Open Stack

We are psyched to announce the release of:

puppet-tripleo 11.1.0: Puppet module for OpenStack TripleO

This release is part of the train release series.

The source is available from:

    https://opendev.org/openstack/puppet-tripleo

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

Please report issues through:

    https://bugs.launchpad.net/puppet-tripleo/+bugs

For more details, please see below.

11.1.0
^^^^^^


New Features
************

* Added new parameter 'mpm_module' for the base Apache profile to
  configure the used MPM module. Defaults to 'prefork', which is also
  the default value for the config files installed with the package.

* Two custom per-service hiera keys are added
  tripleo::haproxy::<service>::internal_bind_options and
  tripleo::haproxy::<service>::public_bind_options. They control
  additional custom options that can be added to the bind line of a
  specific service configuration in haproxy. One use case is to force
  older TLS versions for internal APIs that end up pointing to devices
  that do not support the latest TLS standard. They accept a single
  string or an array of strings.

* Adds profile for rsyslogd composable service which aims to replace
  fluentd with the same behaviour. This means that rsyslog will be
  tailing OpenStack log files and forwarding it to central log
  collector (ELK)

* Added TLS support for ELasticsearch output plugin in rsyslog
  service.


Known Issues
************

* Allow a hiera key to add an additional rabbitmq policy in the
  resource agend.


Deprecation Notes
*****************

* The tuned puppet manifest for *tuned* was removed. The heat
  template invoking this manifest has been converted to Ansible.


Bug Fixes
*********

* The old DEFAULT/dhcp_domain setting was moved to api/dhcp_domain.
  nova::network::neutron::dhcp_domain will be removed later in the
  cycle. We need include nova::metadata which sets the new
  [api]/dhcp_domain as this is used by the virt driver to generate the
  config drive.


Other Notes
***********

* Add dateext and related paramters for containerized logrotate
  service to find easily when logfiles were rotated.

Changes in puppet-tripleo 11.0.0..11.1.0
----------------------------------------

5c0380e6 Bump metadata for Train Milestone 2
e1cc8d0b Add tcp-check connect port line to haproxy redis stanza
6fb9d8e6 Allow to configure Apache MPM module
6e267158 Cleanup uuid == docker
5c10f331 Close OVN VIP race by adding an ordering constraint
5061ed8b Support TLS deployments with KernelDisableIPv6 enabled
1eafeb67 Add dateext and related parameters for logrotate
3273d291 Include nova::metadata to compute profile
7970733c Replace hiera('service_names') by hiera('enabled_services')
f8eb9096 Remove unnecessary logic
bcb17115 Add TLS support for rsyslog
03dd75eb Force to use markdown to prevent pypi issue
bac59f43 Fix rabbitmq staged upgrade
77ffbe05 Fix amphora provider driver description
04c6f343 Remove tuned puppet manifest
392eacb0 Force --hostonly when regenerating the initramfs
d4bd49ec Patch fluentd module for unit tests until code lands
31e5cc36 Fix bootstrap node for nova conductor
914cf1f1 Allow enabling custom backends with manila
526d040c Quote the hiera dot notation
e9484ac7 Do not invoke host config in agent config
610c8d8d RabbitMQ: always allow promotion on HA queue during failover
e9d74005 Remove scenario008 jobs
42f07b25 Allow overriding pacemaker_node_ips for staged upgrade
ff13fa13 Base profile for rsyslogd
becc4245 Explicitly disable all MySQL/MariaDB query_cache use
e452c3d5 Introduce tripleo::config
08630540 Add region support for instance HA
d585e8a1 Don't require memcached_node_ips when deploying keystone
8d2c3a0e IHA robustness improvements
d319662c Allow custom per-service bind_options for haproxy
b0515a89 add glue for nova serialproxy support


Diffstat (except docs and test files)
-------------------------------------

Puppetfile_extras                                  |  10 +-
manifests/config.pp                                |  44 ++++++++
manifests/fencing.pp                               |   2 +-
manifests/firewall.pp                              |   2 +-
manifests/firewall/service_rules.pp                |   2 +-
manifests/haproxy.pp                               |   4 +-
manifests/haproxy/endpoint.pp                      |  16 ++-
manifests/haproxy/horizon_endpoint.pp              |  14 +--
manifests/haproxy/service_endpoints.pp             |   4 +-
manifests/profile/base/apache.pp                   |  11 +-
manifests/profile/base/database/mysql.pp           |   2 +
manifests/profile/base/database/mysql/client.pp    |   2 +-
manifests/profile/base/kernel.pp                   |   2 +-
manifests/profile/base/keystone.pp                 |   2 +-
manifests/profile/base/logging/fluentd.pp          |   2 +-
manifests/profile/base/logging/logrotate.pp        |  15 +++
manifests/profile/base/logging/rsyslog.pp          | 120 +++++++++++++++++++++
.../profile/base/logging/rsyslog/file_input.pp     |  37 +++++++
manifests/profile/base/manila/share.pp             |  40 +++----
manifests/profile/base/metrics/collectd.pp         |   2 +-
.../base/metrics/collectd/collectd_service.pp      |   2 +-
manifests/profile/base/neutron/plugins/ml2.pp      |   4 +-
manifests/profile/base/neutron/sriov.pp            |   1 -
manifests/profile/base/nova/compute.pp             |   5 +
manifests/profile/base/nova/conductor.pp           |   2 +-
manifests/profile/base/nova/libvirt.pp             |   2 +-
manifests/profile/base/nova/migration/target.pp    |   4 +-
manifests/profile/base/nova/serialproxy.pp         |  33 ++++++
manifests/profile/base/octavia/api.pp              |   2 +-
manifests/profile/base/pacemaker.pp                |   4 +-
manifests/profile/base/pacemaker/instance_ha.pp    |   9 +-
manifests/profile/base/tuned.pp                    |  41 -------
manifests/profile/pacemaker/ovn_dbs_bundle.pp      |  12 ++-
manifests/profile/pacemaker/rabbitmq_bundle.pp     |  45 +++++---
manifests/tls_proxy.pp                             |   9 +-
metadata.json                                      |   2 +-
...xt-and-related-parameters-58dd288c74b818f7.yaml |   5 +
.../notes/apache_mpm_tuning-deafdf6610ce57b2.yaml  |   6 ++
.../haproxy-custom-bind-opts-09226d990c62063d.yaml |  10 ++
..._compute_include_metadata-21757b44cb976e5d.yaml |   7 ++
.../rabbitmq_extra_policies-69cbc0a4afeac963.yaml  |   5 +
releasenotes/notes/rsyslog-205c11903ed92bdf.yaml   |   5 +
.../notes/rsyslog-tls-dfa676eda2ec646f.yaml        |   3 +
.../notes/tuned-removed-ab68a7109a1e7403.yaml      |   4 +
setup.cfg                                          |   1 +
spec/classes/tripleo_config_spec.rb                |  45 ++++++++
spec/classes/tripleo_profile_base_apache_spec.rb   |   9 ++
...pleo_profile_base_database_mysql_client_spec.rb |  12 +--
.../tripleo_profile_base_logging_rsyslog_spec.rb   | 105 ++++++++++++++++++
.../tripleo_profile_base_octavia_api_spec.rb       |   2 +-
.../classes/tripleo_profile_base_pacemaker_spec.rb |   2 +-
spec/classes/tripleo_profile_base_tuned_spec.rb    |  65 -----------
...profile_base_logging_rsyslog_file_input_spec.rb |  60 +++++++++++
spec/fixtures/hieradata/step2.yaml                 |  10 ++
spec/fixtures/hieradata/step4.yaml                 |   2 +-
templates/logrotate/containers_logrotate.conf.erb  |   9 ++
zuul.d/layout.yaml                                 |   8 --
57 files changed, 690 insertions(+), 195 deletions(-)