March 2019 - Release-announce - lists.openstack.org

tripleo-image-elements 9.1.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We contentedly announce the release of: tripleo-image-elements 9.1.0: Disk image builder elements for deploying OpenStack. This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 9.0.0..9.1.0 ---------------------------------------------- 9f1c8002 Increase size for security hardened images be111efb import zuul job settings from project-config fd622803 Update UPPER_CONSTRAINTS_FILE for stable/rocky 7cc5cbe3 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/overcloud-secure-uefi/block-device-default.yaml | 13 +++++++++---- elements/overcloud-secure/block-device-default.yaml | 13 +++++++++---- tox.ini | 2 +- zuul.d/layout.yaml | 5 ++++- 5 files changed, 24 insertions(+), 10 deletions(-)

1 0

openstackdocstheme 1.29.2
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are happy to announce the release of: openstackdocstheme 1.29.2: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. Changes in openstackdocstheme 1.29.1..1.29.2 -------------------------------------------- 84f25a0 Move bootstrap modifications to 'combined.css' 15815e0 css: Don't use bold text in titles 44430d1 css: Use ellipsis for long titles in sidebar e0142fd Silence! A sequel a9710dc Silence! Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/ext.py | 4 ++-- openstackdocstheme/page_context.py | 2 +- .../theme/openstackdocs/static/css/bootstrap.css | 9 ++++---- .../openstackdocs/static/css/bootstrap.min.css | 4 ++-- .../theme/openstackdocs/static/css/combined.css | 27 ++++++++++++++++++++-- 5 files changed, 35 insertions(+), 11 deletions(-)

1 0

os-refresh-config 9.1.1 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We high-spiritedly announce the release of: os-refresh-config 9.1.1: Refresh system configuration This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 9.1.0..9.1.1 ----------------------------------------- a1dad69 import zuul job settings from project-config 64fc783 Update UPPER_CONSTRAINTS_FILE for stable/rocky ad1180f Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- zuul.d/layout.yaml | 9 ++++++++- 3 files changed, 10 insertions(+), 2 deletions(-)

1 0

os-apply-config 9.1.1 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are stoked to announce the release of: os-apply-config 9.1.1: Config files from cloud metadata This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 9.1.0..9.1.1 --------------------------------------- ba6a632 import zuul job settings from project-config 387ecfa Update UPPER_CONSTRAINTS_FILE for stable/rocky ff40481 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- zuul.d/layout.yaml | 7 ++++++- 3 files changed, 8 insertions(+), 2 deletions(-)

1 0

tripleo-common 9.5.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We jubilantly announce the release of: tripleo-common 9.5.0: A common library for TripleO workflows. This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 9.5.0 ^^^^^ New Features ************ * The "ironic-staging-drivers" are now installed in the ironic- conductor container so that these drivers can be used without rebuilding the container. The Ironic Staging Drivers (https ://ironic-staging-drivers.readthedocs.io/en/latest/) is used to hold out-of-tree Ironic drivers which doesn't have means to provide a 3rd Party CI at this point in time which is required by Ironic. * Increase the size of the security hardened images to 40G. With the move to containers more disk space is needed and the disk layout has been modified. It needs a global size of 40G to work. Upgrade Notes ************* * Package octavia-amphora-image (RHEL) will no longer be installed by role octavia-undercloud, and it now installs image files in directory /usr/share/openstack-octavia-amphora-images/. Please ensure you have the latest package version installed in the undercloud node beforehand deploying or updating the overcloud. Bug Fixes ********* * Fixes bug 1793605 so when nodes are blacklisted, they are not included in the Overcloud config. A warning will show that the server_id that was ignored if the it can't be found in the stack. * Node update now works correctly when capabilities are specified as a dict. * The config_download_deploy workflow now has a config_download_timeout input that will honor the user requested timeout. Previously, no timeout was honored even though the user could request one via tripleoclient. * The tripleo-bootstrap ansible role will no longer fail if yum fails to install the required packages. This fixed behavior aligns with previous requirements where enabled package repositories and a working package manager are not required on the initially deployed images. Errors are ignored on the package install task, and then a subsequent task will cause a failure indicating the required packages are not present. * tripleo.access.v1.enable_ssh_admin now honors the server blacklist if one is set. Servers in the blacklist will not be used by the workflow. * Previously, running ansible-playbook with --check would cause a failure during the individual server deployments when checking the result of a previous attempt. * The tripleo.deployment.v1.get_deployment_status workflow will no longer error when requesting the deployment status for a non- existant plan. A message is sent in the output instead of failing the workflow. * While we have a dedicated nova_metadata healthcheck script, the nova_metadata and nova_api container the same image and the current nova api healtcheck script still checks the non wsgi implementation. This changes the nova_api healthcheck script to check the metadata wsgi vhost config for details instead of the details in nova.conf. * Add missing httpd and mod_ssl packages to octavia container image to support TLS proxy for internal TLS. * The ServerAliveInterval and ServerAliveCountMax SSH options are now set in the mistral ansible action so that when networking configuration is performed on the overcloud nodes SSH will not drop the connection. * Workaround bug 1810932 by scripting an in-place update of ssh_known_hosts * A new workflow, config_download_export, for exporting the config- download files via a Swift tempurl is added so that the openstack overcloud config download tripleoclient command can use the API. Other Notes *********** * Individual server deployments that are of type group:hiera now support check mode, and when running under check mode, also support diff mode. Changes in tripleo-common 9.4.0..9.5.0 -------------------------------------- 70a5be49 Bump the Ceph container image to 3.2.1 5f2705f2 Publish a better failure message for Update Ansible 5d47b74d Publish error for package_update workflow 9b3e9b2c Check for physical_resource_id before getting deployments 5defaf30 Add AllNodesConfig to config-download group vars d434b88d Enable Ansible error handling per role 985cb0ff Set heatclient exceptions to verbose 261de49f Run scenario009 on tripleo-deploy-openshift changes 0077402b Workaround ssh_known_hosts changes not being propagated to containers c51cce0c Look for lower-case hostname when adding to ssh_known_hosts 0e1368bf Fail node cleaning on timeout 112cc3b5 Additional images for openshift services 6fc7e1bf Fix tags for openshift images 0af9f994 Fix AnsibleAction.run() when argument is not a dict c42fb903 IPv6 healthcheck fixes for nova-vnc-proxy 15b70b09 Fix DeploymentStatusAction KeyError f863f02b Move Octavia config opts to common config directory 56690bc3 Activate remaining set of healthchecks d284d78b Add a way to update ContainerImagePrepare params 48ab9fa9 Option to upload Octavia amphora img in RAW format b710e530 Fix environments sorting 244736fd Handle missing or bad dmidecode 8b40faa7 Fix skip of octavia-undercloud Ansible role 362ddf79 Add python-notario package to mistral-executor container 98011150 Increase ansible gather_timeout to 30secs for config-download 39ea2afb Switch scenarios to non-voting 5bc57959 Catch heat exceptions in DeployStackAction a1a0bc46 Set DeployIdentifier on update/upgrade/ffwd prepare actions 58ff892e image_uploader: use /v2 suffix to validate SSL 74ee6747 Do not fail deploy for empty ceph ansible fetch directory 040849c6 Stop installing octavia-amphora-image package 027002bb Rename tripleo-ci-centos-7-scenario009-multinode-oooq (rocky) 7d609f11 Generating fencing for capitalized MACs 6341671c Bump the Ceph container image to 3.2.0 935bd8a0 Update swift_backup workflow success status message b45a5cee Exit when container is missing or empty when downloading logs d8f06646 Select message IDs properly when publishing to swift b37abe26 Correct handling of capabilities on node update 8dd9125d Fix rotate_fernet_keys workflow to not use heat deployment 93668935 Don't resolve Heat stack output when unnecessary 0176878f Fix nova-api healthcheck fa7bceb5 Omit grep process in nova_api healthcheck. e71a6a9a Cache swift responses in process_environments_and_files e9ce11d1 Install ironic-staging-drivers in ironic-conductor f4e06c5d Fix config-download timeout 79c687cd Sync state if needed during retrieval 5e221edb Switch stable scenarios to voting 34b0d730 Delete old tarball from config container on download c43e1b0d Don't reset parameter cache in a loop 181fb4a0 Add health checks for Swift services 03c67d9a Add health check script for Sahara API 9a57702d Run Mistral workflow to make temporary Swift URLs on upgrade 52628ffa Add container images for openshift 3.11 b49f0c54 Store prepare defaults in packaged yaml f25a2f35 Add Ironic inspector health checks a32cbdee Increase size for security hardened images 709bc35f write_config: force utf8 d213435a Run NetworkDeployment as async task 9ea9472b Skip deployments with no uuid e8d9d162 Don't add tarball to config-download dir eb2b7dc1 Change ceph-ansible fetch directory format on upgrade from Q to R 6c5f1c11 Set workflow status to success when manipulating deployment status 123616fe Fix nova-api healthcheck in case of nova metadata wsgi e6d6efa3 Add wrapper for openshift-ansible docker command 5d84aeb5 Add openshift-ansible container image 99049c27 Fix temp file locking issues in tests 67bab168 Run prepare during package_update workflow 437ce769 Default the scale status to SUCCESS e2c12d40 Add httpd and mod_ssl packages to octavia api image 30c7bfff Check mode support for hiera deployments 17a10d99 Honor blacklist with enable_ssh_admin 14c23619 Make ODL healthcheck IPv6 compatible 23235106 Do not include ceph-ansible in the container image. d709699b Add on-error task to parse_node_data_lookup 8a0474e6 Revert "Add container runtime packages for cron image" 35112154 Fix check mode for server deployments 1ff57952 Tag openshift images for Infra service 933c620d Add container-registry image to openshift master role 417d5eab Switch to origin-docker-build 9c486dc9 Switch to openshift 3.10 f4f4c920 Add config_download_timeout input 40cd1d39 Increase upload concurrency 5a552022 Update swift_rings_backup workflow to also backup ceph fetch dir 2da9b4ab Don't fail tripleo-bootstrap on package installs 00e776de Handle non-existant plan when getting deployment status f8fe46d7 Set prepare neutron_driver from NeutronMechanismDrivers f86b2b4c config: ignore missing server_id from the stack 792bc26f Add workflow for config-download export 0b41bc23 Add override_ansible_cfg b17791ae Set SSH server keep alive options fc31a1c6 Add container runtime packages for cron image ed76b768 Upgrade docker ceph container 15484a00 Fix validation runs in a containerized environment Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 75 ++++++ container-images/overcloud_containers.yaml | 34 ++- container-images/overcloud_containers.yaml.j2 | 130 ++++++++- .../tripleo_kolla_template_overrides.j2 | 64 ++++- healthcheck/common.sh | 11 + healthcheck/ironic-inspector | 16 ++ healthcheck/nova-api | 8 +- healthcheck/nova-vnc-proxy | 5 + healthcheck/opendaylight-api | 5 + ...a-vnc-proxy-ipv6-handling-5d0625f1ab10d13f.yaml | 5 + healthcheck/sahara-api | 12 + healthcheck/swift-account-server | 38 ++- healthcheck/swift-container-server | 38 ++- healthcheck/swift-object-expirer | 12 + healthcheck/swift-object-server | 47 +++- healthcheck/swift-proxy | 37 ++- healthcheck/swift-rsync | 14 + image-yaml/overcloud-hardened-images-uefi.yaml | 9 +- image-yaml/overcloud-hardened-images.yaml | 9 +- image-yaml/overcloud-odl-rhel7.yaml | 7 +- playbooks/octavia-files.yaml | 3 +- playbooks/roles/common/defaults/main.yml | 1 + .../roles/octavia-controller-config/tasks/main.yml | 2 +- .../octavia-controller-config/tasks/octavia.yml | 20 +- .../templates/worker-post-deploy.conf.j2 | 4 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 31 ++- playbooks/roles/octavia-undercloud/tasks/main.yml | 7 +- ...ck-mode-support-for-hiera-f15fed971d4397f8.yaml | 4 + ...nd-ironic-staging-drivers-d278905bb1ec0683.yaml | 9 + ...acklisted_serverid_config-e079e64e8a04cdb4.yaml | 7 + releasenotes/notes/caps-fix-f6f8817a48fa5c25.yaml | 4 + .../config-download-timeout-7296683716f78022.yaml | 5 + ...tstrap-on-package-install-a00cd921b0af7168.yaml | 8 + ...ssh-admin-honor-blacklist-f1371554ab1b38f6.yaml | 4 + ...ck-mode-server-deployment-098bcae9e0227c57.yaml | 5 + ...ndle-no-deployment-status-a70a4b950171afbe.yaml | 5 + ...-security-hardened-images-3fc4df73a48d4a91.yaml | 7 + ...heck_metadata_wsgi_change-4a191009d7ef9963.yaml | 8 + ...avia-internal-tls-support-f595ed1c3a1f3353.yaml | 5 + ...server-keep-alive-options-071e1b3b570e78a7.yaml | 5 + ...via-amphora-image-install-5d26e3d37c7b508f.yaml | 8 + ..._known_host_atomic_update-481e0baf3b3d6342.yaml | 5 + ...ow-config-download-export-d22f3eb958b8c97a.yaml | 5 + roles/tripleo-bootstrap/tasks/main.yml | 7 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 30 ++- scripts/tripleo-deploy-openshift | 55 ++++ setup.cfg | 3 + sudoers | 2 +- tripleo_common/actions/__init__.py | 4 + tripleo_common/actions/ansible.py | 28 +- tripleo_common/actions/config.py | 18 +- tripleo_common/actions/container_images.py | 38 +++ tripleo_common/actions/deployment.py | 101 ++++++- tripleo_common/actions/files.py | 5 +- tripleo_common/actions/package_update.py | 14 +- tripleo_common/actions/parameters.py | 2 +- tripleo_common/actions/plan.py | 3 +- tripleo_common/actions/templates.py | 7 +- tripleo_common/actions/validations.py | 11 + tripleo_common/image/image_uploader.py | 6 +- tripleo_common/image/kolla_builder.py | 81 +++--- tripleo_common/templates/deployments.yaml | 152 ++++++++++- tripleo_common/templates/group_var_role.j2 | 4 + tripleo_common/utils/config.py | 79 +++++- tripleo_common/utils/nodes.py | 19 +- tripleo_common/utils/plan.py | 13 +- workbooks/access.yaml | 28 +- workbooks/baremetal.yaml | 10 +- workbooks/ceph-ansible.yaml | 7 + workbooks/container_images.yaml | 51 ++++ workbooks/deployment.yaml | 140 +++++++++- workbooks/fernet-key-rotate.yaml | 13 +- workbooks/octavia_post.yaml | 2 + workbooks/package_update.yaml | 40 ++- workbooks/plan_management.yaml | 87 ++++++- workbooks/rename_ceph_ansible_fetch_directory.yaml | 105 ++++++++ workbooks/scale.yaml | 2 +- .../{swift_rings_backup.yaml => swift_backup.yaml} | 48 ++-- workbooks/swift_ring_rebalance.yaml | 8 +- zuul.d/layout.yaml | 26 +- 94 files changed, 2481 insertions(+), 358 deletions(-)

1 0

puppet-ovn 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are tickled pink to announce the release of: puppet-ovn 14.3.0: Puppet module for OVN This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-ovn/ For more details, please see below. Changes in puppet-ovn 14.2.0..14.3.0 ------------------------------------ e0805ca Prepare Stein M3 365f2f8 Use validate_legacy 24846bc Remove Ubuntu Xenial from metadata.json 7cab664 Modify puppet version 4 to 5 7aabb76 remove unnecessary '=' Diffstat (except docs and test files) ------------------------------------- manifests/controller.pp | 5 +++-- metadata.json | 5 ++--- releasenotes/source/index.rst | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-)

1 0

python-tripleoclient 10.6.1 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are pleased to announce the release of: python-tripleoclient 10.6.1: TripleO client This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 10.6.1 ^^^^^^ Upgrade Notes ************* * Upgrades and updates are now use tripleo-admin user to connect to the overcloud by default, which makes it work the same in this regard as fresh deployment. Deprecation Notes ***************** * The *--ssh-user* parameter for *overcloud upgrade run* command and similar commands is now deprecated and will be removed. In the future, *tripleo-admin* user will be used always, which will make it work the same as deployment workflow. Bug Fixes ********* * The timeout specified with --timeout will now be honored with config-download. An additional cli arg, --config-download-timeout is also added that can be used to specify a specific timeout (in minutes) just for the config-download part of the deployment. * When requesting the deployment status of a non-existant plan, instead of showing a traceback, show a helpful message indicating there is no status. * openstack overcloud delete PLAN_NAME now instead of deleting the stack and the plan instead it undeploys the plan to maintain the correct status internally and deletes the stack. This is a backwards incompatible change because we are no longer deleting the plan as it was done previously. Changes in python-tripleoclient 10.6.0..10.6.1 ---------------------------------------------- 8e38e214 Improve error message around hieradata override file 550c1a43 Handle tls endpoint for zaqar websocket client 45ba219e Use --preserve-env to keep proxy settings 795fcf70 Use existing stack parameter for DeployIdentifier cbac8240 Remove unused services in tripleo deploy e4b5a003 Add version to python execution 7835a8a3 Fix defaults to templates, roles-file and plan-environment f422425e Fix stack.name to stack.stack_name 425736d6 Don't exit on RUNNING status on delete e8efd140 Lift the limit on ntp servers 247c4be2 undercloud: enable undercloud_config parameter for validations b64127a0 Change the overcloud delete command to use undeploy_plan b36b5a7a Catch websocket connection close errors in cleanup cbac7912 Don't print message in payload if None daafd2fa Stop undercloud upgrade procedure if deployment tasks fail ef00d14e Undercloud: Disable persisting VIPs in /etc/hosts b9171e07 Remove timeout in config-download a0305b45 [Rocky] Fix backport of undercloud online upgrade 97523dba Run online data migrations during undercloud/standalone upgrades 0eea26ec Add docker bridge ip option to the undercloud.conf 3f01b386 Bump the timeout for plan creation workflow to 20 minutes 5047cf5c Only return plans if available from the message f5a1bd50 Add AdditionalArchitectures when configured 26a3e5aa Always run upgrades/updates as tripleo-admin b5f568b4 Ensure that the --template-file option is passed to the kolla builder 69f8b312 Increase the deploy_plan timeout in tripleoclient f3180de6 Fix type of --config-download-timeout a57bd486 Use sync action get_deployment_failures f4b6f4a4 Validate routed networks enabled if multiple subnets in conf c6dbdd0c Honor blacklist during temp key injection f6365dc0 [Rocky only] Fix the docker registry url. 1da8b58f Update deployment status when deploying or failed 8c8f259b Pass stack name to enable_ssh_admin workflow 74424dba Disable SSH password authentication during tripleo-admin enablement. 559365aa Handle non-existant plan when getting deployment status 0704f880 Fix overcloudrc creation in upgrade commands 46fa58c4 Create DeployIdentifier for standalone 95473203 Zaqar on the containerized undercloud should not use Redis 5e03a6c0 Honor timeout with config-download dae01334 Start websocket client before workflows d476a6ca Add a guard to break if no connection 2565aef5 Properly mock unlink 9b9b784f Add --override-ansible-cfg 607d4835 Use workflow config_download_export 8297163f Update default value for ntp servers b8734432 Fix typo in upgrade playbook's name. 54714860 undercloud: support noop management interface for snmp and ipmi Diffstat (except docs and test files) ------------------------------------- .../config-download-timeout-82ab8914f998631f.yaml | 6 + ...ndle-no-deployment-status-a8f73f887f0f158f.yaml | 4 + .../move-to-undeploy-plan-067e6070b5f24fa3.yaml | 7 + ...-always-use-tripleo-admin-53505e9ce380cd4c.yaml | 12 ++ tripleoclient/config/undercloud.py | 6 +- tripleoclient/constants.py | 3 + tripleoclient/plugin.py | 17 +- .../v1/overcloud_config/test_overcloud_config.py | 32 +++- .../v1/overcloud_delete/test_overcloud_delete.py | 37 +++- .../v1/overcloud_deploy/test_overcloud_deploy.py | 190 +++++++++++++++++++-- .../test_overcloud_ffwd_upgrade.py | 7 + .../v1/overcloud_update/test_overcloud_update.py | 10 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 27 ++- tripleoclient/utils.py | 8 +- tripleoclient/v1/container_image.py | 3 +- tripleoclient/v1/overcloud_config.py | 49 +++++- tripleoclient/v1/overcloud_delete.py | 10 +- tripleoclient/v1/overcloud_deploy.py | 73 ++++++-- tripleoclient/v1/overcloud_external_update.py | 6 +- tripleoclient/v1/overcloud_external_upgrade.py | 6 +- tripleoclient/v1/overcloud_ffwd_upgrade.py | 15 +- tripleoclient/v1/overcloud_update.py | 4 +- tripleoclient/v1/overcloud_upgrade.py | 17 +- tripleoclient/v1/tripleo_deploy.py | 122 ++++++++++--- tripleoclient/v1/undercloud_config.py | 43 +++-- tripleoclient/v1/undercloud_preflight.py | 9 + tripleoclient/workflows/deployment.py | 155 +++++++++++++---- tripleoclient/workflows/plan_management.py | 37 ++-- tripleoclient/workflows/scale.py | 5 +- tripleoclient/workflows/stack_management.py | 15 +- tripleoclient/workflows/support.py | 64 +++---- 41 files changed, 1107 insertions(+), 309 deletions(-)

1 0

puppet-murano 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are psyched to announce the release of: puppet-murano 14.3.0: Puppet module for OpenStack Murano This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-murano/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-murano 14.2.0..14.3.0 --------------------------------------- bf5ec22 Prepare Stein M3 1ad62e6 Change keystone v2.0 to v3 e911621 Add release note about Ubuntu py3 upgrade 52f9b4c Use validate_legacy a1a3c25 Change wiki to docs b9eed70 Use puppet 4 compatible mysql functions b6e38f1 Remove Ubuntu Xenial from metadata.json 7f5da7c Fix unit test failed 447b75b Fix lint issue a8a1403 Remove redundantly tested code 7bd2b81 Inherit pyvers from openstacklib::defaults 02986fd Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/config.pp | 8 +-- manifests/db.pp | 7 ++- manifests/db/mysql.pp | 4 +- manifests/db/mysql_cfapi.pp | 4 +- manifests/db/postgresql.pp | 2 +- manifests/db/postgresql_cfapi.pp | 2 +- manifests/db_cfapi.pp | 3 +- manifests/init.pp | 2 +- manifests/params.pp | 7 +-- manifests/policy.pp | 2 +- metadata.json | 15 +++-- .../notes/puppet4-mysql-func-d1dcb51f4869e469.yaml | 4 ++ .../release-note-ubuntu-py3-9934ae2cee93268a.yaml | 10 ++++ spec/classes/murano_cfapi_spec.rb | 4 +- spec/classes/murano_client_spec.rb | 6 +- spec/classes/murano_dashboard_spec.rb | 2 +- spec/classes/murano_db_cfapi_spec.rb | 70 ++++------------------ spec/classes/murano_db_spec.rb | 67 ++------------------- spec/classes/murano_init_spec.rb | 4 +- spec/classes/murano_logging_cfapi_spec.rb | 8 +-- spec/classes/murano_logging_spec.rb | 8 +-- 22 files changed, 73 insertions(+), 168 deletions(-)

1 0

tripleo-heat-templates 9.3.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are excited to announce the release of: tripleo-heat-templates 9.3.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 9.3.0 ^^^^^ New Features ************ * Add new parameter 'GlanceInjectMetadataProperties', to add metadata properties to be injected in image. Add new parameter 'GlanceIgnoreUserRoles', to specify name of user roles to be ignored for injecting metadata properties in the image. * Allow to output HAProxy in a dedicated file * Adds new HAProxySyslogFacility param * Add new TunedCustomProfile parameter which may contain a string in INI format describing a custom tuned profile. Also provide a new environment file for users of hypercoverged Ceph deployments using the Ceph filestore storage backened. The tuned profile is based on heavy I/O load testing. The provided environment file creates /etc/tuned/ceph-filestore-osd-hci/tuned.conf and sets this tuned profile to be active. Not intended for use with Ceph bluestore. Known Issues ************ * Fix misnaming of service in firewall rule for Octavia Health Manager service. Upgrade Notes ************* * Deployers that used "resource_registry" override in their environment to add networks to roles without also using a custom roles data file must create a custom roles data file and add the additional network(s) and use this when upgrading. Previously it was possible to add additional networks to a role without using a custom role by overriding the resource registry, for example: OS::TripleO::Compute::Ports::ExternalPort: ../network/ports/external.yaml Warning: Since resources are no longer added to the plan unless the network is specified in the role, the "resource_registry" override alone is no longer sufficient. * Non-lifecycle stack actions like stack check and cancel update for undercloud are now disabled. Stack check is yet to be migrated to heat convergence architecture and cancel update is not recommended for overcloud. Both are disabled by adding required heat policy for undercloud. 'overcloud update abort' wrapper for stack cancel update had been dropped since few releases. Deprecation Notes ***************** * The NodeDataLookup parameter type was changed from string to json Critical Issues *************** * Networks not specified for roles in roles data ("roles_data.yaml") no longer have Heat resources created. It is now mandatory that custom roles are used when non-default networks is used for a role. Previously it was possible to add additional networks to a role without using a custom role by overriding the resource registry, for example: OS::TripleO::Compute::Ports::ExternalPort: ../network/ports/external.yaml Note: The "resource_registry" override was the only requirement prior to the introduction of *Composable Networks* in the Pike release.Since Pike a custom role would ideally be used when adding networks to roles, but documentation and other guides may not have been properly updated and only mention the "resource_registry" override. Bug Fixes ********* * * Bug 1784967 invalid JSON in NodeDataLookup error message should be more helpful * In other sections we already use the internal endpoints for authentication urls. With this change the auth_uri in the neutron section gets moved from KeystoneV3Admin to KeystoneV3Internal. * CephOSD/Compute nodes crash under memory pressure unless custom tuned profile is used (bug 1800232). Changes in tripleo-heat-templates 9.2.0..9.3.0 ---------------------------------------------- ded38b744 minor update: move VIP before stopping pacemaker on a node 90c456463 Sanitize the uuid string for ceph-ansible 0b42fb17f Disable stack check and cancel update for undercloud 87b16ddbf run docker_puppet_tasks on any role b476c1e9a mysql: sync credentials in running container on password change c8b4fd25f Fix generation of configs that contain password files 9a59f1b0a mysql: do not overwrite password file during docker-puppet 80f48f131 Ensure we get dedicated logging file for HAProxy 5a4431d0a Adding dependency for NetworkDeployment in 'server_resource_name'Deployment e9c6cf100 Handle case change for dmidecode >= 3.1 in Ceph templates 65111909c Change NodeDataLookup type from string to json 30892a6fc Include the DB password in a Mistral environment for creating backups and restores 11b135e7d Catch directories we can not change ownership ea6fc8f95 Run nova_statedir_owner on every run 44586cec5 Add ContainerImagePrepare service to ControllerStorageNfs role 5753352ee Move UpgradeInitCommand and UpgradeInitCommonCommand to run by Ansible 85c419f83 Add stop_grace_period for heat_engine container 98d9b8d82 Autocreate CephAnsibleFetchDirectoryBackup 4017891ab Rely on osa defaults for enabled services 2bd91308a Set virt queue size as 1024 for all OVS-DPDK roles d218493ea Enable ovs-stats by default when using ovs de03b1ca1 Remove gluster settings from previous deployments on re-deploy 93285264e Ensure logs folder is created in prep hosts tasks. d95b5b9a7 Revert "Create missing directories before mounting them" 7d24a21b8 Revert "Set proper setype for service directories" 4208b0474 Revert "docker: wire SELinuxMode with Ansible vars" 7f09fc9a3 Add HorizonSecureCookies to environments/ssl/enable-tls.yaml caf97046f Restart openshift master services after stack update 1c96500c5 Rework the generated openshift-ansible playbook b49ce79c1 Fix address for glusterfs container images 61ac7d307 Enable image inject metadata properties & user roles to be ignored 606ce4bc5 Set proper setype for service directories 666573d15 Create missing directories before mounting them 9a003d0c8 Configure http/https on OVN Metadata service to talk to Nova 048131984 Enable ceilometer-agent-compute health check 45a118b0f Enable health check for OVN containers 0e3afdce4 Enable fluentd health check f37b5e062 Bind mount /var/lib/iscsi in containers using iSCSI 3a701cce4 Let the operator manage openshift updates and upgrades 3cb95e163 Update auth parameters 8bdef1e7b Fix typo in octavia upgrade_tasks 836b1b332 Reno only - Check for available networks for a role 9d4dce3ce Do not dereference .stdout if dmidecode is missing 6652aaa47 Enable health check for Ironic inspector services 38e16618b Enable Sahara API health check 220cb3998 docker: wire SELinuxMode with Ansible vars f750ab67e puppet_config for rabbitmq_bundle needs file_line 4e299d65a Allow customization of more openshift-ansible vars c2504ed9b Add missing role_specific tag for NUMA aware vswitches params ff7c6e285 Add TunedCustomProfile parameter and HCI Ceph filestore environment 7e9adc62e Move [neutron] auth_url to KeystoneV3Internal 1132612f7 Fix access to /var/lib/haproxy when SELinux is enabled b7167b072 Put user data in the main stack ea52821ca Spliting compact services in multiples lines a74808faf Fix misnaming of service in firewall rule 6e0ff00b0 Fix Octavia hieradata keys 582182f39 ceilometer: --skip-metering-database is gone b18740ad4 Set correct project name for designate-neutron integration 3c739c3cd Add /v2 suffix to Designate uris 6c4de510d Split designate envs 4911af207 Add sample designate environment for ha 81f119363 Don't configure BIND to listen on localhost deec7a6bf Pass in rndc key to Designate deployment 12f4b7192 Open designate-mdns ports in firewall 146398d0b Run designate pool update only on bootstrap node 828821ae7 Configure rndc to listen on internal_api network 6167ffba0 Enable configuration of Designate's pools.yaml c42247b70 Exposing NeutronDhcpOvsIntegrationBridge cbf3364a8 Per role Numa aware vswitch configuration 10074982e Add role definition for ComputeOvsDpdkSriov role e3b4f927c Remove NeutronServicePlugins from octavia environment files Diffstat (except docs and test files) ------------------------------------- .../scenario003-multinode-containers.yaml | 47 ++++++ common/deploy-steps-tasks.yaml | 70 ++++----- common/services.yaml | 5 +- deployed-server/deployed-server.yaml | 21 --- .../services/logging/files/opendaylight-api.yaml | 11 +- environments/designate-config-ha.yaml | 127 +++++++++++++++ environments/designate-config.yaml | 69 ++++++++ environments/enable-designate.yaml | 16 +- environments/services-baremetal/octavia.yaml | 1 - environments/services/octavia.yaml | 1 - environments/ssl/enable-tls.yaml | 4 + environments/tuned-ceph-filestore-hci.yaml | 13 ++ environments/undercloud.yaml | 6 + .../nova_metadata/krb-service-principals.j2.yaml | 4 +- extraconfig/post_deploy/undercloud_post.sh | 4 +- extraconfig/post_deploy/undercloud_post.yaml | 6 + extraconfig/services/openshift-cns.yaml | 39 +---- extraconfig/services/openshift-master.yaml | 58 ++++--- network/endpoints/endpoint_data.yaml | 6 + network/endpoints/endpoint_map.yaml | 3 + overcloud.j2.yaml | 28 ++++ puppet/extraconfig/pre_deploy/per_node.yaml | 8 +- puppet/role.role.j2.yaml | 61 +------- puppet/services/designate-api.yaml | 7 +- puppet/services/designate-central.yaml | 6 +- puppet/services/designate-mdns.yaml | 9 ++ puppet/services/designate-worker.yaml | 32 +++- puppet/services/glance-api.yaml | 10 ++ puppet/services/haproxy.yaml | 5 + puppet/services/manila-scheduler.yaml | 11 +- puppet/services/neutron-dhcp.yaml | 9 ++ puppet/services/neutron-ovs-agent.yaml | 4 + puppet/services/nova-base.yaml | 2 +- puppet/services/nova-compute.yaml | 4 + puppet/services/octavia-api.yaml | 11 ++ puppet/services/octavia-controller.yaml | 88 +++++++++++ puppet/services/octavia-health-manager.yaml | 13 +- puppet/services/octavia-housekeeping.yaml | 13 +- puppet/services/octavia-worker.yaml | 47 ++---- puppet/services/ovn-metadata.yaml | 15 ++ puppet/services/pacemaker.yaml | 20 +++ puppet/services/pacemaker/haproxy.yaml | 10 ++ puppet/services/tripleo-packages.yaml | 44 +++++- puppet/services/tuned.yaml | 15 +- ...-availble-network-in-role-7860d8d5cd1df4b0.yaml | 34 ++++ ...eat-non-lifecycle-actions-d551fe4551d71770.yaml | 10 ++ ...nject-metadata-properties-72cdc946748e9b1b.yaml | 7 + ...lth-manager-firewall-rule-cdffe31d580ecf4b.yaml | 4 + .../notes/haproxy-log-2805e3697cbadf49.yaml | 4 + ...ata_lookup_string_to_json-69362e93d862bd87.yaml | 7 + ..._url_to_internal_endpoint-aaf0e550750335eb.yaml | 7 + .../tuned_custom_profile-25d1f4a2bc217216.yaml | 15 ++ roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 60 +++++++ roles/ComputeOvsDpdkSriovRT.yaml | 61 ++++++++ roles/ControllerStorageNfs.yaml | 1 + sample-env-generator/enable-services.yaml | 174 ++++++++++++++++++++- sample-env-generator/ssl.yaml | 4 + 150 files changed, 1787 insertions(+), 527 deletions(-)

1 0

puppet-gnocchi 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are psyched to announce the release of: puppet-gnocchi 14.3.0: Puppet module for OpenStack Gnocchi This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * gnocchi::logging is now not included in init class by default. * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. * The deprecated parameter auth_uri is now removed, please use www_authenticate_uri. Deprecation Notes ***************** * check_revocations_for_cached option is now deprecated for removal, the parameter has no effect. * hash_algorithms option is now deprecated for removal, the parameter has no effect. Changes in puppet-gnocchi 14.2.0..14.3.0 ---------------------------------------- 0fd08ad Prepare Stein M3 28d4966 Add release note about Ubuntu py3 upgrade 12dc265 Use validate_legacy 2a8829a Service_token_roles_required missing in the server config file 754abf0 Use puppet 4 compatible mysql functions bf5ce7f Remove Ubuntu Xenial from metadata.json 5bdc602 Fix lint issue a0fccec Change ubuntu to py3 6b21f1b Modify puppet version 4 to 5 7d11d77 fix wrong spelling of "configuration" Diffstat (except docs and test files) ------------------------------------- manifests/config.pp | 2 +- manifests/db.pp | 4 +-- manifests/db/mysql.pp | 4 +-- manifests/keystone/authtoken.pp | 8 +++++ manifests/params.pp | 38 +++++++--------------- manifests/policy.pp | 2 +- manifests/storage.pp | 9 ----- manifests/storage/ceph.pp | 10 ------ metadata.json | 15 +++++---- .../notes/puppet4-mysql-func-4d364d08e159b230.yaml | 4 +++ .../release-note-ubuntu-py3-4f70daa32cd6f04e.yaml | 10 ++++++ ...vice_token_roles_required-a35dbab612e8d796.yaml | 5 +++ spec/classes/gnocchi_api_spec.rb | 6 +--- spec/classes/gnocchi_client_spec.rb | 25 +++++--------- spec/classes/gnocchi_db_spec.rb | 7 +--- spec/classes/gnocchi_keystone_authtoken_spec.rb | 3 ++ spec/classes/gnocchi_logging_spec.rb | 12 +++---- spec/classes/gnocchi_storage_ceph_spec.rb | 20 ------------ spec/classes/gnocchi_storage_spec.rb | 28 ++-------------- spec/classes/gnocchi_wsgi_apache_spec.rb | 7 +--- 20 files changed, 77 insertions(+), 142 deletions(-)

1 0