Open Stack

We are glad to announce the release of:

tripleo-heat-templates 12.4.6: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through:

    https://bugs.launchpad.net/tripleo/+bugs

For more details, please see below.

12.4.6
^^^^^^


New Features
************

* Added new heat role specific parameter option 'DdpPackage' to
  select the required DDP Package.

* Added new heat role specific param OVNAvailabilityZone to set
  availability-zones for ovn. This param replace seting availability-
  zones throught OVNCMSOptions

* Added OVN DBs clustering support. In this service model, a
  clustered database runs across multiple hosts in multi-active mode.

* To help operators protect their workload, they can now enable the
  KernelArgsDeferReboot role parameter. This will prevent the tripleo-
  kernel ansible module from automatically rebooting nodes even if
  KernelArgs were changed unexpectedly.

* Add param NeutronAgentDownTime to configure neutron server
  agent_down_time Seconds to regard the agent as down; should be at
  least twice report_interval, to be sure the agent is down for good.
  agent_down_time is a config for neutron-server, set by class
  neutron::server report_interval is a config for neutron agents, set
  by class neutron

* New config options for Neutron logging service plugin
  configuration were added. There are options added for L3 Agent:
  "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit",
  "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent:
  "NeutronOVSAgentLoggingRateLimit",
  "NeutronOVSAgentLoggingBurstLimit",
  "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend:
  "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit",
  "NeutronOVNLoggingLocalOutputLogBase".

* With conditional monitoring enabled in OVN, southbound ovsdb-serve
  takes lot of time in handling the monitoring and sending the updates
  to all its connected clients. Its takes lot of CPU. With monitor-all
  option, all ovn-controllers do not enable conditional monitoring
  there by reducing the load on the Southbound ovsdb-server.

* A heat parameter "IronicPowerStateChangeTimeout" has been added
  which sets the number of seconds to wait for power operations to
  complete, i.e., so that a baremetal node is in the desired power
  state. If timed out, the power operation is considered a failure.
  The default is 60 seconds, which is the same as the current Ironic
  default.


Upgrade Notes
*************

* Upgrades from OVN non-HA and OVN DBs pacemaker to OVN DBs
  clustered are currently not supported.

* The default UEFI iPXE bootfile is now *snponly.efi*. The boolean
  parameter *IronicIPXEUefiSnpOnly* was added to allow custom
  configuration. When set to *true* snponly is used, when *false* the
  previous default ipxe.efi is used. See bug: 1959726
  (https://bugs.launchpad.net/tripleo/+bug/1959726).


Security Issues
***************

* The OVN database servers in an OVN DBs clustering and TLS-
  everywhere deployment will listen on all IP addresses (0.0.0.0).
  This is a caveat that can only be addressed once RHBZ 1952038 is
  fixed.


Bug Fixes
*********

* Rsyslog config for haproxy
  (https://bugs.launchpad.net/tripleo/+bug/1953672)

* The neutron agent report interval was recently changed from the
  30s default to 300s. This caused issues whith timeouts when
  providing baremetal nodes. A new parameter
  IronicNeutronAgentReportInterval has been added with a default of
  30s so that the report interval specifically for the networking
  baremetal agent is restored. See bug: 1940838
  (https://bugs.launchpad.net/tripleo/+bug/1940838).


Other Notes
***********

* The description of cinder's own __DEFAULT__ volume type is updated
  to indicate the actual default volume type is the one established by
  the CinderDefaultVolumeType parameter.

Changes in tripleo-heat-templates 12.4.5..12.4.6
------------------------------------------------

575e00c1e Required DDP package is not loaded issue
7aefcc7ab Don't bind host's /run in multipathd container
8d4deb693 [Neutron] Add custom env file to set dns_domain_name
c6ae51e5c Add IronicNeutronAgentReportInterval parameter
f95211e01 Add parameter IronicIPXEUefiSnpOnly
6586120e8 Update dervice_pci script to handle pci address formats
b1f4ae95f Check if passthrough user_config is decoded properly from hiera data
c01969d79 Fix indentation issue with 2-bonds-vlans config
e8ea8b3bf Manage octavia flavor in tripleo-ansible
720b18fd8 Add ping test for all networks gateway IPs
7a54602e4 Use only internal endpoints in Octavia controller services
13ad12e7b Make sure libvirt guests shut down before network
d9afc3b34 Disable metrics_qdr binding in HAProxyEdge
0a0d5ba96 Fix killscript regex match for libpod-conmon-*
cc81d668b Use public endpoint for [keystone_authtoken] www_authenticate_uri
68cc95c3a Remove ganesha_vip extra config workaround
4fadecc20 Fix IPv6 router on UC re-install
d56cb4417 GaneshaNetwork - fallback -> external -> ctlplane
69f283014 Add chrony waitsync back in
80db74593 Exec libvirtd in a transient scope
7c2eea715 Add missing services to ControllerNovaStandalone role
a99021ee9 fix InternalApi subnet for ControllerNovaStandalone role
d30105a28 [train,ussuri] Set cinder's __DEFAULT__ vol type description
67686a3b1 Keystone: Remove unused container_puppet_tasks
2c4fb647d Wallaby and older: Remove heat-dashboard parameters from local_settings
73dde6f32 Remove tripleo_ovn_mac_port_name port tag
d0e0f0275 Missing rsyslog parameters for HAProxy
ff7c3a9c9 [Ussuri-Only] Fix hiera condition for cache_backend
fe83db068 Revert "Clear up confusion on cinder's default volume type"
d0ca4fe9f Clear up confusion on cinder's default volume type
614e8078f Revert "Enforces minimum Ceph client version to Mimic"
394e2ac6d Fix condition to add per subnet routes parameter
4bfdfa3f8 Add param to configure neutron agent_down_time and report_interval
5f3bec954 Default CephDashboardNetwork to storage_dashboard
094fcf96f Fix libvirt/qemu logs location
e6de1f082 Enable ovn-monitor-all option to ovn-controller
ae93eba46 Remove mariadb-server packages from the host
5bb52590f Add parameter IronicPowerStateChangeTimeout
491105df1 Add OVNAvailabilityZone to improve UX
06fa3edae [victoria/ussuri/train] Tune minion defaults
e8ab4078a Added support for Neutron loggings service plugin configuration
e616f7d4b Use consistent naming for MysqlInnodbBufferPoolSize
3b986aba9 Use yaml.safe_load to load YAML files
f365caa0d Drop archive policy from enable-legacy-telemetry
d7bce9cea placement: Adding Debug parameter
54868e43f Option to select the required DDP package
56f153d63 Fix delegate_to to use group rather then undercloud
da3017506 Enable Ceph RGW public port into firewall when using SSL
b4aa112cc Do not fail if haproxy container UUID changes
193d2311a Remove setting ACLs during Upgrade
6c74f3468 Configure api_base_uri to DesignateEndpoint URI
1c30607c5 Wallaby and before: Fix wrong puppet parameter name
17b3bdce2 Fix ansible var
f17f2ee23 Stop rotating rabbitmq crash.log files via erlang's lager
76226ff2a Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up
ea3d52da1 Install python3-openstackclient after the leapp upgrade
5615fcc64 dpdk_telemetry is not used
8bc061ba9 Fix the CephDashboardNetwork default
b2524af68 Example configurable cap add
ec592483e NovaLiveMigrationPermitAutoConverge should default to True
d4c0435d0 Revert "Disable postcopy for ovn/ovs-dpdk"
750877f25 Environment for switching to using IPs for memcached
3b5628bab Enable keystone_authtoken/memcach_use_advanced_pool for Sahara
3d4063fca OVN DBs clustering
3b9383bfa Configure Ceph to not use separte db/wal LVs
7b219a42d Default ganesha-internal service endpoint to external network
251a1d238 Disable postcopy for ovn/ovs-dpdk
d5e73079f Enabling vhost-postcopy-support when live_migration_permit_post_copy
dc11095b6 Make memcached port parameters globally available
659352203 nova-compute: Adding failed_when to nova-compute stop task
5324b528b Wire up renamed upgrade periodic template
f0a6b950d Remove all docker related tasks from upgrades
4d1634d06 Role parameter for tripleo_kernel_defer_reboot
ed5c5457a [stable only] Fix NeutronL3AgentAvailabilityZone parameter
76aa869fa vncproxy: removal of tags and steps change from post_upgrade_tasks
ba38ee283 Add THT Jinja2 data sources as stack output
e084314d5 Add OVNCMSOptions to Controller and Networker roles
5dbffe900 Add service ordering to cleanup service to avoid conflicts with agent startup


Diffstat (except docs and test files)
-------------------------------------

ci/environments/neutron_dns_domain.yaml            |    2 +
.../scenario001-multinode-containers.yaml          |    4 -
ci/environments/scenario001-standalone.yaml        |    4 -
ci/environments/scenario004-standalone.yaml        |    7 -
.../scenario010-multinode-containers.yaml          |    4 -
ci/environments/scenario010-standalone.yaml        |    4 -
common/deploy-steps.j2                             |    8 +-
deployment/aodh/aodh-base.yaml                     |    2 +-
.../barbican/barbican-api-container-puppet.yaml    |    4 +-
deployment/ceph-ansible/ceph-mon.yaml              |   19 -
deployment/ceph-ansible/ceph-rgw.yaml              |    1 +
deployment/cinder/cinder-api-container-puppet.yaml |   16 +-
deployment/database/mysql-base.yaml                |    2 +-
deployment/database/mysql-pacemaker-puppet.yaml    |   11 +-
deployment/deprecated/sahara/sahara-base.yaml      |    8 +-
.../designate/designate-api-container-puppet.yaml  |    3 +-
deployment/glance/glance-api-container-puppet.yaml |    2 +-
.../gnocchi/gnocchi-api-container-puppet.yaml      |    2 +-
deployment/haproxy/haproxy-container-puppet.yaml   |   10 +
.../haproxy/haproxy-edge-container-puppet.yaml     |    1 +
deployment/haproxy/haproxy-pacemaker-puppet.yaml   |   10 +
deployment/haproxy/haproxy-public-tls-inject.yaml  |    5 +
deployment/heat/heat-base-puppet.yaml              |    9 +-
deployment/horizon/horizon-container-puppet.yaml   |    3 +
deployment/ipa/ipaservices-baremetal-ansible.yaml  |    2 +-
deployment/ironic/ironic-api-container-puppet.yaml |    2 +-
.../ironic/ironic-conductor-container-puppet.yaml  |   21 +-
.../ironic/ironic-inspector-container-puppet.yaml  |    2 +-
.../ironic-neutron-agent-container-puppet.yaml     |   23 +-
.../kernel-boot-params-baremetal-ansible.yaml      |   16 +
deployment/keystone/keystone-container-puppet.yaml |   16 +-
deployment/logging/files/nova-libvirt.yaml         |    2 +-
deployment/manila/manila-api-container-puppet.yaml |    2 +-
.../manila/manila-share-container-puppet.yaml      |    2 +-
.../memcached/memcached-container-puppet.yaml      |   20 +-
deployment/metrics/collectd-container-puppet.yaml  |   10 +-
deployment/mistral/mistral-base.yaml               |    2 +-
.../multipathd/multipathd-container-ansible.yaml   |    1 -
.../neutron/derive_pci_passthrough_whitelist.py    |  503 +++++---
deployment/neutron/kill-script                     |    2 +-
.../neutron/neutron-api-container-puppet.yaml      |   11 +-
deployment/neutron/neutron-base.yaml               |    7 +
deployment/neutron/neutron-cleanup.service         |    2 +-
.../neutron/neutron-dhcp-container-puppet.yaml     |   31 -
.../neutron/neutron-l3-container-puppet.yaml       |   58 +-
.../neutron/neutron-metadata-container-puppet.yaml |   31 -
.../neutron-ovn-dpdk-config-container-puppet.yaml  |    6 -
.../neutron-ovs-agent-container-puppet.yaml        |   24 +
.../neutron-ovs-dpdk-agent-container-puppet.yaml   |    3 -
deployment/neutron/neutron-plugin-ml2-ovn.yaml     |   26 +-
deployment/nova/nova-api-container-puppet.yaml     |    2 +-
deployment/nova/nova-base-puppet.yaml              |    7 +-
deployment/nova/nova-compute-container-puppet.yaml |   69 +-
deployment/nova/nova-libvirt-container-puppet.yaml |    6 +-
.../nova/nova-metadata-container-puppet.yaml       |    2 +-
.../nova/nova-vnc-proxy-container-puppet.yaml      |   20 +-
deployment/nova/novajoin-container-puppet.yaml     |    2 +-
.../octavia/octavia-api-container-puppet.yaml      |   24 +-
deployment/octavia/octavia-base.yaml               |    5 +
.../octavia/octavia-deployment-config.j2.yaml      |   19 +
.../openvswitch-dpdk-baremetal-ansible.yaml        |   46 +
.../ovn/ovn-controller-container-puppet.yaml       |   20 +-
deployment/ovn/ovn-dbs-cluster-ansible.yaml        |  312 +++++
deployment/ovn/ovn-dbs-pacemaker-puppet.yaml       |   28 +-
.../placement/placement-api-container-puppet.yaml  |   11 +-
deployment/podman/podman-baremetal-ansible.yaml    |   20 -
deployment/rabbitmq/rabbitmq-container-puppet.yaml |    2 +
deployment/swift/swift-proxy-container-puppet.yaml |    2 +-
deployment/timesync/chrony-baremetal-ansible.yaml  |    4 +-
.../tripleo-packages-baremetal-puppet.yaml         |    4 +-
deployment/zaqar/zaqar-container-puppet.yaml       |    2 +-
environments/enable-legacy-telemetry.yaml          |    4 +-
environments/memcached-use-ips.yaml                |    6 +
environments/network-environment-v6.j2.yaml        |    4 +-
environments/network-environment.j2.yaml           |    4 +-
environments/ssl/enable-memcached-tls.yaml         |    3 -
environments/undercloud/undercloud-minion.yaml     |   28 +
.../post_deploy/undercloud_ctlplane_network.py     |   73 +-
firstboot/userdata_timesync.yaml                   |    1 +
.../config/2-linux-bonds-vlans/role.role.j2.yaml   |   30 +-
network/network.j2                                 |   10 +
network/networks.j2.yaml                           |   10 +-
network/ports/ovn_mac_addr_port.yaml               |    4 -
network/service_net_map.j2.yaml                    |    6 +-
overcloud.j2.yaml                                  |   29 +
.../notes/DdpPackage-581e67f08908ed51.yaml         |    5 +
.../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml      |    5 +
...d-ovn-dbs-cluster-support-6193cba5be432865.yaml |   14 +
...ter-kernelargsdeferreboot-5b8e8b2f64c64a91.yaml |    7 +
.../notes/agent_down_time-d6aebe530ca31b9e.yaml    |    8 +
...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml |    4 +
...e-volume-type-description-5f81e2ff5ea8184a.yaml |    6 +
...baremetal-report-interval-d08a44a147a1846e.yaml |   10 +
...ging-plugin-support-added-b2e1292d49e087c3.yaml |   12 +
.../notes/ovn-monitor-all-2fefb215c6f7166c.yaml    |    8 +
.../notes/power_state-457f12af30b9e341.yaml        |    8 +
.../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml  |    9 +
roles/Controller.yaml                              |    2 +
roles/ControllerAllNovaStandalone.yaml             |    2 +
roles/ControllerNoCeph.yaml                        |    2 +
roles/ControllerNovaStandalone.yaml                |   19 +-
roles/ControllerOpenstack.yaml                     |    2 +
roles/ControllerSriov.yaml                         |    2 +
roles/ControllerStorageDashboard.yaml              |    2 +
roles/ControllerStorageNfs.yaml                    |    2 +
roles/Networker.yaml                               |    2 +
roles/NetworkerSriov.yaml                          |    2 +
roles_data.yaml                                    |    2 +
sample-env-generator/undercloud-minion.yaml        |   19 +
tools/render-ansible-tasks.py                      |   11 +-
tools/yaml-validate.py                             |   26 +-
tox.ini                                            |    4 +-
zuul.d/layout.yaml                                 |   13 +
114 files changed, 2687 insertions(+), 540 deletions(-)