Open Stack

We are excited to announce the release of:

puppet-tripleo 9.4.0: Puppet module for OpenStack TripleO

This release is part of the rocky stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/puppet-tripleo

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo (tag: puppet)

For more details, please see below.

9.4.0
^^^^^


New Features
************

* Support setting values for "cephfs_volume_mode" parameter which
  controls the rwx mode of the cephfs volumes, snapshots, and groups
  of these that back manila shares.

* Add support to enable ODL deployment on IPv6 networks

* Added Dell EMC SC multipath support This change adds support for
  cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer.

* Add new parameter haproxy_log_facility.

* Adds support to configure disjoint address pools for Ironic
  Inspector. When Inspector is deployed as a HA service disjoint
  address pools should be served by the DHCP instances to avoid
  address conflict issues.


Bug Fixes
*********

* Masquerading and forwarding rules are now correctly created when
  using routed networks. (See bug: 1797455
  (https://bugs.launchpad.net/tripleo/+bug/1797455).)

* With nova metadata api running via wsgi we do not need the ssl
  proxy when configure tls-everywhere as we terminate ssl direct in
  the httpd wsgi. With this change we only create the ssl proxy vhost
  if we do not run nova metadata via wsgi.

Changes in puppet-tripleo 9.3.0..9.4.0
--------------------------------------

ae1f373f Prepare 9.4.0 (Rocky) release
d62923b8 Support cephfs_volume_mode parameter
d2c020c6 Change haproxy mode to http for octavia
4ddb8a6b Prepare 9.3.1 (Rocky) release
f6ff6ca9 neutron dhcpd: Add script for certmonger postsave_cmd
381a1e0a novnc-proxy: Remove default post-save command for certmonger
763467d7 redis: Remove default post-save command for certmonger
219c0f48 rabbitmq:  Remove default post-save command for certmonger
f7c71486 httpd: Remove default post-save command for certmonger
4fcbe24b Reload HAProxy when certificate is renewed
ed2c3d22 mysql: fix root password update for containerized mysql
b35b8076 mysql: use clustercheck credentials to poll galera state
c5977cd0 Allow to set log facility for HAProxy
54f9be0a Configure the Metadata Agent only when enable_metadata_agent is set
e8adf4b3 Create barbican's creator role by default
035c834e Explicitly set certmonger's CA cert's permissions
60a0f973 Filter apache_certificates_specs if hostname is empty
9c35d049 Configure switchedv while there is no vfs bounded
608096fb Remove some of the excessive rabbitmq bundle logging
33063cdd Make sure we do not match multiple remotes when waiting for them
fa04ef8f Ironic Inspector - disjoint ip range(s) for HA
d983e954 Add additional tuning options for mariadb/galera
19eb214c Allow user to define a custom tuned profile
ee80be0c Increase websocket timeout
fbbca5c0 Include octavia::controller
fd933ab3 Set balance to source for openshift_master endpoints
19c97f0b Switch scenarios to non-voting
68301f4f Dell EMC SC: Add use_multipath_for_image_xfer
e816143c Pass variable from puppet-tripleo to puppet-neutron
34bf798e Enable disablereuse option in Zaqar proxy backend
1c6d1831 Include ::cinder::nova in cinder's configuration
0f5e96c7 Switch stable scenarios to voting
6ec97c70 Make sure that the _member_ role is assigned to admin.
2a3225af Fix Undercloud masquerading firewall rules
b6ed72c6 Pin puppet-snmp
daa67198 Disable puppet-5 jobs
c6f8f9bf ceilometer: escape % in crontab
148347b2 Fix ceph-nfs duplicate property
78b51d07 Add support for ODL-OVS IPv6 deployment
123be292 Fix nic_alias fact error
80180aab Introduce alternative to get ip_addresses and server_names
b3d4ca0b Copytruncate containerized logrotate configuration
91e1ff09 Do not create metadata ssl proxy if we have metadata api via httpd wsgi
6805fcad Make sure that ceph-nfs and the VIP start in the right order
681e07a7 Disable chrony-wait
501f10c4 adding deployment_type fact in support
0070ba91 Fix fluentd multifile problem.
afef5413 Enable TLS in the internal network for Octavia API
a6eaab14 Make sure rhel-plugin-push.service is stopped after pacemaker stops
05c72215 import zuul job settings from project-config
aeb5ce50 Update Gemfile for stable/rocky
0134f91b Conditionalize rndc changes
cda96f8b add scenario003 tests when designate changes
9ca548e0 Update UPPER_CONSTRAINTS_FILE for stable/rocky
0a4a7961 Update .gitreview for stable/rocky


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |  1 +
Gemfile                                            |  1 +
Puppetfile_extras                                  |  6 +-
files/certmonger-haproxy-refresh.sh                | 51 +++++++++++++++
files/certmonger-neutron-dhcpd-refresh.sh          | 21 +++++++
files/certmonger-novnc-proxy-refresh.sh            | 17 +++++
files/certmonger-rabbitmq-refresh.sh               | 17 +++++
files/certmonger-redis-refresh.sh                  | 14 +++++
lib/facter/nic_alias.rb                            | 11 +++-
lib/puppet/functions/add_brackets.rb               | 14 +++++
lib/puppet/provider/sriov_vf_config/numvfs.rb      | 60 +-----------------
manifests/certmonger/ca/local.pp                   |  7 +++
manifests/certmonger/haproxy.pp                    | 29 +++++----
manifests/certmonger/httpd.pp                      |  3 +-
manifests/certmonger/neutron.pp                    |  8 ++-
manifests/certmonger/novnc_proxy.pp                | 10 ++-
manifests/certmonger/rabbitmq.pp                   | 11 +++-
manifests/certmonger/redis.pp                      |  8 ++-
manifests/fencing.pp                               |  2 +-
manifests/haproxy.pp                               | 13 +++-
manifests/haproxy/endpoint.pp                      | 24 +++++++-
manifests/host/sriov/numvfs_persistence.pp         |  7 ++-
manifests/masquerade_networks.pp                   | 24 +++++---
manifests/profile/base/ceilometer/expirer.pp       |  2 +-
manifests/profile/base/certmonger_user.pp          | 38 +++++++-----
manifests/profile/base/cinder.pp                   |  1 +
manifests/profile/base/cinder/volume/dellsc.pp     | 29 ++++-----
manifests/profile/base/database/mysql.pp           | 19 ++++++
manifests/profile/base/database/mysql/client.pp    |  2 +-
manifests/profile/base/designate.pp                | 20 +++---
manifests/profile/base/designate/worker.pp         | 10 +--
manifests/profile/base/ironic_inspector.pp         | 51 +++++++++++++--
manifests/profile/base/keystone.pp                 | 13 +++-
.../base/logging/fluentd/fluentd_service.pp        |  4 +-
manifests/profile/base/logging/logrotate.pp        |  5 ++
manifests/profile/base/manila/share.pp             |  1 +
manifests/profile/base/neutron/agents/nuage.pp     | 27 +++++---
.../base/neutron/plugins/ml2/opendaylight.pp       |  9 +++
.../base/neutron/plugins/ovs/opendaylight.pp       | 26 ++++++--
manifests/profile/base/nova/api.pp                 |  2 +-
manifests/profile/base/octavia/api.pp              | 72 +++++++++++++++++++++-
manifests/profile/base/octavia/health_manager.pp   |  1 +
manifests/profile/base/octavia/housekeeping.pp     |  1 +
manifests/profile/base/octavia/worker.pp           |  1 +
manifests/profile/base/pacemaker.pp                |  7 ++-
manifests/profile/base/pacemaker_remote.pp         |  5 ++
manifests/profile/base/time/ntp.pp                 |  5 ++
manifests/profile/base/tuned.pp                    | 22 ++++++-
manifests/profile/pacemaker/ceph_nfs.pp            | 38 +++++++++---
.../profile/pacemaker/database/mysql_bundle.pp     | 37 +++++++++--
manifests/profile/pacemaker/rabbitmq_bundle.pp     | 14 +++++
manifests/ui.pp                                    |  5 +-
metadata.json                                      |  2 +-
...eph_volume_mode-parameter-220b1026aebd9e3b.yaml |  5 ++
...pport-for-IPv6-deployment-988400c781b92066.yaml |  4 ++
.../notes/dellsc-driver-b7cd300a24a64b01.yaml      |  5 ++
.../fix-masquerade-networks-c9ab4affb17627e1.yaml  |  6 ++
.../notes/haproxy-facility-8196cc8e1299d79b.yaml   |  3 +
...joint-inspection-ip-range-f10297dd32f3721b.yaml |  6 ++
...otate-copytruncate-hourly-f0851bec551f5f5f.yaml |  5 ++
.../nova-metadata-wsgi-ssl-a64c2b9a99deb7a9.yaml   |  7 +++
spec/classes/tripleo_certmonger_ca_local_spec.rb   |  8 +++
spec/classes/tripleo_haproxy_spec.rb               | 26 ++++++++
spec/classes/tripleo_masquerade_networks_spec.rb   | 15 ++++-
...tripleo_profile_base_ceilometer_expirer_spec.rb |  2 +-
spec/classes/tripleo_profile_base_cinder_spec.rb   |  6 ++
...pleo_profile_base_database_mysql_client_spec.rb | 22 +++++++
.../tripleo_profile_base_logging_fluentd_spec.rb   | 29 +++++++++
...o_profile_base_neutron_ovs_opendaylight_spec.rb | 59 ++++++++++++++++--
.../tripleo_profile_base_octavia_api_spec.rb       | 31 ++++++++++
spec/classes/tripleo_profile_base_tuned_spec.rb    | 23 ++++++-
.../tripleo_host_sriov_numvfs_persistence_spec.rb  | 29 ---------
templates/logrotate/containers_logrotate.conf.erb  | 12 ++--
templates/switchdev/switchdev.epp                  | 29 ---------
tox.ini                                            |  2 +-
zuul.d/layout.yaml                                 | 54 +++-------------
76 files changed, 898 insertions(+), 318 deletions(-)