September 2017 - Release-announce

[tripleo] os-refresh-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are chuffed to announce the release of: os-refresh-config 6.1.1: Refresh system configuration This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 6.1.0..6.1.1 ----------------------------------------- 41eabb3 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 148947f..edcdc78 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] os-net-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We exuberantly announce the release of: os-net-config 6.1.1: OpenStack network configuration This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. Changes in os-net-config 6.1.0..6.1.1 ------------------------------------- 914635c Fix --noop being ignored for dhclient execution 9e081bf Use os-net-config mapping file when interface in bond or bridge 621fa2a os_net_config should map nics that are down if nic is in mapping file Diffstat (except docs and test files) ------------------------------------- os_net_config/impl_ifcfg.py | 5 +- os_net_config/objects.py | 205 +++++++++++++++++------------------- os_net_config/utils.py | 30 ++++-- 5 files changed, 269 insertions(+), 125 deletions(-)

1 0

[tripleo] puppet-tripleo 6.5.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We high-spiritedly announce the release of: puppet-tripleo 6.5.1: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.1 ^^^^^ New Features ************ * Enable innodb_buffer_pool_size configuration for all MySQL databases. Known Issues ************ * Ignore failures if nf_conntrack_proto_sctp module failed to load. Since RHEL 7.4, nf_conntrack_proto_sctp module is compiled into the kernel instead of as a module as the sctp support. TripleO will still try to load the module to support RHEL 7.3, but in the future will remove the module management and rely on the kernel provided in newer versions of RHEL. Bug Fixes ********* * Allow VF configuration files to be written for non-existent PCI devices to allow updates while physical functions are currently in use by a guest. * In order to avoid service restarts, all services deploy their httpd configuration at the same time. Thus, httpd now starts in step 3 for the bootstrap nodes, and step 4 for all other nodes. Changes in puppet-tripleo 6.5.0..6.5.1 -------------------------------------- 406ef10 Prepare 6.5.1 (ocata) 121d318 Use Python to compute release notes version ff56fb5 Always start httpd at the same time 3d67149 Enable innodb_buffer_pool_size configuration fd9fbf0 Remove unnecessary references to neutron core plugin hiera f175a6e Fix selinux unit tests b7c0383 Only set the stonith property on the pacemaker_master node 788df58 Use correct manage_firewall hieradata ebebbd7 Retry ceilometer-upgrade d195972 Do not fail if PCI device is missing 2aac2e2 Addition of Nuage as mechanism driver for ML2 0566aae Ignore failures when loading nf_conntrack_proto_sctp kernel module Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/sriov_vf_config/numvfs.rb | 2 +- manifests/haproxy.pp | 4 +- manifests/haproxy/endpoint.pp | 2 +- manifests/host/sriov.pp | 2 +- manifests/profile/base/aodh/api.pp | 12 ++++- manifests/profile/base/ceilometer/api.pp | 13 ++++- manifests/profile/base/ceilometer/collector.pp | 12 ++++- manifests/profile/base/database/mysql.pp | 22 +++++--- manifests/profile/base/heat/api.pp | 15 +++++- manifests/profile/base/heat/api_cfn.pp | 15 +++++- manifests/profile/base/heat/api_cloudwatch.pp | 15 +++++- manifests/profile/base/horizon.pp | 15 +++++- manifests/profile/base/kernel.pp | 28 ++++++++-- manifests/profile/base/neutron/plugins/ml2.pp | 4 ++ .../profile/base/neutron/plugins/ml2/nuage.pp | 31 ++++++++++++ manifests/profile/base/neutron/sriov.pp | 14 ++--- manifests/profile/base/nova/placement.pp | 6 +-- manifests/profile/base/pacemaker.pp | 8 +-- manifests/profile/base/pacemaker_remote.pp | 7 --- manifests/profile/base/zaqar.pp | 15 ++++-- metadata.json | 2 +- ...missing-pci-dev-for-sriov-bbc29f62fcac10ff.yaml | 5 ++ .../innodb_buffer_pool_size-6fa946cf008a4606.yaml | 4 ++ .../nf_conntrack_proto_sctp-a64300a3fc7b4e55.yaml | 9 ++++ .../start-httpd-step3-and-4-2bd7be9e1429ef6d.yaml | 5 ++ releasenotes/source/conf.py | 4 +- spec/classes/tripleo_host_sriov_spec.rb | 4 +- spec/classes/tripleo_profile_base_aodh_api_spec.rb | 25 ++++++++- .../tripleo_profile_base_ceilometer_api_spec.rb | 27 +++++++++- spec/classes/tripleo_profile_base_horizon_spec.rb | 28 +++++++++- spec/classes/tripleo_profile_base_kernel_spec.rb | 59 ++++++++++++++++++++++ spec/classes/tripleo_selinux_spec.rb | 2 +- 32 files changed, 348 insertions(+), 68 deletions(-)

1 0

[karbor] karbor 0.5.1 (pike)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We eagerly announce the release of: karbor 0.5.1: Application Data Protection as a Service for OpenStack This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/karbor Download the package from: https://tarballs.openstack.org/karbor/ Please report issues through launchpad: https://bugs.launchpad.net/karbor For more details, please see below. Changes in karbor 0.5.0..0.5.1 ------------------------------ 78d1bed Fix checkpoints pagination error a307ebd Add project_id in neutron operations af72fdb Fix restore security group error 6b1ef02 Remove network dependency of server resource 3f35eaa Update UPPER_CONSTRAINTS_FILE for stable/pike 195ae6f Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + karbor/services/protection/bank_plugin.py | 14 ++++- .../protection/protectable_plugins/network.py | 59 ++++------------------ .../network/neutron_protection_plugin.py | 17 ++++--- .../plugins/test_network_protectable_plugin.py | 3 +- tox.ini | 2 +- 8 files changed, 50 insertions(+), 61 deletions(-)

1 0

[nova] osc-placement 0.1.0 (queens)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are tickled pink to announce the release of: osc-placement 0.1.0: OpenStackClient plugin for the Placement service This is the first release of osc-placement. This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/osc-placement Download the package from: https://pypi.python.org/pypi/osc-placement Please report issues through launchpad: http://bugs.launchpad.net/osc-placement For more details, please see below.

1 0

neutron-vpnaas 11.0.0 (pike)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We jubilantly announce the release of: neutron-vpnaas 11.0.0: OpenStack Networking VPN as a Service This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. 11.0.0 ^^^^^^ Prelude ******* Flavor framework integration. New Features ************ * Neutron VPNaaS is now integrated with Neutron flavor framework. Multiple VPN service providers might be configured at the same time. A flavor of service type VPN associated with a profile containing a driver is used to find the provider for a newly created VPN service. Changes in neutron-vpnaas 11.0.0.0rc1..11.0.0 --------------------------------------------- 60e4e71 tox_install.sh: Update for stable/pike 1af618a Update UPPER_CONSTRAINTS_FILE for stable/pike 1647779 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tools/tox_install.sh | 2 +- tox.ini | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-)

1 0

[tripleo] os-apply-config 6.1.1 (ocata)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We are overjoyed to announce the release of: os-apply-config 6.1.1: Config files from cloud metadata This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 6.1.0..6.1.1 --------------------------------------- 92f6066 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 66aa504..33f9008 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] instack-undercloud 6.1.1 (ocata)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We exuberantly announce the release of: instack-undercloud 6.1.1: instack-undercloud This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.1 ^^^^^ Upgrade Notes ************* * Undercloud upgrade will handle the change of ownership for ironic- dbsync.log to become ironic:ironic instead of root:root. Indeed, https://review.openstack.org/#/c/457478/ broke TripleO upgrades but it's to fix a valid issue in the puppet-ironic module. We still want to handle upgrades for existing deployments, that's why we manage the ownership change in instack-undercloud. * During upgrade make sure to remove any left over tuskar packages. This has been known to cause problems during the upgrade. See bug 1691744 for more information Bug Fixes ********* * The description of the "enable_cinder" option was fixed to not imply that booting from Cinder volumes is implemented in the undercloud. * The default "IRONIC_API_VERSION" in "stackrc" is now set to the same value as "OS_BAREMETAL_API_VERSION" for consistency between two clients. * Closes bug https://bugs.launchpad.net/tripleo/+bug/1691744 which is caused by left-over tuskar packages. This would only affect environments deployed with TripleoO since Kilo and for which tuskar has not explicitly been removed. Other Notes *********** * The default "OS_BAREMETAL_API_VERSION" in "stackrc" was bumped to 1.29, which corresponds to Ocata final and allows using all recent features without specifying and explicit version. Changes in instack-undercloud 6.1.0..6.1.1 ------------------------------------------ 02d2584 Remove isolated-build element b86f03e Fail-fast if the undercloud-passwords.conf file is missing 83efba6 Add ssl development headers to bindep dca0042 Add unit test and release note for tuskar package removal 6736ac1 Clarify the enable_cinder option description 7cbdf71 Remove any left-over tuskar packages on upgrade d286b7f Bump OS_BAREMETAL_API_VERSION to 1.29 bf96206 undercloud/upgrade: change ownership for ironic-dbsync.log Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 + elements/isolated-build/README.md | 13 ------ .../environment.d/no-source-repositories.bash | 1 - .../pre-install.d/00-disable-external-installs | 10 ----- .../os-apply-config/root/stackrc | 5 ++- instack_undercloud/undercloud.py | 50 +++++++++++++++++++--- ...enable-cinder-description-c53f8dc3a61e27c1.yaml | 5 +++ .../notes/ironic-api-version-d2b4ec1474918f12.yaml | 10 +++++ .../notes/ironic-dbsync-da5d047e92841f78.yaml | 9 ++++ ...-leftover-tuskar-packages-eeba9cf583a11ee3.yaml | 10 +++++ undercloud.conf.sample | 4 +- 12 files changed, 117 insertions(+), 41 deletions(-)

1 0

[tripleo] tripleo-heat-templates 5.3.1 (newton)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We enthusiastically announce the release of: tripleo-heat-templates 5.3.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.1 ^^^^^ New Features ************ * Add support for cold migration over ssh. This enables nova cold migration. This also switches to SSH as the default transport for live- migration. The tripleo-common mistral action that generates passwords supplies the MigrationSshKey parameter that enables this. * SSH host key exchange. The ssh host keys are collected from each host, combined, and written to /etc/ssh/ssh_known_hosts. Deprecation Notes ***************** * The TCP transport is no longer used for live-migration and the firewall port has been closed. Bug Fixes ********* * Remove ceilometer from swift proxy middleware pipeline. This generates a lot of events data and spams swift and gnocchi, inturn heavily impacting performance. This can also flood mongodb if you're using it for events. * Expose metric_processing_delay to tweak gnocchi performance. * Incorrect network used for Glance API service. * Fix support for RPMs to be installed via DeployArtifactURLs. LP#1697102 * Previously the RHEL registration script disabled the satellite repo after installing the necessary packages from it. This makes it awkward to update those packages later, so the repo will no longer be disabled. * The token flush cron job has been modified to run hourly instead of once a day. This is because this was causing issues with larger deployments, as the operation would take too long and sometimes even fail because of the transaction being so large. Note that this only affects people using the UUID token provider. * os-net-config is updated and executed before other packages to avoid premature restart of Open vSwitch. * Workaround systems getting registered as "localhost" during RHEL registration if they don't have a fqdn set by first rm'ing the /etc/rhsm/facts directory. When the directory does not exist, the katello-rshm-consumer which runs when installing the katello-ca- consumer will not set the hostname.override fact to "localhost". See https://bugs.launchpad.net/tripleo/+bug/1711435 Other Notes *********** * All nodes now enable "arp_accept" sysctl setting to help with honoring gratuitous ARP packets in their ARP tables. While sources of gratuitous ARP packets are diverse, this comes especially useful for Neutron floating IP addresses that roam between devices, and for which Neutron L3 agent sends gratuitous ARP packets to update all network nodes about IP address new locations. Changes in tripleo-heat-templates 5.3.0..5.3.1 ---------------------------------------------- a33d7dd Workaround for RHEL registration as "localhost" 8acff7b Don't disable satellite repo after registration 43745b2 Fix rpms being installed via DeployArtifactURLs 4692bb3 Adds SSH Banner text into sshd_config 3f1a336 [NEWTON-ONLY] Ignore Ceph healt warning states by default ce75b84 Adjust for new pcs output. 5b3c4df Ensure yum cache is ready before update 058b855 Modifying Cisco templates to support composable roles 89f90c0 Remove ceilometer from swift middleware pipeline 0edf1cf Revert "Use optimal (instead of default) tunables for Ceph on upgrade" a18621e Use optimal (instead of default) tunables for Ceph on upgrade 6299a16 Run token flush cron job hourly by default 02b69cc Fix conntrack proto sctp module ebd6c01 Adds check for existing yum process during the legacy minor update 36a16de Disable network validation in multinode jobs 3633d16 Change the project to service 7db285f cisco nexus: keep OVS on the Compute 64f789d [newton only] Ensure cinder services are cleanup during upgrade. a1e633c Ensure nova migration package is installed during minor update 864777f Fixes incorrect glance api network c443e22 Install openstack-nova-migration on computes during M->N upgrade 40cdd83 Add ignore_projects to filter gnocchi events 9f8ba2c Reconfigure interfaces before updating openvswitch c2d08c4 Expose events ttl for ceilometer 688d7fe Expose metric delay processing metric 016140b Cleanup cinder paste configuration for ssl. 0eb81a2 Addition of firewall rules for Nuage dc505ce Restrict nova migration ssh tunnel c7e1f28 Add migration SSH tunneling support 307735c Enable arp_accept for all interfaces 885bf88 SSH known_hosts config db34e8e Disable ComputeNeutron* for cisco-nexus-ucsm dd42fe9 [Newton only] - Manually touch ssl.conf before installing mod_ssl 3a9da61 Ensure AllNodesExtraConfig runs before AllNodesDeploySteps c325059 Touch /etc/httpd/conf.d/ssl.conf e903efc [M->N] Ensure mod_ssl is installed during upgrade. 3890eb1 [NEWTON-ONLY] Fix Ceph upgrade from Hammer to Jewel >= 10.2.4 Diffstat (except docs and test files) ------------------------------------- ci/common/all-nodes-validation-disabled.yaml | 43 +++ ci/environments/multinode.yaml | 3 + ci/environments/scenario001-multinode.yaml | 13 + ci/environments/scenario002-multinode.yaml | 3 + ci/environments/scenario003-multinode.yaml | 3 + ci/environments/scenario004-multinode.yaml | 3 + environments/neutron-ml2-cisco-nexus-ucsm.yaml | 1 + environments/neutron-nuage-config.yaml | 1 - environments/sshd-banner.yaml | 13 + .../rhel-registration/scripts/rhel-registration | 15 +- extraconfig/tasks/major_upgrade_block_storage.sh | 2 +- extraconfig/tasks/major_upgrade_ceph_mon.sh | 5 +- extraconfig/tasks/major_upgrade_ceph_storage.sh | 9 +- extraconfig/tasks/major_upgrade_compute.sh | 4 +- .../tasks/major_upgrade_controller_pacemaker_2.sh | 27 +- extraconfig/tasks/major_upgrade_object_storage.sh | 3 +- extraconfig/tasks/major_upgrade_pacemaker.yaml | 2 +- .../tasks/major_upgrade_pacemaker_migrations.sh | 10 +- extraconfig/tasks/pacemaker_common_functions.sh | 37 +++ extraconfig/tasks/ssh/host_public_key.yaml | 42 +++ extraconfig/tasks/ssh/known_hosts_config.yaml | 36 +++ extraconfig/tasks/yum_update.sh | 36 ++- network/service_net_map.j2.yaml | 3 +- overcloud-resource-registry-puppet.j2.yaml | 3 + overcloud.j2.yaml | 18 ++ puppet/blockstorage-role.yaml | 65 ++++ puppet/cephstorage-role.yaml | 65 ++++ puppet/compute-role.yaml | 65 ++++ puppet/controller-role.yaml | 65 ++++ puppet/deploy-artifacts.sh | 8 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 305 ++++++++++++++++++ .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 341 --------------------- puppet/objectstorage-role.yaml | 65 ++++ puppet/role.role.j2.yaml | 65 ++++ puppet/services/ceilometer-base.yaml | 5 + puppet/services/gnocchi-base.yaml | 5 + puppet/services/kernel.yaml | 4 +- puppet/services/keystone.yaml | 54 ++++ puppet/services/neutron-compute-plugin-nuage.yaml | 10 + puppet/services/neutron-plugin-nuage.yaml | 7 +- puppet/services/nova-compute.yaml | 13 + puppet/services/nova-libvirt.yaml | 1 - puppet/services/sshd.yaml | 34 ++ puppet/services/swift-proxy.yaml | 10 +- ...meter-from-swift-pipeline-6ee079b9c7b919f8.yaml | 6 + .../notes/enable-arp_accept-6296b0113bc56b10.yaml | 9 + ...e-metric-processing-delay-0c098d7ec0af0728.yaml | 3 + .../fix-glance-api-network-4f9d7c20475a5994.yaml | 3 + ...-rpm-deploy-artifact-urls-03d5694073ad159d.yaml | 4 + ...ve-satellite-repo-enabled-8b60528bd5450c7b.yaml | 6 + .../notes/migration_over_ssh-003e2a92f5f5374d.yaml | 14 + .../notes/ssh_known_hosts-287563590632d1aa.yaml | 4 + .../token-flush-twice-a-day-d4b00a2953a6b383.yaml | 7 + .../update-interfaces-first-f3c214ee9bdc1587.yaml | 4 + ...d-unset-fqdn-for-rhel-reg-be9c4620146096be.yaml | 8 + roles_data.yaml | 5 + 56 files changed, 1214 insertions(+), 381 deletions(-)

1 0

[tripleo] tripleo-common 5.4.3 (newton)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We are psyched to announce the release of: tripleo-common 5.4.3: A common library for TripleO workflows. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. 5.4.3 ^^^^^ New Features * Add MigrationSshKey to generated passwords. This ssh key-pair is used by nova cold-migration and libvirt live-migration unless TLS is enabled. * Add a new action argument, skip_deploy_identifier to DeployStackAction. The argument will disable setting a unique value for the DeployIdentifier parameter, which means the SoftwareDeployment resources in the templates will only be triggered if there is an actual change to their configuration. This argument can be used to avoid always applying configuration, such as during node scale out. This option should be used with Caution, and only if there is confidence that the software configuration does not need to be run, such as when scaling out certain roles. Changes in tripleo-common 5.4.2..5.4.3 -------------------------------------- de872dd Add skip_deploy_identifier 59eb2de Add element to regenerate dracut on the agent 935912d Ensure Swift Rings backup container and URLs c49755c Add MigrationSshKey to generated passwords 0781056 Handle re-created resources in StackUpdateManager Diffstat (except docs and test files) ------------------------------------- image-yaml/overcloud-images.yaml | 2 +- .../notes/migration_ssh_key-6e772d18d4d24485.yaml | 4 + .../skip-deploy-identifier-d5abb0d4e6af0ecd.yaml | 10 +++ requirements.txt | 1 + tripleo_common/_stack_update.py | 6 +- tripleo_common/actions/deployment.py | 7 +- tripleo_common/actions/validations.py | 23 +----- tripleo_common/constants.py | 1 + tripleo_common/utils/passwords.py | 19 ++++- tripleo_common/utils/validations.py | 9 +-- workbooks/deployment.yaml | 54 ++++---------- workbooks/plan_management.yaml | 15 ++++ workbooks/swift_rings_backup.yaml | 87 ++++++++++++++++++++++ 19 files changed, 265 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ae2d440..9899647 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19,0 +20 @@ passlib>=1.6 # BSD +paramiko>=2.0 # LGPLv2.1+

1 0