April 2017 - Release-announce - lists.openstack.org

[tripleo] os-refresh-config 6.1.0 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are pumped to announce the release of: os-refresh-config 6.1.0: Refresh system configuration This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 6.0.0..6.1.0 ----------------------------------------- 85e8b4f Updated from global requirements 9148369 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index edcdc78..148947f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.8 # Apache-2.0 +pbr<2.0.0,>=1.8 # Apache-2.0

1 0

[tripleo] tripleo-heat-templates 6.1.0 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are happy to announce the release of: tripleo-heat-templates 6.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.0 ^^^^^ New Features ************ * Add capabilities to configure LDAP backends as for keystone domains. This can be done by using the KeystoneLDAPDomainEnable and KeystoneLDAPBackendConfigs parameters. * Add support for cold migration over ssh. This enables nova cold migration. This also switches to SSH as the default transport for live- migration. The tripleo-common mistral action that generates passwords supplies the MigrationSshKey parameter that enables this. * SSH host key exchange. The ssh host keys are collected from each host, combined, and written to /etc/ssh/ssh_known_hosts. * Added ability to manage MOTD Banner Enabled SSHD composible service by default. Puppet-ssh manages the sshd config. Known Issues ************ * During the ovs upgrade for 2.5 to 2.6 we need to workaround the classic yum update command by handling the upgrade of the package separately to not loose the IPs and the connectivity on the nodes. The workaround is discussed here https://bugs.launchpad.net/tripleo/+bug/1669714 Upgrade Notes ************* * The upgrade from openvswitch 2.5 to 2.6 is handled gracefully and there should be no user impact in particular no restart of the openvswitch service. For more information please see the related bug above which also links the relevant code reviews. The workaround (transparent to the user/doesn't require any input) is to download the OVS package and install with --nopostun and --notriggerun options provided by the rpm binary. * The default network for the ctlplane changed from 192.0.2.0/24 to 192.168.24.0/24. All references to the ctlplane network in the templates have been updated to reflect this change. When upgrading from a previous release, if the default network was used for the ctlplane (192.0.2.0/24), then it is necessary to provide as input, via environment file, the correct setting for all the parameters that previously defaulted to 192.0.2.x and now default to 192.168.24.x; there is an environment file which could be used on upgrade *environments/updates/update-from-192_0_2-subnet.yaml* to cover a simple scenario but it won't be enough for scenarios using an external load balancer, Contrail or Cisto N1KV. Follows a list of params to be provided on upgrade. From contrail-net.yaml: EC2MetadataIp, ControlPlaneDefaultRoute From external-loadbalancer- vip-v6.yaml: ControlFixedIPs From external-loadbalancer-vip.yaml: ControlFixedIPs From network-environment.yaml: EC2MetadataIp, ControlPlaneDefaultRoute From neutron-ml2-cisco-n1kv.yaml: N1000vVSMIP, N1000vMgmtGatewayIP From contrail-vrouter.yaml: ContrailVrouterGateway Deprecation Notes ***************** * The TCP transport is no longer used for live-migration and the firewall port has been closed. Security Issues *************** * Secure EtcdInitialClusterToken by removing the default value and make the parameter hidden. Fixes bug 1673266. Bug Fixes ********* * NeutronDhcpAgents had a default value of 3 that, even though unused in practice was a bad default value. Changing the default value to a sentinel value and making the hiera conditional allows deploy-time logic in puppet to provide a default value based on the number of dhcp agents being deployed. * Updated bigswitch environment file to include the bigswitch agent installation and correct support for the restproxy configuration. * The initial firewall will now be purged by the deployed-server bootstrap scripts. This is needed to prevent possible issues with bootstrapping the initial Pacemaker cluster. See https://bugs.launchpad.net/tripleo/+bug/1679234 * Fixes an issue when using the CinderNfsServers parameter_defaults setting. It now works using a single share as well as a comma- separated list of shares. * Fixes firewall rules from neutron OVS agent not being inherited correctly and applied in neutron OVS DPDK template. * Fixes OpenDaylightProviderMappings parsing on a comma delimited list. * openstack-selinux is now installed by the deployed-server bootstrap scripts. Previously, it was not installed, so if SELinux was set to enforcing, all OpenStack policy was missing. * Since panko is enabled by default, include it the default dispatcher for ceilometer events. * Add knobs to limit memory comsumed by mongodb with systemd * We need ceilometer user in cases where ceilometer API is disabled. This is to ensure other ceilometer services can still authenticate with keystone. * The "pci_passthrough" hiera value should be passed as a string (bug 1675036). * The token flush cron job has been modified to run hourly instead of once a day. This is because this was causing issues with larger deployments, as the operation would take too long and sometimes even fail because of the transaction being so large. Note that this only affects people using the UUID token provider. Changes in tripleo-heat-templates 6.0.0..6.1.0 ---------------------------------------------- b67f77e Prepare 6.1.0 (ocata) 2e25d11 Cinder-api upgrade: use httpd instead of apachectl 8b15fc9 Increase documentation about parameters 1b87b2e Deploy ceilometer_auth_enabled to node containing keystone ff53f7d Remove no longer used environment files - older upgrade workflows 876105e sensu: fix upgrade case when service is added cbf997e SSHD Service extensions 1eeedbc Add migration SSH tunneling support 68d7196 SSH known_hosts config 225cff3 N->O Manual puppet commands have the right modulepath. 6f75d76 N->O upgrade, fix wrong parameters to nova placement. c1fc74c Run token flush cron job hourly by default 5eb39b4 Use comma_delimited_list for token flush cron time settings a2cf2d4 Touch /etc/httpd/conf.d/ssl.conf f6a83fe Fix bogus parameters in get_param c25a963 Add params to tweak memory limit on mongodb 485715c Update Dell EMC Cinder back end services 037d09a yum_update.sh - Use the yum parameter: check-update d10aacc Add composable role support for NetApp Cinder back end d381054 Replace references to the 192.0.2 network 16de97f Update ceph-rgw acccepted roles to fix OSP upgrade 96d3e64 Decouple Swift ringbuilding logic 4db1c9f Add trigger to setup a LDAP backend as keystone domaine d3f47eb Add manual ovs upgrade script for workaround ovs upgrade issue 7d86750 Enforce upgrade_batch_tasks before upgrade_tasks order 11389e5 Ensure upgrade step orchestration accross roles. 40b4878 Add environment for deployed-server with pacemaker 77aa9a7 Generate Pre/Post Puppet Tasks for all roles 2047cbb Updated from global requirements 33e63c2 Purge initial firewall for deployed-server's b885502 Set auth flag so ceilometer auth is enabled cb567de FQDN validation 043adb9 Fixes port binding controller for OpenDaylight 287a850 Add missing ec2api::api::keystone_ec2_tokens_url config a1599f5 Setting keystone region for tacker f8d2292 Include panko in the default dispatcher 2e7c850 Add special case upgrade from openvswitch 2.5.0-14 985c5ec Don't check haproxy if external load-balancer is used. f9d2ce1 Re-Add bigswitch agent support d99a067 [N->O] Fix wrong database connection for cell0 during upgrade. 9b95554 Stop openstack-nova-compute during nova-ironic upgrade 129734a Run cluster check on nodes configured in wsrep_cluster_address. 8a4c6cb Modify pci_passthrough hiera value as string df26adf Remove 'Controller' role references from overcloud.j2.yaml c71229f Only set EnableConfigPurge on major upgrades c26c325 [N->O] is creating 2 default cell_v2 cells c41f483 Nic config mappings for deployed-server e7e8161 Sort ResourceGroup resource list 9a8d654 Setting keystone region for congress 440901b N->O upgrade, blanks ipv6 rules before activating it. c077b20 N->O Upgrade, make sure all nova placement parameter properly set. 8b7a995 Fix usage of CinderNfsServers ac98fcf Install openstack-selinux for deployed-server e6fbc8e Fixes missing firewall rules for neutron_ovs_dpdk_agent service 6b33a77 Enables increasing mariadb open files for noha deployments a17f6c6 Fixes OpenDaylightProviderMappings hiera parsing 8f728b3 etcd: secure EtcdInitialClusterToken parameter 803da62 Deploy versionless keystone endpoints (for keystone only) 5d86af8 Add bindep support 5cd57aa Don't try to run os-net-config from yum_update.sh 2d47d9b Explicitly configure credentials used by ironic to access other services 1652f1b Fixes multiple issues with retry function in rhel-registration. d385fc3 Pick dynamically the first node for stack validation 557b021 Make sure PrePuppet runs before any Deployment_Step f4c4a0f Cleanup no longer used upgrade files bc8dcd1 Upgrades: wait for galera to be settled 126e207 Align hyperconverged-ceph.yaml environment and adds some validation 9649095 Adds upgrade tasks for OpenDaylight services f0e03ba Remove ha-by-default release note in Ocata 3134784 Use the new hiera hook in all remaining templates 9c91720 Make neutron dhcp agents per network conditional 59e5f95 Remove the openvswitch special case upgrade code 476d15b Disable exit on error for pacemaker commands for update flow d76ef52 Use --disable= in subscription-manager to avoid shell expansion. 4cb1923 Add OpenDaylightConnectionProtocol parameter to opendaylight-api service Diffstat (except docs and test files) ------------------------------------- all-nodes-validation.yaml | 6 + bindep.txt | 2 + ci/environments/multinode-3nodes.yaml | 2 + ci/environments/multinode.yaml | 1 + ci/environments/multinode_major_upgrade.yaml | 1 + ci/environments/scenario002-multinode.yaml | 1 + ci/environments/scenario003-multinode.yaml | 1 + ci/environments/scenario004-multinode.yaml | 1 + deployed-server/README.rst | 4 +- .../deployed-server-bootstrap-centos.sh | 6 +- deployed-server/deployed-server-bootstrap-rhel.sh | 6 +- deployed-server/scripts/get-occ-config.sh | 2 +- environments/cinder-netapp-config.yaml | 2 +- environments/collectd-environment.yaml | 32 +++- environments/contrail/contrail-net.yaml | 4 +- environments/deployed-server-environment.j2.yaml | 11 ++ environments/deployed-server-environment.yaml | 4 - .../deployed-server-pacemaker-environment.yaml | 4 + environments/external-loadbalancer-vip-v6.yaml | 2 +- environments/external-loadbalancer-vip.yaml | 2 +- environments/logging-environment.yaml | 2 +- environments/major-upgrade-aodh-migration.yaml | 6 - ...ajor-upgrade-ceilometer-wsgi-mitaka-newton.yaml | 7 - environments/major-upgrade-composable-steps.yaml | 1 + environments/major-upgrade-converge.yaml | 1 + environments/major-upgrade-pacemaker-converge.yaml | 6 - environments/major-upgrade-pacemaker-init.yaml | 6 - environments/major-upgrade-pacemaker.yaml | 6 - environments/major-upgrade-remove-sahara.yaml | 6 - environments/network-environment.yaml | 4 +- environments/neutron-ml2-bigswitch.yaml | 13 +- environments/neutron-ml2-cisco-n1kv.yaml | 4 +- environments/neutron-opendaylight.yaml | 1 + environments/services/disable-ceilometer-api.yaml | 3 + .../keystone_domain_specific_ldap_backend.yaml | 18 ++ environments/sshd-banner.yaml | 6 +- .../updates/update-from-192_0_2-subnet.yaml | 3 + .../rhel-registration/scripts/rhel-registration | 50 ++++-- extraconfig/tasks/aodh_data_migration.sh | 19 -- ...ajor_upgrade_ceilometer_wsgi_mitaka_newton.yaml | 62 ------- extraconfig/tasks/major_upgrade_check.sh | 109 ----------- .../tasks/major_upgrade_controller_pacemaker_1.sh | 36 ---- .../tasks/major_upgrade_controller_pacemaker_2.sh | 176 ------------------ .../tasks/major_upgrade_controller_pacemaker_3.sh | 68 ------- .../tasks/major_upgrade_controller_pacemaker_4.sh | 17 -- .../tasks/major_upgrade_controller_pacemaker_5.sh | 8 - .../tasks/major_upgrade_controller_pacemaker_6.sh | 15 -- extraconfig/tasks/major_upgrade_pacemaker.yaml | 175 ------------------ .../tasks/major_upgrade_pacemaker_migrations.sh | 200 --------------------- .../mitaka_to_newton_aodh_data_migration.yaml | 25 --- .../mitaka_to_newton_ceilometer_wsgi_upgrade.pp | 103 ----------- extraconfig/tasks/pacemaker_common_functions.sh | 9 +- extraconfig/tasks/run_puppet.sh | 5 +- extraconfig/tasks/ssh/host_public_key.yaml | 42 +++++ extraconfig/tasks/ssh/known_hosts_config.yaml | 36 ++++ extraconfig/tasks/swift-ring-deploy.yaml | 31 ---- extraconfig/tasks/swift-ring-update.yaml | 42 ----- extraconfig/tasks/tripleo_upgrade_node.sh | 14 +- extraconfig/tasks/yum_update.sh | 58 +++--- net-config-linux-bridge.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 41 ++++- puppet/blockstorage-role.yaml | 37 ++++ puppet/cephstorage-role.yaml | 37 ++++ puppet/compute-role.yaml | 39 +++- puppet/controller-role.yaml | 38 +++- .../all_nodes/neutron-midonet-all-nodes.yaml | 65 ++++--- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 47 +++-- .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 22 ++- .../extraconfig/pre_deploy/compute/nova-nuage.yaml | 29 ++- .../pre_deploy/controller/cinder-netapp.yaml | 158 ---------------- .../controller/neutron-ml2-bigswitch.yaml | 35 ++-- .../controller/neutron-ml2-cisco-n1kv.yaml | 85 +++++---- puppet/major_upgrade_steps.j2.yaml | 57 +++--- puppet/objectstorage-role.yaml | 37 ++++ puppet/puppet-steps.j2 | 40 ++--- puppet/role.role.j2.yaml | 37 ++++ puppet/services/ceilometer-base.yaml | 9 +- puppet/services/ceph-rgw.yaml | 2 +- puppet/services/cinder-api.yaml | 2 +- puppet/services/cinder-backend-netapp.yaml | 129 +++++++++++++ puppet/services/cinder-backend-scaleio.yaml | 2 +- puppet/services/cinder-volume.yaml | 6 +- puppet/services/congress.yaml | 1 + puppet/services/database/mongodb.yaml | 5 + puppet/services/database/mysql.yaml | 6 + puppet/services/ec2-api.yaml | 5 + puppet/services/etcd.yaml | 2 +- puppet/services/ironic-conductor.yaml | 43 ++++- puppet/services/keystone.yaml | 40 ++++- puppet/services/metrics/collectd.yaml | 4 +- puppet/services/monitoring/sensu-client.yaml | 2 +- puppet/services/network/contrail-vrouter.yaml | 2 +- puppet/services/neutron-base.yaml | 45 +++-- puppet/services/neutron-bigswitch-agent.yaml | 31 ++++ puppet/services/neutron-ovs-agent.yaml | 35 ++-- puppet/services/neutron-ovs-dpdk-agent.yaml | 10 +- puppet/services/neutron-plugin-ml2-odl.yaml | 45 +++++ puppet/services/nova-api.yaml | 12 +- puppet/services/nova-base.yaml | 16 +- puppet/services/nova-compute.yaml | 16 +- puppet/services/nova-ironic.yaml | 4 + puppet/services/nova-libvirt.yaml | 1 - puppet/services/octavia-base.yaml | 6 +- puppet/services/opendaylight-api.yaml | 28 +++ puppet/services/opendaylight-ovs.yaml | 30 +++- puppet/services/openvswitch-upgrade.yaml | 50 ++++++ puppet/services/pacemaker.yaml | 18 +- puppet/services/sshd.yaml | 31 +++- puppet/services/swift-ringbuilder.yaml | 10 ++ puppet/services/tacker.yaml | 1 + puppet/services/tripleo-firewall.yaml | 6 + .../notes/add-ldap-backend-0bda702fb0aa24bf.yaml | 5 + ...s-per-network-calculation-536c70391497256d.yaml | 8 + .../notes/big-switch-agent-4c743a2112251234.yaml | 5 + ...yed-server-firewall-purge-9d9fe73faf925056.yaml | 6 + releasenotes/notes/etcdtoken-4c46bdfac940acda.yaml | 6 + ...ix-cinder-nfs-share-usage-0968f88eff7ffb99.yaml | 6 + ...fix-neutron-dpdk-firewall-436aee39a0d7ed65.yaml | 5 + ...dl-provider-mapping-hiera-5b3472184be490e2.yaml | 4 + .../notes/ha-by-default-55326e699ee8602c.yaml | 5 - ...install-openstack-selinux-d14b2e26feb6d04e.yaml | 6 + .../notes/make-panko-default-8d0e824fc91cef56.yaml | 4 + .../notes/migration_over_ssh-003e2a92f5f5374d.yaml | 14 ++ ...sable-upgrades-workaround-73f4e56127c910b4.yaml | 12 ++ ...eferences-to-old-ctlplane-0df7f2ae8910559c.yaml | 20 +++ .../restrict-mongodb-memory-de7bf6754d7234d9.yaml | 3 + .../set-ceilometer-auth-flag-382f68ddb2cbcb6b.yaml | 5 + .../sriov-pci-passthrough-8f28719b889bdaf7.yaml | 4 + .../notes/ssh_known_hosts-287563590632d1aa.yaml | 4 + .../sshd-service-extensions-0c4d0879942a2052.yaml | 5 + .../token-flush-twice-a-day-d4b00a2953a6b383.yaml | 7 + releasenotes/source/conf.py | 4 +- requirements.txt | 2 +- roles_data.yaml | 4 + tools/yaml-validate.py | 18 ++ validation-scripts/all-nodes.sh | 18 ++ 137 files changed, 1490 insertions(+), 1655 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 057aa28..cb3f96e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.8 # Apache-2.0 +pbr<2.0.0,>=1.8 # Apache-2.0

1 0

[tripleo] puppet-tripleo 6.4.0 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are pleased to announce the release of: puppet-tripleo 6.4.0: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.4.0 ^^^^^ New Features ************ * Add keystone::ldap_backend call as resource when is trigged to setup a LDAP backend as keystone domain. This allows per-domain LDAP backends for keystone. * U * n * l * e * s * s * a * n * o * n * d * e * f * a * u * l * t * v * a * l * u * e * i * s * p * r * o * v * i * d * e * d * , * t * h * e * d * h * c * p * _ * a * g * e * n * t * s * _ * p * e * r * _ * n * e * t * w * o * r * k * n * e * u * t * r * o * n * c * o * n * f * i * g * u * r * a * t * i * o * n * v * a * r * i * a * b * l * e * i * s * s * e * t * t * o * t * h * e * n * u * m * b * e * r * o * f * d * e * p * l * o * y * e * d * n * e * u * t * r * o * n * d * h * c * p * a * g * e * n * t * s * . * Configure ssh tunneling for nova cold-migration. Re-use the tunnel for libvirt live-migration unless TLS is enabled. Bug Fixes ********* * Octavia is now properly registered with keystone when deployed. * Add a tunnel timeout to the HAProxy tripleo-ui configuration to ensure Zaqar WebSocket tunnels persist longer than two minutes https://bugs.launchpad.net/tripleo/+bug/1672826 * We need ceilometer user in cases where ceilometer API is disabled. This is to ensure other ceilometer services can still authenticate with keystone. * With having package mod_ssl by default installed in images we introduced issue with mod_ssl package update. In case of SSL not being used or provided by HAproxy the puppet-apache module by default purges the ssl.conf file. The package update then recreates the file with default Listen 443 option. This causes conflict on 443 port during httpd restart. If we include ::apache::mod::ssl the ssl.conf file will be configured and the Listen option will be used only if there is vhost set to use SSL. * Fixes horizon getting temporarily deconfigured during a stack update due to the apache configuration occuring in step 3 but the horizon configuration not occuring until step 4. * Fixes missing neutron base class in sriov * Re-run gnocchi and ceilometer upgrade in step5. This is required for gnocchi resource types to be created in ceilometer and gnocchi to function properly. * Add a way for mongodb to limit amount of memory it comsumes with systemd. A new param memory_limit has been added to tripleo::profile::base::database::mongodb class with default limit of 20G. Changes in puppet-tripleo 6.3.0..6.4.0 -------------------------------------- f9867d2 Prepare 6.4.0 release (ocata) 0eeee9a Add a flag to rabbitmq so that we can deploy with ha-mode: all again 7be9a3b Update Gemfile to pull spec_helper from stable/ocata 7d13719 Refactor SSHD config to allow both SSHD options and banner/motd to be set f01cef0 Stop SSHD profile clobbering SSH client config 0e991f9 SSHD Service extensions 4e398a7 Configure migration SSH tunnel ef4a1da Ensure we configure ssl.conf 9e81a1b Move ceilometer wsgi to step 3 243e3bd Move gnocchi wsgi configuration to step 3 ac5954c Restrict mongodb memory usage fb28647 Migrate Swift ring handling from tripleo-heat-templates to puppet-tripleo b14631a Enable creation of keystone domain when ldap backends are created c290801 syntax error extra comma in rabbitmq.pp 38142b7 Add missing octavia auth include to keystone manifest 44f627c Add a trigger to call ldap_backend define 0a12215 Make the cluster-check property configurable 7ac3d9d Deploy WSGI apps at the same step (3) 79e3a9f Fixes missing neutron base in sriov 12e6b07 Decouple ceilometer user create from API b1b418d Add tunnel timeout for ui proxy container 3424991 Move horizon to step 3 607f646 Fix deprecated eqlx parameters b6a9d14 Check rabbitmq user at step >= 2 d7ae2b8 Add missing include of ::ec2api::keystone::authtoken d11e83b Re-run gnocchi and ceilometer upgrade in step 5 413a694 Ensure iscsi-initiator-utils installed c802a80 Correct haproxy's stat unix socket path d71efd8 panko: Do db_sync in api manifest 1c15650 Explicitly configure credentials used by ironic to access other services 5508557 Fixes issues with raising mysql file limit cf77c11 Add bindep support 8a53016 Throw warnings for norpm actions 6d204f4 Stop the chronyd service 5d9d1c6 mariadb: Move generation of systemd drop-in to puppet-tripleo 4b3ff75 Default neutron dhcp_agents_per_network to number of agents Diffstat (except docs and test files) ------------------------------------- Gemfile | 1 + Puppetfile_extras | 12 ++ bindep.txt | 2 + lib/puppet/provider/package/norpm.rb | 5 + manifests/haproxy.pp | 8 +- manifests/profile/base/aodh/api.pp | 3 +- manifests/profile/base/barbican/api.pp | 1 + manifests/profile/base/ceilometer/api.pp | 3 +- manifests/profile/base/ceilometer/collector.pp | 8 + manifests/profile/base/cinder/api.pp | 1 + manifests/profile/base/cinder/volume/dellps.pp | 6 +- manifests/profile/base/database/mongodb.pp | 11 ++ manifests/profile/base/database/mysql.pp | 22 ++- manifests/profile/base/gnocchi/api.pp | 14 +- manifests/profile/base/horizon.pp | 2 +- manifests/profile/base/ironic/conductor.pp | 7 + manifests/profile/base/keystone.pp | 27 +++- manifests/profile/base/neutron.pp | 30 +++- manifests/profile/base/neutron/sriov.pp | 2 + manifests/profile/base/nova.pp | 87 +++++++--- manifests/profile/base/nova/api.pp | 1 + manifests/profile/base/nova/compute.pp | 2 + manifests/profile/base/nova/ec2api.pp | 1 + manifests/profile/base/nova/placement.pp | 1 + manifests/profile/base/pacemaker.pp | 25 +++ manifests/profile/base/panko.pp | 18 +-- manifests/profile/base/panko/api.pp | 19 ++- manifests/profile/base/rabbitmq.pp | 5 +- manifests/profile/base/sshd.pp | 74 ++++++--- manifests/profile/base/swift/ringbuilder.pp | 36 +++++ manifests/profile/base/time/ntp.pp | 10 +- manifests/profile/base/zaqar.pp | 1 + manifests/profile/pacemaker/rabbitmq.pp | 8 +- .../rabbitmq-user-check-95da891a2e197d89.yaml | 6 + metadata.json | 2 +- .../notes/add-ldap-backend-48e875e971343e2a.yaml | 5 + ...-octavia-auth-to-keystone-d0353544c0e27b57.yaml | 3 + ...el-timeout-for-haproxy-ui-0705dfd671f9f487.yaml | 6 + ...e-dhcp-agents-per-network-3089c5e7b15f8b7b.yaml | 5 + .../cold_migration_setup-dc4ebd834920c27f.yaml | 4 + ...te-ceilo-user-for-gnocchi-b8a4d5ea2f2375a9.yaml | 5 + .../notes/ensure-ssl-conf-2f32c6ead6f3bb0e.yaml | 10 ++ ...figuration-during-updates-aecfab9a4aa8770b.yaml | 6 + .../fix-sriov-neutron-base-3e32bd667886c474.yaml | 3 + .../re-run-ceilo-upgrade-0d9ba69fe4bfe780.yaml | 5 + .../restrict-mongodb-memory-c19d69638b63feb4.yaml | 6 + releasenotes/notes/sshd-437c531301f458bb.yaml | 4 +- releasenotes/source/conf.py | 4 +- spec/classes/tripleo_profile_base_aodh_api_spec.rb | 8 +- .../tripleo_profile_base_ceilometer_api_spec.rb | 8 +- ...ipleo_profile_base_ceilometer_collector_spec.rb | 26 +++ .../tripleo_profile_base_database_mysql_spec.rb | 75 +++++++++ .../tripleo_profile_base_gnocchi_api_spec.rb | 101 ++++++++++++ spec/classes/tripleo_profile_base_horizon_spec.rb | 57 +++++++ .../tripleo_profile_base_nova_compute_spec.rb | 3 + spec/classes/tripleo_profile_base_nova_spec.rb | 118 +++++++++++++- spec/classes/tripleo_profile_base_sshd_spec.rb | 176 ++++++++++++++++++++- .../tripleo_profile_base_swift_ringbuilder.rb | 65 ++++++++ spec/classes/tripleo_profile_base_time_ntp_spec.rb | 39 +++++ spec/fixtures/hieradata/default.yaml | 3 + 60 files changed, 1105 insertions(+), 101 deletions(-)

1 0

[tripleo] instack-undercloud 6.1.0 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are glad to announce the release of: instack-undercloud 6.1.0: instack-undercloud This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.0 ^^^^^ Upgrade Notes ************* * Changed the configuration of endpoints that UI uses in order to connect to the Undercloud in a non-SSL deployment. The port number that the UI now uses to communicate with the Undercloud for non-SSL connections is 3000, which supports endpoint proxy configuration. Previously, this port number was the default port number for the service endpoint that UI connected to. Bug Fixes ********* * Fixes bug 1668775 Certmonger certificate does not include EKUs * Add gnocchi to events dispatcher so ceilometer can publish events to panko and gnocchi. * Add OS_AUTH_TYPE to undercloud stackrc file. Not all clients default to keystone auth, so lets explicitly set the auth type in env. * Fixes bug 1663199 UI doesn't work without manual update on HTTP undercloud * In /etc/heat/heat.conf, [clients]/endpoint_type was configured to use the internal endpoints and this was hardcoded in puppet-stack- config.pp so there was no way to change it. It's now configurable via the hiera key heat_clients_endpoint_type. * The Heat CFN endpoint is now created in Keystone during the undercloud install. A new configuration option, undercloud_heat_cfn_password is added for the heat_cfn service user associated with the endpoint. * Previously, when an IP value was provided for the undercloud_public_host or undercloud_admin_host config value, it was validated to ensure it fell within the network_cidr. This was to avoid problems when the CIDR was changed but the IPs were not. However, this validation was broken for a time in the case where generate_service_certificate was used. During this time, the UI began to depend on the broken validation as it needs to listen on a routable network, which the provisioning network often is not. When the validation was fixed, the user was no longer able to configure the host values to listen on a different routable network. To enable this UI functionality again, the host validation has been disabled when enable_ui is true. This means the user is responsible for selecting functional host values, but the UI can once again be configured to listen on a separate network. * Add a dependency to restart collector after other services are up and ceilometer upgrade is complete. * Run ceilometer-upgrade conditionally when gnocchi is running so that gnocchi resource types are created. Changes in instack-undercloud 6.0.0..6.1.0 ------------------------------------------ 6790ae8 Update Gemfile to pull spec_helper from stable/ocata f879305 Set a dependency on collector d8aa7d1 Dont include wsgi profile when legacy flag is disabled ff55e17 Set default domain for all keystone users dc6566d Replace hardcoded regions by hiera call 7aff3cd Remove obsolete flag on gnocchi-upgrade f23f320 Add gnocchi to events dispatchers c01722c Create Heat API CFN endpoint 8c0de18 Increase size of heat json message e32b025 Disable VIP validation when UI is enabled f62bc50 Set OS_AUTH_TYPE on undercloud stackrc 63d085e Run ceilometer-upgrade for gnocchi conditionally d29886e Configurable [clients]/endpoint_type for heat.conf 97f3eeb Use purged for firewalld 5f47eeb Align stars to fix CI 9a1bafa Provide correct non-SSL port config in ui config dd5c683 Add certificate EKUs to public endpoint cert Diffstat (except docs and test files) ------------------------------------- Gemfile | 6 +-- bindep.txt | 0 .../puppet-stack-config/puppet-stack-config.pp | 43 +++++++++++++++++++--- .../puppet-stack-config.yaml.template | 28 +++++++++----- .../os-apply-config/root/stackrc | 2 + instack_undercloud/undercloud.py | 32 ++++++++++------ instack_undercloud/validator.py | 9 ++++- .../add-certificate-ekus-13e92513c562f0dc.yaml | 5 +++ ...-gnocchi-event-dispatcher-d70df046292e333e.yaml | 4 ++ .../notes/add-os-auth-type-5ed9338e73e0e172.yaml | 4 ++ ...t-nonssl-undercloud-ports-34e60f87f3eb7ad6.yaml | 12 ++++++ ...ble-clients-endpoint_type-fc658f7ae935133f.yaml | 7 ++++ .../create-heat-cfn-endpoint-c7c00e3b61a98b5e.yaml | 6 +++ .../relax-validation-for-ui-f27a5e9b64d1d6c1.yaml | 17 +++++++++ .../notes/restart-collector-b043489fcdf1e9c7.yaml | 4 ++ ...eilometer-gnocchi-upgrade-215cb426d25d11e9.yaml | 4 ++ scripts/instack-haproxy-cert-update | 11 ++++++ tox.ini | 3 +- undercloud.conf.sample | 8 +++- 21 files changed, 181 insertions(+), 40 deletions(-)

1 0

[cloudkitty] cloudkitty 5.0.1 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We contentedly announce the release of: cloudkitty 5.0.1: Rating as a Service component for OpenStack This release is part of the ocata stable release series. Download the package from: https://pypi.python.org/pypi/cloudkitty For more details, please see below. Changes in cloudkitty 5.0.0..5.0.1 ---------------------------------- d3604cb Fix gnocchi metric collection ccb944e Assign the resource_type when search resource by gnocchiclient 8836768 Improve and simplify the gnocchi collector 9b6e1f7 Fix usage of period configuration value 6c505e9 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + cloudkitty/collector/gnocchi.py | 163 ++++++++-------------------------------- cloudkitty/orchestrator.py | 22 ++++-- 3 files changed, 48 insertions(+), 138 deletions(-)

1 0

[tripleo] tripleo-ui-announce-release 1.2.0 (newton)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are jazzed to announce the release of: tripleo-ui-announce-release 1.2.0 This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. Changes in tripleo-ui-announce-release 1.1.0..1.2.0 --------------------------------------------------- 7cbf49c Prepare 1.2.0 release (newton) c592740 Fix the deletePlan action 36b0b58 Display Role tag when role is not available f10a264 Don't log out when mistral action fails to run c960e2e Disallow underscores in plan names c45508f Expand %(tenant_id)s macro in service URLs 9c414ca Configure webpack to stop on error Diffstat (except docs and test files) ------------------------------------- dist/tripleo_ui_config.js.sample | 4 ---- npm-shrinkwrap.json | 2 +- package.json | 4 ++-- src/js/actions/PlansActions.js | 2 +- src/js/components/nodes/NodesTable.js | 2 +- src/js/components/plan/PlanFormTabs.js | 4 ++-- src/js/services/MistralApiErrorHandler.js | 1 - src/js/services/utils.js | 3 ++- webpack.config.js | 1 + 10 files changed, 26 insertions(+), 14 deletions(-)

1 0

[nova] os_vif 1.4.1 (ocata)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We are stoked to announce the release of: os_vif 1.4.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the ocata stable release series. Download the package from: https://pypi.python.org/pypi/os_vif For more details, please see below. Changes in os_vif 1.4.0..1.4.1 ------------------------------ 98fa063 Sync pbr with latest from global-requirements in stable/ocata 619c5e9 vif_plug_ovs: Skip setting MTU on Windows when plugging devices 6af41c8 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 2 +- vif_plug_ovs/linux_net.py | 8 +++++++- 3 files changed, 9 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6f07563..66d0b30 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=1.6 # Apache-2.0 +pbr<2.0.0,>=1.8 # Apache-2.0

1 0

[tripleo] tripleo-puppet-elements 5.3.0 (newton)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We exuberantly announce the release of: tripleo-puppet-elements 5.3.0: Puppet building rules for OpenStack images. This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. 5.3.0 ^^^^^ New Features * Added tuned-profile-cpu-partitioning package from centos rt repo. This package is essential for tuning hosts for NFV deployments. Changes in tripleo-puppet-elements 5.2.1..5.3.0 ----------------------------------------------- ea5c909 Enabled "tuned-profiles-cpu-partitioning" package for overcloud image 47d59f4 Adds puppet-systemd Diffstat (except docs and test files) ------------------------------------- .../install.d/package-installs-overcloud-compute | 1 + elements/overcloud-compute/pkg-map | 3 ++- .../pre-install.d/03-centos-rt-for-tuned-only | 21 +++++++++++++++++++++ .../02-puppet-modules-install-types.sh | 1 + .../puppet-modules/source-repository-puppet-modules | 1 + .../notes/tuned-profile-6f31e97efe1c1fa8.yaml | 4 ++++ 6 files changed, 30 insertions(+), 1 deletion(-)

1 0

[tripleo] tripleo-image-elements 5.3.0 (newton)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We jubilantly announce the release of: tripleo-image-elements 5.3.0: Disk image builder elements for deploying OpenStack. This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 5.2.0..5.3.0 ---------------------------------------------- 3ecf477 Set correct content-type for o-r-c curl calls Diffstat (except docs and test files) ------------------------------------- .../os-refresh-config/post-configure.d/99-refresh-completed | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[tripleo] os-apply-config 5.1.0 (newton)
by no-reply＠openstack.org 27 Apr '17

27 Apr '17

We joyfully announce the release of: os-apply-config 5.1.0: Config files from cloud metadata This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 5.0.0..5.1.0 --------------------------------------- 13e5cdc Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0