February 2019 - Release-announce - lists.openstack.org

tripleo-common 10.4.0 (stein)
by no-reply＠openstack.org 18 Feb '19

18 Feb '19

We are chuffed to announce the release of: tripleo-common 10.4.0: A common library for TripleO workflows. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * kolla_builder now supports Buildah and not just Docker. * Prevent upgrading a stack to a version of tripleo templates or environment that specifies neutron mechanism drivers that are incompatible with the existing stack. Upgrade can be forced by ForceNeutronDriverUpdate parameter which need to be set in deployment parameters. * Break out tripleo-admin creation to its own role called tripleo- create-admin. This removes some inline ansible from the mistral workflow, and allows this role to be reused in other contexts (such as undercloud install). Bug Fixes ********* * Preparing docker image containers with just OVN now also generates the corresponding Neutron Server OVN docker image. Changes in tripleo-common 10.3.0..10.4.0 ---------------------------------------- 25cfa45 image-serve: improve vhost config b047a20 Support for Buildah in kolla_builder 27496de Fix a trailing space 882d9a7 Add missing queue_name input parameter for listing validations f26a38a Role to install apache to serve container images 50a33f7 Handle uncompressed layers on image export c3c1f61 image_uplaoder: add retry to _layer_stream_registry 0fd1b98 Fixes OVN docker image prep with Neutron 0a745d5 Export images to be served by httpd 7204137 Append rabbitmq_packages_append contents b47cb43 Remove python-notario package from mistral-executor image 60529b7 Remove docker/podman from mistral-executor d879b2a Use ssh in generated inventory for undercloud c1341fc Authorize undercloud tripleo-admin user 008c1ef Make python uploader the default 32e1e45 rabbitmq-server workaround 000a1fd Revert "Remove placement healthcheck from overrides" a3b7185 Make the image pulling optional for tripleo-container-tag role. 32d357e Remove placement healthcheck from overrides 98fc548 Break out tripleo-admin creation to its own role ce3f463 Bump the Ceph container image to 3.2.1 c6905dd overcloud_containers.yaml.j2: remove unused *-base entry 2a6ef6a Use the yaml stdout_callback for better prepare logging b7c58aa Address python3 string issues with subprocess cd7657b remove percona-xtrabackup 0f1102b nova-less-deploy: updates for metalsmith >= 0.9.0 ff9f874 Revert "Add backwards compatible keystone healthcheck link" db144d8 Remove tomcrypt/tommath from template_overrides d723410 Remove crane image from prepare list 5b67728 Add backwards compatible keystone healthcheck link b46b976 Override fluentd plugin block c087140 nova-less-deploy: follow-up to deploy_instances 6717440 [Configuration] Remove testrepository. 3006b53 Make transfer and persist modules, trailing slash insensitive. de7df30 New role to create/update/delete hiera value during upgrade. dc0b4dd Fix stack_status YAQL expression for non existent stacks 27d7c6b placement: Add missing healthcheck for extracted service 54c448f Check for physical_resource_id before getting deployments 93113e7 Publish a better failure message for Update Ansible 379f886 Prevent upgrading to incompatible mechanism driver c79ff5e Remove deployments.yaml from role directory 75af95b Ansible role to transfer data from an overcloud node to another 6bcdb4f Ansible role for data presistence and restoration b8afd8d Publish error for package_update workflow 7aeb523 placement: Add missing PlacementPassword to constants 4e34cb5 Fix keystone healthcheck 1ca666b nova-less-deploy: deploy_instances and undeploy_instances workflows 7f62bb0 placement: Use the less generic PlacementApi service name 1770925 Don't fail when undeploying and the stack doesn't exist 0027754 Change openstack-dev to openstack-discuss 841972f Use the tripleo-standalone-scenarios-full template fa00f9c Add scenario002-standalone and 4 to gates as they are voting 222bc48 Replace tripleo-scenario003-multinode with scenario003-standalone deb6424 Run scenario009 on tripleo-deploy-openshift changes 3c34ead Add nova serialproxy image 678c424 Install ipmitool in the mistral_executor image dad4050 [Configuration] Update min tox version. 675f153 Derives NUMA aware vSwitches parameters 0f5247a fix tox python3 overrides 6d47c2e don't install "yum-plugin-priorities" as it part of DNF 38e6034 Use Timesync service instead of Ntp Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 - .../container_image_prepare_defaults.yaml | 2 +- container-images/overcloud_containers.yaml | 14 +- container-images/overcloud_containers.yaml.j2 | 31 +- .../tripleo_kolla_template_overrides.j2 | 34 +- healthcheck/keystone | 6 + healthcheck/keystone-admin | 6 - healthcheck/keystone-public | 6 - healthcheck/placement-api | 6 + image-yaml/overcloud-images-fedora.yaml | 4 - .../notes/buildah_build-727eb0f35f819731.yaml | 4 + .../notes/check_ovs_upgrade-99cecd6b7bfdcf83.yaml | 8 + ...ge-prepare-neutron-server-abb60292341b5782.yaml | 5 + .../tripleo-create-admin-0ce59d13ce2c07f6.yaml | 6 + requirements.txt | 2 + roles/tripleo-container-tag/README.md | 1 + roles/tripleo-container-tag/defaults/main.yaml | 1 + roles/tripleo-container-tag/tasks/main.yaml | 1 + roles/tripleo-create-admin/README.md | 48 ++ roles/tripleo-create-admin/defaults/main.yml | 1 + .../tripleo-create-admin/tasks/authorize_user.yml | 5 + roles/tripleo-create-admin/tasks/create_user.yml | 23 + roles/tripleo-create-admin/tasks/main.yml | 2 + roles/tripleo-image-serve/README.md | 34 ++ roles/tripleo-image-serve/defaults/main.yml | 5 + roles/tripleo-image-serve/handlers/main.yml | 16 + roles/tripleo-image-serve/tasks/main.yml | 40 ++ .../templates/image-serve.conf.j2 | 28 ++ roles/tripleo-persist/README.md | 51 +++ roles/tripleo-persist/defaults/main.yml | 2 + roles/tripleo-persist/tasks/persist.yml | 37 ++ roles/tripleo-persist/tasks/restore.yml | 14 + roles/tripleo-persist/test-playbook.yml | 20 + roles/tripleo-transfer/README.md | 57 +++ roles/tripleo-transfer/defaults/main.yml | 5 + roles/tripleo-transfer/tasks/main.yml | 77 ++++ roles/tripleo-transfer/test-playbook.yml | 11 + roles/tripleo-upgrade-hiera/README.md | 39 ++ roles/tripleo-upgrade-hiera/defaults/main.yml | 1 + .../tasks/create-tripleo-upgrade-file.yml | 35 ++ roles/tripleo-upgrade-hiera/tasks/remove-all.yml | 6 + roles/tripleo-upgrade-hiera/tasks/remove.yml | 16 + roles/tripleo-upgrade-hiera/tasks/set.yml | 15 + roles/tripleo-upgrade-hiera/test-playbook.yml | 39 ++ setup.cfg | 7 +- tox.ini | 3 +- tripleo_common/actions/baremetal_deploy.py | 341 ++++++++++++++ tripleo_common/actions/deployment.py | 15 + tripleo_common/actions/derive_params.py | 6 +- tripleo_common/constants.py | 6 + tripleo_common/image/builder/__init__.py | 0 tripleo_common/image/builder/base.py | 25 ++ tripleo_common/image/builder/buildah.py | 172 +++++++ tripleo_common/image/image_export.py | 170 +++++++ tripleo_common/image/image_uploader.py | 85 +++- tripleo_common/image/kolla_builder.py | 24 +- tripleo_common/inventory.py | 2 +- tripleo_common/update.py | 65 +++ tripleo_common/utils/config.py | 27 +- tripleo_common/utils/keystone.py | 40 +- tripleo_common/utils/process.py | 58 +++ workbooks/access.yaml | 80 ++-- workbooks/baremetal_deploy.yaml | 190 ++++++++ workbooks/deployment.yaml | 13 +- workbooks/derive_params.yaml | 1 + workbooks/derive_params_formulas.yaml | 55 ++- workbooks/package_update.yaml | 21 +- workbooks/stack.yaml | 2 +- workbooks/validations.yaml | 4 +- zuul.d/layout.yaml | 20 +- 85 files changed, 3126 insertions(+), 226 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c129373..6628c2f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -30,0 +31,2 @@ futures>=3.0.0;python_version=='2.7' or python_version=='2.6' # BSD +metalsmith>=0.9.0 # Apache-2.0 +jsonschema<3.0.0,>=2.6.0 # MIT

1 0

ansible-role-redhat-subscription 1.0.2
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are tickled pink to announce the release of: ansible-role-redhat-subscription 1.0.2: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.0.1..1.0.2 -------------------------------------------------------- d3091fd Fix lint and zuul: add publish-to-pypi 1b3e473 Set up repos when using portal with activation key dba48a0 sat6: pull & deploy katello certs 6eae85c Make it more explicit that rhsm_activation_key and rhsm_repos are exclusive 9db2533 Fix table in README 5c5f7e2 add support for unregistration 079c041 Fix pem file name 3346d38 Fix README.md rst check warnings. b6cc4a5 Add resiliency to subscription management role d929bd7 Correct rhsm_force_registration var name in defaults. f2385c2 Configure Satellite using Ansible instead of a script a0c7cff Fix defaults when activation key is used, add options 126e1b1 fix tox python3 overrides 346acae Remove release-openstack-server 51fd143 fix tox python3 overrides 8797a90 Add support for RHSM Pools f42c8a9 Use release-openstack-server job-template c076cc9 Zuul: add missing jobs for release Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + README.md | 60 +++++++++++---- defaults/main.yml | 10 +-- library/rhsm_repository.py | 183 ++++++++++++++++++++++++++------------------- meta/main.yml | 2 +- tasks/main.yml | 17 ++++- tasks/portal.yml | 50 +++++++++---- tasks/register.yml | 16 ++++ tasks/satellite-6.yml | 49 +++++++++--- tasks/satellite.yml | 23 +++++- tasks/unregister.yml | 12 +++ tox.ini | 7 +- vars/main.yml | 10 +++ zuul.d/layout.yaml | 12 +++ 21 files changed, 347 insertions(+), 162 deletions(-)

1 0

heat-translator 1.3.0 (stein)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are pumped to announce the release of: heat-translator 1.3.0: Tool to translate non-heat templates to Heat Orchestration Template. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/heat-translator/ Download the package from: https://pypi.org/project/heat-translator For more details, please see below. Changes in heat-translator 1.2.0..1.3.0 --------------------------------------- 30f4d2f Support reservation policy in heat-translator de9d98c Update hacking version Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 2 +- lower-constraints.txt | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- translator/common/utils.py | 12 ++-- translator/hot/syntax/hot_resource.py | 3 +- translator/hot/tosca/tosca_policies_reservation.py | 64 ++++++++++++++++++++++ translator/hot/tosca/tosca_policies_scaling.py | 3 +- translator/hot/translate_node_templates.py | 9 ++- .../data/hot_output/reservation/SP_RSV_res.yaml | 23 ++++++++ .../reservation/hot_reservation_scaling.yaml | 44 +++++++++++++++ .../reservation/tosca-vnfd-reservation-id.yaml | 60 ++++++++++++++++++++ 14 files changed, 243 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2474492..e5f5c47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ six>=1.10.0 # MIT -tosca-parser>=1.0.0 # Apache-2.0 +tosca-parser>=1.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 8f58289..703ab95 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0

1 0

tripleo-heat-templates 8.3.0 (queens)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are psyched to announce the release of: tripleo-heat-templates 8.3.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 8.3.0 ^^^^^ New Features ************ * Added support for containerized networking-ansible Ml2 plugin. * Added support for networking-ansible ML2 plugin. * Add *OctaviaEventStreamDriver* parameter to specify which driver to use for syncing Octavia and Neutron LBaaS databases. * Add new TunedCustomProfile parameter which may contain a string in INI format describing a custom tuned profile. Also provide a new environment file for users of hypercoverged Ceph deployments using the Ceph filestore storage backened. The tuned profile is based on heavy I/O load testing. The provided environment file creates /etc/tuned/ceph-filestore-osd-hci/tuned.conf and sets this tuned profile to be active. Not intended for use with Ceph bluestore. Known Issues ************ * Fix misnaming of service in firewall rule for Octavia Health Manager service. Upgrade Notes ************* * Deployers that used "resource_registry" override in their environment to add networks to roles without also using a custom roles data file must create a custom roles data file and add the additional network(s) and use this when upgrading. Previously it was possible to add additional networks to a role without using a custom role by overriding the resource registry, for example: OS::TripleO::Compute::Ports::ExternalPort: ../network/ports/external.yaml Warning: Since resources are no longer added to the plan unless the network is specified in the role, the "resource_registry" override alone is no longer sufficient. * The default Octavia event_streamer_driver has changed from *queue_event_streamer* to *noop_event_streamer*. See https://bugs.launchpad.net/tripleo/+bug/1787608 Critical Issues *************** * Networks not specified for roles in roles data ("roles_data.yaml") no longer have Heat resources created. It is now mandatory that custom roles are used when non-default networks is used for a role. Previously it was possible to add additional networks to a role without using a custom role by overriding the resource registry, for example: OS::TripleO::Compute::Ports::ExternalPort: ../network/ports/external.yaml Note: The "resource_registry" override was the only requirement prior to the introduction of *Composable Networks* in the Pike release.Since Pike a custom role would ideally be used when adding networks to roles, but documentation and other guides may not have been properly updated and only mention the "resource_registry" override. Bug Fixes ********* * Fixed an issue where if Octavia API or Glance API were deployed away from the controller node with internal TLS, the service principals wouldn't be created. * In other sections we already use the internal endpoints for authentication urls. With this change the auth_uri in the neutron section gets moved from KeystoneV3Admin to KeystoneV3Internal. * With tls-everywhere enabled connecting to keystone endpoint fails to retrieve the URL for the placement endpoint as the certificate can not be verified. While verification is disabled to check the placement endpoint later, it is not to communicate with keystone. This disables certificate verification for communication with keystone. * CephOSD/Compute nodes crash under memory pressure unless custom tuned profile is used (bug 1800232). Changes in tripleo-heat-templates 8.2.0..8.3.0 ---------------------------------------------- 6323aa3 Adding dependency for NetworkDeployment in 'server_resource_name'Deployment f32321d [Queens-Only] Remove Glance's nfs hardcoded version 851b1e9 Catch directories we can not change ownership 52be3ef Move UpgradeInitCommand and UpgradeInitCommonCommand to run by Ansible 4b52a67 Run nova_statedir_owner on every run 22f8389 In process-templates script write output files to provided dir when using base path 2e38cba [Queens only] Include new parameter RHELRegistrationUpgrade to rhel-registration. cb981c7 Set virt queue size as 1024 for all OVS-DPDK roles f7a00ac Ensure logs folder is created in prep hosts tasks. faa179f Add HorizonSecureCookies to environments/ssl/enable-tls.yaml 51fc8a6 Bind mount /var/lib/iscsi in containers using iSCSI bd2da9b Fix typo in octavia upgrade_tasks c2f9d77 Reno only - Check for available networks for a role c39b37f Update auth parameters a9d3373 puppet_config for rabbitmq_bundle needs file_line b6cfecb Ensure unique containers names in docker-puppet 86074ef Move [neutron] auth_url to KeystoneV3Internal 18084f3 Remove unused nova packages from host during upgrade and update 1baecc6 Revert "[Ocata/Pike/Queens] Make rhel-registration scripts location absolute." 56b1509 Add Storage network to IronicConductor role c61281b Update kolla_config to deal with keystone fernet key rotation cbbf43b Spliting compact services in multiples lines 0d696a2 Add config files/templates to integrate nsx plugin with container cd0b38e Upload amphora image in RAW format if RBD backend 6b65f0f Mount config-data/puppet-generated/nova for nova_api_ensure_default_cell 3f8ce6f Fix horizon's iptables rules for haproxy when split off a separate role 605d58b nova_compute fails to start in tls-everywhere configuration a68197b Fix misnaming of service in firewall rule c6f8bb1 Update tuned profile variable configuration file if it exists 8b2912d Add TunedCustomProfile parameter and HCI Ceph filestore environment 113fa47 Remove invalid comment in ips-from-pool-ctlplane d54a6f7 ceilometer: --skip-metering-database is gone 719d009 Check for available networks for a role 3498a24 Remove nic for storage_mgt network fde169a Move set of database_connection to OctaviaBase f88dfe5 Change step to start nova placement and make compute wait for it 621b9d9 Allow to run docker-puppet.py with SELinux enabled 73d6f99 Add networking-ansible ML2 plugin support 23ecac6 neutron-cleanup skips ports marked skip_cleanup=true e60a19a Fix Octavia hieradata keys 81144a7 Fix ServiceData in docker/services/aodh-api.yaml dd41a9f Add more NSX config parameters f9c02c6 Rename tripleo scenario00{6,9}-multinode-oooq (queens branch) 8f658fd Exposing NeutronDhcpOvsIntegrationBridge d56ac4e Sharing hypervisor /var/lib/ironic with ironic-conductor container 4669ae0 Add metadata_settings to Octavia and Glance APIs a81971e Add role definition for ComputeOvsDpdkSriov role 416ab20 Pass parameters for TLS proxy in front of Octavia-API 4acc955 Add reflection of RpcPort to health checks aa8e6c0 Add NeutronSriovHostConfig mapping to neutron-sriov.yaml file 023dc2e Add OctaviaEventStreamerDriver and change default Diffstat (except docs and test files) ------------------------------------- capabilities-map.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 6 -- deployed-server/deployed-server.yaml | 21 ---- .../octavia/octavia-deployment-config.yaml | 5 + .../nova_wait_for_placement_service.py | 111 +++++++++++++++++++++ environments/ips-from-pool-ctlplane.yaml | 4 +- environments/lifecycle/upgrade-converge.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/neutron-ml2-ansible.yaml | 8 ++ environments/neutron-nsx.yaml | 2 + environments/neutron-sriov.yaml | 1 + environments/nsx-config.yaml | 22 ++++ environments/services/neutron-ml2-ansible.yaml | 7 ++ environments/services/neutron-nsx-lbaasv2.yaml | 6 ++ environments/ssl/enable-tls.yaml | 4 + environments/tuned-ceph-filestore-hci.yaml | 13 +++ .../nova_metadata/krb-service-principals.j2.yaml | 4 +- .../rhel-registration/rhel-registration.yaml | 14 ++- extraconfig/pre_network/ansible_host_config.yaml | 6 +- overcloud-resource-registry-puppet.j2.yaml | 3 +- overcloud.j2.yaml | 12 ++- puppet/role.role.j2.yaml | 51 +++++----- puppet/services/glance-api.yaml | 2 + puppet/services/horizon.yaml | 2 +- puppet/services/manila-scheduler.yaml | 11 +- puppet/services/neutron-dhcp.yaml | 9 ++ puppet/services/neutron-plugin-ml2-ansible.yaml | 62 ++++++++++++ puppet/services/neutron-plugin-nsx.yaml | 36 +++++-- puppet/services/nova-base.yaml | 2 +- puppet/services/octavia-api.yaml | 68 +++++++++++-- puppet/services/octavia-base.yaml | 10 ++ puppet/services/octavia-controller.yaml | 88 ++++++++++++++++ puppet/services/octavia-health-manager.yaml | 22 +++- puppet/services/octavia-housekeeping.yaml | 13 ++- puppet/services/octavia-worker.yaml | 47 +++------ puppet/services/tripleo-packages.yaml | 44 ++++++-- puppet/services/tuned.yaml | 15 ++- ...a-and-glance-tls-internal-5d8e46650b174626.yaml | 6 ++ ...ing-ansible-containerized-de68f6c2fd6e05fc.yaml | 3 + ...-availble-network-in-role-7860d8d5cd1df4b0.yaml | 34 +++++++ ...lth-manager-firewall-rule-cdffe31d580ecf4b.yaml | 4 + .../ml2-networking-ansible-0330b1203f0fc75c.yaml | 3 + ..._url_to_internal_endpoint-aaf0e550750335eb.yaml | 7 ++ ...rvice_disable_cert_verify-45f532d7a924df86.yaml | 9 ++ ...t_streamer_driver-default-e5152c28713e7707.yaml | 8 ++ .../tuned_custom_profile-25d1f4a2bc217216.yaml | 15 +++ requirements.txt | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 61 +++++++++++ roles/ComputeOvsDpdkSriovRT.yaml | 62 ++++++++++++ roles/IronicConductor.yaml | 1 + roles/Undercloud.yaml | 6 ++ roles_data_undercloud.yaml | 6 ++ sample-env-generator/ssl.yaml | 4 + tools/process-templates.py | 6 +- zuul.d/layout.yaml | 4 +- 150 files changed, 1689 insertions(+), 409 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ff25bfe..aaa5d7f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,0 +8 @@ tripleo-common>=7.1.0 # Apache-2.0 +paunch>=1.0.0 # Apache-2.0

1 0

puppet-tripleo 8.4.0 (queens)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are chuffed to announce the release of: puppet-tripleo 8.4.0: Puppet module for OpenStack TripleO This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 8.4.0 ^^^^^ New Features ************ * Add support to enable ODL deployment on IPv6 networks * Added Dell EMC SC multipath support This change adds support for cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer. * Add new parameter haproxy_log_facility. * Added support for networking-ansible ML2 plugin. Upgrade Notes ************* * Logrotate's copytruncate is used by default for containerized services logs rotation. The default period to keep old logs remains unchanged (14 days). Changes in puppet-tripleo 8.3.6..8.4.0 -------------------------------------- 6117bf9 Prepare for 8.4.0 release f50f3a8 Prepare for 8.3.7 release 7b4ac46 Allow to set log facility for HAProxy cc05fec Allow user to define a custom tuned profile f61d202 Configure the Metadata Agent only when enable_metadata_agent is set 8b0fade Create barbican's creator role by default dd92d59 Explicitly set certmonger's CA cert's permissions 575504f Configure switchedv while there is no vfs bounded adfca27 Filter apache_certificates_specs if hostname is empty 5bb0a71 Remove some of the excessive rabbitmq bundle logging e85f96d Add additional tuning options for mariadb/galera a9848a9 ceilometer: escape % in crontab 882c78c Make sure we do not match multiple remotes when waiting for them 8e57bf8 Include octavia::controller a925449 Switch scenarios to non-voting 14ac445 Add manifest for networking_ansible ML2 plugin c86e514 Dell EMC SC: Add use_multipath_for_image_xfer bae6123 Pass variable from puppet-tripleo to puppet-neutron fa2fb53 Include ::cinder::nova in cinder's configuration a127d06 Add support for ODL-OVS IPv6 deployment 1858189 Switch stable scenarios to voting b43dc05 Pin puppet-snmp dcecde4 Disable puppet-5 jobs 6a6f932 Fix ceph-nfs duplicate property fd99abf Make sure that ceph-nfs and the VIP start in the right order b9fb5db Disable chrony-wait 9f0aa72 adding deployment_type fact in support cae8cd6 Prevent triggering firewall actions while configuring HA services 59a1e9a Copytruncate containerized logrotate configuration 7a255f8 Enable TLS in the internal network for Octavia API 5f43470 Make sure rhel-plugin-push.service is stopped after pacemaker stops 04d2822 Revert "Revert "SSL support for haproxy -> novnc proxy connection"" Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 6 +- lib/puppet/functions/add_brackets.rb | 14 ++++ lib/puppet/provider/sriov_vf_config/numvfs.rb | 47 +++++------ manifests/certmonger/ca/local.pp | 7 ++ manifests/certmonger/novnc_proxy.pp | 91 ++++++++++++++++++++++ manifests/fencing.pp | 6 +- manifests/haproxy.pp | 17 +++- manifests/host/sriov/numvfs_persistence.pp | 7 +- manifests/profile/base/ceilometer/expirer.pp | 2 +- manifests/profile/base/certmonger_user.pp | 23 +++++- manifests/profile/base/cinder.pp | 1 + manifests/profile/base/cinder/volume/dellsc.pp | 29 +++---- manifests/profile/base/database/mysql.pp | 19 +++++ manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/keystone.pp | 6 ++ manifests/profile/base/logging/logrotate.pp | 5 ++ manifests/profile/base/neutron/agents/nuage.pp | 27 ++++--- manifests/profile/base/neutron/plugins/ml2.pp | 3 + .../base/neutron/plugins/ml2/networking_ansible.pp | 36 +++++++++ .../base/neutron/plugins/ml2/opendaylight.pp | 9 +++ .../base/neutron/plugins/ovs/opendaylight.pp | 26 ++++++- manifests/profile/base/octavia/api.pp | 72 ++++++++++++++++- manifests/profile/base/octavia/health_manager.pp | 1 + manifests/profile/base/octavia/housekeeping.pp | 1 + manifests/profile/base/octavia/worker.pp | 1 + manifests/profile/base/pacemaker.pp | 7 +- manifests/profile/base/pacemaker_remote.pp | 5 ++ manifests/profile/base/time/ntp.pp | 5 ++ manifests/profile/base/tuned.pp | 22 +++++- manifests/profile/pacemaker/ceph_nfs.pp | 38 +++++++-- manifests/profile/pacemaker/rabbitmq_bundle.pp | 15 ++++ metadata.json | 2 +- ...pport-for-IPv6-deployment-988400c781b92066.yaml | 4 + .../notes/dellsc-driver-b7cd300a24a64b01.yaml | 5 ++ .../notes/haproxy-facility-8196cc8e1299d79b.yaml | 3 + ...otate-copytruncate-hourly-f0851bec551f5f5f.yaml | 5 ++ .../notes/networking-ansible-741fd4a6c8374db8.yaml | 3 + ...a_novnc_proxy_ssl_support-507a776063403a8e.yaml | 7 ++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 8 ++ spec/classes/tripleo_haproxy_spec.rb | 26 +++++++ ...tripleo_profile_base_ceilometer_expirer_spec.rb | 2 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 6 ++ ...pleo_profile_base_database_mysql_client_spec.rb | 22 ++++++ ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 59 +++++++++++++- .../tripleo_profile_base_octavia_api_spec.rb | 31 ++++++++ spec/classes/tripleo_profile_base_tuned_spec.rb | 23 +++++- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 12 +-- templates/logrotate/containers_logrotate.conf.erb | 8 +- templates/switchdev/switchdev.epp | 12 +-- zuul.d/layout.yaml | 54 ++----------- 50 files changed, 690 insertions(+), 152 deletions(-)

1 0

puppet-neutron 12.4.1 (queens)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are amped to announce the release of: puppet-neutron 12.4.1: Puppet module for OpenStack Neutron This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/puppet-neutron/ For more details, please see below. 12.4.1 ^^^^^^ New Features ************ * New class neutron::agents::bgp_dragent that installs and manages the neutron-dynamic-routing and neutron-bgp-dragent packages. When you are using this feature you must enable the 'bgp' service plugin by passing it in neutron::service_plugins. * Added logic to support IPv6 deployment on underlay network with ODL. The logic is implemented such that both TLS and IPv6 can be enabled or either of them or none. * Added vlan_transparent boolean parameter that if set to true allows plugins that support transparent VLANs to use it. * Adds 'neutron::agents::ml2::ovs::tunnel_csum' Set or un-set the tunnel header checksum on outgoing IP packet carrying GRE/VXLAN tunnel in ovs agent. * Added support for networking-ansible's mac parameter * Added support for networking-ansible's manage_vlans parameter * Added support for networking-ansible ML2 plugin. * Add openstack-db tag to Exec that run db-sync. * Provides the option to define a set of DNS servers which will be configured in the 'ovn' section of etc/neutron/plugins/ml2_conf.ini. These DNS servers will be used as DNS forwarders for the VMs if a neutron subnet is not defined with 'dns_nameservers' option. Bug Fixes ********* * Fixes missing "flat" network type in the allowed network types for OpenDaylight OVS. * OVS SSL/TLS certificates are now pushed to every OpenDaylight instance. See https://bugs.launchpad.net/puppet-neutron/+bug/1766989 * Fixes default of vhostuser_mode in ODL-OVS to be server, and clarifies the configuration parameter. See https://bugs.launchpad.net/tripleo/+bug/1762473 Changes in puppet-neutron 12.4.0..12.4.1 ---------------------------------------- d924fa0 Prepare for 12.4.1 release 9d183da Add networking-ansible ml2 plugin support 3000794 IPv6 support for ODL-OVS deployment 1a71a73 Adds new neutron nsx plugin parameters 7f1a892 Add posibilities to set tunnel_csum in ovs agent 5be74c5 Add 'openstack-db' tag to db-sync Exec resource ed05e01 Make vlan_transparent in neutron.conf configurable b7f9a27 import zuul job settings from project-config a7acb84 neutron-dynamic-routing wrong package for Debian ea1bb10 Update Gemfile to pull spec_helper from stable/queens f690af9 Make providers use auth_url for authentication ded5e91 Add support for n-server to manage n-d-r package 25988a0 Fix neutron-bgp-dragent issues 7bc0766 Add support for dynamic routing bpg dragent 3aa3109 ovn: Add dns_servers configuration support b06ce52 Fixes missing 'geneve' network type 43ce982 Fixes ODL OVS to add certs to every node 33b6de4 Change package name for OVN metadata agent 78a3933 Fixes missing 'flat' network type for ODL OVS a900c54 Corrects ODL-OVS vhostusermode default and docs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + Gemfile | 1 + lib/puppet/provider/neutron.rb | 4 +- .../neutron_bgp_dragent_config/ini_setting.rb | 15 ++ lib/puppet/type/neutron_bgp_dragent_config.rb | 28 +++ lib/puppet/type/neutron_security_group.rb | 3 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/bgp_dragent.pp | 98 +++++++++ manifests/agents/ml2/ovs.pp | 7 + manifests/config.pp | 6 + manifests/db/sync.pp | 1 + manifests/deps.pp | 1 + manifests/init.pp | 44 ++-- manifests/params.pp | 13 +- manifests/plugins/ml2.pp | 4 +- manifests/plugins/ml2/networking_ansible.pp | 50 +++++ manifests/plugins/ml2/networking_ansible_host.pp | 55 +++++ manifests/plugins/ml2/ovn.pp | 8 + manifests/plugins/ml2/type_driver.pp | 2 +- manifests/plugins/nsx.pp | 88 +++++--- manifests/plugins/ovs/opendaylight.pp | 104 ++++----- manifests/server.pp | 25 +++ metadata.json | 4 +- .../notes/add-bgp-dragent-c6b19e076b1acf0c.yaml | 7 + ...pport-for-IPv6-deployment-8aa288ee1195f81c.yaml | 6 + ...d-vlan_transparent-config-74028f32b6041daa.yaml | 4 + .../notes/bug-1794268-2d0a335261fc8910.yaml | 5 + ...odl-ovs-allowed-net-types-e61c0567ea18c2f5.yaml | 5 + ...l-ovs-certificate-pushing-71f5f84074829e9f.yaml | 5 + ...ix-odl-ovs-vhostuser_mode-6a99fc68b305a583.yaml | 6 + .../notes/net-ansible-mac-189cb3b712b30a89.yaml | 4 + .../net-ansible-manage-vlans-46dde6651bf47897.yaml | 4 + ...orking-ansible-ml2-plugin-a2889e2a81e1afb2.yaml | 3 + .../notes/openstack_db_tag-a69183ca2ee8a4d9.yaml | 3 + ...dns-servers-config-option-1ffa7a252df8731a.yaml | 6 + spec/classes/neutron_agents_bgp_dragent_spec.rb | 243 +++++++++++++++++++++ spec/classes/neutron_agents_ml2_ovs_spec.rb | 1 + spec/classes/neutron_agents_ovn_metadata_spec.rb | 2 +- spec/classes/neutron_config_spec.rb | 7 + spec/classes/neutron_db_sync_spec.rb | 2 + spec/classes/neutron_init_spec.rb | 27 ++- .../neutron_plugins_ml2_networking_ansible_spec.rb | 89 ++++++++ spec/classes/neutron_plugins_ml2_ovn_spec.rb | 2 + spec/classes/neutron_plugins_ml2_spec.rb | 2 +- spec/classes/neutron_plugins_nsx_spec.rb | 58 +++-- .../neutron_plugins_ovs_opendaylight_spec.rb | 65 +++++- spec/classes/neutron_server_spec.rb | 24 ++ .../neutron_bgp_dragent_config/ini_setting_spec.rb | 74 +++++++ spec/unit/provider/neutron_spec.rb | 6 +- spec/unit/type/neutron_bgp_dragent_config_spec.rb | 23 ++ spec/unit/type/ovn_metadata_agent_config_spec.rb | 2 +- 51 files changed, 1106 insertions(+), 143 deletions(-)

1 0

python-tempestconf 2.1.0
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We exuberantly announce the release of: python-tempestconf 2.1.0: python-tempestconf will automatically generates the tempest configuration based on your cloud. The source is available from: https://git.openstack.org/openstack/python-tempestconf Download the package from: https://pypi.org/project/python-tempestconf Please report issues through launchpad: https://storyboard.openstack.org/#!/project/912 For more details, please see below. 2.1.0 ^^^^^ New Features * --append argument appends a value or values to the specified section.key pair. It may be helpful in cases when a user wants to add custom extensions to tempest.conf in an automated job. Argument format for adding values: [--append SECTION.KEY=VALUE[,VALUE]] If a section or an option specified in CLI does not exist, tempestconf will inform a user about that in logging output. * --profile argument specifies a path to a profile.yaml file which contains definitions of python-tempestconf arguments. NOTE: If this argument is used, other arguments cannot be defined, it means a user uses either CLI arguments or profile.yaml file. A user can generate a sample profile.yaml file using --generate- profile argument. The sample contains definitions of all python- tempestconf arguments set to their default values. NOTE: If this argument is used, python-tempestconf ends right after the a sample profile.yaml file is generated. Changes in python-tempestconf 2.0.0..2.1.0 ------------------------------------------ f9b3c05 Set refstack-client-*-tempestconf voting again 7faab49 Added python-tempestconf-tempest-devstack-admin/demo-py3 9317a78 Fix diff in gates f53b91c Replace tripleo-scenario002-multinode with scenario002-standalone 7c355f4 Fixed SafeConfigParser deprecation warning for py3 54e8a66 Update hacking version d376c37 Add unit test for profile feature af57dd6 Add profile argument 3a4c6c7 Add argument which allows users to add extensions a2568a5 Adapt python-tempestconf to python3 a99b846 Handle Forbidden exception when creating role e06dd67 Change openstack-dev to openstack-discuss e725235 Fix flaky unit tests a1c232d Constraint flake8 and pyflakes versions 2a81ce9 Add Python 3.6 classifier to setup.cfg ef2bc15 Set region_name from os-client-config to set identity.region f9deb1a Remove unnecessary CLI options from roles 93297b1 Different concurrency for tempest and accounts 8c5aea2 Fix api microversion discover procedure b83d90f Add python 3.6 unit test job 6c8b05f Set use_dynamic_credentials with a priority 4a81d6f Skip api.compute.servers tests ceab8ba use include_tasks instead of include d0dd45e fix tox python3 overrides 0ea6d72 Removed older version of python added 3.5 aab99ff Use openstack-tox-cover template 8fcdf82 Add refstack-client-devstack-tempestconf job 4407100 add python 3.6 unit test job 2dd8109 switch documentation job to new PTI 4ac9c72 import zuul job settings from project-config a9af6c8 Remove static class loader fe8b112 Final doc check Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 71 +++++++-- config_tempest/main.py | 98 +++++++++++-- config_tempest/profile.py | 114 +++++++++++++++ config_tempest/services/base.py | 9 ++ config_tempest/services/boto.py | 8 ++ config_tempest/services/compute.py | 4 + config_tempest/services/identity.py | 4 + config_tempest/services/image.py | 6 +- config_tempest/services/network.py | 4 + config_tempest/services/object_storage.py | 27 ++-- config_tempest/services/octavia.py | 4 + config_tempest/services/services.py | 127 +++++++++------- config_tempest/services/volume.py | 20 ++- config_tempest/tempest_conf.py | 38 ++++- ...s-users-to-add-extensions-f7b82af27d603c18.yaml | 11 ++ .../Add-profile-argument-70bfa9606826ff81.yaml | 15 ++ roles/generate-accounts-file/README.rst | 4 +- roles/generate-accounts-file/defaults/main.yaml | 11 +- roles/generate-accounts-file/tasks/main.yaml | 2 +- .../tasks/compare-ini.py | 83 +++++++++++ .../tasks/main.yaml | 49 +++++++ .../tasks/generate-tempestconf.sh.j2 | 2 - roles/generate-tempestconf-file/tasks/main.yaml | 4 +- setup.cfg | 6 +- test-requirements.txt | 5 +- tox.ini | 8 +- 40 files changed, 1059 insertions(+), 202 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0f769a8..9598406 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +5,3 @@ -hacking>=0.12.0,<0.13 # Apache-2.0 - +hacking>=1.1.0,<1.2.0 # Apache-2.0 +pyflakes>=0.8,<=2.0.0 # MIT +flake8<3.0.0 # MIT

1 0

kayobe 5.0.0 (rocky)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are stoked to announce the release of: kayobe 5.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 5.0.0 ^^^^^ New Features ************ * Added commands to enable and disable the Ironic serial console. This allows you to use the serial console from within Horizon. * Added the ability to configure baremetal serial consoles during the post configure step. This is controlled via "ironic_serial_console_autoenable" in "etc/kayobe/ironic.yml". * Adds support for specifying a CA certificate when accessing APIs. The path to the CA certificate may be specified via "openstack_cacert" , which takes its default value from the "OS_CACERT" environment variable. See story 2004911 for details. * Adds support for the "defroute" network attribute. This attribute can be used to disable configuration of the default gateway by a specific interface. This is particularly useful to ignore a gateway address provided via DHCP. Note that this attribute is only supported on distributions of the Red Hat family. * Adds support for configuring the Docker Registry by providing environment variables to its container via the "docker_registry_env" Ansible variable. For example, the registry can be configured as a pull through cache to Docker Hub using: docker_registry_env: REGISTRY_PROXY_REMOTEURL: "https://registry-1.docker.io" Note that it is not possible to push to a registry configured as a pull through cache. See story 2004817 for details and the Docker documentation for the full list of configuration options. * Supports fluentd custom input configuration * Add commands to run commands on seed hypervisor, seed and overcloud hosts: "kayobe seed hypervisor host command run --command <command>" "kayobe seed host command run --command <command>" "kayobe overcloud host command run --command <command>" * Adds support for setting the *kolla_external_fqdn_cacert* variable which allows customizing the CA certificate file to be used as the OS_CACERT environment variable in openrc files when TLS is enabled. * Kayobe no longer requires a checkout of the source code repository to function. The files needed to run kayobe are now shipped as part of the python package. Please see: Story 2004252 (https://storyboard.openstack.org/#!/story/2004252/) for more details. * Adds support for a "--disable-discovery" argument to the "kayobe physical network configure" command. This can be used to configure the physical network after discovery of bare metal compute nodes is complete, to return the network to a normal state. The interface configuration to be applied is configured via "switch_interface_config_disable_discovery". * Updates dependencies to use the OpenStack Rocky release. * Adds support for including or excluding files from the output of "kayobe overcloud service configuration save". This is particularly useful for large files such as the Ironic IPA images. * Adds support for configuring LVM volume groups on the seed hypervisor. Setting the "seed_hypervisor_lvm_groups" variable in "$KAYOBE_CONFIG_PATH/seed-hypervisor.yml" to ""{{ seed_hypervisor_lvm_groups_with_data }}"" and providing a list of storage devices via the "seed_hypervisor_lvm_group_data_disks" variable will configure a logical volume mounted to "/var/lib/libvirt/images". No LVM volume groups are configured by default. * Adds a new command to upgrade containerised seed services, "kayobe seed service upgrade". * Adds support for configuration of options in "/etc/yum.conf", via the "yum_config" variable. Upgrade Notes ************* * When enabled, a Docker Registry is now deployed on hosts in the "docker-registry" group, which defaults to include the seed. The existing behaviour of deploying on the first controller can be retained by removing the seed group from "[docker- registry:children]" in "$KAYOBE_CONFIG_PATH/inventory/groups` and creating a ``[docker-registry]" group including the name of the first controller. * Modifies the default value of "docker_registry_image" variable to not use a private registry in the image name by default. This avoids a potential circular dependency during deployment of the registry container. * Modifies the default value of "kolla_docker_registry" variable to the value of the "docker_registry" variable. The default value of "docker_registry" is unset. This avoids needing to set the same value in two places when a private Docker registry is in use. * The manage-lvm Ansible role was upgraded to version v0.1.4. If you are overriding variables to customize definitions of volume groups, you need to change the value of the "disks" parameter from a comma- separated string to a list. For example, change "disks: "/dev/sda,/dev/sdb"" to: disks: - "/dev/sda" - "/dev/sdb" * Modifications to the kayobe source tree will no longer have an immediate effect. This is because the ansible playbooks are now shipped as part of the kayobe package. You must reinstall the package, or use an editable package install, see: pip editable- installs (https://pip.pypa.io/en/stable/reference/pip_install /#editable-installs), to replicate the old behaviour. * Overcloud Ironic must now be configured with the variable "kolla_ironic_enabled_hardware_types"; "kolla_ironic_drivers" has been removed. * Bifrost's "kolla_bifrost_enable_ipmitool_drivers" and "kolla_bifrost_enable_pxe_drivers" variables have been removed. Bifrost must now be configured by setting the variable "kolla_bifrost_enabled_hardware_types" to be a list of hardware types to enable. Deprecation Notes ***************** * The switch configuration variable "switch_interface_config_discovery" has been deprecated in favour of "switch_interface_config_enable_discovery". Support for "switch_interface_config_discovery" will be removed in the T* release. * First class support in Kayobe for deploying cAdvisor has been removed since this is now supported via Kolla-Ansible. * First class support in Kayobe for deploying Prometheus Node exporter has been removed since this is now supported via Kolla- Ansible. Bug Fixes ********* * Fixes an issue with the "--ask-vault-pass" argument, where Kayobe would fail to generate the Kolla Ansible "passwords.yml" file. Also ensures that the user is only prompted for the password once per execution of kayobe. * Fixes a compatibility issue with Ansible modules for Dell switches which was preventing physical network configuration for this type of hardware. See Story 2004588 for details. * Fixes an issue where if a host has the same name as a group that it is in, configuration of kolla ansible inventory host variables could fail to override the defaults. See story 2004418 for details. * Fixes an issue where CLI arguments containing whitespace that are passed to Ansible needed to be quoted. See Story 2004379 for details. * Fixes an issue where the seed hypervisor user bootstrapping is not performed when executing "kayobe seed hypervisor host configure". See story 2004401 for details. * The "public-openrc.sh" file generated by Kayobe now uses the public network FQDN for populating the OS_AUTH_URL variable instead of using the public virtual IP address. If the FQDN variable is not set, the virtual IP address remains used. This ensures better compatibility with TLS-enabled deployments where certificates are generally tied to a hostname. Changes in kayobe 5.0.0.0rc1..5.0.0 ----------------------------------- f950b77 Update .gitreview for stable/rocky dde275e Print output of dump-config in case of errors Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + kayobe/ansible.py | 8 +++++--- 3 files changed, 19 insertions(+), 15 deletions(-)

1 0

kayobe 4.1.0 (queens)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are happy to announce the release of: kayobe 4.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 4.1.0 ^^^^^ New Features ************ * Adds a new command to upgrade containerised seed services, "kayobe seed service upgrade". Bug Fixes ********* * Fixes an issue with the "--ask-vault-pass" argument, where Kayobe would fail to generate the Kolla Ansible "passwords.yml" file. Also ensures that the user is only prompted for the password once per execution of kayobe. * Fixes a compatibility issue with Ansible modules for Dell switches which was preventing physical network configuration for this type of hardware. See Story 2004588 for details. * Fixes an issue where the seed hypervisor user bootstrapping is not performed when executing "kayobe seed hypervisor host configure". See story 2004401 for details. * The "public-openrc.sh" file generated by Kayobe now uses the public network FQDN for populating the OS_AUTH_URL variable instead of using the public virtual IP address. If the FQDN variable is not set, the virtual IP address remains used. This ensures better compatibility with TLS-enabled deployments where certificates are generally tied to a hostname. Changes in kayobe 4.0.0..4.1.0 ------------------------------ f9efaea Prune unused Galaxy roles during upgrade bd9e86c Fix generation of globals.yml ba01a75 Synchronise config with kayobe-config be19d9e Use a fork of the yatesr.timezone role 803ec21 Handle existing kolla-ansible inventory directories 964d7a3 Backporting two mutually dependent commits to fix CI 68d0d5c Test upgrading seed services in CI 7e95b42 Add kayobe seed service upgrade command ff06695 Fix twine check that is breaking CI 32d1a8b Retry adding custom repos until success 70bde21 Move group_vars for switches group to all group 15e4a60 Seed hypervisor user bootstrapping skipped 39bdddc Fix use of --ask-vault-pass argument 26641c3 Fix ansible_version comparison 3346d99 Fix physical network configuration on Dell switches cd3f009 Use public FQDN for OS_AUTH_URL in public-openrc.sh 4f37bbf Work around Galaxy semver issues 4f74272 Test upgrades in CI Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/switches/config | 24 ++++ ansible/group_vars/all/switches/dell | 14 +++ ansible/group_vars/all/switches/dell-powerconnect | 12 ++ ansible/group_vars/all/switches/junos | 28 +++++ ansible/group_vars/all/switches/mellanox | 12 ++ ansible/group_vars/switches/config | 24 ---- ansible/group_vars/switches/dell | 15 --- ansible/group_vars/switches/dell-powerconnect | 12 -- ansible/group_vars/switches/junos | 28 ----- ansible/group_vars/switches/mellanox | 12 -- ansible/kayobe-ansible-user.yml | 4 +- ansible/kolla-ansible.yml | 2 + ansible/ntp.yml | 2 +- ansible/public-openrc.yml | 4 +- ansible/roles/dell-switch/README.md | 1 - ansible/roles/docker/tasks/main.yml | 4 +- ansible/roles/junos-switch/tasks/main.yml | 4 +- ansible/roles/kolla-ansible/defaults/main.yml | 8 ++ ansible/roles/kolla-ansible/tasks/config.yml | 27 +++++ .../roles/kolla-ansible/templates/globals.yml.j2 | 4 +- ansible/roles/yum/tasks/custom_repo.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 48 ++++++++ dev/functions | 135 +++++++++++++++++++-- dev/overcloud-upgrade.sh | 20 +++ dev/seed-upgrade.sh | 19 +++ .../inventory/group_vars/switches/interfaces | 12 -- etc/kayobe/kolla/globals.yml | 6 + etc/kayobe/monitoring.yml | 2 +- etc/kayobe/overcloud.yml | 2 +- kayobe/ansible.py | 34 +++--- kayobe/cli/commands.py | 38 ++++++ kayobe/kolla_ansible.py | 9 +- kayobe/utils.py | 15 +++ kayobe/vault.py | 101 +++++++++++++-- playbooks/kayobe-overcloud-base/pre.yml | 23 +--- .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 10 ++ .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 16 +++ playbooks/kayobe-overcloud-upgrade-base/post.yml | 8 ++ playbooks/kayobe-overcloud-upgrade-base/pre.yml | 69 +++++++++++ playbooks/kayobe-overcloud-upgrade-base/run.yml | 83 +++++++++++++ playbooks/kayobe-seed-base/pre.yml | 23 +--- .../bifrost-overrides.yml.j2 | 7 ++ .../kayobe-seed-upgrade-base/overrides.yml.j2 | 33 +++++ playbooks/kayobe-seed-upgrade-base/post.yml | 9 ++ playbooks/kayobe-seed-upgrade-base/pre.yml | 85 +++++++++++++ playbooks/kayobe-seed-upgrade-base/run.yml | 64 ++++++++++ .../notes/ask-vault-pass-b6ced0220384dde1.yaml | 7 ++ ...l-physical-network-config-b4eaf752e62eeadb.yaml | 7 ++ ...seed-hypervisor-bootstrap-58bafc1ea0d125bc.yaml | 7 ++ .../seed-service-upgrade-71b847e3658a1948.yaml | 5 + ...use-public-fqdn-in-openrc-f7990958ceec817d.yaml | 8 ++ requirements.yml | 12 +- roles/kayobe-ci-prep/tasks/main.yml | 21 ++++ roles/kayobe-diagnostics/files/get_logs.sh | 1 + setup.cfg | 4 +- zuul.d/jobs.yaml | 76 ++++++++++++ zuul.d/project.yaml | 4 + 66 files changed, 1398 insertions(+), 236 deletions(-)

1 0

puppet-placement 1.0.0 (stein)
by no-reply＠openstack.org 15 Feb '19

15 Feb '19

We are psyched to announce the release of: puppet-placement 1.0.0: Puppet module for OpenStack placement This is the first release of puppet-placement. This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-placement/ For more details, please see below. Changes in puppet-placement 4680e7e936e72c1dd64704527b97678de6283a74..1.0.0 --------------------------------------------------------------------------- c2b6504 Prepare Stein M2 a59aecb Fix editorial problem e5c7502 Load puppet-openstack_spec_helper locally during tests 798764d Add packages needed by tests c128b44 Add .gitignore file e097283 Remove redundant code 7f10529 Fix lint 54df3c1 Fix FIXME 0c3813b Cleanup docs, testing and missed things d51cdf6 Initial cookiecutter run and import from puppet-nova

1 0