Open Stack

We jubilantly announce the release of:

tripleo-heat-templates 13.1.0: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the victoria stable release series.

The source is available from:

    https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through:

    https://bugs.launchpad.net/tripleo/+bugs

For more details, please see below.

13.1.0
^^^^^^


New Features
************

* The NovaApiMaxLimit parameter allows the operator to set Nova API
  max_limit using a Heat parameter in their templates.


Bug Fixes
*********

* Certificates get merged into the containers using kolla_config
  mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd
  gets disabled and enabled at a later point the containers running
  the qemu process miss the required certificates and live migration
  fails. This change moves to use bind mount for the certificates and
  in case of UseTLSTransportForNbd ans creates the required
  certificates even if UseTLSTransportForNbd is set to False. With
  this UseTLSTransportForNbd can be enabled/disabled as the required
  bind mounts/certificates are already present.

*
  https://review.opendev.org/q/I8df21d5d171976cbb8670dc5aef744b5fae65
  7b2 introduced THT parameters to set libvirt/cpu_mode. The patch
  sets the NovaLibvirtCPUMode wrong to 'none' string which results in
  puppet-nova not to handle the default cases correct and sets
  libvirt/cpu_mode to none which results in 'qemu64' CPU model, which
  is highly buggy and undesirable for production usage.  This changes
  the default to the recommended CPU mode 'host-model', for various
  benefits documented elsewhere.

* When using RHSM Service (deployment/rhsm/rhsm-baremetal-
  ansible.yaml) based registration of the overcloud nodes and enabling
  the KSM using NovaComputeEnableKsm=True the overcloud deployment
  will fail because the RHSM registration and the ksm task run as
  host_prep task. The handling of enable/disable ksm is now handled in
  deploy step 1.

* In case of cellv2 multicell environment nova-metadata is the only
  httpd managed service on the cell controller role. In case of tls-
  everywhere it is required that the cell controller host has ther
  needed metadata to be able to request the HTTP certificates.
  Otherwise the getcert request fails with "Insufficient 'add'
  privilege to add the entry
  'krbprincipalname=HTTP/cell1-cellcontrol-0....'"

Changes in tripleo-heat-templates 13.0.0..13.1.0
------------------------------------------------

4142778f8 Rely on the HOSTNAME var to resolve the mon container name
4ee64076f Set up right DNF module stream for Upgrades and Updates.
e66714853 Run os-net-config on step 3
8fa2fa0b4 Skip Trilio dirs when setting ownership in /var/lib/nova
27678af1a Ensure cinder LVM volumes work after system restart
7228eb32a Set setgid mode bit for /var/lib/ironic
b0a068c38 Add qemu metadata to compute node when tls for live migration
6f7d495ab The lower constraint file has been removed
5ebdd0b07 Adding Ceph Dashboard to the Edge roles
eccd5435d Add NovaApiMaxLimit configure max_limit for nova
6f4bf3160 Fix barbican settings missing from glance Edge nodes
c1fcfaf47 Add {{ network.name }}_mtu for all networks to group_vars
87645fc58 Make sure networks_skip_config defaults to []
125d41b85 Set correct default NovaLibvirtCPUMode
e4f921e7b Add file which enables QoS related L3 agent extensions
c2c1a10e1 Make sure apache metadata is set for nova-metadata service
8ba9fa5c8 Refresh ceph-ansible group_vars values
36dae322d Move enable ksm on compute node to deploy step 1
79222eb18 Add CinderBackupOptVolumes parameter
e92bd3598 node_exporter_container_image is needed in 'all' group
7ffaf82e7 Properly compute hostname when looking for the ceph-mon container
5eb57c09f Filter computes with nova_host defined
db441a7ca Fix MetricsQdrUseSSL value
9db592d26 Fix ceilometer_agent_compute healthcheck
6e59a84ec Use bind mounts for tls certificates
48f274a39 cinder/iscsi backend: remove lvm2-lvmetad.service dependency
9991cadc3 Always set dashboard_protocol when Ceph Dashboard is enabled
3bb25122e Remove jobs from layout
d7d9e05ff Fix memcached logging
3ef2fb1bf Update .gitreview for stable/victoria


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
ci/environments/neutron_l3_qos.yaml                |   2 +
.../nova_statedir_ownership.py                     |  21 ++-
deployment/barbican/barbican-client-puppet.yaml    |   3 +-
.../ceilometer-agent-compute-container-puppet.yaml |   3 +-
deployment/ceph-ansible/ceph-base.yaml             |   9 ++
deployment/ceph-ansible/ceph-grafana.yaml          |   4 -
deployment/ceph-ansible/ceph-mgr.yaml              |   6 +-
deployment/ceph-ansible/ceph-osd.yaml              |   4 +-
deployment/ceph-ansible/ceph-rgw.yaml              |   4 -
.../cinder/cinder-common-container-puppet.yaml     |  17 ++-
.../ironic/ironic-conductor-container-puppet.yaml  |   2 +-
deployment/ironic/ironic-pxe-container-puppet.yaml |   2 +-
deployment/iscsid/iscsid-container-puppet.yaml     |  16 +-
.../memcached/memcached-container-puppet.yaml      |   4 +-
deployment/metrics/qdr-container-puppet.yaml       |   7 +-
deployment/nova/nova-api-container-puppet.yaml     |   5 +
deployment/nova/nova-az-config.yaml                |   2 +-
deployment/nova/nova-compute-container-puppet.yaml |  85 ++++++-----
deployment/nova/nova-libvirt-container-puppet.yaml | 169 ++++++++-------------
.../nova/nova-metadata-container-puppet.yaml       |   2 +
.../tripleo-packages-baremetal-puppet.yaml         |  28 ++++
deployment/undercloud/undercloud-upgrade.yaml      |  34 +++++
.../lifecycle/undercloud-upgrade-prepare.yaml      |   1 +
environments/lifecycle/update-prepare.yaml         |   1 +
environments/lifecycle/upgrade-prepare.yaml        |   1 +
lower-constraints.txt                              | 164 --------------------
overcloud.j2.yaml                                  |  11 +-
...use_bind_mounts_for_certs-64cb88f78538a64b.yaml |  13 ++
...ova_api_max_limit-support-43fe9792eca63599.yaml |   5 +
..._compute_default_cpu_mode-cda2bb3e56463b3a.yaml |  11 ++
.../notes/nova_compute_ksm-444f1cc51ceafb66.yaml   |   8 +
...tadata_http_cert_metadata-274e7e8a66727983.yaml |   9 ++
roles/DistributedComputeHCI.yaml                   |   1 +
roles/DistributedComputeHCIDashboard.yaml          |  80 ++++++++++
tox.ini                                            |   6 -
zuul.d/layout.yaml                                 | 101 +-----------
38 files changed, 425 insertions(+), 447 deletions(-)