[release-announce] tripleo-heat-templates 9.4.0 (rocky)

no-reply at openstack.org no-reply at openstack.org
Fri Jun 21 14:00:18 UTC 2019


We are tickled pink to announce the release of:

tripleo-heat-templates 9.4.0: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the rocky stable release series.

The source is available from:

    https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through:

    https://bugs.launchpad.net/tripleo/+bugs

For more details, please see below.

9.4.0
^^^^^


New Features
************

* Added the configuration option to disable Exact Match Cache (EMC)

* Support setting values for "cephfs_volume_mode" manila parameter
  via the THT parameter ManilaCephFSCephVolumeMode.  These control the
  POSIX rwx mode of the cephfs volumes, snapshots, and groups of these
  that back corresponding manila resources.  Default value for
  ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the
  mode for these objects before it was settable.

* Add new CinderNfsSnapshotSupport parameter, which controls whether
  cinder's NFS driver supports snapshots. The default value is True.

* Add neutron-plugin-ml2-mlnx-sdn-assist as a containerized Neutron
  Core service template to support Mellanox SDN ml2 plugin.

* The parameter {{role.name}}RemovalPoliciesMode can be set to
  'update' to reset the existing blacklisted nodes in heat. This will
  help re-use the node indexes when required.

* Allows a deployer to specify the IdM domain with --domain on the
  ipa-client-install invocation by providing the IdMDomain parameter.

* Allows a deployer to direct the ipa-client-install to skip NTP
  setup by specifying the IdMNoNtpSetup parameter.  This is useful if
  the ipa-client-install setup clobbers the NTP setup by puppet.

* New parameters, NovaCronDBArchivedMaxDelay and
  CinderCronDbPurgeMaxDelay, are introduced to configure max_delay
  parameter to calculate randomized sleep time before db
  archive/purge. This avoids db collisions when performing db
  archive/purge operations on multiple controller nodes.

* The passphrase for config option 'server_certs_key_passphrase',
  that was recently added to Octavia, and will now be auto-generated
  by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of
  parameters TripleO configures in Octavia.

* To allow PAM to create home directory for user who do not have
  one, ipa-client-install need an option. This change allow to enable
  it.

* Configure Neutron API for Nova Placement When the Neutron Routed
  Provider Networks feature is used in the overcloud, the Networking
  service will use those credentials to communicate with the Compute
  scheduler's placement API.

* The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions",
  "NovaNfsVersion" are changed to be role specific. This requires the
  usage of host aggregates as otherwise it will break live migration
  of instances as we can not do this with different storage backends.

* The parameter "NovaRbdPoolName" is changed to be role specific.
  This requires the usage of host aggregates as otherwise it will
  break live migration of instances as we can not do this with
  different storage backends.

* New parameter "NovaNfsVersion" allow configuring the NFS version
  used for nova storage (when NovaNfsEnabled is true). Since NFSv3
  does not support full locking a NFSv4 version need to be used. To
  not break current installations the default is the previous hard
  coded version 4.

* The Shared File Systems service (manila) API has been switched to
  running behind httpd, and it now supports configuring TLS options.


Upgrade Notes
*************

* Cinder's NFS driver does not support snapshots unless the feature
  is explicitly enabled (this policy was chosen to ensure
  compatibility with very old versions of libvirt). The
  CinderNfsSnapshotSupport default value is True, and so the new
  default behavior enables NFS snapshots. This change is safe because
  it just enables a capability (i.e. snapshots) that other cinder
  drivers generally provide.

* Keystone catalog entries for Cinder's v1 API are no longer
  created, but existing entries will not be automatically deleted.


Deprecation Notes
*****************

* The only OVN Tunnel Encap Type that we are supporting in OVN is
  Geneve and this is set by default in ovn puppet. So there are no
  need to set it in TripleO


Bug Fixes
*********

* Fixes an issue where deployment would fail if a non-default
  "name_lower" is used in network data for one of the networks:
  "External", "InternalApi" or "StorageMgmt". (See bug: 1830852
  (https://bugs.launchpad.net/tripleo/+bug/1830852).)

* Fixed service auth URL in Octavia to use the Keystone v3 internal
  endpoint.

* Fixes an issue that caused a subnet to be wrongly created on the
  Undercloud provisioning network based on environment default values.
  If the default "ctlplane-subnet" was renamed in "undercloud.conf",
  the defaults for "ctlplane-subnet" in "environments/undercloud.yaml"
  was merged with the subnets defined in "undercloud.conf". See bug
  1820330 (https://bugs.launchpad.net/tripleo/+bug/1820330).

* It is now possible for temporary containers inside THT to test if
  they are being run as part of a minor update by checking if the
  TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said
  containers need to export it to the container explicitely), see
  <service>_restart_bundles for examples.

* When setting up TLS everywhere, some deployers may not have their
  FreIPA server in the ctlplane, causing the ipaclient registration to
  fail. We move this registration to host-prep tasks and invoke it
  using ansible. At this point, all networks should be set up and the
  FreeIPA server should be accessible.

* e0e885b8ca3332e0815c537a32c564cac81f7f7e moved the cellv2
  discovery from control plane to compute services. In case the
  computes won't have access to the external API this task will fail.
  Switch nova_cell_v2_discover_host.py to use internal api.

* [1] switched to run nova-manage discovery as non root user. In
  case of updates there can be already a nove-manage log owned by root
  from previous runs. This change make sure we change the owner of
  nova- manage log to nova:nova on overcloud deploy runs on the
  computes

  [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova-
  compute-container-puppet.yaml

* With large number of OSDs, where each OSD need a connection, the
  default nofile (1024) of nova_compute is too small. This changes the
  default DockerNovaComputeUlimit to 131072 what is the same for
  cinder.

* Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the
  dicovery to run on a single compute host to not race on simultanious
  nova-manage commands. This change make sure we run the discover on
  every deploy run which is required for scaling up events.

* If nova-manage command was triggered on a host for the first time
  as root (usually manual runs) the nova-manage.log gets created as
  root user. On overcloud deploy runs the nova-manage command is run
  as nova user. In such situation the overcloud deploy fails as the
  nova user can not write to the nova-manage.log. With this change we
  run the chown of the logs files on every overcloud deploy to fix the
  nova-manage.log file permissions.

* The keystone service and endpoint for Cinder's API v1 are no
  longer created. Cinder removed support for its v1 API in Queens.


Other Notes
***********

* The EndpointMap parameter is now required by post_deploy
  templates. So if an user overrides OS::TripleO::NodeExtraConfigPost
  with another template, the template would need to have EndpointMap
  parameter to work fine.

Changes in tripleo-heat-templates 9.3.0..9.4.0
----------------------------------------------

66cd92439 Handle openvswitch meta-package on undercloud upgrade.
fbd3638e2 Fix NovaNfs role parameters
d37bdf779 Set cache_backend for token caching
f1bca94ff Remove scenario008 jobs
fb5f69dcb [FUP] Backport - krb-service-principal metadata per-Role
d574fddb1 Fix log owner on computes during overcloud deploy runs
17a937496 Re-enable manila dashboard
8aa434389 Backport miss to run discovery via bootstrap_host_exec
b99969ea6 Fix correct network for nova-vnc
0ebecb29a Add ComputeHCIOvsDpdk role
435496082 Add panko_api_cron container
dcb9df6ce Add {{role.name}}RemovalPoliciesMode parameter
a8f5bb11d Fix undefined variable python_interpreter
8bf53825d Request certificate for using host service principals
de16ec8b0 Configure server_certs_key_passphrase for Octavia
d6184b833 Ensure we aren't running some dry-run also for Pacemaker case
dcce160c2 DVR neutron template should enable ARP responder
97eb154e9 Only request neutron certificate from neutron dhcp service
38cfa3436 Configure Neutron API for Nova Placement...
6c92c5195 Fix ssl.yaml generating GaneshaInternal in the endpoint map
42695fbd9 Set TenantNetPhysnetMtu to 0 to allow different MTUs
7329ca67a Do not bind /run on host to nova_migration_target
a483d0b53 Start/enable OVS on neutron ovs agent nodes
0663f3fea Fix service auth URL in Octavia
379d6ad76 Fix custom network.name_lower in krb-service-principals
b56035e65 Fix haproxy stats network binding
3e972555e Add CephAnsibleEnvironmentVariables to nodes-uuid call
218582c4c Make krb-service-principal metadata per-Role
ebd0c4944 Add domain and no-ntp options to ipaclient
ff10e2f6b Remove the iptables rules set via service_config_settings
8e13d5778 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames
9c2822879 Add ability to specify dns search domains
bfd445661 Fix IPA client when doing brownfield deployment of internal TLS
3ed420e8a Only add internal_api_virtual_ip if InternalApi in network_data
7ae142710 Add mkhomedir option to ipa-client-install
45dcd0e5a Try a timesync as part of first boot
74fd3fe5b standalone/undercloud - post: use EndpointMap to fetch Keystone URL
448c9b81b Enable serial execution for ansible host
debdaa4b3 Set arp_notify to match ndisc_notify
8da661b1c Add cinder credentials to nova conf
7e0a4d0e5 [Rocky/Queens Only] Remove pre-upgrade validation tasks in cont services.
fdac2bbcd Clean metrics related environments
dd46170b7 Fix NovaNfs role parameter precedence in conditions
9995be9fd Remove OVNTunnelEncapType
884a0ad20 Enable ndisc_notify sysctl setting to notify of MAC changes
edce8a943 Remove ceph-ansible fetch directory after it is saved
93c81bb62 Change setype for non container /var/log/nova-placement
733ec337c Add parameter to configure maxdelay in db purge/archive job
d9eadc4c8 Change setype for non container /var/log/<service> directories
5ed8883ca ensure /var/run/redis is present upon reboot
cba7c2285 Allow ssh from all for undercloud
747abdd15 Ensure there is no redis on host
123535d8c implement default ssh-from-ctlplane rule via hiera
a96883899 Run nova-manage as root to prevent wrong nova-manage.log permissions
ef076b244 Run nova_cell_v2_discover_hosts.py on every deploy run
4d478753b Allow NovaNfs parameters to be role specific
64f80a0b4 Avoid concurrent nova cell_v2 discovery instances
9850aeaeb OpenDev Migration Patch
738bc3ca7 fix storage.yaml to write environments/storage/nova-nfs.yaml
fbf755979 Modifying the ovs-hw-offlaod file to adapt new changes
5b5e4a5f8 Allow NovaRbdPoolName to be role specific
cd3fa6994 Move scenario 10 (octavia) to non-voting check job
ae36e234e Fixed wrong cinder store user name
cdfd00412 Set Standalone's br-ctlplane MTU
1f054551b Switch Manila API to httpd and support TLS
5203a4a83 ceilometer_agent_notification: disable-panko.yaml
d3b70308b Run octavia-api under httpd
5435f13da Correct error catching while in "--check" mode
47284b1f0 Remove deprecated value used to set nova_metadata_ip
741cbadc2 Check if source directory does exist before linking
e2e41c0df Increase DockerNovaComputeUlimit default value
af755c3e8 Fix usage of satellite in organization mode
12543005b Set ulimit 16384 for Neutron SR-IOV container
178773f92 Increase default ulimit values for Neutron agents containers
562359bf2 Bind mount undercloud.conf with ,z in mistral_executor
f24f23b96 Do not archive ceph-ansible fetch directory if it is empty
2e2f29760 Ensure we get rsyslog state, even in "--check" mode
a3dc76b06 Provide option to disable EMC in puppet-vswitch
a39f0c564 Do not restart bundles during a minor update
fb77857f7 Be able to know when we are running inside a minor update workflow
913b73947 Add GnocchiStorageS3BucketPrefix into deployment
ecb01485c Add support for cinder NFS snapshots
17fed07c0 Disable a directory listing of /icons in httpd.
8aff87b8a TLS everywhere: switch Octavia to use DNS entries
8896c2259 Enable flat network for ovn
ac4bd32a7 Fix reload notification file
00102a206 Make nfs version for nova ephemeral storage configurable
6145c590b Remove unused parameter NovaPassword
b158626b4 Include python-panko client.
f9d7d92a4 Disable cinder's LVM backend when deploying Pure backend
9e37ce9ab [Rocky-only] Install and configure tmpwatch for log cleanup
08792a670 scen09 voting on rocky
50063195e Remove UndercloudCtlplaneSubnets defaults in UC env
65a185885 Update manila environment file name in capabilities-map
4bd3d245c Fix python binary lookup regression
4cd63e71d Remove ENV parameters for nova_cell_v2_discover_host.py
85885cbcf Run chown for nova log files on every run to fix wrong permissions
e224d619c Add missing TLS configuration for ironic
22d83bbb0 Optional ICMP validation of controllers and gateways
05413a18b Enable authtoken cache
2859ba651 Add Mellanox SDN ML2 template for a containerized service
745369e8a Enable Glance image_conversion plugin when backend is rbd
d0a6cb1d3 Add tempest workspace volume for tempest
6646e1ce1 Reload rsyslog/cron when we change timezones
0ef34d51c Allow embedded Skydive etcd port
6b916fec1 Use dedicated container tag per skydive service
0fc5b0efc Fix idempotency for horizon container logs
a368910cd Refactored configuration options for nova/neutron in manila
bfe4379bc Add missing entries for Pure Storage Cinder Backend and fix typos
f34e27928 Make heat yaql limits configurable
e02cb626a Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient
e5d6b52c1 Fix nova_cell_v2_discover_host.py with python3
eef9d3e49 Service check in nova_cell_v2_discover_host.py to use internal API
d7704bbf5 Move cellv2 discovery from control plane services to compute services
5baa88d94 Added tar option to preserve metadata of existing fetch_dir
9ae5fd8f3 Don't create service or endpoint for cinder API v1
d8740f616 Support cephfs_volume_mode parameter
61911edb5 Switch scenario00{1,4}-multinode-containers to Ceph bluestore
1792fa2be [FFU] Ensure compatibility with ansible 2.6.
19373b0ef Move ipa enrollment to host_prep_tasks
db722bfd0 Don't look for primary_role ips in AllNodesValidationConfig
82a648fcc certmonger: Don't restart haproxy on cert renewal
759b711b9 Handle upper and lower case system uuids
f56814ebe Upgrades: Ensure idempotency of pacemaker services
3e5484c61 Add CertmongerUser role to OVB defaults
5e725bf58 FFWD: Introduce workaround for neutron cisco plugin
0a39efefe Add missing RoleParameters and ServiceNames
44a3f5ac4 Fail to live migration if instance has NUMA topology
23ac104bf Remove ties between ceilometer and panko
02298dd07 Adding support of glance cinder store settings
3bd4a2a8b TLS everywhere: Mount the whole /etc/pki/libvirt/ directory in libvirt
d07af320a TLS everywhere: Set post-save command for neutron dhcpd
5a2e205c1 TLS everywhere: Set post-save command for nova-vnc-proxy
8d06db25a TLS everywhere: Set post-save command for redis
a1430fbf6 TLS everywhere: Set post-save command for RabbitMQ
6be616a38 TLS everywhere: Set post-save command for httpd
64e564aaf Reload haproxy when certificate is renewed
d9f8ca29d Set Ironic default interface when using networking-ansible
d2e191e76 Fix deployment of gluster with openshift AllInOne
ad9712b60 Fix logging for metrics_qdr
936fd94d2 Run collectd socket cleanup on container start
1dfc4267f Apply changes to cluster using updated inventory
3ce479fb1 Generate post-deployment openshift-ansible inventory
9a07d00c1 Store nodes information in a dict
ee486f2f6 Set container images for openshift 3.11
bda0c48e6 Remove openshift-ansible customization
7e98a5823 fix typo in ansible module name in "upgrade_tasks" of octavia*


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   2 +-
all-nodes-validation.yaml                          |  12 ++
capabilities-map.yaml                              |   7 +-
ci/common/vbmc_setup.yaml                          |   5 +
.../multiple-nics-ipv6/nic-configs/compute.yaml    |   5 +
.../multiple-nics-ipv6/nic-configs/controller.yaml |   5 +
.../network/multiple-nics/nic-configs/compute.yaml |   5 +
.../multiple-nics/nic-configs/controller.yaml      |   5 +
.../network/public-bond/nic-configs/compute.yaml   |   5 +
.../public-bond/nic-configs/controller.yaml        |   5 +
ci/environments/ovb-ha.yaml                        |   2 +
.../scenario001-multinode-containers.yaml          |  13 +-
.../scenario004-multinode-containers.yaml          |  14 +-
.../scenario010-multinode-containers.yaml          |   1 +
ci/environments/scenario010-standalone.yaml        |  99 ++++++++++
common/deploy-steps-tasks.yaml                     |   2 +
common/deploy-steps.j2                             |  11 +-
.../{services.yaml => services/role.role.j2.yaml}  |  17 +-
deployed-server/deployed-server-roles-data.yaml    |   1 +
.../services/logging/files/opendaylight-api.yaml   |   2 +-
.../neutron-plugin-ml2-mlnx-sdn-assist.yaml        |  65 +++++++
.../octavia/octavia-deployment-config.yaml         |  11 +-
.../nova_cell_v2_discover_hosts.py                 |  55 ++++++
.../nova_wait_for_compute_service.py               |  96 +++++++++
environments/cinder-pure-config.yaml               |   2 +
environments/disable-panko.yaml                    |   1 +
...ternal-tls.yaml => enable-internal-tls.j2.yaml} |   4 +-
environments/hyperconverged-ceph.yaml              |   1 +
environments/manila-cephfsganesha-config.yaml      |   1 +
environments/manila-cephfsnative-config.yaml       |   1 +
environments/metrics/collect-read-rabbitmq.yaml    |  15 ++
.../collectd-standalone.yaml}                      |   0
.../collectd-write-qdr.yaml}                       |   0
environments/neutron-ml2-ansible.yaml              |   1 +
environments/neutron-ml2-ovn-ha.yaml               |   2 +-
environments/neutron-ovs-dvr.yaml                  |   3 +
environments/ovs-hw-offload.yaml                   |  16 +-
environments/services-baremetal/octavia.yaml       |   5 +-
environments/services/neutron-ml2-ansible.yaml     |   1 +
environments/services/neutron-ovn-dvr-ha.yaml      |   2 +-
environments/services/neutron-ovn-ha.yaml          |   2 +-
environments/services/neutron-ovn-hw-offload.yaml  |   2 +-
environments/services/octavia.yaml                 |   5 +-
...ternal-tls.yaml => enable-internal-tls.j2.yaml} |   5 +-
environments/ssl/tls-everywhere-endpoints-dns.yaml |   6 +-
environments/standalone.yaml                       |   1 +
environments/standalone/standalone-tripleo.yaml    |   5 +
environments/storage-environment.yaml              |   2 +
environments/storage/nova-nfs.yaml                 |   4 +
environments/undercloud.yaml                       |  64 +++++-
.../role.role.j2.yaml}                             |  29 ++-
extraconfig/post_deploy/default.yaml               |   5 +
extraconfig/post_deploy/standalone_post.yaml       |  43 +----
extraconfig/post_deploy/undercloud_post.yaml       |  35 +---
.../rhel-registration/rhel-registration.yaml       |   6 +
.../rhel-registration/scripts/rhel-registration    |  13 +-
extraconfig/pre_network/config_then_reboot.yaml    |   7 +
extraconfig/services/ipaclient.yaml                | 184 ++++++++++++++++++
extraconfig/services/openshift-cns.yaml            |  14 +-
extraconfig/services/openshift-master.yaml         | 214 +++++++++++++++------
extraconfig/services/openshift-node.yaml           |  41 +++-
extraconfig/services/skydive-analyzer.yaml         |   9 +-
extraconfig/services/tmpwatch-install.yaml         |  44 +++++
firstboot/os-net-config-mappings.yaml              |   5 +-
firstboot/userdata_timesync.yaml                   |  97 ++++++++++
net-config-bond.j2.yaml                            |   8 +
net-config-standalone.j2.yaml                      |   7 +
net-config-static-bridge.j2.yaml                   |   6 +
net-config-static.j2.yaml                          |   6 +
net-config-undercloud.j2.yaml                      |   6 +
.../bond-with-vlans/controller-no-external.j2.yaml |   8 +
.../config/bond-with-vlans/controller-v6.j2.yaml   |   6 +
network/config/bond-with-vlans/role.role.j2.yaml   |   6 +
network/config/multiple-nics/compute-dvr.j2.yaml   |   6 +
network/config/multiple-nics/controller-v6.j2.yaml |   6 +
network/config/multiple-nics/role.role.j2.yaml     |   6 +
.../controller-v6.j2.yaml                          |   6 +
.../role.role.j2.yaml                              |   6 +
.../controller-no-external.j2.yaml                 |   6 +
.../config/single-nic-vlans/controller-v6.j2.yaml  |   6 +
network/config/single-nic-vlans/role.role.j2.yaml  |   6 +
network/scripts/run-os-net-config.sh               |   3 +-
network/service_net_map.j2.yaml                    |   2 +
overcloud-resource-registry-puppet.j2.yaml         |  17 +-
overcloud.j2.yaml                                  |  37 ++--
puppet/all-nodes-config.j2.yaml                    |  12 +-
puppet/extraconfig/pre_deploy/per_node.yaml        |  12 ++
puppet/services/apache.j2.yaml                     |   2 +
puppet/services/cinder-api.yaml                    |   9 +-
puppet/services/cinder-backend-pure.yaml           |  19 +-
puppet/services/cinder-base.yaml                   |   8 +-
puppet/services/cinder-volume.yaml                 |   7 +
puppet/services/database/mysql.yaml                |  10 +-
puppet/services/database/redis.yaml                |   4 +-
puppet/services/glance-api.yaml                    |  21 +-
puppet/services/gnocchi-base.yaml                  |   5 +
.../haproxy-internal-tls-certmonger.j2.yaml        |  11 +-
puppet/services/haproxy-public-tls-certmonger.yaml |   1 +
puppet/services/haproxy.yaml                       |   6 +
puppet/services/heat-base.yaml                     |  16 +-
puppet/services/horizon.yaml                       |   6 -
puppet/services/kernel.yaml                        |   4 +
puppet/services/manila-api.yaml                    |  47 +++++
puppet/services/manila-backend-cephfs.yaml         |   4 +
puppet/services/manila-scheduler.yaml              |  21 +-
puppet/services/manila-share.yaml                  |  17 ++
puppet/services/messaging/notify-rabbitmq.yaml     |   2 +
puppet/services/messaging/rpc-rabbitmq.yaml        |   2 +
puppet/services/metrics/collectd.yaml              |   1 +
puppet/services/neutron-api.yaml                   |  10 +
puppet/services/neutron-base.yaml                  |  29 ---
puppet/services/neutron-dhcp.yaml                  |  15 ++
puppet/services/neutron-metadata.yaml              |   1 -
puppet/services/neutron-ovs-agent.yaml             |   9 +
puppet/services/neutron-plugin-ml2-ovn.yaml        |   7 +-
puppet/services/nova-base.yaml                     |   6 +
puppet/services/nova-compute.yaml                  |  62 +++++-
puppet/services/nova-vnc-proxy.yaml                |   7 +-
puppet/services/octavia-api.yaml                   |  39 +---
puppet/services/octavia-base.yaml                  |   8 +-
puppet/services/openstack-clients.yaml             |   1 +
puppet/services/openvswitch.yaml                   |   9 +
puppet/services/ovn-controller.yaml                |   5 -
puppet/services/rabbitmq.yaml                      |   2 +
puppet/services/sshd.yaml                          |  21 +-
puppet/services/time/timezone.yaml                 |  13 ++
puppet/services/tripleo-firewall.yaml              |   6 +
.../notes/OvsDisableEMC-ab29e5c08856d439.yaml      |   3 +
...eph_volume_mode-parameter-5553a9b39718a749.yaml |   9 +
...nder-nfs-snapshot-support-16664aa46a67a5ad.yaml |  13 ++
...d-mellanox-sdn-ml2-docker-58d242b5a8c40ade.yaml |   5 +
...add-removal-policies-mode-6869362fbeed2cd2.yaml |   6 +
...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml |   7 +
.../notes/bug-1823274-ca992c1055035c7b.yaml        |   7 +
.../notes/endpointmap-8825fcd5fa5a2ba2.yaml        |   7 +
...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml |   7 +
...-service-auth-url-octavia-90f19c835cb1cc0a.yaml |   4 +
...ne-subnet-defaults-merged-5a6061b29618f5cf.yaml |   9 +
...rver_certs_key_passphrase-229a677df1b7f6e0.yaml |   6 +
.../notes/ipa-mkhomedir-c126291bcbdd0111.yaml      |   5 +
.../notes/minor-update-env-20657417094d4aeb.yaml   |   7 +
...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml |   8 +
.../notes/neutron-placement-6ea6de89bd30b592.yaml  |   8 +
...a-nfs-parms-role-specific-527915c6e99ceb89.yaml |   7 +
...va-rbd-pool-role-specific-010f6072d641d84f.yaml |   6 +
...va_add_nfs_vers_parameter-62b9e9d6150358d1.yaml |   8 +
...ver_host_use_internal_api-1bebb3e9c6e69113.yaml |   7 +
...mpute_fix_log_permissions-e866f91848d647fb.yaml |   9 +
.../nova_compute_nofile-0427e49cc8ae70a6.yaml      |   6 +
...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml |   7 +
...run_chown_on_every_deploy-c366af9898ecaeed.yaml |   9 +
.../ovn_tunnel_encap_type-04df21d622874c27.yaml    |   7 +
.../remove-cinder-api-v1-66a24998d7f8e985.yaml     |   9 +
...-api-to-httpd-support-tls-9b995fe4113b2412.yaml |   5 +
roles/BlockStorage.yaml                            |   1 +
roles/CephAll.yaml                                 |   1 +
roles/CephFile.yaml                                |   1 +
roles/CephObject.yaml                              |   1 +
roles/CephStorage.yaml                             |   1 +
roles/Compute.yaml                                 |   1 +
roles/ComputeAlt.yaml                              |   1 +
roles/ComputeDVR.yaml                              |   1 +
roles/ComputeHCI.yaml                              |   1 +
roles/ComputeHCIOvsDpdk.yaml                       |  60 ++++++
roles/ComputeInstanceHA.yaml                       |   1 +
roles/ComputeLiquidio.yaml                         |   1 +
roles/ComputeOvsDpdk.yaml                          |   1 +
roles/ComputeOvsDpdkRT.yaml                        |   1 +
roles/ComputeOvsDpdkSriov.yaml                     |   1 +
roles/ComputeOvsDpdkSriovRT.yaml                   |   1 +
roles/ComputePPC64LE.yaml                          |   1 +
roles/ComputeRealTime.yaml                         |   1 +
roles/ComputeSriov.yaml                            |   1 +
roles/ComputeSriovRT.yaml                          |   1 +
roles/Controller.yaml                              |   2 +
roles/ControllerAllNovaStandalone.yaml             |   1 +
roles/ControllerNoCeph.yaml                        |   2 +
roles/ControllerNovaStandalone.yaml                |   1 +
roles/ControllerOpenstack.yaml                     |   1 +
roles/ControllerStorageNfs.yaml                    |   2 +
roles/Database.yaml                                |   1 +
roles/HciCephAll.yaml                              |   1 +
roles/HciCephFile.yaml                             |   1 +
roles/HciCephMon.yaml                              |   1 +
roles/HciCephObject.yaml                           |   1 +
roles/IronicConductor.yaml                         |   1 +
roles/Messaging.yaml                               |   1 +
roles/Networker.yaml                               |   1 +
roles/Novacontrol.yaml                             |   1 +
roles/ObjectStorage.yaml                           |   1 +
roles/Standalone.yaml                              |   3 +
roles/Telemetry.yaml                               |   1 +
roles/Undercloud.yaml                              |   1 +
roles_data.yaml                                    |   6 +
roles_data_undercloud.yaml                         |   1 +
sample-env-generator/ssl.yaml                      |  13 +-
sample-env-generator/standalone.yaml               |   8 +
sample-env-generator/storage.yaml                  |   3 +
tools/check-up-to-date.sh                          |   2 +-
tools/process-templates.py                         |   7 +
tools/yaml-diff.py                                 |  32 +++
tools/yaml-validate.py                             |  14 +-
validation-scripts/all-nodes.sh                    |   8 +-
zuul.d/layout.yaml                                 |  21 +-
315 files changed, 2701 insertions(+), 1024 deletions(-)







More information about the Release-announce mailing list