Open Stack

We joyfully announce the release of:

tripleo-heat-templates 12.4.5: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through:

    https://bugs.launchpad.net/tripleo/+bugs

For more details, please see below.

12.4.5
^^^^^^


New Features
************

* The following parameters add support for mounting Cinder's image
  conversion directory on an external NFS share.

  * CinderImageConversionNfsShare

  * CinderImageConversionNfsOptions

* The new "MemcacheUseAdvancedPool" parameter is added which enables
  usage of advanced poll for memcached connections in keystone
  middleware. This parameter is set to "true" by default to avoind
  bursting connections in some services like neutron.

* Add support for OVS DPDK pmd auto balance parameters. This feature
  adds 3 new role specific THT parameters to set pmd-auto-lb-load-
  threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal-
  interval in OVS through OvsPmdLoadThreshold,
  OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively.

* Introduce new parameter to configure OVS PMD Auto Load Balance for
  OVS DPDK


Bug Fixes
*********

* InternalTLSNbdCAFile, InternalTLSVncCAFile and
  InternalTLSQemuCAFile do not point to the default IPA ca.crt file
  and instead are requested to be loaded to component specific CA
  files (even if they are the same). This can lead to a race where the
  CA cert is not being written by certmonger in time.
  Ib868465c20d97c62cbcb214bfc62d949bd6efc62 already changed the
  default to use the IPA system cacert file '/etc/ipa/ca.crt' per
  default starting with the wallaby release using the ansible role.
  This change backports to also use the IPA system cacert file
  '/etc/ipa/ca.crt' to previous release when managing the certs via
  puppet-tripleo.


Other Notes
***********

* These parameters can now be set per-role - DnfStreams,
  UpgradeInitCommand, UpgradeLeappCommandOptions,
  UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall

Changes in tripleo-heat-templates 12.4.4..12.4.5
------------------------------------------------

8f79482b4 Do not log amphora ssh keys
4c49a20d2 Add OS version to check reboot happened
b303b5091 Support cinder image conversion on an NFS share
ba393720b Make default of NeutronDefaultAvailabilityZones empty array
6a3ebac50 Neutron: Use the pids subsystem to look up container id
bef9856ab Add support for keystone_authtoken/memcache_use_advanced_pool
a10dee72c Enforce internal api for token verification
8e412bd6c Add TLS support to services using memcached
cc89c48df Add non-tls listener to Memcached
de54e5ab6 Remove NovaVncProxyNetwork from ServiceNetMap
b43962a0d Enable DPDK OVS PMD Auto Load Balance
4f1f2b730 Make memcache also listen to localhost
61b8fdf7a Added the posibility of skipping the NFS ping test on the rear installation
92be03fcb Support for OVS DPDK pmd auto balance parameters.
21c696d2d Always run network config for undercloud
63bd84405 Revert "Always run network config for undercloud"
785460825 Do not run Swift rsync container in single replica mode
6d304d61b Limit collectds memory usage
d63e66567 Fix NetworkDeploymentActionValue format
67a08dee5 Remove usage of RetryFilter
50ed57fd0 Add option for enabling rsyslog reopenOnTruncate
819870702 Remove heat::heat_keystone_clients_url definition
4efcf1862 Always run network config for undercloud
58e691375 [victoria/ussuri/train] Change nbd, vnc and qemu default cacert file
98ba67989 Remove no longer used NovaNfsEnabled parameter and condtion
7815009e4 Make UpgradeLeappDevelSkip per-role
76c2e05db HA minor update: fix bad pcs invocation
a56ab848c Fix broken restart of ovndb_server during minor update
1a81309da Bump ovs and ovn versions to 2.15 for FFWD.
ab2f7cf5c Fix cinder's cephx keyring file permissions
e580b849e set ganesha idmap.conf file path and overrides
90e0ede26 Update rhsm repo examples for RHEL8 deployments
73837b8b0 Set vlan-limit value depending on vlan_transparent setting
9fda7f090 Fix typo in ceilometer-write-qdr environment file
4abbadb46 Add environment for external network VIP
f43f11f7d HA: inject public certificates without blocking container
866cc9bcb Create post-deploy.conf on update/upgrade for octavia


Diffstat (except docs and test files)
-------------------------------------

ci/environments/scenario001-standalone.yaml        |   1 +
.../pacemaker_restart_bundle.sh                    |   2 +-
deployed-server/deployed-server.yaml               |   2 +
deployment/aodh/aodh-base.yaml                     |   7 ++
.../backup-and-restore/rear-baremetal-ansible.yaml |   7 ++
.../barbican/barbican-api-container-puppet.yaml    |   7 ++
.../ceilometer-base-container-puppet.yaml          |  13 ++
deployment/ceph-ansible/ceph-nfs.yaml              |   9 ++
deployment/cinder/cinder-api-container-puppet.yaml |   7 ++
.../cinder/cinder-common-container-puppet.yaml     | 132 ++++++++++++++++++---
.../cinder/cinder-volume-container-puppet.yaml     |   3 +-
deployment/deprecated/sahara/sahara-base.yaml      |   1 +
.../designate/designate-api-container-puppet.yaml  |   7 ++
deployment/glance/glance-api-container-puppet.yaml |   7 ++
.../gnocchi/gnocchi-api-container-puppet.yaml      |   7 ++
deployment/haproxy/haproxy-public-tls-inject.yaml  |   6 +-
deployment/heat/heat-base-puppet.yaml              |  32 +++--
deployment/ironic/ironic-api-container-puppet.yaml |   7 ++
.../ironic/ironic-inspector-container-puppet.yaml  |   1 +
deployment/keystone/keystone-container-puppet.yaml |  28 ++++-
deployment/logging/rsyslog-container-puppet.yaml   |  10 +-
deployment/manila/manila-api-container-puppet.yaml |   7 ++
.../manila/manila-share-container-puppet.yaml      |   1 +
.../memcached/memcached-container-puppet.yaml      | 111 ++++++++++++++---
deployment/metrics/collectd-container-puppet.yaml  |   1 +
deployment/mistral/mistral-base.yaml               |   7 ++
deployment/neutron/kill-script                     |   2 +-
.../neutron/neutron-api-container-puppet.yaml      |  11 +-
deployment/nova/nova-api-container-puppet.yaml     |   7 ++
deployment/nova/nova-base-puppet.yaml              |  28 +++--
deployment/nova/nova-compute-container-puppet.yaml |   8 +-
deployment/nova/nova-ironic-container-puppet.yaml  |  12 --
deployment/nova/nova-libvirt-container-puppet.yaml |  25 ++--
.../nova/nova-metadata-container-puppet.yaml       |   7 ++
.../nova-migration-target-container-puppet.yaml    |  14 ---
.../nova/nova-vnc-proxy-container-puppet.yaml      |   6 +-
deployment/nova/novajoin-container-puppet.yaml     |   7 ++
.../octavia/octavia-api-container-puppet.yaml      | 102 +++++++++-------
deployment/octavia/octavia-base.yaml               |  17 +++
.../octavia/octavia-deployment-config.j2.yaml      |   2 +
.../octavia-health-manager-container-puppet.yaml   |   3 +-
.../octavia-housekeeping-container-puppet.yaml     |   3 +-
.../octavia/octavia-worker-container-puppet.yaml   |   3 +-
.../openvswitch-dpdk-baremetal-ansible.yaml        |  56 +++++++++
.../ovn/ovn-controller-container-puppet.yaml       |  12 ++
deployment/ovn/ovn-dbs-pacemaker-puppet.yaml       |   2 +-
.../placement/placement-api-container-puppet.yaml  |   7 ++
deployment/swift/swift-proxy-container-puppet.yaml |  10 ++
.../swift/swift-storage-container-puppet.yaml      |  51 ++++----
.../tripleo-packages-baremetal-puppet.yaml         |  19 ++-
deployment/undercloud/undercloud-upgrade.yaml      |   2 +
deployment/zaqar/zaqar-container-puppet.yaml       |   7 ++
environments/cavium-liquidio.yaml                  |   2 +-
environments/external-network-vip.yaml             |   5 +
environments/lifecycle/upgrade-prepare.yaml        |   2 +-
environments/manila-cephfsganesha-config.yaml      |   4 +
environments/metrics/ceilometer-write-qdr.yaml     |   2 +-
environments/ovs-hw-offload.yaml                   |   2 +-
environments/rhsm.yaml                             |  35 +++---
environments/services-baremetal/neutron-sriov.yaml |   2 +-
environments/services/neutron-mlnx-agent.yaml      |   2 +-
environments/services/neutron-ovn-sriov.yaml       |   2 +-
environments/services/neutron-sriov.yaml           |   2 +-
environments/ssl/enable-memcached-tls.yaml         |  10 ++
environments/undercloud.yaml                       |   3 +-
network/service_net_map.j2.yaml                    |   7 +-
overcloud.j2.yaml                                  |   8 +-
puppet/role.role.j2.yaml                           |   2 +
...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml |   8 ++
...emcache_use_advanced_pool-41ca18221e60c05a.yaml |   7 ++
...a_libvirt_default_ca_cert-d1a7acaa5cbc9293.yaml |  13 ++
.../ovs-dpdk-pmd-params-55df11e67acb6736.yaml      |   7 ++
.../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml       |   5 +
.../upgradeleapp-per-role-ad2e84e317ec1291.yaml    |   6 +
74 files changed, 773 insertions(+), 209 deletions(-)