March 2018 - Release-announce - lists.openstack.org

[tripleo] os-net-config 8.4.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are ecstatic to announce the release of: os-net-config 8.4.0: OpenStack network configuration This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. 8.4.0 ^^^^^ New Features * Adding dpdk support in meallnox nics. Dpdk now fully suuported in mellanox nics. Changes in os-net-config 8.3.0..8.4.0 ------------------------------------- e699c68 Adding ethtool command after binding dpdk drivers in Mellanox nics 1939289 Adding the class and mac approach as dpdk-devargs in mellanox ConnectX-3 1599492 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_net_config/impl_ifcfg.py | 13 +++--- os_net_config/utils.py | 46 ++++++++++++++++++++++ .../dpdk-on-mellanox-nics-1d8fdb843a4e2b60.yaml | 5 +++ 5 files changed, 85 insertions(+), 6 deletions(-)

1 0

[tripleo] tripleo-ui 8.3.1 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are excited to announce the release of: tripleo-ui 8.3.1: tripleo-ui This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. 8.3.1 ^^^^^ Bug Fixes * Fixes bug 1750821 Available node counts in Role cards are properly calculated based on node - flavor - role tagging * Fixes bug 1750821 Use Nova profiles in node tagging form instead of role profiles Changes in tripleo-ui 8.3.0..8.3.1 ---------------------------------- c398082 Release 8.3.1 (queens) 74be88c Imported Translations from Zanata ace3245 Fix DeploymentInfo in DeploymentSuccess 6c9b13e Imported Translations from Zanata 16d2f61 Add nova to appConfig immutable record 37edb8b Remove unneeded icons on buttons 27558b3 Update deployment workflow tooltips e390928 Fix ModalPanel in Firefox 30c8c68 Properly calculate taggedCounts in nodesAssignment 77f9ba2 Use Nova profiles in node tagging form 57e3d96 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + config/tripleo_ui_config.js.sample | 1 + i18n/locales/de.json | 10 +- i18n/locales/en-GB.json | 10 +- i18n/locales/es.json | 34 +++-- i18n/locales/fr.json | 6 +- i18n/locales/id.json | 10 +- i18n/locales/ja.json | 12 +- i18n/locales/ko-KR.json | 10 +- i18n/locales/tr-TR.json | 10 +- i18n/locales/zh-CN.json | 78 +++++------ npm-shrinkwrap.json | 2 +- package.json | 2 +- .../node_counts_improved-def0d57d4f3d72ec.yaml | 6 + .../notes/nova-profiles-5457ad7c39d19426.yaml | 5 + .../deployment/DeploymentConfirmation.js | 1 - src/js/components/deployment/DeploymentDetail.js | 6 +- src/js/components/deployment/DeploymentSuccess.js | 6 +- src/js/components/deployment_plan/CurrentPlan.js | 29 ++-- src/js/components/deployment_plan/DeployStep.js | 1 - src/js/components/deployment_plan/HardwareStep.js | 1 - src/js/components/deployment_plan/RolesStep.js | 10 +- src/js/components/nodes/Nodes.js | 1 - src/js/components/nodes/NodesTableView.js | 4 - .../nodes/registerNodes/NodesFileUpload.js | 1 - .../nodes/registerNodes/RegisterNodesDialog.js | 1 - src/js/components/nodes/tag_nodes/TagNodesForm.js | 33 +---- src/js/components/nodes/tag_nodes/TagNodesModal.js | 32 ++--- src/js/components/plan/PlansList.js | 1 - src/js/components/roles/Roles.js | 2 + src/js/immutableRecords/appConfig.js | 1 + src/js/selectors/flavors.js | 9 +- src/js/selectors/nodes.js | 27 +--- src/js/selectors/nodesAssignment.js | 73 ++++++++-- src/less/ui/ModalPanel.less | 2 +- 37 files changed, 415 insertions(+), 229 deletions(-)

1 0

[tripleo] tripleo-common 8.6.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are pumped to announce the release of: tripleo-common 8.6.0: A common library for TripleO workflows. This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 8.6.0 ^^^^^ Bug Fixes * Fixes OpenDaylight healthcheck for TLS and regular deployments. Changes in tripleo-common 8.5.0..8.6.0 -------------------------------------- b49c192 Remove fence_action parameter from GenerateFencingParametersAction 4d7c530 Add openvswitch element back in 090c457 Increase the image size for security hardened images to 23G 3ea974f Remove the noop deploystep for upgrade converge step d49318f Activate new healthchecks 311db03 Wire up --skip-tags to the overcloud upgrade cli 10a028a Ensure ceph-ansible playbooks are run one at a time e4b8a73 Pass plan_name into get_config action 1624b9b Don't notify zaqar in publish_ui_logs_to_swift 8f93bfd Include active nodes when matching nodes by profile 0166826 Fixes OpenDaylight healthcheck 1930a75 Fix broken validations on stack update a70f6dc Updated from global requirements bcc1b37 Update UPPER_CONSTRAINTS_FILE for stable/queens 5c4cf77 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../tripleo_kolla_template_overrides.j2 | 111 ++++++++++++++++++++- healthcheck/aodh-api | 0 healthcheck/cinder-api | 0 healthcheck/collectd | 0 healthcheck/common.sh | 2 +- healthcheck/etcd | 0 healthcheck/gnocchi-api | 0 healthcheck/gnocchi-metricd | 0 healthcheck/gnocchi-statsd | 0 healthcheck/ironic-api | 0 healthcheck/ironic-pxe | 0 healthcheck/iscsid | 0 healthcheck/memcached | 0 healthcheck/mistral-api | 0 healthcheck/mistral-event-engine | 0 healthcheck/multipathd | 0 healthcheck/neutron-api | 0 healthcheck/nova-placement | 0 healthcheck/opendaylight-api | 13 ++- healthcheck/panko-api | 0 healthcheck/redis | 0 healthcheck/tacker | 0 image-yaml/overcloud-hardened-images.yaml | 3 +- image-yaml/overcloud-images.yaml | 1 + image-yaml/overcloud-odl-rhel7.yaml | 1 + image-yaml/overcloud-realtime-compute.yaml | 3 +- ...-opendaylight-healthcheck-f9bc1d2e067c4680.yaml | 4 + requirements.txt | 2 +- setup.cfg | 1 + tox.ini | 2 +- tripleo_common/actions/parameters.py | 8 +- tripleo_common/actions/plan.py | 39 ++++++++ tripleo_common/actions/validations.py | 9 -- workbooks/baremetal.yaml | 13 ++- workbooks/ceph-ansible.yaml | 1 + workbooks/deployment.yaml | 2 + workbooks/package_update.yaml | 10 ++ workbooks/plan_management.yaml | 28 ------ workbooks/validations.yaml | 35 ++++--- 41 files changed, 217 insertions(+), 75 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 74dd46a..63a22e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -28 +28 @@ python-keystoneclient>=3.8.0 # Apache-2.0 -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.3.0 # Apache-2.0

1 0

[tripleo] python-tripleoclient 9.2.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We joyfully announce the release of: python-tripleoclient 9.2.0: TripleO client This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Add a new option to the TripleO client in order to create an Undercloud backup. Usage, openstack undercloud backup [--add-path ADD_FILES_TO_BACKUP] Upgrade Notes ************* * This adds a --skip-tags parameter to the openstack overcloud upgrade run command openstack overcloud upgrade run --nodes compute-0 --skip-tags validation This is useful for skipping those step 0 tasks (tagged "validation") that check if services are running before allowing the upgrade to proceed, especially if you must re-run the upgrade after a failed attempt and some services cannot easily be started. The currently supported values for this are validation and pre-upgrade, and they can be combined as "--skip-tags 'validation,pre-upgrade'" if required. * The "`action`" parameter for overcloud fencing generation is now ignored. This is because recent versions of the underlying fencing agents now produce an error if the action parameter is used. Previously the use of the parameter was discouraged. * This adds the new --roles and --nodes parameters for the Queens major upgrade cli, specifically for the 'openstack overcloud upgrade run' which executes the ansible playbooks on overcloud nodes. openstack overcloud upgrade run --nodes compute-0 compute-1 openstack overcloud upgrade run --roles Controller Nodes for controlplane roles (the default 'Controller' role for example) need to be upgraded using the --roles parameter as these nodes must be upgraded together/in parallel. For non controlplane roles the --nodes parameter can be used to limit the upgrade run to one or more nodes as specified by the operator. Changes in python-tripleoclient 9.1.0..9.2.0 -------------------------------------------- be98d7f Deprecate the action parameter for fencing generation. 4f85c22 Wire up a --skip-tags parameter for overcloud upgrade run cli 08cce76 Remove nargs="+" from --nodes and --roles expect "comma, string" 2d2c04e Refactor some common code between overcloud_upgrade and update d644295 Add --roles and --nodes params to overcloud upgrade run cli dea52f7 Add Openstack Undercloud backup f97132e Update UPPER_CONSTRAINTS_FILE for stable/queens 087f717 Adds Overcloud Upgrade class and entry points for major upgrade e5c5e06 Clarify minor update CLI and split minor and major classes 0f505a0 Persist user-files/* for 'overcloud update' command e8e1484 Preserve roles_data and network_data 9001864 Use the generic preservation method for plan-environment.yaml 0111182 Keep original behavior of `overcloud deploy` f2bc69e Add generic method for preserving plan files, use for user-environment.yaml 6335326 Add generic methods to upload files to plan 7c4c394 Inherit UpdateCommand class from overcloud DeployCommand class 0270f3f Pass the queue_name to messaging_websocket function for update f31795f Get message from websocket instead from zaqarclient directly a187d18 Add major update implementation a911052 Update .gitreview for stable/queens 7ee5aa8 Updated from global requirements 59fe75b Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...ags-overcloud-upgrade-run-6aaf5925ffc02359.yaml | 16 + ...-fencing-action-parameter-6ca390e9ebf43796.yaml | 7 + ...enstack-undercloud-backup-b0c83afeb565c41d.yaml | 5 + ...-cli-add-roles-nodes.yaml-6ac6ecda01286006.yaml | 16 + requirements.txt | 5 +- setup.cfg | 8 +- tox.ini | 2 +- tripleoclient/constants.py | 13 + tripleoclient/plugin.py | 4 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 20 +- .../v1/overcloud_update/test_overcloud_update.py | 135 ++++++-- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 365 +++++++++++++++++++++ tripleoclient/utils.py | 32 ++ tripleoclient/v1/overcloud_deploy.py | 27 +- tripleoclient/v1/overcloud_parameters.py | 6 +- tripleoclient/v1/overcloud_update.py | 187 ++++++----- tripleoclient/v1/overcloud_upgrade.py | 220 +++++++++++++ tripleoclient/v1/undercloud_backup.py | 84 +++++ tripleoclient/workflows/base.py | 3 +- tripleoclient/workflows/package_update.py | 64 ++-- tripleoclient/workflows/plan_management.py | 125 +++++-- tripleoclient/workflows/undercloud_backup.py | 35 ++ 30 files changed, 1509 insertions(+), 181 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1e9ae49..e5daf2b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,2 +12,2 @@ python-heatclient>=1.10.0 # Apache-2.0 -python-ironicclient>=1.14.0 # Apache-2.0 -python-mistralclient>=3.1.0 # Apache-2.0 +python-ironicclient>=2.2.0 # Apache-2.0 +python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0 @@ -20 +19,0 @@ tripleo-common>=7.1.0 # Apache-2.0 -python-zaqarclient>=1.0.0 # Apache-2.0

1 0

[tripleo] paunch 2.4.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are overjoyed to announce the release of: paunch 2.4.0: Utility to launch and manage containers using YAML based configuration data This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through launchpad: https://bugs.launchpad.net/paunch For more details, please see below. Changes in paunch 2.3.0..2.4.0 ------------------------------ 5697cbe Use tenacity to retry image pulls e0ee9da Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + paunch/builder/compose1.py | 46 ++++++++++++++++++++++++++--------- requirements.txt | 1 + 4 files changed, 53 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bf4e10e..44a9f90 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,0 +8 @@ cliff>=2.6.0 # Apache-2.0 +tenacity>=3.2.1 # Apache-2.0

1 0

[tripleo] puppet-tripleo 8.3.1 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are overjoyed to announce the release of: puppet-tripleo 8.3.1: Puppet module for OpenStack TripleO This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 8.3.1 ^^^^^ New Features ************ * Add support via hiera keys like 'tripleo::haproxy::${name}::listen_options' to customize the options of an haproxy service stanza. For example passing the by setting the 'tripleo::haproxy::cinder::options' hiera key to a hash made composed of: 'timeout client': '90m' 'timeout server': '90m' Security Issues *************** * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Bug Fixes ********* * Fixes a bug where TLS certificates for ODL could not be generated correctly for deployment due to wrong owner/group applied to the files. Changes in puppet-tripleo 8.3.0..8.3.1 -------------------------------------- 933e386 Release 8.3.1 (queens) 4105d44 Replace perl with awk a364a9d Fixes incorrect ownership of ODL TLS cert/key be6b5ca Pin puppet-collectd ea2ce7d Allow custom per-service listen_options for haproxy 08792df Create vhost_socket_dir with proper permissions 61deef7 Extract local CA if it expired fb7a34b Disallow TLS v1.0 from HAProxy 4143238 firewall: don't reload IPtables after cleanup 3a443b3 Pin puppet-systemd 9454f38 Fix stack update with rabbitmq containers bce78ef Correct Neutron RabbitMQ User Param Mapping 2083903 Ensure ip_forward set before Docker 9868c03 Reload iptables instead of restart ed3285e Update UPPER_CONSTRAINTS_FILE for stable/queens 88a34af Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Puppetfile_extras | 6 +- manifests/certmonger/ca/local.pp | 2 +- manifests/certmonger/opendaylight.pp | 4 -- manifests/firewall.pp | 32 ++++----- manifests/haproxy.pp | 4 +- manifests/haproxy/endpoint.pp | 10 +-- manifests/haproxy/horizon_endpoint.pp | 10 +-- manifests/profile/base/docker.pp | 3 + manifests/profile/base/neutron.pp | 8 +-- manifests/profile/base/neutron/ovs.pp | 4 +- .../base/neutron/plugins/ovs/opendaylight.pp | 47 +++++++++++--- manifests/profile/base/rabbitmq.pp | 24 ++++--- metadata.json | 2 +- .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 ++ .../notes/fix-odl-tls-owner-77d2d71fe39ea3e7.yaml | 5 ++ ...r-service-options-haproxy-75f5f00cf5243ecb.yaml | 9 +++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 2 +- .../tripleo_certmonger_opendaylight_spec.rb | 4 -- ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 75 +++++++++++++++------- .../tripleo_profile_base_neutron_ovs_spec.rb | 14 ++-- spec/defines/tripleo_haproxy_endpoint_spec.rb | 13 ++-- spec/fixtures/hieradata/default.yaml | 8 +++ spec/fixtures/hieradata/step4.yaml | 2 - templates/logrotate/containers_logrotate.conf.erb | 2 +- tox.ini | 2 +- 26 files changed, 191 insertions(+), 106 deletions(-)

1 0

[nova] os_vif 1.9.1 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are psyched to announce the release of: os_vif 1.9.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/os-vif Download the package from: https://pypi.python.org/pypi/os_vif Please report issues through launchpad: https://bugs.launchpad.net/os-vif For more details, please see below. Changes in os_vif 1.9.0..1.9.1 ------------------------------ 3be52b9 ovs: do not delete port if already exists f3d7643 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + vif_plug_ovs/linux_net.py | 3 +-- 3 files changed, 3 insertions(+), 4 deletions(-)

1 0

[tripleo] instack-undercloud 5.3.8 (newton)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are gleeful to announce the release of: instack-undercloud 5.3.8: instack-undercloud This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.8 ^^^^^ Security Issues * Restrict memcached service to TCP and localhost network (CVE-2018-1000115). Changes in instack-undercloud 5.3.7..5.3.8 ------------------------------------------ 236d9f3 [CVE-2018-1000115] memcached: restrict to TCP & localhost 663dad2 Fix bootstrap NAT f544809 Zuul: Remove project name e5884cd Remove RH1 OVB jobs from configuration Diffstat (except docs and test files) ------------------------------------- elements/puppet-stack-config/puppet-stack-config.pp | 11 +++++++++++ .../puppet-stack-config/puppet-stack-config.yaml.template | 13 ++++++++++++- .../os-refresh-config/post-configure.d/98-undercloud-setup | 6 ------ .../notes/memcached_hardening-3d6984c9b6e5f3f3.yaml | 4 ++++ zuul.d/layout.yaml | 4 ---- 5 files changed, 27 insertions(+), 11 deletions(-)

1 0

[tripleo] os-net-config 5.2.4 (newton)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We contentedly announce the release of: os-net-config 5.2.4: OpenStack network configuration This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. Changes in os-net-config 5.2.3..5.2.4 ------------------------------------- 91e3ac4 ifcfg: don't restart ovs if --no-activate is specified Diffstat (except docs and test files) ------------------------------------- os_net_config/impl_ifcfg.py | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-)

1 0

[tripleo] puppet-tripleo 5.6.9 (newton)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are happy to announce the release of: puppet-tripleo 5.6.9 This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 5.6.9 ^^^^^ New Features ************ * Adds composable service interface for Neutron LBaaSv2 service. Security Issues *************** * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 5.6.8..5.6.9 -------------------------------------- 0a921f5 Release 5.6.9 (newton) b83cc42 Disallow TLS v1.0 from HAProxy 712df44 Extract local CA if it expired 26dfe7a firewall: don't reload IPtables after cleanup 419afe4 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone 64e40fa Composable Role for Neutron LBaaS 5618a27 Make exposing the keystone admin port optional Diffstat (except docs and test files) ------------------------------------- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++----------- manifests/haproxy.pp | 31 ++++++++++----- manifests/profile/base/ceph/rgw.pp | 9 +++-- manifests/profile/base/neutron/lbaas.pp | 44 ++++++++++++++++++++++ manifests/profile/pacemaker/neutron/lbaas.pp | 44 ++++++++++++++++++++++ metadata.json | 2 +- ...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml | 3 ++ .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 ++ 9 files changed, 136 insertions(+), 38 deletions(-)

1 0

[tripleo] tripleo-puppet-elements 7.0.7 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are delighted to announce the release of: tripleo-puppet-elements 7.0.7: Puppet building rules for OpenStack images. This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 7.0.6..7.0.7 ----------------------------------------------- 1ab2813 Create element to purge resolv.conf Diffstat (except docs and test files) ------------------------------------- elements/remove-resolvconf/README.md | 7 +++++++ elements/remove-resolvconf/cleanup.d/90-remove-resolvconf | 14 ++++++++++++++ 2 files changed, 21 insertions(+)

1 0

[tripleo] tripleo-heat-templates 5.3.11 (newton)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are delighted to announce the release of: tripleo-heat-templates 5.3.11: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.11 ^^^^^^ Security Issues *************** * Restrict memcached service to TCP and internal_api network (CVE-2018-1000115). Bug Fixes ********* * As documented in launchpad bug 1708680 the templates for manila with the "generic" back end do not yield a successful manila deployment even if they do not cause the overall overcloud deployment to fail, so we are dropping these faulty and unmaintained manila "generic" back end templates. * Fix Heat condition for RHEL registration yum update There were 2 problems with this condition making the rhel-registration.yaml template broken: "conditions" should be "condition" and the condition should refer to just a condition name defined in the "conditions:" section of the template. See https://bugs.launchpad.net/tripleo/+bug/1709916 Changes in tripleo-heat-templates 5.3.10..5.3.11 ------------------------------------------------ 067941d [CVE-2018-1000115] memcached: restrict to TCP & internal_api network 979143f Add reno for manila generic driver removal f2be057 Fix networking settings for ObjectStorage role pt 2 0b256bc Removes manila-generic-config from TripleO 2735cfc Fix Heat condition for RHEL registration yum update 1fb9f1a Zuul: Remove project name b7fa0d3 Optimize kernel neighbour table for large scale environments Diffstat (except docs and test files) ------------------------------------- capabilities-map.yaml | 8 -- environments/manila-generic-config.yaml | 25 ------ environments/network-isolation-no-tunneling.yaml | 9 ++- environments/network-isolation-v6.yaml | 6 +- environments/network-isolation.yaml | 12 +-- .../rhel-registration/rhel-registration.yaml | 9 ++- overcloud-resource-registry-puppet.j2.yaml | 1 - puppet/objectstorage-role.yaml | 12 +-- puppet/services/kernel.yaml | 29 +++++++ puppet/services/manila-backend-generic.yaml | 93 ---------------------- puppet/services/memcached.yaml | 31 +++++++- ...-generic-driver-templates-b33e8966c263a1fd.yaml | 7 ++ ...at-condition-for-rhel-reg-311a3dce76cc0ec1.yaml | 9 +++ .../memcached_hardening-2529734099da27f4.yaml | 4 + roles_data.yaml | 1 - zuul.d/layout.yaml | 2 - 16 files changed, 107 insertions(+), 151 deletions(-)

1 0

[tripleo] tripleo-heat-templates 7.0.11 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are glad to announce the release of: tripleo-heat-templates 7.0.11: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.11 ^^^^^^ Security Issues * Restrict memcached service to TCP and internal_api network (CVE-2018-1000115). Changes in tripleo-heat-templates 7.0.10..7.0.11 ------------------------------------------------ 187dba2 Fix gnocchi-upgrade Table <..> already exists errors 2b37b72 [CVE-2018-1000115] memcached: restrict to TCP & internal_api network d3cb3c3 Make the minor update for docker idempotent 387a87b Improve the minor update of the docker service 32627f8 Add --live-restore to the docker_options in puppet/services/docker.yaml 0d40487 [pike] Handle update path for swift log directories 65f25ea Allows Configuration of Additional of Lbaas and Neutron 737bbcb Set rgw_keystone_revocation_interval to 0 for ceph-ansible 96aa7fd Remove redundant action key on NetworkDeployment 09d0558 Zuul: Remove project name e7fba84 Update default value for derive params workflow inputs Diffstat (except docs and test files) ------------------------------------- environments/services/neutron-lbaasv2.yaml | 2 +- plan-samples/plan-environment-derived-params.yaml | 4 +- puppet/role.role.j2.yaml | 1 - puppet/services/docker.yaml | 45 +++++++++++++++++++++- puppet/services/memcached.yaml | 29 ++++++++++++++ puppet/services/neutron-api.yaml | 11 +++++- puppet/services/neutron-lbaas.yaml | 5 +++ .../memcached_hardening-2529734099da27f4.yaml | 4 ++ zuul.d/layout.yaml | 2 - 13 files changed, 115 insertions(+), 9 deletions(-)

1 0

[tripleo] tripleo-common 7.6.11 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are satisfied to announce the release of: tripleo-common 7.6.11: A common library for TripleO workflows. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. Changes in tripleo-common 7.6.10..7.6.11 ---------------------------------------- ce2db3d Increase the image size for security hardened images to 23G 8d38280 Include active nodes when matching nodes by profile 1bf6763 Removed incorrect user input comments ab8e88c Purge resolv.conf from the overcloud images 6bae05d Fix overcloud node delete after an upgrade 51f8515 OvsDpdkSocketMemory MTU Roundup in bytes 43aba5e Retry the check_default_nodes_count workflow for 2 minutes ead9d5d DPDK derive params network config validation 27d36df Derive Params failure message format change 3dce514 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- image-yaml/overcloud-hardened-images.yaml | 3 ++- image-yaml/overcloud-images.yaml | 1 + requirements.txt | 2 +- tripleo_common/actions/derive_params.py | 12 ++++++++++-- tripleo_common/actions/parameters.py | 16 +++++++++++++--- tripleo_common/actions/scale.py | 5 +++++ workbooks/baremetal.yaml | 13 ++++++++++++- workbooks/derive_params.yaml | 9 ++++++++- workbooks/derive_params_formulas.yaml | 2 +- workbooks/validations.yaml | 2 ++ 13 files changed, 77 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7f4cf5b..c017433 100644 --- a/requirements.txt +++ b/requirements.txt @@ -27 +27 @@ netaddr!=0.7.16,>=0.7.13 # BSD -python-zaqarclient>=1.0.0 # Apache-2.0 +python-zaqarclient>=1.0.0 # Apache-2.0

1 0

[tripleo] instack-undercloud 7.4.11 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are excited to announce the release of: instack-undercloud 7.4.11: instack-undercloud This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 7.4.11 ^^^^^^ Security Issues * Restrict memcached service to TCP and localhost network (CVE-2018-1000115). Changes in instack-undercloud 7.4.10..7.4.11 -------------------------------------------- c952542 Remove cloud-init and disable os-collect-config eff22b4 [CVE-2018-1000115] memcached: restrict to TCP & localhost 04540ab Increase size of Heat max_template_size Diffstat (except docs and test files) ------------------------------------- elements/puppet-stack-config/puppet-stack-config.pp | 9 +++++++++ elements/puppet-stack-config/puppet-stack-config.yaml.template | 6 +++++- releasenotes/notes/memcached_hardening-3d6984c9b6e5f3f3.yaml | 4 ++++ 3 files changed, 18 insertions(+), 1 deletion(-)

1 0

[tripleo] tripleo-heat-templates 6.2.12 (ocata)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We exuberantly announce the release of: tripleo-heat-templates 6.2.12: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.2.12 ^^^^^^ Security Issues * Restrict memcached service to TCP and internal_api network (CVE-2018-1000115). Changes in tripleo-heat-templates 6.2.11..6.2.12 ------------------------------------------------ d373df5 [CVE-2018-1000115] memcached: restrict to TCP & internal_api network c23eb80 Fix networking settings for ObjectStorage role pt 2 20ba83a Optimize kernel neighbour table for large scale environments Diffstat (except docs and test files) ------------------------------------- environments/network-isolation-no-tunneling.yaml | 12 ++++----- environments/network-isolation-v6.yaml | 6 ++--- environments/network-isolation.yaml | 12 ++++----- puppet/objectstorage-role.yaml | 12 ++++----- puppet/services/kernel.yaml | 29 ++++++++++++++++++++++ puppet/services/memcached.yaml | 29 ++++++++++++++++++++++ .../memcached_hardening-2529734099da27f4.yaml | 4 +++ 7 files changed, 83 insertions(+), 21 deletions(-)

1 0

[tripleo] puppet-tripleo 6.5.11 (ocata)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are chuffed to announce the release of: puppet-tripleo 6.5.11: Puppet module for OpenStack TripleO This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.11 ^^^^^^ New Features ************ * Adds composable service interface for Neutron LBaaSv2 service. Security Issues *************** * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 6.5.10..6.5.11 ---------------------------------------- 4cfd3bb Release 6.5.11 (ocata) fef73cc Extract local CA if it expired 30c7009 Disallow TLS v1.0 from HAProxy 3d3201f firewall: don't reload IPtables after cleanup 598c712 Pin puppet-systemd 14bdcfb Fix ipv6 horizon haproxy endpoint 8396e8b Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone 7f54e79 Composable Role for Neutron LBaaS 5ca2ec8 Use rabbitmq ipv6 flag Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++----------- manifests/haproxy.pp | 9 +++-- manifests/profile/base/ceph/rgw.pp | 22 ++++++----- manifests/profile/base/neutron/lbaas.pp | 44 ++++++++++++++++++++++ manifests/profile/base/rabbitmq.pp | 15 ++------ manifests/profile/pacemaker/neutron/lbaas.pp | 44 ++++++++++++++++++++++ metadata.json | 2 +- ...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml | 3 ++ .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 ++ spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 ++++---- 12 files changed, 142 insertions(+), 57 deletions(-)

1 0

[monasca] monasca-agent 2.2.3 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are jazzed to announce the release of: monasca-agent 2.2.3: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/monasca-agent/ For more details, please see below. Changes in monasca-agent 2.2.2..2.2.3 ------------------------------------- 11cf014 Fix libvirt plugin to handle FQDN of compute node a9a9574 Update supervisor version lower bound Diffstat (except docs and test files) ------------------------------------- monasca_agent/collector/checks_d/libvirt.py | 27 ++++++++++++++++++++++++++- requirements.txt | 2 +- 2 files changed, 27 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f26ad21..fa494e8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -22 +22 @@ six>=1.9.0 # MIT -supervisor>=3.1.3,<3.4 +supervisor>=3.3.3,<3.4 # BSD-derived

1 0

[tripleo] tripleo-validations 7.4.8 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are tickled pink to announce the release of: tripleo-validations 7.4.8: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo/+bugs?field.tag=validations For more details, please see below. Changes in tripleo-validations 7.4.7..7.4.8 ------------------------------------------- 4c7e5b1 Unit testing for ini Diffstat (except docs and test files) ------------------------------------- validations/library/ini.py | 97 ++++++++++++++++++-------- 2 files changed, 197 insertions(+), 27 deletions(-)

1 0

[tripleo] instack-undercloud 6.1.6 (ocata)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are gleeful to announce the release of: instack-undercloud 6.1.6: instack-undercloud This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.6 ^^^^^ Security Issues * Restrict memcached service to TCP and localhost network (CVE-2018-1000115). Changes in instack-undercloud 6.1.5..6.1.6 ------------------------------------------ 5a8cf39 [CVE-2018-1000115] memcached: restrict to TCP & localhost 256fecb Fix bootstrap NAT cb1091a Zuul: Remove project name Diffstat (except docs and test files) ------------------------------------- elements/puppet-stack-config/puppet-stack-config.pp | 11 +++++++++++ .../puppet-stack-config/puppet-stack-config.yaml.template | 13 ++++++++++++- .../os-refresh-config/post-configure.d/98-undercloud-setup | 5 ----- .../notes/memcached_hardening-3d6984c9b6e5f3f3.yaml | 4 ++++ zuul.d/layout.yaml | 2 -- 5 files changed, 27 insertions(+), 8 deletions(-)

1 0

[tripleo] puppet-tripleo 7.4.11 (pike)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are thrilled to announce the release of: puppet-tripleo 7.4.11: Puppet module for OpenStack TripleO This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.11 ^^^^^^ Security Issues * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 7.4.10..7.4.11 ---------------------------------------- c780d20 Release 7.4.11 (pike) a525507 Replace perl with awk ebfdb8a Extract local CA if it expired 2df761b Disallow TLS v1.0 from HAProxy c95c51c firewall: don't reload IPtables after cleanup 8777c29 Pin puppet-systemd 6e4aeda Fix stack update with rabbitmq containers e1bd129 Correct Neutron RabbitMQ User Param Mapping 7a1b8c7 Ensure ip_forward set before Docker 6f41f74 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone dcebe43 Use --live-restore when setting up the docker service Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++++-------------- manifests/haproxy.pp | 4 +-- manifests/profile/base/ceph/rgw.pp | 22 +++++++------- manifests/profile/base/docker.pp | 7 +++-- manifests/profile/base/neutron.pp | 8 ++--- manifests/profile/base/rabbitmq.pp | 24 +++++++++------ metadata.json | 2 +- .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 +++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 2 +- spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 +++++----- spec/classes/tripleo_profile_base_docker_spec.rb | 2 +- templates/logrotate/containers_logrotate.conf.erb | 2 +- 14 files changed, 70 insertions(+), 63 deletions(-)

1 0

[kolla] kolla 6.0.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are pleased to announce the release of: kolla 6.0.0: Kolla OpenStack Deployment This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/kolla/ For more details, please see below. 6.0.0 ^^^^^ Upgrade Notes * The neutron-vpnaas-agent has been loaded just inside of the existing l3 agent rather than requiring operators to run a completely different binary with a subclass of the existing L3 agent. Changes in kolla 5.0.0.0rc1..6.0.0 ---------------------------------- a25dce0 Bump OpenStack service version a5e51cb Run periodic jobs in periodic-stable pipeline in stable branch 9544ce9 Fix neutron dhcp agent dockerfile for non-deb/ubuntu d28f91b base: use ERP:kolla:queens repo for Debian c62c8da Migrate neutron-vpnaas-agent to neutron-l3-agent 2319d02 mariadb: create /var/run/mysqld under Debian distros 21a37ab centos/aarch64: use Ceph luminous 5e47657 Use centos-release-openstack-queens instead of delorean repo caed04b Need to install cryptsetup for cinder 2c73f1a Bump OpenStack service version 7272a92 Update UPPER_CONSTRAINTS_FILE for stable/queens 43555d3 Update .gitreview for stable/queens 2222355 Add cap mgr 'allow *' for ceph admin key b95d28b Use queens repo rather than pike for aarch64 and ppc64le 6e088f9 Use queens release for all OpenStack projects 2b41f2b syslinux package is only built for x86_64 93bb032 ppc64le is built in delorean-deps.repo 293a1d9 Add socat to base image 7b56299 Seem there are some wrong in infra ubuntu repo 603a733 Fix ceilometer deployment 0af4883 fix typo 6ed7c2b Replace Chinese single quotes to English single quotes c9557cb Remove heat-api-cloudwatch image 4ae7903 Added more information on building images ad80bfd Remove the unsupported 'insecure_registry' for >=docker 3.0.0 035e274 Remove nose dependency 0d4760e Use absolute path in install_pip macro 8f05833 openstack-base: provide Postgresql headers for source builds cb2266d Update "containers" to "images" b8d8c21 Add one more step to generate kolla-build.conf file b4f8db5 Zuul: Remove project name 8994629 Install collectd-utils 4157165 Enable kafka for rhel distro derivatives dbf7bdf Add Intel RDT plugin to collectd container add07bd Bump kafka version to 1.0.0 fd85895 Include building python-tempestconf from source in Tempest f7f51ed Updated from global requirements 98c1771 enable Grafana repo for Debian/amd64 c94b6fc Fix gnocchi plugin for grafana 502196d Add --wsrep-new-cluster option back in the bootstrap_db function d98a102 Support squash docker images layers a729d13 Consume RDO packaged mariadb version 5a2e5d7 Add the new user and group for OpenvSwitch 2.8 version d69cc8e Add ceph-nfs container ec0950b Add tripleo-ui image to skipped image list d3d8321 Add tooz all extra packages in openstack-base image 0f5c137 Updated from global requirements a5cac97 Check whether the source file exists before configuring the dashboard a047b9a Updated from global requirements 5abc87e Drop ceilometer client package requirement 1567a19 change python-libguestfs to python-guestfs for ubuntu 097b4da Remove /lib/udev in $PATH for nova-compute 898caa8 Make validate-all-dockerfile work with python3 ee127b9 Fluentd plugins rpm installation on CentOS 9342ed6 Add networking-sfc package to tacker images ca227b3 Add vitrage dashbord into horizon image 2be3e4e Apply Cinder rolling upgrade 6ff3a55 Fix MariaDB bootstrap for 10.1 version 17c7772 Break up .zuul.yaml to multiple files 9ebd3bc Remove ceilometer-collector image 70603d6 Bump to use UCA queens repo 3a174ee Add python-vitrageclient to openstack-base container 93ed438 Skip plugins install for keystone binary builds 4d08167 Updated from global requirements 77612f7 Add collectd in ci to collect system information 67da907 skydive: bump version to 0.15 c79fa76 Revert "debian: import key for download.ceph.com repository" 2e77b1d Revert "Fix deployment of ceph" cd67930 Remove the ceilometer api dockerfile b6162f9 mongodb: handle "user already exists" error on Debian ed29f87 Add sensu images ebfc1e7 rabbitmq: handle Debian and aarch64 properly 288289a debian: use stretch-backports by default 901584a Remove old unused script from swift-base 450f41a ironic-conductor: update driver dependencies for Queens 14e774b Add collectd-gnocchi plugin 14cda91 Revert "nova-libvirt: fix kvm permission issue" f0d2f83 Add collectd-ovs-stats and collectd-ovs-events 2ece1a5 Add heat dashboard to horizon image e24f02a Add Dockerfile for networking-ovn-metadata-agent 773074c Add vitrage-dbsync to extend_start.sh of vitrage-api image a0b60bf Fix deployment of ceph e6036f5 Use separate publish jobs in periodic pipeline 3364720 Validate Dockerfile indentation in pep8 479f26d Bump to ceph luminous 2faaf37 Add the missing murano package files 7192508 Creates directory /var/run/mysqld on aarch64 when building MariaDB docker image 7a170f8 neutron-server-opendaylight: make it buildable on non-x86 5feb113 Change more repo url to infra mirror 6fb2f38 Upgrade the rst convention of the Contributor Guide 53847f8 Updated from global requirements f7b453d Update swift for replication issues a10715b Correct horizon-plugin-tacker-dashboard url option 9846a27 Improve gate post jobs 24f1714 Fix Gnocchi support ceph 2d26e1d Remove yum-axelget from base image f7a3c7e base: use install_packages macro instead of calling APT d620705 nova-libvirt: fix build for Debian dd4fe19 Clean fluentd_plugins_install block e8a153c Add related symbolic link to pass DPDK compile ad4784b kubernetes: get it working on AArch64 as well 22e6130 Add designate-producer container eb30cf7 Modify the version of skydive to v0.14.0 6b6003b Use 3 hours timeout for gate jobs and install yum-axelget ce0555d Upgrade the rst convention of the Admin Guide cce4775 fix missyntax in README.rst d6b1cee Bump kafka version to 0.11.0.2 0e32e2d Include required packages for libvirt SASL auth on CentOs/RHEL b9ba824 Add elasticsearch output for rsyslog 0cda6c6 Typo in neutron-server/extend_start.sh 7002295 Remove move policy file in zaqar a6b66f0 Remove setting of version/release from releasenotes f17c796 Remove the installed packages in ceilometer-api container 65cd46e Install python-openstackclient in kolla-toolbox container cc646d1 Fix the Ubuntu Fluentd image d06fa08 Updated from global requirements 9cfd853 Remove duplicated statement of parameter choices of config options 725c14c Add ptp service docker image 5899b67 Add missing vmware libs b8f7693 Implement Almanach Docker images 9674e2d Fixup small bug with dockerhub publisher ee7094c Fix designate image build 0478080 Fix missing bgp library in neutron-server 63d32ba Add missing space to the description of work-dir parameter 18c1163 Make env variables accessible in template files e5ad31e Fixes the Deploy Registry link c506e62 Dockerhub publisher job f4731f7 Fix CentOS 7 fluentd image 6cd7161 Separate rsyslog image definition e43678b Install chrony in telegraf image fe5580f Make binary gates non-voting 4de0706 Cleanup APT lists after installing packages 58559e2 update kafka version. b0ef604 Add ansible sudo running for Debian family 8d024ff Switch to python-cffi for rpm based distros defa280 Allow passing extra parameters to keystone-manage in extend_start 9cea400 update "opendaylight" tar a71a61a Add ceph-common package to manila-share container 7aa9559 Zuul: add file extension to playbook path fc7758a implement deploy jobs in kolla 716af1d ironic-pxe: generate aarch64 bootfile grubaa64.efi 48df9f2 XenServer: Add packages for initial support b47e5e8 Add Apache packages to mistral-api container b35ecba Fix docstring of method run_build 7dadabf Add rsyslog image af90df1 Update links in README.rst f404d44 Create murano applications package for import f1b98a4 nova-libvirt: fix kvm permission issue 2c3671b Add lbaas dashboard in horizon ubuntu binary 8c1c03f Install libvirt-clients for nova-libvirt image b147ef9 Update Image Builder Links in Readme 297355f Add EC2-API to Kolla providing images list bdb26e2 fix local_registry url link error 824bc18 Replace mitaka to pike in index.rst b64198c Moving jobs to kolla repo cad0a1e Fix Horizon asset compression not happening on redeploy 2d34a63 Implement nova-mksproxy 3a0979c Revert "Fluentd: add fluent-plugin-concat:1.0.0 gem" 02ce804 Fix vitrage images 35d13c9 Modify the version of skydive to v0.13.0 7d59b2e Fluentd: enable forward logs over SSL with authentication e945011 Upgrade neutron-fwaas db during bootstrap 83d0fc4 Add certmonger container 5493fb6 Rearrange existing documentation to fit the new standard layout c79d236 Re-enable bifrost test_build 4407e31 Use upgrade rather than create_schema for wather database adc2603 Remove a Pike release note generated in bad place 983f89c kolla: do not mention arch specific images in --help 9b950f1 Add tripleo-ui image b159c6f cinder-api: handle Debian too 682bfd2 Set ES_SKIP_SET_KERNEL_PARAMETERS in elasticsearch image 288a17f base: use new Linaro repo f44366c Make plugins optional in opendaylight & ovn bedb106 add zun-wsproxy image e625b85 Support HiPE (High-Performance Erlang) in RabbitMQ image 7d7005e Add neutron-fwaas-dashboard into horizon image 88b9314 Improvement in Opendaylight doc b1b7492 Skip known failed kolla images beebbda Install multipath binary in nova-compute image 85c5baf Fix warning during tox -e genconfig d567475 Fix broken git links in README b4490bf base: add Linaro repository for Debian with some backports 3af9151 Add more collectd plugins to the container 47e794d Remove yum cache da9d2c3 Pin ansible to <2.4 to make ara work in gates bc52005 Fix dind and zun images and oraclelinux build 6681d7c Updated from global requirements 811c653 Fix docs for maintainer label/instruction 2c2bc48 Remove demos directory from contrib 9f568c2 Fix quickstart link in readme file ef375a1 Updated from global requirements 9748226 Create swapfile only on nodepool nodes e9929da Revert "nova-libvirt: fix kvm permission issue" 0d5a583 Updated from global requirements f7b7c2f Revert "Move to pike release for OpenStack services" fb69f12 Update reno for stable/pike 14df970 Add WSGI support for cloudkitty-api 7ba7fdd Enable mistral in test_build centos source 755c4ed Enable xtrace on start scripts 2b01b05 Use immutable journal path rather than device name Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/base.yaml | 56 ++ .zuul.d/centos.yaml | 59 ++ .zuul.d/oraclelinux.yaml | 58 ++ .zuul.d/ubuntu.yaml | 58 ++ README.rst | 32 +- contrib/demos/heat/README.rst | 15 - contrib/demos/heat/launch | 11 - contrib/demos/heat/steak-rg.yaml | 43 -- contrib/demos/heat/steak.yaml | 54 -- contrib/demos/magnum/redis | 5 - contrib/demos/magnum/redis-kube/README.rst | 197 ------- .../demos/magnum/redis-kube/redis-controller.yaml | 28 - contrib/demos/magnum/redis-kube/redis-master.yaml | 33 -- contrib/demos/magnum/redis-kube/redis-proxy.yaml | 14 - .../redis-kube/redis-sentinel-controller.yaml | 23 - .../magnum/redis-kube/redis-sentinel-service.yaml | 13 - contrib/demos/magnum/start | 40 -- contrib/demos/magnum/stop | 8 - contrib/template-override/ovs-dpdk.j2 | 5 + .../template-override/opendaylight-source.rst | 31 + .../ceilometer/ceilometer-collector/Dockerfile.j2 | 22 - .../ceilometer-notification/Dockerfile.j2 | 3 + .../ceilometer-notification/extend_start.sh | 22 + .../kube-controller-manager-amd64/Dockerfile.j2 | 32 - .../neutron-metadata-agent-ovn/Dockerfile.j2 | 39 ++ .../neutron-server-opendaylight/Dockerfile.j2 | 18 +- kolla/common/config.py | 277 +++++---- kolla/common/utils.py | 73 +++ kolla/image/build.py | 200 ++++++- kolla/template/methods.py | 1 + .../notes/add-ceph-nfs-b64cfba4775589a0.yaml | 4 + .../notes/add-certmonger-0bf3a37089c5c267.yaml | 4 + .../add-designate-producer-1420e7c4744e9b09.yaml | 3 + .../add-ptp-service-image-3fb4eadeeeda3aa0.yaml | 3 + releasenotes/notes/add-sensu-a763a155649e068d.yaml | 3 + .../add-tripleo-ui-image-6a17f9a31894d908.yaml | 3 + .../notes/almanach-images-f0a9a424ac3fe7cd.yaml | 3 + .../deprecate-ceilometer-api-71e5c7b01a3aad6c.yaml | 4 + .../notes/ironic_syslinux-70eac225d227dc2e.yaml | 4 + .../kubernetes-for-arm64-b149983c7e11ab60.yaml | 11 + ...etadata_agent_kolla_image-6f87ef59cf62cb8f.yaml | 6 + .../notes/non-x86-support-bce168d78db50202.yaml | 2 +- .../ppc64le_delorean_deps-cde2e1a5dc03699e.yaml | 5 + ...eilometer-collector-image-c5d1c4b6463b2ecd.yaml | 4 + ...emove-heat-cloudwatch-api-c71e9deafffdb3e7.yaml | 4 + ...move-neutron-vpnaas-agent-216810affb495ad0.yaml | 11 + releasenotes/notes/rsyslog-13d5798163953322.yaml | 4 + ...pport-docker-image-squash-8396c0de63085f5d.yaml | 5 + .../tacker-networking-sfc-138b9fedd09b8728.yaml | 4 + .../upgrade-ceph-luminous-415581032d25699e.yaml | 4 + releasenotes/source/conf.py | 11 +- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 + ...10.1.20-for-redhat-family-93df8bf63da25659.yaml | 4 + requirements.txt | 12 +- roles/collect-collectd/files/rrdtool_graph.py | 171 ++++++ roles/collect-collectd/tasks/main.yml | 68 +++ roles/collect-collectd/templates/graph.html.j2 | 16 + roles/collectd/defaults/main.yml | 14 + roles/collectd/handlers/main.yml | 5 + roles/collectd/tasks/main.yml | 46 ++ roles/collectd/templates/collectd.conf.j2 | 27 + setup.cfg | 2 +- specs/logging-with-heka.rst | 2 +- test-requirements.txt | 27 +- tools/deploy_aio.sh | 14 +- tools/gate_run.sh | 93 +-- tools/loc | 2 - tools/playbook-setup-nodes.yml | 41 -- .../notes/cinder-api-wsgi-b6124980d9ce9ae4.yaml | 5 - tools/setup_Debian.sh | 6 +- tools/setup_RedHat.sh | 4 +- tools/setup_gate.sh | 180 ------ tools/validate-all-dockerfiles.sh | 12 +- tools/validate-indentation.sh | 12 + tox.ini | 2 +- 214 files changed, 3980 insertions(+), 2708 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 620a00c..f631555 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=2.0.0 # Apache-2.0 -cryptography!=2.0,>=1.6 # BSD/Apache-2.0 +docker>=2.4.2 # Apache-2.0 +cryptography!=2.0,>=1.9 # BSD/Apache-2.0 @@ -10,3 +10,3 @@ GitPython>=1.0.1 # BSD License (3 clause) -six>=1.9.0 # MIT -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 +six>=1.10.0 # MIT +oslo.config>=5.1.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 @@ -14 +14 @@ setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2. -netaddr!=0.7.16,>=0.7.13 # BSD +netaddr>=0.7.18 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 7b1770b..a39fa59 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ bandit>=1.1.0 # Apache-2.0 -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -9,3 +9,3 @@ ddt>=1.0.1 # MIT -doc8 # Apache-2.0 -extras # MIT -graphviz!=0.5.0,>=0.4.0 # MIT License +doc8>=0.6.0 # Apache-2.0 +extras>=1.0.0 # MIT +graphviz!=0.5.0,>=0.4 # MIT License @@ -13,4 +13,4 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -openstackdocstheme>=1.16.0 # Apache-2.0 -oslo.log>=3.22.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 @@ -18 +18 @@ PrettyTable<0.8,>=0.7.1 # BSD -PyYAML>=3.10.0 # MIT +PyYAML>=3.10 # MIT @@ -20,2 +20 @@ python-barbicanclient!=4.5.0,!=4.5.1,>=4.0.0 # Apache-2.0 -python-ceilometerclient>=2.5.0 # Apache-2.0 -python-heatclient>=1.6.1 # Apache-2.0 +python-heatclient>=1.10.0 # Apache-2.0 @@ -23 +22 @@ python-neutronclient>=6.3.0 # Apache-2.0 -python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0 +python-openstackclient>=3.12.0 # Apache-2.0 @@ -26 +25 @@ pytz>=2013.6 # MIT -sphinx>=1.6.2 # BSD +sphinx!=1.6.6,>=1.6.2 # BSD @@ -29 +28 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +testtools>=2.2.0 # MIT

1 0

[kolla] kolla-ansible 6.0.0 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are pleased to announce the release of: kolla-ansible 6.0.0: Ansible Deployment of Kolla containers This release is part of the queens release series. Download the package from: https://tarballs.openstack.org/kolla-ansible/ For more details, please see below. Changes in kolla-ansible 5.0.0.0rc1..6.0.0 ------------------------------------------ 5bce6a4 Detect openstack_release in kolla-ansible deploy-bifrost abc5ab7 Use www-data user for bifrost nginx log directory f56081f Workaround for Bifrost being unable to write to /etc/hosts 741c98d Don't set mysql_service_name for bifrost 93bfc65 Security memcached: disable UDP f50fee3 Update .gitreview for stable/queens 84724b5 Fix skydive agent openvswitch configuration 37ef38b Fix the warning when reload the docker c887c93 Use rpc_transport_url in blazar 077c85b Replace kolla title with kolla-ansible 72b84b0 Use rpc_transport_url in vitrage.conf 2bbd539 Fix fernet deploy on gate 2a4ce0b Revert "Use fernet in gates" 1049dd3 Fix tacker vnffgd version 1e445ec Remove mariadb settings from freezer defaults/main.yml b8979c2 Support configuring grafana local admin username 78b8927 Fix murano authentication configuration options df0bf19 Use fernet in gates 7892826 Add permission to notify dns server from worker 722185a Don't check api_interface for 'deployment' group 3300444 Use bash instead of sh when calling deploy-tacker-demo-sfc d79b213 Deploy of keystone fails if api_interface names differ 9822bb5 Fix MySQL access denied error during upgrade 4c5e403 Allow normal user to create functions during databas sync in glance ebf0088 Fix sed command within external mariadb doc 3cd42d2 Modify grammatical error 3ff5ca1 Fix Ceph and Swift precheck failure 48b5696 Fix cluster mode for skydive 12e0c5a Use apt Ansible module instead of apt-get to update cache 59d33d3 Catch an error when pool creation failed for ceph b37a30a Add policy.yaml support for blazar role 4f98f08 Update task about selinux set. d741eed Make kollda_docker works with new released python docker 3.0 package 602de0f XenAPI: support ceilometer service 465bc9e Improve mariadb_recovery e30f549 Add the missing BASE_OS_DISTRO cead8ec Rework mariadb recovery tasks 99a199f Apply Cinder rolling upgrade 3ddf4d6 Skydive: Fix endpoint for keystone c1ad9a9 Add the missing permission setting for external-ceph a98295f Fix odl custom config 0914723 Adding ironic_dnsmasq_dhcp_range parameter to globals.yml d779303 Support policy.yaml file [part 2] 377ece5 Adding octavia required roles de54518 Support policy.yaml file [part 7] 3526976 Zuul: Remove project name 448a10d Add container state check in kolla_docker 3d9fd47 Support policy.yaml file [Final] e846d48 Support policy.yaml file [part 6] c8245ed XenAPI: fix two neutron configures 71a6611 XenAPI: support provider networks f52cebb Make ceph-nfs configurable e0b28aa Add details about SRIOV enablement to the networking guide 6bb27ac Add support for Neutron SRIOV agent container dafe39d Fix retry mechanism def1adb Fix the ssl issue for placement api when enabled ssl e0d37de Fixes ceph deploy gates a209e44 Add cpu_mode in vagrant/bootstrap.sh 35b91cf Disable jinja2 trim_blocks feature 843937b Updated from global requirements 8e3b794 Implement external MariaDB and pre-configured Databases support bf4a3c9 Use a random keepalived router id in CI environment e44ff53 Fix haproxy with memcached enabled b51294d Replace Chinese punctuation with English punctuation 88e5a44 Fixed misspelling in Kolla-ansible 3b828fc Fix broken link e800c1d Restart manila-share after changed in the external-ceph d1ddedd Fix the Prechecks failed while checking docker version b1f707d Add zun configuration about oslo.concurrency 6d49dbb Support policy.yaml file [part 8] 4f8eb89 Support policy.yaml file [part 5] 6b99f21 Support policy.yaml file [part 4] 35b165c Support policy.yaml file [part 3] 0d25e6f Only copy nfs_shares to cinder-volume groups b25e8c4 Fix tox -e docs failed a26357e Add a active-standby mode memcached in haproxy 0bc83d0 Implement ceph-nfs service 0df6e20 XenAPI: Support neutron configuration b2c7269 XenAPI: Support compute node bootstrap 42d89e5 Fix the storage group missing for external ceph bdc9d25 Move swift service conflicted check into precheck.yml 1961929 Add CephFS backend in Manila 72e4986 Add the missing ceph_mon host groups for gnocchi bcafbb0 Remove the unnecessary var defined d24a135 update cinder configurations in external-ceph-guide.rst 84473be Use local cirros image if available f0bc512 Updated from global requirements fe8efe2 update sphinx-doc links 742960a Quickstart rewrite ca558f4 Add cinder_enpoint_type option in trove b63ecd7 Update kolla_internal_fqdn to database_address since it defined in all.yml 790179e Updated from global requirements c38ab37 Remove the unnecessary gather facts 8a20489 Add a precheck to ensure nscd is not running 18bb9d1 Remove the duplicated task for tests/post.yml 474b15d Add os_region_name to Trove configuration files 5373f58 Update network_label_regex on trove templates c51bf13 add var haproxy_client_timeout and haproxy_server_timeout d0cac65 Check enable_cinder before deploy iscsi and tgtd ecb5b44 Remove the deprecated "giturl" option 98a4b44 Use bool filter with enable_ironic_pxe_uefi d11ba60 Implement ceph fs ad90805 kibana: allow use of server.basePath 2854671 Local connection to remote Grafana can fail f11042a Designate/Neutron communicaton failure a3f8c98 Use WSGIApplicationGroup %{GLOBAL} in mod_wsgi configuration ee67917 We actually require 'mode http' 307d324 dev mode: Add support for keystone 3886918 Change the docker daemon name in Debian 9 on Arm 8cb57f5 Ensure docker running before execute the destroy action 12cdd90 Enable vitrage dashboard 2f903bf Change debian mariadb backup tool to mariabackup 357791a Add v3 to tacker's keystone endpoints fdfefa9 Support policy.yaml file for Aodh dda24c4 Fix ironic inspector public endpoint 8533fc5 dev mode: Add support for magnum 8bd6dd9 Fix kolla gates 31f7732 Implement blazar ansible role dff7896 nova: set libvirt/cpu_mode on aarch64 to working value f00fa0a We install 'ca certs' not 'ubuntu ca certs' d8f6c76 fix the tempest failure for external ceph 750d6ff init-runonce: use UEFI on aarch64 54351eb init-runonce: use Cirros 0.4.0 images (aarch64 support got added) cc2e374 Prevent cinder conf from copy nfs_shares to unrelated nodes 2f25d43 Create volumes for Bifrost's persistent data bf8eb48 Mount kolla_logs volume in bifrost_deploy 5f2429b Ensure inspector uses internal ironic interface 68b2d48 Add ironic inspector to fluentd log collection 4f835ed Update READEME 7377846 mariadb: enable galera clustering by default b08dd6d Remove show_image_direct_url for external ceph 478e2cf Enable multinode scenarios in zuulv3 a3a0e92 Fix the cinder backup action failed when use external ceph 3dee904 Remove show_image_direct_url for ceph plugin 7da18e1 Bump ODL release version 19d4913 Workaround for Bifrost being unable to write to /etc/hosts e027d08 Deploy ceph mgr during upgrade e733a4b Fix wrong ceph mgr keyring name during creating 2b0a5ce mariadb/galera: handle Debian as well 953433c Remove duplicate configuration options on trove templates 74ddf10 Add the gnocchi_backend_storage configuration for external ceph docs e4c7b50 dev mode: Add support for kuryr 2137233 gitignore: Update path to vagrant environment dir c46ce38 change kuryr default driver option name d8a744e Allow empty compute group when ironic is in use 24e15d6 Add missing check.yml in redis role 026a3f7 Updated from global requirements 32d5534 Fix dhcp_agent configuration for vmware DVS f5fcc86 nova: add an option for no console 2d1a1b1 Add vitrage ansible role b2b5c07 It has to tell user how to set the internet ip f9acce1 Remove the deprecated ceilometer-collector group 1d36adc Make fluentd enabled configurable be45683 Fix failure handling in prechecks 5733297 Add the missing ceph-mgr for site.yml fed4c3c Add missing hostname to nodename in RabbitMQ for multinode deployment 859e88c Add tempurl to swift pipeline a102cd8 Make qemu use nova user on all distros f27d89a Increased mariadb and kibana timeouts fc593d5 missing permissions when running as non root 2a7dc48 skydive: add check task 414d1db Add rsync env for account & container replicators fa9d696 Update the job title of checking if Murano packages exists 4f1182a Enable heat dashboard dynamically e539dac ironic-pxe: support pxe uefi mode b1c15af Remove the unnecessary register.yml from upgrade.yml for Nova 8acb775 Implement ceph-mgr service 4e8e875 Add the missing hosts group for designate project b82f5cc Implement designate-producer service 962a886 Enable nfs driver volume snapshots by default 4829ed2 Move Cinder backend passwords to passwords.yml 392bf37 Add note about overwriting policy.json file 0c8a033 XenAPI: support XenAPI in nova configuration 6bf24be Removed -e Docker flag in ovsdpdk task b0b434d Optimize the tasks format for ovs-dpdk 2109e64 Fix deploy ceph failed when contoller hava no cluster_interface 0b931c9 Fix launch instance failed in trove ceb8d1c Add note about checking if all the hostnames are resolvable 669b312 Add content about cluster_network interface 445954d add domain_name for multi-regions bba80ac RFC: disable haproxy http mode 64a0c3a Updated from global requirements d832139 Use openstack_service_workers variable for gnocchi metricd workers 0482ae0 Added ovs-dpdkctl.sh to setup.cfg 2725372 Add horizon domain dropdown 5025974 Add a missing conditional check to the common config task 6f64549 Set bash as shell when executing mariadb recovery task 3245201 Update swift for replication issues 7ce5c46 Remove use_neutron from sahara config 28b50c2 Let OVS to connect to the individual IPs of each ODL node 9c66123 Don't change directory while running init-runonce 8d429fc Non-lvm iscsi backends should run iscsid on compute and storage nodes f12e724 Support configuration of custom fluentd filters 1618962 Do not check api_interface for deployment group fd1d3af Add support for hybrid messaging backends a80f47d Add a precheck to ensure Cinder backend enabled 5cf1ab4 Update URL in documents of zun and kuryr ff89ff4 Add dvr_no_external l3 dvr agent mode c2d150d Change listen for mdns 2dbfe74 Configure glance ceph during upgrade and genconfig 4cac847 Update swift templates for rsync_module fc9f84e Add missing hostnames to fluentd log messages 75d145a Doc: update swift-guide in kolla-ansible 0ac3afe Remove setting of version/release from releasenotes 874ca4d Updated from global requirements 419a2fc Fix the deprecated syntax in 01-rewrite.conf 11f9afb Pull image from dockerhub rather than tarballs.o.o site f7870e1 Implement Keystone zero-downtime upgrade 826658e Updated from global requirements 953861b Clean update endpoints task in keystone upgrade 7eb24fa automate ovs datapath configuration febd0b2 Optimise the "openstack_auth" for freezer c3b0116 User more accurate links f0c7e7f Enable vwmware dns-integration c0f2224 Dont use local connection for kibana post config 245cd42 Add configurable rabbitmq monitoring user d36f243 Fix iscsi and tgt containers deployment case 0c6879b fix shell error about tools/init-vpn 6d710f5 Collect chrony metrics with telegraf 71d72ed Murano application should contact rabbitmq by external FQDN e132ceb Use /bin/bash as executable in a task of the mariadb recovery play 33513db Allow object versioning by default 994c80c Fix the incorrect container_facts 9ff8902 Add the full name of PBR in its first usage df60b76 Fix ansible running issue on Debian 7343a26 Add support for custom telegraf configuration 6039ad4 Restart services after a change in the external ceph configuration fccc2d8 fix kolla giturl. 232ef11 Update the service_token_roles_required to True for watcher e4087f3 Remove the ceilometer api and move bootstrap into notification 5b266b5 add official default cpu allocation ratio. 2d3866c Specify 'become' for only necessary tasks (default roles) 2c5e91a Add become for fluentd create config directory task e237d7b Zuul: add file extension to playbook path bb74804 Disable glance file backend with external Ceph f2d49ca Fix the incorrect comment bac90b8 HyperV should not disable tunneling 50be172 Revert "Omit outward_rabbitmq from check for upgrade" e057296 Remove deprecated version dependencies in quickstart 082a488 Remove trailing whitespaces d1fe077 Fixing missing copy of iscsi container config files ff35857 Remove the unnecessary horizon_auth be3fe63 Revert "Remove show_multiple_locations in glance-api" 791bf3d Remove test variable for service_name in panko.conf file cdd1251 Optimize zuul v3 jobs 72dbef1 Telegraf should only output to influxdb when influxdb is enabled c8984ca Extract log level from syslog a142d48 Use internal_protocol variable to replace http cd06f94 Add the api works num for watcher 175c65e Remove check flat network type task in ironic pre-check.yml 4273733 Import the Murano applications libary as part of setup 2dcfec2 Add description for different interfaces baa9319 Move to zuul v3 in project jobs c1f76ee Update the manila shares link d3ba310 Associate text to link bba8c8a Add ovs flows to skydive 6af66bc Add the missing dnsmasq for ironic c3e9172 Add support for --skip-tags argument 5d162af Fixed the Build Container Images link in Quick Start 78c498e Using folder rather than file when map files into container 571e4fc Standardise log field naming e6ea579 Use root as the default node config user fe4f122 Gnocchi not covered by external Ceph c207520 post-deploy: honour --config-dir argument d55f278 Allow outward_rabbitmq with enable_outward_rabbitmq b36b246 Quickstart guide updated for better users experience 9db257b Move vmware password parameters to passwords.yml 39adda4 Add placement section to neutron.conf f73af43 Remove discard configuration 249a193 Add nova-compute-ironic to fluentd rewrite rules a055e02 Allow use of external ceph as cinder backup backend b667b64 Add OS_AUTH_URL to admin-openrc 9369ad1 Update container_proxy with configurable proxy settings 7c448f3 Add Barbican section in Nova and Cinder to use disk encryption 5637420 Fix deployment with public TLS enabled 04fd12b Restructured the doc of kolla-ansible 4cfe5f8 Fluentd: remove apache record_transformer filter 32631f4 Move nova-fake config into globals.yml a5f242e Add notes on docker version in quickstart and multinode guide 068a45e Implement neutron firewall v2 e828555 [HyperV] Add pull and precheck actions to nova-hyperv role c60293f Fix neutron invalid json file d118218 Fix name of nova-hyperv play in site.yml 15f0d7a Add missing NOTE marker to site.yml 239946a Fix the incorrect content fcbb75c fix wrong keystone_authtoken settings 618962c Update the "ocata" to "pike" for multinode.html 2e91cc1 Add service plugin segment to neutron 03354bc Add fluentd enable option 1ec5f6e set glance_api_version = 2 in cinder configure 6abbe42 git package added for better automated dev environment 8b54520 Update the description and links for vagrant 9fad395 Release tag updated in quickstart guide 108d60c Support HiPE (High-Performance Erlang) in RabbitMQ role 30f0dc1 common: fix ansible location 2f9b39f Fix typo in external ceph guide 4bce67c Fluentd: fix Mariadb mysqld_safe log not match 83bda89 Increase vm.max_map_count on elasticsearch nodes ef85df2 Copy certifications info octavia housekeeping and health manager container b7bfe84 Use octavia account instead of admin in octavia d75ff33 Updated from global requirements c18d05c Config my_ip to api_interface_address in cinder.conf f82b6b5 Wrong secure_proxy_ssl_header value in nova.conf.j2 template bd186a2 Horizon multidomain flag 197a264 Fix deploy-guide links de56340 Fix kolla-ansible genconfig for mariadb b649ae9 Fluentd: fix duplicate log level naming 6134de2 Optimize the yaml format for Barbican check.yml 26b2c2d Specify 'become' to necessary tasks (general roles) b3cb549 optimize the command format for murano start.yml 56693c3 Enable neutron fwaas dashboard dynamically ebd8d76 Fix rabbitmq tag not match in fluentd fa06dcd Fix ci gate failure 8fed5e2 Make the pg and pgp value configurable b745d0a `bind_host` and `bind_port` are coming under `api_setting c20cf01 filesystem_store_datadir should not be set when external Ceph is used 73225d2 Allow Cinder to use ZFSSA iSCSI volume service 0af7178 Fluentd: progname field is missing with Rsyslog 8298afe WSGI configuration missing directive 8c4862c Remove unused configuration items from tacker role 684194f Add support for vault passwords aa0209c Unify global syntax in baremetal role d4f8b41 Update designate to allow use of external bind9 dns servers. 498dab2 Fluentd: reduce CPU and I/O consumption 7769c65 Disable firewall while setup of dev env 8bff464 Remove deprecated oslo_messaging_rabbit options bc0f52c Add missing dot to help string in genpwd.py script fb46514 Support configuration of custom fluentd outputs a3dfdfc Simplify Openstack services configuration possibilities 58562fc Fix Pike nova.conf for HyperV 3668182 Remove too many inventory levels for iscsid 9b5a013 Updated from global requirements fee1538 Retrieve fluentd logs in gates 1ecd1af Cleanup sfc useless doc 0a1a6f2 Updated from global requirements 06befa3 Add missing document start "---" to yaml files 15e2e39 Remove validate-maintainer.sh script 1d1fbcf Fix barbican-api log filter in fluentd 6625e84 Fix "key_repository is world readable: /etc/keystone/fernet-keys/" warning e0e71dc Add /lib/modules as volume to openvswitch_db container 67cce63 Fix quickstart links cbd67eb Rearrange existing documentation to fit the new standard layout 0163162 Revert "Remove priviledged mode for nova-api" 582e523 Updated from global requirements 7e9fa0c Make outward_rabbit pre-checks idempotent 6155ea5 Update reno for stable/pike 0617874 Update and replace http with https for doc links in kolla-ansible 792ab71 Fluentd: Libvirt logs are missing e44a396 Perform bootstrap on Horizon upgrade d9a11a3 Fix typo in ironic prechecks 6186463 Fluentd "progname" field not always generated 5f2d321 Modify the conf in skydive 38a6d30 Fluentd: manage multiline log pattern 418d584 HyperV: fix FreeRDP console config 41d4d7b Clean Boolean condition check on exists check 42e1469 Create/delete kolla_keepalived_running only once 191e268 Fix warning on {failed|changed}_when statements 8e20a55 Fix warning during Mongodb bootstrap task 5b02908 Fix warning during Panko bootstrap task 2fca630 Add WSGI support for cloudkitty-api d43f88f Add doc note for glance-api container c27338b Retrieve ceph logs in gate eab91d4 Fluentd: rework and fix tail source config 5937724 Add ipc_mode=host for nova-compute conainer 937ccf7 Add warning interface names with dashes 0b893af Fix to use . to source script files 68933ab Add tacker dev mode dbe7b59 Add dev mode for glance 82fe7bc Added open-iscsi to default removals 3b7ab63 Fix prechecks fail with docker not in deployment host Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + .zuul.yaml | 157 +++++ README.rst | 10 +- ansible/bifrost.yml | 16 + ansible/group_vars/all.yml | 131 +++- ansible/inventory/all-in-one | 61 +- ansible/inventory/multinode | 64 +- ansible/library/kolla_docker.py | 28 +- ansible/post-deploy.yml | 3 +- ansible/roles/aodh/defaults/main.yml | 4 +- ansible/roles/aodh/handlers/main.yml | 16 +- ansible/roles/aodh/tasks/bootstrap.yml | 6 +- ansible/roles/aodh/tasks/config.yml | 56 +- ansible/roles/aodh/tasks/register.yml | 2 + ansible/roles/aodh/templates/aodh-api.json.j2 | 11 +- .../roles/aodh/templates/aodh-evaluator.json.j2 | 11 +- ansible/roles/aodh/templates/aodh-listener.json.j2 | 11 +- ansible/roles/aodh/templates/aodh-notifier.json.j2 | 11 +- ansible/roles/aodh/templates/aodh.conf.j2 | 10 +- ansible/roles/barbican/defaults/main.yml | 4 +- ansible/roles/barbican/handlers/main.yml | 12 +- ansible/roles/barbican/tasks/bootstrap.yml | 6 +- ansible/roles/barbican/tasks/check.yml | 41 +- ansible/roles/barbican/tasks/config.yml | 34 +- ansible/roles/barbican/tasks/register.yml | 3 + .../roles/barbican/templates/barbican-api.json.j2 | 11 +- .../templates/barbican-keystone-listener.json.j2 | 11 +- .../barbican/templates/barbican-worker.json.j2 | 11 +- ansible/roles/barbican/templates/barbican.conf.j2 | 10 +- ansible/roles/baremetal/defaults/main.yml | 13 +- ansible/roles/baremetal/tasks/install.yml | 34 +- ansible/roles/baremetal/tasks/post-install.yml | 36 +- ansible/roles/baremetal/tasks/pre-install.yml | 33 +- .../roles/baremetal/templates/docker_apt_repo.j2 | 6 +- .../roles/baremetal/templates/docker_defaults.j2 | 2 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- .../roles/baremetal/templates/docker_yum_repo.j2 | 4 +- ansible/roles/bifrost/tasks/bootstrap.yml | 27 + ansible/roles/bifrost/tasks/config.yml | 14 + ansible/roles/bifrost/tasks/start.yml | 6 + ansible/roles/bifrost/templates/bifrost.yml.j2 | 11 +- ansible/roles/blazar/defaults/main.yml | 63 ++ ansible/roles/blazar/handlers/main.yml | 46 ++ ansible/roles/blazar/meta/main.yml | 3 + ansible/roles/blazar/tasks/bootstrap.yml | 54 ++ ansible/roles/blazar/tasks/bootstrap_service.yml | 19 + ansible/roles/blazar/tasks/check.yml | 1 + ansible/roles/blazar/tasks/config.yml | 90 +++ ansible/roles/blazar/tasks/deploy.yml | 13 + ansible/roles/blazar/tasks/main.yml | 2 + ansible/roles/blazar/tasks/precheck.yml | 17 + ansible/roles/blazar/tasks/pull.yml | 10 + ansible/roles/blazar/tasks/reconfigure.yml | 2 + ansible/roles/blazar/tasks/register.yml | 36 ++ ansible/roles/blazar/tasks/upgrade.yml | 7 + ansible/roles/blazar/templates/blazar-api.json.j2 | 24 + .../roles/blazar/templates/blazar-manager.json.j2 | 24 + ansible/roles/blazar/templates/blazar.conf.j2 | 63 ++ ansible/roles/ceilometer/defaults/main.yml | 16 - ansible/roles/ceilometer/handlers/main.yml | 12 +- .../roles/ceilometer/tasks/bootstrap_service.yml | 8 +- ansible/roles/ceilometer/tasks/config.yml | 34 +- ansible/roles/ceilometer/tasks/register.yml | 2 + .../templates/ceilometer-central.json.j2 | 11 +- .../templates/ceilometer-compute.json.j2 | 11 +- .../templates/ceilometer-notification.json.j2 | 11 +- .../roles/ceilometer/templates/ceilometer.conf.j2 | 19 +- ansible/roles/ceph/defaults/main.yml | 26 + ansible/roles/ceph/tasks/bootstrap_osds.yml | 6 +- ansible/roles/ceph/tasks/config.yml | 27 +- ansible/roles/ceph/tasks/deploy.yml | 13 + ansible/roles/ceph/tasks/precheck.yml | 7 +- ansible/roles/ceph/tasks/pull.yml | 26 + ansible/roles/ceph/tasks/reconfigure.yml | 4 +- ansible/roles/ceph/tasks/start_mdss.yml | 58 ++ ansible/roles/ceph/tasks/start_mgrs.yml | 27 + ansible/roles/ceph/tasks/start_nfss.yml | 12 + ansible/roles/ceph/tasks/start_osds.yml | 2 +- ansible/roles/ceph/tasks/start_rgw_keystone.yml | 7 +- ansible/roles/ceph/tasks/upgrade.yml | 13 + ansible/roles/ceph/templates/ceph-mds.json.j2 | 17 + ansible/roles/ceph/templates/ceph-mgr.json.j2 | 17 + ansible/roles/ceph/templates/ceph-nfs.json.j2 | 24 + ansible/roles/ceph/templates/ganesha.conf.j2 | 27 + ansible/roles/ceph_pools.yml | 4 +- ansible/roles/certificates/tasks/generate.yml | 6 + ansible/roles/cinder/defaults/main.yml | 28 +- ansible/roles/cinder/handlers/main.yml | 16 +- ansible/roles/cinder/tasks/bootstrap.yml | 6 +- ansible/roles/cinder/tasks/ceph.yml | 4 + ansible/roles/cinder/tasks/check.yml | 2 + ansible/roles/cinder/tasks/config.yml | 37 +- ansible/roles/cinder/tasks/external_ceph.yml | 19 + ansible/roles/cinder/tasks/precheck.yml | 13 + ansible/roles/cinder/tasks/register.yml | 2 + ansible/roles/cinder/tasks/upgrade.yml | 30 + ansible/roles/cinder/templates/cinder-api.json.j2 | 11 +- .../roles/cinder/templates/cinder-backup.json.j2 | 11 +- .../cinder/templates/cinder-scheduler.json.j2 | 11 +- .../roles/cinder/templates/cinder-volume.json.j2 | 11 +- ansible/roles/cinder/templates/cinder.conf.j2 | 33 +- ansible/roles/cloudkitty/defaults/main.yml | 4 +- ansible/roles/cloudkitty/handlers/main.yml | 9 +- ansible/roles/cloudkitty/tasks/bootstrap.yml | 6 +- ansible/roles/cloudkitty/tasks/config.yml | 45 +- ansible/roles/cloudkitty/tasks/register.yml | 3 + .../cloudkitty/templates/cloudkitty-api.json.j2 | 19 +- .../templates/cloudkitty-processor.json.j2 | 11 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 12 +- .../cloudkitty/templates/wsgi-cloudkitty.conf.j2 | 20 + ansible/roles/common/defaults/main.yml | 6 + ansible/roles/common/handlers/main.yml | 7 +- ansible/roles/common/tasks/config.yml | 105 +++- ansible/roles/common/tasks/pull.yml | 2 + ansible/roles/common/templates/admin-openrc.sh.j2 | 1 + .../conf/filter/00-record_transformer.conf.j2 | 22 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 36 ++ .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 164 +++++ .../templates/conf/filter/01-rewrite.conf.j2 | 34 - .../templates/conf/format/apache_access.conf.j2 | 8 - .../templates/conf/format/wsgi_python.conf.j2 | 2 +- .../common/templates/conf/input/00-global.conf.j2 | 55 +- .../common/templates/conf/input/01-syslog.conf.j2 | 2 + .../common/templates/conf/input/02-mariadb.conf.j2 | 5 +- .../templates/conf/input/03-rabbitmq.conf.j2 | 3 +- .../templates/conf/input/04-openstack-wsgi.conf.j2 | 10 + .../common/templates/conf/input/05-libvirt.conf.j2 | 11 + .../common/templates/conf/output/00-local.conf.j2 | 4 +- .../common/templates/cron-logrotate-blazar.conf.j2 | 3 + .../templates/cron-logrotate-vitrage.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 2 + ansible/roles/common/templates/fluentd.json.j2 | 39 +- ansible/roles/congress/defaults/main.yml | 4 +- ansible/roles/congress/handlers/main.yml | 12 +- ansible/roles/congress/tasks/bootstrap.yml | 6 +- ansible/roles/congress/tasks/config.yml | 29 +- ansible/roles/congress/tasks/register.yml | 2 + .../roles/congress/templates/congress-api.json.j2 | 11 +- .../congress/templates/congress-datasource.json.j2 | 11 +- .../templates/congress-policy-engine.json.j2 | 11 +- ansible/roles/congress/templates/congress.conf.j2 | 10 +- ansible/roles/designate/defaults/main.yml | 21 +- ansible/roles/designate/handlers/main.yml | 43 +- ansible/roles/designate/tasks/backend_external.yml | 28 + ansible/roles/designate/tasks/bootstrap.yml | 6 +- ansible/roles/designate/tasks/config.yml | 40 +- ansible/roles/designate/tasks/deploy.yml | 1 + ansible/roles/designate/tasks/register.yml | 2 + .../designate/templates/designate-api.json.j2 | 11 +- .../designate/templates/designate-central.json.j2 | 11 +- .../designate/templates/designate-mdns.json.j2 | 11 +- .../designate/templates/designate-producer.json.j2 | 24 + .../designate/templates/designate-sink.json.j2 | 11 +- .../designate/templates/designate-worker.json.j2 | 11 +- .../roles/designate/templates/designate.conf.j2 | 24 +- ansible/roles/designate/templates/named.conf.j2 | 1 + ansible/roles/designate/templates/pools.yaml.j2 | 31 +- ansible/roles/destroy/tasks/cleanup_host.yml | 1 + ansible/roles/destroy/tasks/main.yml | 2 + .../destroy/tasks/validate_docker_execute.yml | 3 + ansible/roles/elasticsearch/tasks/config.yml | 9 + ansible/roles/freezer/defaults/main.yml | 10 +- ansible/roles/freezer/handlers/main.yml | 4 +- ansible/roles/freezer/tasks/config.yml | 34 +- ansible/roles/freezer/tasks/register.yml | 2 + .../roles/freezer/templates/freezer-api.conf.j2 | 5 + .../roles/freezer/templates/freezer-api.json.j2 | 11 +- .../freezer/templates/wsgi-freezer-api.conf.j2 | 2 +- ansible/roles/glance/defaults/main.yml | 14 +- ansible/roles/glance/handlers/main.yml | 8 +- ansible/roles/glance/tasks/bootstrap.yml | 6 +- ansible/roles/glance/tasks/bootstrap_service.yml | 34 + ansible/roles/glance/tasks/ceph.yml | 15 + ansible/roles/glance/tasks/check.yml | 2 + ansible/roles/glance/tasks/clone.yml | 6 + ansible/roles/glance/tasks/config.yml | 56 +- ansible/roles/glance/tasks/deploy.yml | 21 +- ansible/roles/glance/tasks/external_ceph.yml | 16 + ansible/roles/glance/tasks/register.yml | 2 + ansible/roles/glance/templates/glance-api.conf.j2 | 14 +- ansible/roles/glance/templates/glance-api.json.j2 | 11 +- .../roles/glance/templates/glance-registry.conf.j2 | 8 +- .../roles/glance/templates/glance-registry.json.j2 | 11 +- ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/handlers/main.yml | 12 +- ansible/roles/gnocchi/tasks/bootstrap.yml | 6 +- ansible/roles/gnocchi/tasks/ceph.yml | 4 +- ansible/roles/gnocchi/tasks/config.yml | 34 +- ansible/roles/gnocchi/tasks/external_ceph.yml | 21 + ansible/roles/gnocchi/tasks/register.yml | 2 + .../roles/gnocchi/templates/gnocchi-api.json.j2 | 11 +- .../gnocchi/templates/gnocchi-metricd.json.j2 | 11 +- .../roles/gnocchi/templates/gnocchi-statsd.json.j2 | 11 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 8 +- ansible/roles/grafana/defaults/main.yml | 5 +- ansible/roles/grafana/tasks/bootstrap.yml | 4 + ansible/roles/grafana/tasks/post_config.yml | 9 +- ansible/roles/grafana/templates/grafana.ini.j2 | 2 +- ansible/roles/haproxy/defaults/main.yml | 3 + ansible/roles/haproxy/handlers/main.yml | 3 + ansible/roles/haproxy/tasks/config.yml | 15 +- ansible/roles/haproxy/tasks/precheck.yml | 29 +- ansible/roles/haproxy/templates/haproxy.cfg.j2 | 94 ++- ansible/roles/heat/defaults/main.yml | 4 +- ansible/roles/heat/handlers/main.yml | 12 +- ansible/roles/heat/tasks/bootstrap.yml | 6 +- ansible/roles/heat/tasks/config.yml | 46 +- ansible/roles/heat/tasks/register.yml | 5 + ansible/roles/heat/templates/_deprecated.yaml | 1 + ansible/roles/heat/templates/heat-api-cfn.json.j2 | 11 +- ansible/roles/heat/templates/heat-api.json.j2 | 11 +- ansible/roles/heat/templates/heat-engine.json.j2 | 11 +- ansible/roles/heat/templates/heat.conf.j2 | 8 +- ansible/roles/horizon/defaults/main.yml | 12 +- ansible/roles/horizon/tasks/bootstrap.yml | 6 +- ansible/roles/horizon/tasks/config.yml | 87 +-- ansible/roles/horizon/tasks/policy_item.yml | 22 + ansible/roles/horizon/tasks/upgrade.yml | 5 +- ansible/roles/horizon/templates/horizon.conf.j2 | 1 + ansible/roles/horizon/templates/horizon.json.j2 | 9 +- ansible/roles/horizon/templates/local_settings.j2 | 18 +- ansible/roles/ironic/defaults/main.yml | 12 +- ansible/roles/ironic/tasks/bootstrap.yml | 8 +- ansible/roles/ironic/tasks/config.yml | 48 +- ansible/roles/ironic/tasks/precheck.yml | 9 +- ansible/roles/ironic/tasks/reconfigure.yml | 5 + ansible/roles/ironic/tasks/register.yml | 4 + ansible/roles/ironic/tasks/upgrade.yml | 5 + ansible/roles/ironic/templates/ironic-api.json.j2 | 11 +- .../ironic/templates/ironic-conductor.json.j2 | 11 +- .../ironic/templates/ironic-inspector.conf.j2 | 6 + .../ironic/templates/ironic-inspector.json.j2 | 13 +- ansible/roles/ironic/templates/ironic-pxe.json.j2 | 9 +- ansible/roles/ironic/templates/ironic.conf.j2 | 13 +- .../ironic/templates/ironic_pxe_uefi.default.j2 | 7 + ansible/roles/iscsi/tasks/config.yml | 4 +- ansible/roles/iscsi/tasks/start.yml | 3 +- ansible/roles/karbor/defaults/main.yml | 6 +- ansible/roles/karbor/tasks/bootstrap.yml | 6 +- ansible/roles/karbor/tasks/config.yml | 2 - ansible/roles/karbor/tasks/register.yml | 2 + ansible/roles/karbor/templates/karbor.conf.j2 | 6 +- ansible/roles/keystone/defaults/main.yml | 13 +- ansible/roles/keystone/handlers/main.yml | 79 ++- ansible/roles/keystone/tasks/bootstrap.yml | 6 +- ansible/roles/keystone/tasks/check.yml | 1 + ansible/roles/keystone/tasks/clone.yml | 6 + ansible/roles/keystone/tasks/config.yml | 60 +- ansible/roles/keystone/tasks/deploy.yml | 4 + ansible/roles/keystone/tasks/register.yml | 1 + ansible/roles/keystone/tasks/update_endpoints.yml | 21 - ansible/roles/keystone/tasks/upgrade.yml | 41 +- .../keystone/templates/keystone-fernet.json.j2 | 11 +- ansible/roles/keystone/templates/keystone.conf.j2 | 11 +- ansible/roles/keystone/templates/keystone.json.j2 | 16 +- ansible/roles/kibana/tasks/post_config.yml | 7 +- ansible/roles/kibana/templates/kibana.json.j2 | 5 + ansible/roles/kuryr/defaults/main.yml | 12 + ansible/roles/kuryr/handlers/main.yml | 4 +- ansible/roles/kuryr/tasks/clone.yml | 12 + ansible/roles/kuryr/tasks/config.yml | 34 +- ansible/roles/kuryr/tasks/deploy.yml | 4 + ansible/roles/kuryr/tasks/register.yml | 1 + ansible/roles/kuryr/templates/kuryr.conf.j2 | 9 +- ansible/roles/kuryr/templates/kuryr.json.j2 | 11 +- ansible/roles/magnum/defaults/main.yml | 17 +- ansible/roles/magnum/handlers/main.yml | 14 +- ansible/roles/magnum/tasks/bootstrap.yml | 6 +- ansible/roles/magnum/tasks/bootstrap_service.yml | 2 +- ansible/roles/magnum/tasks/clone.yml | 6 + ansible/roles/magnum/tasks/config.yml | 37 +- ansible/roles/magnum/tasks/deploy.yml | 3 + ansible/roles/magnum/tasks/register.yml | 5 + ansible/roles/magnum/templates/magnum-api.json.j2 | 11 +- .../magnum/templates/magnum-conductor.json.j2 | 11 +- ansible/roles/magnum/templates/magnum.conf.j2 | 8 +- ansible/roles/manila/defaults/main.yml | 21 +- ansible/roles/manila/handlers/main.yml | 16 +- ansible/roles/manila/tasks/bootstrap.yml | 6 +- ansible/roles/manila/tasks/ceph.yml | 26 + ansible/roles/manila/tasks/config.yml | 36 +- ansible/roles/manila/tasks/deploy.yml | 15 + ansible/roles/manila/tasks/external_ceph.yml | 41 ++ ansible/roles/manila/tasks/register.yml | 2 + ansible/roles/manila/templates/manila-api.json.j2 | 11 +- ansible/roles/manila/templates/manila-data.json.j2 | 11 +- .../manila/templates/manila-scheduler.json.j2 | 11 +- .../roles/manila/templates/manila-share.conf.j2 | 30 + .../roles/manila/templates/manila-share.json.j2 | 17 +- ansible/roles/manila/templates/manila.conf.j2 | 12 +- ansible/roles/mariadb/defaults/main.yml | 7 +- ansible/roles/mariadb/handlers/main.yml | 4 + ansible/roles/mariadb/tasks/config.yml | 12 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 166 ++++- ansible/roles/mariadb/templates/galera.cnf.j2 | 6 +- ansible/roles/memcached/tasks/config.yml | 9 +- .../roles/memcached/templates/memcached.json.j2 | 2 +- ansible/roles/mistral/defaults/main.yml | 4 +- ansible/roles/mistral/handlers/main.yml | 12 +- ansible/roles/mistral/tasks/bootstrap.yml | 6 +- ansible/roles/mistral/tasks/config.yml | 36 +- ansible/roles/mistral/tasks/register.yml | 2 + .../roles/mistral/templates/mistral-api.json.j2 | 11 +- .../roles/mistral/templates/mistral-engine.json.j2 | 11 +- .../mistral/templates/mistral-executor.json.j2 | 11 +- ansible/roles/mistral/templates/mistral.conf.j2 | 8 +- ansible/roles/mongodb/tasks/bootstrap_cluster.yml | 4 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/murano/tasks/bootstrap.yml | 6 +- ansible/roles/murano/tasks/config.yml | 33 +- ansible/roles/murano/tasks/register.yml | 2 + ansible/roles/murano/tasks/start.yml | 50 +- ansible/roles/murano/templates/murano-api.json.j2 | 11 +- .../roles/murano/templates/murano-engine.json.j2 | 11 +- ansible/roles/murano/templates/murano.conf.j2 | 26 +- ansible/roles/neutron/defaults/main.yml | 65 +- ansible/roles/neutron/handlers/main.yml | 51 ++ ansible/roles/neutron/tasks/bootstrap.yml | 6 +- .../roles/neutron/tasks/config-neutron-fake.yml | 21 +- ansible/roles/neutron/tasks/config.yml | 84 ++- ansible/roles/neutron/tasks/register.yml | 2 + ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 1 + .../roles/neutron/templates/fwaas_driver.ini.j2 | 6 + ansible/roles/neutron/templates/l3_agent.ini.j2 | 8 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 10 +- .../roles/neutron/templates/ml2_conf_xenapi.ini.j2 | 26 + .../neutron-openvswitch-agent-xenapi.json.j2 | 31 + .../roles/neutron/templates/neutron-server.json.j2 | 2 +- .../neutron/templates/neutron-sriov-agent.json.j2 | 36 ++ ansible/roles/neutron/templates/neutron.conf.j2 | 22 +- ansible/roles/neutron/templates/sriov_agent.ini.j2 | 13 + ansible/roles/nova-hyperv/defaults/main.yml | 1 - ansible/roles/nova-hyperv/tasks/precheck.yml | 1 + ansible/roles/nova-hyperv/tasks/pull.yml | 1 + .../templates/neutron_hyperv_agent.conf.j2 | 6 +- .../nova-hyperv/templates/nova_hyperv.conf.j2 | 11 +- ansible/roles/nova/defaults/main.yml | 15 +- ansible/roles/nova/handlers/main.yml | 42 +- ansible/roles/nova/tasks/bootstrap.yml | 10 +- ansible/roles/nova/tasks/bootstrap_xenapi.yml | 9 + ansible/roles/nova/tasks/ceph.yml | 16 + ansible/roles/nova/tasks/config-nova-fake.yml | 18 +- ansible/roles/nova/tasks/config.yml | 53 +- ansible/roles/nova/tasks/external_ceph.yml | 25 + ansible/roles/nova/tasks/precheck.yml | 9 +- ansible/roles/nova/tasks/register.yml | 3 + ansible/roles/nova/tasks/upgrade.yml | 2 - ansible/roles/nova/templates/nova-api.json.j2 | 11 +- .../nova/templates/nova-compute-ironic.json.j2 | 11 +- ansible/roles/nova/templates/nova-compute.json.j2 | 11 +- .../roles/nova/templates/nova-conductor.json.j2 | 11 +- .../roles/nova/templates/nova-consoleauth.json.j2 | 11 +- .../roles/nova/templates/nova-novncproxy.json.j2 | 11 +- .../roles/nova/templates/nova-scheduler.json.j2 | 11 +- .../nova/templates/nova-spicehtml5proxy.json.j2 | 11 +- ansible/roles/nova/templates/nova.conf.j2 | 40 +- ansible/roles/nova/templates/placement-api.json.j2 | 11 +- ansible/roles/nova/templates/qemu.conf.j2 | 8 - ansible/roles/octavia/defaults/main.yml | 11 +- ansible/roles/octavia/handlers/main.yml | 2 + ansible/roles/octavia/tasks/bootstrap.yml | 6 +- ansible/roles/octavia/tasks/config.yml | 38 +- ansible/roles/octavia/tasks/register.yml | 27 + .../templates/octavia-health-manager.json.j2 | 18 + .../octavia/templates/octavia-housekeeping.json.j2 | 18 + ansible/roles/octavia/templates/octavia.conf.j2 | 26 +- ansible/roles/opendaylight/tasks/config.yml | 6 +- ansible/roles/openvswitch/defaults/main.yml | 1 + ansible/roles/openvswitch/tasks/config.yml | 10 +- ansible/roles/openvswitch/templates/start-ovs.j2 | 3 +- ansible/roles/ovs-dpdk/defaults/main.yml | 5 +- ansible/roles/ovs-dpdk/handlers/main.yml | 6 +- ansible/roles/panko/defaults/main.yml | 6 +- ansible/roles/panko/handlers/main.yml | 4 +- ansible/roles/panko/tasks/bootstrap.yml | 7 +- ansible/roles/panko/tasks/config.yml | 36 +- ansible/roles/panko/tasks/register.yml | 2 + ansible/roles/panko/templates/panko-api.json.j2 | 11 +- ansible/roles/panko/templates/panko.conf.j2 | 8 +- ansible/roles/prechecks/tasks/database_checks.yml | 20 + ansible/roles/prechecks/tasks/main.yml | 6 + ansible/roles/prechecks/tasks/package_checks.yml | 1 + ansible/roles/prechecks/tasks/service_checks.yml | 23 +- ansible/roles/prechecks/tasks/user_checks.yml | 19 + ansible/roles/rabbitmq/tasks/config.yml | 9 +- ansible/roles/rabbitmq/tasks/precheck.yml | 5 + ansible/roles/rabbitmq/tasks/upgrade.yml | 14 +- .../roles/rabbitmq/templates/definitions.json.j2 | 6 +- .../roles/rabbitmq/templates/rabbitmq-env.conf.j2 | 2 +- .../roles/rabbitmq/templates/rabbitmq.config.j2 | 3 + ansible/roles/rally/defaults/main.yml | 4 +- ansible/roles/rally/handlers/main.yml | 4 +- ansible/roles/rally/tasks/bootstrap.yml | 6 +- ansible/roles/rally/tasks/config.yml | 32 +- ansible/roles/rally/templates/rally.conf.j2 | 5 + ansible/roles/rally/templates/rally.json.j2 | 11 +- ansible/roles/redis/tasks/check.yml | 6 + ansible/roles/sahara/defaults/main.yml | 4 +- ansible/roles/sahara/handlers/main.yml | 8 +- ansible/roles/sahara/tasks/bootstrap.yml | 6 +- ansible/roles/sahara/tasks/config.yml | 34 +- ansible/roles/sahara/tasks/register.yml | 2 + ansible/roles/sahara/templates/sahara-api.json.j2 | 11 +- .../roles/sahara/templates/sahara-engine.json.j2 | 11 +- ansible/roles/sahara/templates/sahara.conf.j2 | 10 +- ansible/roles/searchlight/handlers/main.yml | 8 +- ansible/roles/searchlight/tasks/config.yml | 33 +- ansible/roles/searchlight/tasks/register.yml | 2 + .../searchlight/templates/searchlight-api.json.j2 | 11 +- .../templates/searchlight-listener.json.j2 | 11 +- .../searchlight/templates/searchlight.conf.j2 | 11 +- ansible/roles/senlin/defaults/main.yml | 4 +- ansible/roles/senlin/handlers/main.yml | 8 +- ansible/roles/senlin/tasks/bootstrap.yml | 6 +- ansible/roles/senlin/tasks/config.yml | 34 +- ansible/roles/senlin/tasks/register.yml | 2 + ansible/roles/senlin/templates/senlin-api.json.j2 | 11 +- .../roles/senlin/templates/senlin-engine.json.j2 | 11 +- ansible/roles/senlin/templates/senlin.conf.j2 | 8 +- ansible/roles/skydive/defaults/main.yml | 2 +- ansible/roles/skydive/tasks/check.yml | 1 + ansible/roles/skydive/tasks/config.yml | 2 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 20 +- .../skydive/templates/skydive-analyzer.conf.j2 | 18 +- ansible/roles/solum/defaults/main.yml | 4 +- ansible/roles/solum/tasks/bootstrap.yml | 6 +- ansible/roles/solum/tasks/config.yml | 2 - ansible/roles/solum/tasks/register.yml | 3 + ansible/roles/solum/templates/solum.conf.j2 | 5 +- ansible/roles/swift/defaults/main.yml | 3 + ansible/roles/swift/tasks/check.yml | 4 +- ansible/roles/swift/tasks/register.yml | 3 + ansible/roles/swift/tasks/start.yml | 12 +- ansible/roles/swift/templates/account.conf.j2 | 8 +- ansible/roles/swift/templates/container.conf.j2 | 9 +- ansible/roles/swift/templates/object.conf.j2 | 8 +- ansible/roles/swift/templates/proxy-server.conf.j2 | 18 +- ansible/roles/swift/templates/rsyncd.conf.j2 | 9 +- ansible/roles/tacker/defaults/main.yml | 13 +- ansible/roles/tacker/handlers/main.yml | 8 +- ansible/roles/tacker/tasks/bootstrap.yml | 6 +- ansible/roles/tacker/tasks/clone.yml | 6 + ansible/roles/tacker/tasks/config.yml | 34 +- ansible/roles/tacker/tasks/deploy.yml | 6 + ansible/roles/tacker/tasks/register.yml | 2 + .../tacker/templates/tacker-conductor.json.j2 | 11 +- .../roles/tacker/templates/tacker-server.json.j2 | 11 +- ansible/roles/tacker/templates/tacker.conf.j2 | 44 +- ansible/roles/telegraf/tasks/config.yml | 6 +- ansible/roles/telegraf/templates/telegraf.conf.j2 | 8 +- ansible/roles/trove/defaults/main.yml | 4 +- ansible/roles/trove/tasks/bootstrap.yml | 6 +- ansible/roles/trove/tasks/config.yml | 2 - ansible/roles/trove/tasks/register.yml | 2 + .../roles/trove/templates/trove-conductor.conf.j2 | 7 +- .../trove/templates/trove-taskmanager.conf.j2 | 25 +- ansible/roles/trove/templates/trove.conf.j2 | 27 +- ansible/roles/vitrage/defaults/main.yml | 129 ++++ ansible/roles/vitrage/handlers/main.yml | 115 ++++ ansible/roles/vitrage/meta/main.yml | 3 + ansible/roles/vitrage/tasks/bootstrap.yml | 36 ++ ansible/roles/vitrage/tasks/bootstrap_service.yml | 19 + ansible/roles/vitrage/tasks/config.yml | 113 ++++ ansible/roles/vitrage/tasks/deploy.yml | 16 + ansible/roles/vitrage/tasks/main.yml | 2 + ansible/roles/vitrage/tasks/precheck.yml | 16 + ansible/roles/vitrage/tasks/pull.yml | 10 + ansible/roles/vitrage/tasks/reconfigure.yml | 2 + ansible/roles/vitrage/tasks/register.yml | 42 ++ ansible/roles/vitrage/tasks/upgrade.yml | 7 + .../roles/vitrage/templates/vitrage-api.json.j2 | 33 + .../vitrage/templates/vitrage-collector.json.j2 | 24 + .../roles/vitrage/templates/vitrage-graph.json.j2 | 24 + ansible/roles/vitrage/templates/vitrage-ml.json.j2 | 24 + .../vitrage/templates/vitrage-notifier.json.j2 | 24 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 77 +++ .../roles/vitrage/templates/wsgi-vitrage.conf.j2 | 25 + ansible/roles/watcher/defaults/main.yml | 4 +- ansible/roles/watcher/handlers/main.yml | 12 +- ansible/roles/watcher/tasks/bootstrap.yml | 6 +- ansible/roles/watcher/tasks/config.yml | 34 +- ansible/roles/watcher/tasks/register.yml | 2 + .../roles/watcher/templates/watcher-api.json.j2 | 11 +- .../watcher/templates/watcher-applier.json.j2 | 11 +- .../roles/watcher/templates/watcher-engine.json.j2 | 11 +- ansible/roles/watcher/templates/watcher.conf.j2 | 12 +- ansible/roles/zun/defaults/main.yml | 4 +- ansible/roles/zun/handlers/main.yml | 8 +- ansible/roles/zun/tasks/bootstrap.yml | 6 +- ansible/roles/zun/tasks/config.yml | 34 +- ansible/roles/zun/tasks/register.yml | 2 + ansible/roles/zun/templates/zun-api.json.j2 | 11 +- ansible/roles/zun/templates/zun-compute.json.j2 | 11 +- ansible/roles/zun/templates/zun.conf.j2 | 13 +- ansible/site.yml | 35 +- contrib/demos/heat/steak-rg.yaml | 1 + contrib/demos/heat/steak.yaml | 1 + .../demos/magnum/redis-kube/redis-controller.yaml | 2 +- contrib/demos/magnum/redis-kube/redis-master.yaml | 1 + contrib/demos/magnum/redis-kube/redis-proxy.yaml | 1 + .../redis-kube/redis-sentinel-controller.yaml | 1 + .../magnum/redis-kube/redis-sentinel-service.yaml | 1 + contrib/demos/tacker/deploy-tacker-demo-sfc | 14 +- contrib/dev/vagrant/bootstrap.sh | 15 +- deploy-guide/source/conf.py | 5 +- deploy-guide/source/multinode.rst | 2 +- deploy-guide/source/quickstart.rst | 3 +- .../kolla-for-openstack-development.rst | 76 +++ etc/kolla/globals.yml | 49 +- etc/kolla/passwords.yml | 30 + kolla_ansible/cmd/genpwd.py | 2 +- .../add-designate-bind-mdns-123e79587bb06072.yaml | 3 + .../add-designate-producer-b6e94153ff9bc45c.yaml | 3 + .../add-hybrid-messaging-2a5eb6aae5f2c2f6.yaml | 3 + ...add-manila-cephfs-backend-31437ae72d9adee2.yaml | 3 + ...d-neutron-dvr-no-external-0a8e0f2d967cf078.yaml | 6 + .../add-neutron-sriov-agent-131816aa1b32874b.yaml | 7 + .../add-state-for-selinux-3ab41a8d1c3b099e.yaml | 6 + .../notes/add-vitrage-6b8da2c81a68b01b.yaml | 3 + ...-as-cinder-volume-backend-cadd90a57fdc671b.yaml | 3 + .../notes/ansible-vault-ac969b70f840d465.yaml | 5 + .../bifrost-persistent-data-019294fe3326cf82.yaml | 5 + .../bifrost-persistent-logs-889cb58bf0f22c18.yaml | 6 + .../blazar-ansible-role-15887700e73b00f8.yaml | 3 + ...onitoring-user-for-rabbit-d869cddde8e8c5f3.yaml | 21 + .../notes/congress-broken-cbf8ca59d90a85cb.yaml | 1 + ...proxy-settings-for-magnum-0300dad7ee461865.yaml | 19 + ...ow-external-bind9-servers-c2c5dc31b0475cb7.yaml | 20 + ...able-nfs-volume-snapshots-a0347a31662b1109.yaml | 11 + .../external-mariadb-support-131440d3c984dd67.yaml | 8 + ...entd-custom-filter-config-26ee8801c7782b08.yaml | 13 + ...entd-custom-output-config-21f990cacbf3adb1.yaml | 10 + .../notes/glance-dev-mode-fefcff05286119f4.yaml | 4 + ...horizon_keystone_dropdown-6b9b4e5e9a64f979.yaml | 7 + ...izon_keystone_multidomain-c7a80d670f3654d8.yaml | 5 + .../notes/implement-ceph-mgr-d631d12ee30df5c8.yaml | 4 + .../notes/implement-ceph-nfs-ff8f9635c365923f.yaml | 5 + .../notes/implement-cephfs-a54396fd56fa1252.yaml | 4 + ...-minimal-downtime-upgrade-3c883b015d41bf18.yaml | 4 + ...one-zero-downtime-upgrade-8e11d080bcda0cf6.yaml | 3 + ...nspector-ironic-interface-6e98d6bc3d5713b8.yaml | 6 + ...inspector-public-endpoint-61e0adc37f882a64.yaml | 5 + ...tegrate-gnocchi-with-ceph-a6d5f81f4d8b0391.yaml | 2 +- .../move-storage-passwords-09b5afc839284321.yaml | 8 + ...rameters-to-passwords-yml-b6a375e0eb8cf27f.yaml | 5 + ...-global-config-generation-8f42cea604ba1cf2.yaml | 6 + releasenotes/notes/skip-tags-c0a4ac3900f33e7f.yaml | 5 + .../specify-task-become-84f83707f612bcf3.yaml | 6 + releasenotes/source/conf.py | 12 +- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 + requirements.txt | 14 +- setup.cfg | 3 +- specs/logging-with-heka.rst | 2 +- specs/template.rst | 2 +- test-requirements.txt | 22 +- tools/cleanup-images | 2 - tools/init-runonce | 35 +- tools/init-vpn | 11 +- tools/kolla-ansible | 32 +- tools/ovs-dpdkctl.sh | 6 +- tools/playbook-setup-nodes.yml | 18 + tools/setup_Debian.sh | 4 +- tools/setup_gate.sh | 124 +--- tools/validate-all-file.py | 4 + tools/validate-maintainer.sh | 13 - 657 files changed, 14555 insertions(+), 8458 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 23f28c4..4f880bb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -docker>=2.0.0 # Apache-2.0 +docker>=2.4.2 # Apache-2.0 @@ -7,3 +7,3 @@ Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) -six>=1.9.0 # MIT -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 +six>=1.10.0 # MIT +oslo.config>=5.1.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 @@ -11,3 +11,3 @@ setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2. -PyYAML>=3.10.0 # MIT -netaddr!=0.7.16,>=0.7.13 # BSD -cryptography!=2.0,>=1.6 # BSD/Apache-2.0 +PyYAML>=3.10 # MIT +netaddr>=0.7.18 # BSD +cryptography!=2.0,>=1.9 # BSD/Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 7199c20..d7d44b5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ bandit>=1.1.0 # Apache-2.0 -bashate>=0.2 # Apache-2.0 +bashate>=0.5.1 # Apache-2.0 @@ -8,2 +8,2 @@ coverage!=4.4,>=4.0 # Apache-2.0 -doc8 # Apache-2.0 -extras # MIT +doc8>=0.6.0 # Apache-2.0 +extras>=1.0.0 # MIT @@ -11,4 +11,4 @@ hacking>=0.10.0 -openstackdocstheme>=1.16.0 # Apache-2.0 -oslo.log>=3.22.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 @@ -16 +16 @@ PrettyTable<0.8,>=0.7.1 # BSD -PyYAML>=3.10.0 # MIT +PyYAML>=3.10 # MIT @@ -19 +19 @@ python-neutronclient>=6.3.0 # Apache-2.0 -python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0 +python-openstackclient>=3.12.0 # Apache-2.0 @@ -21 +21 @@ pytz>=2013.6 # MIT -sphinx>=1.6.2 # BSD +sphinx!=1.6.6,>=1.6.2 # BSD @@ -24 +24 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +testtools>=2.2.0 # MIT

1 0

[mistral] mistral 6.0.1 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are excited to announce the release of: mistral 6.0.1: Mistral Project This release is part of the queens release series. Download the package from: https://pypi.python.org/pypi/mistral For more details, please see below. Changes in mistral 6.0.0..6.0.1 ------------------------------- eb59183 Make sure not to swallow original exceptions on handling remote errors 655f856 Updated from global requirements 0cea32a Update UPPER_CONSTRAINTS_FILE for stable/queens 4c58a0f Update .gitreview for stable/queens 3889d5d Temporarily disable TripleO CI in stable/queens 6d47667 Explain better combinations of task names and engine commands in docs Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 12 ++- mistral/db/v2/sqlalchemy/models.py | 16 +-- mistral/exceptions.py | 5 - mistral/rpc/base.py | 26 +++-- .../test_execution_fields_size_limitation.py | 20 ++-- requirements.txt | 2 +- tox.ini | 2 +- 10 files changed, 150 insertions(+), 50 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7beb073..6e1fee9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -40 +40 @@ python-keystoneclient>=3.8.0 # Apache-2.0 -python-mistralclient>=3.1.0 # Apache-2.0 +python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0

1 0

[mistral] mistral-extra 6.0.1 (queens)
by no-reply＠openstack.org 26 Mar '18

26 Mar '18

We are jazzed to announce the release of: mistral-extra 6.0.1: Mistral OpenStack-specific bindings This release is part of the queens release series. Download the package from: https://pypi.python.org/pypi/mistral-extra For more details, please see below. Changes in mistral-extra 6.0.0..6.0.1 ------------------------------------- 8173e8d Update UPPER_CONSTRAINTS_FILE for stable/queens 9db6f2a Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0