examples/pki/cms/revocation_list.pkiz | 1 - examples/pki/gen_cmsz.py | 79 ---- examples/pki/gen_pki.sh | 213 ---------- examples/pki/private/cakey.pem | 28 -- examples/pki/private/signing_key.pem | 28 -- examples/pki/private/ssl_key.pem | 28 -- examples/pki/run_all.sh | 31 -- keystonemiddleware/auth_token/__init__.py | 221 ++++------- keystonemiddleware/auth_token/_identity.py | 57 +-- keystonemiddleware/auth_token/_opts.py | 24 +- keystonemiddleware/auth_token/_request.py | 4 +- keystonemiddleware/auth_token/_signing_dir.py | 90 ----- .../unit/auth_token/test_auth_token_middleware.py | 437 ++++++--------------- lower-constraints.txt | 4 +- ...t-extension-for-app-creds-badf088c8ad584bb.yaml | 7 + .../notes/bug-1649735-3c68f3243e474775.yaml | 16 +- requirements.txt | 4 +- tox.ini | 2 +- 47 files changed, 408 insertions(+), 2436 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 80b26d4..d3f07ce 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.12.0 # Apache-2.0 @@ -15 +15 @@ pycadf!=2.0.0,>=1.1.0 # Apache-2.0 -python-keystoneclient>=3.10.0 # Apache-2.0 +python-keystoneclient>=3.20.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 22 21:16:00 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:16:00 -0000 Subject: [release-announce] monasca-common 2.15.0 (train) Message-ID: We are gleeful to announce the release of: monasca-common 2.15.0: Monasca common python modules This release is part of the train release series. The source is available from: https://opendev.org/openstack/monasca-common Download the package from: https://tarballs.openstack.org/monasca-common/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-common 2.14.0..2.15.0 ---------------------------------------- 94bca49 Removed unused code e306922 Disable monasca-tempest-java-influxdb job afc64e7 In Python 3.7 "async" and "await" will become reserved keywords 08c06df Add Python 3 Train unit tests d5b3692 Remove one unnecessary env var form Docker images Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- monasca_common/expression_parser/__init__.py | 0 .../expression_parser/alarm_expr_parser.py | 379 --------------------- monasca_common/kafka/producer.py | 2 +- monasca_common/kafka_lib/producer/base.py | 26 +- monasca_common/kafka_lib/producer/keyed.py | 2 +- monasca_common/kafka_lib/producer/simple.py | 2 +- setup.cfg | 2 + tox.ini | 2 +- 11 files changed, 20 insertions(+), 553 deletions(-) From no-reply at openstack.org Mon Jul 22 21:16:52 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:16:52 -0000 Subject: [release-announce] openstacksdk 0.31.2 (train) Message-ID: We are thrilled to announce the release of: openstacksdk 0.31.2: An SDK for building applications to work with OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.31.2 ^^^^^^ Bug Fixes * Basic networking list calls in the cloud layer been fixed to return an empty list if neutron is not running. * Fixed a bug related to metadata's key name. An exception was raised when setting it to "delete"," clear" or "key" Changes in openstacksdk 0.31.1..0.31.2 -------------------------------------- 6a266872 Correct endpoint_override discovery for service with dashes in their type 2081befb Can't create a metadata named key, clear, delete b2df6b19 Repair masakari FT 983cc997 Return empty lists for resources if neutron doesn't exist 2d406e71 Fix typo for subnet.py This 'slacc' should be 'slaac' 832e4368 Add Python 3 Train unit tests 9ad9da54 Increase randomness in ZONE creation 0a5bc189 Fix invalid assert state 3f604379 Replace nodepool func jobs e8afa687 Allow deeper levels of nesting for pdf builds 245ebae5 Switch cloud layer to use proxy for DNS b94a8ce4 from_conf: fix handling service names with dashes 9736d239 Use Resource layer for network SecurityGroups 9cce6310 Use Resource layer for next compute methods 40cc2cc5 Support deleting all routes in update_router a7fbaba3 Use Resource layer in cloud for SecurityGroups of server 10447761 Use Resource layer for the compute Hypervsors and Images Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- openstack/cloud/_compute.py | 142 +++----- openstack/cloud/_dns.py | 138 ++++---- openstack/cloud/_network.py | 52 +-- openstack/cloud/_security_group.py | 100 +++--- openstack/compute/v2/_proxy.py | 91 ++--- openstack/compute/v2/hypervisor.py | 11 +- openstack/compute/v2/image.py | 7 +- openstack/compute/v2/metadata.py | 5 +- openstack/compute/v2/server.py | 71 +++- openstack/compute/v2/server_group.py | 50 ++- openstack/config/cloud_region.py | 16 +- openstack/dns/v2/_base.py | 105 ++++++ openstack/dns/v2/_proxy.py | 21 +- openstack/dns/v2/floating_ip.py | 5 +- openstack/dns/v2/recordset.py | 6 +- openstack/dns/v2/zone.py | 4 +- openstack/dns/v2/zone_export.py | 4 +- openstack/dns/v2/zone_import.py | 4 +- openstack/dns/v2/zone_transfer.py | 4 +- openstack/network/v2/security_group.py | 8 +- openstack/network/v2/security_group_rule.py | 9 +- openstack/network/v2/subnet.py | 2 +- openstack/service_description.py | 2 +- .../unit/network/v2/test_security_group_rule.py | 27 +- ...work-resources-empty-list-6aa760c01e7d97d7.yaml | 5 + .../metadata-key-name-bugfix-77612a825c5145d7.yaml | 4 + setup.cfg | 2 +- tox.ini | 2 +- 53 files changed, 1425 insertions(+), 728 deletions(-) From no-reply at openstack.org Mon Jul 22 21:17:12 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:17:12 -0000 Subject: [release-announce] ironic-prometheus-exporter 0.1.0 (train) Message-ID: We are stoked to announce the release of: ironic-prometheus-exporter 0.1.0: Prometheus Exporter for Ironic Hardware Sensor data This is the first release of ironic-prometheus-exporter. This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-prometheus-exporter Download the package from: https://tarballs.openstack.org/ironic-prometheus-exporter/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- prometheus-exporter For more details, please see below. Changes in ironic-prometheus-exporter 3f9139483b9cbc58143e132500e63f2896956fd3..0.1.0 ------------------------------------------------------------------------------------- f7e9344 Update setup.cfg to install package correctly 41ee7fd Migrate to opendev infra 47fe64f Update setup name 8414213 Update Flask version in requirements 3b98fb3 Fixes for installation 8bb8c73 Move to client_python from Prometheus a117d9f rename metalkube to metal3-io 39e02f2 IPMI changes 3a223dd Review Updates 6af5c0d Flask Application to Prometheus 2679564 Update requirements and documentation 7eff909 Updates for Driver, Parsers and Tests 918bfbb Refactoring code 8167352 Updates for Prometheus Exporter 8164b51 Installation guide 4adbb42 Change file format to JSON c933606 Update documentation format ad25f2e Updates for PrometheusFileDriver f27a9fe Register configuration options before load driver a94a8d8 Initial version for Prometheus File Driver 5f80b97 Basic repository structure Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..01cde09 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,5 @@ +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +stevedore>=1.20.0 # Apache-2.0 +oslo.messaging>=9.4.0 # Apache-2.0 +Flask>=1.0.0 # BSD +prometheus_client>=0.6.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..d229add --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,3 @@ +flake8 +stestr>=2.0.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 22 21:33:43 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:33:43 -0000 Subject: [release-announce] kolla 8.0.0 (stein) Message-ID: We are gleeful to announce the release of: kolla 8.0.0: Kolla OpenStack Deployment This release is part of the stein release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 8.0.0 ^^^^^ New Features ************ * Adds configration option "use_dumb_init", with default value of "True". This can be use to avoid the of "dumb-init" as the container entrypoint, using "kolla_start" directly instead. This option can also be disabled via the "kolla-build --nouse-dumb-init" CLI argument. Upgrade Notes ************* * Moves the "ENTRYPOINT" statement outside of the "dumb_init_installation" Jinja block in the base image. Overriding this block to install "dumb-init" by another method no longer requires repeating the "ENTRYPOINT" statement. Users wishing to avoid the use of "dumb-init" altogether can now use the "use_dumb_init" configuration option. Changes in kolla 7.0.0.0rc1..8.0.0 ---------------------------------- ae53af692 CI: set the same gate queue for kolla and kolla-ansible e930fb35a Fixes ceph-osd deploys with loop devices. ac66f5869 Extract CI vars for use in kolla-ansible jobs 6fd4b0217 Update versions: ./tools/version-check.py cce6d6804 Clean up test process 09226a598 Run nova api_db sync before db sync f13852289 Fix deployment of ceph-nfs container failing due to wrong USER 4edaf8a70 Move back to CentOS StorageSIG repos for Ceph and Ganesha ac8609c0f Add sha256 in ceph fetch keys 6acca35f5 Fix ownership of ironic inspector DHCP hostsdir 588c1076c Use td-agent-gem to install fluentd monasca plugin on ubuntu 1fe505ffe [neutron] Do not migrate all subprojects 45ae94f9a Fix issues with Percona in Zuul and clean up a little bit b8c6dd6ab Debian/Ubuntu: allow to use unsigned repositories 7a23046b2 Fix lower-constraints test fail due to failing dep build df6f1fb3c Bump service versions for Stein b71f2be43 Debian/Ubuntu: more python3 packages for binary c5d2e9683 Switch to RDO Stein release on CentOS & Oracle 78f862b0d Ceph: Update to Nautilus on CentOS and OracleLinux ad4435618 Install iputils package in neutron containers c7e0f0db6 Bump Monasca Fluentd plugin version eb4ad1674 Add CI trigger for ceph jobs 877df152d Fix multiple mon deployment failures 2b2218448 Fix bandit failure B105 in keystone fernet 81c325048 Add sqlite package to manila-share c56ee10d2 Drop systemd support from PAM 20161582e Improve doc of kolla-build '--docker-dir' option 2648c12c8 Reuse /var/lib/tempest symlink for rpm also 3e9b4406a Install udevadm in ironic-conductor image 10f0e55fd Remove oschecks installation e0137e7df Pin kafka java version to 8 on ubuntu 47e93f054 OpenDev Migration Patch 8371ecb2a Fix the problem that the crush map is changed f958a9d36 Bump Bifrost version to 6.0.1 6e010e25e Write hash after compressing horizon static assets ea14e33bc Fix the problem of osd initialization failed 3b4de28cb Bump Monasca Notification to fix container 666d800b0 Add config option use_dumb_init to add it to container images 0cfe0d74f Fix ubuntu binary deploys 7db2c4706 Version check: update using project name or tarball name 2c634a548 Bump versions for OpenStack Stein release 36778963b Install "procps(-ng)" in the base image 77e174504 Update UPPER_CONSTRAINTS_FILE for stable/stein 1b93d589f Update .gitreview for stable/stein 61d42b5a0 Use Stein release for all OpenStack projects 5f8395514 Fix Zookeeper builds 7b0f9dd75 Add kolla-ansible upgrade jobs to check pipeline 2399c42d9 Tidy up release notes for Stein 8.0.0 release 83e8be4f0 Set requirements branch in version-check.py 8dfc0ae0d Fix:kafka package not found by kafka package url 265f64329 Add cyborg to kolla 0c732805b Add boto3 python dependencies into gnocchi-base image a21ab86ca build: handle template syntax errors better fdd2fb35c Remove unused scripts 04c5cfb59 Install trousers to get user tss for nova_libvirt d74df2fc1 Replace openstack.org git:// URLs with https:// 3c9c72bad MariaDB upgrade: specify host and port 81ef659f9 Make tripleo-build-containers-centos-7 voting 1ff012d2c Bump skydive version to 0.22.0 95f38fb0f cleanup in base for yum install entries 91c5453cc Fixup whitespace issue in chaining cd307fb1a refactor to pull out rpm_security_update macro dd2250082 Move top package installed in every *-base container to openstack-base 2b8986892 install ncurses explicitly for tput for rpm distro 32ea1aab4 monasca, tempest: install librdkafka-dev to get it built for non-x86/source c0a2ac1ee Sahara: install also the split plugins 3075685d0 Fix MariaDB 10.3 upgrade 828209713 Properly set debian_arch for ppc64el hardware 4058c8e29 Pin sensu mailer and slack plugins d17025689 Introduce clean_package_cache cf5b5b69a Install qemu-system in nova-libvirt on ubuntu cdcd5610e Fix lower-constraints and kolla CI jobs 6d58f7b3a Add some irrelevant files to build jobs b21b19105 Update programming language mentioned in setup.cfg 4d31ca695 Move to Debian 'buster' 87eec8b00 Drop redundant rpms from nova-base package list 3f2b3187f base: more strict pin of Ceph/Luminous for Ubuntu 0e2fc8a3b Do not explictly specify mysql related RPMS b13e8ec31 Use virtual package for ansible c8f8b3012 Separate placement DB sync and data migrations ba730c029 Fix the permission issue of placement-api log 33d45a034 Drop tcp_wrappers package requirement 78c819d62 Add distro_package_manager configuration 3e5d8e265 Add python3 packages for RHEL systems 71148046f Remove distro_python3 release note 8df6eb011 replace 'distro_python3' variable with 'distro_python_version' 5eec015ca Run jobs on bionic instead of xenial ef83ff13f Introduce 'get_pip' macro 4c914512c [docker/prometheus] Bump openstack-exporter version. 1545fa694 Drop python2-pika_pool rpm 13d930701 helm-repository: drop unused os_client_config variable e13abc347 openstack-base: drop pika-pool 8c99d5300 Copy placement database migration script 7c1940240 Add Google mtail for generating metrics from logs f96433b03 Move project templates from ubuntu.yaml to project.yaml 041fb7b87 Fix Octavia-API extend_start.sh 5e1ac34c6 drop some of the xll related packages 43b74ccc1 debian/ubuntu: make use of Python3 based packages 4991607b2 nova: Remove bridge_utils from base package f3568a1ba Drop py35 jobs 1558875ee add python 3.7 unit test job in Kolla deliverable f8fd56056 base: update to dumb-init 1.2.2 92d35e9e8 Switch to stestr 4d189ab98 Change some repos from xenial to bionic bac8fd368 Added elasticsearch exporter image for prometheus 1b8890945 Simplify package list from openstack-base image cbcd2efe7 nova: Only install OVMF on EL 7 when installing from source c50df6904 Use overlay2 in tools/setup_Redhat.sh 95bce55e2 pypi package msgpack-python is deprecated, drop explicit install 2c75a2429 Install packages into octavia-api image to support wsgi ba6d7540f debian/ubuntu: drop mysql compat stuff, unify on openssl 1.1 ab679adcb debian/ubuntu: introduce 'debian_arch' variable 1d208580b gnocchi rpm naming cleanup 7e05deafb nova: Only install OVMF packages on RHEL 7 a490eef0d Fix py36 gate job 5e89fbd3b Bump up Prometheus and components versions 195a7e296 Change rfc3986>=1.1.0 to rfc3986>=1.2.0 baa611e55 Pin rabbitmq-server for ubuntu 31444571b Add missing directory info ab9213cc6 remove pep8 from lower-constraints.txt b6f6663ba Drop python2-crypto as not needed in openstack-base cfbcf830f Pin rabbitmq-server to 3.7.10 63e5e4d65 build: exit if there is no Docker connection ab942509e Allow running more commands dockerless 79ad39382 Fix broken xtrabackup and monasca-grafana images 534e02999 remove python-beaker from openstack-base rpm list b2822c785 remove test dependencies from openstack-base fd78c1ff1 Revert "Update kafka version to 2.1.0" 1f53ed6fc Utilize already existing block for rabbitmq plugin install 819924a8e Guard adding contentdir RUN in base template 95fd9b17f [prometheus] Bump openstack-exporter version. e1ee85a56 Increase gather_facts timeout e9f7fc33c Update kafka version to 2.1.0 d78144fbd Fix magnum logic for rhel 8344c8ea2 Make set_config.py compatible with both Py2 and Py3 ae1322ec1 Use base_package_type 584da2532 [collectd] add collectd-rabbitmq-monitoring fca732b81 Add base_package_type 3410a6165 Add distro_python3 option ba2a69644 Ensure /run_command is readable by all users abbebb035 Run Zun job on kuryr's changes 5f0b33f52 Bump CI post-run timeout to 2 hours c2397e62d Add python2-sqlalchemy-collectd 8d0f2df13 [prometheus] Added openstack-exporter base image. a48b01634 Copy missing heat_policy.json file 96cb18bd0 Update the remain hacking version for lower-constraints ae8834402 Fix grafana repo 411348335 Add support rabbitmq promethues plugin 8acba6ff5 Update hacking version f8d86969d Ignore undefined values in customizable filter bb9bf4643 Update docs for building ovs-dpdk images 6cf71f5df Use template for lower-constraints 2f657085c Split placement-api from nova 6c7445786 Adding cron-job link to README e261e8919 Add nfast group to barbican images 93a4ea65c Remove dependencies from kolla ansible jobs 4fa93a614 Run Zun job on chnage of Zun's docker files 55a31ee2b [Configuration] Add missing py37 and corrected default envlist. 0c4238da7 Use infra mirrors for ODL and percona repos de5c8b1f7 Bump up Skydive version 8a157cbe0 Install numactl package for Zun images d8d7281ab Fix mkdir instruction of tools/setup_Debian.sh 4ed611a0b Add neutron-rootwrap-daemon to neutron_sudoers 6258a920f Clear ENTRYPOINT configuration for Bifrost 8e1682708 Run Bifrost deploy job when Dockerfiles change 41aa8f9a8 Fix tox dependencies for release note generation 4492fb059 Complete removal of vitrage-collector service. a8eafa803 Add contrib/ dir to setup.cfg 388813490 Deprecate crane image 32beb0a64 Required changes for mariadb 10.3 433e28413 Clean up vpnaas remained 65296e27e Fix Oraclelinux build, disable collectd in gate 13e91fd47 Add missing footer block to mistral base image 3d9bcb93f Change openstack-dev to openstack-discuss 3f6a2c889 Added missing link for Sensu and Redis Sentinel 8504a2060 No need to use dict_object.keys() 531d3dc0c Use the base OS image for tripleoclient base 24c993a05 Fix the parameter order of assertEqual f8747a864 Add Percona XtraBackup link in README f077a25e4 Add management and monitoring utilities for qdrouterd 3d4f69f57 Bump storage available to Docker in CI to 25G 0984836aa base/debian: add Percona repo key 464844eeb base: tell gnupg to not use TTY when we import APT keys b2f8605f3 Fix kafka build b06d8387f Use dumb-init with --single-child 9c9a7f430 Suppress log copy output in gates 67448358b Replacing the HTTP protocal with HTTPS . e79da48e1 Add tripleo container build job cf2b2b55b Update Zaqar image 5d2f953a6 change version from 1.6 to 2.0 0cdfa0c8c base debian/ubuntu: drop not needed APT keys 36d3c5b23 Fix documentation for Kolla image-building guide 74d8e6504 Do not load dm-multipath module from the container 6d405cc9a Do not load ip_vs module from the container b4a7bcae6 Do not load iscsi_tcp from within a container. 126665616 Add python 3.6 unit test job 3da653faf Add Monasca Grafana image 9753e81a2 Update the docker storage drivers link 25de6deb4 Introduce Percona XtraBackup image 72945b092 Remove path work around for kibana 8aac00972 Copy vitrage app.wsgi when deploy install_type binary 0c9ddb42f Fix location of "upgrage-to-mariadb-10.1.20-for-redhat-family" release note 49ff6d054 Drop deprecated image neutron-sfc-agent 7eae23440 Update min tox version to 2.0 919bb29d0 Disable init lastlog and faillog database for created user 74b70d944 utils: be Python 2 compatible when squashing is enabled 96b6e4e1d ceph-base/dind: switch to btrfs-progs package e457d0704 Update the links to https b5a2be218 Update the monasca link to docs 6a87e5bbd Fix naming of override template 5792c1d7b build: remove link to failed log before creating 8e2906a59 mariadb: make security_reset.expect's timeout configurable 600093398 Install UEFI related package for nova image 441064147 neutron-base: remove bashisms 11611c67e Build and install Fluentd Monasca plugin 232cc372c neutron-base: unify Debian/Ubuntu part 81e551bde heat-all: mark as not available for Debian 646e7de71 ceph-nfs: Debian got nfs-ganesha in backports - use them 1b0f4197f Document Kolla image API 901e8d0d8 Improve pep8 checking along with hacking 5ade3f6a8 Fixed file modes in toolbox:/usr/share/ansible b18b6a6d1 Add ironic-staging-drivers to ironic-conductor for RHEL family binary and source based builds. cc7ab30b8 [prometheus] Add blackbox exporter. a13b4fbfc Fix potential Monasca-thresh start failure 2743931fe Add Monasca template override file 840fa07f1 Use rabbitmq package from OS distro for Bifrost 0c8d3f058 Add user 'zun' to group 'docker' 570a6120b Add /var/lib/kolla/venv/bin to Zun exec_dirs 43e902164 Remove '.. end' comments 1367a1f35 grafana: on aarch64 use 5.2.4 version from upstream 57c0b23b5 base: remove pinning of dh-python for ubuntu 7826ba298 ceph: stick to luminous on Ubuntu (in proper way) 6d6e1c85a fix tox python3 overrides 0cf2c5345 Downgrade Logstash for Monasca 3eb3d744d DO not install ceilometer from git in n-server-opendaylight 71d8fb478 Disable debug logs for image builds 4f9ee9f13 Add crane docker image 78001f06a Fix ceph version in ubuntu f12b702ca Add monasca user to Monasca thresh container ae8ce78e5 Use alembic migrations to deploy Monasca DB 327527461 Fix epel mirror replacement in gates fc7eb5a9c Test Fix ceilometer source builds 3b264a919 Ingore monasca-thresh in version-check.py f5c2f3d97 openvswitch: make ovs-tcpdump usable a063bee28 base: use bionic version of UCA on non-x86 b90589276 Spec: Kolla-managed backup (and restore) for MariaDB e08da5f98 Handle role properly when it is changed in kolla_keystone_user module 31c958db5 Move to the latest rabbitmq d965ddf25 Run zun-api with 'root' user 27bab7909 Download binaries more securely d585aa75a [collectd] Add many plugins to collectd dockerfile 444e9e7dc Pin ODL java version to 8 on ubuntu 451d0fc02 Increase CI image publish job to 1.5 hours e1b37f544 Add a tripleoclient container d66b3ba28 Fix Ubuntu binary aodh-base 170be6d17 Add support to deploy manila-api with Apache/wsgi f6c506df0 Revert "Use rocky tag for openstack service rather than master package" 966b0b1e3 Update reno for stable/rocky 5730d90c8 add python 3.6 unit test job 19ebea25c switch documentation job to new PTI 41720b51b Fix doc8 failures 452f9d503 import zuul job settings from project-config 75c300381 help: added dot at the end of base-arch description 0f14b3d7e Fix bluestore disk naming format in kolla 0b2682e48 Configure sudoers for zun containers a708c7cbb Add networking-generic-switch to neutron-server 863f565b0 horizon: regenerate compressed javascript and css on configuration changes e4b371fbe Update kubernetes-entrypoint v0.1.1 to 0.3.0 065651a3f Revert the patch set "Apply Swift rolling upgrade" 1fdef7d23 Update Kubernetes v1.9.4 to v1.11.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 3 +- .stestr.conf | 2 + .testr.conf | 7 - .zuul.d/base.yaml | 17 +- .zuul.d/centos.yaml | 34 +- .zuul.d/oraclelinux.yaml | 12 +- .zuul.d/project.yaml | 15 +- .zuul.d/ubuntu.yaml | 20 +- README.rst | 26 +- .../monasca-template-overrides.j2 | 3 + deliverables.yaml | 2 +- .../template-override/opendaylight-source.rst | 3 - .../barbican-keystone-listener/Dockerfile.j2 | 4 +- .../ceilometer-notification/Dockerfile.j2 | 4 +- .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 4 +- .../designate-backend-bind9/Dockerfile.j2 | 6 +- .../designate/designate-pool-manager/Dockerfile.j2 | 8 +- .../keystone-fernet/fetch_fernet_tokens.py | 3 +- .../ironic-neutron-agent/Dockerfile.j2 | 15 +- .../neutron-linuxbridge-agent/Dockerfile.j2 | 4 +- .../neutron-metadata-agent-ovn/Dockerfile.j2 | 12 +- .../neutron/neutron-metadata-agent/Dockerfile.j2 | 2 +- .../neutron/neutron-metering-agent/Dockerfile.j2 | 4 +- .../neutron-openvswitch-agent/Dockerfile.j2 | 4 +- .../neutron-server-opendaylight/Dockerfile.j2 | 41 ++- .../neutron/neutron-vpnaas-agent/extend_start.sh | 8 - .../octavia/octavia-health-manager/Dockerfile.j2 | 4 +- .../prometheus-alertmanager/Dockerfile.j2 | 4 +- .../prometheus-blackbox-exporter/Dockerfile.j2 | 20 ++ .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 4 +- .../Dockerfile.j2 | 20 ++ .../prometheus-haproxy-exporter/Dockerfile.j2 | 4 +- .../prometheus-memcached-exporter/Dockerfile.j2 | 4 +- .../prometheus-mysqld-exporter/Dockerfile.j2 | 4 +- .../prometheus-node-exporter/Dockerfile.j2 | 4 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 20 ++ kolla/cmd/build.py | 23 +- kolla/common/config.py | 343 ++++++++++++--------- kolla/common/utils.py | 2 +- kolla/hacking/checks.py | 35 +++ kolla/image/build.py | 101 +++++- kolla/template/filters.py | 7 + kolla/template/methods.py | 7 +- lower-constraints.txt | 11 +- ...o_python_version-variable-3688288558f4e586.yaml | 7 + .../notes/add-cyborg-images-cab2b3a24a071c38.yaml | 4 + .../add-debian_arch-variable-9559ac31809afaca.yaml | 7 + ...i-httpd-packages-and-conf-1bea1364037cd64e.yaml | 8 + .../add-monasca-grafana-868f1dd95725a030.yaml | 6 + releasenotes/notes/add-mtail-b806e87da3ae950d.yaml | 5 + .../add-tripleoclient-image-0341fb72fe27ba14.yaml | 5 + ...e-dumb-init-config-option-26b47f6d97d7585c.yaml | 15 + .../notes/apache-image-serve-89942346ff89f767.yaml | 6 + .../notes/base-package-type-bf53d8d63611b5ac.yaml | 7 + .../clean_package_cache-fa08d1808a2f2b49.yaml | 6 + .../notes/debian-buster-7bd8be7ec4ce0d13.yaml | 6 + .../distro-package-manager-49634f537be63036.yaml | 7 + .../do-not-load-modules-9b651e40d3479c39.yaml | 4 + .../notes/get_pip-macro-906a78462b216049.yaml | 4 + .../notes/mariadb-dumb-init-b23949398fd44021.yaml | 7 + .../remove-neutron-sfc-agent-181ec5dbc52ac1da.yaml | 5 + .../remove-vitrage-collector-ed76366b9bb6e8e8.yaml | 5 + .../rhel-python3-support-1078f829dc42c4d6.yaml | 5 + .../sahara-split-plugins-66e31717b7c24472.yaml | 11 + ...split-placement-from-nova-27b7ea2359c2d3ae.yaml | 8 + .../notes/stein-prelude-92e47ccd60c76325.yaml | 7 + ...-monasca-api-from-fluentd-1b653db78a8644e7.yaml | 5 + .../update-zaqar-images-95a5909b48893698.yaml | 5 + ...10.3.10-for-redhat-family-93df8bf63da25659.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + ...10.1.20-for-redhat-family-93df8bf63da25659.yaml | 4 - requirements.txt | 3 +- roles/collect-collectd/tasks/main.yml | 4 + setup.cfg | 6 +- specs/high-availability.rst | 2 +- specs/kolla-ceph-bluestore.rst | 4 +- specs/mariadb-backup-recovery.rst | 201 ++++++++++++ test-requirements.txt | 4 +- tools/deploy_aio.sh | 48 --- tools/dump_info.sh | 2 +- tools/gate_run.sh | 16 - tools/publisher.sh | 64 ---- tools/setup_Debian.sh | 2 +- tools/setup_RedHat.sh | 52 +--- tools/setup_gate.sh | 15 - tools/version-check.py | 63 ++-- tox.ini | 176 +++-------- 365 files changed, 4434 insertions(+), 2232 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f201b5b68..3c88d2d07 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ docker>=2.4.2 # Apache-2.0 -cryptography>=1.9 # BSD/Apache-2.0 @@ -12 +11 @@ oslo.utils>=3.33.0 # Apache-2.0 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0 # PSF/ZPL diff --git a/test-requirements.txt b/test-requirements.txt index 9c57027b1..fffd0c820 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ graphviz!=0.5.0,>=0.4 # MIT License -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -22 +22 @@ pytz>=2013.6 # MIT -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.2.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 22 21:37:48 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:37:48 -0000 Subject: [release-announce] kolla-ansible 8.0.0 (stein) Message-ID: We are pumped to announce the release of: kolla-ansible 8.0.0: Ansible Deployment of Kolla containers This release is part of the stein release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 8.0.0 ^^^^^ Upgrade Notes ************* * Updates the minimum required version of Ansible to 2.5. * The Keystone fernet key rotation scheduling algorithm has been modified to avoid issues with over-rotation of keys. The variables "fernet_token_expiry", "fernet_token_allow_expired_window" and "fernet_key_rotation_interval" may be set to configure the token expiry and key rotation schedule. By default, "fernet_token_expiry" is 86400, "fernet_token_allow_expired_window" is 172800, and "fernet_key_rotation_interval" is the sum of these two variables. This allows for the minimum number of active keys - 3. See bug 1809469 for details. Deprecation Notes ***************** * Deprecates support for deploying Ceph. In a future release support for deploying Ceph will be removed from Kolla Ansible. Prior to this we will ensure a migration path to another tool such as Ceph Ansible is available. For new deployments it is recommended to use another tool to deploy Ceph to avoid a future migration. This can be integrated with OpenStack by following the external Ceph guide. Bug Fixes ********* * Adds system hostnames to "/etc/hosts", if different from short hostnames. This can fix live migration of Nova instances in some contexts. See bug 1830023 for details. Other Notes *********** * While Kolla Ansible now avoids duplicating Nova cells when messaging or database connection information are changed, operators of existing deployments should perform a manual cleanup of duplicate cells using the "nova-manage cell_v2" command from a container running the "nova_api" image, leaving only two cells, one named "cell0" and another one with the right connection information. Changes in kolla-ansible 7.0.0.0rc1..8.0.0 ------------------------------------------ 8171b3b36 Test minimum supported and latest versions of Ansible 590a4dd2c Add Region and Multiples into default globals.yml d62e927da During deploy, always sync DB 3de7913a0 Language tweaks in multi-region docs for clarity da6acef6c init-runonce: make public1 network optional 365565efa Update designate-guide cli command for dns_domain 8149433ad Exit on failure in init-runonce 1642a3ca7 Fix nova deploy with Ansible<2.8 53dc70d72 Deprecate Ceph deployment b0e542b48 fixed spelling of 'Bootstrapping' in tools/kolla-ansible c38c15e5b CI: add periodic-stable-jobs Zuul project template ae2c2fc30 Bump minimum Ansible version to 2.5 d0a7648af CI - remove unused setup scripts e04a1262c Specify endpoint when creating monasca user a50549719 Wait for all compute services before cell discovery 59604b398 Add upgrade-bifrost command 99cd5ec10 Wait for mariadb to stop after shutdown 61406fe92 Don't rotate keystone fernet keys during deploy 25befa3d2 CI: set the same gate queue for kolla and kolla-ansible 7e5c0ab31 CI: Keep stderr in ansible logs 217de2bd5 CI: Use template-overrides.j2 from kolla 5c91b8a99 Revert "CI - remove unnecessary logic when building images for upgrade" 6b77e5a92 Enable deflate when using tls for horizon 3f4d10614 Updating Jinja filters to conform to Ansible 2.5+ 920943b7e Check for 'become' in tasks that use Docker in pep8 a11d37638 Use become for all docker tasks ff8dff655 Disable and remove OracleLinux CI jobs ed3d1e37f Avoid parallel discover_hosts (nova-related race condition) 96a96a265 Restart all nova services after upgrade 282ff67c7 Make nova external ceph key extraction tasks non-changing 613454abe Make cron jobs generator command task in keystone non-changing 08cf94546 CI - remove unnecessary logic when building images for upgrade 9b5d1407a Replace merge_configs with merge_yaml for merge mongodb.conf 7eb9e8023 Make Ceph upgrade check Ceph release to avoid EPERM 8cbe09f6f Remove obsolete roles middleware 42cf3d327 Remove heat_watch_server_url configuration option 7d1de18c4 Fix mongo command for supporting other port 367ca9356 Fix placement log perms in config.json 370921b35 Fix mongo command for checking replication status 5045d901f Fix issue finding custom, host specific plugins 56239fcfc Add blazar to fluentd aggregation af0431015 [heat] Multi-region support for bootstrap c98c4ba24 Fix Blazar Nova aggregate in multi-region setup 36d5c6286 Hide logs when looping over passwords d87904a58 Support multi-region discovery of Nova cells 65bb58843 Fix monasca grafana organisation check 87476392c Fixes VMTP deploys. dd6408dbc Elevate privileges for copying gnocchi policy.json e25650c5b Update service_provider for FWaaS v2 8d260e0e3 Add ansible_nodename (system hostname) to /etc/hosts 8e627c1ee Fix keystone fernet key rotation scheduling 1a6e9f7e9 Add unit test for keystone fernet cron generator b2fbeddc2 Do not create Keystone domain-specific config directory if useless f9948e0a3 Stop duplicating Nova cells c532223d6 Make "Check if firewalld is installed" task quieter a4e9e392e Make bootstrap more idempotent 32150986f Fix docs - do not mention the old, deprecated CLI clients 44817148c Fix docs - simply run the script instead of sourcing it bd450bda6 Test Ceph upgrade in CI 261de9e33 Fix the deploy guide build failed 69cfe81ad Spelling mistake in manila.conf.j2 6765d20ce Set kolla_source_version to stein 615028f35 nova: Fix DBNotAllowed during compute startup ba976005e there is no easy_install in Debian 'buster' 5973d9917 Fix quickstart for virtual environments ff186dbe9 Fix bifrost tests (Stein) c6ad00b91 Pin ARA to <1.0.0 and use stable setup interface to find callback plugin a5cd62239 Set log message field name in Monasca Fluentd plugin 5917e0824 Tiny fix of quickstart guide f50e331e1 CI Test: Support being source of a Ceph upgrade 2165dc6e1 Fix periodic CI jobs fe19df124 Fix issues obtaining Keystone token with Monasca Grafana d5f51d840 Check if glance_upgrading is defined before using it abb508777 Set external web URL for Prometheus services 2a673b311 Increase retries numbers of grafana check task 6d8c35b30 OpenDev Migration Patch 87febca79 Fix ubuntu binary deploys 60db14633 Add become for prometheus-openstack-exporter tasks 7c9827938 Add non-voting binary deploy jobs 14148f109 Change heat bootstrap to use internal API interface 17a634af5 Don't use easy_install on Ubuntu 18+ 16e982401 Use ironic inspector 'dnsmasq' PXE filter by default b13310d5b Update quickstart instructions b1f65cdfa Make monasca notification templates optional 89224eecc Update UPPER_CONSTRAINTS_FILE for stable/stein 63338079c Update .gitreview for stable/stein 524f969bf Use database_address and database_port var for mariadb check 8c4ab41ff Check configuration file permissions in CI a4bb8567d Fix up config file permissions on the host 313d7871a Use ipc_mode: host for manila share 4bdb0f357 Change action to kolla_action 3a6a9384c Tidy up release notes for Stein release dd97c7868 add version to OPENSTACK_KEYSTONE_URL 2a6070b96 Add support for ovsdb conversion c23c9b2c2 Test upgrades in CI c0a3970e3 Removing '/certificates' entry in generate.yml as this causes an incorrect path when generating certificates. adb02958e Retry perform a synced flush task while upgrading elasticsearch 47a2c5a85 update the event_connection to connection for panko 6b0be5c5b Remove recurse: yes for owner/perms on /etc/kolla ab04ab931 Bump up timeout for ceph jobs b25c0ee47 Fix MariaDB 10.3 upgrade 192dcd1e1 Fix booting instances after nova-compute upgrade 98df4dd84 Update openstack_previous_release_name to rocky c70d80666 Add mising handlers for external Ceph. e956cd87c Wait for cinder volume to become available in CI 55633ebf9 Fix neutron rolling upgrade 779a8013c Fix placement-api WSGI error 5629b5aad Fix swift reconfigure 58d6dc3bc Don't pull images during upgrade 39410b019 Run jobs on bionic instead of xenial 5b4e48769 Standardise Prometheus install type 40497507e Use endpoint_override for nova-compute-ironic a103ed7c0 Use service-specific _install_type variables in wsgi scripts 2fc6d4cfc Split placement from nova 85f7da979 Fix action_plugins python3 compatibility fc4aeeb1a Add lower-constraints.txt to irrelevant-files a781c6431 Support separate Swift storage networks d19609650 Update programming language mentioned in setup.cfg 16900c2e3 Add ceilometer_ipmi container into ceilometer role 6722e1846 ubuntu: update configuration Stein UCA 42dd7784d Fix failure to mount cephfs 14ab9a7c4 Support the prometheus elasticsearch exporter 958efcef7 Fix Neutron precheck to not fail with newer Docker 89e91b69b cmd: Extract methods to allow import from external 3bb4c1998 Fix kolla-docker possible undefined variable 251945169 Edit ansible script for deploy kibana 1b5353593 Fix bootstrap-servers on Ansible 2.6+ e5d564136 Fix format file message field c8a22f109 Support customising Fluentd formatting ed2fd243d Add cyborg to kolla-ansible f637d139d Fix tempest.conf permissions d46635598 Remove redundant copying of Fluentd input files 1d9f4f9ff Added ability to skip enabled backends pre-check 3ee1a7ce3 Allow horizon listening port to be different than reachable port f8a1a716a Allow gnocchi services to use independent hostnames 1ebb1ccee Allow aodh services to use independent hostnames d0fc1ec27 Allow heat services to use independent hostnames d1d1837c2 Allow ironic services to use independent hostnames 31ed556e6 Allow swift proxy server to use independent hostnames b6c31862a Allow senlin services to use independent hostnames 55702739d Allow octavia services to use independent hostnames 857871df0 Allow barbican services to use independent hostnames 76b6d41e5 Allow designate services to use independent hostnames 45bde4b9b Allow cinder services to use independent hostnames 2e4e60503 Use keystone_*_url var in all configs 008e2b15e Deploy Sahara with unversioned endpoints 7d9cb44d1 Restart containers when ceph.conf changed c41c9a0ce Add cinder-lvm CI job 1c22da32f Use new cinder target_helper option 280761394 Use become for Cinder LVM precheck e8f6a4aa1 Use prometheus tag for OpenStack exporter a55769b00 Update arguments for starting Prometheus exporters fba5e1ce7 Update links in docs to latest 4aed04409 Default to Prometheus tag for all Prometheus images db052b7d1 Drop py35 jobs 3a5ef38f3 Add elasticsearch_datadir_volume 54965c878 Improve standalone ironic support 3f01c7c7c Add haproxy stats to gate logs 54203843d Configure region_name_for_services in heat.conf ff28cf506 Fix location of hostdirs for Murano services e2ed30231 Parse Monasca Log API timestamps correctly 10ec566f5 Make Kafka maintenance easier f77c67fa0 [Vitrage] Add Prometheus datasource configuration be339ed73 add python 3.7 unit test job 4a127d4bd designate: Correctly match hostnames 1e2a1a8fe Fix rabbitmq reconfigure, simplify role 38c0a4f2d Fix MariaDB bootstrap issues on CentOS ecf000960 Automate Monasca documentation for configuring Kafka e65f4ec7c Karbor providers managed from deployment node 6c6759e9a Fix link to Manila Guide cdfc0442e add debug option to ceph mon or osd start command 13589484d disable cinder-backup caused deploy failed 189af13ba Fix py35/py36 and k-a-ubuntu-source gate jobs bece976b9 Allow keystone services to use independent hostnames 255fff02b Allow neutron services to use independent hostnames a819ef121 Allow glance services to use independent hostnames 51c9e1b63 Allow nova services to use independent hostnames 0d32b76a3 haproxy: Support for external IPv6 (VIP) cce2c53eb Option "scheduler_default_filters" from group "DEFAULT" is deprecated. 1989cfe10 Optimize reconfigure action for iscsi ae8d085ea Add missing dirs 6fbc9008f remove pep8 from lower-constraints.txt 4d6464669 Set [pxe] tftp_server in ironic.conf f32ea96cd Add zookeeper info to README 9dbd30078 updating Designate docs with Infoblox configuration 93e5e8e63 Link kolla_log volume dir to /var/log/kolla 3d3f5f161 add ulimit support for kolla_docker 7e8567702 Remove Vitrage Collector 2520a421b Add support for Infoblox in Designate role 19edefaf9 Fix missing transport_url for ironic inspector 7f839d725 oslo.config>=5.2.0 which is a dependency of kolla-ansible requires rfc3986>=1.2.0 6c64b7c73 [prometheus] Support the prometheus openstack exporter ff2928407 Nics for dpdk should be binded to proper dpdk driver 9c906a175 Wait for volume attachment in CI before detach 023334dfc optimize qemu.conf d35f9a4b7 repair ceph_nfs container start failed 43c83b51c Fix reconfigure of neutron ml2_conf.ini d39ba689a Update tacker CLI to openstack CLI in cleanup-tacker 54761726c Run Zun job on kuryr's changes a98c06f1f kuryr: use internal neutron endpoint 199133a9c Correct two wrong words 03d27cb8d Add ceph docs note about rgw keystone integration. 65aa706a4 Use kolla-ansible version to tag images 30f8511cd Fix command connect to replica set primary 4ff993c45 Doc: Update Kolla Ceph document for mixed Ceph OSD deployment d55129d12 Update the remain hacking version for lower-constraints 683f65aaf Fix Telegraf configuration template 043943117 Use _install_type instead of kolla_install_type e4e4a69df Cleanup glance-registry 91e17b23d Add documentation for bootstrap-servers command 6d876934e Add customizable gnocchi volume 6786bc5b7 Add Kolla Ceph filestore CI jobs 3ea51cefe Allow separate listen port in haproxy-config templates 8d5355dbc Fix bootstrap prometheus container location b41309ef1 Update hacking version 4939fc28d remove cinder v1 endpoint 7ace98d97 hinese quotes 90fd7aa03 Fix Vitrage wrong configuration b1d7a8ad2 Add missing transport_url config 5c771df7d Add become for Octavia configuration tasks 18dd74ac8 Allow custom horizon policy files for disabled openstack projects. 535aba79a Add NFV orchestration services CI job 69823f869 Add become for Prometheus configuration tasks e73fe77d7 Use template for lower-constraints 362b6ee40 Test zun container creation in gates 144d9bbc2 Support list of controller ip for the amphorae heartbeat receiver 8d523dabd Add kolla-ansible to zuul job dependencies 005458d67 [Designate] Configure named to also listen on 'dns_interface' 0c8b4730a Fix prometheus prechecks for haproxy and memcached 48aea5637 Support Docker CE in bootstrap-servers f77cc87e8 Add support for Quobyte backend to Cinder and Nova 838cffd9c Configure vitrage notification topic 10d33f82b Find Monasca agent plugins locally c5d1e1d5f Call Grafana APIs only once 365bb5177 Create cells before starting nova services 072947225 Make Rabbitmq config files overridable 4deefe3e9 remove unused library 4b273eeee Change xtrabackup to mariadb-backup for mariadb 10.3 55bf29ec6 Add cache configuration for ceilometer project 835368524 Add Prometheus as Vitrage datasource 56b4352f9 Fix fact gathering with --limit 5d8403bdc Scalability improvements for disabled services 077cc3eeb change the state value from installed to present 846c15d8e Allow set tty for containers 6f020a048 Fix glance configuration when using external ceph ef3df5522 Change openstack-dev to openstack-discuss f8f974812 Option neutron_plugin_agent: "opendaylight" added a16d78711 Allow operators to customise Nova vendor info a47f70103 Add note to external ceph docs for pools/keyrings 4812d4a7a Fix section trustee of sahara.conf fca91fe83 Factor out OpenStack release detection playbook b439d48ab Fix section keystone_authtoken of sahara.conf 22284676f Fix Karbor endpoints 4bb5b3354 Set region_id for karbor_client 33ee19611 Update the reference of External MariaDB 1795ea895 Add ironic_dnsmasq_interface parameter to globals.yml 209d9c768 Fix karbor upgrade d15491986 Remove the memcache container restart 1a682fab2 Support stop specific containers d6fe6fb7e Make the monasca support deploy separated 02295e728 Rework documentation into more specific folder f704a7802 Add new option to perform an on-demand backup of MariaDB 377222bb0 Add YAML format into docs for policy file 03fd9715c Remove the deprecate the Glance Registry a86834e01 Document glance service cc9dae4de Add glance-cache support 5753a569c Load configfs kernel module for iscsid a5badc89f Add neutron metering role into kolla-ansible d0122fff6 Add jmespath to requirements.txt 4418c1641 Support Ironic Inspector dnsmasq PXE filter 76482c9a6 Fix fluentd input log parser for OpenDaylight a7dbc3924 Suppress log copy output in gates 5bbecaa3e Fix "Error: Connection activation failed: Failed to find a compatible device for this connection" 205df6949 Add missing steps to Vagrant instructions 9223deeec Use correct variable for default certificate paths 03788e17d Set "no_log" for "databases user and setting permissions" tasks 1f3041480 Update the openstack_release c64584195 update gather_facts to false for storm 07d535181 Use openstack command in CI a3da49488 Replacing the HTTP protocal with HTTPS 22d3857ce add monitoring of zookeeper 62222abc3 Freezer: Update freezer driver with elasticsearch 26af377a3 Refactor tests/templates/globals.yml daf5a637a Add monitoring of redis 1c9995779 Edit document for cinder guide 8935f28eb Update docs for monasca-grafana 75d095b64 Automatically configure Monasca Grafana datasource cfc86645c Collect StatsD metrics from Monasca services 9257c1846 Add logs_dir to kolla-ansible CI jobs 2e629ea86 Add Monasca quickstart guide c9c7f3dc8 Add action plugins and modules to coverage report f783505e6 Add cover job db4e25836 Deploy mistral-event-engine service f92de48c2 Refactor CI testing scripts 0cc175ac1 Support deploying storm worker and storm nimbus separately cf609ba3c Remove deprecated compute groups 7ebf548ff Set ramdisk logs path for ironic inspector 476a88052 Remove stestr from requirements.txt aae1b1d0a Add python 3.6 unit test job badb41a49 Support merging nested yaml config cf70bf23a Configure coordination in default for cinder when redis is enabled 6db3f9f34 Disable ceph osd crush update on start in default 48bae90e8 Don't allocate pseudo-TTY when creating containers 6191c775c Ensure keystone endpoint is updatable 712c89760 Add support for deploying Monasca Grafana 6cbb5cbdb Support using external DBs in Monasca 195fec4d8 Add missing HAProxy port checks for Monasca c7aabfdfe Enable Kibana if Monasca enabled 843b7a3a9 Add missing project name for Monasca 58f5c9e03 Add documentation for Monasca standalone deployment ab901a6d6 Support external Keystone in Monasca e9a196f78 Monasca specific config for Fluentd 8cd2a793b Add initial documentation for Monasca b7b45effe Support deploying the Monasca Agent ac6615543 Update min tox version to 2.0 28287826e Make tunnel timeout for nova_serialconsole_proxy configurable 4e5ae36c5 Apply Swift rolling upgrade ac5d5217f Apply Neutron rolling upgrade logic 8ee47ae3a Merge the merge_yaml and merge_config module into one 9d8a5a1a8 Add missing pid mode check for Prometheus 489603175 Don't set recurse on config folders b37cc1775 fix misspelling of "configuration" 04c34235d Add missing keystone_authtoken section for vitrage 2fde95ca0 fixed memcached is not restarted when config changed a080bb100 Allow the deployment group to be optional 6df1b2061 Add missing project_name variables 6898d7628 Use kibana instead of Kibana as project_name c1acb6564 Fix template src of kibana configuration file 864e58980 nova: add support for a dedicated migration network 1192f93f6 Fix keystone domains directory permissions c96633d45 Make custom kibana configuration files possible 4dd457375 Allow custom mongodb configurations 3b13304b5 Make the reconfigure action works a737296a9 Fix the zun-wsproxy group missing in site.yml f57c1aec6 Add Zun scenario job for ubuntu 72c9d2cbf Ignore doc build path 35a21b071 Fernet cron path 9691d5300 Use openstackclient instead of neutronclient 574b02216 Make the neutron container restart when it changed 13f8aef9f Optimize reconfiguration for multipathd 155a16f6c fix misspelling of "configuration" a8d27f5a0 Update the links to https 4b2d2cc12 Enable setting of ceilometer as a non-root user 224125bf5 Add Aodh evaluation_interval bb91cf0ff Add the missing Monasca's url b85430832 Fix on setting enable_openvswitch 58eec5ca1 Forward system logs to Monasca Log API 3cac11559 Remove deprected notification_topics option bd54b9913 Constrain the size of Docker logs 778dba94a Load known, standard kernel modules from the host, not within containers 5bfcb5842 Fix transport_url vhost 242625dff Generate Ceph configuration during upgrade 47136af54 Update log metrics config for Logstash downgrade 0992c6b55 Support using binary Logstash image 063518d07 Update Monasca Log Transformer config 380418f35 Update Monasca Log Persister config b1dee2d85 Increase maximum payload size for Monasca Log API 0cae7d9b3 Prevent Monasca Notification using YAML mode 1feb6b6aa Support custom monasca-notification templates 218cbc228 Don't quote {posargs} in tox.ini 86c279a0e Disable InfluxDB reporting 9a1c90643 Fix bug in deploying ceilometer using dev mode d3d83db0e Make the aodh support deploy separated 22bf7997b Support Octavia custom policy 8b292c99b Git checkout version support for several projects 48e9898ab [nova] Fix missing blacklist permission. 6526efe61 Add Quobyte cinder backend spec 8399fc781 Don't use 'become' in CI tests b50917fe2 Fix non-root reconfiguration with ceph enabled 5beece250 Fix Cinder backup driver 12e644f4f Add become for Cinder configuration tasks 29cf8baba Fix haproxy server config for memcached backends 8736817a9 openvswitch: always run handler to to ensure OVS bridges are up 58eb07ec2 Use iptables as section header instead of firewall eaa9815ad Remove '.. end' comments 2af1d1d95 Improve registration of Monasca InfluxDB database 645853bce Add region to Monasca Log API 9c2e0b81d Support configuring Monasca Persister performance 6b4cd657a Add missing Monasca persister and notification dimensions fddbbbbdc Support deploying Monasca Persister c502e0b17 Add some missing parameters for Monasca Notification da1fa3f57 Support deploying Monasca Notification engine b6cce3e3f Support deploying Monasca Thresh 516b0dd34 Support deploying an Apache Storm cluster 8e635db8f Allow fluentd to read barbican-api.log f1c813655 Refactor haproxy config (split by service) V2.0 1ae10375f Support deploying Monasca Log Metrics 01da93841 Support configuring Monasca log pipeline performance 2b34f6d2f Improve scalability of Kafka 0a9002028 Remove Kafka partitions config option 79da68fab Fix missing slash at mount volumes for prometheus-cadvisor 331d2f053 Add swift as gnocchi storage option 652b78fc5 Fix POST_FAILURE in CI when ARA DB doesn't exist dfd372b6e Revert commit of fixing ceph gates b163cb02d Update rabbitmq to use new conf & clustering fdb5e3348 Fix aodh task name e50d18e4f Provide support for freezer dev mode in kolla ebf4afdad Move the ironic-check action into prechecks.yml 4c0656e10 Use alembic migrations to bootstrap Monasca database ed8a7b7b8 Increase CI job timeout to 2 hours c79c5d1f3 Apply Nova rolling upgrade logic 008d45b8d Add support Octavia network interface 2d711bc86 Update the inner-compute name a05e77d71 Allow disabling keepalived for external LBs 6d5cf09f7 Fix the zookeeper group missing when run tests 55455cdde Rework ceph-guide bluestore/filestore sections 292f7c22e Allow configure java params for ODL karaf fffdc6b3e Remove_images in kolla_docker module d57c7019a Make haproxy proxy to the right glance_api backend 34474decb Change the owner of the wsgi-zun.conf to zun 1b4430314 Allow custom fluentd input configurations 8219542f8 Fix the syntax issues of ovs-dpdk 2f6b1c689 Create /volumes when using external ceph ee7a29cf0 Remove compute hosts from etcd group f7c208084 Update reno for stable/rocky 354894e2e Add check.yml for prometheus and vitrage d29ecbd64 Run etcd on controller node only 1e26b05fe fix condition of kibana pull action cc5c34721 Fix Copying 10-rest-connector.xml task 4e5e28fff Fix bluestore disk naming format in kolla-ansible 0b0b2b39d Provide support for nova dev mode in kolla 0d03fc278 Temporarily remove the rabbitmq clusterer plugin 0ec41f209 [prometheus] Allow custom alert rules to be configured. 6e17f942b Improve ODL configuration 5bc3e1928 Remove when condition in roles/swift/tasks/deploy.yml 47d88430c Switch to stestr 9d2770db1 [prometheus] Enable ceph mgr exporter a0f63b034 Add missing `enable_horizon_fwaas` variable 26682ea78 ovs-dpdkctl.sh function list_dpdk_nics only grabs the first nic Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 3 +- .stestr.conf | 4 + .testr.conf | 7 - README.rst | 16 +- ansible/action_plugins/merge_configs.py | 39 +- ansible/action_plugins/merge_yaml.py | 51 +- ansible/bifrost.yml | 18 +- ansible/detect-release.yml | 16 + ansible/gather-facts.yml | 44 + ansible/group_vars/all.yml | 218 ++- ansible/inventory/all-in-one | 99 +- ansible/inventory/multinode | 99 +- ansible/kolla-host.yml | 35 +- ansible/library/bslurp.py | 16 +- ansible/library/kolla_container_facts.py | 8 +- ansible/library/kolla_docker.py | 178 ++- ansible/library/kolla_toolbox.py | 12 +- ansible/library/merge_configs.py | 51 - ansible/library/merge_yaml.py | 51 - ansible/mariadb_backup.yml | 11 + ansible/mariadb_recovery.yml | 18 +- ansible/post-deploy.yml | 2 +- ansible/roles/aodh/defaults/main.yml | 38 +- ansible/roles/aodh/tasks/bootstrap.yml | 4 +- ansible/roles/aodh/tasks/config.yml | 2 +- ansible/roles/aodh/tasks/loadbalancer.yml | 7 + ansible/roles/aodh/tasks/precheck.yml | 3 +- ansible/roles/aodh/tasks/register.yml | 2 + ansible/roles/aodh/templates/aodh.conf.j2 | 18 +- ansible/roles/aodh/templates/wsgi-aodh.conf.j2 | 16 +- ansible/roles/barbican/defaults/main.yml | 19 +- ansible/roles/barbican/tasks/bootstrap.yml | 4 +- ansible/roles/barbican/tasks/check.yml | 3 + ansible/roles/barbican/tasks/loadbalancer.yml | 7 + ansible/roles/barbican/tasks/precheck.yml | 3 +- ansible/roles/barbican/tasks/register.yml | 3 + ansible/roles/barbican/tasks/stop.yml | 6 + .../roles/barbican/templates/barbican-api.ini.j2 | 2 +- .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 10 +- ansible/roles/baremetal/defaults/main.yml | 68 +- ansible/roles/baremetal/tasks/install.yml | 56 +- ansible/roles/baremetal/tasks/post-install.yml | 13 +- ansible/roles/baremetal/tasks/pre-install.yml | 112 +- .../roles/baremetal/templates/docker_apt_repo.j2 | 6 - .../baremetal/templates/docker_systemd_service.j2 | 2 +- .../roles/baremetal/templates/docker_yum_repo.j2 | 6 - ansible/roles/bifrost/defaults/main.yml | 2 + ansible/roles/bifrost/tasks/bootstrap.yml | 3 + ansible/roles/bifrost/tasks/deploy-servers.yml | 2 + ansible/roles/bifrost/tasks/reconfigure.yml | 1 + ansible/roles/bifrost/tasks/stop.yml | 35 + ansible/roles/bifrost/tasks/upgrade.yml | 5 +- ansible/roles/blazar/defaults/main.yml | 11 + ansible/roles/blazar/tasks/bootstrap.yml | 6 +- ansible/roles/blazar/tasks/loadbalancer.yml | 7 + ansible/roles/blazar/tasks/precheck.yml | 1 + ansible/roles/blazar/tasks/register.yml | 2 + ansible/roles/blazar/tasks/stop.yml | 6 + ansible/roles/blazar/templates/blazar.conf.j2 | 4 +- ansible/roles/ceilometer/defaults/main.yml | 20 +- ansible/roles/ceilometer/handlers/main.yml | 27 + ansible/roles/ceilometer/tasks/clone.yml | 2 +- ansible/roles/ceilometer/tasks/config.yml | 9 +- ansible/roles/ceilometer/tasks/register.yml | 2 + ansible/roles/ceilometer/tasks/stop.yml | 6 + .../ceilometer/templates/ceilometer-ipmi.json.j2 | 30 + .../roles/ceilometer/templates/ceilometer.conf.j2 | 11 +- ansible/roles/ceph/defaults/main.yml | 19 +- ansible/roles/ceph/tasks/bootstrap_osds.yml | 2 + ansible/roles/ceph/tasks/config.yml | 13 + ansible/roles/ceph/tasks/deploy.yml | 1 + ansible/roles/ceph/tasks/distribute_keyrings.yml | 14 + ansible/roles/ceph/tasks/loadbalancer.yml | 7 + ansible/roles/ceph/tasks/main.yml | 12 + ansible/roles/ceph/tasks/precheck.yml | 1 + ansible/roles/ceph/tasks/reconfigure.yml | 4 + ansible/roles/ceph/tasks/start_ceph_dashboard.yml | 1 + ansible/roles/ceph/tasks/start_mdss.yml | 5 +- ansible/roles/ceph/tasks/start_mgrs.yml | 10 +- ansible/roles/ceph/tasks/start_osds.yml | 1 + ansible/roles/ceph/tasks/start_rgw_keystone.yml | 3 + ansible/roles/ceph/tasks/stop.yml | 70 + ansible/roles/ceph/tasks/upgrade.yml | 20 +- ansible/roles/ceph/templates/ceph-mon.json.j2 | 2 +- ansible/roles/ceph/templates/ceph-nfs.json.j2 | 2 +- ansible/roles/ceph/templates/ceph-osd.json.j2 | 2 +- ansible/roles/ceph/templates/ceph.conf.j2 | 7 +- ansible/roles/ceph/templates/ganesha.conf.j2 | 1 - ansible/roles/ceph_pools.yml | 13 + ansible/roles/certificates/defaults/main.yml | 3 + ansible/roles/certificates/tasks/generate.yml | 24 +- ansible/roles/chrony/tasks/stop.yml | 6 + ansible/roles/cinder/defaults/main.yml | 51 +- ansible/roles/cinder/handlers/main.yml | 6 + ansible/roles/cinder/tasks/bootstrap.yml | 4 +- ansible/roles/cinder/tasks/ceph.yml | 23 +- ansible/roles/cinder/tasks/check.yml | 2 + ansible/roles/cinder/tasks/config.yml | 22 + ansible/roles/cinder/tasks/deploy.yml | 18 +- ansible/roles/cinder/tasks/external_ceph.yml | 24 +- ansible/roles/cinder/tasks/loadbalancer.yml | 7 + ansible/roles/cinder/tasks/precheck.yml | 8 +- ansible/roles/cinder/tasks/register.yml | 5 +- ansible/roles/cinder/tasks/stop.yml | 6 + ansible/roles/cinder/tasks/upgrade.yml | 7 +- ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 10 +- ansible/roles/cinder/templates/cinder.conf.j2 | 40 +- ansible/roles/cloudkitty/defaults/main.yml | 11 + ansible/roles/cloudkitty/tasks/bootstrap.yml | 4 +- ansible/roles/cloudkitty/tasks/loadbalancer.yml | 7 + ansible/roles/cloudkitty/tasks/precheck.yml | 1 + ansible/roles/cloudkitty/tasks/register.yml | 3 + ansible/roles/cloudkitty/tasks/stop.yml | 6 + .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 4 +- .../cloudkitty/templates/wsgi-cloudkitty.conf.j2 | 4 +- ansible/roles/collectd/defaults/main.yml | 2 + ansible/roles/collectd/tasks/stop.yml | 6 + ansible/roles/common/defaults/main.yml | 2 + ansible/roles/common/handlers/main.yml | 3 + ansible/roles/common/tasks/bootstrap.yml | 7 + ansible/roles/common/tasks/config.yml | 77 +- ansible/roles/common/tasks/stop.yml | 6 + ansible/roles/common/templates/admin-openrc.sh.j2 | 2 +- .../conf/filter/00-record_transformer.conf.j2 | 22 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 5 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 9 +- .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/format/wsgi_access.conf.j2 | 2 +- .../templates/conf/format/wsgi_python.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 3 +- .../templates/conf/input/08-opendaylight.conf.j2 | 11 + .../common/templates/conf/output/00-local.conf.j2 | 32 +- .../templates/conf/output/02-monasca.conf.j2 | 14 + .../common/templates/cron-logrotate-cyborg.conf.j2 | 3 + .../templates/cron-logrotate-opendaylight.conf.j2 | 3 + .../common/templates/cron-logrotate-storm.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 60 +- ansible/roles/congress/defaults/main.yml | 11 + ansible/roles/congress/tasks/bootstrap.yml | 4 +- ansible/roles/congress/tasks/loadbalancer.yml | 7 + ansible/roles/congress/tasks/precheck.yml | 1 + ansible/roles/congress/tasks/register.yml | 2 + ansible/roles/congress/tasks/stop.yml | 6 + ansible/roles/congress/templates/congress.conf.j2 | 4 +- ansible/roles/cyborg/defaults/main.yml | 77 ++ ansible/roles/cyborg/handlers/main.yml | 75 + ansible/roles/cyborg/meta/main.yml | 3 + ansible/roles/cyborg/tasks/bootstrap.yml | 36 + ansible/roles/cyborg/tasks/bootstrap_service.yml | 20 + ansible/roles/{stop => cyborg}/tasks/check.yml | 0 ansible/roles/cyborg/tasks/clone.yml | 7 + ansible/roles/cyborg/tasks/config.yml | 129 ++ ansible/roles/cyborg/tasks/deploy.yml | 14 + ansible/roles/cyborg/tasks/loadbalancer.yml | 7 + ansible/roles/cyborg/tasks/main.yml | 2 + ansible/roles/cyborg/tasks/precheck.yml | 18 + ansible/roles/cyborg/tasks/pull.yml | 11 + ansible/roles/cyborg/tasks/reconfigure.yml | 2 + ansible/roles/cyborg/tasks/register.yml | 34 + ansible/roles/cyborg/tasks/stop.yml | 6 + ansible/roles/cyborg/tasks/upgrade.yml | 7 + .../roles/cyborg/templates/cyborg-agent.json.j2 | 24 + .../roles/cyborg/templates/cyborg-api-paste.ini.j2 | 19 + ansible/roles/cyborg/templates/cyborg-api.json.j2 | 30 + .../cyborg/templates/cyborg-conductor.json.j2 | 24 + ansible/roles/cyborg/templates/cyborg.conf.j2 | 45 + ansible/roles/designate/defaults/main.yml | 31 +- ansible/roles/designate/handlers/main.yml | 1 + ansible/roles/designate/tasks/backend_external.yml | 2 + ansible/roles/designate/tasks/bootstrap.yml | 5 +- ansible/roles/designate/tasks/config.yml | 2 +- ansible/roles/designate/tasks/deploy.yml | 2 +- ansible/roles/designate/tasks/loadbalancer.yml | 7 + ansible/roles/designate/tasks/precheck.yml | 3 +- ansible/roles/designate/tasks/register.yml | 2 + ansible/roles/designate/tasks/stop.yml | 6 + ansible/roles/designate/tasks/update_pools.yml | 3 +- .../roles/designate/templates/designate.conf.j2 | 8 +- ansible/roles/designate/templates/named.conf.j2 | 3 + ansible/roles/designate/templates/pools.yaml.j2 | 33 + ansible/roles/destroy/tasks/cleanup_host.yml | 2 + ansible/roles/elasticsearch/defaults/main.yml | 12 +- ansible/roles/elasticsearch/tasks/loadbalancer.yml | 7 + ansible/roles/elasticsearch/tasks/precheck.yml | 1 + ansible/roles/elasticsearch/tasks/stop.yml | 6 + ansible/roles/elasticsearch/tasks/upgrade.yml | 4 + ansible/roles/etcd/defaults/main.yml | 6 +- ansible/roles/etcd/handlers/main.yml | 2 +- ansible/roles/etcd/tasks/config.yml | 6 +- ansible/roles/etcd/tasks/precheck.yml | 5 +- ansible/roles/etcd/tasks/pull.yml | 2 +- ansible/roles/etcd/tasks/stop.yml | 6 + ansible/roles/freezer/defaults/main.yml | 23 + ansible/roles/freezer/handlers/main.yml | 2 +- ansible/roles/freezer/tasks/bootstrap_service.yml | 2 +- ansible/roles/freezer/tasks/clone.yml | 14 + ansible/roles/freezer/tasks/config.yml | 4 +- ansible/roles/freezer/tasks/deploy.yml | 3 + ansible/roles/freezer/tasks/loadbalancer.yml | 7 + ansible/roles/freezer/tasks/precheck.yml | 1 + ansible/roles/freezer/tasks/register.yml | 2 + ansible/roles/freezer/tasks/stop.yml | 6 + ansible/roles/freezer/templates/freezer.conf.j2 | 10 +- .../freezer/templates/wsgi-freezer-api.conf.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 68 +- ansible/roles/glance/handlers/main.yml | 29 +- ansible/roles/glance/tasks/bootstrap.yml | 4 +- ansible/roles/glance/tasks/bootstrap_service.yml | 2 + ansible/roles/glance/tasks/ceph.yml | 10 +- ansible/roles/glance/tasks/check.yml | 2 + ansible/roles/glance/tasks/config.yml | 44 +- ansible/roles/glance/tasks/deploy.yml | 6 +- ansible/roles/glance/tasks/external_ceph.yml | 11 +- ansible/roles/glance/tasks/loadbalancer.yml | 7 + ansible/roles/glance/tasks/precheck.yml | 14 +- ansible/roles/glance/tasks/register.yml | 2 + ansible/roles/glance/tasks/rolling_upgrade.yml | 8 +- ansible/roles/glance/tasks/stop.yml | 6 + ansible/roles/glance/templates/glance-api.conf.j2 | 17 +- ansible/roles/glance/templates/glance-api.json.j2 | 6 + .../roles/glance/templates/glance-cache.conf.j2 | 19 + .../roles/glance/templates/glance-registry.conf.j2 | 54 - .../roles/glance/templates/glance-registry.json.j2 | 24 - ansible/roles/gnocchi/defaults/main.yml | 30 +- ansible/roles/gnocchi/tasks/bootstrap.yml | 4 +- ansible/roles/gnocchi/tasks/ceph.yml | 14 +- ansible/roles/gnocchi/tasks/config.yml | 12 + ansible/roles/gnocchi/tasks/deploy.yml | 10 - ansible/roles/gnocchi/tasks/external_ceph.yml | 14 +- ansible/roles/gnocchi/tasks/loadbalancer.yml | 7 + ansible/roles/gnocchi/tasks/precheck.yml | 3 +- ansible/roles/gnocchi/tasks/register.yml | 2 + ansible/roles/gnocchi/tasks/stop.yml | 6 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 13 +- .../roles/gnocchi/templates/wsgi-gnocchi.conf.j2 | 16 +- ansible/roles/grafana/defaults/main.yml | 11 + ansible/roles/grafana/tasks/bootstrap.yml | 2 + ansible/roles/grafana/tasks/config.yml | 1 + ansible/roles/grafana/tasks/loadbalancer.yml | 7 + ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/grafana/tasks/precheck.yml | 1 + ansible/roles/grafana/tasks/stop.yml | 6 + ansible/roles/haproxy-config/defaults/main.yml | 15 + ansible/roles/haproxy-config/handlers/main.yml | 17 + ansible/roles/haproxy-config/tasks/main.yml | 21 + .../templates/haproxy_single_service_listen.cfg.j2 | 94 ++ .../templates/haproxy_single_service_split.cfg.j2 | 120 ++ ansible/roles/haproxy/defaults/main.yml | 28 +- ansible/roles/haproxy/handlers/main.yml | 31 +- ansible/roles/haproxy/tasks/config.yml | 57 +- ansible/roles/haproxy/tasks/precheck.yml | 158 ++- ansible/roles/haproxy/tasks/stop.yml | 6 + ansible/roles/haproxy/templates/haproxy.cfg.j2 | 1431 -------------------- ansible/roles/haproxy/templates/haproxy.json.j2 | 15 +- .../roles/haproxy/templates/haproxy_main.cfg.j2 | 49 + ansible/roles/haproxy/templates/haproxy_run.sh.j2 | 10 + ansible/roles/heat/defaults/main.yml | 38 +- ansible/roles/heat/tasks/bootstrap.yml | 4 +- ansible/roles/heat/tasks/bootstrap_service.yml | 2 + ansible/roles/heat/tasks/config.yml | 1 - ansible/roles/heat/tasks/loadbalancer.yml | 7 + ansible/roles/heat/tasks/precheck.yml | 5 +- ansible/roles/heat/tasks/register.yml | 5 + ansible/roles/heat/tasks/stop.yml | 6 + ansible/roles/heat/templates/heat.conf.j2 | 23 +- ansible/roles/horizon/defaults/main.yml | 28 +- ansible/roles/horizon/handlers/main.yml | 12 +- ansible/roles/horizon/tasks/bootstrap.yml | 4 +- ansible/roles/horizon/tasks/config.yml | 16 +- ansible/roles/horizon/tasks/loadbalancer.yml | 7 + ansible/roles/horizon/tasks/precheck.yml | 3 +- ansible/roles/horizon/tasks/stop.yml | 6 + ansible/roles/horizon/templates/horizon.conf.j2 | 18 +- ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/influxdb/defaults/main.yml | 11 + ansible/roles/influxdb/tasks/loadbalancer.yml | 7 + ansible/roles/influxdb/tasks/precheck.yml | 1 + ansible/roles/influxdb/tasks/stop.yml | 6 + ansible/roles/influxdb/templates/influxdb.conf.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 41 +- ansible/roles/ironic/handlers/main.yml | 1 + ansible/roles/ironic/tasks/bootstrap.yml | 6 +- ansible/roles/ironic/tasks/config.yml | 9 +- ansible/roles/ironic/tasks/deploy.yml | 17 + ansible/roles/ironic/tasks/loadbalancer.yml | 7 + ansible/roles/ironic/tasks/precheck.yml | 5 +- ansible/roles/ironic/tasks/register.yml | 4 + ansible/roles/ironic/tasks/rolling_upgrade.yml | 3 +- ansible/roles/ironic/tasks/stop.yml | 6 + ansible/roles/ironic/templates/inspector.ipxe.j2 | 10 +- .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 4 +- .../ironic/templates/ironic-inspector.conf.j2 | 36 +- ansible/roles/ironic/templates/ironic.conf.j2 | 38 +- ansible/roles/ironic/templates/pxelinux.default.j2 | 2 +- ansible/roles/iscsi/defaults/main.yml | 56 + ansible/roles/iscsi/handlers/main.yml | 34 + ansible/roles/iscsi/tasks/config.yml | 71 +- ansible/roles/iscsi/tasks/deploy.yml | 3 +- ansible/roles/iscsi/tasks/precheck.yml | 4 +- ansible/roles/iscsi/tasks/pull.yml | 17 +- ansible/roles/iscsi/tasks/reconfigure.yml | 1 + ansible/roles/iscsi/tasks/start.yml | 49 - ansible/roles/iscsi/tasks/stop.yml | 6 + ansible/roles/iscsi/tasks/upgrade.yml | 4 +- ansible/roles/kafka/defaults/main.yml | 3 + ansible/roles/kafka/tasks/config.yml | 1 - ansible/roles/kafka/tasks/precheck.yml | 1 + ansible/roles/kafka/tasks/stop.yml | 6 + .../kafka/templates/kafka.server.properties.j2 | 15 +- ansible/roles/karbor/defaults/main.yml | 17 +- ansible/roles/karbor/handlers/main.yml | 1 + ansible/roles/karbor/tasks/bootstrap.yml | 4 +- ansible/roles/karbor/tasks/config.yml | 25 +- ansible/roles/karbor/tasks/loadbalancer.yml | 7 + ansible/roles/karbor/tasks/precheck.yml | 1 + ansible/roles/karbor/tasks/register.yml | 2 + ansible/roles/karbor/tasks/stop.yml | 6 + .../karbor/templates/karbor-protection.json.j2 | 4 +- ansible/roles/karbor/templates/karbor.conf.j2 | 9 +- .../templates/providers.d/openstack-infra.conf.j2 | 2 +- ansible/roles/keystone/defaults/main.yml | 19 + .../keystone/files/fernet_rotate_cron_generator.py | 83 +- ansible/roles/keystone/tasks/bootstrap.yml | 4 +- ansible/roles/keystone/tasks/check.yml | 1 + ansible/roles/keystone/tasks/config.yml | 28 +- ansible/roles/keystone/tasks/init_fernet.yml | 4 +- ansible/roles/keystone/tasks/loadbalancer.yml | 7 + ansible/roles/keystone/tasks/precheck.yml | 9 +- ansible/roles/keystone/tasks/register.yml | 24 + ansible/roles/keystone/tasks/stop.yml | 6 + ansible/roles/keystone/tasks/upgrade.yml | 2 + ansible/roles/keystone/templates/fernet-push.sh.j2 | 7 + .../roles/keystone/templates/fernet-rotate.sh.j2 | 6 +- .../keystone/templates/keystone-fernet.json.j2 | 9 +- ansible/roles/keystone/templates/keystone.conf.j2 | 12 +- ansible/roles/keystone/templates/keystone.json.j2 | 7 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 16 +- ansible/roles/kibana/defaults/main.yml | 17 +- ansible/roles/kibana/handlers/main.yml | 1 - ansible/roles/kibana/tasks/config.yml | 19 +- ansible/roles/kibana/tasks/loadbalancer.yml | 7 + ansible/roles/kibana/tasks/precheck.yml | 1 + ansible/roles/kibana/tasks/pull.yml | 2 +- ansible/roles/kibana/tasks/stop.yml | 6 + ansible/roles/kuryr/tasks/precheck.yml | 1 + ansible/roles/kuryr/tasks/register.yml | 1 + ansible/roles/kuryr/tasks/stop.yml | 6 + ansible/roles/kuryr/templates/kuryr.conf.j2 | 5 +- ansible/roles/magnum/defaults/main.yml | 11 + ansible/roles/magnum/tasks/bootstrap.yml | 4 +- ansible/roles/magnum/tasks/loadbalancer.yml | 7 + ansible/roles/magnum/tasks/precheck.yml | 1 + ansible/roles/magnum/tasks/register.yml | 5 + ansible/roles/magnum/tasks/stop.yml | 6 + ansible/roles/magnum/templates/magnum.conf.j2 | 6 +- ansible/roles/manila/defaults/main.yml | 13 + ansible/roles/manila/handlers/main.yml | 1 + ansible/roles/manila/tasks/bootstrap.yml | 4 +- ansible/roles/manila/tasks/ceph.yml | 6 +- ansible/roles/manila/tasks/config.yml | 15 + ansible/roles/manila/tasks/deploy.yml | 17 +- ansible/roles/manila/tasks/external_ceph.yml | 7 - ansible/roles/manila/tasks/fix_cephfs_owner.yml | 31 +- ansible/roles/manila/tasks/loadbalancer.yml | 7 + ansible/roles/manila/tasks/precheck.yml | 1 + ansible/roles/manila/tasks/register.yml | 2 + ansible/roles/manila/tasks/stop.yml | 6 + .../roles/manila/templates/manila-share.conf.j2 | 14 +- ansible/roles/manila/templates/manila.conf.j2 | 4 +- ansible/roles/mariadb/defaults/main.yml | 44 +- ansible/roles/mariadb/handlers/main.yml | 311 ++++- ansible/roles/mariadb/tasks/backup.yml | 20 + ansible/roles/mariadb/tasks/bootstrap_cluster.yml | 2 +- ansible/roles/mariadb/tasks/check.yml | 3 +- ansible/roles/mariadb/tasks/config.yml | 43 +- ansible/roles/mariadb/tasks/loadbalancer.yml | 7 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 2 +- ansible/roles/mariadb/tasks/precheck.yml | 1 + ansible/roles/mariadb/tasks/recover_cluster.yml | 74 +- ansible/roles/mariadb/tasks/register.yml | 51 + ansible/roles/mariadb/tasks/stop.yml | 66 + ansible/roles/mariadb/tasks/upgrade.yml | 28 + ansible/roles/mariadb/templates/backup.my.cnf.j2 | 6 + ansible/roles/mariadb/templates/galera.cnf.j2 | 8 +- ansible/roles/memcached/defaults/main.yml | 16 + ansible/roles/memcached/handlers/main.yml | 2 +- ansible/roles/memcached/tasks/loadbalancer.yml | 7 + ansible/roles/memcached/tasks/precheck.yml | 1 + ansible/roles/memcached/tasks/stop.yml | 6 + ansible/roles/mistral/defaults/main.yml | 27 + ansible/roles/mistral/handlers/main.yml | 26 + ansible/roles/mistral/tasks/bootstrap.yml | 4 +- ansible/roles/mistral/tasks/config.yml | 19 + ansible/roles/mistral/tasks/deploy.yml | 1 + ansible/roles/mistral/tasks/loadbalancer.yml | 7 + ansible/roles/mistral/tasks/precheck.yml | 1 + ansible/roles/mistral/tasks/register.yml | 2 + ansible/roles/mistral/tasks/stop.yml | 6 + .../mistral/templates/event_definitions.yaml.j2 | 6 + .../mistral/templates/mistral-event-engine.json.j2 | 30 + ansible/roles/mistral/templates/mistral.conf.j2 | 9 +- ansible/roles/module-load/defaults/main.yaml | 7 + ansible/roles/module-load/tasks/main.yaml | 56 + .../module-load/templates/module-load.conf.j2 | 2 + ansible/roles/monasca/defaults/main.yml | 204 ++- ansible/roles/monasca/handlers/main.yml | 182 +++ ansible/roles/monasca/tasks/bootstrap.yml | 44 +- ansible/roles/monasca/tasks/bootstrap_service.yml | 5 - ansible/roles/monasca/tasks/config.yml | 243 +++- ansible/roles/monasca/tasks/deploy.yml | 28 +- ansible/roles/monasca/tasks/loadbalancer.yml | 7 + ansible/roles/monasca/tasks/post_config.yml | 94 ++ ansible/roles/monasca/tasks/precheck.yml | 34 + ansible/roles/monasca/tasks/register.yml | 18 + ansible/roles/monasca/tasks/stop.yml | 6 + .../monasca-agent-collector/agent-collector.yml.j2 | 9 + .../monasca-agent-collector.json.j2 | 24 + .../monasca-agent-collector/plugins/cpu.yaml | 5 + .../monasca-agent-collector/plugins/disk.yaml | 7 + .../monasca-agent-collector/plugins/memory.yaml | 5 + .../monasca-agent-collector/plugins/network.yaml | 6 + .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 26 + .../monasca-agent-forwarder.json.j2 | 18 + .../monasca-agent-statsd/agent-statsd.yml.j2 | 12 + .../monasca-agent-statsd.json.j2 | 18 + .../monasca/templates/monasca-api/api.conf.j2 | 7 +- .../monasca/templates/monasca-api/wsgi-api.conf.j2 | 2 +- .../templates/monasca-grafana/grafana.ini.j2 | 55 + .../monasca-grafana/monasca-grafana.json.j2 | 23 + .../templates/monasca-log-api/log-api-paste.ini.j2 | 4 +- .../templates/monasca-log-api/log-api.conf.j2 | 13 +- .../templates/monasca-log-api/wsgi-log-api.conf.j2 | 2 +- .../monasca-log-metrics/log-metrics.conf.j2 | 76 ++ .../monasca-log-metrics.json.j2 | 18 + .../monasca-log-persister/log-persister.conf.j2 | 4 +- .../monasca-log-persister.json.j2 | 4 +- .../log-transformer.conf.j2 | 24 +- .../monasca-log-transformer.json.j2 | 2 +- .../monasca-notification.json.j2 | 25 + .../monasca-notification/notification.conf.j2 | 24 + .../monasca-persister/monasca-persister.json.j2 | 18 + .../templates/monasca-persister/persister.conf.j2 | 23 + .../monasca-thresh/monasca-thresh.json.j2 | 29 + .../monasca/templates/monasca-thresh/storm.yml.j2 | 9 + .../templates/monasca-thresh/thresh-config.yml.j2 | 170 +++ ansible/roles/mongodb/defaults/main.yml | 6 + ansible/roles/mongodb/handlers/main.yml | 3 +- ansible/roles/mongodb/tasks/bootstrap_cluster.yml | 3 +- ansible/roles/mongodb/tasks/config.yml | 8 +- ansible/roles/mongodb/tasks/loadbalancer.yml | 7 + ansible/roles/mongodb/tasks/precheck.yml | 1 + ansible/roles/mongodb/tasks/stop.yml | 6 + ansible/roles/multipathd/defaults/main.yml | 21 + ansible/roles/multipathd/handlers/main.yml | 24 + ansible/roles/multipathd/tasks/config.yml | 62 +- ansible/roles/multipathd/tasks/deploy.yml | 3 +- ansible/roles/multipathd/tasks/pull.yml | 7 +- ansible/roles/multipathd/tasks/reconfigure.yml | 1 + ansible/roles/multipathd/tasks/start.yml | 22 - ansible/roles/multipathd/tasks/stop.yml | 6 + ansible/roles/multipathd/tasks/upgrade.yml | 3 +- ansible/roles/murano/defaults/main.yml | 15 +- ansible/roles/murano/tasks/bootstrap.yml | 4 +- .../roles/murano/tasks/import_library_packages.yml | 3 + ansible/roles/murano/tasks/loadbalancer.yml | 7 + ansible/roles/murano/tasks/precheck.yml | 1 + ansible/roles/murano/tasks/register.yml | 2 + ansible/roles/murano/tasks/stop.yml | 6 + ansible/roles/murano/templates/murano.conf.j2 | 10 +- ansible/roles/neutron/defaults/main.yml | 49 +- ansible/roles/neutron/handlers/main.yml | 165 ++- ansible/roles/neutron/tasks/bootstrap.yml | 4 +- ansible/roles/neutron/tasks/bootstrap_service.yml | 2 + ansible/roles/neutron/tasks/config.yml | 30 +- ansible/roles/neutron/tasks/deploy.yml | 2 - ansible/roles/neutron/tasks/ironic-check.yml | 5 - ansible/roles/neutron/tasks/legacy_upgrade.yml | 12 + ansible/roles/neutron/tasks/loadbalancer.yml | 7 + ansible/roles/neutron/tasks/precheck.yml | 18 +- ansible/roles/neutron/tasks/register.yml | 2 + ansible/roles/neutron/tasks/rolling_upgrade.yml | 91 ++ ansible/roles/neutron/tasks/stop.yml | 6 + ansible/roles/neutron/tasks/upgrade.yml | 15 +- .../roles/neutron/templates/fwaas_driver.ini.j2 | 4 + .../neutron/templates/ironic_neutron_agent.ini.j2 | 2 +- ansible/roles/neutron/templates/l3_agent.ini.j2 | 6 +- .../roles/neutron/templates/metadata_agent.ini.j2 | 2 +- .../roles/neutron/templates/metering_agent.ini.j2 | 3 + .../templates/neutron-metering-agent.json.j2 | 36 + ansible/roles/neutron/templates/neutron.conf.j2 | 12 +- .../roles/neutron/templates/neutron_lbaas.conf.j2 | 2 +- ansible/roles/nova-hyperv/defaults/main.yml | 2 + ansible/roles/nova-hyperv/tasks/stop.yml | 1 + .../nova-hyperv/templates/nova_hyperv.conf.j2 | 6 +- ansible/roles/nova-hyperv/templates/wsgate.ini.j2 | 2 +- ansible/roles/nova/defaults/main.yml | 177 ++- ansible/roles/nova/handlers/main.yml | 176 ++- ansible/roles/nova/tasks/bootstrap.yml | 8 +- ansible/roles/nova/tasks/bootstrap_service.yml | 12 +- ansible/roles/nova/tasks/ceph.yml | 11 +- ansible/roles/nova/tasks/clone.yml | 7 + ansible/roles/nova/tasks/config-nova-fake.yml | 2 +- ansible/roles/nova/tasks/config.yml | 68 +- ansible/roles/nova/tasks/create_cells.yml | 128 ++ ansible/roles/nova/tasks/deploy.yml | 23 +- ansible/roles/nova/tasks/discover_computes.yml | 81 ++ ansible/roles/nova/tasks/external_ceph.yml | 15 +- ansible/roles/nova/tasks/legacy_upgrade.yml | 28 + ansible/roles/nova/tasks/loadbalancer.yml | 7 + ansible/roles/nova/tasks/precheck.yml | 28 +- ansible/roles/nova/tasks/register.yml | 19 +- ansible/roles/nova/tasks/reload.yml | 21 - ansible/roles/nova/tasks/rolling_upgrade.yml | 46 + ansible/roles/nova/tasks/simple_cell_setup.yml | 63 - ansible/roles/nova/tasks/stop.yml | 6 + ansible/roles/nova/tasks/upgrade.yml | 42 +- ansible/roles/nova/templates/libvirtd.conf.j2 | 2 +- ansible/roles/nova/templates/nova-compute.json.j2 | 9 +- ansible/roles/nova/templates/nova.conf.j2 | 39 +- .../nova/templates/placement-api-wsgi.conf.j2 | 27 - ansible/roles/nova/templates/placement-api.json.j2 | 32 - ansible/roles/nova/templates/qemu.conf.j2 | 3 + ansible/roles/nova/templates/sshd_config.j2 | 2 +- ansible/roles/octavia/defaults/main.yml | 17 +- ansible/roles/octavia/handlers/main.yml | 8 + ansible/roles/octavia/tasks/bootstrap.yml | 4 +- ansible/roles/octavia/tasks/config.yml | 36 + ansible/roles/octavia/tasks/loadbalancer.yml | 7 + ansible/roles/octavia/tasks/precheck.yml | 3 +- ansible/roles/octavia/tasks/register.yml | 4 + ansible/roles/octavia/tasks/stop.yml | 6 + .../roles/octavia/templates/octavia-api.json.j2 | 8 +- ansible/roles/octavia/templates/octavia.conf.j2 | 15 +- ansible/roles/opendaylight/defaults/main.yml | 37 + ansible/roles/opendaylight/handlers/main.yml | 33 +- ansible/roles/opendaylight/tasks/config.yml | 13 +- ansible/roles/opendaylight/tasks/loadbalancer.yml | 7 + ansible/roles/opendaylight/tasks/precheck.yml | 1 + ansible/roles/opendaylight/tasks/stop.yml | 6 + .../templates/org.apache.karaf.features.cfg.j2 | 6 +- ansible/roles/opendaylight/templates/setenv.j2 | 4 +- ansible/roles/openvswitch/handlers/main.yml | 26 +- ansible/roles/openvswitch/tasks/config.yml | 11 +- ansible/roles/openvswitch/tasks/deploy.yml | 2 + .../roles/openvswitch/tasks/ensure-ovs-bridge.yml | 13 + ansible/roles/openvswitch/tasks/precheck.yml | 1 + ansible/roles/openvswitch/tasks/stop.yml | 6 + ansible/roles/openvswitch/tasks/upgrade.yml | 2 + .../openvswitch/templates/start-ovsdb-server.j2 | 6 + ansible/roles/ovs-dpdk/handlers/main.yml | 17 +- ansible/roles/ovs-dpdk/tasks/config.yml | 15 +- ansible/roles/ovs-dpdk/tasks/stop.yml | 6 + ansible/roles/panko/defaults/main.yml | 14 +- ansible/roles/panko/tasks/bootstrap.yml | 9 +- ansible/roles/panko/tasks/loadbalancer.yml | 7 + ansible/roles/panko/tasks/precheck.yml | 1 + ansible/roles/panko/tasks/register.yml | 2 + ansible/roles/panko/tasks/stop.yml | 6 + ansible/roles/panko/templates/panko.conf.j2 | 8 +- ansible/roles/panko/templates/wsgi-panko.conf.j2 | 4 +- ansible/roles/placement/defaults/main.yml | 87 ++ ansible/roles/placement/handlers/main.yml | 15 + ansible/roles/placement/meta/main.yml | 3 + ansible/roles/placement/tasks/bootstrap.yml | 64 + .../roles/placement/tasks/bootstrap_service.yml | 20 + ansible/roles/placement/tasks/check.yml | 1 + ansible/roles/placement/tasks/clone.yml | 7 + ansible/roles/placement/tasks/config.yml | 127 ++ ansible/roles/placement/tasks/deploy.yml | 14 + ansible/roles/placement/tasks/loadbalancer.yml | 7 + ansible/roles/placement/tasks/main.yml | 2 + ansible/roles/placement/tasks/precheck.yml | 21 + ansible/roles/placement/tasks/pull.yml | 11 + ansible/roles/placement/tasks/reconfigure.yml | 2 + ansible/roles/placement/tasks/register.yml | 34 + ansible/roles/placement/tasks/stop.yml | 6 + ansible/roles/placement/tasks/upgrade.yml | 43 + ansible/roles/placement/templates/migrate-db.rc.j2 | 8 + .../placement/templates/placement-api-wsgi.conf.j2 | 32 + .../placement/templates/placement-api.json.j2 | 42 + .../roles/placement/templates/placement.conf.j2 | 61 + ansible/roles/prechecks/tasks/main.yml | 2 +- ansible/roles/prechecks/tasks/package_checks.yml | 5 +- ansible/roles/prechecks/tasks/service_checks.yml | 9 +- ansible/roles/prechecks/tasks/user_checks.yml | 2 +- ansible/roles/prechecks/vars/main.yml | 2 +- ansible/roles/prometheus/defaults/main.yml | 63 +- ansible/roles/prometheus/handlers/main.yml | 46 + ansible/roles/prometheus/tasks/bootstrap.yml | 3 +- ansible/roles/prometheus/tasks/check.yml | 1 + ansible/roles/prometheus/tasks/config.yml | 60 +- ansible/roles/prometheus/tasks/loadbalancer.yml | 7 + ansible/roles/prometheus/tasks/precheck.yml | 34 +- ansible/roles/prometheus/tasks/stop.yml | 6 + ansible/roles/prometheus/templates/clouds.yml.j2 | 12 + .../templates/prometheus-alertmanager.json.j2 | 2 +- .../templates/prometheus-alertmanager.yml.j2 | 9 + .../prometheus-elasticsearch-exporter.json.j2 | 11 + .../templates/prometheus-haproxy-exporter.json.j2 | 2 +- .../templates/prometheus-mysqld-exporter.json.j2 | 2 +- .../templates/prometheus-node-exporter.json.j2 | 2 +- .../prometheus-openstack-exporter.json.j2 | 23 + .../prometheus/templates/prometheus-server.json.j2 | 11 +- .../roles/prometheus/templates/prometheus.yml.j2 | 38 + ansible/roles/qdrouterd/tasks/precheck.yml | 1 + ansible/roles/qdrouterd/tasks/stop.yml | 6 + ansible/roles/rabbitmq/defaults/main.yml | 29 + ansible/roles/rabbitmq/handlers/main.yml | 38 +- ansible/roles/rabbitmq/tasks/bootstrap.yml | 2 +- ansible/roles/rabbitmq/tasks/config.yml | 70 +- ansible/roles/rabbitmq/tasks/loadbalancer.yml | 7 + ansible/roles/rabbitmq/tasks/precheck.yml | 1 + ansible/roles/rabbitmq/tasks/stop.yml | 6 + ansible/roles/rabbitmq/tasks/upgrade.yml | 27 +- .../templates/rabbitmq-clusterer.config.j2 | 11 - .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 16 +- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 14 + .../roles/rabbitmq/templates/rabbitmq.config.j2 | 25 - ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 10 +- ansible/roles/rally/tasks/bootstrap.yml | 4 +- ansible/roles/rally/tasks/stop.yml | 6 + ansible/roles/redis/tasks/check.yml | 1 + ansible/roles/redis/tasks/precheck.yml | 1 + ansible/roles/redis/tasks/stop.yml | 6 + ansible/roles/sahara/defaults/main.yml | 17 +- ansible/roles/sahara/tasks/bootstrap.yml | 4 +- ansible/roles/sahara/tasks/loadbalancer.yml | 7 + ansible/roles/sahara/tasks/precheck.yml | 1 + ansible/roles/sahara/tasks/register.yml | 2 + ansible/roles/sahara/tasks/stop.yml | 6 + ansible/roles/sahara/templates/sahara.conf.j2 | 15 +- ansible/roles/searchlight/defaults/main.yml | 11 + ansible/roles/searchlight/tasks/loadbalancer.yml | 7 + ansible/roles/searchlight/tasks/precheck.yml | 1 + ansible/roles/searchlight/tasks/register.yml | 2 + ansible/roles/searchlight/tasks/stop.yml | 6 + .../searchlight/templates/searchlight.conf.j2 | 8 +- ansible/roles/senlin/defaults/main.yml | 19 +- ansible/roles/senlin/tasks/bootstrap.yml | 4 +- ansible/roles/senlin/tasks/loadbalancer.yml | 7 + ansible/roles/senlin/tasks/precheck.yml | 3 +- ansible/roles/senlin/tasks/register.yml | 2 + ansible/roles/senlin/tasks/stop.yml | 6 + ansible/roles/senlin/templates/senlin.conf.j2 | 8 +- ansible/roles/service-stop/tasks/main.yml | 13 + ansible/roles/skydive/defaults/main.yml | 11 + ansible/roles/skydive/tasks/loadbalancer.yml | 7 + ansible/roles/skydive/tasks/precheck.yml | 1 + ansible/roles/skydive/tasks/stop.yml | 6 + ansible/roles/solum/defaults/main.yml | 26 +- ansible/roles/solum/tasks/bootstrap.yml | 4 +- ansible/roles/solum/tasks/loadbalancer.yml | 7 + ansible/roles/solum/tasks/precheck.yml | 1 + ansible/roles/solum/tasks/register.yml | 3 + ansible/roles/solum/tasks/stop.yml | 6 + ansible/roles/solum/templates/solum.conf.j2 | 4 +- ansible/roles/stop/tasks/copy_tools.yml | 17 - ansible/roles/stop/tasks/main.yml | 4 - ansible/roles/stop/tasks/stop_containers.yml | 3 - ansible/roles/storm/defaults/main.yml | 49 + ansible/roles/storm/handlers/main.yml | 46 + ansible/roles/storm/meta/main.yml | 3 + ansible/roles/storm/tasks/check.yml | 1 + ansible/roles/storm/tasks/config.yml | 84 ++ ansible/roles/storm/tasks/deploy.yml | 5 + ansible/roles/storm/tasks/main.yml | 2 + ansible/roles/storm/tasks/precheck.yml | 42 + ansible/roles/storm/tasks/pull.yml | 11 + ansible/roles/storm/tasks/reconfigure.yml | 2 + ansible/roles/storm/tasks/stop.yml | 6 + ansible/roles/storm/tasks/upgrade.yml | 2 + ansible/roles/storm/templates/storm-nimbus.json.j2 | 23 + ansible/roles/storm/templates/storm-worker.json.j2 | 23 + ansible/roles/storm/templates/storm.yml.j2 | 14 + ansible/roles/swift/defaults/main.yml | 27 +- ansible/roles/swift/tasks/check.yml | 1 + ansible/roles/swift/tasks/config.yml | 16 + ansible/roles/swift/tasks/deploy.yml | 18 +- .../{stop_and_start.yml => legacy_upgrade.yml} | 11 +- ansible/roles/swift/tasks/loadbalancer.yml | 7 + ansible/roles/swift/tasks/precheck.yml | 44 +- ansible/roles/swift/tasks/reconfigure.yml | 20 +- ansible/roles/swift/tasks/register.yml | 3 + ansible/roles/swift/tasks/rolling_upgrade.yml | 61 + ansible/roles/swift/tasks/start.yml | 58 +- ansible/roles/swift/tasks/stop.yml | 151 +++ ansible/roles/swift/tasks/upgrade.yml | 6 +- ansible/roles/swift/templates/account.conf.j2 | 6 +- ansible/roles/swift/templates/container.conf.j2 | 6 +- ansible/roles/swift/templates/object.conf.j2 | 6 +- ansible/roles/swift/templates/proxy-server.conf.j2 | 6 +- ansible/roles/swift/templates/rsyncd.conf.j2 | 2 +- .../swift-account-replication-server.json.j2 | 30 + .../swift-container-replication-server.json.j2 | 30 + .../swift-object-replication-server.json.j2 | 36 + ansible/roles/tacker/defaults/main.yml | 11 + ansible/roles/tacker/tasks/bootstrap.yml | 4 +- ansible/roles/tacker/tasks/loadbalancer.yml | 7 + ansible/roles/tacker/tasks/precheck.yml | 1 + ansible/roles/tacker/tasks/register.yml | 2 + ansible/roles/tacker/tasks/stop.yml | 6 + ansible/roles/tacker/templates/tacker.conf.j2 | 6 +- ansible/roles/telegraf/tasks/stop.yml | 6 + ansible/roles/telegraf/templates/telegraf.conf.j2 | 8 + ansible/roles/tempest/tasks/stop.yml | 6 + ansible/roles/tempest/templates/tempest.conf.j2 | 4 +- ansible/roles/tempest/templates/tempest.json.j2 | 2 +- ansible/roles/trove/defaults/main.yml | 12 + ansible/roles/trove/tasks/bootstrap.yml | 4 +- ansible/roles/trove/tasks/clone.yml | 1 + ansible/roles/trove/tasks/config.yml | 1 + ansible/roles/trove/tasks/loadbalancer.yml | 7 + ansible/roles/trove/tasks/precheck.yml | 1 + ansible/roles/trove/tasks/register.yml | 2 + ansible/roles/trove/tasks/stop.yml | 6 + .../roles/trove/templates/trove-conductor.conf.j2 | 2 +- .../trove/templates/trove-taskmanager.conf.j2 | 2 +- ansible/roles/trove/templates/trove.conf.j2 | 6 +- ansible/roles/vitrage/defaults/main.yml | 29 +- ansible/roles/vitrage/handlers/main.yml | 27 +- ansible/roles/vitrage/tasks/bootstrap.yml | 4 +- ansible/roles/vitrage/tasks/check.yml | 1 + ansible/roles/vitrage/tasks/config.yml | 28 +- ansible/roles/vitrage/tasks/deploy.yml | 3 +- ansible/roles/vitrage/tasks/loadbalancer.yml | 7 + ansible/roles/vitrage/tasks/precheck.yml | 9 + ansible/roles/vitrage/tasks/register.yml | 14 + ansible/roles/vitrage/tasks/stop.yml | 6 + ansible/roles/vitrage/tasks/upgrade.yml | 10 + .../vitrage/templates/vitrage-collector.json.j2 | 24 - .../roles/vitrage/templates/vitrage-graph.json.j2 | 8 +- ansible/roles/vitrage/templates/vitrage.conf.j2 | 25 +- .../roles/vitrage/templates/wsgi-vitrage.conf.j2 | 5 +- ansible/roles/vmtp/defaults/main.yml | 3 +- ansible/roles/vmtp/tasks/config.yml | 6 +- ansible/roles/vmtp/tasks/stop.yml | 6 + ansible/roles/watcher/defaults/main.yml | 11 + ansible/roles/watcher/tasks/bootstrap.yml | 4 +- ansible/roles/watcher/tasks/config.yml | 1 + ansible/roles/watcher/tasks/loadbalancer.yml | 7 + ansible/roles/watcher/tasks/precheck.yml | 1 + ansible/roles/watcher/tasks/register.yml | 2 + ansible/roles/watcher/tasks/stop.yml | 6 + ansible/roles/watcher/templates/watcher.conf.j2 | 8 +- ansible/roles/zookeeper/defaults/main.yml | 2 + ansible/roles/zookeeper/tasks/config.yml | 1 - ansible/roles/zookeeper/tasks/precheck.yml | 1 + ansible/roles/zookeeper/tasks/stop.yml | 6 + ansible/roles/zun/defaults/main.yml | 23 + ansible/roles/zun/handlers/main.yml | 1 + ansible/roles/zun/tasks/bootstrap.yml | 4 +- ansible/roles/zun/tasks/loadbalancer.yml | 7 + ansible/roles/zun/tasks/precheck.yml | 1 + ansible/roles/zun/tasks/register.yml | 2 + ansible/roles/zun/tasks/stop.yml | 6 + ansible/roles/zun/templates/wsgi-zun.conf.j2 | 2 +- ansible/roles/zun/templates/zun-api.json.j2 | 2 +- ansible/roles/zun/templates/zun.conf.j2 | 17 +- ansible/site.yml | 589 ++++++-- ansible/stop.yml | 4 - contrib/demos/tacker/cleanup-tacker | 12 +- contrib/dev/vagrant/bootstrap.sh | 4 +- deploy-guide/source/conf.py | 15 +- .../kolla-for-openstack-development.rst | 12 - .../reference/{ => bare-metal}/ironic-guide.rst | 49 +- .../reference/{ => compute}/hyperv-guide.rst | 30 +- .../reference/{ => compute}/nova-fake-driver.rst | 2 - .../reference/{ => compute}/vmware-guide.rst | 36 +- .../reference/{ => compute}/xenserver-guide.rst | 6 +- .../reference/{ => containers}/kuryr-guide.rst | 18 +- .../{ => databases}/external-mariadb-guide.rst | 27 +- .../{ => deployment-and-bootstrapping}/bifrost.rst | 62 +- .../bootstrap-servers.rst | 223 +++ .../deployment-and-bootstrapping/index.rst | 12 + .../resource-constraints.rst | 32 +- .../central-logging-guide.rst | 49 +- .../reference/logging-and-monitoring/index.rst | 14 + .../logging-and-monitoring/monasca-guide.rst | 305 +++++ .../osprofiler-guide.rst | 12 +- .../{ => logging-and-monitoring}/skydive-guide.rst | 8 +- .../reference/{ => networking}/designate-guide.rst | 76 +- .../reference/networking/neutron-extensions.rst | 80 ++ .../reference/networking/provider-networks.rst | 21 + .../reference/orchestration-and-nfv/index.rst | 10 + .../{ => orchestration-and-nfv}/tacker-guide.rst | 27 +- .../reference/shared-services/glance-guide.rst | 148 ++ .../{ => shared-services}/horizon-guide.rst | 7 +- .../reference/shared-services/keystone-guide.rst | 43 + .../reference/{ => storage}/cinder-guide-hnas.rst | 24 - .../reference/storage/cinder-guide-quobyte.rst | 29 + .../reference/{ => storage}/cinder-guide.rst | 51 +- .../{ => storage}/external-ceph-guide.rst | 42 +- .../reference/{ => storage}/manila-guide.rst | 44 +- .../reference/{ => storage}/manila-hnas-guide.rst | 32 - etc/kolla/globals.yml | 81 +- etc/kolla/passwords.yml | 8 + kolla_ansible/cmd/genpwd.py | 73 +- kolla_ansible/cmd/mergepwd.py | 23 +- lower-constraints.txt | 7 +- .../add-ceilometer-ipmi-b646f886666889a1.yaml | 5 + ...dd-cinder-quobyte-support-0de697a0800fb962.yaml | 3 + .../notes/add-cyborg-c7ee957a2cbe8e99.yaml | 4 + .../add-migration-interface-b53da3ff04c2a7fe.yaml | 5 + .../add-monasca-grafana-c31d4407c33939e4.yaml | 5 + .../add-monasca-log-metrics-370846df015ff96a.yaml | 5 + .../add-monasca-notification-03283c42a8df3d71.yaml | 7 + .../add-monasca-persister-c8fdd3d127b2438e.yaml | 6 + .../notes/add-monasca-thresh-f7a860ce996684f9.yaml | 5 + ...-neutron-metering-support-4266364hudc5l80c.yaml | 3 + ...add-nodename-to-etc-hosts-6360acc642ee3d49.yaml | 7 + ...add-octavia-custom-policy-6a55d8cd951ce639.yaml | 3 + ...octavia-network-interface-4e54077c1ca2a2f4.yaml | 5 + ...va-serial-console-timeout-7cfc764a0c19eb01.yaml | 6 + ...eus-as-vitrage-datasource-3439b3f9925b8e8e.yaml | 4 + ...us-elasticsearch-exporter-4d9b75b5cb8801d1.yaml | 6 + ...etheus-openstack-exporter-8fd7b0e6c8e71649.yaml | 6 + .../notes/add_monasca_agent-2b3b2f484a9e7168.yaml | 4 + .../notes/add_qume_options-8e9f040d0bc36fe6.yaml | 8 + .../notes/add_ulimit_support-35e8799f29a44d12.yaml | 5 + ...llow-disabling-keepalived-310321889a848edf.yaml | 6 + .../notes/ansible-min-2.5-7fa76f625bf9f359.yaml | 4 + releasenotes/notes/cert-path-65943386e62f1a8c.yaml | 9 + .../config-nova-release-97e6fc526a94740e.yaml | 13 + .../notes/deprecate-ceph-4745da91c7ca5a8e.yaml | 11 + ...ecate-cinder-iscsi-helper-f736c9139e937381.yaml | 6 + releasenotes/notes/docker-ce-722582da41cf6cd3.yaml | 23 + .../fernet-key-rotation-8d40041d7d783dc7.yaml | 16 + ...entd-custom-format-config-b6fc3a4883efc213.yaml | 10 + ...uentd-custom-input-config-db2675a1356717e6.yaml | 7 + .../notes/glance-cache-ecf950ba3e9136b1.yaml | 6 + .../gnochhi_swift_storage-5d05dab0e20eb43d.yaml | 9 + ...t-neutron-rolling-upgrade-a7b3124eab7adfa2.yaml | 6 + ...ment-nova-rolling-upgrade-f3b2d8382f725cb2.yaml | 4 + ...ent-swift-rolling-upgrade-bb715b173263f844.yaml | 5 + .../inspector-ramdisk-logs-9623a734c4d56410.yaml | 5 + ...pector-dnsmasq-pxe-filter-ab012028bcd7d332.yaml | 17 + .../notes/ironic-standalone-66dbb02a190c8b5d.yaml | 9 + .../kibana-custom-config-74afd6ddee462ed8.yaml | 4 + .../limit-docker-log-size-33133da03b232ece.yaml | 7 + .../notes/link_kolla_logs-e57a1e583f2872eb.yaml | 6 + .../notes/mariadb-xtrabackup-d4f48464dd6baaea.yaml | 11 + .../notes/module-load-946eaecb55cb31f0.yaml | 5 + .../notes/onos-support-2ea385cceb8104d6.yaml | 5 +- ...ndaylight_release-removal-5077cd473bee6dbd.yaml | 5 + ...s-add-ceph-manager-plugin-7bcde3ec0356e26b.yaml | 6 + ...deprecated-compute-groups-5273e945720edddc.yaml | 8 + ...haproxy-config-by-service-90c2d89de1829e8a.yaml | 26 + .../notes/stein-prelude-0fd9e090eb54e566.yaml | 6 + ...op-duplicating-nova-cells-670211557fe2cda3.yaml | 9 + .../notes/stop-per-service-85a996bb2751ed52.yaml | 6 + ...d-diff-mode-for-genconfig-97703a2ed13ab9ec.yaml | 7 +- .../support-tty-containers-c2d189f2e7c25dba.yaml | 5 + ...swift-replication-network-40ecd13e4339f299.yaml | 23 + ...stom-horizon-policy-files-f8e91efbb80ac0d6.yaml | 5 + .../notes/update-rabbitmq-5db770469b9bae18.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 1 + setup.cfg | 6 +- specs/containerize-openstack.rst | 2 +- specs/high-availability.rst | 2 +- specs/quobyte-cinder.rst | 78 ++ test-requirements.txt | 4 +- tools/cleanup-containers | 25 +- tools/cleanup-host | 10 + tools/cleanup-images | 12 +- tools/init-runonce | 21 +- tools/kolla-ansible | 42 +- tools/ovs-dpdkctl.sh | 11 +- tools/setup_Debian.sh | 102 -- tools/setup_RedHat.sh | 84 -- tools/setup_gate.sh | 169 +-- tools/stop-containers | 18 - tools/validate-all-file.py | 47 +- tools/validate-docker-execute.sh | 2 +- tox.ini | 27 +- zuul.d/base.yaml | 17 +- zuul.d/jobs.yaml | 127 +- zuul.d/nodesets.yaml | 24 + zuul.d/project.yaml | 38 +- 937 files changed, 15545 insertions(+), 6034 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d7f806744..0bf32bc9d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,0 +14 @@ cryptography>=2.1 # BSD/Apache-2.0 +jmespath>=0.9.3 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 978266505..799ae1eb4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ extras>=1.0.0 # MIT -hacking>=0.10.0,<1.1.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -19 +19 @@ pytz>=2013.6 # MIT -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 22 21:42:20 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:42:20 -0000 Subject: [release-announce] manila 6.3.1 (queens) Message-ID: We jubilantly announce the release of: manila 6.3.1: Shared Storage for OpenStack This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 6.3.1 ^^^^^ Bug Fixes * When manila API is run behind a proxy webserver, the API service was parsing the major API version requested incorrectly, leading to incorrect responses. This behavior has now been fixed. See launchpad bug 1818081 (https://bugs.launchpad.net/manila/+bug/1818081) for more details. * NetApp driver volume efficiency settings now behave consistently: like on volume creation now also modification, which is currently consumed by manage and migration, will make sure that deduplication and compression settings are applied correctly. Changes in manila 6.3.0..6.3.1 ------------------------------ 148e4730 [CI] Add bindep.txt 4f14a4d9 Remove the redunant table from windows' editor 390aa443 OpenDev Migration Patch 72fb56c5 Fix tls-proxy issues with the devstack plugin 19c3ed01 NetApp cDOT driver switch volume efficiency Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 67 ++++++++++++---------- bindep.txt | 35 +++++++++++ devstack/plugin.sh | 24 +++++--- .../netapp/dataontap/client/client_cmode.py | 31 +++++----- .../netapp/dataontap/client/test_client_cmode.py | 7 +++ playbooks/legacy/grenade-dsvm-manila/run.yaml | 10 ++-- .../run.yaml | 8 +-- .../run.yaml | 8 +-- .../run.yaml | 8 +-- .../run.yaml | 12 ++-- .../manila-tempest-dsvm-glusterfs-native/run.yaml | 12 ++-- .../run.yaml | 12 ++-- .../manila-tempest-dsvm-glusterfs-nfs/run.yaml | 12 ++-- playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml | 12 ++-- .../manila-tempest-dsvm-mysql-generic/run.yaml | 8 +-- .../run.yaml | 8 +-- .../run.yaml | 8 +-- .../run.yaml | 8 +-- .../legacy/manila-tempest-dsvm-scenario/run.yaml | 8 +-- .../run.yaml | 10 ++-- .../run.yaml | 10 ++-- .../manila-tempest-minimal-dsvm-dummy/run.yaml | 10 ++-- .../run.yaml | 12 ++-- .../run.yaml | 10 ++-- .../run.yaml | 10 ++-- .../rally-dsvm-manila-multibackend-no-ss/run.yaml | 10 ++-- .../legacy/rally-dsvm-manila-multibackend/run.yaml | 10 ++-- ...ame-in-case-of-proxy-urls-e33466af856708b4.yaml | 2 +- ...-switch-volume-efficiency-bd22733445d146f0.yaml | 7 +++ tox.ini | 12 ++++ 31 files changed, 240 insertions(+), 163 deletions(-) From no-reply at openstack.org Mon Jul 22 21:43:38 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 22 Jul 2019 21:43:38 -0000 Subject: [release-announce] manila 8.0.1 (stein) Message-ID: We high-spiritedly announce the release of: manila 8.0.1: Shared Storage for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 8.0.1 ^^^^^ Bug Fixes * When manila API is run behind a proxy webserver, the API service was parsing the major API version requested incorrectly, leading to incorrect responses. This behavior has now been fixed. See launchpad bug 1818081 (https://bugs.launchpad.net/manila/+bug/1818081) for more details. * Fixed an issue with the NetApp driver failing during a rollback operation in the share server creation. Changes in manila 8.0.0..8.0.1 ------------------------------ 1f68a8ff Remove the redunant table from windows' editor bf829be9 Adding documentation for User Messages in Manila Documentation 6ac17301 [CI] Add bindep.txt 49a86d74 [NetApp] Fix race condition issues on vserver deletion 96d3d2e9 OpenDev Migration Patch e2228dad Replace openstack.org git:// URLs with https:// bf27c4ad Update UPPER_CONSTRAINTS_FILE for stable/stein 7be69f6a Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 60 ++-- bindep.txt | 35 +++ devstack/upgrade/settings | 4 +- .../development-environment-devstack.rst | 6 +- .../contributor/samples/container_local.conf | 4 +- .../contributor/samples/zfsonlinux_local.conf | 4 +- .../user/troubleshooting-asynchronous-failures.rst | 343 +++++++++++++++++++++ .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 20 +- .../dataontap/cluster_mode/test_lib_multi_svm.py | 1 + playbooks/legacy/grenade-dsvm-manila/run.yaml | 10 +- .../run.yaml | 8 +- .../run.yaml | 8 +- .../run.yaml | 8 +- .../run.yaml | 12 +- .../manila-tempest-dsvm-glusterfs-native/run.yaml | 12 +- .../run.yaml | 12 +- .../manila-tempest-dsvm-glusterfs-nfs/run.yaml | 12 +- playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml | 12 +- .../manila-tempest-dsvm-mysql-generic/run.yaml | 8 +- .../run.yaml | 8 +- .../run.yaml | 8 +- .../run.yaml | 8 +- .../legacy/manila-tempest-dsvm-scenario/run.yaml | 8 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../manila-tempest-minimal-dsvm-dummy/run.yaml | 8 +- .../manila-tempest-minimal-dsvm-lvm/run.yaml | 12 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../rally-dsvm-manila-multibackend-no-ss/run.yaml | 10 +- .../legacy/rally-dsvm-manila-multibackend/run.yaml | 10 +- ...ame-in-case-of-proxy-urls-e33466af856708b4.yaml | 2 +- ...netapp-fix-race-condition-524555133aaa6ca8.yaml | 5 + tox.ini | 18 +- 42 files changed, 681 insertions(+), 173 deletions(-) From no-reply at openstack.org Wed Jul 24 09:30:55 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 24 Jul 2019 09:30:55 -0000 Subject: [release-announce] openstack-doc-tools 1.9.0 Message-ID: We eagerly announce the release of: openstack-doc-tools 1.9.0: Tools for OpenStack Documentation The source is available from: https://opendev.org/openstack/openstack-doc-tools Download the package from: https://tarballs.openstack.org/openstack-doc-tools/ For more details, please see below. Changes in openstack-doc-tools 1.8.0..1.9.0 ------------------------------------------- 9d59e20 Add Python 3 Train unit tests 74429f7 Drop py35 testing ffa5030 Replace git.openstack.org URLs with opendev.org URLs 344a8ea OpenDev Migration Patch 9794458 Update home-page 528d97a Remove support for py34 0ebc4cc Update hacking 24a17f7 Change openstack-dev to openstack-discuss e1cd64c Advancing the protocal of the website to HTTPS in README.rst. 074a84d Remove setup.py check from pep8 job a3fdc40 Update sitemap file 5766a78 Use openstack-lower-constraints-jobs template 72614d4 add python 3.6 unit test job 808092b switch documentation job to new PTI 058890f import zuul job settings from project-config 5009114 Switch to stestr 1298e76 fix tox python3 overrides 3fdd053 Check RST as part of linting Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 2 +- .stestr.conf | 4 ++++ .testr.conf | 7 ------- .zuul.yaml | 13 +++++++------ README.rst | 2 +- lower-constraints.txt | 4 ++-- releasenotes/notes/afs-docs-952f940dc7c47408.yaml | 2 +- requirements.txt | 2 +- setup.cfg | 8 ++++---- sitemap/README.rst | 8 ++++---- sitemap/generator/spiders/sitemap_file.py | 9 ++++++--- test-requirements.txt | 4 ++-- tox.ini | 11 ++++++++--- 15 files changed, 43 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c2a2bab..8a10a6b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ docutils>=0.11 # OSI-Approved Open Source, Public Domain -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index f16aff2..29b9a85 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -15 +15 @@ openstackdocstheme>=1.18.1 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0 From no-reply at openstack.org Wed Jul 24 10:01:21 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 24 Jul 2019 10:01:21 -0000 Subject: [release-announce] ansible-role-collect-logs 1.0.0 Message-ID: We enthusiastically announce the release of: ansible-role-collect-logs 1.0.0: ansible-role-collect-logs - An Ansible role for aggregating logs from different nodes. This is the first release of ansible-role-collect-logs. The source is available from: https://opendev.org/openstack/ansible-role-collect-logs Download the package from: https://tarballs.openstack.org/ansible-role-collect-logs/ For more details, please see below. Changes in ansible-role-collect-logs dc735c02581d41595d70a7737b541361a48c8de2..1.0.0 ------------------------------------------------------------------------------------ cc24a87 Handle recursive copy of /var/log from containers 11402e3 Grab cloud-init logs 8fce82d collect standalone deployment config dbcc233 Added tripleo job template against new collect-logs role 2dd5ba9 Fixed doc building steps for collect logs 0260403 add missing defaults to arct 32887d8 Fix the project name in setup.cfg 3c703a7 Update to opendev f43531f OpenDev Migration Patch 67821d2 Apply cookiecutter on collect-logs 2c29415 Move the roles contents to root directory 97207b4 Collect services statuses in logs 57e1e50 Add testrepository.subunit file to root dir 82b786a Reproducer script: run only on job started by zuul bf5cace Use infra generation of ARA reports 6360460 Rename errors file if it's big 57ba78b Include standalone deploy logs for logstash index 3021b6a Raise an error if a service or container is failed e17db7c Treat dest as normal file when copying out of podman containers 7a63b85 Design new role for zuul-based reproducer 56dc4b0 Loop over *all* containers in order to get the container STDOUT dd48dfc Add output for ip6tables and related ipv6 things 8915179 Use os_tempest for running tempest on standalone 75144e4 Corrected openstack-virtual-baremetal repo location 77ee580 Improve output of Verify Sphinx build task 42fffbd Remove reproducer lines added to get zuul related info ab6e39d Fix regression of collect-logs package listing 18a8b1e Adopt yamllint strict linting 442144d Allow to collect HAProxy stats and log them in a file 1705b1d Correct some commands from the "Collect container info" tasks 4a9e349 Migrate flake8 to pre-commit f8e8ff2 Correct buggy typo 318e68e Fixed logstash file name for tempest 8e431db ensure we get podman container logs f96cc11 Adapt code to newer code style (linters) 95f9d0e Fetch version for container engine. 586fbba Use correct package manager at DLRN 2aee419 Introduce zuul.projects and executed pre-run playbooks for reproducer 1a2c0c2 Run atop for monitoring deployment bcb8d23 Fix runtime Ansible warnings 0350931 Use dnf and python3 on platforms where these are default dcbea6c Add /var/log/tripleo-container-image-prepare.log 263c119 Add podman support for log collection 664e42d by default collect all files in /var/lib/mistral 26e582b Add log of ansible modify container role to logstash 0f8870d Fix overcloud ARA data collection 3eec538 Calculate ARA metrics for overcloud c365262 Fix used paths to match custom working dir b92c82c Support ARA statistics in InfluxDB for longest tasks 1aea2a2 Track ansible overcloud deployment with ARA f38f7a8 Log collection: list installed rpms and their source repos 267d6f9 Show cfg,j2,py files in browser b358ef3 remove older and slower portions of collect-logs d0947f4 Unify custom t-h-t install steps for UC/OC/upgrade ab4a68b Use the TripleO Ansible role from tripleo-upgrade to run upgrades 2636fc6 Fix docker info log name a41b29e update default logging to match upstream af22a12 Add memory and swap info into collect-logs collect task a0189ab Enable ARA for the undercloud install ce6204a Prevent recursive copy of /var/log e21c44a Sync docker log collection with retired get_docker_logs.sh b2eac64 Add upgrade and update logs to logstash indexing 8282fbc Run openstack overcloud failures when failures 9cc1d44 Add a variable to append paths in log collect list a30fd72 Add opendaylight to collect-logs f064123 Collect entire Browbeat folder 90564fa Alter collect heat templates dir from undercloud 3a5638a Collect heat templates dir from undercloud d7b1c92 Reduce reproducer redudancy a7f6045 Add ansible linter rule for set pipefail a3b10c0 Fix dstat time penalty for failed runs ca9f0e5 add mtu summary for each nic on each node 2965e93 Collect installed cron jobs c452f27 remove duplicate README file (part deux) 7208801 remove duplicate README file 76940e6 Add -n to lsof collection 1b9fe61 Add /var/lib/pacemaker/pengine/pe-input* to saved logs 7fbefaf Add more directories to collect 93c218c Collect and send statistics to InfluxDB 850f001 fix reproducer script when statement 1429168 Fix graphite data order d7ecdb0 Generate ARA statistics ae3e4e8 Force decompression of stackviz data 36879b0 Ignore errors in graphite task f49b760 Add reproducer script for OVB and multinode jobs a150beb Prepend errors file with prefix for logstash index e690043 Add ui_validate_simple to the logs collected 103abaa Collect most of var/lib/heat-config directory. deb35d1 Add help links to /var/lib/mistral e9a1257 Save console files with timestamps e2db6eb Use openstack commands for postci b9a4e01 Start lines with timestamps in errors for logstash f7df79f Add log to validate ipmi role db8e2a2 Send ARA statistics to Graphite server 95fe33c Extract all errors from tripleo deployment 201044d overcloud-deploy: add config-download + ansible run feature 41a2870 Add custom options support for sosreport command 87fd449 validate-tempest: use local_working_dir var b03160f Save bootstrap server logs in logstash f18b895 Save tempest output in logstash 112f0bf add logs for virt-customize 7c60ef5 Switch to overcloudrc.v3 for running tempest 5eec291 Track the tempest resources before and after tempest run e57e5e0 Create a file for indexing it in logstash 2cdef09 Collect workflow lists and execution lists in host_info a3bdc67 Limit collection of config-data to puppet-generated files 6802d4a collect-logs: Remove collection of docker etc/ dirs ff730a7 Collect subunit results from pingtest 9874dde collect-logs: add README for log files 1dc5b3c get_host_info: sort rpm -qa f07851f Collect the last 4 hours from the journal in text form 2ae7a30 Adding testrepository.subunit to artcl_collect_list 9fea88f Add pipefail to each command that piped with timestamp 213c828 Add timestamps to quickstart logs 09859cd Delete symlinks and other non-files when collect logs 8f58df3 Make repo file visible in browser f62088c collect-logs: Fixes for upstream log collection 4b95823 collect logs: use wildcard instead of specific user name for home collection 76c7017 collect-logs: add missing empty defaults for doc gen 82bd5f0 Collect more info about docker 4fd4356 Support multinic network isolation fba0ced collect-logs: small README fix ba9ce3e collect-logs: use rsync to gather logs 0ac3a45 Collect only cib* files from pacemaker cf52174 collect-logs: only run the doc verify after collection d087462 Add host info collection to collect-logs 61416bd Fix ansible-lint.sh script for roles. 588c851 publish: don't fail in case the logs dir is a link to a directory e905123 Collect /var/lib/pacemaker/cib/ 7f89aab Exclude /etc/alternatives from logs 0736a30 Add disk root device hints 7f06240 Support exclude list for logs collecting 843a9c9 Adding skip_file in the list of collected logs e008f4c Fix service logs collection 4042143 Add optional Sphinx build verification cb13d6f List nova instances after overcloud deploy ffa5cc8 Add option to leave tar.gz logs files and flat log 04ba895 Ensure docs directory exists before generating docs 8b074c4 Leave and collect delorean build logs 28797c3 collect-logs: broader txt.gz rename conditions 0deb60e Add -k (insecure) option to curl console logs command e168524 Ensure sphinx build output is collected 4c8b988 Write down segfaults, avc denials and oom-killers 64bbad9 updates to the static template for job doc. 3d990be Collect logs for containers only if docker runs 43cb68c collect-logs: rename text files to txt.gz cf6a68f Integrate undercloud_user var into oooq-extras bdfd57b Ensure that each role in extras has a dependency on extras-common 63f3564 Collect logs of containers 23075d4 Add ARA to the collected log directories a15f793 Use shell instead of command 832283e Expose the tempest results to the top level of the collected logs bf4b708 Create tasks to install, run stackviz and collect logs b71ddc6 Replace hardcoded stack user by ansible_user d180190 collect-logs: add timeout to log uploads 4fc8272 collect-logs: run in two stages 1df0a2f collect-logs: add rdoproject env requirements 1cfe10b collect-logs: internal rename and cleanup Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..08756f4 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,2 @@ +pbr>=1.6 +ansible>=2.5 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..94dba19 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1 @@ +pre-commit # MIT From no-reply at openstack.org Wed Jul 24 10:02:35 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 24 Jul 2019 10:02:35 -0000 Subject: [release-announce] openstack-placement 1.1.0 (stein) Message-ID: We high-spiritedly announce the release of: openstack-placement 1.1.0: Resource provider inventory usage and allocation service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-placement Download the package from: https://pypi.org/project/openstack-placement For more details, please see below. 1.1.0 ^^^^^ Bug Fixes * By fixing bug story/2005842 the OSProfiler support works again in the placement WSGI. (https://storyboard.openstack.org/#!/story/2005842) Changes in openstack-placement 1.0.0..1.1.0 ------------------------------------------- bdcbb260 Add support for osprofiler in wsgi 28a341ac Skip _exclude_nested_providers() if not nested 58d55797 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- placement/deploy.py | 12 ++++++ placement/handlers/allocation_candidate.py | 44 +++---------------- placement/objects/allocation_candidate.py | 49 ++++++++++++++++++++-- placement/wsgi.py | 14 +++++++ playbooks/perfload.yaml | 4 +- .../fix-osprofiler-support-78b34a92c32fd30f.yaml | 7 ++++ 8 files changed, 88 insertions(+), 46 deletions(-) From no-reply at openstack.org Wed Jul 24 10:34:58 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 24 Jul 2019 10:34:58 -0000 Subject: [release-announce] openstack-doc-tools 1.10.0 Message-ID: We are chuffed to announce the release of: openstack-doc-tools 1.10.0: Tools for OpenStack Documentation The source is available from: https://opendev.org/openstack/openstack-doc-tools Download the package from: https://tarballs.openstack.org/openstack-doc-tools/ For more details, please see below. Changes in openstack-doc-tools 1.9.0..1.10.0 -------------------------------------------- a178d4b Don't use special api-quick-start location Diffstat (except docs and test files) ------------------------------------- bin/doc-tools-check-languages | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) From no-reply at openstack.org Wed Jul 24 23:49:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 24 Jul 2019 23:49:59 -0000 Subject: [release-announce] python-qinlingclient 3.0.0 (train) Message-ID: We high-spiritedly announce the release of: python-qinlingclient 3.0.0: python-qinlingclient This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-qinlingclient Download the package from: https://pypi.org/project/python-qinlingclient Please report issues through: https://storyboard.openstack.org/#!/project/926 For more details, please see below. 3.0.0 ^^^^^ New Features * Support "--function-alias" for creating jobs, change the positional argument of function to optional "--function", so that the end user can either specify a function alias or a function identifier to create job. Changes in python-qinlingclient 2.2.0..3.0.0 -------------------------------------------- 01cde22 Release note for --function-alias support d398397 Support function alias when creating job Diffstat (except docs and test files) ------------------------------------- qinlingclient/osc/v1/base.py | 1 + qinlingclient/osc/v1/job.py | 30 ++++++--- qinlingclient/v1/job.py | 7 ++- ...rt-function-alias-for-job-eb10994cac2c11e9.yaml | 4 ++ 7 files changed, 97 insertions(+), 39 deletions(-) From no-reply at openstack.org Thu Jul 25 14:16:58 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 25 Jul 2019 14:16:58 -0000 Subject: [release-announce] neutron-tempest-plugin 0.4.0 (train) Message-ID: We are pleased to announce the release of: neutron-tempest-plugin 0.4.0: Tempest plugin for Neutron Project This release is part of the train release series. The source is available from: https://opendev.org/openstack/neutron-tempest-plugin Download the package from: https://tarballs.openstack.org/neutron-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-tempest-plugin 0.3.0..0.4.0 ---------------------------------------------- a7bb161 Add possibility to disable running stadium projects tests 1d36a20 Migrate neutron-fwaas tests to neutron-tempest-plugin 0daae87 Add logging of servers console in scenario test_port_forwardings d4fa6dc Update flake8 style enforcement 6aae0d4 Change order of creating vms and plug routers in scenario test 25cea25 Sync Sphinx requirement 411261f Additional test cases for port forwardings API b7f7d13 Re-enable internal DNS tests 1c95d62 Fix: test fails due to image not found 13903aa Scenario test for port forwarding d2a6acc Scenario test case to check connectivity when dvr and non-dvr routers used e142c0b Ensure DNS configuration from conf f40b494 Remove networking-bgpvpn job from template 74e760a Normalize url without port with schema default port 003fcae Add base API tests for port forwarding 68ab245 Add case for router east west traffic 87c3f94 Add API test case to check if SG displays all rules 8dd49aa Rehome tempest tests from networking-bgpvpn repo 8d2557c Change legacy security group rule check 4f5afdc Dropping support for py35 46a0ae2 Remove obsolete docs job from neutron-tempest-plugin-jobs 1a987ec Migrate networking-sfc tests to neutron-tempest-plugin d49cf7a Replace git.openstack.org URLs with opendev.org URLs ce246d0 Add api test for DVR coverting back to centralized eae7a37 OpenDev Migration Patch fa1081a Add additional config option "default_image_is_advanced" a57f80d Add definition of jobs running on stable/stein branch 52b1b95 Switch job definitions to use new "tempest_plugin" variable 5ce1bc2 Addition of negative test: network creation with an above the limit mtu value. The value max_mtu can be configured in tempest.conf 5ddcf33 Mark test_floatingip_port_details test as unstable 92fbbab Min bw rule operations should be rejected on non-physnet ports/networks 03ec317 Replace openstack.org git:// URLs with https:// 4ba1c80 Don't customize image before upload it to Glance by default Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 247 +++- HACKING.rst | 2 +- README.rst | 2 +- devstack/README.rst | 4 +- devstack/customize_image.sh | 2 +- neutron_tempest_plugin/api/admin/test_ports.py | 9 + neutron_tempest_plugin/api/base.py | 71 +- neutron_tempest_plugin/api/base_security_groups.py | 4 +- neutron_tempest_plugin/api/test_networks.py | 2 +- .../api/test_networks_negative.py | 10 + .../api/test_port_forwardings.py | 196 +++ neutron_tempest_plugin/api/test_routers.py | 11 +- neutron_tempest_plugin/api/test_security_groups.py | 61 +- neutron_tempest_plugin/bgpvpn/__init__.py | 0 neutron_tempest_plugin/bgpvpn/api/__init__.py | 0 neutron_tempest_plugin/bgpvpn/api/test_bgpvpn.py | 380 ++++++ neutron_tempest_plugin/bgpvpn/base.py | 95 ++ neutron_tempest_plugin/bgpvpn/scenario/__init__.py | 0 neutron_tempest_plugin/bgpvpn/scenario/manager.py | 879 +++++++++++++ .../bgpvpn/scenario/test_bgpvpn_basic.py | 1354 ++++++++++++++++++++ neutron_tempest_plugin/bgpvpn/services/__init__.py | 0 .../bgpvpn/services/bgpvpn_client.py | 115 ++ neutron_tempest_plugin/common/utils.py | 21 + neutron_tempest_plugin/config.py | 75 ++ neutron_tempest_plugin/fwaas/__init__.py | 0 neutron_tempest_plugin/fwaas/api/__init__.py | 0 neutron_tempest_plugin/fwaas/api/fwaas_v2_base.py | 33 + .../fwaas/api/test_fwaasv2_extensions.py | 358 ++++++ neutron_tempest_plugin/fwaas/common/__init__.py | 0 .../fwaas/common/fwaas_v2_client.py | 162 +++ neutron_tempest_plugin/fwaas/scenario/__init__.py | 0 .../fwaas/scenario/fwaas_v2_base.py | 69 + .../fwaas/scenario/fwaas_v2_manager.py | 877 +++++++++++++ .../fwaas/scenario/test_fwaas_v2.py | 303 +++++ neutron_tempest_plugin/fwaas/services/__init__.py | 0 neutron_tempest_plugin/fwaas/services/v2_client.py | 123 ++ neutron_tempest_plugin/scenario/base.py | 15 +- .../scenario/test_connectivity.py | 127 +- neutron_tempest_plugin/scenario/test_floatingip.py | 1 + .../scenario/test_internal_dns.py | 9 +- neutron_tempest_plugin/scenario/test_mtu.py | 45 +- .../scenario/test_port_forwardings.py | 88 ++ neutron_tempest_plugin/scenario/test_trunk.py | 31 +- .../services/network/json/network_client.py | 49 + neutron_tempest_plugin/sfc/__init__.py | 0 neutron_tempest_plugin/sfc/services/__init__.py | 0 .../sfc/services/flowclassifier_client.py | 53 + neutron_tempest_plugin/sfc/services/sfc_client.py | 165 +++ releasenotes/source/index.rst | 6 +- roles/multi-node-setup/README.rst | 2 +- setup.cfg | 4 +- test-requirements.txt | 3 +- tox.ini | 6 +- 65 files changed, 9044 insertions(+), 87 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c0546cf..20b29f4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD From no-reply at openstack.org Thu Jul 25 14:17:50 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 25 Jul 2019 14:17:50 -0000 Subject: [release-announce] tempest 21.0.0 (train) Message-ID: We jubilantly announce the release of: tempest 21.0.0: OpenStack Integration Testing This release is part of the train release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 21.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the Train development cycle to mark the end of support for Pike in Tempest. After this release, Tempest will support below OpenStack Releases: * Stein * Rocky * Queens Current development of Tempest is for OpenStack Train development cycle. New Features ************ * Add "qos-policies" and "qos-minimum-bandwidth-rule" clients to Tempest to make possible the testing of the placement based bandwidth allocation feature. The following API calls are available for tempest from now: "QoS policies" client: * GET /qos/policies * POST /qos/policies * GET /qos/policies/{policy_id} * PUT /qos/policies/{policy_id} * DELETE /qos/policies/{policy_id} "QoS minimum bandwidth rules" client: * GET qos/policies/{policy_id}/minimum_bandwidth_rules * POST /qos/policies/{policy_id}/minimum_bandwidth_rules * GET qos/policies/{policy_id}/minimum_bandwidth_rules/{rule_id} * PUT qos/policies/{policy_id}/minimum_bandwidth_rules/{rule_id} * DELETE /qos/policies/{policy_id}/minimum_bandwidth_rules/{rule_id} * Add list host API support to the volume v3 client library. This feature enables callers to list all hosts for a given project. * Add migrate volume API support to the volume v3 client library. This features allows callers to migrate volumes between backends. * Add show default group type details API to v3 group_types_client library. * show_default_group_type * New decorator "unstable_test" is added to "tempest.lib.decorators". It can be used to mark some test as unstable thus it will be still run by tempest but job will not fail if this test will fail. Such test will be skipped in case of failure. It can be used for example when there is known bug related which cause irregular tests failures. Marking such test as unstable will help other developers to get their job done and still run this test to get additional debug data or to confirm if some potential fix really solved the issue. * A new parameter, compute/compute_volume_common_az is introduced to specify availability zone where tempest creates instances and volumes for scenario tests, to allow us to run scenario tests in the deployment which has multiple availability zones and cinder/cross_az_attach in nova.conf is set to False. * New library interface to set the API microversion on Service Clients. "APIMicroversionFixture," can be used to set the API microversion on multiple services. This Fixture will take care of reseting the service microversion to None once test is finished. * Add microversion support for scenario tests. Scenario test calls multiple service API within same test and many services like compute, volume and placement etc support API microversion. With microversion support in scenario test, we can call different service API with different microvesion. Which means we can implement scenario tests for microversion also. Currently Scenario manager support below services microversion: * Compute * Volume * Placement Upgrade Notes ************* * Remove deprecated config option "endpoint_type" from "identity" group. Use "v2_public_endpoint_type" from "identity" group instead. Remove deprecated config option "tenant_isolation_domain_name" from "auth" group. Use "default_credentials_domain_name" from "auth" group instead. * Remove deprecated config option "admin_username" from "identity" groups. Use "admin_username" from "auth" instead. Remove deprecated config option "admin_tenant_name" from "auth" and "identity" groups. Use "admin_project_name" from "auth" instead. Remove deprecated config option "admin_password" from "identity" groups. Use "admin_password" from "auth" instead. Remove deprecated config option "admin_domain_name" from "identity" groups. Use "admin_domain_name" from "auth" instead. Deprecation Notes ***************** * The config option "CONF.network.dns_servers" is no longer used anywhere, so it is deprecated and will be removed in the future. Other Notes *********** * New configuration options "[compute]/certified_image_ref" and "[compute]/certified_image_trusted_certs" have been introduced. These are required in order to run the "ServerShowV263Test" test and allow a signed image with the required img_signature_* properties set along with a list of trusted certificates to be used during the test. Changes in tempest 20.0.0..21.0.0 --------------------------------- abd07b42c Add releasenote to tag the end of support for Pike 95358523e Define the Integrated-gate-object-storage gate template ee7fd1f7e Define the Integrated-gate-compute gate template 31609dc1d Define the Integrated-gate-placement gate template 03c9c94c8 add show default group type details and unit test a52572347 add unittest for volume encryption types a699445d2 Define the Integrated-gate-storage gate template 5072a2408 Define the Integrated-gate-networking gate template 9c25b1d0b Fix tempest run doc indentation b3daeb4e1 Filter out floating IPs from server IPs list 0187a6647 Remove nova-lxd plugin from blacklist 012dc98fb Remove networking-ansible from tempest plugins list 3f5748906 Remove cyborg-tempest-plugin from BLACKLIST e1afe4e75 Fix invalid assertIsNone state cff4ed761 compute: Correctly pass certified_image_ref as image_id 83f524af2 Use assert_flavor_equal to check flavor before and after microversion 2.46 aa91d42bb Revert "Skip test_server_connectivity_cold_migration_revert until fixed" 2957b4020 Raise non 404 Error in generate-tempest-plugin-list.py 6617b834f Add project prefix to blacklist b02555364 Stop checking the error message in test_boot_with_low_ram 7f7c232b2 compute: Make image certificate validation a configurable feature 00e6d6c2e Specify AZ for non-scenario tests 97857948d Fix cleanup NotImplemented error 1c976a93d Remove RetryFilter from defaults e453fc2b9 fup: fix docsting in manager.py 0ded98ff6 Pass more accurate error message to DeleteErrorException ac8ae64d5 Publish BLACKLIST on Tempest plugin registry page e36fe67e8 Publish non-openstack namespace tempest plugins 979e494da Specify availability zone to create instances and volumes c87a06b3c Minimum bandwidth allocation with placement f4d359245 Remove some deprecated auth and identity options c98a3254c Immutable user source: Non-admin V2 and V3 tests 80105b7c5 Move tox execution to current docs section e8a5e5c82 Add QoS policies and minimum bandwidth rule client 09c4eb99c Add microversion support in scenario tests 0ea2c01d7 Break wait_for_volume_resource_status when error_extending 8802c83be Fix invalid parameter passed to create_volume 1a457ac53 Fix region leaks after testing endpoints 5402cc3f8 Remove some deprecated identity options c6b0f140b Print passed and failed plugins at the end 32a4b11f1 Remove vitrage-tempest-plugin from blacklist 85dfbf6ef Remove nova-cells-v1 job from experimental queue 13731b020 Change IPv6 ICMP security group rule check 349ba7541 Replace git.openstack.org URLs with opendev.org URLs 0b14b1e0f Add compute API response schema validation for 2.71 fe0de68da Set default value for tox tasks 5511ea020 Fix mismatch error due to map in python3 7f5dd855c Add cyborg-tempest-plugin to required-projects and remove octavia 8460cb184 Remove airship-tempest-plugin from blacklist e027ea931 Make dns_servers option deprecated 39fe69517 Remove legacy-periodic-tempest-dsvm-neutron-full-ocata 925188d2d Make test_hotplug_nic test first check the IP 514495b1a Revert "Refactor random naming" 65c891107 Improve ipv6 configuration 23325c0ee Fix resource leaks in EndPointGroupsTest f5cff8b44 [Trivial]Remove unused variable assignments c248f5962 Fix the bug of deleting security group after testing changing password. 748dd8df7 Handle properly 404 responses from Neutron b9b6e37a7 Add support for compute API v2.70 - os-volume_attachments 27ba933ab Handle 'path' query parameter for test_novnc e5597401f Introduce an attached volume migration test 2b1751e46 Use show_quota_class_set after update_quota_class_set 8df5fdcbe Add assertions to attached volume retype test 682965e39 OpenDev Migration Patch 4beff29c3 Add the api type check when check the param of api_microversion 9a740dd26 Fix invalid filter passed to list_volumes ad8737c7f Add APIMicroversionFixture to library interface 21f53012f Add unstable_test decorator 762e98c23 Skip test_volume_backup_create_get_detailed_list_restore_delete 7ea7e0a14 update identity role tests to work w/ pre-prov be64e1ae7 Ensure all image cache volumes are removed before removing the volume type 77a1933bd Run integration jobs for requirements.txt changes a7f16b291 Uncap jsonschema 1bbfa121b Fix test_volume_swap_with_multiattach 598b1ae85 Improve router deletion logging in tempest cleanup fd01fe944 Improve logging in tempest cleanup a8cb701cc Init placement client in tempest Manager object c07edb5f8 Mention autopep8 in Hacking.rst 5b98592b9 Add Tempest gate job for stable/stein 154621187 Add release notes page for version 20.0.0 5d06623da Add missing validation for the compute/positive ff3851b59 Replace openstack.org git:// URLs with https:// 787e69426 Remove the Ocata stable branch jobs from master gate c68546f06 Fix potential issue with adding a fixed ip ac6224ee6 Use nova zuulv3 job for nova v2 API 196ab8a6c Use base.delete_server in test_servers.py 33c3e60a3 Adds protocol options for test_cross_tenant_traffic 897fc7c8a Remove sys unused Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 409 +++++++++++++++------ HACKING.rst | 4 +- README.rst | 24 +- REVIEWING.rst | 2 +- .../tempest-blacklisted-plugins-registry.header | 7 + ...sed-minimum-bw-allocation-8e5854d5754cec68.yaml | 25 ++ ...-v3-volume-client-library-ad3529260db58f00.yaml | 8 + ...-to-v3-group-types-client-65f717878cf52da0.yaml | 6 + ...d-unstable_test-decorator-a73cf97d4ffcc796.yaml | 11 + .../notes/bug-1647999-7aeda50a8d082d4c.yaml | 8 + ...rtificate_compute_feature-c56efb520d54aff5.yaml | 8 + ...ort-profile-config-option-d67f5cb31f1bc34c.yaml | 2 +- ...recate-dns_servers-option-0xf2f297ee47a5ff.yaml | 6 + ...ntermediate-train-release-0146c624cff9a57f.yaml | 12 + ..._api_microversion_fixture-f52308fc6b6b89f2.yaml | 7 + ...auth-and-identity-options-xa1xd9b8fb948g4f.yaml | 8 + ...precated-identity-options-0ffxd1b8db928e43.yaml | 11 + ...oversion-in-scenario-test-b4fbfdd3a977fc58.yaml | 14 + releasenotes/source/index.rst | 1 + releasenotes/source/v20.0.0.rst | 6 + requirements.txt | 2 +- tempest/api/compute/admin/test_quotas.py | 11 +- tempest/api/compute/admin/test_volume_swap.py | 13 + tempest/api/compute/base.py | 7 +- .../api/compute/flavors/test_flavors_negative.py | 10 +- .../api/compute/servers/test_attach_interfaces.py | 53 ++- tempest/api/compute/servers/test_novnc.py | 19 +- tempest/api/compute/servers/test_server_actions.py | 17 +- tempest/api/compute/servers/test_servers.py | 60 +-- tempest/api/compute/test_extensions.py | 2 +- tempest/api/compute/volumes/test_attach_volume.py | 12 +- .../api/identity/admin/v3/test_endpoint_groups.py | 2 + tempest/api/identity/admin/v3/test_endpoints.py | 34 +- .../identity/admin/v3/test_endpoints_negative.py | 6 +- tempest/api/identity/admin/v3/test_roles.py | 4 + tempest/api/identity/v2/test_users.py | 6 + tempest/api/identity/v3/test_catalog.py | 4 +- tempest/api/identity/v3/test_users.py | 8 + .../admin/test_external_network_extension.py | 1 + .../admin/test_floating_ips_admin_actions.py | 19 +- tempest/api/network/admin/test_negative_quotas.py | 10 +- tempest/api/network/admin/test_ports.py | 16 +- tempest/api/network/admin/test_routers.py | 10 +- tempest/api/network/admin/test_routers_dvr.py | 11 +- tempest/api/network/admin/test_routers_negative.py | 4 +- tempest/api/network/base_security_groups.py | 4 +- tempest/api/network/test_allowed_address_pair.py | 10 +- tempest/api/network/test_extra_dhcp_options.py | 4 +- tempest/api/network/test_floating_ips.py | 60 ++- tempest/api/network/test_floating_ips_negative.py | 2 + tempest/api/network/test_networks.py | 8 +- tempest/api/network/test_ports.py | 47 ++- tempest/api/network/test_routers.py | 47 ++- tempest/api/network/test_security_groups.py | 18 +- tempest/api/volume/admin/test_volume_retype.py | 2 +- tempest/api/volume/base.py | 4 + tempest/api/volume/test_volumes_backup.py | 1 + tempest/api/volume/test_volumes_extend.py | 2 +- tempest/api/volume/test_volumes_snapshots.py | 2 +- tempest/clients.py | 3 + tempest/cmd/cleanup.py | 13 +- tempest/cmd/cleanup_service.py | 92 +++-- tempest/cmd/run.py | 10 +- tempest/common/compute.py | 15 +- tempest/common/utils/linux/remote_client.py | 50 +++ tempest/common/waiters.py | 35 +- tempest/config.py | 73 ++-- tempest/exceptions.py | 5 + .../api_schema/response/compute/v2_1/volumes.py | 3 +- .../api_schema/response/compute/v2_16/servers.py | 3 + .../api_schema/response/compute/v2_19/servers.py | 3 + .../api_schema/response/compute/v2_26/servers.py | 3 + .../api_schema/response/compute/v2_3/servers.py | 3 + .../api_schema/response/compute/v2_47/servers.py | 3 + .../api_schema/response/compute/v2_48/servers.py | 3 + .../api_schema/response/compute/v2_54/servers.py | 3 + .../api_schema/response/compute/v2_57/servers.py | 3 + .../api_schema/response/compute/v2_6/servers.py | 3 + .../api_schema/response/compute/v2_63/servers.py | 3 + .../api_schema/response/compute/v2_70/__init__.py | 0 .../api_schema/response/compute/v2_70/servers.py | 80 ++++ .../api_schema/response/compute/v2_71/__init__.py | 0 .../api_schema/response/compute/v2_71/servers.py | 81 ++++ .../api_schema/response/compute/v2_8/servers.py | 3 + .../api_schema/response/compute/v2_9/servers.py | 3 + tempest/lib/common/api_microversion_fixture.py | 82 +++++ tempest/lib/common/api_version_utils.py | 5 +- tempest/lib/decorators.py | 42 +++ tempest/lib/services/compute/servers_client.py | 9 +- tempest/lib/services/network/__init__.py | 10 +- tempest/lib/services/network/qos_client.py | 70 ++++ .../network/qos_minimum_bandwidth_rules_client.py | 73 ++++ .../lib/services/volume/v3/group_types_client.py | 12 + tempest/lib/services/volume/v3/volumes_client.py | 27 +- tempest/scenario/manager.py | 130 ++++++- .../scenario/test_minbw_allocation_placement.py | 195 ++++++++++ .../scenario/test_network_advanced_server_ops.py | 1 - tempest/scenario/test_network_basic_ops.py | 13 +- tempest/scenario/test_network_v6.py | 5 +- tempest/scenario/test_security_groups_basic_ops.py | 44 ++- tempest/scenario/test_volume_migrate_attached.py | 103 +++++- .../test_qos_minimum_bandwidth_rules_client.py | 137 +++++++ .../volume/v3/test_encryption_types_client.py | 28 +- .../services/volume/v3/test_group_types_client.py | 23 ++ tools/format.sh | 26 +- tools/generate-tempest-plugins-list.py | 71 +++- tools/generate-tempest-plugins-list.sh | 47 ++- .../tempest-integrated-gate-compute-blacklist.txt | 13 + ...empest-integrated-gate-networking-blacklist.txt | 17 + ...st-integrated-gate-object-storage-blacklist.txt | 17 + ...tempest-integrated-gate-placement-blacklist.txt | 19 + .../tempest-integrated-gate-storage-blacklist.txt | 13 + tools/tempest-plugin-sanity.sh | 57 +-- tox.ini | 83 ++++- 125 files changed, 2917 insertions(+), 534 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7520d424a..bf38faed2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ cliff!=2.9.0,>=2.8.0 # Apache-2.0 -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT From no-reply at openstack.org Fri Jul 26 10:19:37 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 10:19:37 -0000 Subject: [release-announce] glance_store 1.0.0 (train) Message-ID: We enthusiastically announce the release of: glance_store 1.0.0: OpenStack Image Service Store Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 1.0.0 ^^^^^ Prelude ******* The Glance Project Team is excited to announce the version 1.0.0 release of the glance_store library. This release marks the finalization of changes introduced on an experimental basis in previous releases beginning with 0.25.0 to support the Glance Multi- store backend support (http://specs.openstack.org/openstack/glance- specs/specs/rocky/implemented/glance/multi-store.html) feature. New Features ************ * Multiple backend stores may be configured using the "glance_store.multi_backend" module. See the documentation of the "create_multi_stores" function in the glance_store Reference Guide (https://docs.openstack.org/glance_store/latest/reference/api/modul es.html) for details. Known Issues ************ * The responses from some functions in the "glance_store.multi_backend" module, which was EXPERIMENTAL until this release, have changed. In particular, the "glance_store.driver.Store.add" function which returns a tuple whose last element is a dictionary of storage system specific information, no longer contains a 'backend' key. Instead, this key is named 'store'. This change extends to any convenience functions that wrap "Store.add". Consumers relying upon the EXPERIMENTAL behavior should not upgrade past version 0.29.1. Now that the "multi_backend" module is fully supported in release 1.0.0, it will not undergo any more backward- incompatible changes. Upgrade Notes ************* * Consuming services should begin the transition away from the "glance_store.backend" module and instead use the "glance_store.multi_backend" module. The "backend" module is expected to be removed during the 'U' development cycle. Deprecation Notes ***************** * The Sheepdog driver is deprecated in this release and is subject to removal at the beginning of the 'U' development cycle, following the OpenStack standard deprecation policy (https://governance.openstack.org/reference/tags/assert_follows- standard-deprecation.html). The driver is being removed because Sheepdog is not maintained upstream (http://lists.wpkg.org/pipermail/sheepdog/2019-March/068451.html). Additionally, the Sheepdog driver is no longer tested in the OpenStack gate. * The 'stores' and 'default_store' configuration options have been deprecated for removal since the OpenStack Rocky release. They are subject to removal early in the 'U' development cycle. When these options are removed, the "glance_store.backend" module, that depends on them, will be removed as well. Changes in glance_store 0.29.1..1.0.0 ------------------------------------- f2f97e1 Release note and documentation for 1.0.0 579a928 Deprecate Sheepdog driver 59daa4c Change location metadata key 'backend' to 'store' a7a6064 Remove sheepdog tests from zuul config c408c2e Add Python 3 Train unit tests 69420d6 Remove outdated line in tox.ini Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 +- glance_store/_drivers/cinder.py | 2 +- glance_store/_drivers/filesystem.py | 2 +- glance_store/_drivers/rbd.py | 2 +- glance_store/_drivers/sheepdog.py | 25 +++++- glance_store/_drivers/swift/store.py | 2 +- glance_store/_drivers/vmware_datastore.py | 2 +- glance_store/multi_backend.py | 97 +++++++++++++++++++++- ...deprecate-sheepdog-driver-1f9689c327f313d4.yaml | 12 +++ .../notes/release-1.0.0-7ab43e91523eb3c8.yaml | 48 +++++++++++ setup.cfg | 1 + tox.ini | 3 +- 19 files changed, 233 insertions(+), 53 deletions(-) From no-reply at openstack.org Fri Jul 26 10:23:31 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 10:23:31 -0000 Subject: [release-announce] cinder 13.0.6 (rocky) Message-ID: We contentedly announce the release of: cinder 13.0.6: OpenStack Block Storage This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 13.0.6 ^^^^^^ Bug Fixes * Kaminario FC and iSCSI drivers: Fixed bug 1829398 (https://bugs.launchpad.net/cinder/+bug/1829398) where force detach would fail. * NetApp iSCSI drivers no longer use the discovery mechanism for multipathing and they always return all target/portals when attaching a volume. Thanks to this, volumes will be successfully attached even if the target/portal selected as primary is down, this will be the case for both, multipath and single path connections. Changes in cinder 13.0.5..13.0.6 -------------------------------- 79212ffdb Revert "Declare multiattach support for HPE MSA" 2990af850 Remove Sheepdog tests from zuul config 4fd1cdcf6 [VNX] Fix test case issue 00cfd67d0 Fix python3 compatibility of rbd get_fsid b0cf233d8 Create new image volume cache entry when cloning fails d5291871b lvm: Only use initiators when comparing connector dicts 4467c231b Fix "connector=None" issue in Kaminario drivers 81bf95370 Make sure we install cinder requirements during the correct tox phase 33742fff1 Remove LOCI publishing from the post pipeline 8d5ce262c 3PAR: Provide an option duing creation of volume from snapshot 8be2bb6d2 NetApp: Return all iSCSI targets-portals fc658f492 Declare multiattach support for HPE MSA Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 --- .../volume/drivers/dell_emc/vnx/mocked_vnx.yaml | 13 +- .../volume/drivers/dell_emc/vnx/test_adapter.py | 12 +- .../drivers/netapp/dataontap/test_block_base.py | 50 ++-- .../drivers/netapp/dataontap/test_block_cmode.py | 13 - .../volume/drivers/netapp/eseries/test_driver.py | 10 +- .../unit/volume/flows/test_create_volume_flow.py | 63 +++-- cinder/volume/drivers/hpe/hpe_3par_common.py | 74 +++++- .../volume/drivers/kaminario/kaminario_common.py | 11 +- cinder/volume/drivers/kaminario/kaminario_fc.py | 24 +- cinder/volume/drivers/lvm.py | 3 +- .../volume/drivers/netapp/dataontap/block_base.py | 32 +-- .../volume/drivers/netapp/dataontap/block_cmode.py | 23 -- cinder/volume/drivers/netapp/eseries/library.py | 28 ++- cinder/volume/drivers/netapp/utils.py | 25 +- cinder/volume/drivers/rbd.py | 20 +- cinder/volume/flows/manager/create_volume.py | 30 ++- ...minario-cinder-driver-bug-44c728f026394a85.yaml | 6 + .../netapp-non-discovery-19af4e10f7b190ea.yaml | 8 + tox.ini | 5 +- 25 files changed, 605 insertions(+), 253 deletions(-) From no-reply at openstack.org Fri Jul 26 17:08:21 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 17:08:21 -0000 Subject: [release-announce] cinder 12.0.8 (queens) Message-ID: We enthusiastically announce the release of: cinder 12.0.8: OpenStack Block Storage This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 12.0.8 ^^^^^^ Bug Fixes * Fixed NetApp SolidFire bug that avoided multiatached volumes to be deleted. * Kaminario FC and iSCSI drivers: Fixed bug 1829398 (https://bugs.launchpad.net/cinder/+bug/1829398) where force detach would fail. * NetApp iSCSI drivers no longer use the discovery mechanism for multipathing and they always return all target/portals when attaching a volume. Thanks to this, volumes will be successfully attached even if the target/portal selected as primary is down, this will be the case for both, multipath and single path connections. Changes in cinder 12.0.7..12.0.8 -------------------------------- f55d3a6f6 [VNX] Fix test case issue 2cd3176c4 PowerMax Queens docs - clarifying that PowerMax is supported in Queens 1accbbc7a Create new image volume cache entry when cloning fails 0b18f8e47 Fix rbd driver json loading 8d7620b47 Fix "connector=None" issue in Kaminario drivers e8d68422e lvm: Only use initiators when comparing connector dicts 7cc7322a0 NetApp: Return all iSCSI targets-portals 661337416 Change the matching method of the backup driver ad8e3dc8a Make sure we install cinder requirements during the correct tox phase e32ecf6cd Dell EMC: SC FC Driver wwns api response in lower 1fc75e74d Remove LOCI publishing from the post pipeline b924a77bc OpenDev Migration Patch 3c4b0c130 NetApp SolidFire: Fix multi-attach volume deletion Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 5 +- cinder/backup/manager.py | 45 ++++++------ .../unit/volume/drivers/dell_emc/sc/test_scapi.py | 84 +++++++++++----------- .../volume/drivers/dell_emc/vnx/mocked_vnx.yaml | 13 ++-- .../volume/drivers/dell_emc/vnx/test_adapter.py | 12 ++-- .../drivers/netapp/dataontap/test_block_base.py | 50 ++++++------- .../drivers/netapp/dataontap/test_block_cmode.py | 13 ---- .../volume/drivers/netapp/eseries/test_driver.py | 10 +-- .../volume/drivers/solidfire/test_solidfire.py | 43 +++++++++++ .../unit/volume/flows/test_create_volume_flow.py | 61 +++++++++++----- .../drivers/dell_emc/sc/storagecenter_api.py | 9 ++- .../volume/drivers/kaminario/kaminario_common.py | 11 ++- cinder/volume/drivers/kaminario/kaminario_fc.py | 24 ++++++- cinder/volume/drivers/lvm.py | 3 +- .../volume/drivers/netapp/dataontap/block_base.py | 32 ++++----- .../volume/drivers/netapp/dataontap/block_cmode.py | 23 ------ cinder/volume/drivers/netapp/eseries/library.py | 28 ++++---- cinder/volume/drivers/netapp/utils.py | 25 +++++-- cinder/volume/drivers/rbd.py | 3 + cinder/volume/drivers/solidfire.py | 7 +- cinder/volume/flows/manager/create_volume.py | 30 +++++--- .../block-storage/drivers/emc-vmax-driver.rst | 8 ++- .../cinder-tempest-dsvm-lvm-lio-barbican/run.yaml | 8 +-- .../fix-multiattach-deletion-b3990acf1f5fd378.yaml | 4 ++ ...minario-cinder-driver-bug-44c728f026394a85.yaml | 6 ++ .../netapp-non-discovery-19af4e10f7b190ea.yaml | 8 +++ tox.ini | 5 +- 34 files changed, 490 insertions(+), 237 deletions(-) From no-reply at openstack.org Fri Jul 26 18:22:35 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:22:35 -0000 Subject: [release-announce] os-net-config 11.1.0 (train) Message-ID: We exuberantly announce the release of: os-net-config 11.1.0: OpenStack network configuration This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 11.0.0..11.1.0 --------------------------------------- 9aaaeb2 ifdown does not work if no ifcfg file exist 6cb25b0 Add Python 3 Train unit tests 54d96c4 Moving insignificant messages from error to warning in sriov_config.py 5d44b58 Restructuring the method of vf-representor renaming 4919946 Fixed the false InvalidConfigException for vfid=0 b04d8f3 Fix handling of SR-IOV PF routes 7668abb [FUP] Update sriov_pf.yaml samle with ethtool_opt Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/sriov_pf.json | 3 +- etc/os-net-config/samples/sriov_pf.yaml | 2 + os_net_config/__init__.py | 4 + os_net_config/impl_ifcfg.py | 4 + os_net_config/objects.py | 15 ++-- os_net_config/sriov_config.py | 131 ++++++++++++++++++++++++-------- setup.cfg | 5 ++ tox.ini | 2 +- zuul.d/layout.yaml | 4 +- 11 files changed, 219 insertions(+), 42 deletions(-) From no-reply at openstack.org Fri Jul 26 18:23:33 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:23:33 -0000 Subject: [release-announce] python-tripleoclient 12.1.0 (train) Message-ID: We are chuffed to announce the release of: python-tripleoclient 12.1.0: TripleO client This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * The validations can now be performed by calling Mistral or by calling "ansible-playbook". By default, the latter is used. The new "--use-mistral" option allows to execute either groups or a set of specific validations by calling Mistral instead of using the default mechanism, ie. "ansible-playbook". * OpenStack overcloud services cli and api is currently accessed through overcloudrc and clouds.yaml. This adds support for overcloud clouds.yaml file generation after deployment. The file can be found at ~/.config/openstack/clouds.yaml and /etc/openstack/clouds.yaml. * Undercloud "ctlplane" subnets can now have individual nameservers (per-subnet option "dns_nameservers"). If no subnet specific nameservers are specified for a subnet it will fall back to "undercloud_nameservers". * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image delete* allows you to maintain those images, and remove those that are no longer required. * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image list* gives you insight into your images. * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image show* will perform an inspection on a given image, and present the details. * Adds *openstack undercloud minion install* and *openstack undercloud minion upgrade* to install or upgrade an undercloud minion that can be used to scale heat-engine and ironic-conductor horizontally. Upgrade Notes ************* * The *openstack undercloud deploy* command has been removed. Use *openstack tripleo deploy* instead. Other Notes *********** * When running with --config-download-only, the enable ssh admin will now be skipped. Skipping the ssh admin workflow saves time when trying to do the config download workflow only. If the ssh admin workflow needs to be rerun, the "openstack overcloud admin" command can be used. Changes in python-tripleoclient 12.0.0..12.1.0 ---------------------------------------------- 4fc5e742 Implement tripleo container image show command e0d35b30 Renaming 'Metadata' column by 'Parameters' when listing validations 0a8fc376 Added for support for generating overcloud clouds.yaml 317f3cff Ensure files are closed, ensure no ResourceWarning on console f10fa0b3 Allow running validations by group using Ansible by default 27e1e4f8 Allow running validations by name using Ansible by default. 9de3452c Add log_path_dir parameter 978e16ef Implement tripleo container image delete command a7dd7a6b Validate all or no subnets use dns_nameservers 1acbef8a Improve validations run outputs through the CLI bd354f1f Ensure files exist before building/uploading plan e1a051d6 Send terminal erase sequence on tripleo deploy f1450b3a Don't pass the DNSServers param in undercloud env f05cbe32 mock kernel_arch() in tests. 831b1e7b Fix minion config test ee16c094 Allow per-subnet DNSNameServers for ctlplane network e096cca5 Remove undercloud deploy a37cd7c9 Allow deeper levels of nesting for pdf builds 96d39dc1 Improve handling of empty resource_registry 8de77cbe Add minion installation 5e66a91e Set IPv6 params True if undercloud local_ip is IPv6 c880c8fd Bump keystone middleware version to 4.18 81d26455 Fixup sphinx requirements 06fddc55 Use wait for stack ready from utils for tripleo deploy cb42cfe3 Retry heat stack polling on gateway problems d26d7d77 Drop config-download-environment.yaml from deployed_server_env 7ad1b812 nova-less-deploy: stop using glance for ironic-python-agent images 5249fbb2 Allow run_update_ansible_action run with Mistral or Ansible a715d271 Remove scenario008 jobs 73bc6f94 Improve yaml output of "openstack overcloud node provision" 50744f7c Wire in convert_docker_params 6aa19023 doc/requirements: fix sphinx requirement lines 7bd6a520 Don't look for execution in payload 8d84884f Add undercloud.conf enable_nova option d5126542 Skip ssh admin workflow with --config-download-only 8a3dc512 Change source for upper constraints 78b7a9d8 Update sphinx requirements for python 3.x 611b286c Implement tripleo container image list command de4bf54a Modify the constraints url in tox. Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + config-generator/minion.conf | 3 + lower-constraints.txt | 5 +- ...-using-Ansible-by-default-2dac0dfd9c7a4690.yaml | 8 + ...rcloud-cloud-yaml-support-fae7585c46eda8e8.yaml | 8 + .../per-subnet-nameservers-d53b5cdc6d099a6a.yaml | 6 + .../remove-undercloud-deploy-3cbbfe5f159cc71d.yaml | 5 + ...-for-config-download-only-442255cc3ac73534.yaml | 6 + ...eo-container-image-delete-050ab75bb6e7187d.yaml | 9 + ...pleo-container-image-list-97d38a0e8a899d89.yaml | 8 + ...pleo-container-image-show-af7453683ad74182.yaml | 8 + ...undercloud-minion-install-6b369d8f5f3d6a89.yaml | 6 + requirements.txt | 2 +- setup.cfg | 7 +- tox.ini | 7 +- tripleoclient/command.py | 4 + tripleoclient/config/minion.py | 159 ++++++++ tripleoclient/config/standalone.py | 14 +- tripleoclient/config/undercloud.py | 16 +- tripleoclient/constants.py | 9 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 17 +- .../test_overcloud_external_update.py | 4 +- .../test_overcloud_external_upgrade.py | 4 +- .../test_overcloud_ffwd_upgrade.py | 4 +- .../v1/overcloud_image/test_overcloud_image.py | 158 ++------ .../v1/overcloud_update/test_overcloud_update.py | 4 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 12 +- tripleoclient/utils.py | 300 ++++++++++++--- tripleoclient/v1/container_image.py | 173 +++++++++ tripleoclient/v1/minion_config.py | 405 +++++++++++++++++++++ tripleoclient/v1/mock_clouds_yaml.py | 3 + tripleoclient/v1/overcloud_deploy.py | 52 ++- tripleoclient/v1/overcloud_external_update.py | 2 +- tripleoclient/v1/overcloud_external_upgrade.py | 2 +- tripleoclient/v1/overcloud_ffwd_upgrade.py | 4 +- tripleoclient/v1/overcloud_image.py | 38 +- tripleoclient/v1/overcloud_node.py | 42 ++- tripleoclient/v1/overcloud_update.py | 2 +- tripleoclient/v1/overcloud_upgrade.py | 2 +- tripleoclient/v1/tripleo_deploy.py | 74 +++- tripleoclient/v1/tripleo_validator.py | 99 +++-- tripleoclient/v1/undercloud_config.py | 24 +- tripleoclient/v1/undercloud_deploy.py | 35 -- tripleoclient/v1/undercloud_minion.py | 156 ++++++++ tripleoclient/v1/undercloud_preflight.py | 31 ++ tripleoclient/workflows/deployment.py | 22 ++ tripleoclient/workflows/validations.py | 15 +- zuul.d/layout.yaml | 2 - 63 files changed, 2479 insertions(+), 512 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 51e2d413..3f5c9329 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=10.6.1 # Apache-2.0 +tripleo-common>=10.7.0 # Apache-2.0 From no-reply at openstack.org Fri Jul 26 18:23:48 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:23:48 -0000 Subject: [release-announce] tripleo-common 11.1.0 (train) Message-ID: We high-spiritedly announce the release of: tripleo-common 11.1.0: A common library for TripleO workflows. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * The *bindep.txt* file located in the project root contains all of the basic required packages needed when running local tests. * Developers can now use bindep to list system requirements. The bindep command will load the list of packages for the given platform using the *bindep.txt* file. * Bindep can now be leveraged via tox using the environment **bindep**. This tox environment will use bindep via the *bindep- install* script to install any missing packages on the local system which are required for development purposes. Bug Fixes ********* * The verbosity of the config-download ansible tasks now defaults to 0 instead of 1. This makes the tasks not verbose by default. The verbosity specified on the command line with the deployment command is now honored and can be used to disable verbosity or increase the verbosity level as needed. * The passphrase for config option 'server_certs_key_passphrase', is used as a Fernet key in Octavia and thus must be 32 bytes long. TripleO will now auto-generate 32 bytes long passphrase for OctaviaServerCertsKeyPassphrase. Changes in tripleo-common 11.0.0..11.1.0 ---------------------------------------- b40e95ec Set container=oci for our containers 33bd9240 Skip standalone deploys if tox jobs fail fd22cde2 Update kolla builder tests for new service path cbd8d715 Add get_key tasks for package update 9bcfc867 Set scenario009 job voting to false 0e08cc74 Rsyslog image pull ab0c5eb6 Make a more ansible-ish test on hieradata_files list content 0be1be77 Ensure we're raising proper exceptions 0faa6328 Correct how we fetch External and InternalApi networks name b58b71ec Remove the tripleo.plan_management.v1.list_sample_plans workflow 70b1daa4 Create _cell_node_names if nova_additional_cell 3b15a4dc Remove pika from container builds cc4a3447 Make instances name/hostname optional 8ab13dd5 Also write NetworkConfig to role dir 3c4cb58d Added support of overcloud os_cloud 460b99ae Image Uploader - get_undercloud_registry IPv6 50e464c6 Remove tripleo-common/playbooks 59f82317 Add fqdn and cloud_domain templates to tripleo-hieradata b29b44c3 Add net_ip_map template to tripleo-hieradata 4596f0f3 Exit 1 when container image prepare fails aa8132b7 Processing available Ansible variables as 'parameters' not as 'metadata' 56921742 Get all the available Ansible variables for each validations 7d0da3b4 Stop writing allnodes_vars in inventory d60eb1b4 Python 3 fixes for tripleo-hieradata role 29ef322d Remove the tripleo.plan_management.v1.publish_ui_logs_to_swiftworkflow a2fef2af Remove the tripleo.plan_management.v1.download_logs workflow de2ab558 Ensure that OctaviaServerCertsKeyPassphrase is 32-byte long 1ebdaa70 Add sudo commands for validations tempfile created in Python3 ecd37380 Handle empty NetworkConfig 6d152eaf Linting hardening via pre-commit 1111d4ad Adds tox environment to test requirements conflicts b485aa18 Remove roles that have been imported into tripleo-ansible 8fb1b9ed Add new images for ceph dashboard composable service. 67440277 Check third-party container image metadata. 372be646 Don't calculate vips for some services a0100c43 Add vip_data template to tripleo-hieradata 008af910 Add all_nodes template to tripleo-hieradata. 73f27fe3 remove plotnetcfg from overcloud image yaml ca5f7f8f Fix regression in UpdateParametersAction 87c1cac5 trigger image-build off of image-yaml changes c94ee2bb Add template mode to tripleo-hieradata 06b38c4f Install dumb-init rpm 557fcf67 Minor tox molecule fixes 51d723a9 Handle registries with incorrect certs correctly 94c0c092 tripleo-hieradata: add hieradata_files param 7e8c221f Adds job that runs molecule tests afcd0890 tripleo-hieradata/per-host: use inventory_hostname 2d541ba5 Add tripleo-ansible directory namespace a1495d5f Fix ansible-lint errors 0f8d7630 Don't validate stack in task for backup ceph fetch dir 9e26f857 tripleo-hieradata: introduce hieradata_per_host 0c2efab5 Populate Ansible Host variables with AnsibleHostVarsMap 6cfc2046 Fix tripleo-upgrade-hiera key deleting 26a3d7e6 Fix bashate and flake8 errors 6942ac00 Update the Undercloud Services list in the inventory. 85b7a4ee Render NetworkConfig into config-download dir 70a9cab2 Preserve file extension in config-download 45998199 Remove scenario008 jobs 4071b56b Set resource_registry deployed-server port 8f2e1064 Increase timeout of temp swift URLs from 1 to 4 hours 067473ca Fix bare variable usage in ansible 3f486307 Add ceph-ansible support to tripleo-ansible-inventory 8862ea83 Add bindep support to tox 4132ee40 Add general LOG in kolla_builder.py. 82450668 Rework create_or_find_kernel_and_ramdisk to match the current reality 709f3b4d Convert Docker*Image parameters c58d7cda Transfer all images in a manifest list 8cf8db2f Replace git.openstack.org URLs with opendev.org URLs 12a415a8 utils/config: generate param_config.json if param_config exists 86bb40cf Don't force verbosity of 1 for config-download 5a11fb16 Remove ProcessTemplatesAction as base class 8519dccc Update programming language mentioned in setup.cfg Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 11 + .pre-commit-config.yaml | 36 ++ README.rst | 4 +- ansible_plugins/callback/json_error.py | 62 --- bindep.txt | 35 ++ .../container_image_prepare_defaults.yaml | 16 + container-images/overcloud_containers.yaml | 10 +- container-images/overcloud_containers.yaml.j2 | 421 +++++++++++---------- .../tripleo_kolla_template_overrides.j2 | 13 +- healthcheck/cron | 8 +- healthcheck/opendaylight-api | 2 +- healthcheck/zaqar-socket | 8 +- image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute.yaml | 1 - lower-constraints.txt | 3 - playbooks/octavia-files.yaml | 95 ----- playbooks/roles/common/defaults/main.yml | 19 - .../octavia-controller-config/handlers/main.yml | 5 - .../roles/octavia-controller-config/meta/main.yml | 2 - .../tasks/certificate.yml | 22 -- .../roles/octavia-controller-config/tasks/main.yml | 19 - .../tasks/netinterface.yml | 20 - .../octavia-controller-config/tasks/netport.yml | 57 --- .../octavia-controller-config/tasks/octavia.yml | 55 --- .../templates/ifcfg-br-int.j2 | 6 - .../octavia-controller-config/templates/ifcfg.j2 | 19 - .../templates/manager-post-deploy.conf.j2 | 2 - .../defaults/main.yml | 1 - .../octavia-controller-post-config/meta/main.yml | 2 - .../octavia-controller-post-config/tasks/main.yml | 46 --- .../roles/octavia-overcloud-config/meta/main.yml | 2 - .../octavia-overcloud-config/tasks/certs_gen.yml | 72 ---- .../roles/octavia-overcloud-config/tasks/main.yml | 6 - .../octavia-overcloud-config/tasks/network.yml | 82 ---- .../octavia-overcloud-config/tasks/quotas.yml | 4 - playbooks/roles/octavia-undercloud/meta/main.yml | 2 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 118 ------ playbooks/roles/octavia-undercloud/tasks/main.yml | 63 --- playbooks/rotate-keys.yaml | 72 ---- playbooks/swift_ring_rebalance.yaml | 121 ------ .../notes/bindep-tox-606dbe4ddf68f7a6.yaml | 12 + ...config-download-verbosity-ab2e89e169c208a7.yaml | 7 + ...fix-api-network-rendering-5a65009051a0f464.yaml | 2 +- ...rver_certs_key_passphrase-60cba4653109992c.yaml | 5 + ...date-programming-language-54ded15322426458.yaml | 5 + releasenotes/source/conf.py | 113 +++--- roles/tripleo-bootstrap/README.md | 39 -- roles/tripleo-bootstrap/defaults/main.yml | 13 - roles/tripleo-bootstrap/handlers/main.yml | 1 - roles/tripleo-bootstrap/meta/main.yml | 1 - roles/tripleo-bootstrap/tasks/main.yml | 94 ----- roles/tripleo-container-rm/README.md | 34 -- roles/tripleo-container-rm/defaults/main.yaml | 2 - roles/tripleo-container-rm/tasks/docker.yaml | 21 - roles/tripleo-container-rm/tasks/main.yaml | 5 - roles/tripleo-container-rm/tasks/podman.yaml | 41 -- roles/tripleo-container-tag/README.md | 42 -- roles/tripleo-container-tag/defaults/main.yaml | 3 - roles/tripleo-container-tag/tasks/main.yaml | 7 - roles/tripleo-create-admin/README.md | 57 --- roles/tripleo-create-admin/defaults/main.yml | 2 - .../tripleo-create-admin/tasks/authorize_user.yml | 5 - roles/tripleo-create-admin/tasks/create_user.yml | 38 -- roles/tripleo-create-admin/tasks/main.yml | 2 - roles/tripleo-docker-rm/README.md | 42 -- roles/tripleo-docker-rm/defaults/main.yaml | 2 - roles/tripleo-docker-rm/tasks/main.yaml | 22 -- roles/tripleo-hieradata/README.md | 2 + roles/tripleo-hieradata/defaults/main.yaml | 11 +- roles/tripleo-hieradata/tasks/all_hosts.yaml | 8 + roles/tripleo-hieradata/tasks/hieradata_vars.yaml | 5 + roles/tripleo-hieradata/tasks/main.yaml | 60 ++- roles/tripleo-hieradata/tasks/per_host.yaml | 9 + roles/tripleo-hieradata/templates/all_nodes.j2 | 56 +++ .../tripleo-hieradata/templates/bootstrap_node.j2 | 3 + roles/tripleo-hieradata/templates/cloud_domain.j2 | 3 + roles/tripleo-hieradata/templates/fqdn.j2 | 11 + roles/tripleo-hieradata/templates/net_ip_map.j2 | 18 + roles/tripleo-hieradata/templates/vip_data.j2 | 54 +++ roles/tripleo-hieradata/test-playbook.yaml | 15 +- roles/tripleo-image-serve/README.md | 34 -- roles/tripleo-image-serve/defaults/main.yml | 5 - roles/tripleo-image-serve/handlers/main.yml | 16 - roles/tripleo-image-serve/tasks/main.yml | 42 -- .../templates/image-serve.conf.j2 | 29 -- roles/tripleo-module-load/defaults/main.yaml | 7 - roles/tripleo-module-load/tasks/main.yaml | 52 --- .../templates/module-load.conf.j2 | 2 - roles/tripleo-persist/tasks/cleanup.yml | 4 +- roles/tripleo-persist/tasks/persist.yml | 14 +- roles/tripleo-persist/tasks/restore.yml | 8 +- roles/tripleo-ssh-known-hosts/README.md | 41 -- roles/tripleo-ssh-known-hosts/defaults/main.yml | 3 - roles/tripleo-ssh-known-hosts/handlers/main.yml | 1 - roles/tripleo-ssh-known-hosts/meta/main.yml | 1 - roles/tripleo-ssh-known-hosts/tasks/main.yml | 30 -- roles/tripleo-transfer/README.md | 57 --- roles/tripleo-transfer/defaults/main.yml | 5 - roles/tripleo-transfer/tasks/cleanup.yml | 6 - roles/tripleo-transfer/tasks/main.yml | 77 ---- roles/tripleo-transfer/test-playbook.yml | 11 - .../tasks/create-tripleo-upgrade-file.yml | 10 +- roles/tripleo-upgrade-hiera/tasks/remove-all.yml | 2 +- roles/tripleo-upgrade-hiera/tasks/remove.yml | 14 +- roles/tripleo-upgrade-hiera/tasks/set.yml | 2 +- scripts/bindep-install | 45 +++ scripts/pull-puppet-modules | 2 +- scripts/tripleo-build-images | 14 +- scripts/tripleo-config-download | 5 +- scripts/tripleo-container-image-prepare | 2 + scripts/tripleo-deploy-openshift | 118 +++--- setup.cfg | 21 +- sudoers | 6 +- test-requirements.txt | 6 +- tox.ini | 99 +++-- tripleo_common/actions/ansible.py | 10 + tripleo_common/actions/baremetal_deploy.py | 61 ++- tripleo_common/actions/config.py | 10 +- tripleo_common/actions/deployment.py | 50 ++- tripleo_common/actions/package_update.py | 11 +- tripleo_common/actions/parameters.py | 31 +- tripleo_common/actions/scale.py | 11 +- tripleo_common/actions/templates.py | 2 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 30 +- tripleo_common/image/image_export.py | 39 +- tripleo_common/image/image_uploader.py | 195 ++++++---- tripleo_common/image/kolla_builder.py | 14 +- tripleo_common/inventory.py | 34 +- tripleo_common/templates/deployments.yaml | 24 +- tripleo_common/templates/host_var_server.j2 | 8 +- .../utils/data/host_vars/overcloud-controller-0 | 3 + .../utils/data/host_vars/overcloud-novacompute-0 | 2 + .../utils/data/host_vars/overcloud-novacompute-1 | 2 + .../utils/data/host_vars/overcloud-novacompute-2 | 2 + tripleo_common/utils/clouds_yaml.py | 74 ++++ tripleo_common/utils/common.py | 27 ++ tripleo_common/utils/config.py | 68 +++- tripleo_common/utils/glance.py | 48 +-- tripleo_common/utils/nodes.py | 18 +- tripleo_common/utils/overcloudrc.py | 18 +- tripleo_common/utils/passwords.py | 2 + tripleo_common/utils/process.py | 4 +- tripleo_common/utils/validations.py | 11 +- workbooks/deployment.yaml | 38 +- workbooks/fernet-key-rotate.yaml | 2 +- workbooks/package_update.yaml | 25 ++ workbooks/plan_management.yaml | 227 +---------- workbooks/swift_ring_rebalance.yaml | 2 +- zuul.d/layout.yaml | 41 +- 169 files changed, 2200 insertions(+), 2896 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 698e4363..aec5dbe7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,2 +6,0 @@ openstackdocstheme>=1.18.1 # Apache-2.0 -hacking>=1.1.0,<1.2.0 # Apache-2.0 - @@ -12 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2; python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2; python_version>='3.4' # BSD @@ -20 +18,0 @@ urllib3>=1.21.1 # MIT -bashate>=0.2 # Apache-2.0 From no-reply at openstack.org Fri Jul 26 18:24:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:24:04 -0000 Subject: [release-announce] os-collect-config 10.4.0 (train) Message-ID: We contentedly announce the release of: os-collect-config 10.4.0: Collect and cache metadata, run hooks on changes. This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 10.3.0..10.4.0 ------------------------------------------- 8cda3f6 Add Python 3 Train unit tests fb53934 Replace git.openstack.org URLs with opendev.org URLs 45d7c54 OpenDev Migration Patch 48f03e5 Change python3.5 job to python3.7 job on Stein+ Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- setup.cfg | 17 +++++++++++------ tox.ini | 4 ++-- zuul.d/layout.yaml | 3 +-- 5 files changed, 16 insertions(+), 12 deletions(-) From no-reply at openstack.org Fri Jul 26 18:24:10 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:24:10 -0000 Subject: [release-announce] puppet-tripleo 11.1.0 (train) Message-ID: We are psyched to announce the release of: puppet-tripleo 11.1.0: Puppet module for OpenStack TripleO This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * Added new parameter 'mpm_module' for the base Apache profile to configure the used MPM module. Defaults to 'prefork', which is also the default value for the config files installed with the package. * Two custom per-service hiera keys are added tripleo::haproxy::::internal_bind_options and tripleo::haproxy::::public_bind_options. They control additional custom options that can be added to the bind line of a specific service configuration in haproxy. One use case is to force older TLS versions for internal APIs that end up pointing to devices that do not support the latest TLS standard. They accept a single string or an array of strings. * Adds profile for rsyslogd composable service which aims to replace fluentd with the same behaviour. This means that rsyslog will be tailing OpenStack log files and forwarding it to central log collector (ELK) * Added TLS support for ELasticsearch output plugin in rsyslog service. Known Issues ************ * Allow a hiera key to add an additional rabbitmq policy in the resource agend. Deprecation Notes ***************** * The tuned puppet manifest for *tuned* was removed. The heat template invoking this manifest has been converted to Ansible. Bug Fixes ********* * The old DEFAULT/dhcp_domain setting was moved to api/dhcp_domain. nova::network::neutron::dhcp_domain will be removed later in the cycle. We need include nova::metadata which sets the new [api]/dhcp_domain as this is used by the virt driver to generate the config drive. Other Notes *********** * Add dateext and related paramters for containerized logrotate service to find easily when logfiles were rotated. Changes in puppet-tripleo 11.0.0..11.1.0 ---------------------------------------- 5c0380e6 Bump metadata for Train Milestone 2 e1cc8d0b Add tcp-check connect port line to haproxy redis stanza 6fb9d8e6 Allow to configure Apache MPM module 6e267158 Cleanup uuid == docker 5c10f331 Close OVN VIP race by adding an ordering constraint 5061ed8b Support TLS deployments with KernelDisableIPv6 enabled 1eafeb67 Add dateext and related parameters for logrotate 3273d291 Include nova::metadata to compute profile 7970733c Replace hiera('service_names') by hiera('enabled_services') f8eb9096 Remove unnecessary logic bcb17115 Add TLS support for rsyslog 03dd75eb Force to use markdown to prevent pypi issue bac59f43 Fix rabbitmq staged upgrade 77ffbe05 Fix amphora provider driver description 04c6f343 Remove tuned puppet manifest 392eacb0 Force --hostonly when regenerating the initramfs d4bd49ec Patch fluentd module for unit tests until code lands 31e5cc36 Fix bootstrap node for nova conductor 914cf1f1 Allow enabling custom backends with manila 526d040c Quote the hiera dot notation e9484ac7 Do not invoke host config in agent config 610c8d8d RabbitMQ: always allow promotion on HA queue during failover e9d74005 Remove scenario008 jobs 42f07b25 Allow overriding pacemaker_node_ips for staged upgrade ff13fa13 Base profile for rsyslogd becc4245 Explicitly disable all MySQL/MariaDB query_cache use e452c3d5 Introduce tripleo::config 08630540 Add region support for instance HA d585e8a1 Don't require memcached_node_ips when deploying keystone 8d2c3a0e IHA robustness improvements d319662c Allow custom per-service bind_options for haproxy b0515a89 add glue for nova serialproxy support Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 10 +- manifests/config.pp | 44 ++++++++ manifests/fencing.pp | 2 +- manifests/firewall.pp | 2 +- manifests/firewall/service_rules.pp | 2 +- manifests/haproxy.pp | 4 +- manifests/haproxy/endpoint.pp | 16 ++- manifests/haproxy/horizon_endpoint.pp | 14 +-- manifests/haproxy/service_endpoints.pp | 4 +- manifests/profile/base/apache.pp | 11 +- manifests/profile/base/database/mysql.pp | 2 + manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/kernel.pp | 2 +- manifests/profile/base/keystone.pp | 2 +- manifests/profile/base/logging/fluentd.pp | 2 +- manifests/profile/base/logging/logrotate.pp | 15 +++ manifests/profile/base/logging/rsyslog.pp | 120 +++++++++++++++++++++ .../profile/base/logging/rsyslog/file_input.pp | 37 +++++++ manifests/profile/base/manila/share.pp | 40 +++---- manifests/profile/base/metrics/collectd.pp | 2 +- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 4 +- manifests/profile/base/neutron/sriov.pp | 1 - manifests/profile/base/nova/compute.pp | 5 + manifests/profile/base/nova/conductor.pp | 2 +- manifests/profile/base/nova/libvirt.pp | 2 +- manifests/profile/base/nova/migration/target.pp | 4 +- manifests/profile/base/nova/serialproxy.pp | 33 ++++++ manifests/profile/base/octavia/api.pp | 2 +- manifests/profile/base/pacemaker.pp | 4 +- manifests/profile/base/pacemaker/instance_ha.pp | 9 +- manifests/profile/base/tuned.pp | 41 ------- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 12 ++- manifests/profile/pacemaker/rabbitmq_bundle.pp | 45 +++++--- manifests/tls_proxy.pp | 9 +- metadata.json | 2 +- ...xt-and-related-parameters-58dd288c74b818f7.yaml | 5 + .../notes/apache_mpm_tuning-deafdf6610ce57b2.yaml | 6 ++ .../haproxy-custom-bind-opts-09226d990c62063d.yaml | 10 ++ ..._compute_include_metadata-21757b44cb976e5d.yaml | 7 ++ .../rabbitmq_extra_policies-69cbc0a4afeac963.yaml | 5 + releasenotes/notes/rsyslog-205c11903ed92bdf.yaml | 5 + .../notes/rsyslog-tls-dfa676eda2ec646f.yaml | 3 + .../notes/tuned-removed-ab68a7109a1e7403.yaml | 4 + setup.cfg | 1 + spec/classes/tripleo_config_spec.rb | 45 ++++++++ spec/classes/tripleo_profile_base_apache_spec.rb | 9 ++ ...pleo_profile_base_database_mysql_client_spec.rb | 12 +-- .../tripleo_profile_base_logging_rsyslog_spec.rb | 105 ++++++++++++++++++ .../tripleo_profile_base_octavia_api_spec.rb | 2 +- .../classes/tripleo_profile_base_pacemaker_spec.rb | 2 +- spec/classes/tripleo_profile_base_tuned_spec.rb | 65 ----------- ...profile_base_logging_rsyslog_file_input_spec.rb | 60 +++++++++++ spec/fixtures/hieradata/step2.yaml | 10 ++ spec/fixtures/hieradata/step4.yaml | 2 +- templates/logrotate/containers_logrotate.conf.erb | 9 ++ zuul.d/layout.yaml | 8 -- 57 files changed, 690 insertions(+), 195 deletions(-) From no-reply at openstack.org Fri Jul 26 18:24:20 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:24:20 -0000 Subject: [release-announce] os-refresh-config 10.3.0 (train) Message-ID: We are excited to announce the release of: os-refresh-config 10.3.0: Refresh system configuration This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 10.2.0..10.3.0 ------------------------------------------- 3c2edd5 Replace git.openstack.org URLs with opendev.org URLs 39c1df6 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- tox.ini | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) From no-reply at openstack.org Fri Jul 26 18:25:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:25:04 -0000 Subject: [release-announce] paunch 5.1.0 (train) Message-ID: We are thrilled to announce the release of: paunch 5.1.0: Utility to launch and manage containers using YAML based configuration data This release is part of the train release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.0.0..5.1.0 ------------------------------ 6e2ef79 Reduce the usage of "podman inspect" command 277eb72 runner: implement container_exist 4346861 runner: refactor image_exist a304153 Quote the health check command argument during a debug with print-cmd. d1eef29 Use k8s-file log driver with podman 87ab8dc Add upper constraints for testing a809d78 Revert "docker/compose: quote health-cmd" fe4d2ff Remove scenario008 jobs 74679ac Replace git.openstack.org URLs with opendev.org URLs Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- paunch/__init__.py | 12 +++++++++ paunch/builder/base.py | 13 ++++++--- paunch/builder/compose1.py | 3 ++- paunch/builder/podman.py | 2 +- paunch/runner.py | 51 ++++++++++++++++++++++------------- tox.ini | 3 ++- zuul.d/layout.yaml | 2 -- 10 files changed, 73 insertions(+), 30 deletions(-) From no-reply at openstack.org Fri Jul 26 18:27:33 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:27:33 -0000 Subject: [release-announce] tripleo-heat-templates 11.1.0 (train) Message-ID: We are pumped to announce the release of: tripleo-heat-templates 11.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * *ContainerImageRegistryLogin* has been added to indicate if login calls should be issued by the container engine on deployment. The default is set to *false*. * Values specified in *ContainerImageRegistryCredentials* will now be used to issue a login call when deploying the container engine on the hosts if *ContainerImageRegistryLogin* is set to *true* * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * As ceph-dashboard is available on Ceph, the new ceph dashboard composable service enables a user scenario in which the dashboard is deployed along with the other ceph components using TripleO. This feature is disabled by default and can be enabled by operators adding to the deployment the ceph-dashboard.yaml environment file included in tripleo-heat-templates. * Add support for the Multipathd service on nodes that access Block Storage (cinder) volumes. Multipathd is an optional service that can be enabled by including environments/multipathd.yaml in the deployment. * Introduce new tag into roles that will create external_bridge (usable only for multiple-nics). * When running config-download manually, fact gathering at the play level can now be controlled with the gather_facts Ansible boolean variable. * Add parameter *NovaLiveMigrationWaitForVIFPlug* which allows to set *live_migration_wait_for_vif_plug* which in turn allows whether to wait for "network-vif-plugged" events before starting guest transfer. The default value for the parameter is set to true and it is set to false when *ovn* is in *NeutronMechanismDrivers* list. * Add *ContainerNovaLibvirtUlimit* to configure Ulimit for containerized Libvirt. Defaults to "nofile=131072,nproc=126960". * Enables new Neutron "kill script" feature in order to avoid dangling containers when it kills an agent. * Add parameter NovaLibvirtMemStatsPeriodSeconds, which allows to set *libvirt/mem_stats_period_seconds* parameter value to number of seconds to memory usage statistics period, zero or negative value mean to disable memory usage statistics. Default value for NovaLibvirtMemStatsPeriodSeconds is 10. * Add boolean parameter *NovaSchedulerLimitTenantsToPlacementAggregate* which allows to set *scheduler/limit_tenants_to_placement_aggregate* parameter value, to have tenant isolation with placement. It ensures hosts are in tenant-isolated host aggregate and availability zones will only be available to specific set of tenants. Default value for NovaSchedulerLimitTenantsToPlacementAggregate is false. * Parameter *scheduler/query_placement_for_image_type_support* is enabled by default for all deployments. Setting it causes the scheduler to ask Placement only for compute hosts that support the *disk_format* of the image used in the request which is beneficial for example, the libvirt driver, when using Ceph as an ephemeral backend, does not support *qcow2* images (without an expensive conversion step). Upgrade Notes ************* * During upgrade user will need to create custom roles_data.yaml and remove external_bridge from tags to be sure that bridge will be not added. * Removes the environment for deprecated non-config-download workflow. Now specifying --no-config-download/--stack-only in cli would create/update the heat stack but would not deploy configurations on the nodes. * The new role variable update_serial is introduced allowing parallel update execution. On Controller role this variable defaults to 1 as pacemaker has to be taken down and up in rolling fashion. The default value is 25 as that is default value for parallel ansible execution used by tripleo. Deprecation Notes ***************** * The template *aide-baremetal-puppet* has been deprecated. This template has been replaced by *aide-baremetal-ansible* which provides for the same functionality and interfaces. * Support for the Midonet plugin has been removed from TripleO Train. The reason is the lack of maintainers and testing around this plugin. * The environments at environments/deployed-server-bootstrap- environment-centos.yaml and environments/deployed-server-bootstrap- environment-rhel.yaml are deprecated as the functionality they enabled in the bootstrap scripts has been moved to the tripleo- boostrap ansible role provided by tripleo-common. * Deprecated environment files are removed. Removed "environments /neutron-sriov.yaml", use "environments/services/neutron-sriov.yaml" file. Removed "environments/neutron-ovs-dpdk.yaml", use "environments/services/neutron-ovs-dpdk.yaml" file. Removed "environments/ovs-dpdk-permissions.yaml", as the required parameter is added to the OvS-DPDK roles. * The rhel-registration scripts support has been removed. It was replaced in Rocky by the Ansible RHSM role. Upgrades have been tested and the new configuration is well documented. * Support for the Cisco UCSM plugin has been removed from TripleO Train. The reason is the lack of maintainers and testing around this plugin. Bug Fixes ********* * When changeing the "name_lower" of the "InternalApi" network and using the "service_net_map_replace" option in network data. The subnet referenced in "VipSubnetMapDefaults" did not take in account the custom lowercase name for the network, causing deployment error. See bug: 1832461 (https://bugs.launchpad.net/tripleo/+bug/1832461). * The passphrase for config option 'server_certs_key_passphrase', is used as a Fernet key in Octavia and thus must be 32 bytes long. In the case of an operator-provided passphrase, TripleO will validate that. * https://bugs.launchpad.net/neutron/+bug/1825943 * Adds the Neutron Routed Provider Networks (https://opendev.org/open stack/neutron/src/branch/master/releasenotes/notes/allow-update- subnet-segment-id-association-1fb02ace27e85bb8.yaml) ("segments") back to the list of default service plugins for the overcloud. Bug: 1831969 (https://bugs.launchpad.net/tripleo/+bug/1831969). * Certain nova containers require more locked memory that the default limit of 16KiB. Increase the default memlock to 64MiB via "DockerNovaComputeUlimit". As this is only a maximum limit and not a pre-allocatiosn this will not increase the memory requirements for all nova containers. To date the only container to require this is nova_cell_v2_discover_hosts which is short lived. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * https://review.opendev.org/#/c/662109/ removed the bind mount from /run inside the nova_migration_target container. But the nova- migration-wrapper inside the container needs access to the libvirt socket - https://github.com/rdo-packages/nova-distgit/blob/rpm- master/nova-migration-wrapper#L31 . This adds the bind mount of /run/libvirt to the nova_migration_target container to fix live migration issues. * Recent changes for e.g edge scenarios caused intended move of discovery from controller to bootstrap compute node. The task is triggered by deploy-identifier to make sure it gets run on any deploy,scale, ... run. If deploy run is triggered with --skip- deploy-identifier flag, discovery will not be triggered at and as result causing failures in previously supported scenarios. This change moves the host discovery task to be an ansible deploy_steps_tasks that it gets triggered even if --skip-deploy- identifier is used, or the compute bootstrap node is blacklisted. * Deployment with enabled NFS share for nova ephemeral storage fails. Podman fails to relable with mounted nfs in /var/lib/nova/instances and container fail to start with "operation not supported". This change only sets the z flag for the /var/lib/nova in case nfs is not enabled for the compute. Other Notes *********** * Services that were in extraconfig/services are now in deployment directory among other services. * The use of parameter "EC2MetadataIp" and the configuration of routes to metadata has been removed. Nothing is consuming metadata over the network anymore since config-drive is used as the data source. * The environment files to enable/disable config-download at environments/disable-config-download-environment.yaml and environments/config-download-environment.yaml are removed as disabling config-download was deprecated in Stein, and it's enabled by default. Changes in tripleo-heat-templates 11.0.0..11.1.0 ------------------------------------------------ 58a9f97a9 Restart only installed services 829e65855 Allow for configuration of the Manila CephFS backend with a remote Ceph 08e34dbca Re-Add facter cache for container configurations 1565c50be Revert "Add facter cache for container configurations" 0b0553fdf Move instanceha into scripts 91d287539 Remove support for Midonet plugin e6fe9ff3d Remove mac_hostname & random_string 2f3554cdc Remove extraconfig/services directory c2977e3c0 Add missing update_serial key to compute roles 3e7c15da2 Only run cellv2 host discovery on default cell a407d4f5d Add dashboard component as new ceph composable service. 4ec57c60f Add facter cache for container configurations 7f2e8b875 Use pipefail instead of checking PIPESTATUS 2b399078a Add scenario007-standalone environment file a23aa80c4 Add swift_config puppet-tag for swift-ringbuilder a0b9f90a2 Add a suffix for tmpwatch f99be0d82 Add bind mount for config setup 930298c1c Set scenario009 job voting to false 7dbdec29a Remove unused extraconfig scripts 2ccd77639 Remove support for Cisco UCSM plugin 7e8a2baf1 Fix default parameters in logindefs 5c5302923 Set HieradataVars as group vars instead 4a457fa52 Remove tripleo_ssh_known_hosts_use_template var 2f6f51914 Use Ansible for ssh known hosts config a6ff00885 Specify a default for container_registry_logins 6413ef838 Set nova_additional_cell as global_vars 55ad22584 Remove service_names hieradata file 4f9b32a9f Lookup pre/post deployment vars with hostvars 41d9901ef Reuse clouds_yaml.py from tripleo-common in tht 2596142ad Better debug for container-puppet tool 29aed4d33 Revert "Also set nova::network::neutron::dhcp_domain" 6e07f2a76 Convert the heat json format to a py dict 0aa06134c Use template for NetworkConfig script c5ba2cec8 Use Ansible for {{role}} and host_extraconfig hieradata 27e7005ad Use Ansible for net_ip_map hieradata b1fda5e8b Fix container-puppet tool standalone for podman 47d1430da Upgrade fixes for RabbitMQ and Pacemaker b81bec56f Allow logrotate to access container_file_t files 81e936db4 Update octavia to new tripleo-ansible PATH b8a9fbc0e Remove pre_deploy/rhel-registration d48d1bdb3 Support TLS deployments with KernelDisableIPv6 enabled c36433e34 Run NetworkConfig only if configuration script exists dfa594a6a Mount /var/run rw 2074b356f Add new parameter NovaSchedulerLimitTenantsToPlacementAggregate e677aeacd Set nova::keystone auth details hiera on compute b56c521e0 Don't use the z flag in case NovaNfsEnabled is true 7a52a6986 Drop EC2MetadataIp parameter and its uses f9831d8bc Remove puppet/deploy-artifacts.yaml 41e675770 Disable Docker in default Standalone environments 39a5545c4 Change OS::Heat::*Deployments to OS::Heat:*DeploymentGroup 58bf8a207 swift: ensure we get rsyslog state "--check" mode d665a2bb0 Remove the tripleo.plan_management.v1.publish_ui_logs_to_swift cron trigger 6ce5989e4 Increase the default memlock to 64MiB via ``DockerNovaComputeUlimit``. 84b78e8dd Convert heat template to use aide role 67d5ca353 Fix scenario012-standalone ironic job 65d7e55f5 Make nova ephemeral storage backend configurable per-role 5ba1fd2bc Revert "Revert "Remove os-collect-config related poperties and attributes"" f8779e502 Move nova cell v2 discovery to deploy_steps_tasks 059792eae Remove environments to enable/disable config-download 578bcb2ff Per-Role krb-service-principal for CompactServices f5295ed3a Fix nova compute container depends_on to be list b5a2a61df Revert "Remove os-collect-config related poperties and attributes" 8775e2d5a Fix ovn dbs control port 8ef4f3cac Add ContainerNovaLibvirtUlimit to tweak Ulimits a6fef3aad Adds constraint: OctaviaServerCertsKeyPassphrase must be 32 chars long 47f3af726 Prepare for Ceph by including Ansible roles 02fe40cd8 Run NetworkConfig if never run previously a76610657 Use Ansible for vip_data hieradata 4c34147cc Use Ansible for all_nodes hieradata f44f33939 Use Ansible for bootstrap_node hieradata 8860eee23 Add missing tag 'role_specific' for NovaPciPassthrough parameter 2d4430bd7 Avoid checking rc if we're in dry-run mode b2cc5f2a8 Convert heat template to use tuned role e4c4fcb2a Enable kill script for Neutron agents 537822d47 Add /run/libvirt to nova_migration_target container 634be405d Prefer CephPoolDefaultPgNum over counterintuitive Manila specific params dae0a89a8 Use per-subnet DNS nameservers for ctlplane 8d85e61c3 Replace git.openstack.org URLs with opendev.org URLs ea37ee663 Add container engine authentication support a89d46e03 Allow ssh from all ctlplane network subnets 906d03ea1 Configure the Multipathd service b17266199 Make Multipathd an optional service 90d05216b Replace /var/log/containers/swift symlink with directories 93c8eedae Remove faulty placement::config leftovers 56a35beb5 Idempotency for system_upgrade_prepare 2ca7c5503 Allow skipping RHSM with Leapp 55e1eac89 Podman 1.4.1 drops json-file in favor of k8s-file eeb0d5495 Add UndercloudMinion environments 8fac4c433 ceilometer_agent_notification: disable-panko.yaml e115e14e5 Use Ansible to configure the Hiera config cb767a97b Use Ansible for {{server_resource_name}}Deployment d3a9614d8 Don't create symlink for swift container logs 0d9efc378 Remove deprecated config-download-environment.yaml 45fa04594 Skip standalone deploys if tox jobs fail ea24b7820 Remove duplicated parameters about nova db archive 063b34ce4 Remove duplicated cinder::cron::db_purge::destination 92a0b41f3 Resolve symlinks when copying undercloud.conf to container. 5f9c0d667 Add DockerNovaComputeUlimit to nova_cell_v2_discover_hosts 7ac8cf9c2 Make comparisons case insensitive 3791bf36c Fix Ceph RGW listener port configuration b6c88a99a Remove duplicate mount destinations in containers 1a12568b7 Fix ipaclient script 6baf5326b Upgrade playbook fixes for OS upgrade cb8caaae4 Setup cluster definition based on the ansible limit option. 99b63d780 [AZs] Better detect OVN in NeutronMechanismDrivers 17e16e510 Interface for Ansible Host variables 825b30eb2 Add new parameter NovaLiveMigrationWaitForVIFPlug 79d9113e5 Use ansible for HostsConfig 0d67ecaf7 Disable iscsi.service to avoid iscsid on host from getting started 37a6aa859 Enable Request Filter for Image Types b31b7fd4e Use ansible for ArtifactsConfig 0cd9b7254 Use ansible for NetworkConfig ec68f1740 Use ansible for AllNodesValidationConfig ed5c2ad70 Fix bare reference of cinder_enable_iscsi_backend 002fcaad1 Fix NovaNfs role parameters 06d6fb3bd Remove extraneous references to RpcXXX parameters b8a8dda5b Remove duplicate key in UndercloudExtraConfig caf690f76 Remove scenario008 jobs 564d89b2f Fix network rename + service_net_map_replace 6947d0842 Add higher retry/delay defaults to check the quorum status. ce1da1f6c Remove deprecated NFV environment files 12aaf4b54 Also set nova::network::neutron::dhcp_domain 4373d6461 Temporarily add .yaml extension for all-nodes-deployment-hieradata.j2 d87c49f4d Add HostnameNetworkConfigMap output 203418529 Replace hardcoded gather_facts:no with variable ccabc8f8e Fix log owner on computes during overcloud deploy runs 2bd0012a6 Fix RedisVirtualIP when overrdiing InternalApi name_lower 20f34fc55 Rework neutron AZ configs considering OVN 89e9fe53b Remove os-collect-config related poperties and attributes 12c0f3a16 Remove get-occ-config.sh script for deployed server 3f0c2ceb0 Remove os-collect-config dependency from os-net-config c8311ecc5 Remove disable-config-download-environment.yaml e2a4d90aa Set cache_backend for token caching 770b578bf Explicitly set ansible_python_interpreter in external upgrade playbook 4070b62e8 Clean docker and podman after executing an update or upgrade 1de24c496 Re-enable manila dashboard 53650f963 Put on hold the Ansible package update until is fixed df3b4b3c5 Configure insecure registries before Pacemaker-managed image pulls 66c4e2365 Add new role parameter NovaLibvirtMemStatsPeriodSeconds c53e76627 Env file to disable undercloud nova 8eaac3026 keystone: drop duplicate -DFOREGROUND d03f29e48 Add panko_api_cron container da1827f7d Add networks to Standalone role a6ba0bcf3 Cleanup deprecated nova options f86635803 Run ceph-ansible using tripleo-ansible-inventory aa305a9d7 Fix correct network for nova-vnc 8c6bec227 Change all step checks to |int a59a188a6 Force ansible serial to 1 for the Controller 6b9b80d88 Enabling Neutron Routed Provider Networks (segments) 166dd42fc Add ComputeHCIOvsDpdk role 198cfb6f8 Remove deployed-server bootstrap resource a01c8703f Remove reference to removed OctaviaEventStreamerDriver param 7b3d8f786 Change package installs for Stein and OS upgrade 7c379543c Enable Ceph RGW 'account in url' option fda0f4284 Fix disappearing Puppet logs 3db1b7415 Increase neutron VNI Ranges for ML2/OVS deployments d6eb263d5 Add df plugin and make description consistent 90ecca6f6 DVR neutron template should enable ARP responder a68151d02 Convert Docker*Image parameters fe1bdee58 Add EndpointMap to the ironic post_deploy template ff7cce93e Add creating br-ex for compute node in ovn fdb204b96 Add in-flight health validations to Ceph deployment fa1a6111e Configure the region-related settings for core components 2efcb7b4e Revert "Revert "Switch off nova metadata api on the undercloud"" 0cd87414a Convert aide puppet to ansible 36670f60c Fix cleanup to remove external resources v6 6b0d025fd Make NovaResumeGuestsStateOnHostBoot podman compatible b3b9b44da Add {{role.name}}RemovalPoliciesMode parameter 462d45b82 Cleanup keystone items 3623b96c6 Add healthcheck to ironic_pxe_http 812e08607 Configure Horizon timezone according to the host timezone 1b46f36c8 Update min tox version to 2.0 Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 - README.rst | 2 +- capabilities-map.yaml | 10 - ci/common/ironic_standalone_post.yaml | 6 + ci/common/net-config-multinode-os-net-config.yaml | 5 - ci/common/net-config-multinode.yaml | 5 - ci/common/net-config-simple-bridge.yaml | 5 - ci/common/vbmc_setup.yaml | 11 +- ci/environments/multinode-3nodes.yaml | 2 + ci/environments/multinode-containers.yaml | 1 + .../nic-configs/ceph-storage.yaml | 7 - .../nic-configs/cinder-storage.yaml | 5 - .../nic-configs/compute-dvr.yaml | 7 - .../multiple-nics-ipv6/nic-configs/compute.yaml | 7 - .../multiple-nics-ipv6/nic-configs/controller.yaml | 7 - .../nic-configs/swift-storage.yaml | 5 - .../multiple-nics/nic-configs/ceph-storage.yaml | 7 - .../multiple-nics/nic-configs/cinder-storage.yaml | 5 - .../multiple-nics/nic-configs/compute-dvr.yaml | 7 - .../network/multiple-nics/nic-configs/compute.yaml | 7 - .../multiple-nics/nic-configs/controller.yaml | 8 - .../multiple-nics/nic-configs/swift-storage.yaml | 5 - .../public-bond/nic-configs/ceph-storage.yaml | 7 - .../public-bond/nic-configs/cinder-storage.yaml | 5 - .../network/public-bond/nic-configs/compute.yaml | 7 - .../public-bond/nic-configs/controller.yaml | 8 - .../public-bond/nic-configs/swift-storage.yaml | 5 - .../scenario001-multinode-containers.yaml | 5 + ci/environments/scenario001-standalone.yaml | 4 + .../scenario002-multinode-containers.yaml | 1 + .../scenario003-multinode-containers.yaml | 1 + .../scenario004-multinode-containers.yaml | 3 + ci/environments/scenario004-standalone.yaml | 3 + .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 56 +++ ci/environments/scenario009-multinode.yaml | 6 +- .../scenario010-multinode-containers.yaml | 3 + ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 1 + ci/environments/scenario012-standalone.yaml | 8 +- common/container-puppet.py | 64 ++- common/deploy-steps-tasks.yaml | 70 ++- common/deploy-steps.j2 | 556 ++++++++++++++++++--- .../nova_cell_v2_discover_hosts.py | 62 --- deployed-server/README.rst | 61 --- .../deployed-server-bootstrap-centos.sh | 4 + .../deployed-server-bootstrap-centos.yaml | 4 + deployed-server/deployed-server-bootstrap-rhel.sh | 4 + .../deployed-server-bootstrap-rhel.yaml | 4 + .../deployed-server-environment-output.yaml | 1 - deployed-server/deployed-server-roles-data.yaml | 4 + deployed-server/deployed-server.yaml | 5 - deployed-server/scripts/get-occ-config.sh | 164 ------ deployment/aide/aide-baremetal-ansible.yaml | 86 ++++ deployment/aodh/aodh-api-container-puppet.yaml | 8 +- deployment/aodh/aodh-base.yaml | 31 -- .../aodh/aodh-evaluator-container-puppet.yaml | 8 +- .../aodh/aodh-listener-container-puppet.yaml | 8 +- .../aodh/aodh-notifier-container-puppet.yaml | 8 +- .../barbican/barbican-api-container-puppet.yaml | 22 +- .../liquidio-compute-config-container-puppet.yaml | 8 +- .../ceilometer-agent-central-container-puppet.yaml | 8 +- .../ceilometer-agent-compute-container-puppet.yaml | 8 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 8 +- ...ometer-agent-notification-container-puppet.yaml | 26 +- .../ceilometer-base-container-puppet.yaml | 22 - deployment/ceph-ansible/ceph-base.yaml | 371 +++----------- deployment/ceph-ansible/ceph-client.yaml | 2 +- deployment/ceph-ansible/ceph-external.yaml | 2 +- deployment/ceph-ansible/ceph-grafana.yaml | 125 +++++ deployment/ceph-ansible/ceph-mds.yaml | 58 ++- deployment/ceph-ansible/ceph-mgr.yaml | 30 +- deployment/ceph-ansible/ceph-mon.yaml | 18 +- deployment/ceph-ansible/ceph-nfs.yaml | 4 +- deployment/ceph-ansible/ceph-osd.yaml | 16 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 2 +- deployment/ceph-ansible/ceph-rgw.yaml | 19 +- deployment/cinder/cinder-api-container-puppet.yaml | 10 +- .../cinder/cinder-backup-container-puppet.yaml | 8 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 18 +- deployment/cinder/cinder-base.yaml | 32 -- .../cinder/cinder-common-container-puppet.yaml | 20 +- .../cinder/cinder-scheduler-container-puppet.yaml | 8 +- .../cinder/cinder-volume-container-puppet.yaml | 8 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 18 +- deployment/database/mysql-container-puppet.yaml | 10 +- deployment/database/mysql-pacemaker-puppet.yaml | 86 +++- deployment/database/redis-container-puppet.yaml | 8 +- deployment/database/redis-pacemaker-puppet.yaml | 62 ++- .../aide/aide-baremetal-puppet.yaml | 0 .../docker/docker-baremetal-ansible.yaml | 71 +++ .../logging/fluentd-container-puppet.yaml | 8 +- .../monitoring/sensu-client-container-puppet.yaml | 8 +- .../nova/nova-consoleauth-container-puppet.yaml | 10 +- .../opendaylight-api-container-puppet.yaml | 8 +- .../panko/panko-api-container-puppet.yaml | 36 +- deployment/ec2/ec2-api-container-puppet.yaml | 12 +- deployment/etcd/etcd-container-puppet.yaml | 8 +- .../designate/designate-api-container-puppet.yaml | 8 +- .../designate-central-container-puppet.yaml | 8 +- .../designate/designate-mdns-container-puppet.yaml | 8 +- .../designate-producer-container-puppet.yaml | 8 +- .../designate/designate-sink-container-puppet.yaml | 8 +- .../designate-worker-container-puppet.yaml | 14 +- deployment/glance/glance-api-container-puppet.yaml | 76 ++- .../glance/glance-api-logging-file-container.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 8 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 8 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 8 +- deployment/haproxy/haproxy-container-puppet.yaml | 8 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 63 ++- deployment/heat/heat-api-cfn-container-puppet.yaml | 8 +- deployment/heat/heat-api-container-puppet.yaml | 10 +- deployment/heat/heat-base-puppet.yaml | 37 +- deployment/heat/heat-engine-container-puppet.yaml | 8 +- deployment/horizon/horizon-container-puppet.yaml | 15 +- .../ipa/ipaclient-baremetal-ansible.yaml | 4 + .../ipsec/ipsec-baremetal-ansible.yaml | 6 +- deployment/ironic/ironic-api-container-puppet.yaml | 8 +- deployment/ironic/ironic-base-puppet.yaml | 31 -- .../ironic/ironic-conductor-container-puppet.yaml | 8 +- .../ironic/ironic-inspector-container-puppet.yaml | 8 +- .../ironic-neutron-agent-container-puppet.yaml | 8 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 11 +- deployment/iscsid/iscsid-container-puppet.yaml | 17 +- .../keepalived/keepalived-container-puppet.yaml | 8 +- deployment/kernel/kernel-baremetal-puppet.yaml | 8 + deployment/keystone/keystone-container-puppet.yaml | 44 +- .../kubernetes-master-baremetal-ansible.yaml | 0 .../kubernetes-worker-baremetal-ansible.yaml | 0 deployment/logging/files/barbican-api.yaml | 4 +- deployment/logging/files/heat-engine.yaml | 4 +- deployment/logging/files/keystone.yaml | 4 +- deployment/logging/files/neutron-api.yaml | 4 +- deployment/logging/files/nova-api.yaml | 4 +- deployment/logging/files/nova-common.yaml | 4 +- deployment/logging/files/nova-metadata.yaml | 4 +- deployment/logging/files/panko-api.yaml | 4 +- deployment/logging/files/placement-api.yaml | 4 +- .../logging/rsyslog-sidecar-container-puppet.yaml | 4 +- deployment/logging/stdout/barbican-api.yaml | 8 +- deployment/logging/stdout/haproxy.yaml | 4 +- deployment/logging/stdout/heat-api-cfn.yaml | 8 +- deployment/logging/stdout/heat-api.yaml | 8 +- deployment/logging/stdout/keystone.yaml | 8 +- deployment/logging/stdout/nova-api.yaml | 8 +- deployment/logging/stdout/nova-common.yaml | 2 +- deployment/logging/stdout/nova-metadata.yaml | 8 +- deployment/logging/stdout/panko-api.yaml | 8 +- deployment/logging/stdout/placement-api.yaml | 8 +- .../login-defs/login-defs-baremetal-puppet.yaml | 10 +- .../logrotate-crond-container-puppet.yaml | 18 +- deployment/manila/manila-api-container-puppet.yaml | 8 +- deployment/manila/manila-base.yaml | 31 -- .../manila/manila-scheduler-container-puppet.yaml | 8 +- .../manila/manila-share-container-puppet.yaml | 8 +- .../manila/manila-share-pacemaker-puppet.yaml | 18 +- .../memcached/memcached-container-puppet.yaml | 8 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 +- deployment/metrics/collectd-container-puppet.yaml | 11 +- deployment/metrics/qdr-container-puppet.yaml | 8 +- .../mistral/mistral-api-container-puppet.yaml | 8 +- deployment/mistral/mistral-base.yaml | 31 -- .../mistral/mistral-engine-container-puppet.yaml | 8 +- .../mistral-event-engine-container-puppet.yaml | 8 +- .../mistral/mistral-executor-container-puppet.yaml | 9 +- deployment/multipathd/multipathd-container.yaml | 72 ++- deployment/neutron/kill-script | 71 +++ .../neutron/neutron-api-container-puppet.yaml | 55 +- deployment/neutron/neutron-az-config.yaml | 121 ----- deployment/neutron/neutron-base.yaml | 33 +- .../neutron-bgpvpn-api-container-puppet.yaml | 4 +- .../neutron/neutron-compute-plugin-midonet.yaml | 41 -- .../neutron/neutron-dhcp-container-puppet.yaml | 67 ++- .../neutron/neutron-l2gw-api-container-puppet.yaml | 4 +- .../neutron/neutron-l3-container-puppet.yaml | 75 ++- .../neutron/neutron-metadata-container-puppet.yaml | 8 +- .../neutron/neutron-midonet-baremetal-puppet.yaml | 74 --- .../neutron-ovs-agent-container-puppet.yaml | 11 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 4 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 4 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 4 +- .../neutron-plugin-ml2-container-puppet.yaml | 4 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 4 +- .../neutron-plugin-nsx-container-puppet.yaml | 4 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 8 +- deployment/nova/nova-api-container-puppet.yaml | 47 +- deployment/nova/nova-base-puppet.yaml | 34 +- .../nova/nova-compute-common-container-puppet.yaml | 38 +- deployment/nova/nova-compute-container-puppet.yaml | 194 +++++-- .../nova/nova-conductor-container-puppet.yaml | 10 +- deployment/nova/nova-ironic-container-puppet.yaml | 69 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 77 ++- .../nova/nova-metadata-container-puppet.yaml | 28 +- .../nova-migration-target-container-puppet.yaml | 31 +- .../nova/nova-scheduler-container-puppet.yaml | 25 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 16 +- deployment/nova/novajoin-container-puppet.yaml | 12 +- .../octavia/octavia-api-container-puppet.yaml | 10 +- deployment/octavia/octavia-base.yaml | 35 +- .../octavia/octavia-deployment-config.j2.yaml | 12 +- .../octavia-health-manager-container-puppet.yaml | 9 +- .../octavia-housekeeping-container-puppet.yaml | 8 +- .../octavia/octavia-worker-container-puppet.yaml | 8 +- .../openshift/openshift-cns-baremetal-ansible.yaml | 14 +- .../openshift-infra-baremetal-ansible.yaml | 0 .../openshift-master-baremetal-ansible.yaml | 82 +-- .../openshift-node-baremetal-ansible.yaml | 4 +- .../openshift-worker-baremetal-ansible.yaml | 0 .../ovn/ovn-controller-container-puppet.yaml | 8 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 12 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 25 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 38 +- .../pacemaker/clustercheck-container-puppet.yaml | 8 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 109 +++- .../placement/placement-api-container-puppet.yaml | 13 +- deployment/podman/podman-baremetal-ansible.yaml | 83 ++- deployment/qdr/qdrouterd-container-puppet.yaml | 8 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 8 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 8 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 74 ++- .../rabbitmq-messaging-pacemaker-puppet.yaml | 59 ++- .../rabbitmq-messaging-rpc-container-puppet.yaml | 8 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 73 ++- .../rhsm/rhsm-baremetal-ansible.yaml | 0 deployment/sahara/sahara-api-container-puppet.yaml | 8 +- deployment/sahara/sahara-base.yaml | 33 +- .../sahara/sahara-engine-container-puppet.yaml | 8 +- .../skydive/skydive-agent-baremetal-ansible.yaml | 0 .../skydive-analyzer-baremetal-ansible.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 60 +-- .../swift/swift-ringbuilder-container-puppet.yaml | 6 +- .../swift/swift-storage-container-puppet.yaml | 62 ++- deployment/tacker/tacker-container-puppet.yaml | 39 +- deployment/time/timezone-baremetal-ansible.yaml | 6 +- .../tripleo-firewall-baremetal-puppet.yaml | 13 +- .../tripleo-packages-baremetal-puppet.yaml | 60 ++- deployment/tuned/tuned-baremetal-ansible.yaml | 54 +- deployment/undercloud/minion-rabbitmq-puppet.yaml | 85 ++++ .../undercloud/tempest-container-puppet.yaml | 6 +- deployment/undercloud/undercloud-upgrade.yaml | 10 +- deployment/zaqar/zaqar-container-puppet.yaml | 8 +- .../ceph-ansible/ceph-ansible-per-role.yaml | 18 + environments/ceph-ansible/ceph-dashboard.yaml | 5 + environments/config-download-environment.yaml | 14 - ...ployed-server-bootstrap-environment-centos.yaml | 4 + ...deployed-server-bootstrap-environment-rhel.yaml | 4 + environments/deployed-server-environment.j2.yaml | 3 + .../disable-config-download-environment.yaml | 6 - environments/docker-uc-light.yaml | 2 +- environments/hyperconverged-ceph.yaml | 1 + environments/ipsec.yaml | 2 +- environments/kubernetes.yaml | 4 +- environments/lifecycle/upgrade-prepare.yaml | 5 - environments/manila-cephfsganesha-config.yaml | 10 +- environments/metrics/collectd-standalone.yaml | 6 +- environments/multipathd.yaml | 5 + environments/networking/neutron-midonet.yaml | 66 --- environments/neutron-az-config.yaml | 2 - environments/neutron-midonet.yaml | 28 -- environments/neutron-ml2-cisco-nexus-ucsm.yaml | 23 - environments/neutron-ovs-dpdk.yaml | 43 -- environments/neutron-ovs-dvr.yaml | 5 +- environments/neutron-sriov.yaml | 13 - environments/openshift-cns.yaml | 2 +- environments/openshift.yaml | 6 +- environments/ovs-dpdk-permissions.yaml | 20 - environments/rhsm.yaml | 2 +- .../services-baremetal/neutron-ml2-cisco-vts.yaml | 4 +- .../neutron-opendaylight-dpdk.yaml | 37 -- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 2 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- .../services-baremetal/neutron-ovs-dpdk.yaml | 11 - environments/services/heat-engine.yaml | 2 + environments/services/ironic-conductor.yaml | 2 + environments/services/neutron-ml2-cisco-vts.yaml | 4 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-standalone.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 4 +- environments/services/neutron-ovs.yaml | 4 +- environments/services/skydive-environment.yaml | 4 +- environments/ssl/enable-internal-tls.j2.yaml | 2 +- environments/standalone/standalone-tripleo.yaml | 6 +- environments/undercloud-disable-nova.yaml | 10 + environments/undercloud.yaml | 7 +- environments/undercloud/undercloud-minion.yaml | 253 ++++++++++ extraconfig/all_nodes/mac_hostname.j2.yaml | 77 --- extraconfig/all_nodes/random_string.j2.yaml | 51 -- .../krb-service-principals/role.role.j2.yaml | 17 +- extraconfig/post_deploy/clouds_yaml.py | 136 ++--- extraconfig/post_deploy/example.yaml | 2 +- extraconfig/post_deploy/example_run_on_update.yaml | 2 +- extraconfig/post_deploy/standalone_post.yaml | 4 +- .../post_deploy/undercloud_ctlplane_network.py | 24 +- extraconfig/post_deploy/undercloud_post.py | 9 - extraconfig/post_deploy/undercloud_post.yaml | 9 +- .../environment-rhel-registration.yaml | 27 - .../rhel-registration-resource-registry.yaml | 2 - .../rhel-registration/rhel-registration.yaml | 216 -------- .../rhel-registration/scripts/rhel-registration | 308 ------------ .../rhel-registration/scripts/rhel-unregistration | 21 - extraconfig/pre_network/boot-params-service.yaml | 2 +- extraconfig/pre_network/config_then_reboot.yaml | 77 --- extraconfig/services/README.rst | 6 - extraconfig/tasks/run_puppet.sh | 31 -- extraconfig/tasks/ssh/host_public_key.yaml | 56 --- extraconfig/tasks/ssh/known_hosts_config.yaml | 42 -- net-config-bond.j2.yaml | 5 - net-config-bridge.j2.yaml | 5 - net-config-linux-bridge.j2.yaml | 11 +- net-config-noop.j2.yaml | 5 - net-config-standalone.j2.yaml | 5 - ...config-static-bridge-with-external-dhcp.j2.yaml | 9 +- net-config-static-bridge.j2.yaml | 9 +- net-config-static.j2.yaml | 9 +- net-config-undercloud.j2.yaml | 5 - .../config/2-linux-bonds-vlans/role.role.j2.yaml | 10 +- .../bond-with-vlans/controller-no-external.j2.yaml | 10 +- .../config/bond-with-vlans/controller-v6.j2.yaml | 10 +- network/config/bond-with-vlans/role.role.j2.yaml | 10 +- network/config/multiple-nics/compute-dvr.j2.yaml | 11 +- network/config/multiple-nics/controller-v6.j2.yaml | 12 +- network/config/multiple-nics/role.role.j2.yaml | 13 +- .../controller-v6.j2.yaml | 11 +- .../role.role.j2.yaml | 11 +- .../controller-no-external.j2.yaml | 11 +- .../config/single-nic-vlans/controller-v6.j2.yaml | 11 +- network/config/single-nic-vlans/role.role.j2.yaml | 11 +- network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 147 +++--- network/ports/net_ip_list_map.j2.yaml | 114 ----- network/ports/noop.yaml | 3 + network/ports/port.j2 | 6 +- network/scripts/run-os-net-config.sh | 61 +-- network/service_net_map.j2.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 303 +++++------ puppet/all-nodes-config.j2.yaml | 262 ---------- puppet/deploy-artifacts.yaml | 32 -- .../all_nodes/neutron-midonet-all-nodes.yaml | 105 ---- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 284 ----------- puppet/role.role.j2.yaml | 253 ++++------ releasenotes/notes/6.0.0-b52a14a71fc62788.yaml | 2 +- ...-container-registry-login-08d6a87586c84a99.yaml | 10 + ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...remetal-puppet-deprecated-25388c875e1d9884.yaml | 5 + ...alApi-name-lower-override-7ea2635877b753c7.yaml | 8 + ...hboard_composable_service-f72dc4b1cd007734.yaml | 9 + .../configure-multipathd-d3fb4683b9ffbb4b.yaml | 6 + .../create-br-ex-for-compute-b967312323d45d9b.yaml | 9 + .../extraconfig_services-18ca28841974b8dd.yaml | 5 + .../fix-odl-karaf-logging-eca10973e57caa3a.yaml | 2 +- ...tr-replace-hostname-issue-393fb6954f12f7e6.yaml | 2 +- .../gather-facts-variable-d7f1d74d1dc68ee9.yaml | 4 + ...rver_certs_key_passphrase-908471f31d09f088.yaml | 5 + ...gration_wait_for_vif_plug-6d16da261a138fb8.yaml | 9 + .../notes/midonet_removal-9b91c6bb610b139e.yaml | 5 + ...arams_to_configure_ulimit-82057bf64d7173a8.yaml | 5 + ...neutron-az-config-service-3085b2c296df06c9.yaml | 32 +- .../neutron-kill-script-4d8b6a0130f6fcdd.yaml | 6 + ...-routed-provider-networks-2af1220125612d6f.yaml | 8 + .../nova-memlock-increase-066ed22764ed3ce1.yaml | 9 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + ..._mem_stats_period_seconds-b9b606232629cb38.yaml | 8 + .../notes/nova_metadata_wsgi-bfb240bc84194d05.yaml | 2 +- ...ion_target_libvirt_socket-585fa579e5b2704d.yaml | 9 + ...xternal_post_deploy_tasks-e978560ee59b8b56.yaml | 12 + .../nova_nfs_enabled_podman-a92ea12cd4cd92c8.yaml | 8 + .../nova_qemu_enable_config-c89016b4d93802d6.yaml | 2 +- ...ts_to_placement_aggregate-9889b0a73dd1d042.yaml | 9 + ...a_templated_cells_db_urls-2eb151090c49c51d.yaml | 2 +- ...lated_cells_transport_url-275f0b707d9227ab.yaml | 2 +- ...nova_api_db_for_placement-eea44dd48c768f04.yaml | 2 +- ..._placement_for_image_type-0bfbef90bb8c3871.yaml | 9 + ...server-bootstrap-resource-7de0596b90f1b15a.yaml | 8 + ...nfig-download-environment-04f61210d0a304a1.yaml | 8 + ...ove-ec2metadata-parameter-36e75f70d2322e55.yaml | 6 + ...fig-download-deprecations-a40fb47c0c0a49f1.yaml | 6 + ...emove_deprecated_nfv_envs-30f6b3552d34d489.yaml | 10 + .../notes/rhel-registration-2752c4e0a14cec98.yaml | 6 + .../notes/ucsm_removal-929fe9971ed4acc8.yaml | 5 + .../notes/update_serial-785ff794ff88fb2e.yaml | 9 + roles/BlockStorage.yaml | 2 + roles/CellController.yaml | 1 + roles/CephAll.yaml | 3 + roles/CephFile.yaml | 2 + roles/CephObject.yaml | 2 + roles/CephStorage.yaml | 2 + roles/Compute.yaml | 5 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 4 + roles/ComputeHCI.yaml | 3 + roles/ComputeHCIOvsDpdk.yaml | 68 +++ roles/ComputeInstanceHA.yaml | 2 + roles/ComputeLiquidio.yaml | 2 + roles/ComputeLocalEphemeral.yaml | 71 +++ roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 3 + roles/ComputeOvsDpdkSriov.yaml | 2 + roles/ComputeOvsDpdkSriovRT.yaml | 3 + roles/ComputePPC64LE.yaml | 2 + roles/ComputeRBDEphemeral.yaml | 71 +++ roles/ComputeRealTime.yaml | 3 + roles/ComputeSriov.yaml | 2 + roles/ComputeSriovRT.yaml | 3 + roles/Controller.yaml | 3 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 3 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 3 + roles/HciCephAll.yaml | 6 +- roles/HciCephFile.yaml | 3 + roles/HciCephMon.yaml | 3 + roles/HciCephObject.yaml | 3 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 3 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 2 + roles/OpenShiftAllInOne.yaml | 1 + roles/OpenShiftInfra.yaml | 1 + roles/OpenShiftMaster.yaml | 1 + roles/OpenShiftWorker.yaml | 1 + roles/README.rst | 3 + roles/Standalone.yaml | 13 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 2 +- roles/UndercloudMinion.yaml | 30 ++ roles_data.yaml | 14 + roles_data_undercloud.yaml | 2 +- sample-env-generator/networking.yaml | 32 -- sample-env-generator/ssl.yaml | 4 +- sample-env-generator/standalone.yaml | 5 +- sample-env-generator/undercloud-minion.yaml | 272 ++++++++++ .../instanceha => scripts}/check-run-nova-compute | 2 +- scripts/hosts-config.sh | 2 +- setup.cfg | 2 +- tools/process-templates.py | 4 + tools/yaml-validate.py | 48 +- tox.ini | 2 +- validation-scripts/all-nodes.sh | 12 +- zuul.d/layout.yaml | 38 +- 448 files changed, 5074 insertions(+), 5383 deletions(-) From no-reply at openstack.org Fri Jul 26 18:29:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:29:11 -0000 Subject: [release-announce] tripleo-ipsec 9.2.0 (train) Message-ID: We are tickled pink to announce the release of: tripleo-ipsec 9.2.0: Ansible role for managing TripleO's IPSEC tunnels This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-ipsec Download the package from: https://tarballs.openstack.org/tripleo-ipsec/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-ipsec 9.1.0..9.2.0 ------------------------------------- ffe104c Update linting jobs a052773 Replace git.openstack.org URLs with opendev.org URLs 8c1fdab OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- handlers/main.yml | 2 +- setup.cfg | 2 +- tasks/hardcoded-network-discover.yml | 14 +++++++------- tasks/ipsec.yml | 2 +- tasks/legacy.yml | 4 ++-- tasks/uninstall.yml | 2 +- test-requirements.txt | 3 +++ tox.ini | 13 ++++++++++--- zuul.d/layout.yaml | 2 -- 11 files changed, 28 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..e8684a7 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,3 @@ +pbr>=1.6 +ansible +ansible-lint From no-reply at openstack.org Fri Jul 26 18:29:17 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:29:17 -0000 Subject: [release-announce] tripleo-validations 11.1.0 (train) Message-ID: We are pleased to announce the release of: tripleo-validations 11.1.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * The behavior of the "ironic-boot-configuration" validation has changed in order to suppport multi-arch. It now checks that each node has the correct associated ramdisk and kernel image according to the node's architecture and platform, and, when it does appear that the correct image is associated, checks that there is only one image in Glance with that name. Also, the vars "deploy_kernel_name" and "deploy_ramdisk_name" have changed to "deploy_kernel_name_base" and "deploy_ramdisk_name_base" respectively. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation Deprecation Notes ***************** * The Neutron LBaaS project was retired and support for it in TripleO removed. Other Notes *********** * The "deployment-images" validation has been removed, as its intended functionality became inseparable from "ironic-boot- configuration" in the multi-arch case. Changes in tripleo-validations 11.0.0..11.1.0 --------------------------------------------- e1d0bde Adds molecule testing for controller-ulimits 1ace29c Adds molecule testing for controller-token 49aa252 Adds molecule tests for ctlplane-ip-range validation 9bbd3b2 Adding new role automation with Ansible 5adfef9 Adds molecule tests for undercloud-disk-space 06bb613 Adds Molecule to haproxy validation role 95e9eab Add molecule testing on undercloud-debug role fe467b2 Add new role to validate tls-everywhere 647e9af Adds molecule testing for DNS validation e69d7b9 Use ansible_pkg_mgr fact instead of hardcoding yum command 4e6c26d Make Verify the RAM requirements task failing again 5f0e39a Add molecule tests for the undercloud-cpu role 31b32cd Add Python 3 Train unit tests 9750f94 Support multi-arch in deploy image validations bb48a7f Fix variables indentation for ceph-health validation 3619fe3 Add Molecule tests for the role xfs-check-ftype. 5bd4165 Add Molecule tests for the role undercloud-ram. 9831488 Deletes validations directory 33a8cc8 Remove Neutron LBaaS 0f66b7d Remove useless roles meta directory d4db54c Add support for the chrony implementation eed1c11 Remove useless cookiecutter files 990bc99 Documentation update with the new validations architecture 90bb581 Use sorted dictionary before iteration d5e948f Update the Undercloud Services list for the uc-service-status role 831b7ae Improve stackrc file sourcing ee1cec4 Use Undercloud local_ip to ensure the registry does answer or not 306f531 Add pkg names better management between OS releases 52eeb5b Update ceph-health for containers and failure options 39c530c Fix typo in the command to get the file_descriptors total_limit 7c729cc Add run-validations.sh script c18eadb Fix validations-specific Ansible output callback e25845d Add nova-status Ansible role Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- README.rst | 3 +- .../defaults/main.yml.j2 | 22 +- _skeleton_role_/handlers/main.yml | 15 + _skeleton_role_/molecule/default/Dockerfile.j2 | 38 ++ _skeleton_role_/molecule/default/molecule.yml | 49 ++ _skeleton_role_/molecule/default/playbook.yml.j2 | 22 + _skeleton_role_/molecule/default/verify.yml | 15 + _skeleton_role_/tasks/main.yml.j2 | 18 + _skeleton_role_/vars/main.yml.j2 | 22 + callback_plugins/validation_output.py | 172 +++---- {validations => library}/__init__.py | 0 library/check_ironic_boot_config.py | 186 +++++++ library/reportentry.py | 93 ++++ library/switch_vlans.py | 18 +- playbooks/ceph-health.yaml | 2 + playbooks/check-latest-minor-version.yaml | 2 - playbooks/deployment-images.yaml | 16 - playbooks/ironic-boot-configuration.yaml | 4 +- playbooks/neutron-sanity-check.yaml | 2 - playbooks/nova-status.yaml | 24 + playbooks/{ntpstat.yaml => ntp.yaml} | 6 +- playbooks/tls-everywhere-post-deployment.yaml | 18 + playbooks/tls-everywhere-pre-deployment.yaml | 17 + playbooks/tls-everywhere-prep.yaml | 14 + playbooks/undercloud-neutron-sanity-check.yaml | 2 - ...loyment-images_multi-arch-031eea343453e67c.yaml | 16 + .../remove-neutron-lbaas-e8168b4595506b91.yaml | 11 + role-addition.yml | 35 ++ roles/advanced-format-512e-support/meta/main.yml | 27 -- roles/ceph/defaults/main.yml | 3 + roles/ceph/meta/main.yml | 27 -- roles/ceph/tasks/ceph-health.yaml | 66 ++- roles/check-latest-minor-version/defaults/main.yml | 9 +- roles/check-latest-minor-version/meta/main.yml | 27 -- roles/check-network-gateway/meta/main.yml | 27 -- .../meta/main.yml | 27 -- .../containerized-undercloud-docker/meta/main.yml | 27 -- roles/controller-token/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../controller-token/molecule/default/molecule.yml | 47 ++ .../controller-token/molecule/default/playbook.yml | 53 ++ roles/controller-ulimits/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 49 ++ .../molecule/default/playbook.yml | 43 ++ roles/ctlplane-ip-range/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 47 ++ .../molecule/default/playbook.yml | 83 ++++ roles/default-node-count/meta/main.yml | 27 -- roles/deployment-images/defaults/main.yml | 3 - roles/deployment-images/meta/main.yml | 27 -- roles/deployment-images/tasks/main.yml | 22 - roles/deployment-images/vars/main.yml | 10 - roles/dhcp-validations/meta/main.yml | 28 -- roles/dns/meta/main.yml | 28 -- roles/dns/molecule/default/Dockerfile.j2 | 37 ++ roles/dns/molecule/default/molecule.yml | 46 ++ roles/dns/molecule/default/playbook.yml | 47 ++ roles/haproxy/meta/main.yml | 28 -- roles/haproxy/molecule/default/Dockerfile.j2 | 36 ++ roles/haproxy/molecule/default/molecule.yml | 47 ++ roles/haproxy/molecule/default/playbook.yml | 71 +++ roles/image-serve/defaults/main.yaml | 1 - roles/image-serve/meta/main.yaml | 28 -- roles/image-serve/tasks/main.yaml | 26 +- roles/ironic-boot-configuration/defaults/main.yml | 4 +- roles/ironic-boot-configuration/meta/main.yml | 27 -- roles/ironic-boot-configuration/tasks/main.yml | 33 +- roles/mysql-open-files-limit/meta/main.yml | 27 -- roles/network-environment/meta/main.yml | 27 -- roles/neutron-sanity-check/defaults/main.yml | 2 - roles/neutron-sanity-check/meta/main.yml | 28 -- roles/no-op-firewall-nova-driver/meta/main.yml | 27 -- roles/no-op/meta/main.yml | 27 -- roles/node-disks/meta/main.yml | 27 -- roles/node-health/meta/main.yml | 27 -- roles/nova-event-callback/meta/main.yml | 27 -- roles/nova-status/tasks/main.yml | 26 + roles/nova-status/vars/main.yml | 20 + roles/{ceilometerdb-size => ntp}/meta/main.yml | 0 roles/ntp/tasks/main.yml | 26 + roles/{ntpstat => ntp}/vars/main.yml | 4 +- roles/ntpstat/meta/main.yml | 28 -- roles/ntpstat/tasks/main.yml | 5 - roles/openshift-on-openstack/meta/main.yml | 28 -- roles/openstack-endpoints/meta/main.yml | 27 -- roles/ovs-dpdk-pmd/meta/main.yml | 28 -- roles/pacemaker-status/meta/main.yml | 28 -- roles/rabbitmq-limits/meta/main.yml | 28 -- roles/rabbitmq-limits/tasks/main.yml | 2 +- roles/repos/meta/main.yml | 27 -- roles/repos/tasks/main.yml | 5 +- roles/stack-health/meta/main.yml | 27 -- roles/stonith-exists/meta/main.yml | 27 -- roles/switch-vlans/meta/main.yml | 27 -- roles/tls-everywhere/defaults/main.yml | 6 + roles/tls-everywhere/handlers/main.yml | 6 + roles/tls-everywhere/tasks/common.yaml | 270 +++++++++++ .../tasks/overcloud-post-deployment.yaml | 78 +++ .../tasks/pre-deployment-containerized.yaml | 202 ++++++++ .../tasks/pre-deployment-non-containerized.yaml | 194 ++++++++ roles/tls-everywhere/tasks/pre-deployment.yaml | 68 +++ roles/tls-everywhere/tasks/prep.yaml | 122 +++++ roles/tls-everywhere/vars/main.yml | 1 + roles/undercloud-cpu/meta/main.yml | 28 -- .../undercloud-cpu/molecule/default/Dockerfile.j2 | 37 ++ roles/undercloud-cpu/molecule/default/molecule.yml | 46 ++ roles/undercloud-cpu/molecule/default/playbook.yml | 42 ++ roles/undercloud-debug/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../undercloud-debug/molecule/default/molecule.yml | 47 ++ .../undercloud-debug/molecule/default/playbook.yml | 58 +++ roles/undercloud-disk-space/meta/main.yml | 28 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 46 ++ .../molecule/default/playbook.yml | 44 ++ roles/undercloud-heat-purge-deleted/meta/main.yml | 28 -- roles/undercloud-process-count/meta/main.yml | 27 -- roles/undercloud-ram/meta/main.yml | 27 -- .../undercloud-ram/molecule/default/Dockerfile.j2 | 37 ++ roles/undercloud-ram/molecule/default/molecule.yml | 46 ++ roles/undercloud-ram/molecule/default/playbook.yml | 42 ++ roles/undercloud-ram/tasks/main.yml | 3 +- roles/undercloud-selinux-mode/meta/main.yml | 28 -- roles/undercloud-service-status/defaults/main.yml | 13 +- roles/undercloud-service-status/meta/main.yml | 28 -- roles/undercloud-tokenflush/meta/main.yml | 28 -- roles/xfs-check-ftype/meta/main.yml | 27 -- .../xfs-check-ftype/molecule/default/Dockerfile.j2 | 37 ++ .../xfs-check-ftype/molecule/default/molecule.yml | 48 ++ .../xfs-check-ftype/molecule/default/playbook.yml | 21 + roles/xfs-check-ftype/molecule/default/prepare.yml | 60 +++ roles/xfs-check-ftype/molecule/default/verify.yml | 15 + scripts/run-validations.sh | 106 ++++ setup.cfg | 3 +- tox.ini | 19 +- tripleo_validations/utils.py | 13 +- validations/512e.yaml | 20 - validations/callback_plugins/fail_if_no_hosts.py | 31 -- validations/callback_plugins/validation_output.py | 198 -------- validations/ceilometerdb-size.yaml | 46 -- validations/ceph-ansible-installed.yaml | 23 - validations/ceph-health.yaml | 30 -- validations/check-ftype.yaml | 34 -- validations/check-latest-minor-version.yaml | 23 - validations/check-network-gateway.yaml | 48 -- .../collect-flavors-and-verify-profiles.yaml | 22 - validations/containerized-undercloud-docker.yaml | 104 ---- validations/controller-token.yaml | 19 - validations/controller-ulimits.yaml | 38 -- validations/ctlplane-ip-range.yaml | 39 -- validations/default-node-count.yaml | 50 -- validations/deployment-images.yaml | 33 -- validations/dhcp-introspection.yaml | 26 - validations/dhcp-provisioning.yaml | 29 -- validations/dns.yaml | 14 - validations/files/rogue_dhcp.py | 239 --------- validations/haproxy.yaml | 37 -- validations/ironic-boot-configuration.yaml | 33 -- validations/library/__init__.py | 0 validations/library/advanced_format.py | 96 ---- validations/library/check_flavors.py | 181 ------- validations/library/check_package_update.py | 151 ------ validations/library/docker_facts.py | 249 ---------- validations/library/haproxy_conf.py | 88 ---- validations/library/hiera.py | 63 --- validations/library/icmp_ping.py | 61 --- validations/library/ini.py | 156 ------ validations/library/ip_range.py | 130 ----- validations/library/network_environment.py | 533 --------------------- validations/library/node_disks.py | 158 ------ validations/library/overcloudrc.py | 78 --- validations/library/ovs_dpdk_pmd_cpus_check.py | 137 ------ validations/library/pacemaker.py | 84 ---- validations/library/switch_vlans.py | 225 --------- validations/library/verify_profiles.py | 167 ------- validations/library/warn.py | 54 --- validations/lookup_plugins/glance_images.py | 78 --- validations/lookup_plugins/introspection_data.py | 52 -- validations/lookup_plugins/ironic_nodes.py | 101 ---- validations/lookup_plugins/nova_flavors.py | 59 --- .../lookup_plugins/nova_hypervisor_statistics.py | 50 -- validations/lookup_plugins/nova_servers.py | 91 ---- validations/lookup_plugins/roles_info.py | 83 ---- validations/lookup_plugins/stack_resources.py | 48 -- validations/lookup_plugins/tht.py | 47 -- validations/mysql-open-files-limit.yaml | 32 -- validations/network-environment.yaml | 26 - validations/neutron-sanity-check.yaml | 65 --- validations/no-op-firewall-nova-driver.yaml | 22 - validations/node-disks.yaml | 25 - validations/node-health.yaml | 39 -- validations/nova-event-callback.yaml | 91 ---- validations/ntpstat.yaml | 17 - validations/openshift-hw-requirements.yaml | 173 ------- validations/openshift-nw-requirements.yaml | 82 ---- validations/openstack-endpoints.yaml | 61 --- validations/ovs-dpdk-pmd-cpus-check.yaml | 23 - validations/pacemaker-status.yaml | 30 -- validations/rabbitmq-limits.yaml | 28 -- validations/repos.yaml | 43 -- validations/stack-health.yaml | 18 - validations/stonith-exists.yaml | 35 -- validations/switch-vlans.yaml | 30 -- validations/tasks/containerized_services.yaml | 29 -- validations/tasks/disk_space.yaml | 36 -- .../openshift-hw-requirements-warnings.j2 | 17 - validations/templates/unreachable_nodes.j2 | 9 - validations/undercloud-cpu.yaml | 17 - validations/undercloud-debug.yaml | 25 - validations/undercloud-disk-space-pre-upgrade.yaml | 20 - validations/undercloud-disk-space.yaml | 23 - validations/undercloud-heat-purge-deleted.yaml | 22 - validations/undercloud-neutron-sanity-check.yaml | 66 --- validations/undercloud-process-count.yaml | 49 -- validations/undercloud-ram.yaml | 19 - validations/undercloud-service-status.yaml | 22 - validations/undercloud-tokenflush.yaml | 25 - zuul.d/layout.yaml | 4 +- 231 files changed, 3680 insertions(+), 7113 deletions(-) From no-reply at openstack.org Fri Jul 26 18:29:54 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:29:54 -0000 Subject: [release-announce] tripleo-puppet-elements 11.1.0 (train) Message-ID: We enthusiastically announce the release of: tripleo-puppet-elements 11.1.0: Puppet building rules for OpenStack images. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.0.0..11.1.0 ------------------------------------------------- 5e0060f Add Python 3 Train unit tests 6a1b92d Stop and disable libvirtd service on controller aabd884 Remove multinode jobs e472a92 Fix typo pankiclient to pankoclient cc2cdb5 Add RHEL8 support for overcloud-full image 9669efa update git.openstack.org to opendev a3bac6a lvm2 is required for cinder Diffstat (except docs and test files) ------------------------------------- README.rst | 4 +- elements/overcloud-agent/pkg-map | 5 ++ .../install.d/package-installs-overcloud-base | 1 + elements/overcloud-base/pkg-map | 9 +++ elements/overcloud-controller/pkg-map | 7 +++ .../post-install.d/51-disable-libvirtd-service | 7 +++ elements/overcloud-openstack-clients/pkg-map | 6 +- .../source-repository-puppet-modules | 66 +++++++++++----------- setup.cfg | 2 +- tox.ini | 2 +- zuul.d/layout.yaml | 5 +- 11 files changed, 70 insertions(+), 44 deletions(-) From no-reply at openstack.org Fri Jul 26 18:30:56 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:30:56 -0000 Subject: [release-announce] os-apply-config 10.4.0 (train) Message-ID: We contentedly announce the release of: os-apply-config 10.4.0: Config files from cloud metadata This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 10.3.0..10.4.0 ----------------------------------------- 7234780 Sync Sphinx requirement 75d527a Don't render None as "null" cacef4d Replace git.openstack.org URLs with opendev.org URLs 3a4633d OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 12 ++++++------ os_apply_config/renderers.py | 2 ++ setup.cfg | 10 +++++----- test-requirements.txt | 3 ++- tox.ini | 2 +- 7 files changed, 22 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 08ad3cb..4e12ba2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.5 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5;python_version>='3.4' # BSD From no-reply at openstack.org Fri Jul 26 18:32:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 18:32:11 -0000 Subject: [release-announce] tripleo-image-elements 10.5.0 (train) Message-ID: We enthusiastically announce the release of: tripleo-image-elements 10.5.0: Disk image builder elements for deploying OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.4.0..10.5.0 ------------------------------------------------ 21b85df4 Replace multinode jobs with image builds c5984fc6 Replace git.openstack.org URLs with opendev.org URLs 37b74a67 Remove note in README regarding security hardened images 7a4ee9a6 OpenDev Migration Patch a7cd393e Update master for stable/stein e142ac81 [Documentation] Migrate the format. Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.md => README.rst | 21 ++++++++++++--------- elements/os-svc-install/README.md | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- elements/overcloud-secure-uefi/README.rst | 4 ---- elements/overcloud-secure/README.rst | 4 ---- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 4 ++-- tox.ini | 2 +- zuul.d/layout.yaml | 2 +- 11 files changed, 26 insertions(+), 24 deletions(-) From no-reply at openstack.org Fri Jul 26 19:01:17 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:01:17 -0000 Subject: [release-announce] puppet-aodh 15.1.0 (train) Message-ID: We are tickled pink to announce the release of: puppet-aodh 15.1.0: Puppet module for OpenStack Aodh This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-aodh 15.0.0..15.1.0 ------------------------------------- 31b4547 Manage oslo_middleware/max_request_body_size 257be71 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-a9e6d2796a735b27.yaml | 5 +++++ spec/classes/aodh_api_spec.rb | 11 +++++++++++ 4 files changed, 27 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:02:22 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:02:22 -0000 Subject: [release-announce] puppet-glance 15.1.0 (train) Message-ID: We are satisfied to announce the release of: puppet-glance 15.1.0: Puppet module for OpenStack Glance This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-glance 15.0.0..15.1.0 --------------------------------------- 643f342 Manage oslo_middleware/max_request_body_size c5a4e73 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 12 ++++++------ .../notes/max_request_body_size-91efd06b477a9ff8.yaml | 5 +++++ spec/classes/glance_api_spec.rb | 10 ++++++++++ 4 files changed, 27 insertions(+), 6 deletions(-) From no-reply at openstack.org Fri Jul 26 19:02:58 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:02:58 -0000 Subject: [release-announce] puppet-congress 15.1.0 (train) Message-ID: We high-spiritedly announce the release of: puppet-congress 15.1.0: Puppet module for OpenStack Congress This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-congress Download the package from: https://tarballs.openstack.org/puppet-congress/ Please report issues through: https://bugs.launchpad.net/puppet-congress/+bugs For more details, please see below. Changes in puppet-congress 15.0.0..15.1.0 ----------------------------------------- d69e3c9 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:02:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:02:59 -0000 Subject: [release-announce] puppet-gnocchi 15.1.0 (train) Message-ID: We are ecstatic to announce the release of: puppet-gnocchi 15.1.0: Puppet module for OpenStack Gnocchi This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-gnocchi 15.0.0..15.1.0 ---------------------------------------- 9ae01ae Manage oslo_middleware/max_request_body_size 16ba2f7 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-99d457dd976374cc.yaml | 5 +++++ spec/classes/gnocchi_api_spec.rb | 11 +++++++++++ 4 files changed, 27 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:02:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:02:59 -0000 Subject: [release-announce] puppet-freezer 4.1.0 (train) Message-ID: We are gleeful to announce the release of: puppet-freezer 4.1.0: Puppet module for OpenStack freezer This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-freezer Download the package from: https://tarballs.openstack.org/puppet-freezer/ Please report issues through: https://bugs.launchpad.net/puppet-freezer/+bugs For more details, please see below. Changes in puppet-freezer 4.0.0..4.1.0 -------------------------------------- a630817 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:03:40 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:03:40 -0000 Subject: [release-announce] puppet-glare 4.1.0 (train) Message-ID: We are pumped to announce the release of: puppet-glare 4.1.0: Puppet module for OpenStack Glare This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-glare Download the package from: https://tarballs.openstack.org/puppet-glare/ Please report issues through: https://bugs.launchpad.net/puppet-glare/+bugs For more details, please see below. Changes in puppet-glare 4.0.0..4.1.0 ------------------------------------ 9f1a5ae Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:03:51 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:03:51 -0000 Subject: [release-announce] puppet-cinder 15.1.0 (train) Message-ID: We are pleased to announce the release of: puppet-cinder 15.1.0: Puppet module for OpenStack Cinder This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. * New class, cinder::keystone::service_user, is introduced to configure parameters to service token feature. Deprecation Notes ***************** * Solidfire option sf_enable_volume_mapping is deprecated and will be removed in a future release. Changes in puppet-cinder 15.0.0..15.1.0 --------------------------------------- c978ba0 Implement class to configure parameters to use service token 85b2b1f Manage oslo_middleware/max_request_body_size 580b2f2 Deprecate sf_enable_volume_mapping ebebc89 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++ manifests/backend/solidfire.pp | 22 +++-- manifests/keystone/service_user.pp | 101 +++++++++++++++++++++ metadata.json | 10 +- ...e_volume_mapping-parmater-a5d9c17aa551601e.yaml | 4 + .../max_request_body_size-a199b5c1e0d2f104.yaml | 5 + .../notes/service_token-94dd15b7ee9af228.yaml | 5 + spec/classes/cinder_api_spec.rb | 1 + spec/classes/cinder_keystone_service_user_spec.rb | 80 ++++++++++++++++ spec/defines/cinder_backend_solidfire_spec.rb | 1 - 10 files changed, 221 insertions(+), 14 deletions(-) From no-reply at openstack.org Fri Jul 26 19:03:52 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:03:52 -0000 Subject: [release-announce] puppet-ceilometer 15.1.0 (train) Message-ID: We are glad to announce the release of: puppet-ceilometer 15.1.0: Puppet module for OpenStack Ceilometer This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. Changes in puppet-ceilometer 15.0.0..15.1.0 ------------------------------------------- 3518ee9 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:03:53 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:03:53 -0000 Subject: [release-announce] puppet-ironic 15.1.0 (train) Message-ID: We high-spiritedly announce the release of: puppet-ironic 15.1.0: Puppet module for OpenStack Ironic This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Other Notes *********** * app.wsgi script in ironic is deprecated from long in favor of ironic-api-wsgi script, wsgi_script_source default is changed to use ironic-api-wsgi instead of app.wsgi. Changes in puppet-ironic 15.0.0..15.1.0 --------------------------------------- cd37458 Manage oslo_middleware/max_request_body_size e7516d3 Do not use deprecated wsgi_script_source ef3faad Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ manifests/params.pp | 4 ++-- metadata.json | 10 +++++----- ...ot_use_deprecated_wsgi_script_source-4c37c6dae485baf1.yaml | 7 +++++++ .../notes/max_request_body_size-9d788f1b7a9a61f7.yaml | 5 +++++ spec/classes/ironic_api_spec.rb | 11 +++++++++++ spec/classes/ironic_wsgi_apache_spec.rb | 4 ++-- 7 files changed, 38 insertions(+), 9 deletions(-) From no-reply at openstack.org Fri Jul 26 19:05:53 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:05:53 -0000 Subject: [release-announce] puppet-cloudkitty 4.1.0 (train) Message-ID: We high-spiritedly announce the release of: puppet-cloudkitty 4.1.0: Puppet module for OpenStack cloudkitty This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. Changes in puppet-cloudkitty 4.0.0..4.1.0 ----------------------------------------- 5c1c8ab Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:05:56 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:05:56 -0000 Subject: [release-announce] puppet-designate 15.1.0 (train) Message-ID: We are ecstatic to announce the release of: puppet-designate 15.1.0: Puppet module for OpenStack Designate This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 15.0.0..15.1.0 ------------------------------------------ 7936ed1 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:06:25 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:06:25 -0000 Subject: [release-announce] puppet-heat 15.1.0 (train) Message-ID: We eagerly announce the release of: puppet-heat 15.1.0: Puppet module for OpenStack Heat This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. * *memcache_socket_timeout* is changed to float value. Changes in puppet-heat 15.0.0..15.1.0 ------------------------------------- 1d6872a Manage oslo_middleware/max_request_body_size 169e0ad Change memcache_socket_timeout to a float 82e5a7b Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/cache.pp | 2 +- manifests/init.pp | 6 ++++++ metadata.json | 10 +++++----- releasenotes/notes/max_request_body_size-86ae2a0048a67496.yaml | 5 +++++ .../notes/memcache_socket_timeout-9daa89a1532caf11.yaml | 4 ++++ spec/classes/heat_cache_spec.rb | 4 ++-- spec/classes/heat_init_spec.rb | 1 + 7 files changed, 24 insertions(+), 8 deletions(-) From no-reply at openstack.org Fri Jul 26 19:06:28 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:06:28 -0000 Subject: [release-announce] puppet-barbican 15.1.0 (train) Message-ID: We are glad to announce the release of: puppet-barbican 15.1.0: Puppet module for Barbican This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-barbican 15.0.0..15.1.0 ----------------------------------------- def436a Manage oslo_middleware/max_request_body_size 0645cd4 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-8ffc79894afb2669.yaml | 5 +++++ spec/classes/barbican_api_spec.rb | 17 +++++++++++++++++ 4 files changed, 33 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:06:30 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:06:30 -0000 Subject: [release-announce] puppet-ec2api 15.1.0 (train) Message-ID: We are pumped to announce the release of: puppet-ec2api 15.1.0: Puppet module for OpenStack Ec2api This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-ec2api Download the package from: https://tarballs.openstack.org/puppet-ec2api/ Please report issues through: https://bugs.launchpad.net/puppet-ec2api/+bugs For more details, please see below. Changes in puppet-ec2api 15.0.0..15.1.0 --------------------------------------- 8e14a18 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:07:26 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:07:26 -0000 Subject: [release-announce] puppet-oslo 15.1.0 (train) Message-ID: We are pumped to announce the release of: puppet-oslo 15.1.0: Puppet module for Oslo This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * *memcache_socket_timeout* is changed to float value. Changes in puppet-oslo 15.0.0..15.1.0 ------------------------------------- 08476e4 Change memcache_socket_timeout to a float 8128917 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/cache.pp | 2 +- metadata.json | 6 +++--- releasenotes/notes/memcache_socket_timeout-9daa8981f42caf41.yaml | 4 ++++ spec/defines/oslo_cache_spec.rb | 4 ++-- 4 files changed, 10 insertions(+), 6 deletions(-) From no-reply at openstack.org Fri Jul 26 19:07:37 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:07:37 -0000 Subject: [release-announce] puppet-octavia 15.1.0 (train) Message-ID: We are excited to announce the release of: puppet-octavia 15.1.0: Puppet module for OpenStack Octavia This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 15.1.0 ^^^^^^ Deprecation Notes ***************** * octavia::housekeeping::spare_amphorae_pool_size is deprecated and will be removed in the future release. Please use octavia::housekeeping::spare_amphora_pool_size instead. * Parameter event_streamer_driver has been removed as part of Neutron LBaaS project retirement in Train. Bug Fixes ********* * The passphrase for config option 'server_certs_key_passphrase', is used as a Fernet key in Octavia and thus must be 32 chars long. Changes in puppet-octavia 15.0.0..15.1.0 ---------------------------------------- d9564d7 Configure 32 chars length server_certs_key_passphrase for Octavia 6a8720d Deprecate spare_amphorae_pool_size d7a171e Prepare Train M2 748f26f Deprecate event_streamer_driver parameter Diffstat (except docs and test files) ------------------------------------- manifests/certificates.pp | 14 ++++++--- manifests/health_manager.pp | 19 ++++++++---- manifests/housekeeping.pp | 22 +++++++++++--- metadata.json | 12 ++++---- ...e_amphorae_pool_size_name-f7b3324f8fcf9670.yaml | 4 +++ ...ts_key_passphrase-in-spec-524a44297ec76bd0.yaml | 4 +++ ...ove-event-streamer-driver-48a4bb259b4649a4.yaml | 5 ++++ spec/classes/octavia_certificates_spec.rb | 35 +++++++++++++++++----- spec/classes/octavia_housekeeping_spec.rb | 6 ++-- 9 files changed, 91 insertions(+), 30 deletions(-) From no-reply at openstack.org Fri Jul 26 19:08:42 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:08:42 -0000 Subject: [release-announce] puppet-magnum 15.1.0 (train) Message-ID: We are ecstatic to announce the release of: puppet-magnum 15.1.0: Puppet module for Magnum This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-magnum Download the package from: https://tarballs.openstack.org/puppet-magnum/ Please report issues through: https://bugs.launchpad.net/puppet-magnum/+bugs For more details, please see below. Changes in puppet-magnum 15.0.0..15.1.0 --------------------------------------- b9a6362 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:03 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:03 -0000 Subject: [release-announce] puppet-nova 15.1.0 (train) Message-ID: We are excited to announce the release of: puppet-nova 15.1.0: Puppet module for OpenStack Nova This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. * *memcache_socket_timeout* is changed to float value. * *nova::metadata::dhcp_domain* has been added back to configure api/dhcp_domain. *nova::network::neutron::dhcp_domain* has been removed and the metadata version of the variable should be used instead. * Add parameter *mem_stats_period_seconds* to specify number of seconds to memory usage statistics period, zero or negative value mean to disable memory usage statistics. * Add parameter *limit_tenants_to_placement_aggregate* which allows to have tenant isolation with placement. It ensures hosts are in tenant-isolated host aggregate and availability zones will only be available to specific set of tenants. * Add parmeter *query_placement_for_image_type_support* that causes the scheduler to ask placement only for compute hosts that support the *disk_format* of the image used in the request. Upgrade Notes ************* * The neutron_enabled and install_bridge_utils parameters in nova::compute is deprecated and has no effect. The bridge-utils package is no longer maintained by using the install_bridge_utils parameter. Deprecation Notes ***************** * The neutron_enabled parameter in nova::compute is deprecated, it had no effect except for in conjunction with install_bridge_utils which is also deprecated. * The install_bridge_utils parameter in nova::compute is deprecated and has no effect. The bridge-utils package is now not managed by the nova::compute class. * Deprecates oslo::middleware parameters enable_proxy_headers_parsing and max_request_body_size in ::nova::metadata. Use ::nova::api instead. * Removes deprecated neutron_metadata_proxy_shared_secret and metadata_cache_expiration parameter from nova::api class. * The deprecated "vendordata*" config option has been removed from api and metadata class. Use ::nova::vendordata instead. Bug Fixes ********* * enabled_apis won't get set in nova::api when nova_metadata_wsgi_enabled == true. But the enabled_apis list get also modified for this case, so we need to move setting the config outside the conditional. Since the config is right now also set in nova::metadata this deprecates it in nova::metadata to only use nova::api. * enable_proxy_headers_parsing should not only be configurabe if !$nova_metadata_wsgi_enabled , Therefore it needs to be moved outside the condition. But at the moment enable_proxy_headers_parsing can also be set via ::nova::metadata which conficts. This change deprecates oslo::middleware related parameters enable_proxy_headers_parsing and max_request_body_size in ::nova::metadata. In future ::nova::api should be used instead. Changes in puppet-nova 15.0.0..15.1.0 ------------------------------------- 09b5d822 Expose limit_tenants_to_placement_aggregate parameter 7c1717af Deprecate oslo::middleware related parameters in ::nova::metadata bb4afe7d Manage oslo_middleware/max_request_body_size 66f2e8e5 Remove deprecated metadata option from nova::api 296b1069 Remove deprecated vendordata* params from api/metadata deb6a5da Change memcache_socket_timeout to a float 919a4ce5 Set DEFAULT/enabled_apis in nova::api 1eb5ee74 Escape date command parameter 440fe0d3 Add parameter for `scheduler/query_placement_for_image_type_support` a0f4887b Prepare Train M2 b0eb1aff Remove Unknown variable warnings 5a633e8c Deprecated nova-network params in nova::compute de78491e Add nova::metadata::dhcp_domain 05d7733e Expose 'mem_stats_period_seconds' config parameter Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 138 ++------------------ manifests/cache.pp | 2 +- manifests/compute.pp | 38 +++--- manifests/compute/libvirt.pp | 43 ++++--- manifests/cron/purge_shadow_tables.pp | 2 +- manifests/metadata.pp | 143 ++++++--------------- manifests/network/neutron.pp | 10 +- manifests/scheduler.pp | 34 +++-- manifests/vncproxy/common.pp | 73 +++++++++-- metadata.json | 16 +-- ...cate-install-bridge-utils-141a24413b42cb0b.yaml | 13 ++ .../max_request_body_size-97fb21a434aa250b.yaml | 5 + .../memcache_socket_timeout-babb40e8ed001caf.yaml | 4 + .../nova-api-dhcp_domain-1e9cc68843aaaa35.yaml | 6 + ..._mem_stats_period_seconds-679de08855e07254.yaml | 6 + ...ta_deprecate_enabled_apis-1ec89bc5bee440ff.yaml | 9 ++ ...deprecate_oslo_middleware-cf582b1dac0f0822.yaml | 16 +++ ...ts_to_placement_aggregate-8886c514f0ebbb72.yaml | 7 + ..._placement_for_image_type-351c3200235aa579.yaml | 6 + ...precated_metadata_options-2eb2a69a4b85e27a.yaml | 5 + ...ecated_vendordata_options-ce1999402a25804e.yaml | 6 + spec/classes/nova_api_spec.rb | 82 ++++-------- spec/classes/nova_cache_spec.rb | 4 +- spec/classes/nova_compute_libvirt_spec.rb | 9 +- spec/classes/nova_compute_spec.rb | 28 ---- spec/classes/nova_cron_purge_shadow_tables.rb | 6 +- spec/classes/nova_metadata_spec.rb | 40 +----- spec/classes/nova_network_neutron_spec.rb | 2 +- spec/classes/nova_scheduler_spec.rb | 18 +++ 29 files changed, 334 insertions(+), 437 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:07 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:07 -0000 Subject: [release-announce] puppet-neutron 15.1.0 (train) Message-ID: We jubilantly announce the release of: puppet-neutron 15.1.0: Puppet module for OpenStack Neutron This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * Add support for configuring security group permitted_ethertypes on the Neutron OVS agent. * New hieradata, neutron::keystone::authtoken::service_token_roles, is introduced so that specific role can be assigned to the service user who can use service token feature. * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Upgrade Notes ************* * The Neutron LBaaS plugin has been removed upstream and is no longer available in the Train release. The following deprecated resources has been removed: * "neutron::agents::lbaas" * "neutron::config::lbaas_agent_config" * "neutron::server::ensure_lbaas_package" * "neutron::services::lbaas" * "neutron::services::lbaas::haproxy" * "neutron::services::lbaas::octavia" * "neutron_lbaas_agent_config" * "neutron_lbaas_service_config" Please see the following link for more information on this deprecation: https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation You should use the Octavia project to implement LBaaS. https://docs .openstack.org/octavia/latest/reference/introduction.html Changes in puppet-neutron 15.0.0..15.1.0 ---------------------------------------- c460fd0 Configure keystone_authtoken/service_token_roles e4a0b96 Add support for neutron-mlnx-agent def0797 Add support for configuring permitted_ethertypes on OVS agent 380ed97 Manage oslo_middleware/max_request_body_size 6c34ce2 Ensure tunnel types are absent if not configured d63c346 Prepare Train M2 4538cc0 Remove LBaas Diffstat (except docs and test files) ------------------------------------- examples/neutron.pp | 1 - .../ini_setting.rb | 4 +- .../openstackconfig.rb | 15 -- .../neutron_mlnx_agent_config/ini_setting.rb | 15 ++ ...on_lbaas_agent_config.rb => eswitchd_config.rb} | 21 ++- lib/puppet/type/neutron_lbaas_service_config.rb | 40 ------ lib/puppet/type/neutron_mlnx_agent_config.rb | 25 ++++ manifests/agents/lbaas.pp | 109 --------------- manifests/agents/ml2/mlnx.pp | 84 +++++++++++ manifests/agents/ml2/ovs.pp | 14 ++ manifests/config.pp | 14 -- manifests/deps.pp | 2 - manifests/init.pp | 2 +- manifests/keystone/authtoken.pp | 12 ++ manifests/params.pp | 10 +- manifests/server.pp | 40 +----- manifests/services/lbaas.pp | 71 ---------- manifests/services/lbaas/haproxy.pp | 72 ---------- manifests/services/lbaas/octavia.pp | 117 ---------------- metadata.json | 14 +- .../add-permitted-ethertypes-a5e8f47e85ed8992.yaml | 5 + ...token-service_token_roles-4fe0a7d97045d06b.yaml | 6 + .../max_request_body_size-8c6e25ab27444c04.yaml | 5 + .../notes/remove-lbaas-v2-130dbadb84c5858d.yaml | 20 +++ spec/acceptance/neutron_config_spec.rb | 22 --- spec/classes/neutron_agents_lbaas_spec.rb | 154 --------------------- spec/classes/neutron_agents_ml2_mlnx_spec.rb | 116 ++++++++++++++++ spec/classes/neutron_agents_ml2_ovs_spec.rb | 11 ++ spec/classes/neutron_config_spec.rb | 7 - spec/classes/neutron_init_spec.rb | 4 +- spec/classes/neutron_keystone_authtoken_spec.rb | 3 + spec/classes/neutron_server_spec.rb | 34 ++--- .../classes/neutron_services_lbaas_haproxy_spec.rb | 78 ----------- .../classes/neutron_services_lbaas_octavia_spec.rb | 152 -------------------- spec/classes/neutron_services_lbaas_spec.rb | 88 ------------ .../ini_setting_spec.rb | 25 +--- spec/unit/type/neutron_lbaas_agent_config_spec.rb | 20 --- 37 files changed, 366 insertions(+), 1066 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:11 -0000 Subject: [release-announce] puppet-openstack_extras 15.1.0 (train) Message-ID: We are happy to announce the release of: puppet-openstack_extras 15.1.0: Puppet module for OpenStack Openstack_extras This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 15.0.0..15.1.0 ------------------------------------------------- 06b0096 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:13 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:13 -0000 Subject: [release-announce] puppet-senlin 2.1.0 (train) Message-ID: We are gleeful to announce the release of: puppet-senlin 2.1.0: Puppet module for OpenStack senlin This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-senlin Download the package from: https://tarballs.openstack.org/puppet-senlin/ Please report issues through: https://bugs.launchpad.net/puppet-senlin/+bugs For more details, please see below. Changes in puppet-senlin 2.0.0..2.1.0 ------------------------------------- 040ca75 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:25 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:25 -0000 Subject: [release-announce] puppet-openstacklib 15.1.0 (train) Message-ID: We are pumped to announce the release of: puppet-openstacklib 15.1.0: Puppet module for OpenStack Openstacklib This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. Changes in puppet-openstacklib 15.0.0..15.1.0 --------------------------------------------- 7ffbfbf Remove CredentialsV2_0 a6f0119 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/openstack/credentials.rb | 3 --- metadata.json | 4 +-- spec/unit/provider/openstack/auth_spec.rb | 34 +++++++++++++----------- spec/unit/provider/openstack/credentials_spec.rb | 6 ++--- 4 files changed, 24 insertions(+), 23 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:32 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:32 -0000 Subject: [release-announce] puppet-tacker 15.1.0 (train) Message-ID: We high-spiritedly announce the release of: puppet-tacker 15.1.0: Puppet module for OpenStack Tacker This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tacker Download the package from: https://tarballs.openstack.org/puppet-tacker/ Please report issues through: https://bugs.launchpad.net/puppet-tacker/+bugs For more details, please see below. Changes in puppet-tacker 15.0.0..15.1.0 --------------------------------------- 5c2f8e1 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:41 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:41 -0000 Subject: [release-announce] puppet-rally 3.1.0 (train) Message-ID: We are pleased to announce the release of: puppet-rally 3.1.0: Puppet module for OpenStack Rally This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-rally Download the package from: https://tarballs.openstack.org/puppet-rally/ Please report issues through: https://bugs.launchpad.net/puppet-rally/+bugs For more details, please see below. Changes in puppet-rally 3.0.0..3.1.0 ------------------------------------ cda49f4 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 26 19:09:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:09:59 -0000 Subject: [release-announce] puppet-watcher 15.1.0 (train) Message-ID: We are jazzed to announce the release of: puppet-watcher 15.1.0: Puppet module for OpenStack Watcher This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. Changes in puppet-watcher 15.0.0..15.1.0 ---------------------------------------- a8faa51 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:02 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:02 -0000 Subject: [release-announce] puppet-manila 15.1.0 (train) Message-ID: We are amped to announce the release of: puppet-manila 15.1.0: Puppet module for OpenStack Manila This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-manila 15.0.0..15.1.0 --------------------------------------- 9fb1805 Manage oslo_middleware/max_request_body_size 009b9c7 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 12 ++++++------ .../notes/max_request_body_size-b3b7e87591bd6711.yaml | 5 +++++ spec/classes/manila_api_spec.rb | 13 +++++++++++++ 4 files changed, 30 insertions(+), 6 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:03 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:03 -0000 Subject: [release-announce] puppet-ovn 15.1.0 (train) Message-ID: We are happy to announce the release of: puppet-ovn 15.1.0: Puppet module for OVN This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 15.0.0..15.1.0 ------------------------------------ 58f9529 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:04 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:04 -0000 Subject: [release-announce] puppet-keystone 15.1.0 (train) Message-ID: We contentedly announce the release of: puppet-keystone 15.1.0: Puppet module for OpenStack Keystone This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size* in the *keystone::* class. * *memcache_socket_timeout* is changed to float value. * New resource, keystone::resource::service_user, is available to configure Keystone authentication parameters to use service token feature. Changes in puppet-keystone 15.0.0..15.1.0 ----------------------------------------- 31c32e0 oslo middleware: check puppet resource instead of actual config in spec a60980f Manage oslo_middleware/max_request_body_size be06ab4 Change memcache_socket_timeout to a float ea2fce5 Implement resource to configure parameters to use service token 5b5e713 Dont empty out a symlink 7042e21 Prepare Train M2 2969007 Revert "Revert "Remove auth_uri"" Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 7 ++ manifests/resource/authtoken.pp | 15 +-- manifests/resource/service_user.pp | 108 +++++++++++++++++++++ manifests/wsgi/apache.pp | 5 - metadata.json | 8 +- ...request_body_size-1835161-45ec3b7ab7c40cfa.yaml | 5 + .../memcache_socket_timeout-8f80a6af18dc0844.yaml | 4 + .../notes/remove-auth-uri-9cfa0ed6b68486e4.yaml | 4 + .../notes/service_token-d49c87af77b8c39b.yaml | 5 + spec/classes/keystone_init_spec.rb | 28 ++++-- spec/classes/keystone_wsgi_apache_spec.rb | 3 - spec/defines/keystone_resource_authtoken_spec.rb | 3 + .../defines/keystone_resource_service_user_spec.rb | 97 ++++++++++++++++++ 13 files changed, 258 insertions(+), 34 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:22 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:22 -0000 Subject: [release-announce] puppet-swift 15.1.0 (train) Message-ID: We are chuffed to announce the release of: puppet-swift 15.1.0: Puppet module for OpenStack Swift This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 15.1.0 ^^^^^^ Upgrade Notes ************* * The swift::client_ensure_package parameter is deprecated and has no effect if you use the swift::client class please define the ensure parameter there. Deprecation Notes ***************** * The swift::client_ensure_package parameter is deprecated, if you use the swift::client class please define the ensure parameter there. Changes in puppet-swift 15.0.0..15.1.0 -------------------------------------- 38753f4 Deprecated swift::client_package_ensure 575c2d1 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/client.pp | 10 ++-------- manifests/init.pp | 17 ++++++++++++----- metadata.json | 6 +++--- .../init-client-package-ensure-6daa722ad33783c4.yaml | 9 +++++++++ spec/classes/swift_client_spec.rb | 4 ++-- spec/classes/swift_spec.rb | 7 ------- 6 files changed, 28 insertions(+), 25 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:32 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:32 -0000 Subject: [release-announce] puppet-horizon 15.1.0 (train) Message-ID: We are overjoyed to announce the release of: puppet-horizon 15.1.0: Puppet module for OpenStack Horizon This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. Changes in puppet-horizon 15.0.0..15.1.0 ---------------------------------------- 904d620 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:35 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:35 -0000 Subject: [release-announce] puppet-mistral 15.1.0 (train) Message-ID: We contentedly announce the release of: puppet-mistral 15.1.0: Puppet module for OpenStack Mistral This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-mistral 15.0.0..15.1.0 ---------------------------------------- 8a28a99 Manage oslo_middleware/max_request_body_size 030a4fe Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-86d0d951e94d181e.yaml | 5 +++++ spec/classes/mistral_api_spec.rb | 12 ++++++++++++ 4 files changed, 28 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:53 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:53 -0000 Subject: [release-announce] puppet-tempest 15.1.0 (train) Message-ID: We joyfully announce the release of: puppet-tempest 15.1.0: Puppet module for OpenStack Tempest This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. Changes in puppet-tempest 15.0.0..15.1.0 ---------------------------------------- 810ab64 Prepare Train M2 af6be72 Remove Neutron LBaaS Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 10 ---------- manifests/params.pp | 1 - metadata.json | 8 ++++---- spec/classes/tempest_init_spec.rb | 1 - 4 files changed, 4 insertions(+), 16 deletions(-) From no-reply at openstack.org Fri Jul 26 19:10:59 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:10:59 -0000 Subject: [release-announce] puppet-monasca 4.1.0 (train) Message-ID: We jubilantly announce the release of: puppet-monasca 4.1.0 This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-monasca Download the package from: https://tarballs.openstack.org/puppet-monasca/ Please report issues through: https://bugs.launchpad.net/puppet-monasca/+bugs For more details, please see below. Changes in puppet-monasca 4.0.0..4.1.0 -------------------------------------- 1953ebd Prepare Train M2 048fa3a Move to opendev b278f17 Fix Repository 9fcc7c9 Replace git.openstack.org with opendev.org/openstack 9e3bf81 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 4 ++-- metadata.json | 8 ++++---- tox.ini | 2 +- 5 files changed, 9 insertions(+), 9 deletions(-) From no-reply at openstack.org Fri Jul 26 19:11:43 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:11:43 -0000 Subject: [release-announce] puppet-zaqar 15.1.0 (train) Message-ID: We are excited to announce the release of: puppet-zaqar 15.1.0: Puppet module for OpenStack Zaqar This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-zaqar Download the package from: https://tarballs.openstack.org/puppet-zaqar/ Please report issues through: https://bugs.launchpad.net/puppet-zaqar/+bugs For more details, please see below. Changes in puppet-zaqar 15.0.0..15.1.0 -------------------------------------- c2d5e5e Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:11:52 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:11:52 -0000 Subject: [release-announce] puppet-panko 15.1.0 (train) Message-ID: We are gleeful to announce the release of: puppet-panko 15.1.0: Puppet module for OpenStack Panko This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-panko Download the package from: https://tarballs.openstack.org/puppet-panko/ Please report issues through: https://bugs.launchpad.net/puppet-panko/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-panko 15.0.0..15.1.0 -------------------------------------- dfdb5f7 Manage oslo_middleware/max_request_body_size 5f69567 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-b4d7bf22decb115a.yaml | 5 +++++ spec/classes/panko_api_spec.rb | 11 +++++++++++ 4 files changed, 27 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:11:55 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:11:55 -0000 Subject: [release-announce] puppet-trove 15.1.0 (train) Message-ID: We enthusiastically announce the release of: puppet-trove 15.1.0: Puppet module for OpenStack Trove This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. Changes in puppet-trove 15.0.0..15.1.0 -------------------------------------- 06e33d8 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:12:48 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:12:48 -0000 Subject: [release-announce] puppet-sahara 15.1.0 (train) Message-ID: We are excited to announce the release of: puppet-sahara 15.1.0: Puppet module for OpenStack Sahara This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 15.0.0..15.1.0 --------------------------------------- 689b3bc Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:13:34 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:13:34 -0000 Subject: [release-announce] puppet-murano 15.1.0 (train) Message-ID: We are pleased to announce the release of: puppet-murano 15.1.0: Puppet module for OpenStack Murano This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 15.0.0..15.1.0 --------------------------------------- 8354eb7 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:14:02 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:14:02 -0000 Subject: [release-announce] puppet-vitrage 5.1.0 (train) Message-ID: We contentedly announce the release of: puppet-vitrage 5.1.0: Puppet module for OpenStack Vitrage This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. 5.1.0 ^^^^^ New Features * Add support to configure *[oslo_middleware]/max_request_body_size* with *$max_request_body_size*. Changes in puppet-vitrage 5.0.0..5.1.0 -------------------------------------- d6cc940 Manage oslo_middleware/max_request_body_size 53064dd Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++++++ metadata.json | 10 +++++----- .../notes/max_request_body_size-a5a49ba6eaeb2710.yaml | 5 +++++ spec/classes/vitrage_api_spec.rb | 11 +++++++++++ 4 files changed, 27 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 26 19:14:35 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:14:35 -0000 Subject: [release-announce] puppet-vswitch 11.1.0 (train) Message-ID: We contentedly announce the release of: puppet-vswitch 11.1.0: Puppet module for OpenStack Vswitch This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 11.0.0..11.1.0 ---------------------------------------- c0ec164 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) From no-reply at openstack.org Fri Jul 26 19:17:36 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:17:36 -0000 Subject: [release-announce] puppet-placement 2.1.0 (train) Message-ID: We are pleased to announce the release of: puppet-placement 2.1.0: Puppet module for OpenStack placement This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Allow configuration of arbitrary Placement configurations. * New hieradata, placement::keystone::authtoken::service_token_roles, is introduced so that specific role can be assigned to the service user who can use service token feature. Deprecation Notes ***************** * The parameters password, auth_type, auth_url, region_name, valid_interfaces, project_domain_name, project_name, user_domain_name, username in placement::config is deprecated and has no effect. They were leftovers from the puppet-nova extraction and should not be set in the placement section of placement's configuration file. Changes in puppet-placement 2.0.0..2.1.0 ---------------------------------------- 1b941f3 Configure keystone_authtoken/service_token_roles 55b3d91 Remove faulty placement::config leftovers 1add402 Prepare Train M2 9ec9616 Implement generic placement::config::placement_config ffba012 Debian: Add support for placement-api over uwsgi 83b2269 Move to opendev ac8fb4c Replace git.openstack.org with opendev.org/openstack 74e347d OpenDev Migration Patch cb71955 Add Beaker-Rspec to the table of contents d0d9759 Update master for stable/stein b68f661 Add release note jobs Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 + Gemfile | 2 +- README.md | 7 +- manifests/api.pp | 86 ++++++++++++++++++++++ manifests/config.pp | 83 ++++++++++++++------- manifests/keystone/authtoken.pp | 12 +++ manifests/params.pp | 9 ++- metadata.json | 8 +- .../generic-config-class-85daf5c44f226272.yaml | 4 + ...token-service_token_roles-342a535a433575e8.yaml | 6 ++ .../placement-config-fix-08672668346a6d38.yaml | 7 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ spec/classes/placement_config_spec.rb | 54 ++++---------- spec/classes/placement_keystone_authtoken_spec.rb | 3 + tox.ini | 2 +- 17 files changed, 213 insertions(+), 80 deletions(-) From no-reply at openstack.org Fri Jul 26 19:17:47 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 26 Jul 2019 19:17:47 -0000 Subject: [release-announce] puppet-qdr 4.1.0 (train) Message-ID: We eagerly announce the release of: puppet-qdr 4.1.0 This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-qdr Download the package from: https://tarballs.openstack.org/puppet-qdr/ Please report issues through: https://bugs.launchpad.net/puppet-qdr/+bugs For more details, please see below. Changes in puppet-qdr 4.0.0..4.1.0 ---------------------------------- f2c2793 Prepare Train M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) From no-reply at openstack.org Mon Jul 29 14:31:11 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 29 Jul 2019 14:31:11 -0000 Subject: [release-announce] cloudkitty 10.0.0 (train) Message-ID: We are stoked to announce the release of: cloudkitty 10.0.0: Rating as a Service component for OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://bugs.launchpad.net/cloudkitty/+bugs For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * A Prometheus scope fetcher has been added in order to dynamically discover scopes from a Prometheus service using a user defined metric and a scope attribute. It can also filter out the response from Prometheus using metadata filters to have a more fine-grained control over scope discovery. It features HTTP basic auth capabilities and HTTPS configuration options similar to Prometheus collector. * Added a v2 API endpoint allowing to retrieve the state of several scopes. This endpoint is available via a "GET" request on "/v2/scope" and supports filters. Admin privileges are required to use this endpoint. * Added a v2 API endpoint allowing to reset the state of several scopes. This endpoint is available via a "PUT" request on "/v2/scope" and supports filters. Admin privileges are required to use this endpoint. * A v2 API has been bootstrapped. It is compatible with the v2 storage and will be the base for all upcoming API endpoints. It is marked as "EXPERIMENTAL" for now. * It is now possible to force a project_id to retrieve a specific metric from it with the monasca collector. * The processor is now able to run several parallel workers. By default, one worker is spawned for each available CPU. Workers can be limited through the "max_workers" option of the "orchestrator" section. Upgrade Notes ************* * The v1 API is now marked as "CURRENT". The API root is now built with Flask instead of pecan * Metrics are now fetched concurrently with "eventlet" instead of one after another by the orchestrator, leading to a consequent performance improvement. The maximum number of greenthreads to use can be specified through the "max_greenthreads" option of the "orchestrator" section. Security Issues *************** * The default policy for the "/v1/storage/dataframes" endpoint has been changed from "unprotected" (accessible by any unauthenticated used) to "admin_or_owner" (accessible only by admins or members of the project). * Introduce bandit security checks and fix potential security issues detected by bandit linter. Remove unused option where host_ip was a binding to all interfaces. Using of insecure hash function, switch from sha1 to sha512. Bug Fixes ********* * HashMap module field mapping matching has been fixed: Field mapping values are always stored as strings. However, metadatas to match can be floats or integers (eg vcpus or ram). Given that mappings were matched with "==" until now, integers or float metadatas did never match. * "CompileError: Can't resolve label reference for ORDER BY / GROUP BY." errors that were sometimes raised by SQLAlchemy when using the v1 storage backend and grouping on "tenant_id" and "res_type" have been fixed. Changes in cloudkitty 9.0.0.0rc1..10.0.0 ---------------------------------------- 043c793 Do not re-instantiate a StateManager for each request in /v2/scope aed221f Update PUT /v2/scope API reference f044c03 Fix v1 hybrid storage python2 python3 string type comparison in memory d78ba87 Add a v2 API endpoint to reset the state of different scopes b88c937 Add an option for the metric project to the Monasca collector f02196f Add a "delete" method to the v2 storage interface 1797c6c Add quotes to InfluxDb queries a9a56fb Add Monasca collector auth options to the sample config 22e8c93 Bump openstackdocstheme to 1.30.0 acd2fec Add a v2 summary endpoint 1c09de7 Update the "admin/configuration" section of the documentation b0e010a Modify the url of upper_constraints_file 460f12f Blacklist sphinx 2.1.0 (autodoc bug) f34624c Add python 3.7 classifier to setup.cfg 5e716e1 Use openstack-python3-train-jobs for python3 test runtime a88a756 Update the "architecture" section of the documentation 5fef2d6 Fix sqlalchemy grouping on v1 storage bba518c Fix Prometheus fetcher error 870679a Update sphinx dependency 9017472 Use a hash for lock names cb54087 Add a v2 API endpoint to get scope state abb955b Fix bandit job e7247dc Add 'rate:xxx' to gnocchi collector aggregation methods f664432 Remove "group_filters" parameter from v2 storage interface 7b0df70 Addition of catch block to avoid hiding Gnocchi schema validation errors a9f9be8 Updated tooz lock name 3c585ec Updated constraints on storage state b42c3a1 Add Fetcher documentation b70b748 Fix section name in config file generation cc562d4 Add a base resource for v2 API endpoints 8243e18 Replace git.openstack.org URLs with opendev.org URLs 99a3868 OpenDev Migration Patch 07163cb Retrieve metrics in eventlet greenthreads c9889f2 Fix rounding in v2 storage unit tests 46f58fd Add missing import to cloudkitty/common/config 46a54ad Implement Prometheus fetcher 0259fe4 Fix InfluxDB storage's "_point_to_dataframe_entry" method 1e60561 Make cloudkitty-processor run several workers 394177f Fix requirements.txt 19425bd Dropping the py35 testing f315499 Update tox to 2.0 b3c4f18 Update the default policy rule for /v1/storage/dataframes 8691aa6 Add storage backend documentation dc2509b Bootstrap the v2 API 4c69a86 [devstack] Setting [collect]/wait_periods to 0 by default 8ea14cb Fix HashMap field mapping comparison 6074028 Add bandit for security static analysis and fix potential security issues 4cfc06c Update the default metrics.yml file 7c7ff81 Update admin documentation for Prometheus collector df9442c Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 32 +- cloudkitty/api/app.py | 57 ++-- cloudkitty/api/root.py | 191 ++++-------- cloudkitty/api/v1/__init__.py | 57 ++++ cloudkitty/api/{ => v1}/config.py | 2 +- cloudkitty/api/v1/controllers/report.py | 8 +- cloudkitty/api/v1/controllers/storage.py | 9 +- cloudkitty/api/{ => v1}/hooks.py | 0 cloudkitty/api/v2/__init__.py | 64 ++++ cloudkitty/api/v2/base.py | 38 +++ cloudkitty/api/v2/scope/__init__.py | 26 ++ cloudkitty/api/v2/scope/state.py | 139 +++++++++ cloudkitty/api/v2/summary/__init__.py | 26 ++ cloudkitty/api/v2/summary/summary.py | 64 ++++ cloudkitty/api/v2/utils.py | 337 +++++++++++++++++++++ cloudkitty/cli/processor.py | 6 +- cloudkitty/collector/__init__.py | 12 +- cloudkitty/collector/gnocchi.py | 2 +- cloudkitty/collector/monasca.py | 23 +- cloudkitty/collector/prometheus.py | 78 +---- cloudkitty/common/config.py | 9 +- cloudkitty/common/defaults.py | 5 +- cloudkitty/common/policies/__init__.py | 24 +- cloudkitty/common/policies/v1/__init__.py | 0 cloudkitty/common/policies/{ => v1}/collector.py | 0 cloudkitty/common/policies/{ => v1}/info.py | 0 cloudkitty/common/policies/{ => v1}/rating.py | 0 cloudkitty/common/policies/{ => v1}/report.py | 0 cloudkitty/common/policies/{ => v1}/storage.py | 2 +- cloudkitty/common/policies/v2/__init__.py | 0 cloudkitty/common/policies/v2/scope.py | 37 +++ cloudkitty/common/policies/v2/summary.py | 30 ++ cloudkitty/common/prometheus_client.py | 69 +++++ cloudkitty/fetcher/prometheus.py | 142 +++++++++ cloudkitty/messaging.py | 2 +- cloudkitty/orchestrator.py | 230 ++++++++++---- cloudkitty/rating/hash/__init__.py | 3 +- cloudkitty/rating/pyscripts/__init__.py | 2 +- cloudkitty/rating/pyscripts/datamodels/script.py | 4 +- .../75c205f6f1a2_move_from_sha1_to_sha512.py | 43 +++ .../rating/pyscripts/db/sqlalchemy/models.py | 4 +- cloudkitty/storage/__init__.py | 11 +- cloudkitty/storage/v1/hybrid/backends/gnocchi.py | 2 +- cloudkitty/storage/v1/sqlalchemy/__init__.py | 2 +- cloudkitty/storage/v2/__init__.py | 24 +- cloudkitty/storage/v2/influx.py | 54 ++-- cloudkitty/storage_state/__init__.py | 42 +++ ...c50ed2c19204_update_storage_state_constraint.py | 46 +++ cloudkitty/storage_state/models.py | 17 +- .../gabbi/rating/pyscripts/gabbits/pyscripts.yaml | 12 +- cloudkitty/write_orchestrator.py | 4 +- devstack/README.rst | 4 +- devstack/plugin.sh | 3 + .../api-reference/{ => v1}/rating/hashmap.rst | 3 +- .../api-reference/{ => v1}/rating/pyscripts.rst | 3 +- .../v2/api_samples/scope/scope_get.json | 25 ++ .../v2/api_samples/summary/summary_get.json | 45 +++ .../api-reference/v2/scope/scope_parameters.yml | 94 ++++++ .../v2/summary/summary_parameters.yml | 79 +++++ etc/cloudkitty/api_paste.ini | 6 +- etc/cloudkitty/metrics.yml | 19 +- lower-constraints.txt | 7 +- .../add-prometheus-fetcher-be6082f70f279f0e.yaml | 10 + ...age-state-v2-api-endpoint-45a29d0b44e177b8.yaml | 6 + ...age-state-v2-api-endpoint-492d7092e85ed7b1.yaml | 6 + .../notes/added-v2-api-1ef829355c2feea4.yaml | 11 + ...etch-metrics-concurrently-dffffe346bd4900e.yaml | 7 + ...shmap-mapping-value-match-56570510203ce3e5.yaml | 7 + .../fix-v1-storage-groupby-e865d1315bd390cb.yaml | 6 + ...ject-id-monasca-collector-cb30ed073d36d40e.yaml | 5 + .../harden-dataframes-policy-7786286525e52dfb.yaml | 6 + ...ce-bandit-security-linter-592faa26f957a3dd.yaml | 6 + ...essor-run-several-workers-02597b0f77687ef3.yaml | 6 + ...work-prometheus-collector-f9f34a3792888dad.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + requirements.txt | 6 +- setup.cfg | 4 +- test-requirements.txt | 7 +- tox.ini | 15 +- 128 files changed, 4286 insertions(+), 877 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 616826f..7b10a7f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -32 +32,5 @@ voluptuous>=0.11.1 # BSD License -influxdb>=5.1.0,!=5.2.0 # MIT +influxdb>=5.1.0,!=5.2.0,!=5.2.1,!=5.2.2;python_version<'3.0' # MIT +influxdb>=5.1.0;python_version>='3.0' # MIT +Flask>=1.0.2 # BSD +Flask-RESTful>=0.3.5 # BSD +cotyledon>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 1d028b4..67ff452 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,2 +15,3 @@ mock>=1.2 # BSD -sphinx>=1.6.2,!=1.6.6,!=1.6.7 # BSD -openstackdocstheme>=1.20.0 # Apache-2.0 +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +openstackdocstheme>=1.30.0 # Apache-2.0 @@ -22,0 +24,2 @@ Pygments>=2.2.0 # BSD license +bandit>=1.1.0 # Apache-2.0 +os-api-ref>=1.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 29 14:33:36 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 29 Jul 2019 14:33:36 -0000 Subject: [release-announce] python-cloudkittyclient 3.0.0 (train) Message-ID: We jubilantly announce the release of: python-cloudkittyclient 3.0.0: API client of cloudkitty, Rating as a Service project. This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-cloudkittyclient Download the package from: https://pypi.org/project/python-cloudkittyclient Please report issues through: https://bugs.launchpad.net/cloudkitty/+bugs For more details, please see below. 3.0.0 ^^^^^ New Features ************ * Support for the "/v2/summary" endpoint has been added to the client. The "summary get" CLI command as well as the "client.summary" object in the python library have been overriden in case the v2 API is used. Upgrade Notes ************* * The client has been adapted to allow adding support for v2 API endpoints. The v2 client class implements all v1 endpoints, but v1 endpoints ported to v2 will be overriden. The API version to use can be specified through the "--os-rating-api-version" option or the "OS_RATING_API_VERSION". Bug Fixes ********* * The "rating.get_quotation" method of the client has been fixed: the json body has been updated to match the API reference. Changes in python-cloudkittyclient 2.1.0..3.0.0 ----------------------------------------------- d660bef Add support for PUT /v2/scope API endpoint to the client c138f40 Add support for /v2/summary to the client a5a14a5 Bump openstackdocstheme to 1.30.0 7e7d25d Add support for /v2/scope API endpoint to the client b29fefa Modify the url of upper_constraints_file 301d8cb Blacklist sphinx 2.1.0 (autodoc bug) 0c623ef Add python 3.7 classifier to setup.cfg 6d27c9b Use openstack-python3-train-jobs for python3 test runtime a3e18a1 Add upper-constraints.txt to releasenotes tox environment 573908b Replaced openstack.org with opendev.org d2fb83e Adapt the client for the v2 API d77526b Fix sphinx for global requirements 1f1f811 OpenDev Migration Patch 40984c2 Dropping the py35 testing aeebd64 Adding a python3 functional job de96c61 Fix the rating.get_quotation method a7e687f Asserting 'summary get' returns nothing in functional tests 89475e2 Fix releasenotes generation 454584f Update master for stable/stein 613e698 add python 3.7 unit test job e7a9f20 Update home-page dd1a421 Update the bugs link to storyboard 419ee04 Change openstack-dev to openstack-discuss 541d682 Update http link to https link 378ee67 Fix oslo_debug_helper not running Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 23 +++- CONTRIBUTING.rst | 8 +- cloudkittyclient/common/__init__.py | 0 cloudkittyclient/{v1 => common}/base.py | 0 cloudkittyclient/common/client.py | 44 ++++++++ cloudkittyclient/osc.py | 6 + cloudkittyclient/shell.py | 25 +++-- cloudkittyclient/v1/client.py | 29 ++--- cloudkittyclient/v1/collector.py | 2 +- cloudkittyclient/v1/info.py | 2 +- cloudkittyclient/v1/rating/__init__.py | 8 +- cloudkittyclient/v1/rating/hashmap.py | 2 +- cloudkittyclient/v1/rating/pyscripts.py | 2 +- cloudkittyclient/v1/report.py | 2 +- cloudkittyclient/v1/storage.py | 2 +- cloudkittyclient/v2/__init__.py | 0 cloudkittyclient/v2/client.py | 40 +++++++ cloudkittyclient/v2/scope.py | 102 +++++++++++++++++ cloudkittyclient/v2/scope_cli.py | 98 ++++++++++++++++ cloudkittyclient/v2/summary.py | 52 +++++++++ cloudkittyclient/v2/summary_cli.py | 62 ++++++++++ lower-constraints.txt | 3 +- .../adapt-client-to-v2-api-c870d5ca49af6341.yaml | 8 ++ .../add-support-v2-summary-7c1ff903f21f057b.yaml | 6 + .../notes/fix-get-quotation-1d2c18a979f85fe6.yaml | 5 + releasenotes/source/conf.py | 17 +-- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + requirements.txt | 1 + setup.cfg | 125 ++++++++++++++++++++- tox.ini | 10 +- 62 files changed, 1043 insertions(+), 88 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 264165a..73e1ac8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,0 +14 @@ os-client-config>=1.29.0 # Apache-2.0 +osc-lib>=1.12.1 # Apache-2.0 From no-reply at openstack.org Mon Jul 29 15:26:51 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 29 Jul 2019 15:26:51 -0000 Subject: [release-announce] patrole 0.6.0 (train) Message-ID: We are happy to announce the release of: patrole 0.6.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This release is part of the train release series. The source is available from: https://opendev.org/openstack/patrole Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through: https://bugs.launchpad.net/patrole/+bugs For more details, please see below. 0.6.0 ^^^^^ Prelude This is an intermediate release during the Train development cycle to marks the end of support for Pike in Patrole. After this release, Patrole will support below OpenStack Releases: * Stein * Rocky * Queens Current development of Patrole is for OpenStack Train development cycle. Changes in patrole 0.5.0..0.6.0 ------------------------------- bad5c03 Add releasenote to tag the end of support for Pike 2d038b5 Bump openstackdocstheme to 1.20.0 6f15d30 Add Python 3 Train unit tests 6b229a7 Zuul: Fix extra quotes when writing devstack localconf 5bb8f59 Revert "Update master for stable/stein" 4ae79ba Add nosec in get_free_segmentation_id function 788db67 Fix some inaccurate URL links b3606a0 Add Patrole gate job for stable/stein 35062ad Dropping the py35 testing b3ee7cb make Patrole to run for shared network env eedb039 OpenDev Migration Patch 27fdf56 Update master for stable/stein f04d671 Add release notes page for v0.5.0 20b8088 Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 48 ++++++++++++++-------- .../test_server_misc_policy_actions_rbac.py | 5 +++ .../compute/test_server_volume_attachments_rbac.py | 5 +++ ...ntermediate-train-release-c8f2da843a6e3809.yaml | 12 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/v0.5.0.rst | 6 +++ setup.cfg | 4 +- tox.ini | 2 +- 21 files changed, 132 insertions(+), 31 deletions(-) From no-reply at openstack.org Mon Jul 29 15:35:49 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 29 Jul 2019 15:35:49 -0000 Subject: [release-announce] openstackdocstheme 1.31.0 Message-ID: We joyfully announce the release of: openstackdocstheme 1.31.0: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. 1.31.0 ^^^^^^ Other Notes * As a result of the CSS coverage improving, a large number of the unused CSS rules have been removed. Changes in openstackdocstheme 1.30.0..1.31.0 -------------------------------------------- 16dd892 Update API sidebar dea1b07 Update api-ref location 31ca35d Make 'docstheme-build-pdf' executable 9b798ec Add 'docstheme-build-pdf' script 481d765 setup.cfg: Remove remanents of 'build_sphinx' usage b023a4f Add missing 'role="main"' attribute 5aa9978 css: General cleanup 6bb4255 js: Fix some comments 9e64a25 js: Remove dead or unused JS e988c78 Add reno for recent CSS cleanups d325318 Note External Link Helper is not compatible with project only master brach 8a82425 Remove a heap of dead CSS rules 4d5e438 Removed 'combined.css' for 'starlingxdocs' theme b716618 css: Add symlinks for openstack logos 8aaeb7a css: Move bootstrap modifications to 'combined.css' (StarlingX) e2393e8 css: Use ellipsis for long titles in sidebar (StarlingX) ab95ba7 css: Use https links (StarlingX) 65e9939 css: Don't use bold text in titles (StarlingX) Diffstat (except docs and test files) ------------------------------------- bin/docstheme-build-pdf | 41 + openstackdocstheme/theme/openstackdocs/layout.html | 2 +- .../theme/openstackdocs/script_footer.html | 3 - .../openstackdocs/sidebartoc_menu_apiref.html | 50 +- .../theme/openstackdocs/static/css/combined.css | 3896 +---------------- .../openstackdocs/static/images/logo-full.svg | 1 + .../openstackdocs/static/images/logo-vert.svg | 1 + .../theme/openstackdocs/static/js/docs.js | 103 +- .../theme/openstackdocs/static/js/webui-popover.js | 434 -- .../theme/starlingxdocs/static/css/combined.css | 4513 +------------------- .../notes/css-cleanup-7fb30a2d1208bb4d.yaml | 5 + setup.cfg | 10 +- 13 files changed, 246 insertions(+), 8818 deletions(-) From no-reply at openstack.org Wed Jul 31 14:54:58 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 31 Jul 2019 14:54:58 -0000 Subject: [release-announce] ironic-lib 2.19.0 (train) Message-ID: We are stoked to announce the release of: ironic-lib 2.19.0: Ironic common library This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://bugs.launchpad.net/ironic-lib/+bugs For more details, please see below. 2.19.0 ^^^^^^ Bug Fixes * Fixes an issue where the incorrect partition naming was used for metadisk (md) devices. See Story 2006154 (https://storyboard.openstack.org/#!/story/2006154) for details. Changes in ironic-lib 2.18.0..2.19.0 ------------------------------------ cd51319 Use last digit to determine paritition naming scheme c826e7d Returns disk_identifier for UEFI boot mode nodes Diffstat (except docs and test files) ------------------------------------- ironic_lib/disk_utils.py | 47 ++++++++++++++-- ...fix-metadisk-partitioning-32d3fca274290dd6.yaml | 6 ++ 3 files changed, 111 insertions(+), 6 deletions(-) From no-reply at openstack.org Wed Jul 31 20:35:22 2019 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 31 Jul 2019 20:35:22 -0000 Subject: [release-announce] os-traits 0.16.0 Message-ID: We are pleased to announce the release of: os-traits 0.16.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 0.15.0..0.16.0 ----------------------------------- 9de1fa7 Add new traits to flag live migration features 77c39a1 CPU: add a trait for AVX512-VNNI support 3297a66 Add Python 3 Train unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +-- os_traits/compute/migrate.py | 18 ++++++++++++++++++ os_traits/hw/cpu/x86/__init__.py | 1 + setup.cfg | 1 + tox.ini | 2 +- 5 files changed, 22 insertions(+), 3 deletions(-)