From no-reply at openstack.org Tue Jun 1 08:32:27 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 01 Jun 2021 08:32:27 -0000 Subject: [release-announce] keystonemiddleware 9.3.0 (xena) Message-ID: We are pleased to announce the release of: keystonemiddleware 9.3.0: Middleware for OpenStack Identity This release is part of the xena release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 9.3.0 ^^^^^ Upgrade Notes ************* * [bug 1892852 (https://bugs.launchpad.net/keystonemiddleware/+bug/1892852)] [bug 1888394 (https://bugs.launchpad.net/oslo.cache/+bug/1888394)] [bug 1883659 (https://bugs.launchpad.net/keystonemiddleware/+bug/1883659)] Keystonemiddleware now using eventlet-safe implementation of "MemcacheClientPool" from oslo.cache's library by default. The "keystonemiddleware" implementation is now deprecated. For backwards compatibility, the "[keystone_authtoken] memcache_use_advanced_pool" option can be set to "False" config files of the various services (e.g. nova, glance, ...) when memcached is used for token cache. Deprecation Notes ***************** * We no longer recommend using the eventlet unsafe keystonemiddleware's memcacheclientpool. This implementation may result in growing connections to memcached. It is recommended that the "memcache_use_advanced_pool" option is set to "True" in the "keystone_authtoken" configuration section of the various services (e.g. nova, glance, ...) when memcached is used for token cache. Changes in keystonemiddleware 9.2.0..9.3.0 ------------------------------------------ 90df936 Imported Translations from Zanata 788d3c4 Switch to eventlet-safe oslo.cache's MemcacheClientPool 0a2309d Updating lower-constraints job as non voting Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 ++++- keystonemiddleware/auth_token/_cache.py | 9 ++++++++- keystonemiddleware/auth_token/_opts.py | 5 ++--- ...unsafe-memcacheclientpool-f8b4a6733513d73e.yaml | 22 ++++++++++++++++++++++ .../locale/en_GB/LC_MESSAGES/releasenotes.po | 7 +++++-- 5 files changed, 41 insertions(+), 7 deletions(-) From no-reply at openstack.org Tue Jun 1 08:43:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 01 Jun 2021 08:43:43 -0000 Subject: [release-announce] osc-placement 3.0.0 (xena) Message-ID: We are pleased to announce the release of: osc-placement 3.0.0: OpenStackClient plugin for the Placement service This release is part of the xena release series. The source is available from: https://opendev.org/openstack/osc-placement Download the package from: https://pypi.org/project/osc-placement Please report issues through: https://bugs.launchpad.net/placement-osc-plugin/+bugs For more details, please see below. 3.0.0 ^^^^^ New Features ************ * The "openstack resource provider allocation unset" command now supports "--resource-class" option, which accepts string of a resource class. This will remove allocations for the given resource class from all the providers. If "--provider" option is also specified, allocations to remove will be limited to the given resource class of the given resource provider. example1: # remove VGPU allocation from provider P for this consumer. allocation unset --provider P --resource-class VGPU example2: # remove VGPU allocations from all providers for this consumer. allocation unset --resource-class VGPU * The "openstack allocation candidate list" and the "openstack resource provider list" command now supports "--member-of" option, which accepts comma-separated UUIDs of the resource provider aggregates. If this is specified, the returned resource providers must be associated with at least one of the aggregates identified by uuid. This option can be repeated to add(restrict) the condition with "--os-placement-api-version 1.24" or greater. * The "openstack allocation candidate list" command now supports "-- group" and "--group-policy" option. The "--group" option accepts an integer to group granular requests. If specified, following given options of resources, required/forbidden traits, and aggregates are associated to that group and will be satisfied by the same resource provider in the response. "--group" can be repeated to get candidates from multiple resource providers in a same resource provider tree. If multiple groups are supplied, the separate groups may or may not be satisfied by the same provider. If you want the groups to be satisfied by different resource providers, set "-- group_policy" to "isolate". For example: openstack allocation candidate list \ --group 1 --resource VCPU=3 --required HW_CPU_X86_SSE \ --group 2 --resource VCPU=4 \ --group_policy isolate This option is available with "--os-placement-api-version 1.25" or greater, but to have placement server be aware of nested providers, use "--os-placement-api-version 1.29" or greater. See the REST API Version History for more details. (https://docs.openstack.org/placement/latest/placement-api- microversion-history.html) * The "openstack resource provider inventory list" and "openstack resource provider inventory show" commands now include a "used" column providing summary usage information for the specified resource(s). Deprecation Notes ***************** * The "--aggregate-uuid" option has been deprecated for the "openstack allocation candidate list" and the "openstack resource provider list" commands. Please use "--member-of" option instead. Changes in osc-placement 2.2.0..3.0.0 ------------------------------------- 39befda Verify result for inventory set --dry-run a4ac717 Add "--resource-class" to allocation unset 9778535 Note env OS_PLACEMENT_API_VERSION support 05ca1ee Switch default to use latest microversion 8ac8c86 Support auto-negotiated microversion 6914082 setup.cfg: Replace dashes with underscores ee98b03 Update master for stable/wallaby 714d4e6 Add openstackclient-plugin-jobs 8def9e8 Add functional-py39 tox target e27453e Use TOX_CONSTRAINTS_FILE c16bff5 Add py38 package metadata 826bc1f Add Python3 wallaby unit tests 93eb4e8 Update master for stable/victoria eb5a625 Support granular allocation candidate list db98792 Support multiple member_of query parameter dee5bff Include usage in 'inventory list', 'inventory show' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- osc_placement/http.py | 27 ++- osc_placement/plugin.py | 6 +- osc_placement/resources/allocation.py | 84 ++++++---- osc_placement/resources/allocation_candidate.py | 166 +++++++++++++----- osc_placement/resources/inventory.py | 24 ++- osc_placement/resources/resource_provider.py | 52 ++++-- osc_placement/version.py | 17 +- ...allocation-unset-resource-3ff87787eca13f18.yaml | 19 +++ ...croversion-1.24-member-of-fbabd395a0048e87.yaml | 15 ++ ...on-1.25-granular-requests-f10936c700dee06f.yaml | 27 +++ .../show-usage-in-inventory-31eb87a6d243fc5a.yaml | 6 + releasenotes/source/index.rst | 2 + releasenotes/source/victoria.rst | 6 + releasenotes/source/wallaby.rst | 6 + setup.cfg | 9 +- tox.ini | 13 +- 24 files changed, 895 insertions(+), 182 deletions(-) From no-reply at openstack.org Wed Jun 2 15:47:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 02 Jun 2021 15:47:43 -0000 Subject: [release-announce] XStatic-Angular 1.8.2.0 Message-ID: We joyfully announce the release of: XStatic-Angular 1.8.2.0: Angular 1.8.2 (XStatic packaging standard) The source is available from: https://opendev.org/openstack/XStatic-Angular Download the package from: https://pypi.org/project/XStatic-Angular For more details, please see below. Changes in XStatic-Angular 1.5.8.0..1.8.2.0 ------------------------------------------- 150699b Update angular version to 1.8.2 in `setup.cfg` file. 030dabe Update XStatic-Angular to 1.8.2 8c1eb54 OpenDev Migration Patch 74c316c fix tox python3 overrides Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- setup.cfg | 8 +- tox.ini | 1 + xstatic/pkg/angular/__init__.py | 4 +- xstatic/pkg/angular/data/angular-animate.js | 650 +- xstatic/pkg/angular/data/angular-aria.js | 131 +- xstatic/pkg/angular/data/angular-cookies.js | 117 +- xstatic/pkg/angular/data/angular-loader.js | 136 +- xstatic/pkg/angular/data/angular-message-format.js | 156 +- xstatic/pkg/angular/data/angular-messages.js | 226 +- xstatic/pkg/angular/data/angular-mocks.js | 1130 +- xstatic/pkg/angular/data/angular-parse-ext.js | 24 +- xstatic/pkg/angular/data/angular-resource.js | 586 +- xstatic/pkg/angular/data/angular-route.js | 416 +- xstatic/pkg/angular/data/angular-sanitize.js | 347 +- xstatic/pkg/angular/data/angular-scenario.js | 46035 ++++++++----------- xstatic/pkg/angular/data/angular-touch.js | 459 +- xstatic/pkg/angular/data/angular.js | 36082 ++++++--------- xstatic/pkg/angular/data/errors.json | 2 +- xstatic/pkg/angular/data/version.json | 2 +- xstatic/pkg/angular/data/version.txt | 2 +- 21 files changed, 34781 insertions(+), 51735 deletions(-) From no-reply at openstack.org Wed Jun 2 15:54:25 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 02 Jun 2021 15:54:25 -0000 Subject: [release-announce] openstackdocstheme 2.3.0 Message-ID: We are gleeful to announce the release of: openstackdocstheme 2.3.0: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 2.2.7..2.3.0 ------------------------------------------ 08461c5 Inherit from base "basic" template 9602f39 sphinx 4.0: Handle HTML 5 changes 6cfaeb4 sphinx 4.0: Fix sphinx.ext.extlinks.make_link_role call e2d40fa tox: Toggle 'usedevelop' 0b012dc trivial: Fix indentation 765f2ca Change to OFTC 2a569b8 setup.cfg: Replace dashes with underscores f0da3d3 Move flake8 as a pre-commit local target. 3020abd Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++- openstackdocstheme/ext.py | 9 ++- openstackdocstheme/theme/openstackdocs/layout.html | 42 ++++++------- .../theme/openstackdocs/static/css/combined.css | 70 +++++++++++----------- .../theme/openstackdocs/static/js/docs.js | 2 +- setup.cfg | 8 +-- tox.ini | 4 +- 7 files changed, 76 insertions(+), 69 deletions(-) From no-reply at openstack.org Wed Jun 2 21:46:58 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 02 Jun 2021 21:46:58 -0000 Subject: [release-announce] python-manilaclient 2.7.0 (xena) Message-ID: We exuberantly announce the release of: python-manilaclient 2.7.0: Client library for OpenStack Manila API. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.7.0 ^^^^^ New Features ************ * Added support for per share gigabytes quotas. Upgrade Notes ************* * After addition of per share gigabytes quotas, it is now possible to get 'over limit' error while creating a share. Bug Fixes ********* * Launchpad bug 1920888 (https://bugs.launchpad.net/manila/+bug/1920888): Fix the bug in CLI 'manila list' with sorting key 'availability_zone'. Changes in python-manilaclient 2.6.0..2.7.0 ------------------------------------------- 99ccf02 [TrivialFix] Follow up per-share-gigabytes quota changes 1f31818 Add per share gigabytes quota to the CLI 5ff8b70 [ci] fix neutron services in functional job 7ecc819 setup.cfg: Replace dashes with underscores 69031b5 Fix error in CLI 'manila list' with sorting key 'availability_zone'. 96a7942 Add Python3 xena unit tests 71ebd96 Update master for stable/wallaby ac127bd Fix test failures for "test_list_shares_by_{filter}" Diffstat (except docs and test files) ------------------------------------- manilaclient/common/constants.py | 2 +- manilaclient/osc/v2/quotas.py | 18 ++++++++++- manilaclient/v2/quota_classes.py | 21 ++++++++++-- manilaclient/v2/quotas.py | 24 +++++++++++++- manilaclient/v2/shares.py | 2 ++ manilaclient/v2/shell.py | 32 ++++++++++++++++++- ...er-share-gigabytes-quotas-40bc404bd3cbdd89.yaml | 6 ++++ ...ting-key-availabilityzone-cea5a1f5d8a38fc3.yaml | 5 +++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++ setup.cfg | 8 ++--- zuul.d/project.yaml | 2 +- zuul.d/python-manilaclient-jobs.yaml | 13 ++++---- 18 files changed, 199 insertions(+), 27 deletions(-) From no-reply at openstack.org Thu Jun 3 09:21:13 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 09:21:13 -0000 Subject: [release-announce] os-brick 4.4.0 (xena) Message-ID: We are psyched to announce the release of: os-brick 4.4.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the xena release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 4.4.0 ^^^^^ Bug Fixes * Bug #1924652 (https://bugs.launchpad.net/os-brick/+bug/1924652): Fix issue with newer multipathd implementations where path devices are kept in multipathd even after volume detachment completes, preventing it from creating a multipath device when a new device attachment is made shortly with the same volume device or the same device path. * Bug #1921381 (https://bugs.launchpad.net/cinder/+bug/1921381): Fix disconnecting volumes when the use_multipath value is changed from the connect_volume call to the disconnect_volume call. * NVMe-oF connector bug #1929074 (https://bugs.launchpad.net/os- brick/+bug/1929074): Fixed issue with nvme logging error trace when not present. * NVMe-oF connector bug #1929075 (https://bugs.launchpad.net/os- brick/+bug/1929075): Fixed issue with nvme connector creating /etc/nvme directory when not present. * NVMe-oF connector bug #1903032 (https://bugs.launchpad.net/os- brick/+bug/1903032): Fixed not flushing device on disconnect. Changes in os-brick 4.3.0..4.4.0 -------------------------------- f2bc082 Don't log error trace when nvme is not used 7d0ba03 trivial: correct comment f18a33b Introduce mypy 85dbd0f NVMe-oF: Flush on disconnect 1b2e229 multipath/iscsi: remove devices from multipath monitoring 985a49b vmware: Use cookiejar from oslo.vmware client directly 534c04c setup.cfg: Replace dashes with underscores eb566ce Enable bandit runs for tox d4205bd iSCSI: Fix flushing after multipath cfg change 9afa1a0 Add Python3 xena unit tests ab57392 Update master for stable/wallaby 7cfdb76 Dropping explicit unicode literal b580124 connector: Fix comment of get_connector_properties regarding enforce_multipath 28545c7 RBD: catch read exceptions prior to modifying offset Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- lower-constraints.txt | 1 + mypy-files.txt | 8 ++ os_brick/encryptors/luks.py | 2 +- os_brick/exception.py | 4 +- os_brick/executor.py | 3 +- os_brick/initiator/connector.py | 4 +- os_brick/initiator/connectors/base.py | 12 +- os_brick/initiator/connectors/base_iscsi.py | 17 ++- os_brick/initiator/connectors/iscsi.py | 145 ++++++++++++--------- os_brick/initiator/connectors/nvmeof.py | 46 +++++-- os_brick/initiator/connectors/vmware.py | 2 +- os_brick/initiator/linuxrbd.py | 8 +- os_brick/initiator/linuxscsi.py | 69 ++++++---- os_brick/remotefs/remotefs.py | 14 +- .../notes/bug-1924652-2323f905f62ef8ba.yaml | 8 ++ ...ect-multipath-cfg-changed-637abc5ecf44fb10.yaml | 6 + .../notes/fix-nvme-issues-8dfc15cb691389fe.yaml | 10 ++ .../notes/nvme-flush-f31ab337224e5d3d.yaml | 6 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + setup.cfg | 20 ++- test-requirements.txt | 2 + tools/mypywrap.sh | 24 ++++ tox.ini | 10 ++ 35 files changed, 612 insertions(+), 182 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index efbc9a4..1d03ece 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,0 +18,2 @@ fixtures>=3.0.0 # Apache-2.0/BSD +bandit>=1.6.0,<1.7.0 # Apache-2.0 +mypy>=0.782 # MIT From no-reply at openstack.org Thu Jun 3 10:02:30 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:02:30 -0000 Subject: [release-announce] ironic 18.0.0 (xena) Message-ID: We joyfully announce the release of: ironic 18.0.0: OpenStack Bare Metal Provisioning This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 18.0.0 ^^^^^^ New Features ************ * Adding new clean steps to "ilo" and "ilo5" hardware type - "security_parameters_update", "update_minimum_password_length", and "update_auth_failure_logging_threshold" which allows users to modify ilo system security settings. * Provides the registry fields in the BIOS setting API and in the BIOS setting list when detail is requested. Also adds fields selector to query API. See story 2008571 (https://storyboard.openstack.org/#!/story/2008571). * Adds a new "deploy" verb as an alias to "active" and "undeploy" verb as an alias to "deleted". See story 2007551 (https://storyboard.openstack.org/#!/story/2007551). * Adds a new deploy interface "custom-agent" that can be used when all necessary deploy steps to provision an image are provided in the agent ramdisk. The default "write_image" deploy step is not present. * Get the BIOS Registry from Sushy and store the fields in the Ironic DB with the BIOS setting. See story 2008571 (https://storyboard.openstack.org/#!/story/2008571). * The "irmc-virtual-media" boot interface now supports setting kernel parameters via the "kernel_append_params" option in both the node's "driver_info" and "instance_info". This only applies when an image is built from a kernel and an initramfs, not when a pre-built ISO is used. * Adds support for setting kernel parameters for PXE and iPXE boot through the new "kernel_append_params" setting in the node's "driver_info" or "instance_info". * The "redfish-virtual-media", "ilo-virtual-media" and "idrac- redfish- virtual-media" boot interfaces now support "kernel_append_params" not only in the node's "instance_info", but also "driver_info". This only applies when the boot image is built from a kernel and an initramfs, not when a pre-built ISO is used. Upgrade Notes ************* * The deprecated "iscsi" deploy interface has been removed. Please update to a different deploy interface before upgrading. * The "ironic-dbsync upgrade" command for this version of ironic will add additional database indexes on the "nodes" table columns below. Depending on database size and complexity, this will take time to complete for every single index to be created. On MySQL or MariaDB, these indexes will only be created if an index does not already exist matching the field name with "_idx" appended.: * "owner" * "lessee" * "driver" * "provision_state" * "reservation" * "conductor_group" * "resource_class" An example of the SQL commands to generate these indexes can be found in the tuning (htts://docs.openstack.org/ironic/latest/admin/tuning.html) documentation. In testing with mock data, each column took approximately about 4 seconds per column to be indexed on a database with 115,000 rows. The existing database size and underlying server load will cause this time to vary. Sample queries also reduced result generation from an average of "0.40" seconds to an average of "0.02" seconds with a test data set. * Removes support for deploy interfaces that do not use deploy steps and rely on the monolithic "deploy" call instead. * Removes support for ironic-python-agent Victoria or older. Deprecation Notes ***************** * Using "[pxe]kernel_append_params" for the iRMC boot interface is now deprecated, please use "[irmc]kernel_append_params". * The configuration option "[pxe]pxe_append_params" has been renamed to "[pxe]kernel_append_params". The old name is now deprecated. * The "ilo-virtual-media" boot interface has previously declared support for the "ilo_kernel_append_params" option in "driver_info". It has never been implemented in reality and has been replaced by the new "kernel_append_params". * The node's "driver_info" parameters "redfish_deploy_iso" and "redfish_rescue_iso" have been renamed to "deploy_iso" and "rescue_iso" accordingly. The old names are deprecated. Bug Fixes ********* * If the agent accepts a command, but is unable to reply to Ironic (which sporadically happens before of the eventlet's TLS implementation), we currently retry the request and fail because the command is already executing. Ironic now detects this situation by checking the list of executing commands after receiving a connection error. If the requested command is the last one, we assume that the command request succeeded. * Adds "bios_interface" to the node list and node show api-ref. * Adds "bios_interface" to the node validate api-ref. * When local boot is used (e.g., by default), the instance image validation now happens only in the deploy interface, not in the boot interface (as before). Meaning that the boot interface validation will now pass in many cases where it would previously fail. * Fixes the "idrac-wsman" BIOS "factory_reset" clean and deploy step to indicate success and update the cached BIOS settings to their defaults only when the BIOS settings have actually been reset. See story 2008058 (https://storyboard.openstack.org/#!/story/2008058) for more details. * Removes temporary cleaning information on starting or restarting cleaning. * Improves lower-level performance issues with database activity where some often queried columns were not indexed when the database model was created, or as the model evolved. Operators seeking to pre- create these indexes may do so prior to upgrading. Please consult the tuning documentation in the Administrator's guide for the queries to leverage. * No longer masks configdrive when sending the node's record to in- band deploy steps. * Removes unnecessary delay before the start of the cleaning process when fast-track is used. * Correctly processes in-band deploy steps on fast-track deployment. * Correctly wipes agent token on inspection start and abort. * The behavior when a bootable iso ramdisk is provided behind an http server is to download and serve the image from the conductor; the image is removed only when the node is undeployed. In certain cases, for example on large deployments, this could cause undesired behaviors, like the conductor nodes running out of disk storage. To avoid this event we provide an option "[deploy]ramdisk_image_download_source" to be able to tell the ramdisk interface to directly use the bootable iso url from its original source instead of downloading it and serving it from the conductor node. The default behavior is unchanged. * Fixes providing agent tokens with pre-built ISO images and the "redfish-virtual-media" boot interface. * Fixes sub-optimal Ironic API performance where Secure RBAC related field level policy checks were executing without first checking if there were field results. This helps improve API performance when only specific columns have been requested by the API consumer. Other Notes *********** * Configuration drives are now stored in their JSON representation and only rendered when needed. This allows deploy steps to access the original JSON representation rather than only the rendered ISO image. * A new class "ironic.drivers.modules.agent.CustomAgentDeploy" can be used as a base class for deploy interfaces based on ironic- python- agent. Changes in ironic 17.0.0..18.0.0 -------------------------------- fe419bac1 Changes made to release documentation: f2ef05fce Prepare 18.0 and clean up release note 47001f3c0 Trivial: Fix version number in comment 6b0fc9089 Add bifrost-benchmark-ironic job 26cf25d98 Follow-up to Include bios registry fields in bios API e15440370 Include bios registry fields in bios API d5971fdff Update project conundrum related docs ffff76a68 Add basic tools for benchmarking 6cd645747 Secure RBAC - Efficent node santiziation 9a09f1bdc Add missing bios_interface to api-ref for validate API fb72d7dca Trivial: comment why we don't check retired in allocations 0ad427b78 Retrieve BIOS registry from sushy 172d1b22d Delay rendering configdrive 28a947803 Remove inventory time workaround for WS-man BIOS 0a8373872 Rename redfish_deploy_iso -> deploy_iso 205a8b303 Add additional node indexes f1c9ff0e9 Update min version of tox to use allowlist 722326f67 Clean up kernel_append_params for iRMC e51404c8e Clean up kernel_append_params for Redfish and iLO 2a73f5a84 Clean up kernel_append_params for PXE/iPXE 98c950061 Add bios_interface to api-ref spec c70b85876 Expand the deployment guide 26f660711 setup.cfg: Replace dashes with underscores 754f15c92 [doc] Update documentation about force_persistent_boot_device 6243a4b28 Rework the user guide b92fa285a Upgrade guide: remove ancient versions and group with Installation 35dea0789 Delete unavailable py2 package abfe383cc Fix deployment when executing a command fails after the command starts 53d06a797 Document the custom-agent deploy interface 4874f3c44 Provide an option to not cache bootable iso ramdisks e6bb99cd8 Avoid unnecessary validation in boot interfaces 47398edd3 Inherit InvalidImageRef from InvalidParameterValue 929907d68 Bye-bye iSCSI deploy, you served us well e79f16383 Update refarch with information about image_download_source bad281cf1 Clean up deprecated features of the agent deploy a7f4b4a21 Stop testing the iscsi deploy interface e85a36fe3 Deploy interface that fully relies on custom deploy steps d97f0fb5e Do not mask configdrive when executing in-band deploy steps 7ac60fb15 Docs: dhcp-less works with Glean 1.19.0 266be4eb4 Follow up to add iDRAC management via Redfish f4a700202 Remove temporary cleaning information on starting cleaning 7fecedad2 [doc][trivial] Fix diagram in agent token admin docs cf98a468e [doc][trivial] Fix typo in agent token admin docs da88ce8cd Update basic local.conf for quickstart df368cbd8 Read default cirros version from stackrc 5c303a5e0 Aliases for a few unfortunately named state transitions 9afa9b86d Process in-band deploy steps on fast-track 5a27ea6fe Followup patch for security dashboard clean steps ff7a32bc7 Remove a pause before cleaning when fast-tracking 65e2e1909 Fix fast track with redfish-virtual-media 233a8d2c4 Update to not use deprecated `get_task_monitor`. 8647aeca6 Do not use pregenerated tokens with a pre-built ISO c6e8281f8 Wipe agent tokens on inspection start and abort 82627acad Fix idrac-wsman BIOS factory_reset result finding 90d21edbf Update python-dracclient version f5413a9bd Add security dashboard clean steps to ilo drivers 0a417f52e Imported Translations from Zanata c6b8ee666 Update release note version header for wallaby 94bd4c8e3 Add Python3 xena unit tests dd56a20b6 Update master for stable/wallaby ae30139af Followup idrac configuration mold steps a036728fb Follow-up Automaticaly set cipher suite 7813fe888 Fix typo in security docs around is_admin rule d44b3b6fe CI: Collect a snapshot of network connections Diffstat (except docs and test files) ------------------------------------- .../source/baremetal-api-v1-node-management.inc | 1 + api-ref/source/baremetal-api-v1-nodes-bios.inc | 68 + api-ref/source/baremetal-api-v1-nodes.inc | 2 + api-ref/source/parameters.yaml | 73 +- api-ref/source/samples/driver-get-response.json | 4 +- .../samples/drivers-list-detail-response.json | 4 +- .../source/samples/node-bios-detail-response.json | 13 +- .../samples/node-bios-list-details-response.json | 30 + .../source/samples/node-bios-list-response.json | 4 +- .../samples/nodes-list-details-response.json | 2 +- bindep.txt | 1 - devstack/common_settings | 7 +- devstack/lib/ironic | 2 +- .../contributor/ironic-multitenant-networking.rst | 1 - .../images/ironic_standalone_with_ibmc_driver.svg | 1309 -------------- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- .../install/include/kernel-boot-parameters.inc | 13 +- driver-requirements.txt | 4 +- etc/ironic/rootwrap.d/ironic-utils.filters | 3 - ironic/api/controllers/v1/bios.py | 41 +- ironic/api/controllers/v1/node.py | 51 +- ironic/api/controllers/v1/utils.py | 28 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/cmd/dbsync.py | 2 - ironic/cmd/status.py | 36 + ironic/common/exception.py | 2 +- ironic/common/pxe_utils.py | 6 +- ironic/common/release_mappings.py | 22 +- ironic/common/states.py | 12 + ironic/conductor/allocations.py | 2 + ironic/conductor/cleaning.py | 3 +- ironic/conductor/deployments.py | 59 +- ironic/conductor/manager.py | 12 +- ironic/conductor/utils.py | 20 +- ironic/conf/__init__.py | 4 +- ironic/conf/deploy.py | 16 + ironic/conf/drac.py | 8 +- ironic/conf/irmc.py | 10 + ironic/conf/iscsi.py | 44 - ironic/conf/opts.py | 1 - ironic/conf/pxe.py | 3 +- ironic/db/api.py | 16 +- .../2bbd96b6ccb9_add_bios_fields_from_registry.py | 46 + .../alembic/versions/ac00b586ab95_node_indexes.py | 48 + ironic/db/sqlalchemy/api.py | 74 +- ironic/db/sqlalchemy/models.py | 16 + ironic/drivers/generic.py | 7 +- ironic/drivers/modules/agent.py | 542 +++--- ironic/drivers/modules/agent_base.py | 95 +- ironic/drivers/modules/agent_client.py | 160 +- ironic/drivers/modules/ansible/deploy.py | 17 +- ironic/drivers/modules/deploy_utils.py | 5 +- ironic/drivers/modules/drac/bios.py | 144 +- ironic/drivers/modules/drac/management.py | 12 +- ironic/drivers/modules/ilo/boot.py | 12 +- ironic/drivers/modules/ilo/common.py | 40 + ironic/drivers/modules/ilo/inspect.py | 27 + ironic/drivers/modules/ilo/management.py | 129 ++ ironic/drivers/modules/image_utils.py | 16 +- ironic/drivers/modules/ipmitool.py | 18 +- ironic/drivers/modules/irmc/boot.py | 18 +- ironic/drivers/modules/iscsi_deploy.py | 813 --------- ironic/drivers/modules/pxe_base.py | 24 +- ironic/drivers/modules/redfish/bios.py | 55 +- ironic/drivers/modules/redfish/boot.py | 144 +- ironic/drivers/modules/redfish/management.py | 6 +- ironic/drivers/modules/redfish/utils.py | 32 +- ironic/drivers/utils.py | 62 + ironic/objects/bios.py | 67 +- ironic/objects/conductor.py | 2 +- ironic/objects/node.py | 11 +- .../unit/drivers/modules/ansible/test_deploy.py | 30 + .../unit/drivers/modules/drac/test_management.py | 24 +- .../unit/drivers/modules/ilo/test_management.py | 44 +- .../unit/drivers/modules/redfish/test_bios.py | 204 ++- .../unit/drivers/modules/redfish/test_boot.py | 398 ++++- .../drivers/modules/redfish/test_management.py | 33 +- .../unit/drivers/modules/redfish/test_utils.py | 37 + .../unit/drivers/modules/test_agent_client.py | 202 ++- .../unit/drivers/modules/test_deploy_utils.py | 7 +- .../unit/drivers/modules/test_iscsi_deploy.py | 1816 -------------------- .../unit/drivers/third_party_driver_mock_specs.py | 2 +- playbooks/ci-workarounds/get_extra_logging.yaml | 8 + playbooks/ci-workarounds/get_tftpd.yaml | 5 - ...security-param-clean-step-00d5548072a397f2.yaml | 7 + .../notes/agent-last-command-4ec6967c995ba84a.yaml | 9 + .../bios-interface-api-ref-ebf866cc7da2270b.yaml | 4 + ...nterface-api-ref-validate-ddb95461adb0e478.yaml | 4 + .../bios-registry-support-e7fd62908e9c222d.yaml | 8 + .../notes/boot-validate-6b4b6b40c8e27273.yaml | 7 + ...w-named-state-transitions-a32433ad65638706.yaml | 6 + ...factory-reset-status.yaml-52a6119b46e33b37.yaml | 8 + .../notes/bye-bye-iscsi-658920cf126db0b8.yaml | 5 + .../notes/cleaning-token-9755f96d1284f78a.yaml | 4 + .../notes/configdrive-render-8eb398d956393d60.yaml | 6 + .../create_node_indexes-841b679e6cf332fd.yaml | 35 + .../custom-agent-deploy-88989512c29a14c1.yaml | 10 + .../notes/decomposed-steps-9644d3b5ccbad1ea.yaml | 7 + .../deploy-step-configdrive-86ea2bb267211b88.yaml | 5 + .../notes/fast-track-opt-d50eab2cc58fddcb.yaml | 5 + .../fast-track-validate-723f27986a012ffe.yaml | 4 + .../notes/get-bios-registry-aadc74800e0770f7.yaml | 6 + .../notes/inspection-token-b3d9e8e34341d680.yaml | 4 + .../notes/irmc-append-params-380a281db43e6013.yaml | 11 + ...ion-no-cache-http-ramdisk-62fc29cdd1d5b152.yaml | 14 + .../notes/pxe-append-params-9cd5831959676371.yaml | 10 + .../redfish-append-params-4d28d922484c2731.yaml | 14 + .../notes/redfish-deploy-iso-9671ae83108f6385.yaml | 6 + .../redfish-iso-pregenerated-97040711c4537726.yaml | 5 + ...-sanitization-performance-dc7886952144bb04.yaml | 7 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 525 +++++- releasenotes/source/wallaby.rst | 6 + setup.cfg | 10 +- tools/benchmark/README | 13 + .../benchmark/do_not_run_create_benchmark_data.py | 99 ++ tools/benchmark/generate-statistics.py | 195 +++ tox.ini | 8 +- zuul.d/ironic-jobs.yaml | 10 +- zuul.d/project.yaml | 6 +- 204 files changed, 6138 insertions(+), 6892 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 457040ed4..e379bb99a 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -10 +10 @@ python-scciclient>=0.8.0 -python-dracclient>=5.1.0,<6.0.0 +python-dracclient>=5.1.0,<7.0.0 @@ -14 +14 @@ python-xclarityclient>=0.1.6 -sushy>=3.7.0 +sushy>=3.8.0 From no-reply at openstack.org Thu Jun 3 10:05:42 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:05:42 -0000 Subject: [release-announce] ironic-python-agent 8.0.0 (xena) Message-ID: We are amped to announce the release of: ironic-python-agent 8.0.0: Ironic Python Agent Ramdisk This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 8.0.0 ^^^^^ New Features ************ * Adds a burn-in cleaning step 'burnin_cpu' to stress test CPUs for a configurable amount of time with stress-ng. To use this step, stress-ng needs to be installed on the RAM disk. * Adds a burn-in cleaning step 'burnin_memory' to stress test memory for a configurable amount of time with stress-ng. To use this step, stress-ng needs to be installed on the RAM disk. Upgrade Notes ************* * Removes support for the "iscsi" deploy interface. Please use a ramdisk from the Wallaby cycle if you need it. Bug Fixes ********* * Fixes initial logging before configuration is loaded to re-log anything recorded for the purposes of troubleshooting. This is necessary as systemd does not report stdout from a process launch as part of the process's logging. Now messages will be re-logged once the configuration has been loaded. * The command params no longer appear in the command results. See story 2008904 (https://storyboard.openstack.org/#!/story/2008904) for details. * Fixes fall-back to sysrq when powering off or rebooting the node from inside a container. * Fixes an error with UEFI based deployments where using a partition image a NVMe device was previously failing due to the different device name pattern. * Fixes failures with disk image conversions which result in memory allocation or input/output errors due to memory limitations by limiting the number of available memory allocation pools to a non- dynamic reasonable number which should not exceed the available system memory. * The lshw package version B.02.19.2-5 on CentOS 8.4 and 8.5 contains a bug (https://bugzilla.redhat.com/show_bug.cgi?id=1955250) that prevents the size of individual memory banks from being reported, with the result that the total memory size would be reported as 0 in some places. The total memory size is now taken from lshw's total memory size output (which does not suffer from the same problem) when available. * No longer crashes if MAC address cannot be determined for one of the network interfaces. * Permits out-of-order writes when converting whole disk images to improve performance. * Mirrors the previously disconnected EFI system partitions (ESPs) in UEFI software RAID setups. Disconnected ESPs can lead to nodes booting with outdated kernel parameters or the UEFI firmware not finding bootable kernels at all. * Adds a call to "udevadm settle" in write_image.sh. After GPT and MBR are destroyed systemd-udevd gets triggered which may hold /dev/sda open preventing qemu-img from writing its image. Other Notes *********** * The API call "prepare_image" and the deploy step "write_image" will now expect configdrive to be passed as an explicit argument rather than through "image_info". Changes in ironic-python-agent 7.0.0..8.0.0 ------------------------------------------- 031b5c4 Clean-up releasenotes for 8.0.0 release f657526 Stop accepting duplicated configdrive 9e4c705 Limit qemu-img execution arenas 10d18c4 Make _get_efi_bootloaders return relative paths 606e500 Rewrite write_image.sh in Python d1844c6 Enable out-of-order writes when writing whole disk images 51aa310 Do not serialize command_params 5492f57 Migrate functional tests for work_on_disk from ironic-lib be38821 Remove the iscsi extension fe825fa Fix NVMe Partition image on UEFI 353a366 setup.cfg: Replace dashes with underscores 24951b1 Import deployment logic from ironic-lib 5c22256 Burn-in: Add memory step 6702fca Burn-in: Add CPU step 764e297 Stop testing the iscsi deploy interface ed791d9 Fix getting memory size in some lshw output b510d2d unit tests: Capture log output c56cd4a Fix missing data in log messages 3251d7b Remove runtime dependency on pbr 2057d86 [trivial] Add versions to wallaby release notes 9c3fbfd Add a call to "udevadm settle" in write_image.sh c2d04dc Software RAID: RAID the ESPs b395181 Always fall back to sysrq when power off fails 1ab405b Do not fail network interface collection on unsupported interface df41898 Capture the early logging fcb65ca Add Python3 xena unit tests f6ab330 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- bindep.txt | 1 + ironic_python_agent/agent.py | 1 - ironic_python_agent/burnin.py | 80 ++ ironic_python_agent/cmd/agent.py | 2 +- ironic_python_agent/errors.py | 19 - ironic_python_agent/extensions/base.py | 2 +- ironic_python_agent/extensions/image.py | 212 ++-- ironic_python_agent/extensions/iscsi.py | 221 ---- ironic_python_agent/extensions/standby.py | 137 ++- ironic_python_agent/hardware.py | 60 +- ironic_python_agent/ironic_api_client.py | 2 +- ironic_python_agent/partition_utils.py | 471 ++++++++ ironic_python_agent/shell/write_image.sh | 54 - ironic_python_agent/utils.py | 13 +- ironic_python_agent/version.py | 9 +- .../notes/add_burnin_cpu-9acbb36048246a6b.yaml | 7 + .../notes/add_burnin_memory-4099ca42bd3b99db.yaml | 7 + .../capture-early-logging-0f3fa58d75656117.yaml | 8 + .../notes/command_params-869fa547b5be2236.yaml | 5 + .../notes/configdrive-dup-3fc46a878fe82485.yaml | 6 + .../notes/container-poweroff-d9ffb637cf1cee6c.yaml | 5 + ...-partition-image-handling-b8487133a188fd32.yaml | 6 + ...mit-qemu-img-malloc-arena-025ed84115481eae.yaml | 7 + .../lshw-no-memory-bank-size-05ea71987362986e.yaml | 9 + releasenotes/notes/no-iscsi-fd21808edbea5ac2.yaml | 5 + releasenotes/notes/no-mac-54616606ee6b844d.yaml | 5 + .../notes/qemu-img-ooo-write-721b8a0057ab7b8a.yaml | 5 + .../software-raid-raid-ESPs-25a2aa117b99620a.yaml | 7 + .../notes/udevadm-settle-9d3e5f1f20211857.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 2 +- setup.cfg | 9 +- tox.ini | 1 + zuul.d/ironic-python-agent-jobs.yaml | 37 +- zuul.d/project.yaml | 4 +- 47 files changed, 2565 insertions(+), 1075 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9fefc99..a08384d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 +importlib_metadata>=1.7.0;python_version<'3.8' # Apache-2.0 @@ -17 +17,0 @@ requests>=2.14.2 # Apache-2.0 -rtslib-fb>=2.1.65 # Apache-2.0 From no-reply at openstack.org Thu Jun 3 10:08:42 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:08:42 -0000 Subject: [release-announce] bifrost 11.0.0 (xena) Message-ID: We contentedly announce the release of: bifrost 11.0.0: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the xena release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 11.0.0 ^^^^^^ Upgrade Notes ************* * Moves installation of package dependencies for Diskimage Builder (DIB) from the "bifrost-create-dib-image" role to the "bifrost- install-ironic" role. This provides a cleaner separation between installation and image creation. * Removes support for the deprecated "iscsi" deploy interface. Bug Fixes ********* * Fixes a failure when building an Ubuntu image due to a missing "squashfs-tools" package. Changes in bifrost 10.2.0..11.0.0 --------------------------------- 0ad79686 Add OFTC network channel to contributor docs 89e5af8d Changed minversion in tox to 3.18.0 c72dd2fd Install DIB dependencies in bifrost-ironic-install role 33d0dc80 libvirt: pin edk2-ovmf for CentOS Stream 1075ee9a Add a benchmark job for ironic 23f745db Default ipa-builder to main git-branch 614b1cd3 setup.cfg: Replace dashes with underscores 9ee63519 Remove support for the iscsi deploy b166a062 Install squashfs-tools for Ubuntu image builds e3d16ab4 [CI] Make Kolla job running again 95c429b5 Use explicit path for which 72716957 Add Python3 xena unit tests c48ce497 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 3 ++- playbooks/ci/benchmark-ironic.yaml | 27 ++++++++++++++++++++++ playbooks/inventory/group_vars/localhost | 2 +- playbooks/inventory/group_vars/target | 2 +- .../roles/bifrost-create-dib-image/tasks/main.yml | 18 --------------- .../defaults/required_defaults_CentOS.yml | 4 +++- .../roles/bifrost-ironic-install/defaults/main.yml | 6 +++-- .../defaults/required_defaults_Debian_family.yml | 3 --- .../defaults/required_defaults_Fedora.yml | 3 --- .../defaults/required_defaults_RedHat_family.yml | 3 --- .../defaults/required_defaults_Suse_family.yml | 3 --- .../roles/bifrost-ironic-install/tasks/install.yml | 12 +++++----- .../vars/main.yml | 2 ++ .../bifrost-prep-for-install/defaults/main.yml | 2 +- .../move-dib-deps-install-8a8aafc060461dc0.yaml | 7 ++++++ releasenotes/notes/no-iscsi-0f7fbb0814b8cd18.yaml | 4 ++++ releasenotes/notes/squashfs-ddbbbac856e8f9fc.yaml | 5 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++++ scripts/install-deps.sh | 2 +- setup.cfg | 8 +++---- tox.ini | 6 ++--- zuul.d/bifrost-jobs.yaml | 10 ++++++++ zuul.d/project.yaml | 7 ++++-- 24 files changed, 93 insertions(+), 53 deletions(-) From no-reply at openstack.org Thu Jun 3 10:17:06 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:17:06 -0000 Subject: [release-announce] sushy-tools 0.17.0 Message-ID: We enthusiastically announce the release of: sushy-tools 0.17.0: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. 0.17.0 ^^^^^^ New Features * Adds support for returning message and attribute (particularly BIOS attribute) registries. Also adds two additional BIOS settings - 'SecureBootStatus' and 'SerialNumber'. 'SecureBootStatus' has 'ReadOnly' set to true and 'SecureBootStatus' has 'IsSystemUniqueProperty' in the registry. Changes in sushy-tools 0.16.0..0.17.0 ------------------------------------- cbee102 Use xena jobs 7132acd Use /dev/sdx instead of /dev/sdc when mounting boot images de31f7b Add support for returning message and attribute registries d597cf4 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- ..._and_attribute_registries-71e14a53bfa658da.yaml | 8 ++ setup.cfg | 8 +- sushy_tools/emulator/main.py | 43 +++++++ .../emulator/resources/systems/libvirtdriver.py | 6 +- .../templates/bios_attribute_registry_file.json | 20 +++ sushy_tools/emulator/templates/bios_registry.json | 137 +++++++++++++++++++++ .../emulator/templates/message_registry.json | 62 ++++++++++ .../emulator/templates/message_registry_file.json | 20 +++ .../templates/registry_file_collection.json | 16 +++ sushy_tools/emulator/templates/root.json | 3 + .../emulator/resources/systems/test_libvirt.py | 20 +-- zuul.d/project.yaml | 2 +- 14 files changed, 414 insertions(+), 16 deletions(-) From no-reply at openstack.org Thu Jun 3 10:18:29 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:18:29 -0000 Subject: [release-announce] os-collect-config 12.0.2 (victoria) Message-ID: We contentedly announce the release of: os-collect-config 12.0.2: Collect and cache metadata, run hooks on changes. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 12.0.1..12.0.2 ------------------------------------------- 950978b Add Python3 victoria unit tests e2e4c00 Update TOX_CONSTRAINTS_FILE for stable/victoria c44e87b Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- zuul.d/layout.yaml | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) From no-reply at openstack.org Thu Jun 3 10:19:54 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:19:54 -0000 Subject: [release-announce] python-tripleoclient 14.2.1 (victoria) Message-ID: We are satisfied to announce the release of: python-tripleoclient 14.2.1: TripleO client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 14.2.0..14.2.1 ---------------------------------------------- 002b3cb7 BnR added error msg in case there is no inventory bf586c4c Partial Revert "Don't pass the DNSServers param in undercloud env" a397af28 Remove --extra-env-vars from the mutually exclusive arg group 5b4bb45e Fix validations listing when filtering by group(s) f44a61ec Declare is_failed_validation variable before if statement b639a4ba Overcloud image has missing kernel_id and ramdisk_id properties 2cce52a8 Make Python Interpreter option for Ansible Validation Run f1854e9f Removing todo from undercloud_preflight since 753845 is merged 75aa21e9 Copy the inventory for standalone deploy in output_dir 2fc55afe Replace exception with LOG.info 1683e1bf Use ceph_mon_network to find Ceph monitor IPs for export fb409ede Move static-inventory option into parser group Diffstat (except docs and test files) ------------------------------------- tripleoclient/constants.py | 5 +- tripleoclient/export.py | 19 +++- tripleoclient/v1/overcloud_backup.py | 6 ++ tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 4 + tripleoclient/v1/tripleo_validator.py | 44 +++++--- tripleoclient/v1/undercloud_backup.py | 6 ++ tripleoclient/v1/undercloud_config.py | 1 + tripleoclient/v1/undercloud_preflight.py | 4 - 14 files changed, 297 insertions(+), 59 deletions(-) From no-reply at openstack.org Thu Jun 3 10:24:02 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:24:02 -0000 Subject: [release-announce] os-refresh-config 12.0.1 (victoria) Message-ID: We are glad to announce the release of: os-refresh-config 12.0.1: Refresh system configuration This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 13.0.0..12.0.1 ------------------------------------------- 1196e78 Update TOX_CONSTRAINTS_FILE for stable/victoria 312f7a3 Remove tripleo-multinode-container-minimal from zuul layout Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + test-requirements.txt | 4 +--- tox.ini | 2 +- zuul.d/layout.yaml | 1 - 5 files changed, 5 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 28342a5..0c2dafb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +11,0 @@ testtools>=2.2.0 # MIT -pyflakes>=2.2.0 From no-reply at openstack.org Thu Jun 3 10:24:20 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:24:20 -0000 Subject: [release-announce] puppet-tripleo 13.6.2 (victoria) Message-ID: We joyfully announce the release of: puppet-tripleo 13.6.2: Puppet module for OpenStack TripleO This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 13.6.2 ^^^^^^ Bug Fixes * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800): Add support for ports filtering in XtremIO driver. Changes in puppet-tripleo 13.6.1..13.6.2 ---------------------------------------- 42e2472c Bump metadata.json for victoria 13.6.2 68107900 Adding nova::network::neutron to nova-conductor 3067f820 Restore the spec file which was deleted unexpectedly 0bc10e5b Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard f6852abb stable-only: Pin puppetlabs-haproxy b71bcbf9 Move stonith resource creation to step2 8120cc84 Always update the local certmonger ca cert f6c88d01 HA: inject public certificates without blocking container d35ec105 Set ovn_chassis_mac_map in ovn::controller f363602b Add ports filtering support to XtremIO Cinder driver Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 +++++-- files/certmonger-rabbitmq-refresh.sh | 23 +++++++- manifests/certmonger/ca/local.pp | 1 - manifests/haproxy.pp | 32 +++++++++++ .../profile/base/cinder/volume/dellemc_xtremio.pp | 2 + .../base/cinder/volume/dellemc_xtremio_iscsi.pp | 1 + manifests/profile/base/neutron/agents/ovn.pp | 22 ++++++-- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +++- metadata.json | 2 +- .../xtremio-add-ports-option-b1e60a97ba56f21e.yaml | 5 ++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 4 +- .../tripleo_profile_base_nova_conductor_spec.rb | 63 ++++++++++++++++++++++ 14 files changed, 166 insertions(+), 19 deletions(-) From no-reply at openstack.org Thu Jun 3 10:25:19 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:25:19 -0000 Subject: [release-announce] tripleo-common 13.2.1 (victoria) Message-ID: We are excited to announce the release of: tripleo-common 13.2.1: A common library for TripleO workflows. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 13.2.0..13.2.1 ---------------------------------------- 4877a81a Add an internal index to network_data 1b2f0a55 Fix neutron driver detection for containers params 8c385c36 Revert "Revert "Fix a couple of Swift healthchecks"" 74f61f52 healthcheck_port: drop lsof in favor of awk/find c33a2c1f Add ceph-ansible to tripleoclient container e5575a78 exclude redhat-release from yum update in openstack-base 0bbc4e70 container-images: fix Cinder when running at Edge adfee2e6 Add host_vars to define tasks executed before network configurations 68cbb3af Use quay.ceph.io to pull the Ceph Dashboard related images d4407582 Don't allow rotation of HeatAuthEncryptionKey Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 8 ++--- container-images/tcib/base/base.yaml | 2 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + container-images/tripleo_containers.yaml | 8 ++--- container-images/tripleo_containers.yaml.j2 | 2 ++ healthcheck/common.sh | 42 +++++++++++++++------- .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 ++++ healthcheck/swift-account-replicator | 8 ----- healthcheck/swift-account-server | 4 ++- healthcheck/swift-container-replicator | 8 ----- healthcheck/swift-container-server | 4 ++- healthcheck/swift-object-replicator | 8 ----- healthcheck/swift-object-server | 15 +++++++- healthcheck/swift-proxy | 2 +- tripleo_common/constants.py | 1 + tripleo_common/image/kolla_builder.py | 12 ++++--- tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ tripleo_common/utils/template.py | 4 +++ 23 files changed, 104 insertions(+), 54 deletions(-) From no-reply at openstack.org Thu Jun 3 10:26:51 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:26:51 -0000 Subject: [release-announce] tripleo-heat-templates 13.3.0 (victoria) Message-ID: We are jazzed to announce the release of: tripleo-heat-templates 13.3.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * The "OS::TripleO::{{role.name}}::PreNetworkConfig" resource has been restored. This resource can be used to implement any configuration steps executed before network configurations are applied. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * Now "ExtraConfigPre" resource and "NodeExtraConfig" resource are executed after network configurations are applied in nodes. This is consitent with the previous version with heat software deployment mechanism instead of config-download. * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 13.2.0..13.3.0 ------------------------------------------------ 4890946ec Fix network_cidrs when ManageNetworks: false 0eaa748bb Add dependency on OVNMacAddressNetwork for role ResourceGroup f35479563 Set tags on all OS::Neutron::Port resources 007eaecf0 Stop handler flush cf17ac91e Add tags to THT network resources d39526de1 Fix "ManageNetworks" use-case 9b67d6420 Add new options for Barbican PKCS#11 backend b4cec5b72 Add OVNEncapType option to the ovn controller template b6d85231a Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 86de3c350 Disable tunneled mode when use_tls_for_live_migration 0fba0ce39 Add openstack-tox-tht to the gate 9536a5f31 Fix RoleParameters in tuned-baremetal-ansible.yaml 1311f8a52 Don't assume every role has default_route_networks 1785dabb8 Correct metrics_qdr logging path and regex parsing 521eae135 Run update tasks with become c71b72b29 Stop using (and breaking) /var/tmp for horizon temporary things f8485c9db Moving nova-consoleauth to step4 6ba1d84a4 Missing client certificate for live-migration with TLS 50c089a1f Add RootStackName to group_vars 48c444796 Add systemd dependency to openvswitch to ovn-controller b542452cc Disabling LM PostCopy and AutoConverge for RT roles ce9ae8666 Mount /etc/openldap inside the keystone container 9befbde21 Limit access to sshd used for nova migration b276cb24b Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" e1998a8e5 Ensure ansible_fqdn is set 5171cd3d7 Fix NovaVncProxyNetwork removal df04e9518 Remove no longer used NovaNfsEnabled parameter and condtion de98fdb20 HA: fix race when moving VIP during minor update 1e137876a [update][upgrade] Use container-tools:3.0 63001263a HA: inject public certificates without blocking container 5325ac311 Move tmpwatch from cron.daily to actual root crontab 4260d30ea Set vlan-limit value depending on vlan_transparent setting c2e62032b Correct spelling mistake 4be137395 Config parameters for timemaster service 721a8d414 [OVN] Remove check for OVN + Availability Zones 87fc83d7b Restore PreNetworkConfig resources 9ba03482c live_migration setting should be under libvirt namespace 05b191d3e Use single NovaLibvirtNetwork to configure instance console components 178018d90 Switch Octavia external tasks to 'post deploy' Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 31 +++- deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 ++ deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 20 ++- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/horizon/horizon-container-puppet.yaml | 23 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 ++ deployment/keystone/keystone-container-puppet.yaml | 1 + .../logrotate-crond-container-puppet.yaml | 45 ++++-- deployment/metrics/qdr-container-puppet.yaml | 4 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- deployment/nova/nova-compute-container-puppet.yaml | 58 ++++--- deployment/nova/nova-ironic-container-puppet.yaml | 12 -- deployment/nova/nova-libvirt-container-puppet.yaml | 25 ++- .../nova-migration-target-container-puppet.yaml | 52 ++++--- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 ++-- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../ovn/ovn-controller-container-puppet.yaml | 24 ++- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 171 +++++++++++++++++++++ deployment/timesync/chrony-baremetal-ansible.yaml | 2 - deployment/tls/undercloud-tls.yaml | 3 + deployment/tuned/tuned-baremetal-ansible.yaml | 19 ++- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 2 +- network/config/bond-with-vlans/role.role.j2.yaml | 2 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 2 +- network/config/multiple-nics/role.role.j2.yaml | 2 +- .../role.role.j2.yaml | 2 +- network/config/single-nic-vlans/role.role.j2.yaml | 2 +- network/network.j2 | 63 +++++--- network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 16 ++ network/ports/port.j2 | 39 +++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 2 + overcloud.j2.yaml | 24 ++- puppet/role.role.j2.yaml | 13 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 ++ .../notes/bug-1907214-df2f07cbacbe8a24.yaml | 13 ++ ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 ++ ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 ++ ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + tools/process-templates.py | 5 + zuul.d/layout.yaml | 1 + 60 files changed, 751 insertions(+), 181 deletions(-) From no-reply at openstack.org Thu Jun 3 10:27:06 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:27:06 -0000 Subject: [release-announce] os-apply-config 12.0.1 (victoria) Message-ID: We high-spiritedly announce the release of: os-apply-config 12.0.1: Config files from cloud metadata This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 13.0.0..12.0.1 ----------------------------------------- ee9ed5c Remove tripleo-multinode-container-minimal from zuul layout 8ebbbe9 Update TOX_CONSTRAINTS_FILE for stable/victoria 4f79e1f Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_apply_config/apply_config.py | 2 ++ os_apply_config/renderers.py | 2 +- os_apply_config/value_types.py | 2 +- test-requirements.txt | 4 +--- tox.ini | 2 +- zuul.d/layout.yaml | 2 -- 7 files changed, 7 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index de9adfe..8b130d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +11,0 @@ testtools>=2.2.0 # MIT -pyflakes>=2.2.0 From no-reply at openstack.org Thu Jun 3 10:27:27 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:27:27 -0000 Subject: [release-announce] tripleo-validations 13.3.0 (victoria) Message-ID: We are excited to announce the release of: tripleo-validations 13.3.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 13.2.0..13.3.0 --------------------------------------------- 8dcc4a4 [overcloud-service-status] Removing pre-upgrade d996a43 Check for dangling images dad3e9f Add validation to check DockerInsecureRegistryAddress matches the UC hostname 8110e42 Exposing default variables in playbook d7b344b Validation should use the public endpoint 7382be2 Make tls_everywhere validations compatible with ansible_facts 1b62805 More detail in arg validation fe94df5 Use a more targeted job for tripleo-validations 610a038 Use static inventory for component CI role and clean component list 3825c31 check-ram is not compat w/ upstream 37035d5 Standardize zuul configurations files 065e13b Fix set by merging two list without duplicate 042a145 Add update roles on several validations. 3b12012 Use the UBI8 image for testing 1a6b6b5 Add system encoding to pre-update stage. bd8d9ed Add new Update validation groups. 66dfe59 Add new tripleo-latest-packages-version playbook 07c1e0f Introduce tox-ansible to tripleo-validations Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 ++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/package-version.yaml | 1 + playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 15 ++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-ipa-server-check.yaml | 5 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 5 ++ roles/check_for_dangling_images/README.md | 37 ++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 ++++++ .../molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++ .../molecule/default/molecule.yml | 47 +++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 ++++++++ roles/check_uc_hostname/README.md | 39 +++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 58 ++++++++++++++++ .../molecule/default/molecule.yml | 49 ++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++ .../config_OK/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/config_OK/molecule.yml | 22 ++++-- .../molecule/config_OK/prepare.yml | 1 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 22 ++++-- .../molecule/default/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_drivers/molecule.yml | 22 ++++-- .../molecule/deprecated_drivers/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_params/molecule.yml | 22 ++++-- .../molecule/deprecated_params/prepare.yml | 1 + .../required_missing/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/required_missing/molecule.yml | 22 ++++-- .../molecule/required_missing/prepare.yml | 1 + roles/check_undercloud_conf/tasks/main.yml | 2 + .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++-- tox.ini | 7 ++ tripleo_validations/utils.py | 2 +- zuul.d/base.yaml | 24 +++++++ zuul.d/layout.yaml | 40 +++++++++++ .zuul.yaml => zuul.d/molecule.yaml | 79 +++++++--------------- 61 files changed, 949 insertions(+), 112 deletions(-) From no-reply at openstack.org Thu Jun 3 10:28:53 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 03 Jun 2021 10:28:53 -0000 Subject: [release-announce] tripleo-image-elements 12.2.1 (victoria) Message-ID: We are overjoyed to announce the release of: tripleo-image-elements 12.2.1: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.0..12.2.1 ------------------------------------------------ 375b4e87 ensure any ens3 interface is nuked during image build cf87fd9e fix python version conflict 3f7f9eed Update .gitreview for stable/victoria b73f4154 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/interface-names/install.d/71-clean-stale-interface | 4 ++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../install.d/os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../install.d/os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 3 +-- 11 files changed, 12 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index f924f319..41ab0c18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0 From no-reply at openstack.org Fri Jun 4 09:38:32 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 09:38:32 -0000 Subject: [release-announce] swift 2.23.3 (train) Message-ID: We are overjoyed to announce the release of: swift 2.23.3: OpenStack Object Storage This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.23.3 ^^^^^^ Bug Fixes * Sharding improvements: * Prevent object updates from auto-creating shard containers. This ensures more consistent listings for sharded containers during rebalances. * Deleted shard containers are no longer considered root containers. This prevents unnecessary sharding audit failures and allows the deleted shard database to actually be unlinked. * The sharder daemon has been enhanced to better support the shrinking of shards that are no longer required. Shard containers will now discover from their root container if they should be shrinking. They will also discover the shards into which they should shrink, which may include the root container itself. * Improved performance of sharded container listings when performing prefix listings. * Improved container-sharder stat reporting to reduce load on root container databases. * The container sharder can now handle containers with special characters in their names. * "swift-container-info" now summarizes shard range information. Pass "-v"/"--verbose" if you want to see all of them. * Don't inject shard ranges when user quits. * Various other minor bug fixes and improvements. * Python 3 bug fixes: * Fixed a potential server error when uploading data via a tempurl. * Fixed a potential server error when getting symlink details. * Added the ability to connect to memcached over TLS. See the "tls_*" options in etc/memcache.conf-sample Changes in swift 2.23.2..2.23.3 ------------------------------- 81d845f34 Authors/ChangeLog for 2.23.3 fa6edcc7e symlink: Ensure headers are returned as a list on py3 b2601fe3e tempurl: Fix PUT upload to temp url on py3 96e24bb1d Avoid loops when gathering container listings from shards 80b789226 Populate shrinking shards with shard ranges learnt from root 1f8c16fca Use swiftclient Connections in sharding probe tests 3d8c9e8a3 Refactor audit shard tests 71921f861 container-sharding: Stable overlap order 87c1aa0e0 Address a sharder/replicator race 98da7b093 Identify deleted shards as shards f8f50ca60 swift-container-info: Show shard ranges summary 7ee5fc197 Don't auto-create shard containers 7ed79e3b2 Latch shard-stat reporting 7159cb73d py27: Suppress UnicodeWarnings in ShardRange setters f96f24117 sharding: Add probe test that exercises swift-manage-shard-ranges ac6b89d12 sharding: Don't inject shard ranges when user says quit 086fce5ee sharding: filter shards based on prefix param when listing 4439c0d38 sharding: Better-handle newlines in container names 66b5960ac Give probe tests a second chance to pass 41204a74e Bump up probe test timeout 131093831 Bump up timeouts for DSVM and probe test jobs 0ef0064f0 Bump up ceph tests timeout c1e15d15a Give unit tests a second chance to pass bc03a32e7 s3-tests: Use my s3compat fork instead ab0464a8b s3-tests: Only try to copy outputs when there *are* outputs fc742d602 Prevent upgrading to pip 21+ e828b37ca sharding: Let swift-manage-shard-ranges accept a relative path 2a6ffd33f sharder: quote() more Swift paths when logging c9ca078e7 sharding: Tolerate blank limits when listing 89d22f0c9 Memcached client TLS support d63b7013a [stable-only] Cap bandit to 1.6.2 Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .zuul.yaml | 6 +- AUTHORS | 3 + CHANGELOG | 44 ++ bin/swift-container-info | 4 + bin/swift-container-sharder | 4 + etc/memcache.conf-sample | 22 + etc/proxy-server.conf-sample | 4 + .../notes/2_23_3_release-ee6b4fd785ec377e.yaml | 45 ++ swift/cli/info.py | 46 +- swift/cli/manage_shard_ranges.py | 9 +- swift/common/db.py | 14 +- swift/common/memcached.py | 16 +- swift/common/middleware/memcache.py | 16 +- swift/common/middleware/symlink.py | 2 +- swift/common/middleware/tempurl.py | 2 +- swift/common/utils.py | 58 +- swift/common/wsgi.py | 3 +- swift/container/backend.py | 112 ++- swift/container/server.py | 60 +- swift/container/sharder.py | 255 ++++--- swift/obj/server.py | 8 +- swift/obj/updater.py | 1 + swift/proxy/controllers/container.py | 33 +- swift/proxy/controllers/obj.py | 12 +- test-requirements.txt | 2 +- test/probe/test_sharder.py | 361 +++++++++- test/unit/cli/test_info.py | 88 ++- test/unit/cli/test_manage_shard_ranges.py | 21 +- test/unit/common/middleware/test_memcache.py | 21 + test/unit/common/middleware/test_symlink.py | 1 + test/unit/common/middleware/test_tempurl.py | 36 + test/unit/common/test_db.py | 7 +- test/unit/common/test_memcached.py | 14 + test/unit/common/test_utils.py | 37 +- test/unit/container/test_backend.py | 439 +++++++++++- test/unit/container/test_replicator.py | 87 ++- test/unit/container/test_server.py | 110 ++- test/unit/container/test_sharder.py | 797 +++++++++++++++++++-- test/unit/container/test_updater.py | 91 ++- test/unit/obj/test_server.py | 106 ++- test/unit/obj/test_updater.py | 18 +- test/unit/proxy/controllers/test_container.py | 196 ++++- test/unit/proxy/test_server.py | 6 +- tools/playbooks/common/install_dependencies.yaml | 6 +- tox.ini | 14 +- 49 files changed, 2852 insertions(+), 395 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ff86a01dd..397e6bb89 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -25 +25 @@ keystonemiddleware>=4.17.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<=1.6.2 # Apache-2.0 From no-reply at openstack.org Fri Jun 4 17:41:03 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:41:03 -0000 Subject: [release-announce] puppet-tripleo 11.7.0 (train) Message-ID: We are amped to announce the release of: puppet-tripleo 11.7.0: Puppet module for OpenStack TripleO This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.7.0 ^^^^^^ New Features ************ * Add parameter for setting monitor interval for ovndbs (default is 30s) Deprecation Notes ***************** * The "enable_cache" and "cache_backend" in "tripleo::profile::base::nova" class were removed because now these parameters are defined in tripleo-heat-templates. Changes in puppet-tripleo 11.6.1..11.7.0 ---------------------------------------- d200d552 Bump last train release 11.7.0 before train extended maintenance ac24e085 [train-only] Fix Automatically set memcache_servers for keystone cache 9f2b7feb Define nova::cache parameters in tht 8d3ea85a Use dogpile.cache.memcached in nova caching 0e38a628 Adding nova::network::neutron to nova-conductor 49728d24 HA: inject public certificates without blocking container e8f473f5 Automatically set memcache_servers for keystone cache 16f1acb9 stable-only: Pin puppetlabs-haproxy 9c298733 Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard 9cabed9d Set ovn_chassis_mac_map in ovn::controller bd1807c4 Move stonith resource creation to step2 53007c0b Always update the local certmonger ca cert 623f4483 Add Memcached certificate generation 5ceab69b Set memcache_servers for heat::cache automatically f11ed7de Add missing unit tests for heat manifests caac40ed Add monitor interval for ovn dbs Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++- files/certmonger-memcached-refresh.sh | 20 +++ files/certmonger-rabbitmq-refresh.sh | 23 ++- manifests/certmonger/ca/local.pp | 1 - manifests/certmonger/memcached.pp | 79 ++++++++++ manifests/haproxy.pp | 32 ++++ manifests/profile/base/certmonger_user.pp | 9 ++ manifests/profile/base/heat.pp | 18 ++- manifests/profile/base/keystone.pp | 5 +- manifests/profile/base/memcached.pp | 35 ++++- manifests/profile/base/neutron/agents/ovn.pp | 22 ++- manifests/profile/base/nova.pp | 10 +- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 19 ++- metadata.json | 2 +- .../monitor_interval_ovndbs-6af18ba7f4a17cc5.yaml | 4 + .../notes/nova-cache-in-tht-533e048fd6ccc65f.yaml | 6 + spec/classes/tripleo_certmonger_ca_local_spec.rb | 4 +- spec/classes/tripleo_certmonger_memcached_spec.rb | 60 ++++++++ .../tripleo_profile_base_heat_api_cfn_spec.rb | 105 +++++++++++++ spec/classes/tripleo_profile_base_heat_api_spec.rb | 105 +++++++++++++ .../tripleo_profile_base_heat_engine_spec.rb | 97 ++++++++++++ spec/classes/tripleo_profile_base_heat_spec.rb | 166 +++++++++++++++++++++ spec/classes/tripleo_profile_base_keystone_spec.rb | 10 +- .../classes/tripleo_profile_base_memcached_spec.rb | 76 ++++++++++ .../tripleo_profile_base_nova_conductor_spec.rb | 2 + spec/classes/tripleo_profile_base_nova_spec.rb | 2 - spec/fixtures/hieradata/default.yaml | 5 + 30 files changed, 905 insertions(+), 42 deletions(-) From no-reply at openstack.org Fri Jun 4 17:42:45 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:42:45 -0000 Subject: [release-announce] python-tripleoclient 12.6.0 (train) Message-ID: We are pumped to announce the release of: python-tripleoclient 12.6.0: TripleO client This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.6.0 ^^^^^^ Bug Fixes * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. More information here: https://access.redhat.com/solutions/6036141 Changes in python-tripleoclient 12.5.0..12.6.0 ---------------------------------------------- 95feb7c2 BnR Typo missing some spaces between words on the command help b0fa4257 Remove --extra-env-vars from the mutually exclusive arg group 050c9aa9 [train-only] post stack creation tsx validation 53c763d6 Fix validations listing when filtering by group(s) ebb8d56b Declare is_failed_validation variable before if statement e2cba545 [only-train] BnR overwrite the json output 48e4ed8e Overcloud image has missing kernel_id and ramdisk_id properties 83b24933 Replace exception with LOG.info 73d1ee27 [train-only] Trap empty role data 5c7ae38d Copy the inventory for standalone deploy in output_dir 10e5640f Use ceph_mon_network to find Ceph monitor IPs for export 429169bd Use validation framework for running undercloud checkdisk 1a64962d Move static-inventory option into parser group Diffstat (except docs and test files) ------------------------------------- .../notes/tsx-validation-f663a9f14b2aff3d.yaml | 17 +++++++ tripleoclient/constants.py | 4 +- tripleoclient/exceptions.py | 4 ++ tripleoclient/export.py | 19 +++++++- tripleoclient/v1/overcloud_backup.py | 7 +-- tripleoclient/v1/overcloud_deploy.py | 56 ++++++++++++++++++---- tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/overcloud_update.py | 8 ++++ tripleoclient/v1/overcloud_upgrade.py | 7 +++ tripleoclient/v1/tripleo_deploy.py | 4 ++ tripleoclient/v1/tripleo_validator.py | 39 ++++++++------- tripleoclient/v1/undercloud_backup.py | 15 +++--- tripleoclient/v1/undercloud_preflight.py | 22 +++++---- 17 files changed, 201 insertions(+), 54 deletions(-) From no-reply at openstack.org Fri Jun 4 17:43:04 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:43:04 -0000 Subject: [release-announce] tripleo-puppet-elements 11.3.1 (train) Message-ID: We contentedly announce the release of: tripleo-puppet-elements 11.3.1: Puppet building rules for OpenStack images. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.3.0..11.3.1 ------------------------------------------------- 9d10d8e overcloud-compute: add linuxptp package for timemaster service Diffstat (except docs and test files) ------------------------------------- .../overcloud-compute/install.d/package-installs-overcloud-compute | 3 ++- elements/overcloud-compute/pkg-map | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) From no-reply at openstack.org Fri Jun 4 17:43:16 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:43:16 -0000 Subject: [release-announce] tripleo-validations 11.6.0 (train) Message-ID: We enthusiastically announce the release of: tripleo-validations 11.6.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 11.5.0..11.6.0 --------------------------------------------- 4dd513c [train-only] Set oc_container_cli for checks during ffu 386f41d [train-only] Inventory doesn't contain admin password 1121883 [train-only] Set container_client for checks during ffu df505cc [overcloud-service-status] Removing pre-upgrade 3e0e274 Check for dangling images b1ee6a4 Add validation to check DockerInsecureRegistryAddress matches the UC hostname fd9a540 Exposing default variables in playbook 07ffeb1 Validation should use the public endpoint 6ee98fb Make tls_everywhere validations compatible with ansible_facts 588b67b More detail in arg validation 74b064c Use a more targeted job for tripleo-validations 8c28b3c Use static inventory for component CI role and clean component list 56859ce check-ram is not compat w/ upstream 31577df Fix set by merging two list without duplicate 5df68a4 Add validation to verify undercloud.conf content. 34a8596 Add system encoding to pre-update stage. f1364e9 Add update roles on several validations. 711337e Add new Update validation groups. f65ec44 Add new tripleo-latest-packages-version playbook Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 +++++ playbooks/check-undercloud-conf.yaml | 15 +++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 21 +++++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 6 ++ roles/check_for_dangling_images/README.md | 37 +++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 +++++++ .../molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++++ .../molecule/default/molecule.yml | 47 ++++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 +++++++++ roles/check_uc_hostname/README.md | 39 ++++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 58 +++++++++++++++++ .../molecule/default/molecule.yml | 49 +++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++++ roles/check_undercloud_conf/defaults/main.yml | 41 ++++++++++++ .../molecule/config_OK/Dockerfile | 37 +++++++++++ .../molecule/config_OK/converge.yml | 45 ++++++++++++++ .../molecule/config_OK/molecule.yml | 52 ++++++++++++++++ .../molecule/config_OK/prepare.yml | 65 +++++++++++++++++++ .../molecule/default/Dockerfile | 37 +++++++++++ .../molecule/default/converge.yml | 55 +++++++++++++++++ .../molecule/default/molecule.yml | 52 ++++++++++++++++ .../molecule/default/prepare.yml | 34 ++++++++++ .../molecule/deprecated_drivers/Dockerfile | 37 +++++++++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++++++++++++++ .../molecule/deprecated_drivers/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_drivers/prepare.yml | 65 +++++++++++++++++++ .../molecule/deprecated_params/Dockerfile | 37 +++++++++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++++++++++++ .../molecule/deprecated_params/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_params/prepare.yml | 51 +++++++++++++++ .../molecule/required_missing/Dockerfile | 37 +++++++++++ .../molecule/required_missing/converge.yml | 71 +++++++++++++++++++++ .../molecule/required_missing/molecule.yml | 52 ++++++++++++++++ .../molecule/required_missing/prepare.yml | 63 +++++++++++++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++++++++++ roles/check_undercloud_conf/tasks/main.yml | 69 +++++++++++++++++++++ roles/container_status/tasks/main.yaml | 22 +++++-- roles/nova_status/molecule/default/converge.yml | 2 +- roles/nova_status/tasks/main.yml | 18 ++++-- .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++--- tripleo_validations/utils.py | 16 +++-- zuul.d/base.yaml | 9 +++ zuul.d/layout.yaml | 57 +++++++++-------- zuul.d/molecule.yaml | 38 +++++++++++- 70 files changed, 2077 insertions(+), 81 deletions(-) From no-reply at openstack.org Fri Jun 4 17:44:26 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:44:26 -0000 Subject: [release-announce] tripleo-common 11.7.0 (train) Message-ID: We are happy to announce the release of: tripleo-common 11.7.0: A common library for TripleO workflows. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 11.6.0..11.7.0 ---------------------------------------- a9863faf Fix site-packages in horizon's extend_start.sh b2024794 Add an internal index to network_data 7599a385 Don't install dhcp-all-interfaces for redhat 8 onwards 32e2249e [Victoria and bellow] Ensure rights on the ansible.log file f8695846 Add host_vars to define tasks executed before network configurations e28d539d Fix neutron driver detection for containers params dbdaa05d Revert "Revert "Fix a couple of Swift healthchecks"" 04dab053 healthcheck_port: drop lsof in favor of awk/find 818695e1 container-images: fix Cinder when running at Edge afc036b2 Add ceph-ansible to tripleoclient container 3158d18a exclude redhat-release from yum update in openstack-base 003ff038 Create a container for Unbound DNS resolver Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/base.yaml | 2 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + container-images/tcib/base/unbound/unbound.yaml | 5 +++ container-images/tripleo_containers.yaml | 2 ++ container-images/tripleo_containers.yaml.j2 | 10 ++++++ healthcheck/common.sh | 42 +++++++++++++++------- .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 ++++ healthcheck/swift-account-replicator | 8 ----- healthcheck/swift-account-server | 4 ++- healthcheck/swift-container-replicator | 8 ----- healthcheck/swift-container-server | 4 ++- healthcheck/swift-object-replicator | 8 ----- healthcheck/swift-object-server | 15 +++++++- healthcheck/swift-proxy | 2 +- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/actions/ansible.py | 5 +++ tripleo_common/actions/templates.py | 4 +++ tripleo_common/image/kolla_builder.py | 2 ++ tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ 41 files changed, 124 insertions(+), 51 deletions(-) From no-reply at openstack.org Fri Jun 4 17:45:32 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:45:32 -0000 Subject: [release-announce] tripleo-image-elements 10.6.3 (train) Message-ID: We are happy to announce the release of: tripleo-image-elements 10.6.3: Disk image builder elements for deploying OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.6.2..10.6.3 ------------------------------------------------ 9b50a3ce additionally remove eth* devices off the overcloud-full image c6d24542 ensure any ens3 interface is nuked during image build 44c79f62 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 7 +++++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- 9 files changed, 13 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index 208e7da0..a11ec8b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0 From no-reply at openstack.org Fri Jun 4 17:45:32 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:45:32 -0000 Subject: [release-announce] paunch 5.5.1 (train) Message-ID: We are stoked to announce the release of: paunch 5.5.1: Utility to launch and manage containers using YAML based configuration data This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.5.0..5.5.1 ------------------------------ 9b6bef4 Accept 142 as an exit code Diffstat (except docs and test files) ------------------------------------- paunch/utils/systemd.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) From no-reply at openstack.org Fri Jun 4 17:47:34 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 04 Jun 2021 17:47:34 -0000 Subject: [release-announce] tripleo-heat-templates 11.6.0 (train) Message-ID: We are excited to announce the release of: tripleo-heat-templates 11.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.6.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * New "CinderRpcResponseTimeout" and "CinderApiWsgiTimeout" parameters provide a means for configuring Cinder's RPC response and WSGI connection timeouts, respectively. * The new "EnableCache" parameter is added to enable/disable chacing using memcached services. The parameter is true by default, but should be false when memcached service is disabled in the deployment. * The MariaDB tuning parameter for Innodb_buffer_pool_size can now be set via a new TripleO Heat Template parameter 'MysqlInnodbBufferPoolSize'. By default this is undefined. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Add posibilities to configure ovn dbs monitor interval in tht by OVNDBSPacemakerMonitorInterval (default 30s). Under load, this can create extra stress and since the timeout has already been bumped, it makes sense to bump this interval to a higher value as a trade off between detecting a failure and stressing the service. * The nova-ironic setting for 'max_concurrent_builds' can now be set via the use of a new TripleO Heat templates parameter 'IronicMaxConcurrentBuilds'. It is set to the service default of 10 by default in TripleO Heat templates. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. The *ForceNoTsx* flag will disable this validation on a per-role basis. More information here: https://access.redhat.com/solutions/6036141 * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 11.5.0..11.6.0 ------------------------------------------------ 42a5f7f1b [ffwd] Add legacy cinderv3 volume cleanup to postupgrade fee55d5dc Fix network_cidrs when ManageNetworks: false 7840da001 [train-only] Adding ForceNoTsx flag d0ba2d100 Add dependency on OVNMacAddressNetwork for role ResourceGroup 45b4de27c Set tags on all OS::Neutron::Port resources 88ef493cd Add tags to THT network resources d2d044e02 Add OVNEncapType option to the ovn controller template af8576222 Disable tunneled mode when use_tls_for_live_migration ea9ebddf6 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml c1ee7ccdd [ffwd][train-only] Rebuild clouds.yaml before running keystone endpoint configuration. 8090c8a18 Fix RoleParameters in tuned-baremetal-ansible.yaml ab5d866cb HA: inject public certificates without blocking container 8a7725f42 Add new options for Barbican PKCS#11 backend d7e888ac9 Switch Octavia external tasks to 'post deploy' e8a224f9a [ffwd] Rework checks for hybrid state containers 7768e7608 Run update tasks with become 20561e86c Sync full /etc/leapp/files directory. 373838ffb [train-only] QemuDefaultTLSVerify should be false ff730282a Stop using (and breaking) /var/tmp for horizon temporary things 002445bea Add RootStackName to group_vars bcc5f03ab Moving nova-consoleauth to step4 ac1584a44 Missing client certificate for live-migration with TLS c9fa94dd5 Add systemd dependency to openvswitch to ovn-controller 69e24661b Disabling LM PostCopy and AutoConverge for RT roles 70f6c7804 Mount /etc/openldap inside the keystone container 3bbc8af5b Removing duplicate mount point in metrics_qdr a6e524477 Limit access to sshd used for nova migration 3d8acef64 [train-only] Introduce hybrid state for iscsi 0de9ea84f [Train Only] Ensure novajoin code is setting ansible_fqdn f24840a56 Ensure ansible_fqdn is set 860a68a4a Use single NovaLibvirtNetwork to configure instance console components 3b763ab2e [ffwd] Rework WA#1925078 2445de761 Add OVN chassis macs to hieradata 6c62cf789 Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" 489aab582 Expose Innodb_buffer_pool_size 18d40d805 Refactor OVNMacAddressNetwork 7951870db [Train-only] Fix the tripleo-container-stop role in train cbd025a3f [ffwd][train-only] Run keystone endpoint configuration on FFWD a22239e27 Add service ordering to cleanup service to avoid conflicts with agent startup b7ed86c3b [update][upgrade] Use container-tools:3.0 cb2cb5303 Support configuring cinder's RPC and WSGI timeouts e3413901c Add TLS support to services using memcached b277ccf6b Add EnableCache option to enable/disable usage of memcache 2851c49d0 Move tmpwatch from cron.daily to actual root crontab 3f59a3aa9 Config parameters for timemaster service 7fe8f4175 OVNChassisMacPorts for distributed VLAN 7203afb39 [OVN] Remove check for OVN + Availability Zones 53bf067fb [ffwd][train-only] Copy /boot/grub2/grubenv to /boot/efi/EFI/redhat/grubenv 2416eb3b1 HA: fix race when moving VIP during minor update 9f50fad9a Add non-tls listener to Memcached 546d994d0 Make memcache also listen to localhost 5319872d9 live_migration setting should be under libvirt namespace c69b33e92 Create OVNMacAddrNet network on Undercloud 38bcdfa32 Add posibilities to set ovndbs monitor interval 8ecc24fcc Add TLS capabilities to Memcached service 5ecafca64 Expose mistral::rpc_response_timeout as Heat parameter 37263ee17 Expose max_concurrent_builds as a Heat parameter Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 1 + common/hiera-steps-tasks.yaml | 1 + deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 + deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 23 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/cinder/cinder-api-container-puppet.yaml | 11 +- .../cinder/cinder-backup-container-puppet.yaml | 2 +- deployment/cinder/cinder-base.yaml | 5 + .../cinder/cinder-volume-container-puppet.yaml | 2 +- deployment/database/mysql-base.yaml | 11 + deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/heat/heat-base-puppet.yaml | 24 ++ deployment/horizon/horizon-container-puppet.yaml | 23 +- deployment/ipa/ipaclient-baremetal-ansible.yaml | 1 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 + deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 95 +++++++- .../kernel-boot-params-baremetal-ansible.yaml | 10 + deployment/keystone/keystone-container-puppet.yaml | 107 ++++++--- .../logrotate-crond-container-puppet.yaml | 45 ++-- deployment/manila/manila-api-container-puppet.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 248 ++++++++++++++++----- deployment/metrics/qdr-container-puppet.yaml | 5 - deployment/mistral/mistral-base.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 24 +- deployment/nova/nova-base-puppet.yaml | 24 +- deployment/nova/nova-compute-container-puppet.yaml | 75 +++++-- deployment/nova/nova-ironic-container-puppet.yaml | 11 +- deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova-migration-target-container-puppet.yaml | 38 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 +-- .../octavia/octavia-api-container-puppet.yaml | 2 +- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../ovn/ovn-controller-container-puppet.yaml | 21 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 10 + .../pacemaker/pacemaker-baremetal-puppet.yaml | 2 +- deployment/swift/swift-proxy-container-puppet.yaml | 9 + .../swift/swift-storage-container-puppet.yaml | 9 + .../timemaster/timemaster-baremetal-ansible.yaml | 171 ++++++++++++++ deployment/tls/undercloud-tls.yaml | 3 + .../tripleo-packages-baremetal-puppet.yaml | 59 ++--- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/ssl/enable-memcached-tls.yaml | 10 + environments/standalone/standalone-overcloud.yaml | 2 + environments/standalone/standalone-tripleo.yaml | 2 + environments/undercloud.yaml | 4 + environments/undercloud/undercloud-minion.yaml | 2 + network/network.j2 | 46 ++-- network/ovn_mac_addr_net.yaml | 37 +++ network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 43 ++++ network/ports/port.j2 | 39 ++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 5 + overcloud.j2.yaml | 20 +- puppet/role.role.j2.yaml | 38 ++++ .../notes/add-forcenotsx-36fc6dce46518f5b.yaml | 20 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 + ...er-add-timeout-parameters-54550a6e1c11c0b9.yaml | 6 + .../notes/enable-cache-293c39b3b6f55c80.yaml | 6 + .../innodb-tuning-param-e71d2fd727c450ec.yaml | 6 + ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 + .../monitor_interval_ovndbs-b14c886737965300.yaml | 9 + ...ova-max_concurrent_builds-f900d84f35704452.yaml | 6 + ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 + ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + sample-env-generator/standalone.yaml | 7 + sample-env-generator/undercloud-minion.yaml | 6 +- tools/process-templates.py | 5 + 95 files changed, 1448 insertions(+), 265 deletions(-) From no-reply at openstack.org Mon Jun 7 12:45:07 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 07 Jun 2021 12:45:07 -0000 Subject: [release-announce] keystoneauth1 3.17.4 (train) Message-ID: We eagerly announce the release of: keystoneauth1 3.17.4: Authentication Library for OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.17.4 ^^^^^^ Bug Fixes * [bug 1838704 (https://bugs.launchpad.net/keystone/+bug/1838704)] When consuming keystoneauth1.session.Session, if a requests session is not provided one is created. The Session used for requests may result in a ResourceWarning being generated if it is not properly closed. The code has been updated to close the session correctly when the Session object is deleted. Changes in keystoneauth1 3.17.3..3.17.4 --------------------------------------- 8dc7366 Cleanup session on delete Diffstat (except docs and test files) ------------------------------------- keystoneauth1/session.py | 18 ++++++++++++++++++ .../cleanup-session-on-delete-1ed6177d4c5c1f83.yaml | 9 +++++++++ 3 files changed, 35 insertions(+) From no-reply at openstack.org Mon Jun 7 12:45:36 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 07 Jun 2021 12:45:36 -0000 Subject: [release-announce] keystone 16.0.2 (train) Message-ID: We contentedly announce the release of: keystone 16.0.2: OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 16.0.2 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207)] Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137)] Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938)] Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753)] Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1889936 (https://bugs.launchpad.net/keystone/+bug/1889936)] Properly decode octet strings, or byte arrays, returned from LDAP. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125)] Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654)] Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 16.0.1..16.0.2 ---------------------------------- 1b573ae7d Hide AccountLocked exception from end users 328cf33aa Retry update_user when sqlalchemy raises StaleDataErrors f10ff1c9a Support bytes type in generate_public_ID() 9c879d46b Use app cred user ID in policy enforcement b49a465ed Drop lower-constraints job 9beb3a580 Properly handle octet (byte) strings when converting LDAP responses 105f95795 Implement more robust connection handling for asynchronous LDAP calls e8b477847 Delete system role assignments from system_assignment table 28d2dd19e Make opensuse jobs nonvoting fb7d54543 Fix lower-constraint for PyMySQL 13f965e1f fix link in release note of bug/1794527 247227f3f Change time faking for totp test 7eeb144b7 Stop explicitly requiring pycodestyle 184bb8289 Revert "Temporarily disable k2k tests on train and stein" 93f548a72 Refactor some ldap code to implement TODOs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - keystone/api/users.py | 47 +++++- keystone/assignment/backends/sql.py | 5 + keystone/identity/backends/ldap/common.py | 161 +++++++++++++-------- keystone/identity/backends/sql.py | 8 + keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++ .../unit/identity/backends/test_ldap_common.py | 14 ++ lower-constraints.txt | 8 +- .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 + .../notes/bug-1794527-866b1caff67977f3.yaml | 2 +- .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 + .../notes/bug-1889936-78d6853b5212b8f1.yaml | 5 + .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 + .../notes/bug-1901207-13762f85b8a04481.yaml | 7 + .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ setup.cfg | 3 +- test-requirements.txt | 1 - 27 files changed, 397 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a86a1fa44..6cdc34d31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ pep257==0.7.0 # MIT License -pycodestyle>=2.0.0 # MIT License From no-reply at openstack.org Tue Jun 8 17:05:53 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 08 Jun 2021 17:05:53 -0000 Subject: [release-announce] python-tripleoclient 16.2.1 (wallaby) Message-ID: We are glad to announce the release of: python-tripleoclient 16.2.1: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 16.2.0..16.2.1 ---------------------------------------------- 2663a5f2 BnR Typo missing some spaces between words on the command help 0886ecd1 Use Validations libs Client for main validation entry point 234a41b7 Ephemeral Heat: Add a --refresh option to external update run 4ed3d8b4 Ephemeral Heat unit tests b90a7196 Don't run containers in interactive mode fea5819c BnR added error msg in case there is no inventory 2006c0ff Auto OVN bridge mac mappings for standalone 516b39d6 Wait for Heat message queues Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tripleoclient/exceptions.py | 4 + tripleoclient/heat_launcher.py | 233 +++++--- .../test_overcloud_external_update.py | 36 ++ tripleoclient/utils.py | 5 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/tripleo_deploy.py | 15 + tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 508 ++--------------- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/workflows/deployment.py | 14 +- 20 files changed, 1193 insertions(+), 635 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4cb0a298..9c80b5a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file From no-reply at openstack.org Tue Jun 8 17:11:19 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 08 Jun 2021 17:11:19 -0000 Subject: [release-announce] tripleo-common 15.2.1 (wallaby) Message-ID: We are psyched to announce the release of: tripleo-common 15.2.1: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.0..15.2.1 ---------------------------------------- acead380 Remove xinetd from the mariadb container 10ea6944 Fix config parsing in memcached healthcheck 41976688 Make the clustercheck healthcheck work with socat 5c5b08b4 Ignore OVN Bridge MAC net for inventory generation 983377ba Disable neutron inventory src if no ctlplane ports e25e523d Ignore non host ports by tag filtering b81b1ea1 Fix site-packages in horizon's extend_start.sh 99ec07c5 Strip final dot of the fqdn hostname and dnsname 0a7cfe39 Skip port if it's on the OVN MAC Net Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/mariadb/mariadb.yaml | 2 +- healthcheck/mariadb | 19 ++++++++--- healthcheck/memcached | 18 ++++++++-- tripleo_common/constants.py | 4 +++ tripleo_common/inventory.py | 39 ++++++++++++++++++++++ 8 files changed, 100 insertions(+), 31 deletions(-) From no-reply at openstack.org Wed Jun 9 13:47:10 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 09 Jun 2021 13:47:10 -0000 Subject: [release-announce] python-neutronclient 7.5.0 (xena) Message-ID: We are thrilled to announce the release of: python-neutronclient 7.5.0: CLI and Client Library for OpenStack Networking This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.5.0 ^^^^^ Deprecation Notes * "neutron" CLI will be removed in 'Z' release. While it has been marked as deprecated for removal for long, all features in "neutron" CLI have been supported in "openstack" CLI (OpenStackClient) as of Xena release and the neutron team plans to remove it in 'Z' release. Consider using "openstack" CLI and Mapping Guide in the OSC documentation would help you. Changes in python-neutronclient 7.4.0..7.5.0 -------------------------------------------- ae39756 Add a release note on deprecation for removal of neutron CLI 76dd26f Set when deprecated neutron client CLI will be removed 439e290 Skip metering functional tests when metering extension is not enabled Diffstat (except docs and test files) ------------------------------------- neutronclient/shell.py | 2 +- .../notes/neutron-cli-deprecation-398823c87270a296.yaml | 10 ++++++++++ 4 files changed, 18 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 9 16:29:55 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 09 Jun 2021 16:29:55 -0000 Subject: [release-announce] osprofiler 3.4.1 Message-ID: We are pleased to announce the release of: osprofiler 3.4.1: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. Changes in osprofiler 3.4.0..3.4.1 ---------------------------------- 951efdc Uncap PrettyTable d153b99 Move flake8 as a pre-commit local target. bcca5bd Dropping lower constraints testing 42d5819 Use py3 as the default runtime for tox 2794b98 Adding pre-commit 22d6bff ignore reno generated artifacts d0d65fd Add Python3 wallaby unit tests ba16314 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .pre-commit-config.yaml | 39 +++++++ .zuul.yaml | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 2 +- test-requirements.txt | 2 + tools/lint.py | 4 +- tools/patch_tox_venv.py | 3 +- tox.ini | 5 +- 12 files changed, 96 insertions(+), 168 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7719bc4..de2d919 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.utils>=3.33.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.2 # BSD +PrettyTable>=0.7.2 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index a227fe4..a2ca153 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27,0 +28,2 @@ jaeger-client>=3.8.0 # Apache-2.0 + +pre-commit>=2.6.0 # MIT From no-reply at openstack.org Thu Jun 10 11:58:07 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 10 Jun 2021 11:58:07 -0000 Subject: [release-announce] oslo.limit 1.4.0 (xena) Message-ID: We are chuffed to announce the release of: oslo.limit 1.4.0: Limit enforcement library to assist with quota calculation. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 1.3.0..1.4.0 ---------------------------------- caa75c1 Add a test fixture 1175b0f Add Enforcer.calculate_usage() efc26ae Upgrade the pre-commit-hooks version 52a7eaa Add Python3 xena unit tests 9ebe3c6 Update master for stable/wallaby 7f16772 Fix requirements issues fc270af Use TOX_CONSTRAINTS_FILE 6115a3e remove unicode from code e4583b6 add py38 matedata Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++-- .zuul.yaml | 3 +- lower-constraints.txt | 8 ---- oslo_limit/fixture.py | 75 ++++++++++++++++++++++++++++++++ oslo_limit/limit.py | 64 ++++++++++++++++++++++++++-- releasenotes/source/conf.py | 16 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 8 +--- 18 files changed, 365 insertions(+), 33 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ecb5e3a..b9fffd4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5 @@ +fixtures>=3.0.0 # Apache-2.0/BSD From no-reply at openstack.org Fri Jun 11 17:04:04 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 11 Jun 2021 17:04:04 -0000 Subject: [release-announce] puppet-ovn 17.5.0 (victoria) Message-ID: We are jazzed to announce the release of: puppet-ovn 17.5.0: Puppet module for OVN This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 17.4.0..17.5.0 ------------------------------------ 406ecb3 Prepare a new release for victoria 490f7e5 Set external_ids:ovn-chassis-mac-mappings 854e7a6 Update TOX_CONSTRAINTS_FILE for stable/victoria d54e95e Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 2 +- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 21 +++++++++++++++ tox.ini | 2 +- 6 files changed, 60 insertions(+), 3 deletions(-) From no-reply at openstack.org Fri Jun 11 18:56:27 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 11 Jun 2021 18:56:27 -0000 Subject: [release-announce] tripleo-heat-templates 14.1.2 (wallaby) Message-ID: We eagerly announce the release of: tripleo-heat-templates 14.1.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.1.2 ^^^^^^ New Features * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. Changes in tripleo-heat-templates 14.1.1..14.1.2 ------------------------------------------------ 3ed600963 Pass custom CephConfigPath parameter to ceph-nfs role b2a8641a5 set ganesha idmap.conf file path and overrides 74e3884b4 Fix cinder's cephx keyring file permissions aaf57f21d Allow customizing podman's [engine]/events_logger ef96bfd19 Include the standalone ganesha tasks when ceph is external 0efd6f067 Disable tunnelled migration f006d0156 Added the posibility of skipping the NFS ping test on the rear installation 218f5f31a Add environment for external network VIP e15bfa6d8 Add OVNCMSOptions to Controller and Networker roles 3030fce6f Remove Ceph cluster replica and PG num from low-memory-usage.yaml 0b26b18e0 Skip cephadm playbook when there is no mon or nfs group 42f59769f Expose the monitoring_stack network to cephadm 1f7de63e5 Use collection FQCN for podman modules 0592cb32b Fix network_cidrs when ManageNetworks: false 8775a8bbe Move ceph_admin_extra_vars logic to tripleo-ansible d6c2740a8 Make clustercheck service accessible over socat acd41a608 Add neutron port tag hint for role name e86165354 Introduce CephHciOsdCount and CephHciOsdType 326452e58 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 36c16a189 Don't add external tasks for roles with zero count f17db7153 Add openstack-tox-tht to the gate bc232904a Fix RoleParameters in tuned-baremetal-ansible.yaml d172a7b58 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ci/environments/scenario001-standalone.yaml | 1 + common/deploy-steps.j2 | 25 ++++++++--- deployed-server/deployed-neutron-port.yaml | 5 +++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 +++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++++ deployment/cephadm/ceph-base.yaml | 24 ++++------- deployment/cephadm/ceph-client.yaml | 12 ++++++ deployment/cephadm/ceph-grafana.yaml | 5 +++ deployment/cephadm/ceph-nfs.yaml | 13 ++++++ deployment/cephadm/ceph-osd.yaml | 32 ++++++++++++++ deployment/cinder/cinder-api-container-puppet.yaml | 2 +- .../cinder/cinder-common-container-puppet.yaml | 50 +++++++++++++--------- deployment/database/mysql-container-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 30 ++----------- .../nova/nova-conductor-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-container-puppet.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 2 +- .../pacemaker/clustercheck-container-puppet.yaml | 19 +++++++- deployment/podman/podman-baremetal-ansible.yaml | 11 ++++- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +++++++- environments/external-network-vip.yaml | 5 +++ environments/low-memory-usage.yaml | 4 -- environments/manila-cephfsganesha-config.yaml | 4 ++ network/network.j2 | 24 +++-------- network/ports/deployed_port.j2 | 5 +++ network/ports/noop.yaml | 5 +++ network/ports/port.j2 | 9 ++++ network/ports/port_from_pool.j2 | 5 +++ network/service_net_map.j2.yaml | 1 + puppet/role.role.j2.yaml | 1 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 +++ roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + zuul.d/layout.yaml | 1 + 49 files changed, 270 insertions(+), 105 deletions(-) From no-reply at openstack.org Mon Jun 14 09:53:46 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 09:53:46 -0000 Subject: [release-announce] os-collect-config 11.0.4 (ussuri) Message-ID: We are ecstatic to announce the release of: os-collect-config 11.0.4: Collect and cache metadata, run hooks on changes. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.3..11.0.4 ------------------------------------------- 1bdb361 Update TOX_CONSTRAINTS_FILE for stable/ussuri 385ad80 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Mon Jun 14 09:55:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 09:55:43 -0000 Subject: [release-announce] tripleo-common 12.4.5 (ussuri) Message-ID: We are stoked to announce the release of: tripleo-common 12.4.5: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.4..12.4.5 ---------------------------------------- 833ef486 Fix config parsing in memcached healthcheck 9e22f65e Fix site-packages in horizon's extend_start.sh 83e63e44 Add an internal index to network_data 813a7382 Don't install dhcp-all-interfaces for redhat 8 onwards 8a3a3194 Add host_vars to define tasks executed before network configurations 314487b9 Fix neutron driver detection for containers params 654dc085 healthcheck_port: drop lsof in favor of awk/find Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- healthcheck/common.sh | 40 ++++++++++++++++------ healthcheck/memcached | 18 ++++++++-- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/image/kolla_builder.py | 12 ++++--- tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ tripleo_common/utils/template.py | 4 +++ 28 files changed, 93 insertions(+), 28 deletions(-) From no-reply at openstack.org Mon Jun 14 09:56:22 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 09:56:22 -0000 Subject: [release-announce] puppet-tripleo 12.6.1 (ussuri) Message-ID: We are satisfied to announce the release of: puppet-tripleo 12.6.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.6.0..12.6.1 ---------------------------------------- d3d1a63c Bump metadata for tripleo ussuri release e525aa15 Add option to set rsyslog reopenOnTruncate parameter for all services 33bfb4a0 Adding nova::network::neutron to nova-conductor e09d2a19 HA: inject public certificates without blocking container c04b6b52 Use puppet-openstack-module-unit-jobs to define unit test jobs 86d357cd Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard d9857e6f Move stonith resource creation to step2 379895e7 stable-only: Pin puppetlabs-haproxy e3c3b7cf Set ovn_chassis_mac_map in ovn::controller Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++++++++---- files/certmonger-rabbitmq-refresh.sh | 23 ++++++++++++++-- manifests/haproxy.pp | 32 ++++++++++++++++++++++ manifests/profile/base/logging/rsyslog.pp | 11 +++++++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++++++++-- manifests/profile/base/neutron/agents/ovn.pp | 22 +++++++++++---- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +++++- metadata.json | 2 +- .../tripleo_profile_base_nova_conductor_spec.rb | 2 ++ zuul.d/layout.yaml | 16 +---------- 12 files changed, 126 insertions(+), 33 deletions(-) From no-reply at openstack.org Mon Jun 14 09:57:39 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 09:57:39 -0000 Subject: [release-announce] tripleo-validations 12.3.5 (ussuri) Message-ID: We jubilantly announce the release of: tripleo-validations 12.3.5: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.4..12.3.5 --------------------------------------------- 56faf91 Use validation_component for Standalone CI jobs ee7208b [overcloud-service-status] Removing pre-upgrade e8c2f87 Check for dangling images 83cd453 Add validation to check DockerInsecureRegistryAddress matches the UC hostname ff820e4 Exposing default variables in playbook 55dad79 Validation should use the public endpoint 62b33cb Make tls_everywhere validations compatible with ansible_facts a6a067a More detail in arg validation e6a1bbb Use a more targeted job for tripleo-validations e85c110 Use static inventory for component CI role and clean component list 25e3240 check-ram is not compat w/ upstream 9b2d173 Fix set by merging two list without duplicate b032b76 Add validation to verify undercloud.conf content. 1795aa0 Add system encoding to pre-update stage. ca830a7 Add update roles on several validations. a6ed71e Add new Update validation groups. 812c052 Add new tripleo-latest-packages-version playbook Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 +++++ playbooks/check-undercloud-conf.yaml | 15 +++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/package-version.yaml | 6 ++ playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 15 +++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 6 ++ roles/check_for_dangling_images/README.md | 37 +++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 +++++++ .../molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++++ .../molecule/default/molecule.yml | 47 ++++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 +++++++++ roles/check_uc_hostname/README.md | 39 ++++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 58 +++++++++++++++++ .../molecule/default/molecule.yml | 49 +++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++++ roles/check_undercloud_conf/defaults/main.yml | 41 ++++++++++++ .../molecule/config_OK/Dockerfile | 37 +++++++++++ .../molecule/config_OK/converge.yml | 45 ++++++++++++++ .../molecule/config_OK/molecule.yml | 52 ++++++++++++++++ .../molecule/config_OK/prepare.yml | 65 +++++++++++++++++++ .../molecule/default/Dockerfile | 37 +++++++++++ .../molecule/default/converge.yml | 55 +++++++++++++++++ .../molecule/default/molecule.yml | 52 ++++++++++++++++ .../molecule/default/prepare.yml | 34 ++++++++++ .../molecule/deprecated_drivers/Dockerfile | 37 +++++++++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++++++++++++++ .../molecule/deprecated_drivers/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_drivers/prepare.yml | 65 +++++++++++++++++++ .../molecule/deprecated_params/Dockerfile | 37 +++++++++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++++++++++++ .../molecule/deprecated_params/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_params/prepare.yml | 51 +++++++++++++++ .../molecule/required_missing/Dockerfile | 37 +++++++++++ .../molecule/required_missing/converge.yml | 71 +++++++++++++++++++++ .../molecule/required_missing/molecule.yml | 52 ++++++++++++++++ .../molecule/required_missing/prepare.yml | 63 +++++++++++++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++++++++++ roles/check_undercloud_conf/tasks/main.yml | 69 +++++++++++++++++++++ .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++--- tripleo_validations/utils.py | 2 +- zuul.d/base.yaml | 9 +++ zuul.d/layout.yaml | 56 +++++++++-------- zuul.d/molecule.yaml | 39 +++++++++++- 68 files changed, 2037 insertions(+), 65 deletions(-) From no-reply at openstack.org Mon Jun 14 09:58:16 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 09:58:16 -0000 Subject: [release-announce] python-tripleoclient 13.4.4 (ussuri) Message-ID: We are gleeful to announce the release of: python-tripleoclient 13.4.4: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 13.4.3..13.4.4 ---------------------------------------------- 09722158 Partial Revert "Don't pass the DNSServers param in undercloud env" 90addcf9 BnR Typo missing some spaces between words on the command help 7cda9f18 BnR added error msg in case there is no inventory e8a0124a Remove --extra-env-vars from the mutually exclusive arg group a2d91833 Fix validations listing when filtering by group(s) 61390cc4 Declare is_failed_validation variable before if statement 65ac1e1d Overcloud image has missing kernel_id and ramdisk_id properties 2b79ac27 Make Python Interpreter option for Ansible Validation Run eabef0b8 Removing todo from undercloud_preflight since 753845 is merged b8661e9e Copy the inventory for standalone deploy in output_dir 226a9078 Use ceph_mon_network to find Ceph monitor IPs for export 0debcde2 Replace exception with LOG.info Diffstat (except docs and test files) ------------------------------------- tripleoclient/constants.py | 5 +- tripleoclient/export.py | 19 +++- tripleoclient/v1/overcloud_backup.py | 12 ++- tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 4 + tripleoclient/v1/tripleo_validator.py | 21 ++-- tripleoclient/v1/undercloud_backup.py | 20 ++-- tripleoclient/v1/undercloud_config.py | 1 + tripleoclient/v1/undercloud_preflight.py | 4 - 14 files changed, 295 insertions(+), 58 deletions(-) From no-reply at openstack.org Mon Jun 14 10:03:28 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 10:03:28 -0000 Subject: [release-announce] tripleo-heat-templates 12.4.4 (ussuri) Message-ID: We are stoked to announce the release of: tripleo-heat-templates 12.4.4: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.4 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * The "OS::TripleO::{{role.name}}::PreNetworkConfig" resource has been restored. This resource can be used to implement any configuration steps executed before network configurations are applied. * The MariaDB tuning parameter for Innodb_buffer_pool_size can now be set via a new TripleO Heat Template parameter 'MysqlInnodbBufferPoolSize'. By default this is undefined. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * The nova-ironic setting for 'max_concurrent_builds' can now be set via the use of a new TripleO Heat templates parameter 'IronicMaxConcurrentBuilds'. It is set to the service default of 10 by default in TripleO Heat templates. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * Now "ExtraConfigPre" resource and "NodeExtraConfig" resource are executed after network configurations are applied in nodes. This is consitent with the previous version with heat software deployment mechanism instead of config-download. * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 12.4.3..12.4.4 ------------------------------------------------ 8e31cbf17 Allow customizing podman's [engine]/events_logger a4e6c8e3c Add dependency on OVNMacAddressNetwork for role ResourceGroup 95835538c Unify cinder's volume and backup kolla_config settings 76059627b Disable tunnelled migration c06ccdffc Add new options for Barbican PKCS#11 backend ad5ab191e Correct metrics_qdr logging path and regex parsing e5d189443 Fix network_cidrs when ManageNetworks: false 3d48d87ed Set tags on all OS::Neutron::Port resources 752498922 Add tags to THT network resources 8014ae223 Add OVNEncapType option to the ovn controller template 976a5e905 Run update tasks with become 0e8be5508 Disable tunneled mode when use_tls_for_live_migration e5cba2899 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml ef575f87f Restore PreNetworkConfig resources c5e24795f Fix RoleParameters in tuned-baremetal-ansible.yaml 9bbd4fe55 Don't assume role has default_route_networks/tags 0a16f3a30 Stop handler flush eafdee6ae HA: fix race when moving VIP during minor update dbfc51597 Switch Octavia external tasks to 'post deploy' 4abeffe64 Stop using (and breaking) /var/tmp for horizon temporary things 010febfbd Moving nova-consoleauth to step4 dfb282b50 Missing client certificate for live-migration with TLS 35b9949dd Add RootStackName to group_vars d81c5544d Add systemd dependency to openvswitch to ovn-controller 10d541806 Disabling LM PostCopy and AutoConverge for RT roles 6342deafc Mount /etc/openldap inside the keystone container 1325566ba Ensure ansible_fqdn is set 124419ca7 Use single NovaLibvirtNetwork to configure instance console components 85e89060b Limit access to sshd used for nova migration 59fcd220f Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" 96d50af58 Expose Innodb_buffer_pool_size 1265a63ed Add OVN chassis macs to hieradata dd496f06c Refactor OVNMacAddressNetwork cab6bbd6c Config parameters for timemaster service c2ba66915 [OVN] Remove check for OVN + Availability Zones b17267791 Expose mistral::rpc_response_timeout as a Heat parameter dd24b3133 Expose max_concurrent_builds as a Heat parameter 8bc099057 ovn: Add neutron-cleanup Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 37 ++++- common/hiera-steps-tasks.yaml | 1 + deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 ++ deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 20 ++- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- .../cinder/cinder-backup-container-puppet.yaml | 51 +----- .../cinder/cinder-backup-pacemaker-puppet.yaml | 31 +--- .../cinder/cinder-common-container-puppet.yaml | 52 +++++++ .../cinder/cinder-volume-container-puppet.yaml | 36 +---- .../cinder/cinder-volume-pacemaker-puppet.yaml | 23 +-- deployment/database/mysql-base.yaml | 11 ++ deployment/horizon/horizon-container-puppet.yaml | 23 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 ++ deployment/keystone/keystone-container-puppet.yaml | 1 + deployment/metrics/qdr-container-puppet.yaml | 4 +- deployment/mistral/mistral-base.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- deployment/nova/nova-compute-container-puppet.yaml | 49 +++--- deployment/nova/nova-ironic-container-puppet.yaml | 9 ++ deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova-migration-target-container-puppet.yaml | 38 +++-- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 ++-- .../octavia/octavia-deployment-config.j2.yaml | 5 +- .../ovn/ovn-controller-container-puppet.yaml | 27 +++- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- deployment/podman/podman-baremetal-ansible.yaml | 9 ++ .../timemaster/timemaster-baremetal-ansible.yaml | 171 +++++++++++++++++++++ deployment/timesync/chrony-baremetal-ansible.yaml | 2 - deployment/tls/undercloud-tls.yaml | 3 + deployment/tuned/tuned-baremetal-ansible.yaml | 19 ++- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- environments/network-isolation-v6-all.j2.yaml | 2 +- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 8 +- network/config/bond-with-vlans/role.role.j2.yaml | 6 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 14 +- network/config/multiple-nics/role.role.j2.yaml | 12 +- .../role.role.j2.yaml | 4 +- network/config/single-nic-vlans/role.role.j2.yaml | 4 +- network/network.j2 | 46 +++--- network/networks.j2.yaml | 3 - network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 16 ++ network/ports/port.j2 | 39 +++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 4 +- overcloud.j2.yaml | 21 ++- puppet/role.role.j2.yaml | 15 +- ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 ++ .../notes/bug-1907214-df2f07cbacbe8a24.yaml | 13 ++ .../innodb-tuning-param-e71d2fd727c450ec.yaml | 6 + ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 ++ ...ova-max_concurrent_builds-f900d84f35704452.yaml | 6 + ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 ++ ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + tools/process-templates.py | 5 + 66 files changed, 821 insertions(+), 282 deletions(-) From no-reply at openstack.org Mon Jun 14 10:08:10 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 10:08:10 -0000 Subject: [release-announce] tripleo-image-elements 12.0.2 (ussuri) Message-ID: We are jazzed to announce the release of: tripleo-image-elements 12.0.2: Disk image builder elements for deploying OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.0.1..12.0.2 ------------------------------------------------ 8ff41f23 additionally remove eth* devices off the overcloud-full image 49c16a36 ensure any ens3 interface is nuked during image build 2b5e3aae Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 7 +++++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- 9 files changed, 13 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index 3687e2d8..31f422cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jun 14 10:12:56 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 10:12:56 -0000 Subject: [release-announce] os-refresh-config 11.0.1 (ussuri) Message-ID: We are ecstatic to announce the release of: os-refresh-config 11.0.1: Refresh system configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 11.0.0..11.0.1 ------------------------------------------- 2790bcc Update TOX_CONSTRAINTS_FILE for stable/ussuri d82627a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Mon Jun 14 15:23:44 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:23:44 -0000 Subject: [release-announce] tripleo-common 16.1.0 (xena) Message-ID: We are glad to announce the release of: tripleo-common 16.1.0: A common library for TripleO workflows. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 16.1.0 ^^^^^^ Deprecation Notes * The DeployArtifactURL(s) server is no longer makes any use of Swift when using built-in scripts to upload artifacts. The old *upload- swift-artifacts* file is now a symlink pointed to the updated *upload-artifacts* script. While the file has changed, the API remains the same. The symlink will ensure that legacy automation remains functional while moving over to the new script. The symlink will be removed in a future release. Changes in tripleo-common 16.0.0..16.1.0 ---------------------------------------- aaa981c9 Move rabbitmq healthcheck to something more modern fbc188dd Remove xinetd from the mariadb container 64b6bd6c Do not fail if initiatorname.iscsi does not exist 9532e28e Changed minversion in tox to 3.18.0 755cc609 Remove references to tripleo-validations legacy directory 5e469e42 Remove libcgroup-tools from libvirt container 37369ca4 Make the clustercheck healthcheck work with socat 3f84495b Fix config parsing in memcached healthcheck 5d6649fc Disable neutron inventory src if no ctlplane ports 6c8fbd33 Fix site-packages in horizon's extend_start.sh 0a35f945 Ignore non host ports by tag filtering bac04330 Strip final dot of the fqdn hostname and dnsname 40198b1d Remove the leftover module in tripleo_common.actions d3286377 Partial-Revert:Skip port if missing mandatory tag 14441478 Skip port if missing mandatory tag 8877d0f8 Ignore OVN Bridge MAC net for inventory generation 31e87d8a setup.cfg: Replace dashes with underscores 5ab78473 Removed mentions of mistral from the doc f7cfed9e Add rhosp-release rpm in rhel images 4bf4158e Delete python2 based images 9793ddde Remove Keepalived service 9a37599c Add Python3 xena unit tests 902855b2 Update master for stable/wallaby 4a2e95d1 Add interface-names to overcloud-hardened-images-uefi-rhel8 a8d92436 Update artifact tooling for swiftless underclouds Diffstat (except docs and test files) ------------------------------------- README.rst | 86 ---------- container-images/kolla/horizon/extend_start.sh | 3 +- .../tcib/base/keepalived/keepalived.yaml | 6 - container-images/tcib/base/mariadb/mariadb.yaml | 2 +- container-images/tcib/base/os/iscsid/iscsid.yaml | 2 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 - container-images/tripleo_containers.yaml | 2 - container-images/tripleo_containers.yaml.j2 | 9 -- healthcheck/mariadb | 19 ++- healthcheck/memcached | 18 ++- healthcheck/rabbitmq | 2 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + .../overcloud-hardened-images-uefi-rhel8.yaml | 5 +- image-yaml/overcloud-hardened-images-uefi.yaml | 45 ------ image-yaml/overcloud-hardened-images.yaml | 44 ------ image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + image-yaml/overcloud-images.yaml | 58 ------- image-yaml/overcloud-realtime-compute.yaml | 37 ----- ...oyArtifactURLs-Simplified-e3993493022653ab.yaml | 9 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + scripts/upload-artifacts | 133 ++++++++++++++++ scripts/upload-puppet-modules | 16 +- scripts/upload-swift-artifacts | 174 +-------------------- setup.cfg | 8 +- tox.ini | 6 +- tripleo_common/actions/__init__.py | 4 - tripleo_common/actions/ansible.py | 31 ---- tripleo_common/constants.py | 5 +- tripleo_common/inventory.py | 39 +++++ tripleo_common/utils/ansible.py | 30 +--- zuul.d/layout.yaml | 2 +- 45 files changed, 286 insertions(+), 736 deletions(-) From no-reply at openstack.org Mon Jun 14 15:24:10 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:24:10 -0000 Subject: [release-announce] puppet-tripleo 15.0.0 (xena) Message-ID: We are ecstatic to announce the release of: puppet-tripleo 15.0.0: Puppet module for OpenStack TripleO This release is part of the xena release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New hiera setting *rbd_disk_cachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * Added "scripts" parameters for class tripleo::profile::base::metrics::collectd::sensubility enabling download of various scripts for usage within sensubility check definitions. Supported transfer method is HTTP only currently. Changes in puppet-tripleo 14.1.0..15.0.0 ---------------------------------------- afd848ae Bump major for metadata.json to mark the X cycle dee8091c Add support for ovn clustered databases fad7e3fb Revert "Allow ovn_db_host to be of type array" 6392cc66 Adding nova::network::neutron to nova-conductor 1aa0caa3 Restore the spec file which was deleted unexpectedly c204077a Add posibility to download scripts for sensubility f12a143f Allow overriding RBD disk cache modes 8ae1f90f Stop using removed parameters 5c11340b Add socat listen backend to clustercheck service 5af44ea6 Glance: Include new puppet classes for castellan options f08d83de Fix lint errors with the latest lint packages ee2f2501 Fix where long_description_content_type is placed 38f00b71 Add option to set rsyslog reopenOnTruncate parameter for all services 22c329eb Update master for stable/wallaby f09aa48d Introduce nova virtlogd wrapper ff7636d3 Replace deprecated ceilometer::agent::auth 6691c97e nova: include nova::cinder in more common place 5b043791 Do not include client classes Diffstat (except docs and test files) ------------------------------------- manifests/host/liquidio/compute.pp | 4 -- manifests/profile/base/aodh.pp | 1 - manifests/profile/base/barbican.pp | 1 - .../profile/base/ceilometer/agent/notification.pp | 2 +- manifests/profile/base/ceilometer/agent/polling.pp | 2 +- manifests/profile/base/database/mysql.pp | 2 +- manifests/profile/base/database/redis.pp | 6 +- manifests/profile/base/glance/api.pp | 6 +- manifests/profile/base/gnocchi.pp | 1 - manifests/profile/base/haproxy.pp | 2 +- manifests/profile/base/logging/rsyslog.pp | 10 +++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++- .../profile/base/metrics/collectd/sensubility.pp | 63 ++++++++++++++++++--- .../base/metrics/collectd/sensubility_script.pp | 64 ++++++++++++++++++++++ manifests/profile/base/mistral.pp | 1 - manifests/profile/base/neutron/agents/ovn.pp | 29 ++++++---- manifests/profile/base/neutron/ovn_metadata.pp | 27 ++++++--- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 34 ++++++++---- manifests/profile/base/nova.pp | 1 + manifests/profile/base/nova/compute.pp | 1 - .../profile/base/nova/compute_libvirt_shared.pp | 7 ++- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/nova/virtlogd_wrapper.pp | 55 +++++++++++++++++++ manifests/profile/base/nova/wrappers/virtlogd.pp | 43 +++++++++++++++ manifests/profile/pacemaker/clustercheck.pp | 13 ++++- manifests/profile/pacemaker/database/mysql.pp | 2 +- .../profile/pacemaker/database/mysql_bundle.pp | 2 +- manifests/profile/pacemaker/database/redis.pp | 10 ++-- .../profile/pacemaker/database/redis_bundle.pp | 8 +-- manifests/profile/pacemaker/rabbitmq.pp | 4 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 4 +- metadata.json | 2 +- .../nova_virtlogd_wrapper-43c6c319db2a36ef.yaml | 16 ++++++ .../rbd-disk-cache-modes-b6b75fa2e52b8915.yaml | 5 ++ .../sensubility-scripts-994014edfcc2da88.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 2 +- spec/classes/tripleo_profile_base_aodh_spec.rb | 4 -- spec/classes/tripleo_profile_base_barbican_spec.rb | 2 - ...file_base_ceilometer_agent_notification_spec.rb | 9 +-- ...o_profile_base_ceilometer_agent_polling_spec.rb | 7 +-- .../tripleo_profile_base_glance_api_spec.rb | 8 +++ spec/classes/tripleo_profile_base_gnocchi_spec.rb | 4 -- ...ofile_base_metrics_collectd_sensubility_spec.rb | 33 +++++++++++ .../tripleo_profile_base_metrics_collectd_spec.rb | 1 + spec/classes/tripleo_profile_base_mistral_spec.rb | 4 -- .../tripleo_profile_base_nova_compute_spec.rb | 4 -- .../tripleo_profile_base_nova_conductor_spec.rb | 63 +++++++++++++++++++++ spec/classes/tripleo_profile_base_nova_spec.rb | 4 ++ ...ase_metrics_collectd_sensubility_script_spec.rb | 45 +++++++++++++++ spec/fixtures/hieradata/default.yaml | 1 + templates/nova/virtlogd.epp | 52 ++++++++++++++++++ 53 files changed, 599 insertions(+), 107 deletions(-) From no-reply at openstack.org Mon Jun 14 15:25:32 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:25:32 -0000 Subject: [release-announce] os-net-config 15.0.0 (xena) Message-ID: We are overjoyed to announce the release of: os-net-config 15.0.0: OpenStack network configuration This release is part of the xena release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 14.1.0..15.0.0 --------------------------------------- 352227b Add Python3 xena unit tests f4e599a Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 1 deletion(-) From no-reply at openstack.org Mon Jun 14 15:25:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:25:43 -0000 Subject: [release-announce] tripleo-puppet-elements 15.0.0 (xena) Message-ID: We are ecstatic to announce the release of: tripleo-puppet-elements 15.0.0: Puppet building rules for OpenStack images. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 14.1.0..15.0.0 ------------------------------------------------- 0d0067a Remove pankoclient 71f7e94 Add Python3 xena unit tests 3bc1835 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .../install.d/package-installs-overcloud-openstack-clients | 1 - releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/layout.yaml | 2 +- 4 files changed, 8 insertions(+), 2 deletions(-) From no-reply at openstack.org Mon Jun 14 15:26:36 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:26:36 -0000 Subject: [release-announce] tripleo-validations 15.0.0 (xena) Message-ID: We are amped to announce the release of: tripleo-validations 15.0.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features * RHEL-8.3 kernel disabled the Intel “TSX” (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process. This also impacts upstream CentOS systems. Changes in tripleo-validations 14.1.0..15.0.0 --------------------------------------------- 9f7dbbf Remove the post-update groups. ee6e666 Use OS_CLOUD environment variable ede25c3 Compute TSX validation 443f8d3 Add Validation Development Workflow Documentation 83ba5e3 Introduce new Ansible validation_init role. 089eaf9 Update Validations Framework IRC channels 6956d74 Use and ownership info for the ceph_pools_pg_protection module 81bd49d Use and ownership info for the check_flavors module 201f545 Use and ownership info for the ovs_dpdk_pmd_cpus_check module. 11cdcb1 Use and ownership info for the icmp_ping module. ba98421 Use and ownership info for the node_disk module. 0dad256 Use and ownership info for the pacemaker module e7c06ec Use and ownership info for the ip_range module. 55066de Use and ownership info for the verify_profiles module 746cd0d Use and ownership info for the switch_vlans module 897ab27 Use and ownership info for the network_environment module 6313bd0 requirements-check enabled d2ff511 Removing python-tripleoclient aac0c5f Use validation_component for Standalone CI jobs ad226f9 Basic tests for check_flavors module 5db00af Basic tests for pacemaker module d61e645 Bump molecule to 3.3.1 e6bece7 Add py39 jobs f4399e7 [overcloud-service-status] Removing pre-upgrade ea4b8c3 Trigger molecule jobs when modifying molecule-requirements.txt file c551910 Remove workaround for tox-ansible and global molecule config ba689ae Increasing number of files triggering build of docs 66193a6 Add shared configuration for all molecule test a129551 Check for dangling images ec3b1ab Tests of lookup plugin initiation for glance_images.py 30fc688 Test classes for lookup plugins a0e3182 Update master for stable/wallaby cdad3a0 Bump pre-commit repositories 7577bd9 Refactoring of ovs_dpdk_pmd_cpus_check tests. 06ce5bf Quick documentation content reorganization 5b2aa89 Remove tripleo-validations CI roles 2a875fd Add validation to check DockerInsecureRegistryAddress matches the UC hostname eeb6d71 Mocking superfluous imports fdd309f New utils.py tests be9d283 stestr dir is now intentionally untracked Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 35 ++ .config/molecule/config.yml | 70 ++++ .pre-commit-config.yaml | 13 +- CONTRIBUTING.rst | 61 +++- README.rst | 10 +- _skeleton_role_/molecule/default/Dockerfile | 37 --- _skeleton_role_/molecule/default/molecule.yml | 49 --- ci/playbooks/pre.yml | 19 -- ci/playbooks/run.yml | 2 +- .../developer_guide.rst} | 365 ++++++++++++++------- .../roles/role-check_for_dangling_images.rst | 8 + library/ceph_pools_pg_protection.py | 38 ++- library/check_flavors.py | 6 +- library/icmp_ping.py | 6 +- library/ip_range.py | 6 +- library/network_environment.py | 11 +- library/node_disks.py | 5 +- library/ovs_dpdk_pmd_cpus_check.py | 6 +- library/pacemaker.py | 6 +- library/switch_vlans.py | 6 +- library/verify_profiles.py | 6 +- molecule-requirements.txt | 5 +- playbooks/check-for-dangling-images.yaml | 13 + playbooks/check-uc-hostname.yaml | 14 + playbooks/compute-tsx.yaml | 31 ++ playbooks/overcloud-service-status.yaml | 1 - .../compute-tsx-validation-5d976a3fc5166536.yaml | 13 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 1 - role-addition.yml | 141 +------- .../molecule/ceph-ansible-installed/Dockerfile | 37 --- .../molecule/ceph-ansible-installed/molecule.yml | 53 +-- roles/ceph/molecule/default/Dockerfile | 37 --- roles/ceph/molecule/default/molecule.yml | 50 +-- roles/check_for_dangling_images/README.md | 37 +++ roles/check_for_dangling_images/defaults/main.yml | 21 ++ .../molecule/default/converge.yml | 60 ++++ .../molecule/default/molecule.yml | 3 + roles/check_for_dangling_images/tasks/main.yml | 28 ++ .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 35 +- .../check_rhsm_version/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 51 +-- .../molecule/rhsm_mismatch/Dockerfile | 37 --- .../molecule/rhsm_mismatch/molecule.yml | 53 +-- roles/check_uc_hostname/README.md | 39 +++ roles/check_uc_hostname/defaults/main.yml | 23 ++ .../molecule/default/converge.yml | 58 ++++ .../molecule/default/molecule.yml | 3 + .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++ .../molecule/config_OK/Dockerfile | 37 --- .../molecule/config_OK/molecule.yml | 53 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 53 +-- .../molecule/deprecated_drivers/Dockerfile | 37 --- .../molecule/deprecated_drivers/molecule.yml | 53 +-- .../molecule/deprecated_params/Dockerfile | 37 --- .../molecule/deprecated_params/molecule.yml | 53 +-- .../molecule/required_missing/Dockerfile | 37 --- .../molecule/required_missing/molecule.yml | 53 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/compute_tsx/README.md | 64 ++++ roles/compute_tsx/defaults/main.yml | 26 ++ roles/compute_tsx/molecule/default/converge.yml | 79 +++++ roles/compute_tsx/molecule/default/molecule.yml | 3 + roles/compute_tsx/tasks/main.yml | 82 +++++ roles/compute_tsx/vars/main.yml | 23 ++ roles/container_status/molecule/default/Dockerfile | 37 --- .../container_status/molecule/default/molecule.yml | 50 +-- roles/controller_token/molecule/default/Dockerfile | 37 --- .../controller_token/molecule/default/molecule.yml | 50 +-- .../controller_ulimits/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../ctlplane_ip_range/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/dhcp_validations/molecule/default/Dockerfile | 37 --- .../dhcp_validations/molecule/default/molecule.yml | 50 +-- roles/frr_status/molecule/default/Dockerfile | 37 --- roles/frr_status/molecule/default/molecule.yml | 50 +-- roles/frr_status/molecule/faulty/Dockerfile | 37 --- roles/frr_status/molecule/faulty/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/image_serve/molecule/default/Dockerfile | 37 --- roles/image_serve/molecule/default/molecule.yml | 38 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/node_disks/molecule/default/Dockerfile | 37 --- roles/node_disks/molecule/default/molecule.yml | 50 +-- roles/node_health/molecule/default/Dockerfile | 37 --- roles/node_health/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/nova_status/molecule/default/Dockerfile | 37 --- roles/nova_status/molecule/default/molecule.yml | 50 +-- roles/nova_svirt/molecule/default/Dockerfile | 37 --- roles/nova_svirt/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 38 +-- .../molecule/deprecated_services/Dockerfile | 37 --- .../molecule/deprecated_services/molecule.yml | 38 +-- .../molecule/down_services/Dockerfile | 37 --- .../molecule/down_services/molecule.yml | 38 +-- roles/overcloud_service_status/vars/main.yml | 1 - roles/ovs_dpdk_pmd/molecule/default/Dockerfile | 37 --- roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 50 +-- roles/pacemaker_status/molecule/default/Dockerfile | 37 --- .../pacemaker_status/molecule/default/molecule.yml | 50 +-- roles/package_version/molecule/default/Dockerfile | 37 --- .../package_version/molecule/default/molecule.yml | 50 +-- roles/rabbitmq_limits/molecule/default/Dockerfile | 37 --- .../rabbitmq_limits/molecule/default/molecule.yml | 50 +-- roles/repos/molecule/default/Dockerfile | 37 --- roles/repos/molecule/default/molecule.yml | 50 +-- roles/stack_health/molecule/default/Dockerfile | 37 --- roles/stack_health/molecule/default/molecule.yml | 50 +-- roles/stonith_exists/molecule/default/Dockerfile | 37 --- roles/stonith_exists/molecule/default/molecule.yml | 50 +-- roles/switch_vlans/molecule/default/Dockerfile | 37 --- roles/switch_vlans/molecule/default/molecule.yml | 50 +-- roles/system_encoding/molecule/default/Dockerfile | 37 --- .../system_encoding/molecule/default/molecule.yml | 50 +-- roles/tls_everywhere/molecule/default/Dockerfile | 37 --- roles/tls_everywhere/molecule/default/molecule.yml | 35 +- roles/tripleo_validations/defaults/main.yml | 26 -- roles/tripleo_validations/tasks/main.yml | 16 - roles/tripleo_validations/tasks/run.yml | 42 --- roles/tripleo_validations/tasks/test_script.yml | 13 - roles/tripleo_validations/vars/main.yml | 16 - roles/undercloud_debug/molecule/default/Dockerfile | 37 --- .../undercloud_debug/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../non-persistent-token-format/Dockerfile | 37 --- .../non-persistent-token-format/molecule.yml | 50 +-- roles/validation_init/README.md | 47 +++ roles/validation_init/defaults/main.yml | 28 ++ .../files/_skeleton_role_}/defaults/main.yml.j2 | 2 +- .../files/_skeleton_role_}/handlers/main.yml | 2 +- .../molecule/default/converge.yml.j2 | 2 +- .../_skeleton_role_/molecule/default/molecule.yml | 3 + .../_skeleton_role_/molecule/default/prepare.yml | 25 ++ .../_skeleton_role_/molecule/default/verify.yml | 24 ++ .../files/_skeleton_role_}/tasks/main.yml.j2 | 2 +- .../files/_skeleton_role_}/vars/main.yml.j2 | 2 +- .../validation_init/molecule/default/converge.yml | 62 ++++ .../validation_init/molecule/default/molecule.yml | 3 + roles/validation_init/molecule/default/prepare.yml | 96 ++++++ roles/validation_init/molecule/default/verify.yml | 137 ++++++++ roles/validation_init/tasks/main.yml | 180 ++++++++++ roles/validation_init/templates/README.md.j2 | 39 +++ scripts/tripleo-ansible-inventory | 4 +- test-requirements.txt | 1 - tox.ini | 9 +- .../lookup_plugins/test_introspection_data.py | 36 ++ .../test_nova_hypervisor_statistics.py | 37 +++ zuul.d/base.yaml | 2 +- zuul.d/layout.yaml | 7 + zuul.d/molecule.yaml | 94 +++++- 214 files changed, 3033 insertions(+), 5040 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index ebd0bdd..c5a69f4 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -4,2 +4,3 @@ ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 +jinja2>=2.8.0 +molecule>=3.3.1,<4 # MIT +molecule-podman # MIT diff --git a/requirements.txt b/requirements.txt index 7c0b81b..4acdf4e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +12,0 @@ python-ironic-inspector-client>=3.1.1 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fa524d1..fbb1c7e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -20 +19,0 @@ requests-mock>=1.8.0 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jun 14 15:28:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:28:43 -0000 Subject: [release-announce] tripleo-heat-templates 15.0.0 (xena) Message-ID: We contentedly announce the release of: tripleo-heat-templates 15.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * New config option "OVNEncapType" was added to the ovn-controller- container-puppet.yaml module. It can be used to define what encapsulation type will be used in the deployment. * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. * The "glance_api_cron" container has been introduced, which executes db purge job for Glance service. Use GlanceCronDbPurge* parameters to override cron parameters. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New parameter *RbdDiskCachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * A new service, OS::TripleO::Services::UndercloudUpgradeEphemeralHeat is added to the Undercloud role. The service is mapped to OS::Heat::None by default, but when environments/lifecycle /undercloud-upgrade- prepare.yaml is included, the service will be enabled and will migrate any already deployed stacks in the undercloud's Heat instance to be able to be used with the ephemeral Heat deployment option from tripleoclient. * This changes the ServiceNetMap and VipSubnetMap interfaces to allow for server side env merging. This would, for example, allow for adding network for a new services without having to specify complete ServiceNetMap in parameter_defaults section of an environment file. Upgrade Notes ************* * With the change to ServiceNetMap/VipSubnetMap interface, existing environments where they are overridden have to specify 'merge' strategy for the parameters in a new 'parameter_merge_strategies' section. Other Notes *********** * In Wallaby, dcn-hci.yaml has been renamed to dcn-storage.yaml though a copy of dcn-hci.yaml was kept in place for backwards compatability until Xena. With the Xena release dcn-hci.yaml has been removed. Changes in tripleo-heat-templates 14.1.0..15.0.0 ------------------------------------------------ 1662600e6 HA minor update: fix bad pcs invocation 6e67e7377 Fix typo that breaks Octavia db sync step 36e680fee Remove iscsi deploy interface from minion node 289cfd7a5 Fix typo in ceilometer-write-qdr environment file 0f5246410 Add alertmanager port parameter 00f930049 Set ganesha idmap.conf file path and overrides 02e50c163 Nova: Remove unused EnableSQLAlchemyCollectd from base template b7fe78758 Update rhsm repo examples for RHEL8 deployments 7150a747b Pass custom CephConfigPath parameter to ceph-nfs role b252d4573 Add OS::TripleO::UndercloudUpgradeEphemeralHeat 4ea2a6eb7 Allow customizing podman's [engine]/events_logger ed8bdde21 Set default for network.ip_subnet 45fca9e02 Ignore puppet_config is an empty dict 2b9b8eed9 Switch barbican actions to use kolla_config f1cd8006f Fix cinder's cephx keyring file permissions dbb4f619a Disable tunnelled migration 8e052715c Use kolla_config for other actions 3ecad17ed Map RedisVipPort and OVNDBsVipPort to OS::Heat::None 5ca2702b1 Temporarily remove the unbound resolver from scenario 003 49c49d3c0 Include the standalone ganesha tasks when ceph is external 9a42686dc set ganesha idmap.conf file path and overrides f38d6cef0 Fix VLAN placement d297c822c Add environment for external network VIP 8a3cf6aa8 Add param for RBD disk cache modes e40a346d7 Use collection FQCN for podman modules 83668920e Fix octavia_nodes rendering in octavia-deployment-config.j2.yaml 859f31303 Breakdown the deploy-steps playbook 181505145 Fix network_cidrs when ManageNetworks: false c761ebeca Simplify rest of the service templates 4c9b1ba81 Simplify swift service templates b356d3d1e Simplify rabbitmq service templates 464bc1e7f Simplify sshd, timemaster and timesync service templates 85bc69916 Simplify qdrouterd and snmp service templates 7a9cc5c83 Simplify placement and podman service templates 9642f034b Skip cephadm playbook when there is no mon or nfs group 5541696d4 Simplify jinja for primary_role_name 65ddeed5f libvirt: fix formatting of the log_outputs parameter 127a8945f Fix artifact module usage 2aa1f6364 Cleanup optional flag for conf.modules.d 66c964bf9 Pass scripts list for download for sensubility ad95ac04e Make clustercheck service accessible over socat aeaaa90b3 Remove deprecated dcn-hci.yaml 866645db1 Add OVNCMSOptions to Controller and Networker roles b253d564f Use server side env merging for ServiceNetMap/VipSubnetMap 807d5a6e5 Support additional IP so bind and unbound can collocate f606968dd Simplify pacemaker service templates e172a7ff4 Simplify openvswitch and ovn service templtes 094918d85 Simplify octavia service templates 0a4904aff Simplify nova service templates 9fb6b36f1 Move ceph_admin_extra_vars logic to tripleo-ansible 36648cf7f Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 3a472cbbe Disable tunneled mode when use_tls_for_live_migration 96a2c3742 Remove unused cvol_active_active_tls_enabled condition 659cc5527 Add neutron port tag hint for role name 5369ff9bd Expose the monitoring_stack network to cephadm 86daa77b3 Added the posibility of skipping the NFS ping test on the rear installation f14bfb14c Introduce CephHciOsdCount and CephHciOsdType c65058889 Do not log amphora ssh keys e270d5329 Add openstack-tox-tht to the gate 89f596012 Fix container security_opts type 7fd0dd5d4 Don't add external tasks for roles with zero count 4af0c6cca Don't assume every role has default_route_networks 742dc894f Stop handler flush 4872e36c0 Add option for enabling rsyslog reopenOnTruncate 6e236a4e1 Fix RoleParameters in tuned-baremetal-ansible.yaml da7bcec27 Add base Neutron service plugins to BGPVPN 92f722a05 Do not ask for cephdashboard certificates when it is disabled a120ada72 Refactor OVN bridge MAC addresses a8f527d8d Fix hiera variable used to set cinder's backend_host dad101720 Simplify neutron service templates 1b1960e4c Add release note for the OVNEncapType 49415d04b Introduce nova virtlogd wrapper c5c558229 Simplify metrics and messaging service templates 37bb2ecce Add glance db purge job dc083686d Remove heat::heat_keystone_clients_url definition e5a5fc97e Enable configuration of omamqp1 plugin 1f0f6f332 Remove Ceph cluster replica and PG num from low-memory-usage.yaml 1925e85fd CI - Add vip_data file Diffstat (except docs and test files) ------------------------------------- ci/environments/disable-unbound.yaml | 4 +- ci/environments/multinode-core.yaml | 4 +- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 1 - ci/vip_data.yaml | 6 + common/deploy-steps-playbooks-common.yaml | 7 +- common/deploy-steps.j2 | 139 +++++-- common/services/role.role.j2.yaml | 4 +- .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-neutron-port.yaml | 5 + deployment/README.rst | 6 +- deployment/aide/aide-baremetal-ansible.yaml | 4 +- deployment/aodh/aodh-api-container-puppet.yaml | 26 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 4 +- .../aodh/aodh-listener-container-puppet.yaml | 4 +- .../aodh/aodh-notifier-container-puppet.yaml | 4 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 4 +- deployment/auditd/auditd-baremetal-puppet.yaml | 4 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 11 +- .../barbican/barbican-api-container-puppet.yaml | 207 +++++---- .../barbican/barbican-backend-dogtag-puppet.yaml | 4 +- .../barbican/barbican-backend-kmip-puppet.yaml | 4 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 4 +- .../barbican-backend-simple-crypto-puppet.yaml | 4 +- deployment/barbican/barbican-client-puppet.yaml | 4 +- .../ceilometer-agent-central-container-puppet.yaml | 18 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-base.yaml | 9 +- deployment/ceph-ansible/ceph-client.yaml | 9 +- deployment/ceph-ansible/ceph-external.yaml | 9 +- deployment/ceph-ansible/ceph-grafana.yaml | 9 +- deployment/ceph-ansible/ceph-mds.yaml | 9 +- deployment/ceph-ansible/ceph-mgr.yaml | 9 +- deployment/ceph-ansible/ceph-mon.yaml | 9 +- deployment/ceph-ansible/ceph-nfs.yaml | 18 +- deployment/ceph-ansible/ceph-osd.yaml | 9 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 9 +- deployment/ceph-ansible/ceph-rgw.yaml | 9 +- deployment/cephadm/ceph-base.yaml | 33 +- deployment/cephadm/ceph-client.yaml | 21 +- deployment/cephadm/ceph-external.yaml | 9 +- deployment/cephadm/ceph-grafana.yaml | 15 +- deployment/cephadm/ceph-mds.yaml | 9 +- deployment/cephadm/ceph-mgr.yaml | 76 ++-- deployment/cephadm/ceph-mon.yaml | 9 +- deployment/cephadm/ceph-nfs.yaml | 24 +- deployment/cephadm/ceph-osd.yaml | 41 +- deployment/cephadm/ceph-rbdmirror.yaml | 9 +- deployment/cephadm/ceph-rgw.yaml | 9 +- deployment/certs/ca-certs-baremetal-puppet.yaml | 4 +- deployment/cinder/cinder-api-container-puppet.yaml | 39 +- .../cinder-backend-dellemc-powerflex-puppet.yaml | 4 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 4 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 4 +- .../cinder-backend-dellemc-unity-puppet.yaml | 4 +- .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 4 +- .../cinder-backend-dellemc-xtremio-puppet.yaml | 4 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 4 +- .../cinder/cinder-backend-netapp-puppet.yaml | 4 +- .../cinder/cinder-backend-nvmeof-puppet.yaml | 4 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 4 +- .../cinder/cinder-common-container-puppet.yaml | 54 ++- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 4 +- .../cinder/cinder-volume-container-puppet.yaml | 11 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- .../openstack-clients-baremetal-ansible.yaml | 4 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 4 +- deployment/containers-common.yaml | 21 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 4 +- deployment/database/mysql-container-puppet.yaml | 6 +- deployment/database/mysql-pacemaker-puppet.yaml | 4 +- deployment/database/redis-base-puppet.yaml | 4 +- deployment/database/redis-container-puppet.yaml | 4 +- deployment/database/redis-pacemaker-puppet.yaml | 4 +- .../liquidio-compute-config-container-puppet.yaml | 4 +- .../cinder-backend-dellemc-vxflexos-puppet.yaml | 4 +- .../cinder/cinder-backend-scaleio-puppet.yaml | 4 +- .../mistral/mistral-api-container-puppet.yaml | 34 +- deployment/deprecated/mistral/mistral-base.yaml | 4 +- .../mistral/mistral-engine-container-puppet.yaml | 4 +- .../mistral-event-engine-container-puppet.yaml | 4 +- .../mistral/mistral-executor-container-puppet.yaml | 4 +- deployment/deprecated/multipathd-container.yaml | 4 +- .../novajoin/ipaclient-baremetal-ansible.yaml | 4 +- .../novajoin/novajoin-container-puppet.yaml | 4 +- .../deprecated/zaqar/zaqar-container-puppet.yaml | 18 +- deployment/etcd/etcd-container-puppet.yaml | 7 +- .../designate/designate-api-container-puppet.yaml | 4 +- .../experimental/designate/designate-base.yaml | 4 +- .../designate/designate-bind-container.yaml | 4 +- .../designate-central-container-puppet.yaml | 30 +- .../designate/designate-mdns-container-puppet.yaml | 4 +- .../designate-producer-container-puppet.yaml | 4 +- .../designate/designate-sink-container-puppet.yaml | 4 +- .../designate-worker-container-puppet.yaml | 4 +- deployment/frr/frr-container-ansible.yaml | 4 +- deployment/glance/glance-api-container-puppet.yaml | 97 ++++- .../glance/glance-api-edge-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 7 +- deployment/gnocchi/gnocchi-base.yaml | 4 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 4 +- deployment/haproxy/haproxy-container-puppet.yaml | 7 +- .../haproxy/haproxy-edge-container-puppet.yaml | 4 +- .../haproxy-internal-tls-certmonger.j2.yaml | 4 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 +- .../haproxy/haproxy-public-tls-certmonger.yaml | 4 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 4 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 7 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 4 +- deployment/heat/heat-api-container-puppet.yaml | 7 +- deployment/heat/heat-base-puppet.yaml | 5 +- deployment/heat/heat-engine-container-puppet.yaml | 23 +- deployment/horizon/horizon-container-puppet.yaml | 7 +- .../image-serve/image-serve-baremetal-ansible.yaml | 4 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 4 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 4 +- deployment/ironic/ironic-api-container-puppet.yaml | 22 +- deployment/ironic/ironic-base-puppet.yaml | 4 +- .../ironic/ironic-conductor-container-puppet.yaml | 4 +- .../ironic/ironic-inspector-container-puppet.yaml | 18 +- .../ironic-neutron-agent-container-puppet.yaml | 4 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 10 +- deployment/iscsid/iscsid-container-puppet.yaml | 4 +- deployment/kernel/kernel-baremetal-ansible.yaml | 4 +- .../kernel-boot-params-baremetal-ansible.yaml | 4 +- deployment/keystone/keystone-container-puppet.yaml | 9 +- deployment/logging/files/nova-libvirt.yaml | 34 +- deployment/logging/rsyslog-baremetal-ansible.yaml | 9 +- deployment/logging/rsyslog-container-puppet.yaml | 53 ++- .../logging/rsyslog-sidecar-container-puppet.yaml | 4 +- deployment/logging/stdout/nova-libvirt.yaml | 34 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/logrotate/tmpwatch-install.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 23 +- deployment/manila/manila-backend-cephfs.yaml | 4 +- deployment/manila/manila-backend-isilon.yaml | 4 +- deployment/manila/manila-backend-netapp.yaml | 4 +- deployment/manila/manila-backend-unity.yaml | 4 +- deployment/manila/manila-backend-vmax.yaml | 4 +- deployment/manila/manila-backend-vnx.yaml | 4 +- deployment/manila/manila-base.yaml | 4 +- .../manila/manila-scheduler-container-puppet.yaml | 4 +- deployment/manila/manila-share-common.yaml | 4 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- .../masquerade-networks-baremetal-puppet.yaml | 4 +- .../memcached/memcached-container-puppet.yaml | 4 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 +- deployment/metrics/collectd-container-ansible.yaml | 11 +- deployment/metrics/collectd-container-puppet.yaml | 103 ++--- deployment/metrics/qdr-container-ansible.yaml | 29 +- deployment/metrics/qdr-container-puppet.yaml | 45 +- .../multipathd/multipathd-container-ansible.yaml | 7 +- .../neutron-agents-ib-config-container-puppet.yaml | 12 +- .../neutron/neutron-api-container-puppet.yaml | 147 +++---- deployment/neutron/neutron-base.yaml | 17 +- .../neutron-bgpvpn-api-container-puppet.yaml | 5 +- .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 4 +- .../neutron-bigswitch-agent-baremetal-puppet.yaml | 5 +- .../neutron/neutron-compute-plugin-nuage.yaml | 4 +- .../neutron/neutron-controller-plugin-nuage.yaml | 10 +- .../neutron/neutron-dhcp-container-puppet.yaml | 67 ++- .../neutron-l2gw-agent-baremetal-puppet.yaml | 10 +- .../neutron/neutron-l2gw-api-container-puppet.yaml | 9 +- .../neutron/neutron-l3-container-puppet.yaml | 60 +-- ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 14 +- .../neutron/neutron-metadata-container-puppet.yaml | 35 +- .../neutron-mlnx-agent-container-puppet.yaml | 18 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 5 +- .../neutron-ovs-agent-container-puppet.yaml | 63 ++- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 8 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 5 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 5 +- .../neutron-plugin-ml2-container-puppet.yaml | 5 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 15 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 5 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 28 +- deployment/neutron/neutron-plugin-ml2.yaml | 14 +- .../neutron-plugin-nsx-container-puppet.yaml | 4 +- deployment/neutron/neutron-plugin-nuage.yaml | 5 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 17 +- .../neutron-vpp-agent-baremetal-puppet.yaml | 8 +- deployment/nova/nova-api-container-puppet.yaml | 148 +++---- deployment/nova/nova-apidb-client-puppet.yaml | 25 +- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 34 +- .../nova/nova-compute-common-container-puppet.yaml | 5 +- deployment/nova/nova-compute-container-puppet.yaml | 250 +++++------ .../nova/nova-conductor-container-puppet.yaml | 55 ++- deployment/nova/nova-db-client-puppet.yaml | 27 +- deployment/nova/nova-ironic-container-puppet.yaml | 50 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 462 +++++++++++---------- .../nova/nova-libvirt-guests-container-puppet.yaml | 4 +- deployment/nova/nova-manager-container-puppet.yaml | 8 +- .../nova/nova-metadata-container-puppet.yaml | 52 +-- .../nova-migration-target-container-puppet.yaml | 10 +- .../nova/nova-scheduler-container-puppet.yaml | 23 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 77 ++-- .../octavia/octavia-api-container-puppet.yaml | 56 +-- deployment/octavia/octavia-base.yaml | 171 ++++---- .../octavia/octavia-deployment-config.j2.yaml | 101 +++-- .../octavia-health-manager-container-puppet.yaml | 15 +- .../octavia-housekeeping-container-puppet.yaml | 17 +- .../octavia/octavia-worker-container-puppet.yaml | 8 +- .../octavia/providers/ovn-provider-config.yaml | 50 +-- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 10 +- .../ovn/ovn-controller-container-puppet.yaml | 109 +++-- deployment/ovn/ovn-dbs-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 57 ++- deployment/ovn/ovn-metadata-container-puppet.yaml | 68 ++- .../pacemaker/clustercheck-container-puppet.yaml | 27 +- .../compute-instanceha-baremetal-puppet.yaml | 4 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 5 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 78 ++-- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 80 ++-- deployment/podman/podman-baremetal-ansible.yaml | 27 +- deployment/qdr/qdrouterd-container-puppet.yaml | 8 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 67 ++- ...rabbitmq-messaging-notify-container-puppet.yaml | 56 +-- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-notify-shared-puppet.yaml | 5 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 50 +-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 18 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 4 +- .../securetty/securetty-baremetal-ansible.yaml | 4 +- deployment/snmp/snmp-baremetal-puppet.yaml | 17 +- deployment/sshd/sshd-baremetal-ansible.yaml | 17 +- deployment/sshd/sshd-baremetal-puppet.yaml | 9 +- .../external-swift-proxy-baremetal-puppet.yaml | 4 +- deployment/swift/swift-base.yaml | 4 +- .../swift/swift-dispersion-baremetal-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 87 ++-- .../swift/swift-ringbuilder-container-puppet.yaml | 17 +- .../swift/swift-storage-container-puppet.yaml | 72 ++-- deployment/time/ptp-baremetal-ansible.yaml | 4 +- deployment/time/timezone-baremetal-ansible.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 23 +- deployment/timesync/chrony-baremetal-ansible.yaml | 25 +- deployment/tls/undercloud-remove-novajoin.yaml | 4 +- deployment/tls/undercloud-tls.yaml | 5 +- .../tripleo-firewall-baremetal-ansible.yaml | 23 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/tuned/tuned-baremetal-ansible.yaml | 23 +- deployment/unbound/unbound-container-ansible.yaml | 55 ++- deployment/undercloud/minion-rabbitmq-puppet.yaml | 4 +- .../undercloud-upgrade-ephemeral-heat.yaml | 54 +++ deployment/undercloud/undercloud-upgrade.yaml | 9 +- .../tripleo-validations-baremetal-ansible.yaml | 4 +- deployment/vpp/vpp-baremetal-puppet.yaml | 4 +- environments/dcn-hci.yaml | 53 --- environments/external-network-vip.yaml | 5 + .../lifecycle/undercloud-upgrade-prepare.yaml | 4 +- environments/low-memory-usage.yaml | 4 - environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/neutron-bgpvpn-bagpipe.yaml | 2 +- environments/neutron-bgpvpn.yaml | 2 +- environments/rhsm.yaml | 35 +- environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/undercloud.yaml | 4 - environments/undercloud/undercloud-minion.yaml | 4 +- .../default-network-isolation-ipv6.yaml | 14 +- .../default-network-isolation.yaml | 14 +- network-data-samples/ganesha-ipv6.yaml | 2 +- network-data-samples/ganesha.yaml | 3 +- .../legacy-routed-networks-ipv6.yaml | 20 +- network-data-samples/legacy-routed-networks.yaml | 20 +- network-data-samples/management-ipv6.yaml | 4 +- network-data-samples/management.yaml | 2 +- network-data-samples/routed-networks-ipv6.yaml | 18 +- network-data-samples/routed-networks.yaml | 14 +- network/network.j2 | 47 +-- network/ports/deployed_port.j2 | 5 + network/ports/noop.yaml | 5 + network/ports/port.j2 | 9 + network/ports/port_from_pool.j2 | 10 +- network/service_net_map.j2.yaml | 154 +------ overcloud-resource-registry-puppet.j2.yaml | 110 ++++- overcloud.j2.yaml | 25 +- puppet/role.role.j2.yaml | 32 +- ...OVNEncapType-option-added-85296d2fe1d94f35.yaml | 6 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 + .../notes/glance-db-purge-bb185353a45880c7.yaml | 6 + .../nova_virtlogd_wrapper-120fcfcfa0787b2b.yaml | 17 + .../rbd-disk-cache-modes-284a73271741ea62.yaml | 5 + ...remove-deprecated-dcn-hci-1aca499135c31e17.yaml | 5 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 8 + ...e-merging-service-net-map-0c65b5e421ce05bd.yaml | 12 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles/Undercloud.yaml | 1 + roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/standalone.yaml | 7 - sample-env-generator/undercloud-minion.yaml | 6 +- scripts/undercloud-upgrade-ephemeral-heat.py | 256 ++++++++++++ tools/yaml-validate.py | 3 +- zuul.d/layout.yaml | 1 + 325 files changed, 3359 insertions(+), 3134 deletions(-) From no-reply at openstack.org Mon Jun 14 15:36:58 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:36:58 -0000 Subject: [release-announce] python-tripleoclient 17.0.0 (xena) Message-ID: We are chuffed to announce the release of: python-tripleoclient 17.0.0: TripleO client This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 17.0.0 ^^^^^^ New Features * New configuration options for enable_neutron and enable_heat are added to the standalone and undercloud installers. These options default to true, and can be used to selectively disable these services. * A new cli argument, --heat-type is added to openstack overcloud deploy. Available options are "installed", "pod", "container", and "native". The default is "installed". The argument specifies the type of Heat process to use for the deployment. * Added options for "overcloud delete" command to unprovision nodes and network ports provisioned with "overcloud deploy". * The "openstack tripleo deploy" and "openstack undercloud install" commands now save their generated artifacts from the deployment under a single consistent directory, which by default is located at ~/tripleo-deploy/. For the undercloud, this location is ~/tripleo-deploy/undercloud. The directory can be overridden with the --output-dir option. Changes in python-tripleoclient 16.0.0..17.0.0 ---------------------------------------------- 78190843 Move get_ctlplane_attrs to utils 0f0352a5 Remove iscsi from IronicEnabledDeployInterfaces 05d3a9c9 Add dosfstools to bindep 05500120 Use explicit order for ironic enabled interfaces a4070345 Minor tests covering unreached exec branches. 2b2e52c8 overcloud deploy - provision networks 6ce51389 Use enable-legacy-telemetry.yaml when enabling telemetry 059dff4d Remove unused method _format_endpoint_name 6b5ebca3 Use podman interactive mode when restoring db 899f8628 Fix backup/restore file name for ephemeral heat 3c66b09c Changed minversion in tox to 3.18.0 1d2547cc Baremetal deploy - user playbook interface 2b8d55e3 Remove references to tripleo-validations legacy directory 835c7fc2 Fix check_service_vips_migrated_to_service() 4243df7d Don't download configs twice for --setup-only 8800f06c Don't allow --config-download-only with --baremetal-deployment f737dfcc BnR added error msg in case there is no inventory 629945fd Don't write -passwords.conf 76c95906 Ephemeral Heat: Add a --refresh option to external update run 04323f12 Ephemeral Heat unit tests 2bc7e8d1 Coverage report now lists lines without coverage ab90fcdb gitignore includes cover, mocks and vscode related dirs 4ab09cb8 Remove usage of tripleo_common.actions.ansible 1f316538 Handle KeyboardInterrupt with overcloud deploy 10a08737 Use Validations libs Client for main validation entry point 352211d8 Add node, port unprovision to overcloud delete e10261c9 Don't run containers in interactive mode 7058c3ee Fix undercloud validate password file a1aadd37 Too broad exceptions replaced with altenatives. a35f7983 Wait for Heat message queues 2fabd773 Fix error message for vip provision c5795adc Fix validations listing when filtering by group(s) 2f5ad594 Auto OVN bridge mac mappings for standalone 9ecb8758 setup.cfg: Replace dashes with underscores 0b9e9a43 Allow user environments override generated ones a7f17786 BnR Typo missing some spaces between words on the command help cbf1231a Increased strictness of the doc build 3f12c218 Extra space was causing indentation errors e36e9562 Use environment files when building image params c78ab588 Check if both swift and rgw are enabled during Upgrade Prepare 0a27ad6d Simplify undercloud upgrade 865167d2 Bump reqirements to tripleo-common>=16.0.0 1541eaaf Quote -e arg in ansible-playbook-command.sh 6568a795 Use consistent working dir for ansible-runner 252c15bf Handle nodes with no ctlplane IP's during deny list handling 61b6e873 Handle exceptions in finally clause 7483b623 Automatically run overcloud export when using ephemeral heat f4920c49 Add enable_neutron and enable_heat fc8feccc Add heat launcher db backup/restore e8f53ae7 Support using ephemeral Heat b02acaa6 Remove leftover for undercloud keepalived service 930abb12 Fix network environment validation 26f8de16 Make Python Interpreter option for Ansible Validation Run e52ccb1f Update master for stable/wallaby 7570bdf5 overcloud node extract add network info 6795028e Removing todo from undercloud_preflight since 753845 is merged a05d2f59 Remove deploy_args for podman.yaml as its default ecafbae4 Use a consistent working directory for tripleo deploy 1e690136 Use ceph_mon_network to find Ceph monitor IPs for export 715e82e0 Base for improvement of validator test coverage 1d72cfb0 Pass ansible ssh_user variable to the run action 32bf3bed Don't allow Redis/OvnDBs VIP in resource_registry d24b41c6 Add commands to extract|provision net vips Diffstat (except docs and test files) ------------------------------------- .coveragerc | 1 + .gitignore | 6 + bindep.txt | 1 + .../add-enable_neutron_heat-8d799d8ffc76f6da.yaml | 5 + .../add-heat-type-cli-arg-2fa4f47a835aafea.yaml | 7 + ...rovision-overcloud-delete-c7dd063912d4ebca.yaml | 5 + ...ripleo-deploy-working-dir-e0cdf80a82ac256d.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 4 +- setup.cfg | 10 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tox.ini | 6 +- tripleoclient/config/base.py | 6 +- tripleoclient/config/minion.py | 5 +- tripleoclient/config/standalone.py | 11 +- tripleoclient/config/undercloud.py | 2 + tripleoclient/constants.py | 17 +- tripleoclient/exceptions.py | 12 + tripleoclient/export.py | 28 +- tripleoclient/heat_launcher.py | 286 +++++++--- .../v1/overcloud_deploy/test_overcloud_deploy.py | 366 ++++++------- .../test_overcloud_external_update.py | 36 ++ .../test_overcloud_netenv_validate.py | 8 +- .../v1/overcloud_update/test_overcloud_update.py | 56 +- .../v2/overcloud_delete/test_overcloud_delete.py | 40 +- tripleoclient/utils.py | 208 ++++--- tripleoclient/v1/minion_config.py | 23 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 552 ++++++++++++------- tripleoclient/v1/overcloud_export.py | 21 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/overcloud_netenv_validate.py | 14 +- tripleoclient/v1/overcloud_node.py | 154 +++++- tripleoclient/v1/tripleo_config.py | 2 +- tripleoclient/v1/tripleo_deploy.py | 67 ++- tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 498 ++--------------- tripleoclient/v1/undercloud.py | 54 +- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/v1/undercloud_config.py | 121 ++--- tripleoclient/v1/undercloud_preflight.py | 20 +- tripleoclient/v2/overcloud_delete.py | 28 + tripleoclient/v2/overcloud_network.py | 119 ++++ tripleoclient/v2/overcloud_node.py | 88 ++- tripleoclient/workflows/deployment.py | 148 ++--- tripleoclient/workflows/scale.py | 2 +- 65 files changed, 3422 insertions(+), 1942 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ca97e077..0176d8ce 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ osc-lib>=2.3.0 # Apache-2.0 -tripleo-common>=12.7.0 # Apache-2.0 +tripleo-common>=16.0.0 # Apache-2.0 @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.0.4 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file From no-reply at openstack.org Mon Jun 14 15:42:12 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 15:42:12 -0000 Subject: [release-announce] tripleo-image-elements 14.0.0 (xena) Message-ID: We are jazzed to announce the release of: tripleo-image-elements 14.0.0: Disk image builder elements for deploying OpenStack. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 13.1.0..14.0.0 ------------------------------------------------ f90a830f Clean up ifcfg-eth0 a038c080 Use python3 for map-services-tripleo Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 6 +++--- elements/os-svc-install/bin/map-services-tripleo | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Mon Jun 14 16:47:23 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 16:47:23 -0000 Subject: [release-announce] sushy 3.4.4 (victoria) Message-ID: We high-spiritedly announce the release of: sushy 3.4.4: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.4.4 ^^^^^ Bug Fixes * Adds a fallback for inserting and ejecting virtual media using the PATCH HTTP request instead of the explicit action URIs. The fallback is required for Lenovo ThinkSystem machines (i.e. SD530, ..) that only implement the PATCH method. Changes in sushy 3.4.3..3.4.4 ----------------------------- 3a60bf8 Don't log ERROR if GET of /redfish/v1/SessionService fails d7da81d Implement fallback method for virtual media Diffstat (except docs and test files) ------------------------------------- ...ix-virtual-media-fallback-15a559414a65c014.yaml | 7 ++ sushy/connector.py | 9 ++- sushy/resources/base.py | 30 ++++++++ sushy/resources/manager/virtual_media.py | 63 ++++++++++++----- .../unit/resources/manager/test_virtual_media.py | 81 ++++++++++++++++++++++ 6 files changed, 190 insertions(+), 18 deletions(-) From no-reply at openstack.org Mon Jun 14 16:48:50 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 16:48:50 -0000 Subject: [release-announce] sushy 3.7.2 (wallaby) Message-ID: We joyfully announce the release of: sushy 3.7.2: Sushy is a small Python library to communicate with Redfish based systems This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.7.1..3.7.2 ----------------------------- 1b299c6 Fix incorrect formatting and a Python 3.10 failure Diffstat (except docs and test files) ------------------------------------- sushy/resources/registry/message_registry.py | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) From no-reply at openstack.org Mon Jun 14 16:49:23 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 16:49:23 -0000 Subject: [release-announce] sushy 3.9.1 (xena) Message-ID: We eagerly announce the release of: sushy 3.9.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the xena release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.9.0..3.9.1 ----------------------------- 5b38ec5 Fix incorrect formatting and a Python 3.10 failure 9490de8 Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- sushy/resources/registry/message_registry.py | 4 ++-- tox.ini | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) From no-reply at openstack.org Mon Jun 14 16:49:23 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 16:49:23 -0000 Subject: [release-announce] sushy 3.2.2 (ussuri) Message-ID: We are pumped to announce the release of: sushy 3.2.2: Sushy is a small Python library to communicate with Redfish based systems This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.2.1..3.2.2 ----------------------------- 2556747 Don't log ERROR if GET of /redfish/v1/SessionService fails c304442 Remove auth token header completely when error occurs Diffstat (except docs and test files) ------------------------------------- sushy/auth.py | 10 ++++++++ sushy/connector.py | 29 ++++++++++++++++++---- sushy/resources/sessionservice/sessionservice.py | 5 ++-- .../sessionservice/test_sessionservice.py | 4 +-- 6 files changed, 74 insertions(+), 11 deletions(-) From no-reply at openstack.org Mon Jun 14 18:38:02 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 14 Jun 2021 18:38:02 -0000 Subject: [release-announce] tooz 2.7.2 (victoria) Message-ID: We enthusiastically announce the release of: tooz 2.7.2: Coordination library for distributed systems. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 2.7.1..2.7.2 ---------------------------- 1ddddbb Retry on redis connection errors c8d77ee Blacklist etcd3gw 0.2.6 affcbda Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 2 +- setup.cfg | 2 +- tooz/drivers/redis.py | 132 ++++++++++++++++++++++++++++++-------------------- 4 files changed, 82 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a448b67..43ec87f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ fasteners>=0.7 # Apache-2.0 -tenacity>=3.2.1 # Apache-2.0 +tenacity>=3.2.1,<7.0.0 # Apache-2.0 From no-reply at openstack.org Tue Jun 15 10:06:45 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 10:06:45 -0000 Subject: [release-announce] oslo.db 9.1.0 (xena) Message-ID: We enthusiastically announce the release of: oslo.db 9.1.0: Oslo Database library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. 9.1.0 ^^^^^ Bug Fixes * In mysql 8.0.19, duplicate key error information is extended to include the table name of the key. Previously, duplicate key error information included only the key value and key name. This extends capabilities to handle changes in duplicate key error information with newer mysql version since 8.0.19. Changes in oslo.db 9.0.0..9.1.0 ------------------------------- be2cc6a Followup of "Added handler for mysql 8.0.19 duplicate key error update" 2c2e6d4 Added handler for mysql 8.0.19 duplicate key error update e26d400 update the pre-commit-hooks version 61a1b87 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- oslo_db/sqlalchemy/exc_filters.py | 9 ++++++++ ...-error-information-update-548888bc44b8dbd7.yaml | 8 +++++++ setup.cfg | 8 +++---- 5 files changed, 48 insertions(+), 5 deletions(-) From no-reply at openstack.org Tue Jun 15 10:12:59 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 10:12:59 -0000 Subject: [release-announce] oslo.utils 4.9.1 (xena) Message-ID: We contentedly announce the release of: oslo.utils 4.9.1: Oslo Utility library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.9.1 ^^^^^ Deprecation Notes * Oslo.utils's "fnmatch" module is deprecated, please use the stdlib "fnmatch" module which is thread safe for python 3+. * Support for parsing the "human" format has been deprecated and will be removed in a future release. Changes in oslo.utils 4.9.0..4.9.1 ---------------------------------- 25e3d58 Remove references to 'sys.version_info' 4c893c9 Deprecate the fnmatch module. 73eb067 Deprecate the human format on QemuImgInfo ca5be35 Ussuri+ is python3 only and update python to python3 d902a67 Dropping lower constraints testing Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 39 ------------- oslo_utils/fnmatch.py | 66 ++++------------------ oslo_utils/imageutils.py | 10 ++++ .../notes/deprecate-fnmatch-057a092d434a0c53.yaml | 5 ++ ...tils-human-format-support-a89101a36c4dd3cb.yaml | 5 ++ tools/perf_test_mask_password.py | 2 +- 8 files changed, 54 insertions(+), 151 deletions(-) From no-reply at openstack.org Tue Jun 15 10:14:46 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 10:14:46 -0000 Subject: [release-announce] oslo.policy 3.8.1 (xena) Message-ID: We joyfully announce the release of: oslo.policy 3.8.1: Oslo Policy library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 3.8.0..3.8.1 ----------------------------------- 5713170 setup.cfg: Replace dashes with underscores a339e5d Replace getargspec with getfullargspec 4eb58a8 Ussuri+ is python3 only and update python to python3 Diffstat (except docs and test files) ------------------------------------- oslo_policy/_checks.py | 7 +------ oslo_policy/shell.py | 2 +- setup.cfg | 8 ++++---- 3 files changed, 6 insertions(+), 11 deletions(-) From no-reply at openstack.org Tue Jun 15 10:24:50 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 10:24:50 -0000 Subject: [release-announce] oslo.cache 2.8.1 (xena) Message-ID: We are delighted to announce the release of: oslo.cache 2.8.1: Cache storage for OpenStack projects. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 2.8.0..2.8.1 ---------------------------------- 40946a9 Don't import module "etcd3gw" if etcd3gw backend is not used. Diffstat (except docs and test files) ------------------------------------- oslo_cache/backends/etcd3gw.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Tue Jun 15 11:44:21 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 11:44:21 -0000 Subject: [release-announce] oslo.service 2.6.0 (xena) Message-ID: We are tickled pink to announce the release of: oslo.service 2.6.0: oslo.service library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. Changes in oslo.service 2.5.0..2.6.0 ------------------------------------ 19f369a setup.cfg: Replace dashes with underscores aea7627 Remove references to 'sys.version_info' 9006927 Move flake8 as a pre-commit local target. 08f929b Add Python3 xena unit tests dbcdc22 Update master for stable/wallaby 304ab7f Remove lower-constraints remnants e37c5d2 remove unicode from code 7e72bbf Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 ++++-- .zuul.yaml | 2 +- lower-constraints.txt | 63 -------------------------------------- oslo_service/service.py | 7 ++--- releasenotes/source/conf.py | 16 +++++----- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++ setup.cfg | 8 ++--- tox.ini | 5 --- 11 files changed, 34 insertions(+), 94 deletions(-) From no-reply at openstack.org Tue Jun 15 12:24:42 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 15 Jun 2021 12:24:42 -0000 Subject: [release-announce] python-glanceclient 3.4.0 (xena) Message-ID: We are excited to announce the release of: python-glanceclient 3.4.0: OpenStack Image API Client Library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. Changes in python-glanceclient 3.3.0..3.4.0 ------------------------------------------- de0e9d9 Uncap PrettyTable 13bae28 Add Python3 xena unit tests 2517e01 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ requirements.txt | 2 +- 4 files changed, 9 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ca8abaf..e2a92e4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.1 # BSD +PrettyTable>=0.7.1 # BSD From no-reply at openstack.org Wed Jun 16 14:50:53 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 14:50:53 -0000 Subject: [release-announce] validations-common 1.2.0 Message-ID: We eagerly announce the release of: validations-common 1.2.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.1.1..1.2.0 ------------------------------------------ f07c8e7 New location of the default log directory. ecc6795 functools provide reduce instead of the ansible 92f51ea Update Validations Framework IRC channels 2e3e7f3 Renamed variable to something more illuminating. 4b87cf2 Bump molecule to 3.3.1 4ee2789 Trigger molecule jobs when modifying the following files 3a5e0de Rename local variable component to validation_component for Upstream CI dbb069f Remove Jinja2 constraint 8cf7b42 Licences are now listed for all requirements. 1d2149e Unblocking the openstack-tox-docs job. 1167633 Adds dockerignore to the repo 2ae6e68 Reqcheck job for upstream validations-common 48c99bd Temporary fetch logs adjustement to detect log folder f1ce73f File validation extended to callback_plugins, main loop optimized 4fc2ef2 Added the 'CALLBACK_NEEDS_WHITELIST' attribute. 1f3c0d2 Remove workaround for tox-ansible and global molecule config 01842ab Fix callback_type for validation_json.py 4a05320 Add testing for custom callback feature 5de26bd Fix targeting hosts to 'localhost' instead of 'all' 771eacc Sync is no longer loopy 6dfba51 Artifacts directory path is now set in a variable bafce83 Simple tests for validation_json callback. 29575dd Test for callback initiation. e15b080 Bump pre-commit repositories 6243262 Add shared configuration for all molecule test cc8369c Fetch all Validations, json and log files with CI role b41537f Superfluous imports are now mocked d64b830 Remove RoleNames ansible-lint custom rule c37b9cf Update validations role to be used by tripleo CI and devstack tests 97d6863 Update of validate-files script 10361e1 Use new CLI for functionnal tests and remove validation.py script c6508ad Disabling strict mode for ConfigParser in read_ini a38d34d ConfigParser exeption message should be returned cb75103 Version bumps to prepare for rhel9 transition 62eb4c0 Fixed exception handling of the print_tuple_table method. 7e40c9f Adding backup-and-restore validation group 2470d54 Except block now covers specific errors c6503e5 Make check_latest_packages_version roles more generic ba6977f add basic standalone job w/ validate-services true 27174b1 Tests for validation.py module and helper classes d67b2a0 Fallback on PWD for the Validation json log instead of getcwd b50b40c Improved test coverage for library/advanced_format.py 50eea5e Improved test coverage for library/warn.py caeb26b Cover report omits test files ab26d82 [Testing Infra] Apply here the improvements done to tripleo-validations 5b21243 Re-add documentation for http_json callback 8225fdd .gitignore now excludes JSON molecule logs 0249d81 packages var renamed to packages_list 3f80ee6 Introduce tox-ansible to validations-common dbacdea Test class for http_json callback. 7732eb0 Make callback write to default if /var/log/validations does not exist 1dd5941 Branching is now considered, line numbers are printed 97b3a86 Puts DISABLE_PIP_VERSION_CHECK on a separate line d9434d8 Docs are now built in pdf b8ef2c0 Python 2.7 environment, mimicking the one used by RDO bc6b582 Fixes issues caused by dict unpacking in (90e6133) 3b06d88 cli help rework and cleanup 6b11677 Validations now gather only the subset of facts they need fd06efd explanation why plugins don't respect normal naming coventions 7cfd0cb Test infrastructure for library scripts along with few samples. a92c1d2 Add validation-common documentation structure bcc35b8 Restrict execution to localhost only 4c610b3 Make the measuring code coverage test working 8d587ce Simple tests for validation_output callback. 8ad5cf3 Simple tests for validation_stdout callback. 273f41f Simple tests for fail_if_no_hosts callback. 88751f3 Infrastructure for callback unit tests 67a918d Add external http logging callback 32e4898 Fix list index out of range 0a5c58a Update TOX_CONSTRAINTS_FILE 4df9a80 Remove useless python import 775f74b Restrict Ansible dependency ba5db95 Remove workaround for broken dogpile.cache and lower-constraints file 95ca84c Exit with zero status when denials are not found in audit log e943a4e Add default value for validation.py inventory a83cc51 make selinux check only for rhel distribution c5faf55 Add dedicated stdout callback for VF library fe2d98e Correct the validate_selinux working_dir 2660470 Fix validation and group arguments to accept comma lists 51f2738 Exclude non failing gathering facts action in simplified result 844b877 Install CI roles into share/ansible/roles f365a07 Remove ensure-docker role execution a89c63b Use the UBI8 image for testing aac3975 Convert docker molecule usage to podman d633131 Updated/corrected service_status 399f6e5 Add missing exec bit 9d84a07 Add molecule tests runs back in the CI 7f3c565 Fix lower-constraints errors for validations-common 208a585 Revert "Make mock import python 2.7 compatible" Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 13 + .ansible-lint_rules/RoleNames.py | 57 -- .config/molecule/Dockerfile | 35 + .config/molecule/config.yml | 70 ++ .coveragerc | 4 +- .dockerignore | 66 ++ .gitignore | 6 +- .pre-commit-config.yaml | 27 +- .reqcheck_override.yaml | 6 + .stestr.conf | 2 +- .zuul.yaml | 239 ++++++- CONTRIBUTING.rst | 19 + README.rst | 106 ++- ansible-test-env.rc | 1 - bindep.txt | 17 +- .../modules/modules-check_package_update.rst | 14 + .../modules/modules-validations_read_ini.rst | 14 + .../roles/role-advanced_format_512e_support.rst | 6 + .../roles/role-check_latest_packages_version.rst | 6 + lower-constraints.txt | 118 ---- molecule-requirements.txt | 22 +- playbooks/molecule/pre.yml | 91 +++ playbooks/molecule/run-local.yml | 14 + playbooks/molecule/run.yml | 39 ++ playbooks/reqcheck.yaml | 45 ++ requirements.txt | 4 +- roles/fetch_validations/defaults/main.yaml | 1 + roles/fetch_validations/tasks/main.yaml | 40 +- roles/validations/defaults/main.yaml | 45 +- roles/validations/tasks/list.yaml | 6 + roles/validations/tasks/main.yaml | 58 +- roles/validations/tasks/run.yaml | 36 + roles/validations/tasks/show.yaml | 6 + roles/validations/tasks/validations.yaml | 41 +- roles/validations/vars/main.yaml | 29 + scripts/run-local-test | 32 +- setup.cfg | 6 +- test-requirements.txt | 2 +- tools/http_server.py | 54 ++ tools/test-setup.sh | 8 - tools/validate-files.py | 115 ++-- tox.ini | 92 ++- validations_common/__init__.py | 4 + validations_common/callback_plugins/__init__.py | 13 + validations_common/callback_plugins/http_json.py | 94 +++ .../callback_plugins/validation_json.py | 30 +- .../callback_plugins/validation_stdout.py | 99 +++ validations_common/library/check_package_update.py | 294 ++++++-- validations_common/library/validations_read_ini.py | 8 +- validations_common/playbooks/512e.yaml | 2 +- validations_common/playbooks/check-cpu.yaml | 5 +- .../playbooks/check-disk-space-pre-upgrade.yaml | 2 +- validations_common/playbooks/check-disk-space.yaml | 2 +- validations_common/playbooks/check-ftype.yaml | 2 +- .../playbooks/check-latest-packages-version.yaml | 4 +- validations_common/playbooks/check-ram.yaml | 4 +- .../playbooks/check-selinux-mode.yaml | 4 +- validations_common/playbooks/dns.yaml | 2 +- validations_common/playbooks/no-op.yaml | 2 +- validations_common/playbooks/ntp.yaml | 2 +- validations_common/playbooks/service-status.yaml | 1 + validations_common/playbooks/validate-selinux.yaml | 3 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 45 +- .../roles/check_cpu/molecule/default/Dockerfile | 37 - .../roles/check_cpu/molecule/default/molecule.yml | 44 +- validations_common/roles/check_cpu/tasks/main.yml | 7 + .../check_disk_space/molecule/default/Dockerfile | 37 - .../check_disk_space/molecule/default/molecule.yml | 44 +- .../defaults/main.yml | 10 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/converge.yml | 59 +- .../molecule/default/molecule.yml | 45 +- .../molecule/default/prepare.yml | 39 +- ...e-1.0.0-1.20210331045404.4c29590.el8.x86_64.rpm | Bin 0 -> 6992 bytes ...e-1.0.0-2.20210401064344.c8ee186.el8.x86_64.rpm | Bin 0 -> 7060 bytes ...e-1.0.1-1.20210401074356.drh345o.el8.x86_64.rpm | Bin 0 -> 7128 bytes .../check_latest_packages_version/tasks/main.yml | 12 +- .../roles/check_ram/molecule/default/Dockerfile | 37 - .../roles/check_ram/molecule/default/molecule.yml | 44 +- validations_common/roles/check_ram/tasks/main.yml | 7 + .../check_selinux_mode/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 44 +- .../roles/check_selinux_mode/tasks/main.yml | 37 +- .../roles/dns/molecule/default/Dockerfile | 37 - .../roles/dns/molecule/default/molecule.yml | 44 +- .../roles/haproxy/molecule/default/Dockerfile | 37 - .../roles/haproxy/molecule/default/molecule.yml | 45 +- .../roles/ntp/molecule/default/Dockerfile | 37 - .../roles/ntp/molecule/default/molecule.yml | 45 +- .../service_status/molecule/default/Dockerfile | 37 - .../service_status/molecule/default/molecule.yml | 51 +- .../service_status/molecule/docker/Dockerfile | 37 - .../molecule/docker/{playbook.yml => converge.yml} | 0 .../service_status/molecule/docker/molecule.yml | 53 +- .../service_status/molecule/podman/Dockerfile | 37 - .../molecule/podman/{playbook.yml => converge.yml} | 0 .../service_status/molecule/podman/molecule.yml | 45 +- .../service_status/molecule/systemd/Dockerfile | 37 - .../service_status/molecule/systemd/converge.yml | 44 ++ .../service_status/molecule/systemd/molecule.yml | 51 +- .../validate_selinux/molecule/default/Dockerfile | 37 - .../validate_selinux/molecule/default/molecule.yml | 45 +- .../roles/validate_selinux/tasks/main.yml | 4 +- .../xfs_check_ftype/molecule/default/Dockerfile | 37 - .../xfs_check_ftype/molecule/default/molecule.yml | 46 +- .../callback_plugins/test_fail_if_no_hosts.py | 94 +++ .../callback_plugins/test_validation_output.py | 743 +++++++++++++++++++++ .../callback_plugins/test_validation_stdout.py | 201 ++++++ validations_common/validation.py | 187 ------ 150 files changed, 4940 insertions(+), 1922 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index c55af13..e631256 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -2,11 +2,10 @@ -ansible -ansi2html -docker -# https://github.com/sqlalchemy/dogpile.cache/issues/178 -dogpile.cache>=0.6.5,<0.9.1 # MIT -pytest -pytest-cov -pytest-html -pytest-xdist -mock -molecule>=3.0,<3.1 +ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansi2html # LGPLv3+ +jinja2>=2.8.0 # BSD-3-Clause +mock # BSD +molecule>=3.3.1,<4 # MIT +molecule-podman # MIT +pytest # MIT +pytest-cov # MIT +pytest-html # Mozilla Public License 2.0 +pytest-xdist # MIT @@ -14 +12,0 @@ selinux # MIT -jinja2>=2.8.0,<3 diff --git a/requirements.txt b/requirements.txt index 56b58c8..6dd5b47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6,2 @@ pbr>=3.1.1 # Apache-2.0 -PyYAML>=3.12 # MIT -PrettyTable>=0.7.2 +PyYAML>=3.13 # MIT +PrettyTable>=0.7.2 # BSD-3-Clause diff --git a/test-requirements.txt b/test-requirements.txt index 0b513ef..b4c85b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +5,0 @@ openstackdocstheme>=1.20.0 # Apache-2.0 -hacking>=3.0,<3.1.0 # Apache-2.0 @@ -15,0 +15 @@ pre-commit # MIT +validations-libs>=1.0.4 # Apache-2.0 From no-reply at openstack.org Wed Jun 16 15:48:43 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:48:43 -0000 Subject: [release-announce] puppet-aodh 15.5.0 (train) Message-ID: We are pumped to announce the release of: puppet-aodh 15.5.0: Puppet module for OpenStack Aodh This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * The new "aodh::expirer" class has been added to support a cron job to run aodh-expirer command. * Now the "aodh::expirer" class installs aodh-expire package automatically. The status of package can be defined by the "package_ensure" parameter. Changes in puppet-aodh 15.4.0..15.5.0 ------------------------------------- 09972d8 Prepare the final stable/train release ff9d23e Manage aodh-expirer package by aodh::expirer class b905624 Add support for aodh-expirer cron job ff3603e Expose vhost_custom_fragment ee25acb Fix rabbitmq dependency 8beb87a Switch to Train e0eae19 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train c8f5123 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/expirer.pp | 75 +++++++++++++++++++ manifests/params.pp | 1 + manifests/wsgi/apache.pp | 7 ++ metadata.json | 10 +-- releasenotes/notes/expirer-a53e68fe61ff3f17.yaml | 5 ++ .../notes/expirer-package-a318c98f11722956.yaml | 5 ++ spec/classes/aodh_expirer_spec.rb | 87 ++++++++++++++++++++++ spec/classes/aodh_wsgi_apache_spec.rb | 4 +- tox.ini | 2 +- 11 files changed, 192 insertions(+), 8 deletions(-) From no-reply at openstack.org Wed Jun 16 15:51:38 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:51:38 -0000 Subject: [release-announce] puppet-heat 15.5.0 (train) Message-ID: We are gleeful to announce the release of: puppet-heat 15.5.0: Puppet module for OpenStack Heat This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. Changes in puppet-heat 15.4.0..15.5.0 ------------------------------------- 31e48ae Prepare the final stable/train release fa3eac0 Add TLS options to oslo.cache d02f3a4 Expose vhost_custom_fragment 47ddad6 Fix rabbitmq dependency efec419 Add server_keystone_endpoint_type param to heat::engine 6a18c96 Add vhost_custom_fragment option to wsgi/apache_api 9c70b14 Switch to Train e739b6a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ce50e59 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/cache.pp | 43 ++++++++++++++++++++++ manifests/engine.pp | 11 +++++- manifests/wsgi/apache_api.pp | 6 +++ manifests/wsgi/apache_api_cfn.pp | 10 ++++- metadata.json | 10 ++--- .../notes/add_tls_options-e126a2206f028366.yaml | 4 ++ .../heat_api_vhost_fragment-6d69d09e3d4b4482.yaml | 5 +++ ...er_keystone_endpoint_type-82c3f461916653d8.yaml | 4 ++ spec/classes/heat_cache_spec.rb | 15 ++++++++ spec/classes/heat_engine_spec.rb | 3 ++ spec/classes/heat_wsgi_apache_api_cfn_spec.rb | 3 +- spec/classes/heat_wsgi_apache_api_spec.rb | 1 + tox.ini | 2 +- 15 files changed, 109 insertions(+), 12 deletions(-) From no-reply at openstack.org Wed Jun 16 15:51:46 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:51:46 -0000 Subject: [release-announce] puppet-barbican 15.5.0 (train) Message-ID: We are tickled pink to announce the release of: puppet-barbican 15.5.0: Puppet module for Barbican This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Added support for a couple of new options for the PKCS#11 backend: "[p11_crypto]\token_labels" and "[p11_crypto]\os_locking_ok". * Added support for two new options for Barbican's PKCS#11 backend. The new options are "[p11_crypto]token_serial_number" and "[p11_crypto]token_label". * The "barbican::plugins::p11_crypto::p11_crypto_plugin_slot_id" parameter has become an optional parameter instead of a required one. * Support for the "[p11_crypto_plugin] always_set_cka_sensitive" parameter has been added. Changes in puppet-barbican 15.4.0..15.5.0 ----------------------------------------- 6881351 Prepare the final stable/train release 0da8773 Add support for always_set_cka_sensitive parameter f3ecb1f Add new options to PKCS#11 backend e1acd2d Add p11_crypto_plugin token options da146d5 Expose vhost_custom_fragment aa6afa0 Chain barbican_api_paste_ini to config anchor a2921d3 Fix rabbitmq dependency 00a75aa Switch to Train 8d16720 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 33c7c25 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/deps.pp | 5 ++ manifests/plugins/p11_crypto.pp | 81 +++++++++++++++------- manifests/wsgi/apache.pp | 7 ++ metadata.json | 10 +-- .../notes/add-pkcs11-options-dd38e8f087888595.yaml | 5 ++ ...or-token-label-and-serial-5b6ec6acc7f9d791.yaml | 10 +++ ..._always_set_cka_sensitive-1c9a9b9726c3cf93.yaml | 6 ++ spec/classes/barbican_plugins_p11_crypto_spec.rb | 15 ++++ spec/classes/barbican_wsgi_apache_spec.rb | 2 + tox.ini | 2 +- 12 files changed, 114 insertions(+), 33 deletions(-) From no-reply at openstack.org Wed Jun 16 15:51:52 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:51:52 -0000 Subject: [release-announce] puppet-ironic 15.5.0 (train) Message-ID: We are stoked to announce the release of: puppet-ironic 15.5.0: Puppet module for OpenStack Ironic This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Supports configuring "max_command_attempts" and "command_timeout" in "ironic::drivers::agent". * For baremetal operations on DHCPv6-stateful networks multiple IPv6 addresses can now be allocated for neutron ports created for provisioning, cleaning, rescue or inspection. The new parameter "ironic::neutron::dhcpv6_stateful_address_count" controls the number of addresses to allocate. * The parameter ironic::pxe::ipxe_name_base has been added, which allows alternative ipxe files to be copied to /tftpboot/ipxe.efi. For example, setting this to 'ipxe-snponly' on CentOS8 would result in the source file being /usr/share/ipxe/ipxe-snponly-x86_64.efi. * New parameter, ironic::keystone::auth::roles is introduced to configure customized role for ironic user in keystone identity. Bug Fixes ********* * For DHCPv6 PXE boot, the Client Architecture option code (61) as defined in https://tools.ietf.org/html/rfc5970#section-3.3 is different than the one for DHCP. This is used to determine if booting over EFI. This change sets the DHCPv6 bootfile-url when booting PXE over EFI. Changes in puppet-ironic 15.4.0..15.5.0 --------------------------------------- d553541 Prepare the final stable/train release 39f97cc Expose vhost_custom_fragment ee3cb9f agent: support command_timeout and max_command_attempts fc46d2a Allow alternative source files for /tftpboot/ipxe.efi 74f3dce Add ironic::neutron::dhcpv6_stateful_address_count e2a354d Fix rabbitmq dependency 2f91ad1 Customize roles assigned to ironic user 8fe6978 Use client architecture and set bootfile-url for DHCPv6 in inspector 884325d Switch to Train 1136c8b Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 807e6be Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/drivers/agent.pp | 12 ++++++ manifests/keystone/auth.pp | 6 +++ manifests/neutron.pp | 45 ++++++++++++++-------- manifests/pxe.pp | 13 +++++-- manifests/wsgi/apache.pp | 7 ++++ metadata.json | 10 ++--- .../notes/agent-retries-5c55bab92d8d8f9e.yaml | 5 +++ ...cpv6-pxe-boot-client-arch-ba8857e4f1386710.yaml | 8 ++++ ...v6-stateful-address-count-af55208639ad7264.yaml | 8 ++++ .../notes/ipxe_name_base-91f5a571210f171c.yaml | 7 ++++ .../keystone-user-roles-9a21ef5f9a74777e.yaml | 5 +++ spec/classes/ironic_drivers_agent_spec.rb | 8 +++- spec/classes/ironic_keystone_auth_spec.rb | 12 ++++++ spec/classes/ironic_neutron_spec.rb | 19 +++++---- spec/classes/ironic_pxe_spec.rb | 4 +- spec/classes/ironic_wsgi_apache_spec.rb | 2 + templates/inspector_dnsmasq_http.erb | 5 +++ tox.ini | 2 +- 20 files changed, 144 insertions(+), 38 deletions(-) From no-reply at openstack.org Wed Jun 16 15:52:31 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:52:31 -0000 Subject: [release-announce] puppet-ceilometer 15.5.0 (train) Message-ID: We are satisfied to announce the release of: puppet-ceilometer 15.5.0: Puppet module for OpenStack Ceilometer This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added cache_backend and manage_backend_package parameters to ceilometer class that is passed down to the oslo::cache resource. * Add TLS options for oslo.cache Bug Fixes ********* * Now the default meters use disk.device metrics instead of disk metrics, so that disk performance data can be captured by default. * The template file which is used to create pipeline.yaml when manage_pipeline is true was updated, and no longer includes usage of transfomer feature because this feature was already removed from ceilometer. Changes in puppet-ceilometer 15.4.0..15.5.0 ------------------------------------------- 2f62d7f Prepare the final stable/train release 701e6ce Add TLS options for oslo.cache 5901c94 Remove transformers from pipeline.yaml d502884 Replace disk.* meters by disk.device.* meters 1f4f0c6 Add more oslo::cache params to init 60ee76f Fix rabbitmq dependency de7b6a1 Switch to Train f803165 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 5ca905c Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/init.pp | 57 ++++++++++++++- manifests/params.pp | 8 +- metadata.json | 10 +-- ...oslo-cache-params-to-init-70207eea609cf621.yaml | 5 ++ .../notes/add_tls_options-c9970ada14354891.yaml | 4 + .../notes/bug-1911852-283ca913d7c7e818.yaml | 5 ++ .../notes/bug-1912345-cd3db2d4c03bec17.yaml | 6 ++ spec/classes/ceilometer_agent_polling_spec.rb | 8 +- spec/classes/ceilometer_init_spec.rb | 23 +++++- templates/pipeline.yaml.erb | 85 ---------------------- tox.ini | 2 +- 13 files changed, 113 insertions(+), 104 deletions(-) From no-reply at openstack.org Wed Jun 16 15:52:32 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:52:32 -0000 Subject: [release-announce] puppet-gnocchi 15.5.0 (train) Message-ID: We are gleeful to announce the release of: puppet-gnocchi 15.5.0: Puppet module for OpenStack Gnocchi This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. Changes in puppet-gnocchi 15.4.0..15.5.0 ---------------------------------------- c830d4b Prepare the final stable/train release 7b0e3c7 Expose vhost_custom_fragment b462302 Configure s3_secret_access_key as secret 68c5773 Switch to Train d28f554 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 87b69c1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/storage/s3.pp | 2 +- manifests/wsgi/apache.pp | 7 +++++++ metadata.json | 6 +++--- spec/classes/gnocchi_storage_s3_spec.rb | 2 +- spec/classes/gnocchi_wsgi_apache_spec.rb | 4 +++- tox.ini | 2 +- 8 files changed, 19 insertions(+), 8 deletions(-) From no-reply at openstack.org Wed Jun 16 15:53:53 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:53:53 -0000 Subject: [release-announce] puppet-cloudkitty 4.4.1 (train) Message-ID: We are delighted to announce the release of: puppet-cloudkitty 4.4.1: Puppet module for OpenStack cloudkitty This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. Changes in puppet-cloudkitty 4.4.0..4.4.1 ----------------------------------------- baad27b Prepare the final stable/train release 8a54e2c Fix rabbitmq dependency 95be4da Switch to Train bb43b9c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ddc1a3a Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 10 +++++----- tox.ini | 2 +- 4 files changed, 9 insertions(+), 7 deletions(-) From no-reply at openstack.org Wed Jun 16 15:55:55 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:55:55 -0000 Subject: [release-announce] puppet-neutron 15.6.0 (train) Message-ID: We are psyched to announce the release of: puppet-neutron 15.6.0: Puppet module for OpenStack Neutron This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 15.6.0 ^^^^^^ New Features * Add 'dnsmasq_enable_addr6_list' option support to dhcp agent settings. (See bug: #1861032 (https://bugs.launchpad.net/neutron/+bug/1861032)) * The following two new classes have been added, to set up parameters in ovs_driver and sriov_driver section. * "neutron::plugins::ml2::ovs_driver" * "neutron::plugins::ml2::sriov_driver" * Add a new configuration option called "ovn_emit_need_to_frag" to the "ovn" section of etc/neutron/plugins/ml2_conf.ini. This new option tells ovn whether it should emit "need to frag" packets in case of MTU mismatch. Before enabling this configuration make sure that its supported by the host kernel (version >= 5.2) or by checking the output of the following command: ovs-appctl -t ovs- vswitchd dpif /show-dp-features br-int | grep "Check pkt length action". Defaults to False. * Add new configuration parameter explicitly_egress_direct for ML2 OVS agent When set to True, the accepted egress unicast traffic will not use action NORMAL. The accepted egress packets will be taken care of in the final egress tables direct output flows for unicast traffic so that operators can set customized integration bridge name in l3 agent configuration. This can be enabled on some nodes to prevent flooding on integration bridge. * Add support for resource provider bandwidth. * The following two parameters have been added to define mapping of bridge name and hyper visor name to locate the parent of the resource provider tree. * "neutron::agents::ml2::ovs::resource_provider_hypervisors" * "neutorn::agents::ml2::sriov::resource_provider_hypervisors" Changes in puppet-neutron 15.5.0..15.6.0 ---------------------------------------- 7f36270b Prepare the final stable/train release 9fc89a77 Fix name of networking-ansible/baremetal package 367ba177 Fix L3 agent's extensions list c774dcb8 Add support for the resource_provider_hypervisors parameter 89e5b0d0 Ensure resource_provider_bandwitdhs is unset by default 9d9574d4 Build containers for single consumer job a382db46 Add new classes ovs_driver and sriov_driver 8ea35656 Add agent/explicitly_egress_direct support 7d0406b1 Nuage: remove check on mechanism driver 0a45ec73 Add support for resource provider bandwidth in Neutron config d1099ba1 OVN: Add ovn_emit_need_to_frag configuration option 731a8fd7 Add 'dnsmasq_enable_addr6_list' option 7001e662 Refer keystone_authtoken instead of neutron to detect region Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + lib/puppet/provider/neutron.rb | 14 +-- manifests/agents/dhcp.pp | 31 +++--- manifests/agents/l3.pp | 4 +- manifests/agents/ml2/networking_baremetal.pp | 2 +- manifests/agents/ml2/ovs.pp | 105 ++++++++++++++------- manifests/agents/ml2/sriov.pp | 45 +++++++-- manifests/params.pp | 4 +- manifests/plugins/ml2/mech_driver.pp | 22 +++++ manifests/plugins/ml2/networking_ansible.pp | 3 +- manifests/plugins/ml2/networking_baremetal.pp | 2 +- manifests/plugins/ml2/nuage.pp | 4 - manifests/plugins/ml2/ovn.pp | 12 +++ manifests/plugins/ml2/ovs_driver.pp | 31 ++++++ manifests/plugins/ml2/sriov_driver.pp | 31 ++++++ metadata.json | 12 +-- ...dnsmasq_enable_addr6_list-2ead22fb05f5da5f.yaml | 5 + .../notes/ml2-driver-classes-e9de9a5e58c855fb.yaml | 8 ++ ...eed-to-frag-config-option-89c716cd33592bea.yaml | 11 +++ ..._explicitly_egress_direct-a5989bd33844c0f4.yaml | 9 ++ ...source_provider_bandwidth-e7887d104adb4ae9.yaml | 4 + ...urce_provider_hypervisors-907db47afa6d5d72.yaml | 9 ++ spec/classes/neutron_agents_dhcp_spec.rb | 10 ++ spec/classes/neutron_agents_l3_spec.rb | 20 ++++ ...neutron_agents_ml2_networking_baremetal_spec.rb | 20 +++- spec/classes/neutron_agents_ml2_ovs_spec.rb | 32 +++++++ spec/classes/neutron_agents_ml2_sriov_spec.rb | 21 +++++ .../neutron_plugins_ml2_networking_ansible_spec.rb | 18 +++- ...eutron_plugins_ml2_networking_baremetal_spec.rb | 18 +++- spec/classes/neutron_plugins_ml2_nuage_spec.rb | 18 ---- spec/classes/neutron_plugins_ml2_ovn_spec.rb | 11 +++ spec/classes/neutron_plugins_ml2_ovs_driver.rb | 34 +++++++ spec/classes/neutron_plugins_ml2_sriov_driver.rb | 34 +++++++ 33 files changed, 493 insertions(+), 112 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:16 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:16 -0000 Subject: [release-announce] puppet-horizon 15.5.0 (train) Message-ID: We jubilantly announce the release of: puppet-horizon 15.5.0: Puppet module for OpenStack Horizon This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Support was added to set the SECURE_PROXY_ADDR_HEADER option. If horizon is behind a proxy server and the proxy is configured, the IP address from request is passed using header variables inside the request. This setting specifies the name of the header with remote IP address. * Added the ssl_verify_client parameter to init class and horizon::wsgi::apache that is passed down to the created apache::vhost resource. Upgrade Notes ************* * The puppetlabs-apache module 2.1.0 introduced a change where ssl_verify_client is required otherwise the SSL CA certificate passed to the horizon module using the horizon_ca parameter is ignored. Changes in puppet-horizon 15.4.0..15.5.0 ---------------------------------------- c300380 Prepare the final stable/train release cc8289a add support for SECURE_PROXY_ADDR_HEADER 6470aea Build containers for single consumer job 2ae5f46 Add ssl_verify_client dd78e01 Consolidate python memcache bindings install e379bb2 at least one test needs to run for tempest to pass 3cadfc2 Reflect openstacklib options for apache::vhost resources 620e8f6 Switch to Train 64f1f61 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 2635fd8 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 ++ Gemfile | 3 ++- manifests/init.pp | 23 ++++++++++++++++--- manifests/wsgi/apache.pp | 8 +++++++ metadata.json | 4 ++-- ...-secure-proxy-addr-header-07c36d89f8bf2ad2.yaml | 7 ++++++ .../add-ssl_verify_client-3e2bc9a7f1d4291a.yaml | 10 +++++++++ spec/classes/horizon_init_spec.rb | 26 +++++++++++++--------- spec/classes/horizon_wsgi_apache_spec.rb | 12 +++++----- templates/local_settings.py.erb | 6 +++++ tox.ini | 2 +- 12 files changed, 81 insertions(+), 23 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:24 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:24 -0000 Subject: [release-announce] puppet-octavia 15.5.0 (train) Message-ID: We are amped to announce the release of: puppet-octavia 15.5.0: Puppet module for OpenStack Octavia This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added parameters to enable amphora log offloading. * Added octavia::provider::ovn for configuring OVN driver properties. * Added Keepalived VRRP parameters. Deprecation Notes ***************** * octavia::api::ovn_nb_connection is now deprecated and will be removed in the future release. Please use octavia::provider::ovn::ovn_nb_connection instead. Changes in puppet-octavia 15.4.0..15.5.0 ---------------------------------------- 2f54828 Fix minimum version of puppet-nova 0e98582 Prepare the final stable/train release b741773 Expose vhost_custom_fragment e322e9b Fix rabbitmq dependency 6284d53 Add driver agent configuration 7987964 Add Octavia OVN Provider configuration (2 of 2) a3603e6 Add Octavia OVN Provider configuration (1 of 2) 736f286 Revert "Add parameters for amphora anti-affinity" 0eaf414 Add parameters for amphora anti-affinity 8d86546 Add parameters for amphora log offloading b659647 Add keepalivd vrrp parameters b12f610 Switch to Train 152e906 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 7de7d5b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- .../octavia_ovn_provider_config/ini_setting.rb | 10 ++ lib/puppet/type/octavia_ovn_provider_config.rb | 53 +++++++ manifests/api.pp | 12 +- manifests/controller.pp | 161 ++++++++++++++++----- manifests/driver_agent.pp | 92 ++++++++++++ manifests/provider/ovn.pp | 48 ++++++ manifests/wsgi/apache.pp | 7 + metadata.json | 12 +- .../notes/add-driver-agent-71b506e3d81e92fe.yaml | 4 + .../notes/add-log-offloading-1a7836381de33644.yaml | 3 + .../notes/add-ovn-provider-71b506e3d81e92fe.yaml | 8 + ...dd-vrrp-keepalived-params-81f235f8cc411c42.yaml | 3 + spec/classes/octavia_api_spec.rb | 3 - spec/classes/octavia_controller_spec.rb | 63 ++++++-- spec/classes/octavia_driver_agent_spec.rb | 72 +++++++++ spec/classes/octavia_ovn_provider_spec.rb | 47 ++++++ spec/classes/octavia_wsgi_apache_spec.rb | 112 ++++++++++++++ .../ini_setting_spec.rb | 68 +++++++++ spec/unit/type/octavia_ovn_provider_config_spec.rb | 64 ++++++++ tox.ini | 2 +- 22 files changed, 784 insertions(+), 64 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:39 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:39 -0000 Subject: [release-announce] puppet-oslo 15.5.0 (train) Message-ID: We are glad to announce the release of: puppet-oslo 15.5.0: Puppet module for Oslo This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Add TLS options to oslo.cache Changes in puppet-oslo 15.4.0..15.5.0 ------------------------------------- 883fa53 Prepare the final stable/train release 7f69fbb Add TLS options to oslo.cache 185dec2 Consolidate python memcache bindings install 00f661d Switch to Train 0e02dd0 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train a29003e Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/cache.pp | 51 ++++++++++++++++++++-- metadata.json | 4 +- .../notes/add_tls_options-9010fc5eab23dfe7.yaml | 4 ++ spec/defines/oslo_cache_spec.rb | 15 +++++++ tox.ini | 2 +- 7 files changed, 72 insertions(+), 8 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:41 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:41 -0000 Subject: [release-announce] puppet-designate 15.6.0 (train) Message-ID: We are glad to announce the release of: puppet-designate 15.6.0: Puppet module for OpenStack Designate This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 15.5.0..15.6.0 ------------------------------------------ 699d285 Fix minimum version of puppet-rabbitmq 2ec2ee3 Prepare the final stable/train release 3e554a1 Add support to specify sqlite database 516c3c2 Fix rabbitmq dependency 4fc5214 Switch to Train Diffstat (except docs and test files) ------------------------------------- Gemfile | 3 ++- manifests/db.pp | 5 ++++- metadata.json | 10 +++++----- 3 files changed, 11 insertions(+), 7 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:42 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:42 -0000 Subject: [release-announce] puppet-openstacklib 15.5.0 (train) Message-ID: We exuberantly announce the release of: puppet-openstacklib 15.5.0: Puppet module for OpenStack Openstacklib This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 15.5.0 ^^^^^^ Security Issues *************** * Do not authorize directory listing Bug Fixes ********* * rhbz#1778052 * LP#1854442 Changes in puppet-openstacklib 15.4.0..15.5.0 --------------------------------------------- e3b61ab Prepare the final stable/train release 2846fc8 Fix rabbitmq dependency 8cdb313 Add old ruby support to inet6_prefix 9cc1342 mysql: allow specifying the authentication method ae52363 Have doubled workers for keystone service 6357ffa Ensure no directory listing is active 94b2016 Switch to Train 754ccf7 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train fc50943 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- lib/facter/os_workers.rb | 13 ++++++++ lib/puppet/functions/inet6_prefix.rb | 11 ++++++- manifests/db/mysql.pp | 6 ++++ manifests/db/mysql/host_access.pp | 6 ++++ manifests/wsgi/apache.pp | 1 + metadata.json | 4 +-- .../no-directory-listing-8e6270ed0e1eb1d0.yaml | 6 ++++ .../openstacklib_db_mysql_host_access_spec.rb | 28 +++++++++++++++++ spec/defines/openstacklib_db_mysql_spec.rb | 34 ++++++++++++++++++++ spec/defines/openstacklib_wsgi_apache_spec.rb | 3 +- spec/unit/facter/os_workers_keystone_spec.rb | 36 ++++++++++++++++++++++ tox.ini | 2 +- 14 files changed, 148 insertions(+), 6 deletions(-) From no-reply at openstack.org Wed Jun 16 15:56:45 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:56:45 -0000 Subject: [release-announce] puppet-glance 15.5.0 (train) Message-ID: We are stoked to announce the release of: puppet-glance 15.5.0: Puppet module for OpenStack Glance This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Add glance::api::enabled_backends and glance::api::default_backend parameters for configuring glance backends. The parameters implement glance's Multi Store syntax, which supports configuring multiple backends of the same type (e.g. multiple rbd backends). Multiple backends of the same type may be specified using new glance::backend::multistore::* defined resource types. * Added cache_prefetcher_interval in glance-api.conf, using which the periodic job will run as per the set interval and prefetch images into cache. * The new parameters, cinder_enforce_multipath and cinder_use_multipath, are intoroduced into cinder::backend::multistore::cinder class, so that operators can define multipath usage in volume connection. * A new parameter "cinder_mount_point_base" is introduced into "glance::backend::multistore::cinder" class, so that operators can provide the cinder mount point for NFS volumes. Deprecation Notes ***************** * The following parameters are deprecated due to the corresponding parameters being deprecated in glance. They are replaced by the new glance::api::enabled_backends and glance::api::default_backend parameters. * glance::api::stores * glance::api::default_store * glance::api::multi_store The following backend resources are deprecated because they are associated with the deprecated glance::api::stores parameter. They are replaced by corresponding glance::backend::multistore resources, except for the s3 backend which was removed from glance in Newton. * glance::backend::cinder * glance::backend::file * glance::backend::rbd * glance::backend::s3 * glance::backend::swift * glance::backend::vsphere Bug Fixes ********* * The "swift::backend::multistore::swift::swift_store_config_file" is now set to "/etc/glance/glance-swift.conf" by default. Because of this change the parameter is automatically set to use the configuration file generated by puppet-glance. Changes in puppet-glance 15.4.0..15.5.0 --------------------------------------- 8a23345 Prepare the final stable/train release 4b4b990 Add parameters for multipath connection in cinder backend 2936eb2 Add config parameter for cinder mounting needs aa0e036 Use glance-swift.conf by default 8d00da1 Build containers for single consumer job 8ac5b13 Add cache prefetcher interval configuration option 43f3d5e Fix outdated get_glance_crednetials in Puppet::Provider::Glance a9b1a12 Fix rabbitmq dependency 69c10c4 Update the method of configuring glance backends 9439d56 Switch to Train 9baa381 Fix properties in glance_image provider for osc >= 4.0.0 cbc46cd Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 6ee5fb9 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- lib/puppet/provider/glance.rb | 106 ++++++----- lib/puppet/provider/glance_image/openstack.rb | 20 +- manifests/api.pp | 199 +++++++++++++------- manifests/backend/cinder.pp | 36 ++-- manifests/backend/file.pp | 11 +- manifests/backend/multistore/cinder.pp | 138 ++++++++++++++ manifests/backend/multistore/file.pp | 49 +++++ manifests/backend/multistore/rbd.pp | 87 +++++++++ manifests/backend/multistore/swift.pp | 125 +++++++++++++ manifests/backend/multistore/vsphere.pp | 109 +++++++++++ manifests/backend/rbd.pp | 26 ++- manifests/backend/s3.pp | 32 +--- manifests/backend/swift.pp | 42 ++--- manifests/backend/vsphere.pp | 23 ++- metadata.json | 10 +- .../add-enabled_backends-b7b2ab71eed5f7c6.yaml | 28 +++ ...cache_prefetcher_interval-e77d98c5235e91bc.yaml | 6 + ...f-swift_store_config_file-e59ff9753f3612a7.yaml | 7 + ...-backend-cinder-multipath-d18f73e3a9c55b05.yaml | 6 + ...d_cinder_mount_point_base-5741d2966cc10c7b.yaml | 6 + spec/acceptance/basic_glance_spec.rb | 2 +- spec/classes/glance_api_spec.rb | 202 ++++++++++++++------- spec/classes/glance_backend_s3_spec.rb | 121 ------------ .../glance_backend_multistore_cinder_spec.rb | 127 +++++++++++++ .../defines/glance_backend_multistore_file_spec.rb | 61 +++++++ spec/defines/glance_backend_multistore_rbd_spec.rb | 124 +++++++++++++ .../glance_backend_multistore_swift_spec.rb | 112 ++++++++++++ .../glance_backend_multistore_vsphere_spec.rb | 88 +++++++++ spec/unit/provider/glance_image_spec.rb | 29 +++ spec/unit/provider/glance_spec.rb | 61 +++++-- tox.ini | 2 +- 34 files changed, 1556 insertions(+), 444 deletions(-) From no-reply at openstack.org Wed Jun 16 15:57:07 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:57:07 -0000 Subject: [release-announce] puppet-cinder 15.5.0 (train) Message-ID: We are stoked to announce the release of: puppet-cinder 15.5.0: Puppet module for OpenStack Cinder This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added Dell EMC SC backend driver config that supports both iSCSI and FC options. * Added support for VxFlexOS backend driver Upgrade Notes ************* * The default value of cinder::api::keymgr_backend is changed from the invalid value cinder.keymgr.conf_key_mgr.ConfKeyManager to service default. Deprecation Notes ***************** * The cinder::api::os_region_name parameter was deprecated and has no effect. Use cinder::nova::region_name instead. Changes in puppet-cinder 15.4.0..15.5.0 --------------------------------------- d67dac0 Prepare the final stable/train release b8771d9 Build containers for single consumer job ff571a9 Expose vhost_custom_fragment d5721f9 Support for Dell EMC VXFlexOS Backend 4d2a6ea Support for Dell EMC SC Driver Volume Config b55676d Support for Dell EMC XTREMIO Driver Volume Config eb0dd3c Change ceph_init_override param for Debian b2c707d Refer keystone_authtoken to find credentials 54fcada Deprecate cinder::api::os_region_name 24b85a8 Fix rabbitmq dependency 7b2d2e9 Make tempest scope more strict 15afaea Support for PowerMax Volume Config f4aa29e Change default value for keymgr_backend to default cf85ed8 Switch to Train 6f07c74 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 25d61df Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- Gemfile | 3 +- lib/puppet/provider/cinder.rb | 21 +-- manifests/api.pp | 30 ++-- manifests/backend/dellemc_powermax.pp | 110 ++++++++++++++ manifests/backend/dellemc_sc.pp | 163 +++++++++++++++++++++ manifests/backend/dellemc_vxflexos.pp | 151 +++++++++++++++++++ manifests/backend/dellemc_xtremio.pp | 109 ++++++++++++++ manifests/backend/rbd.pp | 4 +- manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 7 + metadata.json | 10 +- ...lue-change-keymgr_backend-4a627bb17e688e18.yaml | 5 + ...cinder-api-os_region_name-812ccb925f867a52.yaml | 5 + .../notes/powermax-driver-d428e372280c44e6.yaml | 4 + releasenotes/notes/sc-driver-ab28e372280c44e6.yaml | 4 + .../notes/vxflexos-driver-abc8e372280c44e6.yaml | 3 + .../notes/xtremio-driver-abc8e372280c44e6.yaml | 4 + spec/classes/cinder_api_spec.rb | 50 ++----- spec/classes/cinder_wsgi_apache_spec.rb | 2 + .../cinder_backend_dellemc_powermax_spec.rb | 101 +++++++++++++ spec/defines/cinder_backend_dellemc_sc.rb | 134 +++++++++++++++++ .../cinder_backend_dellemc_vxflexos_spec.rb | 89 +++++++++++ spec/defines/cinder_backend_rbd_spec.rb | 6 +- spec/defines/cinder_dell_emc_xtremio_spec.rb | 120 +++++++++++++++ tox.ini | 2 +- 27 files changed, 1071 insertions(+), 75 deletions(-) From no-reply at openstack.org Wed Jun 16 15:57:13 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:57:13 -0000 Subject: [release-announce] puppet-placement 2.5.0 (train) Message-ID: We are gleeful to announce the release of: puppet-placement 2.5.0: Puppet module for OpenStack placement This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. 2.5.0 ^^^^^ New Features * Adds interface parameter to placement::keystone::authtoken to configure the interface to use for the Identity API endpoint. Valid values are "public", "internal" or "admin"(default). * The new "placement::client" class has been added to manage osc- placement package. Changes in puppet-placement 2.4.0..2.5.0 ---------------------------------------- 8fe110e Prepare the final stable/train release d57a3d9 Add support for management of osc-placement package 85948e4 Expose vhost_custom_fragment 39b9c77 Refactor placement::api 8fef1a3 Fix api.pp "Unknown variable" afddd56 New placement::keystone::authtoken::interface parameter dcf9a58 Switch to Train 5833470 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ec1f3a6 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/api.pp | 71 ++++++++++--------- manifests/client.pp | 24 +++++++ manifests/deps.pp | 11 +++ manifests/keystone/authtoken.pp | 7 ++ manifests/params.pp | 6 +- manifests/wsgi/apache.pp | 17 +++-- metadata.json | 8 +-- ...stone_authtoken_interface-4537941bc250a05d.yaml | 6 ++ .../notes/osc-placement-c9df6c2ce40537d0.yaml | 5 ++ spec/classes/placement_api_spec.rb | 81 ++++++++++++++++++++++ spec/classes/placement_client_spec.rb | 51 ++++++++++++++ spec/classes/placement_keystone_authtoken_spec.rb | 3 + spec/classes/placement_wsgi_apache.rb | 2 + tox.ini | 2 +- 16 files changed, 250 insertions(+), 48 deletions(-) From no-reply at openstack.org Wed Jun 16 15:58:02 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:58:02 -0000 Subject: [release-announce] puppet-keystone 15.5.0 (train) Message-ID: We are tickled pink to announce the release of: puppet-keystone 15.5.0: Puppet module for OpenStack Keystone This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Add TLS options to oslo.cache * Allow to specify drivername for postgres db * Adds interface parameter to keystone::resource::authtoken allow services to configure the interface to use for the Identity API endpoint. Valid values are "public", "internal" or "admin". * The keystone::endpoint::service_description parameter has been added with the default value of 'OpenStack Identity Service' (moved from hardcoded value to a parameter). This is used when setting the description on the identity service managed by the keystone::endpoint class. Bug Fixes ********* * Workers are raised to 2 x os_workers, so that we have as many workers as the one we had before we merged 2 keystone services(public and admin). * Fixed a bug where the keystone::resource::authtoken resource would not install the proper python memcache bindings when using python3. * The "default/public_endpiint" parameter is no longer set by default because of known issue with different hosts/protocol used for each endpoints (especially for admin endpoint and public endpoint) * In case public_endpoint can't be used and keystone providers are required, the deprecated "keystone::public_bind_host" and "keystone::public_port" can still be used so that all provider implementations can detect endpoint url from these parameters. These parameters are added to keystone.conf if non-default value is set. Changes in puppet-keystone 15.4.0..15.5.0 ----------------------------------------- 1dc5b6e Prepare the final stable/train release 37fd0cd Check length of unique array in roles::admin 247cade Add TLS options to oslo.cache 8ab3db3 Build containers for single consumer job 175b51f Make service desc in keystone::endpoint configurable 1660e2c Fix python package names (ldappool and pysaml2) a34e31d Convert more to rspec-puppet-facts 6d337fc allow to specify drivername for postgres db fe869f2 Revert "Do not set public_bind_host and public_port in eventlet section" 09b61ff Always pass --name when flushing keystone_service 60532ba Update doc to reflect code a58ef36 Install the correct memcache bindings for py3 e59b906 Update ldap-backend options 378efee OIDC : Add support for setting OIDCClaimDelimiter a110c96 Add support for JWKS based OAuth Token validation. 8a3172e Fix performance regression due to reduced number of keystone workers e57542a New keystone::resource::authtoken::interface parameter 124f64d Switch to Train 3181006 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 18ef734 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- lib/puppet/provider/keystone.rb | 35 +- lib/puppet/provider/keystone_service/openstack.rb | 3 + manifests/db.pp | 2 +- manifests/endpoint.pp | 23 +- manifests/federation/identity_provider.pp | 15 +- manifests/federation/openidc.pp | 41 +- manifests/init.pp | 97 ++-- manifests/ldap.pp | 9 +- manifests/ldap_backend.pp | 42 +- manifests/params.pp | 6 +- manifests/resource/authtoken.pp | 7 + manifests/roles/admin.pp | 8 +- manifests/wsgi/apache.pp | 4 +- metadata.json | 6 +- .../notes/add_tls_options-8ed38a82af2f378f.yaml | 4 + ...drivername-for-postgresql-daa276a598844884.yaml | 3 + .../authtoken_interface-2e8ccbd3e961e0fb.yaml | 6 + .../notes/double-workers-b9e340a18a5e9823.yaml | 5 + ...service-desc-configurable-823573c250eaef96.yaml | 7 + .../memcache-package-pyvers-a3db976c1a881dcf.yaml | 5 + .../unset-public_endpoint-be0e6c20416e9762.yaml | 12 + spec/acceptance/keystone_wsgi_apache_spec.rb | 18 - spec/classes/keystone_db_postgresql_spec.rb | 4 +- .../keystone_federation_identity_provider_spec.rb | 191 ++++---- spec/classes/keystone_federation_openidc_spec.rb | 33 +- spec/classes/keystone_init_spec.rb | 74 +-- spec/classes/keystone_ldap_spec.rb | 225 +++++---- spec/classes/keystone_wsgi_apache_spec.rb | 8 +- spec/defines/keystone_ldap_backend_spec.rb | 506 +++++++++++---------- spec/defines/keystone_resource_authtoken_spec.rb | 13 +- spec/unit/provider/keystone_spec.rb | 89 +++- templates/openidc.conf.erb | 7 + tox.ini | 2 +- 36 files changed, 924 insertions(+), 591 deletions(-) From no-reply at openstack.org Wed Jun 16 15:58:48 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:58:48 -0000 Subject: [release-announce] puppet-mistral 15.5.0 (train) Message-ID: We are happy to announce the release of: puppet-mistral 15.5.0: Puppet module for OpenStack Mistral This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. Changes in puppet-mistral 15.4.0..15.5.0 ---------------------------------------- 5dcd237 Prepare the final stable/train release 426952d Expose vhost_custom_fragment c733b8a Switch to Train 3d1d12d Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 01db238 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/wsgi/apache.pp | 7 +++++++ metadata.json | 8 ++++---- spec/classes/mistral_wsgi_apache_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 17 insertions(+), 6 deletions(-) From no-reply at openstack.org Wed Jun 16 15:59:00 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:59:00 -0000 Subject: [release-announce] puppet-murano 15.5.0 (train) Message-ID: We are amped to announce the release of: puppet-murano 15.5.0: Puppet module for OpenStack Murano This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 15.4.0..15.5.0 --------------------------------------- 7a3a8d7 Prepare the final stable/train release c6580ec Fix rabbitmq dependency 4305e8c Switch to Train 74a92eb Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 7376830 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 16 15:59:13 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:59:13 -0000 Subject: [release-announce] puppet-tacker 15.4.1 (train) Message-ID: We are jazzed to announce the release of: puppet-tacker 15.4.1: Puppet module for OpenStack Tacker This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tacker Download the package from: https://tarballs.openstack.org/puppet-tacker/ Please report issues through: https://bugs.launchpad.net/puppet-tacker/+bugs For more details, please see below. Changes in puppet-tacker 15.4.0..15.4.1 --------------------------------------- 548f023 Prepare the final stable/train release b1dfac6 Fix rabbitmq dependency dd7c48d Switch to Train 1183276 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train a737586 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 16 15:59:22 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:59:22 -0000 Subject: [release-announce] puppet-swift 15.5.0 (train) Message-ID: We are delighted to announce the release of: puppet-swift 15.5.0: Puppet module for OpenStack Swift This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Add swift::proxy::domain_remap class to configure domain_remap middleware for swift proxy. * Add swift::proxy::symlink class to configure symlink middleware for swift proxy. * Add TLS options for Memcached TLS connections. * Added new parameter memcache_max_connections to proxy::cache class that can be used to configure the maximum number of connections to each memcached server per worker. Changes in puppet-swift 15.4.0..15.5.0 -------------------------------------- 1fdb986 Prepare the final stable/train release feb9705 Add TLS options for swift memcached client d36c510 Add parameter memcache_max_connections f37bc1a Build containers for single consumer job cc79e4a Add domain_remap middleware support 3bbd1da Add missing openstacklib to dependencies 1795fc0 Add symlink middleware support 654e964 Switch to Train 82e146a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 0334e46 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- manifests/containerreconciler.pp | 52 +++++++++-- manifests/objectexpirer.pp | 34 +++++++ manifests/proxy/cache.pp | 45 ++++++++- manifests/proxy/domain_remap.pp | 104 +++++++++++++++++++++ manifests/proxy/symlink.pp | 42 +++++++++ metadata.json | 8 +- ...-swift-proxy-domain_remap-d3b316fb6e964716.yaml | 4 + .../add-swift-proxy-symlink-4864e7c1755567d4.yaml | 4 + .../notes/add-tls-options-cfc659d2a0ad42bc.yaml | 4 + ...-memcache-max-connections-50876054c14dbdd5.yaml | 6 ++ spec/classes/swift_containerreconciler_spec.rb | 18 ++-- spec/classes/swift_objectexpirer_spec.rb | 4 +- spec/classes/swift_proxy_cache_spec.rb | 67 ++++++++----- spec/classes/swift_proxy_domain_remap_spec.rb | 59 ++++++++++++ spec/classes/swift_proxy_symlink_spec.rb | 33 +++++++ tox.ini | 2 +- 19 files changed, 444 insertions(+), 47 deletions(-) From no-reply at openstack.org Wed Jun 16 15:59:44 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 15:59:44 -0000 Subject: [release-announce] puppet-watcher 15.4.1 (train) Message-ID: We are amped to announce the release of: puppet-watcher 15.4.1: Puppet module for OpenStack Watcher This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. Changes in puppet-watcher 15.4.0..15.4.1 ---------------------------------------- c5d6aef Prepare the final stable/train release 15bfeb6 Fix rabbitmq dependency e30f835 Switch to Train 48ab2fc Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 4bcfb8b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 8 ++++---- tox.ini | 2 +- 4 files changed, 8 insertions(+), 6 deletions(-) From no-reply at openstack.org Wed Jun 16 16:00:37 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:00:37 -0000 Subject: [release-announce] puppet-panko 15.5.0 (train) Message-ID: We are tickled pink to announce the release of: puppet-panko 15.5.0: Puppet module for OpenStack Panko This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-panko Download the package from: https://tarballs.openstack.org/puppet-panko/ Please report issues through: https://bugs.launchpad.net/puppet-panko/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Added events_delete_batch_size parameter to the expirer class to enable configuration of the parameter with same name. It serves the purpose of limiting number of deleted events in single purge run. Changes in puppet-panko 15.4.0..15.5.0 -------------------------------------- da52267 Prepare the final stable/train release 4ae0c64 Allow configuration of limit of batch size for exirer 49b7b3e Switch to Train 7a4a9a7 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 78f8981 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/expirer.pp | 21 +++++++++++++++------ metadata.json | 8 ++++---- releasenotes/notes/batchsize-9f201b538828370d.yaml | 6 ++++++ spec/classes/panko_expirer_spec.rb | 13 +++++++++++++ tox.ini | 2 +- 7 files changed, 42 insertions(+), 12 deletions(-) From no-reply at openstack.org Wed Jun 16 16:02:17 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:02:17 -0000 Subject: [release-announce] puppet-openstack_extras 15.4.1 (train) Message-ID: We contentedly announce the release of: puppet-openstack_extras 15.4.1: Puppet module for OpenStack Openstack_extras This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 15.4.0..15.4.1 ------------------------------------------------- 6ab7806 Prepare the final stable/train release 371931c Require yum-plugin-priorities only in CentOS/RHEL<8 375b92e Replace hardcoded CentOS version with fact ae13f36 Set show_diff to false for auth_file f835298 Switch to Train 51a30bb Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 71157b1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/auth_file.pp | 11 +++---- manifests/repo/redhat/redhat.pp | 34 +++++++++++++++------- metadata.json | 2 +- .../openstack_extras_repo_redhat_redhat_spec.rb | 30 +++++++++++++++++++ tox.ini | 2 +- 7 files changed, 64 insertions(+), 19 deletions(-) From no-reply at openstack.org Wed Jun 16 16:02:17 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:02:17 -0000 Subject: [release-announce] puppet-nova 15.8.0 (train) Message-ID: We eagerly announce the release of: puppet-nova 15.8.0: Puppet module for OpenStack Nova This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 15.8.0 ^^^^^^ New Features * Added parameter live_migration_timeout_action to nova::migration::libvirt. * The new "nova::migration::libvirt::live_migration_permit_post_copy" parameter has been added to support post copy mode in live migration. * The new "nova::migration::libvirt::live_migration_permit_auto_converge" parameter has been added to support auto converge in live migration. * Add support for managing configuration for persistent memory(pmem) namespaces. * Adds parameter nova::compute::libvirt::max_queues to configure the libvirt max_queues. Changes in puppet-nova 15.6.0..15.8.0 ------------------------------------- 4e737f79 Prepare a new release for Train c8507e92 Fix libvirt version discovery for CentOS Stream 8e2c0a45 Add parameter to configure the libvirt max_queues 32bd0fa3 Cleanup listen option from libvirtd service file ad46ddff Build containers for single consumer job b43e741e Fix duplicated user keys 6060a871 Add live_migration_timeout_action to nova::migration::libvirt 30684e64 Expose nova config option [workaround]/never_download_image_if_on_rbd a59439fb Add support for more migration parameters e126ce81 Fix wrong notification between api service and httpd 53620af2 Fix ignored unit test cases for nova::migration::libvirt 9629db4c Add `pmem_namespaces` parameter 94911988 Fix ignored test cases for nova::compute::libvirt 51a68574 Expose vhost_custom_fragment Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + lib/puppet/type/nova_aggregate.rb | 5 + lib/puppet/type/nova_service.rb | 5 + manifests/api.pp | 2 +- manifests/compute.pp | 1 + manifests/compute/libvirt.pp | 23 ++- manifests/compute/libvirt/version.pp | 2 +- manifests/keystone/auth.pp | 3 +- manifests/migration/libvirt.pp | 154 +++++++++++++-------- manifests/workarounds.pp | 10 ++ manifests/wsgi/apache_api.pp | 7 + manifests/wsgi/apache_metadata.pp | 7 + metadata.json | 2 +- ..._migration_timeout_action-ba86ca0d5b25ba90.yaml | 4 + ...more_migration_parameters-46291332615deb4f.yaml | 8 ++ .../add_pmem_namespaces-7c425a8c65ecd119.yaml | 5 + ...ompute-libvirt-max_queues-97a35922dbacb0b1.yaml | 5 + spec/classes/nova_compute_libvirt_spec.rb | 74 +++------- spec/classes/nova_cron_purge_shadow_tables.rb | 3 - spec/classes/nova_keystone_auth_spec.rb | 15 +- spec/classes/nova_migration_libvirt_spec.rb | 94 ++++++++++--- spec/classes/nova_workarounds_spec.rb | 7 +- spec/classes/nova_wsgi_apache_api_spec.rb | 2 + 23 files changed, 288 insertions(+), 151 deletions(-) From no-reply at openstack.org Wed Jun 16 16:02:27 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:02:27 -0000 Subject: [release-announce] puppet-ovn 15.5.0 (train) Message-ID: We are pumped to announce the release of: puppet-ovn 15.5.0: Puppet module for OVN This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * The new "ovn::controller::ovn_chassis_mac_map" parameter has been added. For distributed vlan in ovn we need to set mac addresses per compute in external_ids:ovn-chassis-mac-mappings Changes in puppet-ovn 15.4.0..15.5.0 ------------------------------------ a6b0f69 Prepare the final stable/train release 9bbc14b Set external_ids:ovn-chassis-mac-mappings dbfcb84 Switch to Train 90c8de5 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 9c4727a Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 6 ++--- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 22 +++++++++++++++ tox.ini | 2 +- 7 files changed, 65 insertions(+), 6 deletions(-) From no-reply at openstack.org Wed Jun 16 16:02:40 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:02:40 -0000 Subject: [release-announce] puppet-trove 15.4.1 (train) Message-ID: We are psyched to announce the release of: puppet-trove 15.4.1: Puppet module for OpenStack Trove This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. Changes in puppet-trove 15.4.0..15.4.1 -------------------------------------- 0eacf4d Prepare the final stable/train release bddf0f9 Fix rabbitmq dependency 4710735 Switch to Train 7baf21c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train d809f8f Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 16 16:03:08 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:03:08 -0000 Subject: [release-announce] puppet-sahara 15.4.1 (train) Message-ID: We are gleeful to announce the release of: puppet-sahara 15.4.1: Puppet module for OpenStack Sahara This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 15.4.0..15.4.1 --------------------------------------- e8c5a9d Prepare the final stable/train release 4918a93 Fix rabbitmq dependency 92a869a Switch to Train 12fc21c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train c09336e Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 16 16:05:30 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:05:30 -0000 Subject: [release-announce] puppet-vswitch 11.5.0 (train) Message-ID: We are stoked to announce the release of: puppet-vswitch 11.5.0: Puppet module for OpenStack Vswitch This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. 11.5.0 ^^^^^^ New Features * The following two parameters have been added. * "vswitch::ovs::vlan_limit" * "vswitch::dpdk::vlan_limit" Changes in puppet-vswitch 11.4.0..11.5.0 ---------------------------------------- 5d96dab Prepare the final stable/train release d8acf3c Add support for vlan_limit option 2cc977b Add missing openstacklib to dependencies 5b074e7 Switch to Train 58734f4 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train e35c71c Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/dpdk.pp | 13 ++++++++++++ manifests/ovs.pp | 17 ++++++++++++++-- metadata.json | 6 +++++- .../notes/vlan-limit-b40bd9ca223b76ca.yaml | 7 +++++++ spec/classes/vswitch_dpdk_spec.rb | 5 +++++ spec/classes/vswitch_ovs_spec.rb | 23 ++++++++++++++++------ tox.ini | 2 +- 9 files changed, 66 insertions(+), 11 deletions(-) From no-reply at openstack.org Wed Jun 16 16:05:33 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 16 Jun 2021 16:05:33 -0000 Subject: [release-announce] puppet-tempest 15.4.1 (train) Message-ID: We enthusiastically announce the release of: puppet-tempest 15.4.1: Puppet module for OpenStack Tempest This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. Changes in puppet-tempest 15.4.0..15.4.1 ---------------------------------------- 1e6a89a Prepare the final stable/train release 8ad7ca5 Use python3-swift-tests package on CentOS8 a9d2d2e Switch to Train e1bf622 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 84e2b4d Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/params.pp | 2 +- metadata.json | 6 +++--- tox.ini | 2 +- 5 files changed, 8 insertions(+), 6 deletions(-) From no-reply at openstack.org Thu Jun 17 12:01:16 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 17 Jun 2021 12:01:16 -0000 Subject: [release-announce] rally 3.3.0 Message-ID: We joyfully announce the release of: rally 3.3.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 3.2.0..3.3.0 ----------------------------- 1d9c1e82f Fix contribute page e67de5770 Prepare for a new release 3.3.0 927980931 Update installation guide 848123595 Update requirements e15d4aa8d Change base image 8414fd260 [community goal] Update contributor documentation 8a1c32613 Keep using bionic for tox jobs except with Python 3.8 eeeb08dfc setup.cfg: Replace dashes with underscores ee09cab54 Get rid of decorator lib a72a6e1ce Let verify command return different return codes depending on results. 412680357 Remove __unicode__() from RallyCliError 68d035d0a Fix different issues to ublock CI Diffstat (except docs and test files) ------------------------------------- .zuul.d/python-jobs.yaml | 3 + CHANGELOG.rst | 17 ++ CONTRIBUTING.rst | 20 +- DOCKER_README.md | 14 +- Dockerfile | 2 +- rally/cli/commands/task.py | 17 +- rally/cli/commands/verify.py | 7 + rally/cli/envutils.py | 32 ++-- rally/plugins/__init__.py | 13 +- rally/ui/utils.py | 3 +- requirements.txt | 6 +- setup.cfg | 6 +- tox.ini | 3 +- upper-constraints.txt | 78 ++++---- 24 files changed, 247 insertions(+), 491 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 540034c26..8fc8ac54e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6 @@ -alembic!=1.2.0 # MIT -decorator # new BSD License +alembic!=1.2.0,!=1.6.3 # MIT @@ -9,0 +9 @@ jsonschema # MIT +markupsafe # BSD-3-Clause @@ -17 +17 @@ pbr!=2.1.0 # Apache Software License -PrettyTable<0.8 # BSD (3 clause) +PrettyTable # BSD (3 clause) From no-reply at openstack.org Thu Jun 17 12:08:41 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 17 Jun 2021 12:08:41 -0000 Subject: [release-announce] ovsdbapp 1.11.0 (xena) Message-ID: We are psyched to announce the release of: ovsdbapp 1.11.0: A library for creating OVSDB applications This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. 1.11.0 ^^^^^^ New Features * Support the new "allow-stateless" ACL action. It was added in OVN 21.06. Changes in ovsdbapp 1.10.0..1.11.0 ---------------------------------- a7127ff ovn: support allow-stateless ACL verb cde7c1f Actually close the connection in Connection.stop() 6596164 Don't spam retries 100s of times a second ba55cc2 Fix docs job Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 5 ++++- ovsdbapp/backend/ovs_idl/transaction.py | 8 ++++++++ ovsdbapp/schema/ovn_northbound/api.py | 6 ++++-- ovsdbapp/schema/ovn_northbound/commands.py | 6 ++++-- .../notes/ovn-support-allow-stateless-01aed5acdcd1c0d1.yaml | 3 +++ tox.ini | 1 + 6 files changed, 24 insertions(+), 5 deletions(-) From no-reply at openstack.org Thu Jun 17 12:13:05 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 17 Jun 2021 12:13:05 -0000 Subject: [release-announce] validations-libs 1.2.0 Message-ID: We are gleeful to announce the release of: validations-libs 1.2.0: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.1.0..1.2.0 ---------------------------------------- 4d1df7b New optional param for log path 48cc737 Fixing the recursive path handling. a70ad12 Constants path formatting unification f2830c5 Improved log path handling 29b147e Override cliff command parser to handle argparser conflict_handler 04e84c8 Update Validations Framework IRC channels 91c1710 Expansion of logging for the list action 7cb048a Remove VALIDATION_GROUPS constant 254d447 Refactoring of the cli lister module c00f96a Deprecated assertEquals replaced e206da0 Refactoring of the cli run module ea125c1 Paths no longer contain double '/' eb439a3 Expansion of logging for the show action. 337288f Refactoring of the cli parseractions module 414687e Refactoring of the cli history module b2e87ca Refactoring of the cli show module 6ce0450 Refactoring of the cli app module 0f00fd7 Use validation_component for Standalone CI jobs ac415ff Reqcheck job for upstream validations-libs 01ab24c Bumping the ansible-runner version to 1.4.4 cacb93d Removing ansible-autodoc 78b3d28 Fix Python 2.7 compatibility for test_ansible.py f2e37b0 Make Python Interpreter option for Ansible Validation Run 658b73d Elevate the verbosity level when running validation(s) 23b15aa Move fetch_validations role from validations-libs-functional to post playbook 3e29d44 Disable quiet mode run when using an Ansible Custom Callback 5815fb3 setup.cfg: Replace dashes with underscores 6bfdb04 Retrieve n latest validation results 7cdeeeb Cover now prints line numbers 57a346c Bump pre-commit repositories efca065 Add support for JUnitXML output (optional) 135478c Version bumps for rhel9 transition 03981db CLI colors refactored c211177 group info test mocks and asserts 6329e3b Raise exception if result is empty 648c2d8 Expanded and increased strictness of the ansible.py tests Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 12 +- .reqcheck_override.yaml | 6 + .zuul.yaml | 21 +- playbooks/post.yaml | 1 + playbooks/reqcheck.yaml | 46 +++ playbooks/validations-libs-functional.yaml | 1 - requirements.txt | 2 +- setup.cfg | 5 +- tox.ini | 6 +- validations_libs/ansible.py | 2 +- validations_libs/cli/app.py | 8 +- validations_libs/cli/base.py | 57 ++++ validations_libs/cli/colors.py | 57 ++++ validations_libs/cli/common.py | 71 +++- validations_libs/cli/history.py | 77 ++++- validations_libs/cli/lister.py | 9 +- validations_libs/cli/parseractions.py | 16 +- validations_libs/cli/run.py | 96 +++--- validations_libs/cli/show.py | 13 +- validations_libs/constants.py | 19 +- validations_libs/utils.py | 121 ++++++- validations_libs/validation_actions.py | 101 ++++-- validations_libs/validation_logs.py | 30 +- 39 files changed, 1398 insertions(+), 731 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c2abb7a..6c0cd81 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -ansible-runner>=1.4.0 # Apache-2.0 +ansible-runner>=1.4.4 # Apache-2.0 From no-reply at openstack.org Sat Jun 19 09:41:52 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Sat, 19 Jun 2021 09:41:52 -0000 Subject: [release-announce] kolla-ansible 9.3.2 (train) Message-ID: We are amped to announce the release of: kolla-ansible 9.3.2: Ansible Deployment of Kolla containers This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 9.3.2 ^^^^^ Bug Fixes * A bug where sriov_agent.ini wasn't copied due to "Permission denied" error was fixed. LP#1923467 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Fixes some configuration issues around Barbican logging. LP#1891343 * Fixes some configuration issues around Cinder logging. LP#1916752 * Fixes an issue with keepalived which was not recreated during an upgrade if configuration is unchanged. LP#1928362 * Fixes an issue with executing "kolla-ansible" when installed via "pip install --user". LP#1915527 * Removes whitespace around equal signs in "zookeeper.cfg" which were preventing the "zkCleanup.sh" script from running correctly. Changes in kolla-ansible 9.3.1..9.3.2 ------------------------------------- 3a1b94705 Support editable installation in all cases 6966e6fae neutron: Add become for copying sriov_agent.ini ebaa5bb8a Fix RabbitMQ restart ordering 4920980ad CI: Use PATH to find kolla-ansible script c12330f54 [CI] Remove setup_gate.sh symlink 018b997b1 CI: pull images before deploy e46628173 Remove [octavia]/base_url option from neutron.conf 26d310eea Ensure keepalived is upgraded 56eefd8c4 baremetal: Install Docker SDK less than 5.0.0 05b551b73 Disable Alertmanager's peer gossip in non-HA deployments 189a4e54e Use @type instead of type f3268ac5d Negative seqno need to be considered when comparing seqno 26760b639 docs: Improve policy documentation 5e3e2d366 Document setuptools update 82ae334ff Update setuptools inside virtualenvs 437c6a1e3 Fix installation errors with Python 2 147951d0b nova-cell: Stop printing ceph keys in output a0c0d6e90 docs: fix registry mirror example 99ea10b28 CentOS 8: Make it clearer the 7 to 8 migration stays on Train a919fbcc3 CI: fix kolla-ansible installation in stable/train df7b46df8 Remove whitespace around equal signs in zookeeper.cfg 5836fea52 Fix Cinder log parsing 6b9b4a5c2 CI: Add ssh retries 4e446b551 Do not wait for grafana to start when kolla_action=config 53fdc6217 Drop lower-constraints 12247f7a9 Fix installation with pip install --user ef0c1163a Fix monasca-grafana check e8030d0fc Fix Barbican API log config d55c82159 docs: Improve multinode Docker registry setup 4a1032b3b Use internal API for Barbican communication Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 27 +++- .../roles/barbican/templates/barbican-api.ini.j2 | 1 + .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 3 + ansible/roles/baremetal/tasks/install.yml | 3 +- ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 4 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 4 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 4 +- .../common/templates/conf/output/00-local.conf.j2 | 4 +- ansible/roles/glance/templates/glance-api.conf.j2 | 6 + ansible/roles/grafana/handlers/main.yml | 1 + ansible/roles/haproxy/tasks/upgrade.yml | 2 + ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/monasca/handlers/main.yml | 3 +- ansible/roles/neutron/tasks/config.yml | 1 + ansible/roles/neutron/templates/neutron.conf.j2 | 5 - ansible/roles/nova-cell/tasks/external_ceph.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 1 + ansible/roles/nova/templates/nova.conf.j2 | 1 + .../templates/prometheus-alertmanager.json.j2 | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 18 ++- ansible/roles/zookeeper/tasks/config.yml | 1 + lower-constraints.txt | 98 -------------- .../notes/bug-1923467-80973d9fbe1f5287.yaml | 6 + .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 + .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 + .../fix-barbican-logging-42068f47fe1e4e4d.yaml | 5 + .../notes/fix-cinder-logging-22fea4739begd6s.yaml | 5 + .../fix-keepalived-upgrade-a395e39dc946e618.yaml | 6 + .../fix-pip-install-user-5f871f67433e465a.yaml | 6 + .../zookeeper-cfg-syntax-02e93c01d6a24f35.yaml | 5 + tools/kolla-ansible | 28 +++- tools/setup_gate.sh | 136 -------------------- tox.ini | 7 - zuul.d/base.yaml | 1 - 53 files changed, 430 insertions(+), 363 deletions(-) From no-reply at openstack.org Sat Jun 19 09:43:51 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Sat, 19 Jun 2021 09:43:51 -0000 Subject: [release-announce] kolla 9.4.0 (train) Message-ID: We are tickled pink to announce the release of: kolla 9.4.0: Kolla OpenStack Deployment This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 9.3.1..9.4.0 ----------------------------- fa53a60c1 Fix _get_images_dir when pip-installed with --user c08d80950 Bump final OpenStack versions for Train 7a8fe4221 Enable Debian updates repo 715d799ab Fix build of masakari-monitors image 326201932 CI: drop bashism from template overrides 3b378b0a1 [CI] Trust only infra mirrors and fix APT mirrors c9b0e2ae4 rabbitmq: Move to packagecloud 56a570ddc base: configure curl before first use 3251922dd Bump OpenStack versions for Train 03adc9ddf Fix several issues (Train) 1378abcfa Drop lower-constraints 441382134 Fix Mistral source images to respect upper-constraints Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 1 - .../rabbitmq-3.7.24/rabbitmq_rabbitmq-erlang.repo | 4 +- .../rabbitmq-3.7.24/rabbitmq_rabbitmq-server.repo | 4 +- kolla/common/config.py | 72 ++++++++-------- kolla/image/build.py | 4 +- lower-constraints.txt | 99 ---------------------- .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 ++ .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 ++ .../notes/mistral-respect-uc-77aea99b5c6506ba.yaml | 4 + .../rabbitmq-packagecloud-c009ff6d0d2bd02d.yaml | 6 ++ .../ubuntu-uses-mirrors-now-0858d579944eea48.yaml | 5 ++ tox.ini | 7 -- 25 files changed, 122 insertions(+), 199 deletions(-) From no-reply at openstack.org Sat Jun 19 09:47:56 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Sat, 19 Jun 2021 09:47:56 -0000 Subject: [release-announce] kayobe 7.3.0 (train) Message-ID: We enthusiastically announce the release of: kayobe 7.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. Changes in kayobe 7.2.1..7.3.0 ------------------------------ de5fa9ac Update CentOS 8 docs to use 8.4 image ad86b880 Revert "CI: switch to quay.io for container images" cfad3bed docs: Update Freenode to OFTC 3f95e6c5 CI: Remove unused Docker images after overcloud upgrade c39bdcdd Sync the names and content of the repo-files for CentOS8 67b8e786 Restore upper constraints for docs and releasenotes b26f4c1c CI: switch to quay.io for container images f8b4d2b1 Use released version of mrlesmithjr.mdadm b57f536e Update setuptools before installing kayobe c12192c1 Revert "Performance: skip LVM configuration if no groups configured" 67103fb5 Fix help texts of inventory options 020e9329 Fix installation errors with Python 2 7ecc15fa Update seed VM image to CentOS 8.3 754f5684 Avoid fact gathering for group_by b904559a CI: increase Ansible Galaxy retries & add delay 23a46166 CI: Fix kayobe-tox-molecule job 0ec936aa Document requirements for symlinks used by custom playbooks 130393e3 Update IPA docs and test build with extra-hardware 93ff0175 Fix CentOS 7 IPA build and test in CI 7640af70 Test building seed deployment images in the seed job (CentOS 8 only) 41c4c687 Fix building CentOS 8 IPA images on stable/train a3557353 Quote kolla limit when calling kolla-ansible 38d0904f CI: Fix overcloud and seed VM jobs on vexxhost clouds 8bac90b1 CI: use overlay2 storage driver for overcloud deploy f668d9be Fix copying Swift ring files 63c68e32 Add ipa_build_upper_constraints_file variable 564af0ab CI: overcloud upgrade fixes for Train 15e565fe Performance: avoid set_fact in Kolla Ansible host vars f4a8db8f Fix /tmp/swift-rings/backups/ files deletion b3dd0612 Fix --limit with commas Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/action_plugins/kolla_ansible_host_vars.py | 19 ++ ansible/group_vars/all/ipa | 5 + ansible/group_vars/all/swift | 6 +- ansible/kayobe-ansible-user.yml | 1 + ansible/kolla-ansible.yml | 274 ++++++--------- ansible/kolla-openstack.yml | 3 + ansible/lvm.yml | 15 +- ansible/overcloud-bios-raid.yml | 1 + ansible/overcloud-grafana-configure.yml | 3 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 4 +- ansible/overcloud-introspection-rules.yml | 3 +- ansible/overcloud-ipa-build.yml | 15 +- ansible/overcloud-ipa-images.yml | 3 +- ansible/physical-network.yml | 2 + ansible/provision-net.yml | 3 +- ansible/roles/dnf/tasks/local-mirror.yml | 10 + .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 -- .../dnf/templates/CentOS-Linux-AppStream.repo.j2 | 17 + .../dnf/templates/CentOS-Linux-BaseOS.repo.j2 | 17 + .../dnf/templates/CentOS-Linux-Extras.repo.j2 | 17 + ansible/roles/kolla-ansible/tasks/install.yml | 3 +- ansible/roles/kolla-openstack/tasks/config.yml | 17 +- ansible/roles/kolla/tasks/install.yml | 3 +- .../roles/swift-rings/files/swift-ring-builder.py | 4 +- ansible/roles/swift-rings/tasks/main.yml | 10 +- ansible/seed-ipa-build.yml | 12 +- dev/functions | 34 +- dev/tenks-deploy-config-compute.yml | 4 + etc/kayobe/ipa.yml | 4 + kayobe/ansible.py | 7 +- kayobe/kolla_ansible.py | 10 +- kayobe/plugins/__init__.py | 0 kayobe/plugins/action/__init__.py | 0 kayobe/plugins/action/kolla_ansible_host_vars.py | 152 +++++++++ .../plugins/action/test_kolla_ansible_host_vars.py | 368 +++++++++++++++++++++ kayobe/utils.py | 27 ++ playbooks/kayobe-overcloud-base/overrides.yml.j2 | 7 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 14 + playbooks/kayobe-overcloud-upgrade-base/pre.yml | 8 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/overrides.yml.j2 | 50 +++ .../fix-limit-with-commas-04a357b0b7ef0371.yaml | 6 + ...a-build-upper-constraints-5686abaa161b0d94.yaml | 7 + .../notes/quote-kolla-limit-042422e69c008109.yaml | 5 + .../notes/seed-vm-centos-8.3-7726c9d0603508eb.yaml | 4 + .../notes/story-2007297-73f498ef6bc89fe9.yaml | 5 + .../notes/story-2008354-0c34e2ad7aeb7d3d.yaml | 6 + .../train-centos7-ipa-fix-cc6db8e25578649c.yaml | 6 + .../notes/train-ipa-dib-fix-c348a7e3ba346ba1.yaml | 8 + requirements.yml | 5 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 + test-requirements.txt | 2 + tools/ansible-galaxy-retried.sh | 6 +- tox.ini | 4 +- 66 files changed, 1072 insertions(+), 313 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 020031c3..516e5932 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19,2 @@ paramiko +# ruamel.yaml 0.17.0 makes the kayobe-tox-molecule job fail. +ruamel.yaml<0.17.0 From no-reply at openstack.org Mon Jun 21 14:24:44 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 21 Jun 2021 14:24:44 -0000 Subject: [release-announce] puppet-murano 15.5.1 (train) Message-ID: We jubilantly announce the release of: puppet-murano 15.5.1: Puppet module for OpenStack Murano This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 15.5.0..15.5.1 --------------------------------------- 6f29cf4 Fix inconsistent version in metadata.json Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) From no-reply at openstack.org Mon Jun 21 14:30:16 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 21 Jun 2021 14:30:16 -0000 Subject: [release-announce] puppet-nova 15.8.1 (train) Message-ID: We are gleeful to announce the release of: puppet-nova 15.8.1: Puppet module for OpenStack Nova This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. Changes in puppet-nova 15.8.0..15.8.1 ------------------------------------- 287ce1fe Bump metadata to create the real final train release 2442758b Fixing section ovsdb_connection e2c2ba61 Prepare the final stable/train release 43cd2b49 Introducing default_tls_verify a6adf208 Disable libvirtd.service before starting sockets f939f674 Add TLS options to oslo.cache 2ae766f1 Allow both DEFAULT/dhcp_domain and api/dhcp_domain to be set dbba136c Set dhcp_domain for all nova services 64113fee Revert "Remove parameter nova::compute::pci_passthrough" Diffstat (except docs and test files) ------------------------------------- manifests/cache.pp | 43 +++++++++++++++++ manifests/compute.pp | 15 ++++++ manifests/compute/libvirt/qemu.pp | 12 +++++ manifests/init.pp | 9 +++- manifests/metadata.pp | 16 ++----- manifests/migration/libvirt.pp | 12 ++++- metadata.json | 14 +++--- .../notes/add_tls_options-9f4cd19db6a76a76.yaml | 4 ++ .../qemu-default_tls_verify-57e7afd6670afec2.yaml | 5 ++ spec/classes/nova_cache_spec.rb | 17 +++++++ spec/classes/nova_compute_libvirt_qemu_spec.rb | 55 +++++++++++++++++++++- spec/classes/nova_compute_spec.rb | 55 ++++++++++++++++++++++ spec/classes/nova_init_spec.rb | 8 +++- 13 files changed, 240 insertions(+), 25 deletions(-) From no-reply at openstack.org Tue Jun 22 15:00:28 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 22 Jun 2021 15:00:28 -0000 Subject: [release-announce] kolla-ansible 12.0.0.0rc2 (wallaby) Message-ID: Hello everyone, A new release candidate for kolla-ansible for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/wallaby Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *wallaby-rc-potential* to bring it to the kolla-ansible release crew's attention. From no-reply at openstack.org Tue Jun 22 15:01:10 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 22 Jun 2021 15:01:10 -0000 Subject: [release-announce] kolla 12.0.0.0rc2 (wallaby) Message-ID: Hello everyone, A new release candidate for kolla for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kolla/src/branch/stable/wallaby Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *wallaby-rc-potential* to bring it to the kolla release crew's attention. From no-reply at openstack.org Tue Jun 22 15:01:54 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 22 Jun 2021 15:01:54 -0000 Subject: [release-announce] kayobe 10.0.0.0rc2 (wallaby) Message-ID: Hello everyone, A new release candidate for kayobe for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/wallaby Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *wallaby-rc-potential* to bring it to the kayobe release crew's attention. From no-reply at openstack.org Wed Jun 23 16:23:59 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 23 Jun 2021 16:23:59 -0000 Subject: [release-announce] tripleo-operator-ansible 0.5.1 Message-ID: We are overjoyed to announce the release of: tripleo-operator-ansible 0.5.1: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.5.0..0.5.1 ------------------------------------------------ 574ada8 Revert "Added publish-openstack-python-tarball job to publish the tarballs" d997a4b Added publish-openstack-python-tarball job to publish the tarballs 920f76c Correct the tox option for skipping sdist generation 2278638 Add missing "vip" argument to the CLI 99641cf tripleo_overcloud_node_provision - add --network-config f8c8076 Add role for tripleo_overcloud_network_vip_provision c801580 Add role for tripleo_overcloud_network_provision 17ed0d7 Only trigger provider when consumer child present c1527ca tripleo_repo: add missing >- to remove trailing \n 0f20569 tripleo_repos: add tripleo_repos_repo_branch Diffstat (except docs and test files) ------------------------------------- .../tripleo_overcloud_network_provision/README.md | 57 +++++++++++++++++++++ .../defaults/main.yml | 14 ++++++ .../meta/main.yml | 42 ++++++++++++++++ .../molecule/default/converge.yml | 44 ++++++++++++++++ .../molecule/default/molecule.yml | 19 +++++++ .../molecule/default/prepare.yml | 8 +++ .../tasks/main.yml | 58 ++++++++++++++++++++++ .../README.md | 58 ++++++++++++++++++++++ .../defaults/main.yml | 15 ++++++ .../meta/main.yml | 42 ++++++++++++++++ .../molecule/default/converge.yml | 44 ++++++++++++++++ .../molecule/default/molecule.yml | 19 +++++++ .../molecule/default/prepare.yml | 8 +++ .../tasks/main.yml | 58 ++++++++++++++++++++++ .../defaults/main.yml | 1 + .../molecule/default/converge.yml | 12 +++++ .../tasks/main.yml | 1 + roles/tripleo_repos/README.md | 1 + roles/tripleo_repos/defaults/main.yml | 1 + roles/tripleo_repos/tasks/install.yml | 4 +- tox.ini | 2 +- zuul.d/layout.yaml | 10 +++- 26 files changed, 526 insertions(+), 4 deletions(-) From no-reply at openstack.org Wed Jun 23 16:25:13 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 23 Jun 2021 16:25:13 -0000 Subject: [release-announce] ironic 17.0.3 (wallaby) Message-ID: We eagerly announce the release of: ironic 17.0.3: OpenStack Bare Metal Provisioning This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 17.0.3 ^^^^^^ Security Issues *************** * Fixes an issue with the "/v1/nodes/detail" endpoint where an authenticated user could explicitly ask for an "instance_uuid" lookup and the associated node would be returned to the user with sensitive fields redacted in the result payload if the user did not explicitly have "owner" or "lessee" permissions over the node. This is considered a low-impact low-risk issue as it requires the API consumer to already know the UUID value of the associated instance, and the returned information is mainly metadata in nature. More information can be found in Storyboard story 2008976 (https://storyboard.openstack.org/#!/story/2008976). Bug Fixes ********* * If the agent accepts a command, but is unable to reply to Ironic (which sporadically happens before of the eventlet's TLS implementation), we currently retry the request and fail because the command is already executing. Ironic now detects this situation by checking the list of executing commands after receiving a connection error. If the requested command is the last one, we assume that the command request succeeded. * When local boot is used (e.g. by default), the instance image validation now happens only in the deploy interface, not in the boot interface (as before). This means that the boot interface validation will now pass in many cases where it would previously fail. * Fixes an issue with the "/v1/nodes/detail" endpoint where requests for an explicit "instance_uuid" match would not follow the standard query handling path and thus not be filtered based on policy determined access level and node level "owner" or "lessee" fields appropriately. Additional information can be found in story 2008976 (https://storyboard.openstack.org/#!/story/2008976). * No longer masks configdrive when sending the node's record to in- band deploy steps. * Fixes handling of single-value (non-key-value) parameters in the "[inspector]extra_kernel_params" configuration options. * The behavior when a bootable iso ramdisk is provided behind an http server is to download and serve the image from the conductor; the image is removed only when the node is undeployed. In certain cases, for example on large deployments, this could cause undesired behaviors, like the conductor nodes running out of disk storage. To avoid this event we provide an option "[deploy]ramdisk_image_download_source" to be able to tell the ramdisk interface to directly use the bootable iso url from its original source instead of downloading it and serving it from the conductor node. The default behavior is unchanged. * Fixes sub-optimal Ironic API performance where Secure RBAC related field level policy checks were executing without first checking if there were field results. This helps improve API performance when only specific columns have been requested by the API consumer. Changes in ironic 17.0.2..17.0.3 -------------------------------- adc4f7657 Fix node detail instance_uuid request handling 566cff59a Handle non-key-value params in [inspector]extra_kernel_params 05c838073 dhcp-less: mention how to provide network_data to instance f99d68707 Refactor iDRAC OEM extension manager calls fc8e1652b Improve agent_client logging d3f62f83e Set download stable branch for IPA f9eb7abe8 Secure RBAC - Efficent node santiziation c7af96938 Update project conundrum related docs 0500fe107 Avoid unnecessary validation in boot interfaces 77be4c6c6 Delete unavailable py2 package fce4cc11b Fix deployment when executing a command fails after the command starts 659eef72e Provide an option to not cache bootable iso ramdisks 78e10ce59 Update refarch with information about image_download_source 7b723bcce Do not mask configdrive when executing in-band deploy steps fe2377855 Inherit InvalidImageRef from InvalidParameterValue Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 +- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- ironic/api/controllers/v1/node.py | 143 ++++++++-------- ironic/common/exception.py | 2 +- ironic/common/pxe_utils.py | 5 +- ironic/common/utils.py | 16 ++ ironic/conf/deploy.py | 16 ++ ironic/db/sqlalchemy/api.py | 2 +- ironic/drivers/modules/agent_client.py | 121 +++++++++++--- ironic/drivers/modules/drac/boot.py | 67 +------- ironic/drivers/modules/drac/inspect.py | 46 +---- ironic/drivers/modules/drac/management.py | 185 ++++----------------- ironic/drivers/modules/drac/raid.py | 43 +---- ironic/drivers/modules/drac/utils.py | 121 ++++++++++++++ ironic/drivers/modules/image_utils.py | 14 +- ironic/drivers/modules/inspector.py | 6 +- ironic/drivers/modules/pxe_base.py | 14 +- ironic/drivers/modules/redfish/boot.py | 11 +- ironic/objects/node.py | 10 +- .../unit/drivers/modules/drac/test_inspect.py | 27 --- .../unit/drivers/modules/drac/test_management.py | 124 ++------------ .../unit/drivers/modules/redfish/test_boot.py | 74 ++------- .../unit/drivers/modules/test_agent_client.py | 117 +++++++++++++ .../notes/agent-last-command-4ec6967c995ba84a.yaml | 9 + .../notes/boot-validate-6b4b6b40c8e27273.yaml | 7 + ...ed-instance-info-behavior-1375914a30621eca.yaml | 20 +++ .../deploy-step-configdrive-86ea2bb267211b88.yaml | 5 + .../inspector-kernel-params-6db82c633d7361e2.yaml | 5 + ...ion-no-cache-http-ramdisk-62fc29cdd1d5b152.yaml | 14 ++ ...-sanitization-performance-dc7886952144bb04.yaml | 7 + 54 files changed, 1037 insertions(+), 858 deletions(-) From no-reply at openstack.org Wed Jun 23 18:00:33 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 23 Jun 2021 18:00:33 -0000 Subject: [release-announce] kolla-ansible 12.0.0 (wallaby) Message-ID: We are psyched to announce the release of: kolla-ansible 12.0.0: Ansible Deployment of Kolla containers This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Adds support for CentOS Stream 8 as a host Operating System and base container image. This is the only distribution of CentOS supported from the Wallaby release. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Supports Debian Bullseye (11) as host distribution. * Adds support in "kolla_docker" module to set "CgroupnsMode" for Docker containers (via "cgroupns_mode" module param). Requires Docker 20.10. Note that pre-20.10 all containers behave as if they were run with mode "host". * OVN deployment will now configure "external_ids:ovn-chassis-mac- mappings" to make DVR work on VLAN tenant networks. * Due to the removal of the Monasca Grafana fork, the Monasca datasource is now configured in vanilla Grafana. Upgrade Notes ************* * Bumps minimum required Docker version to 18.09 and minimum required Docker Python SDK version to 3.4.1. These two are checked in prechecks. * CentOS Linux 8 is no longer supported as a host Operating System or base container image. CentOS users should migrate to CentOS Stream 8. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Adds a new flag, "docker_disable_ip_forward", which defaults to "docker_disable_default_iptables_rules" and is used to disable docker's "ip-forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". By default, "docker_disable_default_iptables_rules" is "true", in which case docker's "ip-forward" option is "disabled". For existing hosts, this configuration change is applied when configuring docker via "kolla-ansible bootstrap-servers". Docker changes the sysctl in a non-persistent manner, so it will revert to the default of "0" after a reboot, if not configured elsewhere. This should not cause a problem, since Kolla Ansible applies the sysctl where necessary. Operators may wish to perform a proactive reboot, or apply the default through other means. * Service containers and configuration for the Monasca Grafana service will be removed automatically. It is up to the operator to remove the related HAProxy configuration, the Monasca Grafana database, and associated Docker volumes. Deprecation Notes ***************** * Support for configuration of NTP daemon (via "enable_host_ntp") is deprecated and will be removed in the next Kolla Ansible release (Xena). Please use other means of configuring NTP. * The Monasca Fork of Grafana is deprecated due to lack of maintenance and will be removed in the Xena release. Instead, support will be provided to allow Monasca users to migrate to the vanilla Grafana service with the Monasca datasource. * Support for deploying "tempest" and "rally" is deprecated and will be removed in the Xena cycle. The reason is that these are not services of an OpenStack cloud but its clients. Bug Fixes ********* * chronyd crash loop if server is rebooted (Debian) LP#1915528 * Fixed an issue when Docker was configured after startup on Debian/Ubuntu, which resulted in iptables rules being created - before they were disabled. LP#1923203 * Fixes an issue with Octavia SSH key copying if user disabled Octavia auto configuration. LP##1927727 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes Swift deploy when TLS enabled. Added the missing handler and corrected the container name. LP#1931097 * Fixes "iscsid" failing in current CentOS 8 based images due to pid file being needlessly set. LP#1933033 * Fixes host bootstrap on Debian not removing the conflicting packages. It now behaves in accordance with the docs. LP#1933122 * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Adds a new flag, "docker_disable_ip_forward", which defaults to "docker_disable_default_iptables_rules" and is used to disable docker's "ip-forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". This is to protect from creating all-forwarding hosts. LP#1931615 * Fixes an issue when generating "/etc/hosts" during "kolla-ansible bootstrap-servers" when one or more hosts has an "api_interface" with dashes ("-") in its name. LP#1927357 * Fixes the container image used by mariabackup. It was using the "mariadb" image, which was deprecated in Victoria and removed in Wallaby. LP#1928129 * Fixes an issue with Octavia deployment when using a custom service auth project. If "octavia_service_auth_project" is set to a project that does not exist, Octavia deployment would fail. The project is now created. LP#1922100 Changes in kolla-ansible 12.0.0.0rc1..12.0.0 -------------------------------------------- bcce291aa Fix host bootstrap pkg removal on Debian ecddf74d7 Do not set pid file for iscsid 2e76e0565 Support editable installation in all cases cf58c0460 tox: Add find command to allowlist_externals list 315d8eec2 baremetal: fix /etc/hosts generation when api_interface has dashes a6a2e5ec1 chronyd crash loop if Debian server is rebooted 252671f8b Stop fluentd deprecation warnings of type vs @type 381e3a40d Fix parsing of infra.mariadb.xinetd logs 189c1c245 Fix neutron-ovn-metadata-agent with policy.yaml cbd474cc4 octavia: Ensure service auth project exists c24a56b7d Merge glance sections for nova.conf.j2 b79d2a4f0 Redis configuration syntax update 13deb4304 Update blazar.conf template 5ba041019 Add the ansible_managed header for admin-openrc.sh e3f43eee5 Reno follow up for docker_disable_ip_forward c272af91c Drop /sys/fs/cgroup mounts eb4815345 Disable docker's ip-forward when iptables disabled f11af96cc Fix RabbitMQ restart ordering 98c29107a Add forgotten 'Restart container' handler for swift 12dc47483 grafana: add bootstrap during upgrade a8982e571 Bump min Docker version 94e115e15 chrony: allow to remove the container 12382be7a [CI] Drop Zuul host groups 0c58f83d6 [CI] Move to Debian Bullseye 7b3190871 Add support for Debian Bullseye (11) as host distro efd51bccb [docker] Add support for setting CgroupnsMode 58f3f3042 Trivial if conditional fix in keystone.json e7c68252f docs: Update Freenode to OFTC 0b971b61d Fix release note markup ee92b33b3 Use mariadb-server image for mariabackup d8b4e81c0 CI: Use PATH to find kolla-ansible script d31ec6609 cinder: fix condition to copy backend TLS certs af7c7cc6b Remove [octavia]/base_url option from neutron.conf b887b1c4c docs: update supported OS distros 924affb65 Mariadb shards documentation af7778e3a CI: Configure IP on a linux bridge instead of OVS br-ex 4e8c1493c CI: add grafana to monasca image list 2bff29328 Remove Monasca Grafana service 7e31c959e [CI] Fix testing in cephadm scenario ee8bd456b baremetal: Install Docker SDK less than 5.0.0 bf351eb97 CI: Fix nfv job with kolla dependency 34349f6ad CI: Wait for NTP synced status in systemd 3a661b7ad baremetal: Don't start Docker after install on Debian/Ubuntu e0fc09cde Disable Alertmanager's peer gossip in non-HA deployments bfdd36ff3 CI: allow Elasticsearch status to be green or yellow a92ce428a Use @type instead of type deafe00dd Do not write octavia_amp_ssh_key if auto_config disabled cb38206dc Fix "Restart mariadb-clustercheck container" during config gen 465a38545 ovn: make DVR work on VLAN tenant networks 71811d947 octavia: Fix duplicate api_settings 1e5709150 ovn: omit unnecessary bridge mappings 381fe0d27 setup.cfg: Replace dashes with underscores d83aad7ee Deprecate tempest and rally 5894894ff Deprecate enable_host_ntp f73c00c83 Bump up python version for Debian Bullseye aaa2bb977 cephadm: Set auth_allow_insecure_global_id_reclaim to true 8ccbdf3c2 Add Monasca Grafana deprecation notice 4f87d9f36 Use wallaby images in wallaby deployments adef109a1 Avoid an Ansible quirk in hacluster role 3f7e02765 docs: Improve policy documentation 6bcbaf235 Update TOX_CONSTRAINTS_FILE for stable/wallaby e80783f1d Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ansible/chrony-cleanup.yml | 14 +++ ansible/group_vars/all.yml | 7 +- ansible/library/kolla_docker.py | 44 +++++++- ansible/roles/baremetal/defaults/main.yml | 2 + ansible/roles/baremetal/tasks/install.yml | 28 ++++- ansible/roles/baremetal/tasks/post-install.yml | 30 +++++- ansible/roles/baremetal/tasks/pre-install.yml | 4 +- ansible/roles/blazar/templates/blazar.conf.j2 | 10 +- ansible/roles/chrony/tasks/cleanup.yml | 12 +++ ansible/roles/chrony/templates/chrony.json.j2 | 4 +- ansible/roles/cinder/tasks/config.yml | 2 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 2 + .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 8 +- ansible/roles/grafana/defaults/main.yml | 9 ++ ansible/roles/grafana/tasks/upgrade.yml | 5 + .../roles/hacluster/tasks/bootstrap_service.yml | 4 +- ansible/roles/haproxy/tasks/precheck.yml | 27 ----- ansible/roles/iscsi/defaults/main.yml | 2 - ansible/roles/iscsi/templates/iscsid.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/handlers/main.yml | 2 + ansible/roles/monasca/defaults/main.yml | 24 +---- ansible/roles/monasca/handlers/main.yml | 53 --------- ansible/roles/monasca/tasks/bootstrap.yml | 3 +- ansible/roles/monasca/tasks/config.yml | 19 ---- ansible/roles/monasca/tasks/deploy.yml | 2 - ansible/roles/monasca/tasks/post_config.yml | 120 --------------------- ansible/roles/monasca/tasks/precheck.yml | 11 -- ansible/roles/monasca/tasks/upgrade.yml | 30 ------ .../templates/monasca-grafana/grafana.ini.j2 | 55 ---------- .../monasca-grafana/monasca-grafana.json.j2 | 23 ---- ansible/roles/multipathd/defaults/main.yml | 1 - .../templates/neutron-ovn-metadata-agent.json.j2 | 13 ++- ansible/roles/neutron/templates/neutron.conf.j2 | 5 - ansible/roles/nova-cell/defaults/main.yml | 2 +- ansible/roles/nova-cell/handlers/main.yml | 1 + ansible/roles/nova-cell/tasks/check-containers.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/defaults/main.yml | 7 ++ ansible/roles/octavia/tasks/config.yml | 4 +- ansible/roles/octavia/tasks/register.yml | 15 --- ansible/roles/octavia/templates/octavia.conf.j2 | 4 +- ansible/roles/ovn/defaults/main.yml | 2 + ansible/roles/ovn/tasks/bootstrap.yml | 6 +- ansible/roles/prechecks/defaults/main.yml | 3 + ansible/roles/prechecks/tasks/timesync_checks.yml | 73 +++++++++++-- ansible/roles/prechecks/vars/main.yml | 5 +- .../templates/prometheus-alertmanager.json.j2 | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 18 +++- ansible/roles/rally/tasks/main.yml | 5 + ansible/roles/redis/templates/redis.conf.j2 | 10 +- ansible/roles/swift/defaults/main.yml | 2 +- ansible/roles/swift/handlers/main.yml | 4 + ansible/roles/tempest/tasks/main.yml | 5 + .../bootstrap-servers.rst | 5 + .../logging-and-monitoring/monasca-guide.rst | 54 +++++----- etc/kolla/globals.yml | 4 +- etc/kolla/passwords.yml | 1 - ...yd-crash-loop-if-server-is-rebooted-debian.yaml | 5 + .../notes/bug-1922721-19163cfb491d0035.yaml | 4 +- .../notes/bug-1923203-f9ff247befc4bd75.yaml | 6 ++ .../notes/bug-1927727-4437103de59e85e5.yaml | 6 ++ .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 ++ .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + .../notes/bug-1931097-c94832ed2ed92c3a.yaml | 6 ++ .../notes/bug-1933033-76746d127285cfe8.yaml | 6 ++ .../notes/bug-1933122-b34311ba73092080.yaml | 6 ++ ...imum-docker-version-18-09-37af3b4c134da67e.yaml | 6 ++ .../notes/centos-stream-686441cc4c0e47d7.yaml | 13 +++ .../debian-bullseye-host-adc7778d7103b84f.yaml | 4 + .../notes/deprecate-chrony-077a8686e79a919e.yaml | 16 ++- ...deprecate-enable-host-ntp-3ad934c097f18b1b.yaml | 7 ++ ...deprecate-monasca-grafana-f5bfc61a5d453a8e.yaml | 7 ++ ...precate-tempest-and-rally-2418cbe2a9f315a4.yaml | 7 ++ ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 ++ .../docker-cgroupns-mode-9e1b32c357a14095.yaml | 7 ++ ...docker-disable-ip-forward-b0490b71f9f07cd6.yaml | 24 +++++ .../notes/etc-hosts-dashes-37d0dc07c8fc881f.yaml | 7 ++ .../notes/mariabackup-image-8b31622f59890e28.yaml | 6 ++ ...eate-service-auth-project-aa38b12ebb601777.yaml | 7 ++ .../notes/ovn_dvr_vlan-f36a6868cfd4776e.yaml | 5 + .../remove-monasca-grafana-43cf1f74b09a6e54.yaml | 11 ++ roles/bridge/tasks/main.yml | 12 +++ roles/cephadm/tasks/main.yml | 11 ++ roles/veth/tasks/main.yml | 12 +++ setup.cfg | 8 +- tools/kolla-ansible | 33 +++++- tox.ini | 17 +-- zuul.d/base.yaml | 6 +- zuul.d/jobs.yaml | 8 +- zuul.d/nodesets.yaml | 62 +++-------- 114 files changed, 878 insertions(+), 635 deletions(-) From no-reply at openstack.org Wed Jun 23 18:01:12 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 23 Jun 2021 18:01:12 -0000 Subject: [release-announce] kayobe 10.0.0 (wallaby) Message-ID: We are stoked to announce the release of: kayobe 10.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * Adds support for CentOS Stream 8 as a host Operating System and base container image. This is the only distribution of CentOS supported from the Wallaby release. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Adds a new flag, "docker_registry_network_mode", which defaults to "host". This may be used to set the network mode of the Docker registry container. * Adds support for passing through additional host variables from Kayobe to Kolla Ansible. This is done via the following variables: * "kolla_seed_inventory_pass_through_host_vars_extra" * "kolla_seed_inventory_pass_through_host_vars_map_extra" * "kolla_overcloud_inventory_pass_through_host_vars_extra" * "kolla_overcloud_inventory_pass_through_host_vars_map_extra" See story 2008797 for details. * Adds a new "kayobe overcloud service prechecks" command to run Kolla Ansible prechecks without deploying services. * Adds support for Ubuntu Focal 20.04 as a host and container Operating System for seed, seed hypervisor and overcloud hosts. Upgrade Notes ************* * CentOS Linux 8 is no longer supported as a host Operating System or base container image. CentOS users should migrate to CentOS Stream 8. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Updates the NTP implementation from the chrony container deployed by kolla-ansible to configuring chrony as a host service. Chrony is now installed on all hosts in the "ntp" group, which defaults to include the seed, overcloud, and seed-hypervisor groups. On existing deployments, you should run *kayobe overcloud host configure* to migrate from the kolla-ansible deployed container. This can optionally be scoped to just use the "ntp" tag. You can continue to use the kolla container by setting *kolla_enable_chrony* to "true". Bug Fixes ********* * Fixes an issue with container image builds by using "host" as the default "network_mode" for "kolla-build". See story 2008942 for details. Changes in kayobe 10.0.0.0rc1..10.0.0 ------------------------------------- 51ddc295 docs: Stop setting os_distribution in development all-in-one e010356e CI: test base container image build in seed jobs 30563e52 docs: add variable for current branch 7d56e8fd docs: improve automated seed development info 64bc058f Add kayobe overcloud service prechecks command 2e221681 Fix overcloud post configure Python interpreter issues 36fcec12 Revert "CI: Fix libvirt errors caused by latest edk2-ovmf" 7e6ca694 Fix container image builds 3f9e4c50 Ubuntu: ensure /usr/bin/python is python3 5fe1a7ed chrony: cleanup during overcloud host upgrade 9a374af8 Optimise order of inspector_processing_hooks 4648b90b ntp: check for ntp group in inventory 1d43eda8 docs: Update Freenode to OFTC c5e5d697 CI: Fix libvirt errors caused by latest edk2-ovmf a9a2f382 Replace custom serial loop with throttle 38360a4d Support additional pass through host variables 64e183c4 Make docker registry network mode configurable c01e5f0a Remove default time sources from customisable configuration b79daa16 CentOS Stream: update DNF repo file names 73dfeb29 Fixes for Ansible 2.10 eb90ad21 docs: add reno and upgrade info for CentOS Stream e5a319aa CI: Remove unused Docker images after overcloud upgrade 010a1833 Adds support for configuring chrony 7a56c95a Ubuntu: add documentation & release note f3dffec0 Ubuntu: avoid shadowing of networkd config files c36c78bd Add os_release variable, build CentOS stream images 4e17dcef Ubuntu: install qemu-img on seed-hypervisor a495bbc1 setup.cfg: Replace dashes with underscores 0f0604b8 Revert to binary images for nova 2f736f5c Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + README.rst | 2 +- ansible/group_vars/all/bifrost | 5 +- ansible/group_vars/all/docker-registry | 3 + ansible/group_vars/all/globals | 4 + ansible/group_vars/all/inspector | 2 +- ansible/group_vars/all/ipa | 4 + ansible/group_vars/all/kolla | 70 +++++++- ansible/group_vars/all/time | 29 ++++ ansible/provision-net.yml | 8 +- ansible/roles/dnf/tasks/local-mirror.yml | 10 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 --- .../dnf/templates/CentOS-Stream-AppStream.repo.j2 | 17 ++ .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 ++ .../dnf/templates/CentOS-Stream-Extras.repo.j2 | 17 ++ ansible/roles/docker-registry/defaults/main.yml | 8 +- ansible/roles/ipa-images/tasks/set-driver-info.yml | 6 +- .../kolla-build/templates/kolla-build.conf.j2 | 4 + ansible/roles/network-debian/tasks/main.yml | 5 + ansible/roles/ntp/defaults/main.yml | 6 + ansible/roles/ntp/tasks/deploy.yml | 4 + ansible/roles/ntp/tasks/main.yml | 12 ++ ansible/roles/ntp/tasks/prepare.yml | 27 +++ ansible/roles/ntp/tasks/validate.yml | 11 ++ ansible/roles/ssh-known-host/tasks/main.yml | 8 +- ansible/time.yml | 33 ++++ ansible/timezone.yml | 28 ++- dev/functions | 2 +- dev/tenks-deploy-config-overcloud.yml | 2 + .../configuration/reference/docker-registry.rst | 9 +- .../reference/ironic-python-agent.rst | 5 +- .../configuration/reference/kolla-ansible.rst | 50 +++++- .../configuration/reference/os-distribution.rst | 34 ++++ .../configuration/scenarios/all-in-one/index.rst | 3 +- .../scenarios/all-in-one/overcloud.rst | 15 +- etc/kayobe/bifrost.yml | 3 +- etc/kayobe/docker-registry.yml | 3 + etc/kayobe/globals.yml | 4 + etc/kayobe/inventory/groups | 8 +- etc/kayobe/kolla.yml | 44 +++++ etc/kayobe/time.yml | 23 +++ kayobe/cli/commands.py | 47 ++++- .../overrides.yml.j2 | 8 + .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 - playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/overrides.yml.j2 | 4 +- playbooks/kayobe-seed-base/run.yml | 18 ++ .../notes/centos-stream-cb683a092153b93e.yaml | 13 ++ ...ker-registry-network-mode-3c678295b51d69c1.yaml | 6 + .../notes/extra-host-vars-13c28b790bc54f6b.yaml | 13 ++ ...nstall-chrony-on-the-host-283fa6fdd9cf9b4c.yaml | 11 ++ .../kolla-build-network-mode-ba92e36d52e70d99.yaml | 6 + .../notes/os-distribution-69445eb19a611d43.yaml | 5 +- .../notes/prechecks-command-a9153f667659c315.yaml | 5 + releasenotes/notes/ubuntu-e74f49ea72f69869.yaml | 5 + requirements.yml | 8 +- setup.cfg | 11 +- 78 files changed, 964 insertions(+), 333 deletions(-) From no-reply at openstack.org Wed Jun 23 18:02:35 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 23 Jun 2021 18:02:35 -0000 Subject: [release-announce] kolla 12.0.0 (wallaby) Message-ID: We are ecstatic to announce the release of: kolla 12.0.0: Kolla OpenStack Deployment This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Adds the Monasca datasource plugin to the Grafana image. This allows Monasca users to visualise metrics in Grafana without using the Monasca Grafana fork. * Debian 'bullseye' is now used instead of 'buster'. Bullseye is the next stable release of Debian, and is currently in a 'freeze' state. Several images gained Debian support with the move to bullseye. Upgrade Notes ************* * The "monasca-grafana" image has been dropped because it was using several deprecated components and was not buildable. Support for "Monasca" datasource was added into standard "grafana" instead. * Changed default of "network_mode" to "host" since Kolla-Ansible "bootstrap-servers" is deploying Docker without a bridge by default since Wallaby Deprecation Notes ***************** * Support for building ppc64le container images has been deprecated in Wallaby cycle and will be removed in Xena. * The "tempest" and "rally" images are deprecated and will be removed in the Xena cycle. The reason is that these are not services of an OpenStack cloud but its clients. Security Issues *************** * Fixes security issue in Prometheus as per advisory. Bug Fixes ********* * Fixes location of monitoring_policy in Horizon, so access policy is correctly enforced. Note that by current default, admin doesn't not have Monitoring access. LP#1928408 * Fix support for kolla install in "~/.local". LP#1930544 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.*. LP#1930867 * Fixes issues arising from the lack of Debian updates repo being enabled. LP#1931544 Other Notes *********** * Debian images enable the Debian updates repo now. This is aligned with the base Debian image. Changes in kolla 12.0.0.0rc1..12.0.0 ------------------------------------ d578ac260 horizon: Correct location of monitoring_policy file 24bad11ed Horizon: Install policy files for manila-ui 128a45a2b Horizon: Install required policy files for heat-dashboard 8cd42eccc Fix _get_images_dir when pip-installed with --user a0eb21df3 Revert "libvirt: pin edk2-ovmf" 11d63e07c Pin td-agent to 4.0.* to fix missing logs b5ba6792d [docs] Fix Debian release name 746ae194e Enable Debian updates repo 01f5ce486 Revert "[CI] Add grafana to allowed-to-fail" f9f2f12cc Change network_mode default to host 5e38030b0 [CI] Add grafana to allowed-to-fail 51802de96 Add missing default policy files for ubuntu-binary-horizon cfa9ee486 docs: Update Freenode to OFTC 65a8b37a5 ubuntu: unpin OVS b22089051 libvirt: pin edk2-ovmf cb1457fea Install Monasca datasource plugin for Grafana fe1c8e882 Revert "CI: add monasca-grafana to allowed-to-fail images" 66b5abf67 Drop monasca-grafana image. 3ba3ccd8b [Security] Fix open redirect in Prometheus 227831c58 centos: clean up repo enable/disable/keys 858c27486 gnocchi-base: numpy provides aarch64 binary wheels 7726bbe2d docs: update supported OS distros e7a71f17d CI: drop bashism from template overrides b2e6babf1 [release] Use UCA Wallaby 2e3c2d9b6 base: check for compatible distro using just sh 496c0c006 setup.cfg: Replace dashes with underscores f885c6c1d Deprecate tempest and rally 00bfe8775 [CI] Trust only infra mirrors c01b017e5 Revert "CI: drop ubuntu-aarch64 job" 58503574a CI: move to Debian 'bullseye' nodes 46e81aa56 Revert "CI: temporarily disable CentOS/AArch64 testing" de52c2bfc Install RabbitMQ repo key on Ubuntu and Debian 1e747d7ef [CI] Fix Ubuntu cephadm jobs names 2c51d968c CentOS on AArch64 has only Erlang 22 490dcfcd2 CI: Remove kolla_python_version from Debian/Ubuntu jobs 084dd5e4e Pin erlang 934f5f0d8 Revert "deprecate use of GnuPG ids for APT keys" 53225b2bf centos: switch to RDO final release of Wallaby a1ad81338 neutron: Remove vmware-nsx and networking-mlx from binary 67dc1d3f0 releasenotes: we move to Debian bullseye 1f5014e01 move to Debian 'bullseye' 13abc31c2 Disable trove for Debian/binary b85b63ec9 docs: deprecate ppc64le in Wallaby de9e3cc3b Update TOX_CONSTRAINTS_FILE for stable/wallaby 21f1fd8ee Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/base.yaml | 8 +- .zuul.d/centos.yaml | 6 +- .zuul.d/debian.yaml | 8 +- .zuul.d/ubuntu.yaml | 55 ++++------- README.rst | 4 +- contrib/neutron-plugins/README.rst | 5 +- .../template_override-networking-mlnx.j2 | 4 + .../template_override-vmware-nsx.j2 | 4 + .../mariadb-server/security_reset.expect.debian | 67 +++++++++++++ .../prometheus/prometheus-v2-server/Dockerfile.j2 | 2 +- kolla/common/config.py | 17 ++-- kolla/image/build.py | 22 ++--- kolla/template/repos.yaml | 2 - ...sca-datasource-to-grafana-06dfe0ce329a7b7f.yaml | 6 ++ .../notes/bug-1928408-4a22a85570eee8d6.yaml | 7 ++ .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 + releasenotes/notes/bug-1930867.yaml | 6 ++ .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 ++ .../notes/debian-bullseye-4fedf3b3638783de.yaml | 6 ++ .../notes/deprecate-apt-keys-eff6e68272923b6b.yaml | 7 -- ...deprecate-monasca-grafana-d05af2e96cffd82c.yaml | 5 - .../notes/deprecate-ppc64le-2b7b642e79bddd66.yaml | 5 + ...precate-tempest-and-rally-0647efa7209cf03a.yaml | 7 ++ .../drop-monasca-grafana-df2c45d6826752f6.yaml | 7 ++ .../notes/network-mode-host-2aca256e2a1fbf68.yaml | 6 ++ ...ty-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml | 4 + ...-neutron-plugins-excluded-b72220a2ea8c1a40.yaml | 5 +- setup.cfg | 8 +- tox.ini | 6 +- 62 files changed, 352 insertions(+), 423 deletions(-) From no-reply at openstack.org Mon Jun 28 10:44:41 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 28 Jun 2021 10:44:41 -0000 Subject: [release-announce] oslo.privsep 2.6.0 (xena) Message-ID: We joyfully announce the release of: oslo.privsep 2.6.0: OpenStack library for privilege separation This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 2.6.0 ^^^^^ New Features * Add "timeout" as parameter to "PrivContext" and add "entrypoint_with_timeout" decorator to cover the issues with commands which take random time to finish. "PrivsepTimeout" is raised if timeout is reached. "Warning": The daemon (the root process) task won't stop when timeout is reached. That means we'll have less available threads if the related thread never finishes. * "PrivContext" accepts a new string parameter called "logger_name" to define the logger we want to use for the daemon logs of this context. By default all contexts use "oslo_privsep.daemon", but in some cases we may need finer grained log levels, for example nova running in debug mode could log its own privsep calls on INFO level regardless, but leave all libraries' privsep calls, such as os-brick's, to be logged in the normal DEBUG level. See bug 1922052. (https://bugs.launchpad.net/nova/+bug/1922052) Changes in oslo.privsep 2.5.0..2.6.0 ------------------------------------ f7f3349 Add timeout to PrivContext and entrypoint_with_timeout decorator 165cdde Upgrade the pre-commit-hooks version bd989a3 setup.cfg: Replace dashes with underscores 71c732c Allow finer grained log levels 22557b4 Add Python3 xena unit tests c4d0534 Update master for stable/wallaby 5f5db61 Fix requirements issues. dc97a45 Use TOX_CONSTRAINTS_FILE 55dd214 Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 ++-- .zuul.yaml | 3 +- lower-constraints.txt | 54 ------------------- oslo_privsep/comm.py | 54 ++++++++++++------- oslo_privsep/daemon.py | 60 ++++++++++------------ oslo_privsep/functional/test_daemon.py | 43 ++++++++++++++++ oslo_privsep/priv_context.py | 31 +++++++++-- ...nt_with_timeout_decorator-9aab5a74153b3632.yaml | 11 ++++ .../notes/context-logger-06b475357bebadc7.yaml | 15 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 8 +-- tox.ini | 12 ++--- 16 files changed, 301 insertions(+), 139 deletions(-) From no-reply at openstack.org Tue Jun 29 10:57:55 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 29 Jun 2021 10:57:55 -0000 Subject: [release-announce] mistral-dashboard 12.0.1 (wallaby) Message-ID: We enthusiastically announce the release of: mistral-dashboard 12.0.1: Mistral dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/mistral-dashboard Download the package from: https://pypi.org/project/mistral-dashboard Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral-dashboard 12.0.0..12.0.1 ------------------------------------------- c622cf2 Update .gitreview for stable/wallaby 2ef9a24 Setting DEFAULT to False. 897b07f Fix gate jobs Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistraldashboard/action_executions/tables.py | 3 +-- mistraldashboard/default/smart_cell.py | 6 +++--- mistraldashboard/enabled/_50_mistral.py | 2 +- mistraldashboard/executions/tables.py | 3 +-- mistraldashboard/tasks/tables.py | 3 +-- mistraldashboard/test/settings.py | 2 +- test-requirements.txt | 8 ++------ tox.ini | 10 +++++----- 9 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 87fced8..02499b8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,6 +5,2 @@ -# Hacking already pins down pep8, pyflakes and flake8 -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 +# hacking should appear first in case something else depends on pep8 +hacking>=4.0.0,<4.1.0 # Apache-2.0 From no-reply at openstack.org Tue Jun 29 11:10:06 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 29 Jun 2021 11:10:06 -0000 Subject: [release-announce] mistral-dashboard 11.0.1 (victoria) Message-ID: We are pleased to announce the release of: mistral-dashboard 11.0.1: Mistral dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/mistral-dashboard Download the package from: https://pypi.org/project/mistral-dashboard Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral-dashboard 11.0.0..11.0.1 ------------------------------------------- e1936e4 Setting DEFAULT to False. 0734ddd Fix gate jobs 66154b7 Update TOX_CONSTRAINTS_FILE for stable/victoria afd0be0 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistraldashboard/action_executions/tables.py | 3 +-- mistraldashboard/default/smart_cell.py | 6 +++--- mistraldashboard/enabled/_50_mistral.py | 2 +- mistraldashboard/executions/tables.py | 3 +-- mistraldashboard/tasks/tables.py | 3 +-- mistraldashboard/test/settings.py | 2 +- test-requirements.txt | 8 ++------ tox.ini | 10 +++++----- 9 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 87fced8..02499b8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,6 +5,2 @@ -# Hacking already pins down pep8, pyflakes and flake8 -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 +# hacking should appear first in case something else depends on pep8 +hacking>=4.0.0,<4.1.0 # Apache-2.0 From no-reply at openstack.org Wed Jun 30 14:01:38 2021 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 30 Jun 2021 14:01:38 -0000 Subject: [release-announce] cinderlib 4.0.0 (wallaby) Message-ID: We enthusiastically announce the release of: cinderlib 4.0.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. 4.0.0 ^^^^^ Bug Fixes * Bug #1933964 (https://bugs.launchpad.net/cinder/+bug/1933964): Fixed date time fields losing subsecond resolution on serialization. * Bug #1883720 (https://bugs.launchpad.net/cinderlib/+bug/1883720): Added privsep support, increasing cinderlib's compatibility with Cinder drivers. Changes in cinderlib 3.0.0..4.0.0 --------------------------------- 51609b6 Fix datetime serialization 42dbc4a Fix test_global_setup unit test cf638c4 Add privsep support 724419f Moving to OFTC e1008c7 Remove reliance on embedded imports cd0ae51 Continue wallaby development 18bb33f Changed minversion in tox to 3.18.0 c770b2a Move cinderlib to new hacking 4.0.0 390f04f Dropping explicit unicode literal 45c7b02 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinderlib/__init__.py | 4 +- cinderlib/cinderlib.py | 79 +++- cinderlib/nos_brick.py | 311 ------------- cinderlib/objects.py | 10 +- cinderlib/persistence/dbms.py | 9 +- cinderlib/serialization.py | 21 +- lower-constraints.txt | 4 +- .../notes/datetime-subsecond-e123e8d2dda707ea.yaml | 5 + .../notes/privsep-support-acbc955b9845a6ef.yaml | 5 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 6 +- test-requirements.txt | 2 +- tools/virtualenv-sudo.sh | 2 +- tox.ini | 38 +- 28 files changed, 461 insertions(+), 912 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 942afcb..4b007a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,5 @@ -cinder>=17.0.0 # Apache-2.0 +# restrict cinder to the wallaby series only +cinder>=18.0.0,<19.0.0 # Apache-2.0 +# specify brick wallaby (upper bound controlled by openstack upper-constraints) +os-brick>=4.3.1 + diff --git a/test-requirements.txt b/test-requirements.txt index ac8ee6e..97d223b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ pbr>=5.4.1 # Apache-2.0 -hacking>=3.0.1,<3.2.0 # Apache-2.0 +hacking>=4.0.0,<4.1.0 # Apache-2.0