March 2019 - Release-announce - lists.openstack.org

paunch 3.2.1 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are satisfied to announce the release of: paunch 3.2.1: Utility to launch and manage containers using YAML based configuration data This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through launchpad: https://bugs.launchpad.net/paunch For more details, please see below. Changes in paunch 3.2.0..3.2.1 ------------------------------ e52fdc0 Fix comparing dictionaries for changes detection 1471e97 import zuul job settings from project-config 845e07d Update .gitreview for stable/rocky dbac03b Adjust tenacity mock Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + paunch/builder/compose1.py | 3 ++- zuul.d/layout.yaml | 5 ++++- 4 files changed, 27 insertions(+), 10 deletions(-)

1 0

os-net-config 9.3.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We contentedly announce the release of: os-net-config 9.3.0: OpenStack network configuration This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. 9.3.0 ^^^^^ New Features ************ * Some changes can now be made to interfaces without restarting. Changes to routes, IP addresses, netmask, or MTU will now be applied using iproute2 without restarting the interface, and the ifcfg file will be updated. Bug Fixes ********* * When the ivs interface (or nfvswitch) configuration changes, ivs (or nvfswitch) needs to be restarted in order to pick up the new configuration. * The ovs-appctl command may fail, particularly when setting an interface as a slave in a bond if the primary interface is not yet up. Retry the ovs-appctl command and log a failure if the command still fails. Other Notes *********** * The schema now allow the "routes" option to be an empty list. (Previously at least one route was was required.) Bug: *1792992 <https://bugs.launchpad.net/os-net-config/+bug/1792992>_*. * Since this change uses iproute2 to make changes to live interfaces, it does not allow MTU on DPDK interfaces to be modified in place. DPDK requires that ovs-vsctl be run to modify MTU. For DPDK interfaces, MTU changes will result in an interface restart. Changes in os-net-config 9.2.0..9.3.0 ------------------------------------- eac37bf Updating requirements for pyudev 8e9242b NIC-Partitioning: DPDK devices comes up properly after reboot 6d96172 Sample templates for linux_bond, ovs_bond, dpdkbond using VFs 8513cac NIC Partitioning works with NM enabled f7007b6 Fix - restart VLAN interface on underlying device change 6252d77 Apply IP/netmask/route/MTU changes without bouncing interfaces. e78d45f Retry ovs-appctl command bedb54a Allow list_of_routes to be [] in config 0571a6b Restart ivs/nvfswitch after config file is updated c79a3ba import zuul job settings from project-config Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/sriov_pf.json | 77 +++- etc/os-net-config/samples/sriov_pf.yaml | 92 +++- etc/os-net-config/samples/sriov_pf_ovs_dpdk.json | 57 ++- etc/os-net-config/samples/sriov_pf_ovs_dpdk.yaml | 66 ++- os_net_config/__init__.py | 16 +- os_net_config/cli.py | 16 +- os_net_config/impl_ifcfg.py | 505 +++++++++++++++++---- os_net_config/objects.py | 77 +++- os_net_config/schema.yaml | 3 +- os_net_config/utils.py | 16 +- ...ist-of-routes-to-be-empty-323690796760630d.yaml | 6 + ...interface-without-restart-d55949572017d52f.yaml | 12 + ...vs-nvfswitch-after-change-0825ea78aae8f138.yaml | 5 + .../notes/retry_ovs-appctl-6734b087ab6db80b.yaml | 6 + requirements.txt | 2 +- zuul.d/layout.yaml | 13 +- 19 files changed, 1274 insertions(+), 142 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index baebf9f..14c6a96 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ jsonschema>=2.0.0,<3.0.0 # MIT -pyudev>=0.15 +pyudev>=0.16.1 # LGPLv2.1+

1 0

puppet-openstack_extras 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are pumped to announce the release of: puppet-openstack_extras 14.3.0: Puppet module for OpenStack Openstack_extras This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. Upgrade Notes ************* * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-openstack_extras 14.2.0..14.3.0 ------------------------------------------------- b197188 Prepare Stein M3 dd3dc4d Add release note about Ubuntu py3 upgrade 9330559 Use validate_legacy 166d8f9 Remove Ubuntu Xenial from metadata.json 5210621 Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- manifests/repo/redhat/redhat.pp | 18 +++++++++--------- metadata.json | 5 ++--- .../release-note-ubuntu-py3-3fea08087d957b35.yaml | 10 ++++++++++ 3 files changed, 21 insertions(+), 12 deletions(-)

1 0

puppet-trove 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are happy to announce the release of: puppet-trove 14.3.0: Puppet module for OpenStack Trove This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-trove/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-trove 14.2.0..14.3.0 -------------------------------------- fc5ad42 Prepare Stein M3 049b28d Change keystone v2.0 to v3 c79d187 Add release note about Ubuntu py3 upgrade 880b5e0 Use validate_legacy 4212800 Service_token_roles_required missing in the server config file c2c5c5f Use puppet 4 compatible mysql functions d3e724a Remove Ubuntu Xenial from metadata.json dcc0c9b Fix lint issue 51affa5 Remove redundantly tested code 4856ae2 Inherit pyvers from openstacklib::defaults 6f318cb Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- examples/site.pp | 6 +- manifests/config.pp | 11 ++- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/db/postgresql.pp | 2 +- manifests/keystone/authtoken.pp | 8 +++ manifests/params.pp | 8 +-- manifests/policy.pp | 2 +- metadata.json | 15 ++-- .../notes/puppet4-mysql-func-a6bf94ee5cb5980e.yaml | 4 ++ .../release-note-ubuntu-py3-73f045d7443fc9a6.yaml | 10 +++ ...vice_token_roles_required-a2d688ca8fc88039.yaml | 5 ++ spec/classes/trove_client_spec.rb | 6 +- spec/classes/trove_db_spec.rb | 80 +++------------------- spec/classes/trove_keystone_authtoken_spec.rb | 3 + spec/classes/trove_logging_spec.rb | 34 ++++----- 16 files changed, 82 insertions(+), 120 deletions(-)

1 0

puppet-tacker 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are happy to announce the release of: puppet-tacker 14.3.0: Puppet module for OpenStack Tacker This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-tacker/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-tacker 14.2.0..14.3.0 --------------------------------------- 62ea00c Prepare Stein M3 ebbb51c Add release note about Ubuntu py3 upgrade 916bbb4 Use validate_legacy c4578fe Service_token_roles_required missing in the server config file b010dae Change wiki to docs 477d302 Use puppet 4 compatible mysql functions 49737d7 Remove Ubuntu Xenial from metadata.json cc9a9fd Fix lint issue 72ad68c Remove redundantly tested code 34fc209 Inherit pyvers from openstacklib::defaults db576c4 Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/config.pp | 2 +- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/keystone/authtoken.pp | 8 +++ manifests/params.pp | 11 +--- manifests/policy.pp | 2 +- metadata.json | 15 +++-- .../notes/puppet4-mysql-func-6da2140a20ae6d64.yaml | 4 ++ .../release-note-ubuntu-py3-7df0383f755751df.yaml | 10 +++ ...vice_token_roles_required-8026d50ee62b8a3e.yaml | 5 ++ spec/classes/tacker_client_spec.rb | 6 +- spec/classes/tacker_db_spec.rb | 77 +++------------------- spec/classes/tacker_keystone_authtoken_spec.rb | 3 + spec/classes/tacker_logging_spec.rb | 34 +++++----- 15 files changed, 76 insertions(+), 111 deletions(-)

1 0

tripleo-validations 10.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are delighted to announce the release of: tripleo-validations 10.3.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/openstack/tripleo- validations For more details, please see below. Changes in tripleo-validations 10.2.0..10.3.0 --------------------------------------------- bbb5f99 Update undercloud minimum ram 53f6bcd Ignore new ansible-lint pipefail rule 5d5e096 Update generate_validations_doc.py script 39f139c Add node disks validation 3b54eea Fix introspection data lookup 51c4a07 Fix the misspelling of "interface" a624601 Address python3 string issues with subprocess b1a204a Fix minor Ansible syntax abdd15f Fix overcloud neutron sanity validation 8884edc Fix the containerized location of ceilometer ceilometer.conf 171e896 Update the bugs link to storyboard Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 +- requirements.txt | 1 + tools/ansible-lint.sh | 4 +- validations/library/check_package_update.py | 3 +- validations/library/hiera.py | 2 +- validations/library/node_disks.py | 158 +++++++++++++++++++++ validations/library/overcloudrc.py | 4 +- validations/library/switch_vlans.py | 8 +- validations/lookup_plugins/introspection_data.py | 27 ++-- validations/lookup_plugins/nova_flavors.py | 14 +- validations/neutron-sanity-check.yaml | 1 - validations/node-disks.yaml | 25 ++++ validations/undercloud-debug.yaml | 2 +- validations/undercloud-ram.yaml | 4 +- validations/undercloud-tokenflush.yaml | 9 +- 20 files changed, 432 insertions(+), 59 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c36aff2..b5474ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ python-ironicclient>=2.3.0 # Apache-2.0 +python-ironic-inspector-client>=3.1.1 # Apache-2.0

1 0

puppet-mistral 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are ecstatic to announce the release of: puppet-mistral 14.3.0: Puppet module for OpenStack Mistral This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-mistral/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-mistral 14.2.0..14.3.0 ---------------------------------------- b1f11ff Prepare Stein M3 adac4fc Add release note about Ubuntu py3 upgrade 6795430 Use validate_legacy 80ad0c8 Service_token_roles_required missing in the server config file 6e75a91 Add Limitations dff1b24 Add the mistral module affects 86ce805 Change wiki to docs f550dfc Use puppet 4 compatible mysql functions 979490a Remove Ubuntu Xenial from metadata.json 1d45f57 Fix lint issue 8e4ba4f Remove extra spaces 6760510 Remove redundantly tested code dddb501 Inherit pyvers from openstacklib::defaults 76de1bc Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 13 +++++- manifests/config.pp | 2 +- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/keystone/auth.pp | 2 +- manifests/keystone/authtoken.pp | 8 ++++ manifests/params.pp | 8 +--- manifests/policy.pp | 2 +- metadata.json | 15 ++++--- .../notes/puppet4-mysql-func-9b2078d1c2e1d0db.yaml | 4 ++ .../release-note-ubuntu-py3-4545fea5c4a994d6.yaml | 10 +++++ ...vice_token_roles_required-84c00ff15c72c2e5.yaml | 5 +++ spec/classes/mistral_client_spec.rb | 6 +-- spec/classes/mistral_db_spec.rb | 50 +++------------------- spec/classes/mistral_keystone_authtoken_spec.rb | 3 ++ spec/classes/mistral_logging_spec.rb | 32 +++++++------- 16 files changed, 82 insertions(+), 86 deletions(-)

1 0

tripleo-image-elements 10.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are glad to announce the release of: tripleo-image-elements 10.3.0: Disk image builder elements for deploying OpenStack. This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 10.2.0..10.3.0 ------------------------------------------------ 08596fd4 [Configuration] Add missing py37 and corrected default envlist. b867aae2 Change openstack-dev to openstack-discuss 29cee7f9 Install rsync before os-apply-config 0cdcd5d5 Update min tox version to 2.0 Diffstat (except docs and test files) ------------------------------------- elements/os-apply-config/package-installs.yaml | 2 ++ setup.cfg | 2 +- tox.ini | 2 +- zuul.d/layout.yaml | 1 + 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-vitrage 4.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We exuberantly announce the release of: puppet-vitrage 4.3.0: Puppet module for OpenStack Vitrage This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-vitrage/ For more details, please see below. 4.3.0 ^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-vitrage 4.2.0..4.3.0 -------------------------------------- 5d2e959 Prepare Stein M3 bfa686f Use validate_legacy 89ca7a0 Service_token_roles_required missing in the server config file 3af0316 Add release note about Ubuntu py3 upgrade 7579790 Remove Unknown variables 899f0ef Change wiki to docs 2f08f78 Use puppet 4 compatible mysql functions e5a32a8 Remove Ubuntu Xenial from metadata.json 1d362d0 Fix lint issue 9a22663 Remove redundantly tested code 33c8094 Inherit pyvers from openstacklib::defaults 8d11cff Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/config.pp | 4 +- manifests/db.pp | 26 +++----- manifests/db/mysql.pp | 4 +- manifests/keystone/authtoken.pp | 8 +++ manifests/params.pp | 8 +-- manifests/policy.pp | 3 +- metadata.json | 15 +++-- .../notes/puppet4-mysql-func-48990f554c142bf8.yaml | 4 ++ .../release-note-ubuntu-py3-7f6e78b71b71afbb.yaml | 10 +++ ...vice_token_roles_required-948303c22a9495b7.yaml | 5 ++ spec/classes/vitrage_client_spec.rb | 6 +- spec/classes/vitrage_db_spec.rb | 72 +++------------------- spec/classes/vitrage_keystone_authtoken_spec.rb | 3 + spec/classes/vitrage_logging_spec.rb | 32 +++++----- 15 files changed, 79 insertions(+), 123 deletions(-)

1 0

puppet-keystone 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are excited to announce the release of: puppet-keystone 14.3.0: Puppet module for OpenStack Keystone This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-keystone/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. * The keystone::token_driver parameter which has had no effect that past couple of releases and is now deprecated. This parameter if it was set to memcache would install the appropriate python-memcache package. Now that this is removed you need to ensure keystone::manage_backend_package is set properly if you have caching enabled since that manages that package now. The default value for manage_backend_package is true so if you don't set it explicitly to false there is no change required on your part. Deprecation Notes ***************** * The keystone::token_driver is now deprecated, has no effect and will be removed in a future release. Bug Fixes ********* * Fixed a bug where the keystone_user resource would test the password with a disabled project causing it to think the password was changed when it actually wasn't. Other Notes *********** * The default interface for the keystone providers is to use the "public" interface. This was changed from the "admin" one, since v3 doesn't require it, and the keystone team even discourages using it. Changes in puppet-keystone 14.2.0..14.3.0 ----------------------------------------- 49207f4 Prepare Stein M3 7fea7a2 Use validate_legacy 4ec4aca Change keystone v2.0 to v3 92a3bc4 Add release note about Ubuntu py3 upgrade 16f2265 Use puppet 4 compatible mysql functions cb03afe Remove Ubuntu Xenial from metadata.json c2456fc Keystone_user should not use disabled projects 58dfc07 Use "public" endpoint for the authentication URL for the keystone provider cda95ac Fix keystone::client testing 94f56fb Inherit pyvers from openstacklib::defaults d4651f0 Fix lint issue 9f8d234 Deprecate keystone::token_driver 61691d9 Remove redundantly tested code 45b5c25 Modify puppet version 4 to 5 d0f6238 Remove keystone::disable_admin_token_auth from README 5fb09e6 Improve release note for port 35357 removal Diffstat (except docs and test files) ------------------------------------- README.md | 5 - examples/apache_dropin.pp | 8 +- examples/apache_with_paths.pp | 8 +- examples/k2k_sp_shib.pp | 8 +- lib/puppet/provider/keystone.rb | 16 +- lib/puppet/provider/keystone_user/openstack.rb | 12 +- manifests/config.pp | 3 +- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/federation/mellon.pp | 2 +- manifests/federation/shibboleth.pp | 2 +- manifests/init.pp | 204 ++++++++++----------- manifests/ldap_backend.pp | 3 +- manifests/params.pp | 7 +- manifests/policy.pp | 2 +- manifests/resource/authtoken.pp | 6 +- manifests/resource/service_identity.pp | 3 +- metadata.json | 13 +- .../default-public-interface-47f29ffc8612d589.yaml | 6 + ...keystone_user-bug-1814906-06781a797cd2e051.yaml | 6 + .../notes/puppet4-mysql-func-d8adf965e1f5ee8f.yaml | 4 + .../release-note-ubuntu-py3-36f43a17c66cd38c.yaml | 10 + .../notes/remove-port-35357-ba49d2cf102f8c38.yaml | 16 +- .../remove-token_driver-fbe7964f9c58d42d.yaml | 14 ++ spec/classes/keystone_client_spec.rb | 66 ++++--- spec/classes/keystone_db_spec.rb | 96 ++-------- spec/classes/keystone_init_spec.rb | 33 +--- spec/classes/keystone_logging_spec.rb | 34 ++-- spec/defines/keystone_ldap_backend_spec.rb | 6 +- spec/defines/keystone_resource_authtoken_spec.rb | 12 +- .../keystone_resource_service_identity_spec.rb | 8 +- spec/spec_helper.rb | 2 +- spec/unit/provider/keystone_spec.rb | 54 +++--- spec/unit/provider/keystone_user/openstack_spec.rb | 29 +++ 34 files changed, 353 insertions(+), 353 deletions(-)

1 0

instack-undercloud 9.5.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are happy to announce the release of: instack-undercloud 9.5.0: instack-undercloud This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. Changes in instack-undercloud 9.4.0..9.5.0 ------------------------------------------ 227ce3fc Get the stack name if possible before running the validations group 0b900210 Fix instack-undercloud PEP8 failures and requirements constraints 15cda5ad Include missing config classes Diffstat (except docs and test files) ------------------------------------- .../puppet-stack-config/puppet-stack-config.pp | 9 ++ instack_undercloud/undercloud.py | 59 ++++++++-- lower-constraints.txt | 8 +- requirements.txt | 1 + test-requirements.txt | 2 +- zuul.d/project.yaml | 1 - 7 files changed, 174 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3502afb4..9e6b5a00 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ os-client-config>=1.28.0 # Apache-2.0 +openstacksdk>=0.17.2 diff --git a/test-requirements.txt b/test-requirements.txt index 25a9112c..550e2992 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ openstackdocstheme>=1.18.1 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.7.6 # BSD

1 0

puppet-sahara 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We joyfully announce the release of: puppet-sahara 14.3.0: Puppet module for OpenStack Sahara This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-sahara/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Add the log_file option for logging. * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * The now deprecated sahara::service::all class that manages the sahara-all service is not recommended to be used as the sahara-all service has minimal testing upstream. It's recommended that deployments move to using the separate API and engine services which can be deployed like shown in the puppet-sahara/examples/basic.pp file. Please see below on how to move away from the sahara-all service. * Set "`enabled`" to "`false`" in "`sahara::service::all`" will stop the sahara-all service * Setup "`sahara::service::api`" and "`sahara::wsgi::apache`" classes * Setup "`sahara::service::engine`" class Full example on how this is done can be seen in the puppet- sahara/examples/basic.pp examples file. * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Deprecation Notes ***************** * The sahara::service::all class that manages the sahara-all service is deprecated. It's recommended to not use the sahara-all service and instead use the separated API and engine services, the sahara- all service has minimal testing upstream. Changes in puppet-sahara 14.2.0..14.3.0 --------------------------------------- eda812a Prepare Stein M3 312338f Add log_file parameter ae69930 Change keystone v2.0 to v3 3347e6f Add release note about Ubuntu py3 upgrade 4a4c572 Use validate_legacy efbeaaa Service_token_roles_required missing in the server config file 209182e Change wiki to docs 052c9ec Use puppet 4 compatible mysql functions 843daba Remove Ubuntu Xenial from metadata.json 690de27 Deprecate the sahara-all service 9b5d759 Deploy Sahara with unversioned endpoints 78e8e8e Remove redundantly tested code 08ce70d Inherit pyvers from openstacklib::defaults d023feb Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- examples/basic.pp | 33 ++++++++- lib/puppet/type/sahara_cluster_template.rb | 1 + lib/puppet/type/sahara_node_group_template.rb | 1 + manifests/config.pp | 4 +- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/keystone/auth.pp | 18 ++--- manifests/keystone/authtoken.pp | 8 +++ manifests/logging.pp | 6 ++ manifests/params.pp | 8 +-- manifests/policy.pp | 2 +- manifests/service/all.pp | 3 + metadata.json | 15 ++-- .../add-log_file-for-logging-98ab323c1e1528b8.yaml | 4 ++ .../deprecate-sahara-all-7b730356a653c0ab.yaml | 20 ++++++ .../notes/puppet4-mysql-func-d65ac0d184e963e5.yaml | 4 ++ .../release-note-ubuntu-py3-a6d73eb76b4cdc0c.yaml | 10 +++ ...vice_token_roles_required-b6513e923d43f2b7.yaml | 5 ++ spec/classes/sahara_all_spec.rb | 1 + spec/classes/sahara_client_spec.rb | 6 +- spec/classes/sahara_db_spec.rb | 79 ++-------------------- spec/classes/sahara_keystone_auth_spec.rb | 18 ++--- spec/classes/sahara_keystone_authtoken_spec.rb | 3 + spec/classes/sahara_logging_spec.rb | 3 + spec/unit/provider/sahara_spec.rb | 4 +- 26 files changed, 147 insertions(+), 119 deletions(-)

1 0

puppet-tripleo 9.4.0 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are excited to announce the release of: puppet-tripleo 9.4.0: Puppet module for OpenStack TripleO This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 9.4.0 ^^^^^ New Features ************ * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * Add support to enable ODL deployment on IPv6 networks * Added Dell EMC SC multipath support This change adds support for cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer. * Add new parameter haproxy_log_facility. * Adds support to configure disjoint address pools for Ironic Inspector. When Inspector is deployed as a HA service disjoint address pools should be served by the DHCP instances to avoid address conflict issues. Bug Fixes ********* * Masquerading and forwarding rules are now correctly created when using routed networks. (See bug: 1797455 (https://bugs.launchpad.net/tripleo/+bug/1797455).) * With nova metadata api running via wsgi we do not need the ssl proxy when configure tls-everywhere as we terminate ssl direct in the httpd wsgi. With this change we only create the ssl proxy vhost if we do not run nova metadata via wsgi. Changes in puppet-tripleo 9.3.0..9.4.0 -------------------------------------- ae1f373f Prepare 9.4.0 (Rocky) release d62923b8 Support cephfs_volume_mode parameter d2c020c6 Change haproxy mode to http for octavia 4ddb8a6b Prepare 9.3.1 (Rocky) release f6ff6ca9 neutron dhcpd: Add script for certmonger postsave_cmd 381a1e0a novnc-proxy: Remove default post-save command for certmonger 763467d7 redis: Remove default post-save command for certmonger 219c0f48 rabbitmq: Remove default post-save command for certmonger f7c71486 httpd: Remove default post-save command for certmonger 4fcbe24b Reload HAProxy when certificate is renewed ed2c3d22 mysql: fix root password update for containerized mysql b35b8076 mysql: use clustercheck credentials to poll galera state c5977cd0 Allow to set log facility for HAProxy 54f9be0a Configure the Metadata Agent only when enable_metadata_agent is set e8adf4b3 Create barbican's creator role by default 035c834e Explicitly set certmonger's CA cert's permissions 60a0f973 Filter apache_certificates_specs if hostname is empty 9c35d049 Configure switchedv while there is no vfs bounded 608096fb Remove some of the excessive rabbitmq bundle logging 33063cdd Make sure we do not match multiple remotes when waiting for them fa04ef8f Ironic Inspector - disjoint ip range(s) for HA d983e954 Add additional tuning options for mariadb/galera 19eb214c Allow user to define a custom tuned profile ee80be0c Increase websocket timeout fbbca5c0 Include octavia::controller fd933ab3 Set balance to source for openshift_master endpoints 19c97f0b Switch scenarios to non-voting 68301f4f Dell EMC SC: Add use_multipath_for_image_xfer e816143c Pass variable from puppet-tripleo to puppet-neutron 34bf798e Enable disablereuse option in Zaqar proxy backend 1c6d1831 Include ::cinder::nova in cinder's configuration 0f5e96c7 Switch stable scenarios to voting 6ec97c70 Make sure that the _member_ role is assigned to admin. 2a3225af Fix Undercloud masquerading firewall rules b6ed72c6 Pin puppet-snmp daa67198 Disable puppet-5 jobs c6f8f9bf ceilometer: escape % in crontab 148347b2 Fix ceph-nfs duplicate property 78b51d07 Add support for ODL-OVS IPv6 deployment 123be292 Fix nic_alias fact error 80180aab Introduce alternative to get ip_addresses and server_names b3d4ca0b Copytruncate containerized logrotate configuration 91e1ff09 Do not create metadata ssl proxy if we have metadata api via httpd wsgi 6805fcad Make sure that ceph-nfs and the VIP start in the right order 681e07a7 Disable chrony-wait 501f10c4 adding deployment_type fact in support 0070ba91 Fix fluentd multifile problem. afef5413 Enable TLS in the internal network for Octavia API a6eaab14 Make sure rhel-plugin-push.service is stopped after pacemaker stops 05c72215 import zuul job settings from project-config aeb5ce50 Update Gemfile for stable/rocky 0134f91b Conditionalize rndc changes cda96f8b add scenario003 tests when designate changes 9ca548e0 Update UPPER_CONSTRAINTS_FILE for stable/rocky 0a4a7961 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 1 + Puppetfile_extras | 6 +- files/certmonger-haproxy-refresh.sh | 51 +++++++++++++++ files/certmonger-neutron-dhcpd-refresh.sh | 21 +++++++ files/certmonger-novnc-proxy-refresh.sh | 17 +++++ files/certmonger-rabbitmq-refresh.sh | 17 +++++ files/certmonger-redis-refresh.sh | 14 +++++ lib/facter/nic_alias.rb | 11 +++- lib/puppet/functions/add_brackets.rb | 14 +++++ lib/puppet/provider/sriov_vf_config/numvfs.rb | 60 +----------------- manifests/certmonger/ca/local.pp | 7 +++ manifests/certmonger/haproxy.pp | 29 +++++---- manifests/certmonger/httpd.pp | 3 +- manifests/certmonger/neutron.pp | 8 ++- manifests/certmonger/novnc_proxy.pp | 10 ++- manifests/certmonger/rabbitmq.pp | 11 +++- manifests/certmonger/redis.pp | 8 ++- manifests/fencing.pp | 2 +- manifests/haproxy.pp | 13 +++- manifests/haproxy/endpoint.pp | 24 +++++++- manifests/host/sriov/numvfs_persistence.pp | 7 ++- manifests/masquerade_networks.pp | 24 +++++--- manifests/profile/base/ceilometer/expirer.pp | 2 +- manifests/profile/base/certmonger_user.pp | 38 +++++++----- manifests/profile/base/cinder.pp | 1 + manifests/profile/base/cinder/volume/dellsc.pp | 29 ++++----- manifests/profile/base/database/mysql.pp | 19 ++++++ manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/designate.pp | 20 +++--- manifests/profile/base/designate/worker.pp | 10 +-- manifests/profile/base/ironic_inspector.pp | 51 +++++++++++++-- manifests/profile/base/keystone.pp | 13 +++- .../base/logging/fluentd/fluentd_service.pp | 4 +- manifests/profile/base/logging/logrotate.pp | 5 ++ manifests/profile/base/manila/share.pp | 1 + manifests/profile/base/neutron/agents/nuage.pp | 27 +++++--- .../base/neutron/plugins/ml2/opendaylight.pp | 9 +++ .../base/neutron/plugins/ovs/opendaylight.pp | 26 ++++++-- manifests/profile/base/nova/api.pp | 2 +- manifests/profile/base/octavia/api.pp | 72 +++++++++++++++++++++- manifests/profile/base/octavia/health_manager.pp | 1 + manifests/profile/base/octavia/housekeeping.pp | 1 + manifests/profile/base/octavia/worker.pp | 1 + manifests/profile/base/pacemaker.pp | 7 ++- manifests/profile/base/pacemaker_remote.pp | 5 ++ manifests/profile/base/time/ntp.pp | 5 ++ manifests/profile/base/tuned.pp | 22 ++++++- manifests/profile/pacemaker/ceph_nfs.pp | 38 +++++++++--- .../profile/pacemaker/database/mysql_bundle.pp | 37 +++++++++-- manifests/profile/pacemaker/rabbitmq_bundle.pp | 14 +++++ manifests/ui.pp | 5 +- metadata.json | 2 +- ...eph_volume_mode-parameter-220b1026aebd9e3b.yaml | 5 ++ ...pport-for-IPv6-deployment-988400c781b92066.yaml | 4 ++ .../notes/dellsc-driver-b7cd300a24a64b01.yaml | 5 ++ .../fix-masquerade-networks-c9ab4affb17627e1.yaml | 6 ++ .../notes/haproxy-facility-8196cc8e1299d79b.yaml | 3 + ...joint-inspection-ip-range-f10297dd32f3721b.yaml | 6 ++ ...otate-copytruncate-hourly-f0851bec551f5f5f.yaml | 5 ++ .../nova-metadata-wsgi-ssl-a64c2b9a99deb7a9.yaml | 7 +++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 8 +++ spec/classes/tripleo_haproxy_spec.rb | 26 ++++++++ spec/classes/tripleo_masquerade_networks_spec.rb | 15 ++++- ...tripleo_profile_base_ceilometer_expirer_spec.rb | 2 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 6 ++ ...pleo_profile_base_database_mysql_client_spec.rb | 22 +++++++ .../tripleo_profile_base_logging_fluentd_spec.rb | 29 +++++++++ ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 59 ++++++++++++++++-- .../tripleo_profile_base_octavia_api_spec.rb | 31 ++++++++++ spec/classes/tripleo_profile_base_tuned_spec.rb | 23 ++++++- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 29 --------- templates/logrotate/containers_logrotate.conf.erb | 12 ++-- templates/switchdev/switchdev.epp | 29 --------- tox.ini | 2 +- zuul.d/layout.yaml | 54 +++------------- 76 files changed, 898 insertions(+), 318 deletions(-)

1 0

os-collect-config 9.2.1 (rocky)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We contentedly announce the release of: os-collect-config 9.2.1: Collect and cache metadata, run hooks on changes. This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 9.2.0..9.2.1 ----------------------------------------- f63f4d2 Don't ignore SIGPIPE 11d9fd1 import zuul job settings from project-config f8bd80e Update UPPER_CONSTRAINTS_FILE for stable/rocky 32e7749 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_collect_config/collect.py | 3 +++ tox.ini | 2 +- zuul.d/layout.yaml | 9 ++++++++- 4 files changed, 13 insertions(+), 2 deletions(-)

1 0

tripleo-puppet-elements 10.2.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are chuffed to announce the release of: tripleo-puppet-elements 10.2.0: Puppet building rules for OpenStack images. This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. 10.2.0 ^^^^^^ Other Notes * ntp is no longer installed in the overcloud images by default as we have switched to chrony as the default time service. * The os-collect-config service is now disabled by default. With the switch to config-download and applying all software configuration with a central Ansible control node (undercloud), os-collect-config no longer needs to be enabled by default. Changes in tripleo-puppet-elements 10.1.0..10.2.0 ------------------------------------------------- 82eabfa Release note for chrony/ntp switch 844cbee Replace ntp with chrony a83cb97 Add gdisk to overcloud image d313a06 Use external centos7-rt if present 5e6c7d9 overcloud-agent: create ansible-playbook symlinks in post-install cbc5be9 Remove unused elements c08e3a4 Remove additional containered software c3dc41a Change openstack-dev to openstack-discuss 54f7e4b [Configuration] Add missing py37 and corrected default envlist. Diffstat (except docs and test files) ------------------------------------- elements/hiera/10-hiera-disable | 20 ------ elements/hiera/40-hiera-datafiles | 74 ---------------------- elements/hiera/README.md | 65 ------------------- elements/hiera/element-deps | 4 -- elements/hiera/install.d/10-hiera-yaml-symlink | 6 -- elements/hiera/install.d/11-hiera-orc-install | 8 --- elements/hiera/install.d/package-installs-hiera | 2 - .../hiera/os-apply-config/etc/puppet/hiera.yaml | 12 ---- elements/hiera/pkg-map | 5 -- .../post-install.d/51-ansible-symlink | 14 ++++ .../install.d/package-installs-overcloud-base | 1 + elements/overcloud-base/pkg-map | 1 + .../package-installs-overcloud-ceph-storage | 2 +- elements/overcloud-ceph-storage/pkg-map | 2 +- .../install.d/package-installs-overcloud-compute | 2 +- elements/overcloud-compute/pkg-map | 2 +- .../overcloud-compute/pre-install.d/03-centos-rt | 7 +- .../package-installs-overcloud-controller | 15 +---- elements/overcloud-controller/pkg-map | 22 +------ elements/serverspec/README.md | 11 ---- elements/serverspec/element-deps | 2 - .../install.d/package-installs-serverspec | 1 - .../serverspec-source-install/76-serverspec-source | 4 -- elements/serverspec/pkg-map | 5 -- .../notes/chrony-switch-12ffda0a7569df6a.yaml | 5 ++ ...disable-os-collect-config-5071858da0e8be7d.yaml | 0 setup.cfg | 2 +- tox.ini | 2 +- zuul.d/layout.yaml | 1 + 29 files changed, 37 insertions(+), 260 deletions(-)

1 0

tripleo-heat-templates 10.4.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are delighted to announce the release of: tripleo-heat-templates 10.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Adds a specific upgrade hiera file. This is currently used to override variables during upgrade. * Introduce new parameter, ContainerLogStdoutPath. Must be an absolute path to a directory where podman will output all containers stdout. The existence of the directory is ensured directly as a host_prep_task. * Support setting values for "cephfs_volume_mode" manila parameter via the THT parameter ManilaCephFSCephVolumeMode. These control the POSIX rwx mode of the cephfs volumes, snapshots, and groups of these that back corresponding manila resources. Default value for ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the mode for these objects before it was settable. * Adds a new GlobalConfigExtraMapData parameter that can be used to inject global_config_settings hieradata into the deployment. Any values generated in the stack will override those passed in by the parameter value. * Add neutron-plugin-ml2-mlnx-sdn-assist as a containerized Neutron Core service template to support Mellanox SDN ml2 plugin. * Adds functionality wheter to enable/disable KSM on compute nodes. Especially in NFV use case one wants to disable the service. Because ksm has little benefit in overcloud nodes it gets disabled per default but can be set via NovaComputeEnableKsm. * Added a new Barbican option *BarbicanPkcs11AlwaysSetCkaSensitive*. The default value is *true*. * Allow Neutron DHCP agent to use broadcast in DHCP replies * Add the ability to configure the cinder-volume service to run in active-active (A/A) mode using the cluster name specified by the new CinderVolumeCluster parameter. Note that A/A mode requires the backend driver support running A/A. Cinder's RBD driver supports A/A, but most other cinder drivers currently do not. * ContainerImagePrepareDebug is a parameter that allows to run the tripleo container image prepare command with --debug. It is set to 'False' by default for backward compatibility. * Docker is deprecated in Stein and will be removed in Train. It is being replaced by Podman and Buildah. * Deprecated services now live in deployment/deprecated directory. * The "baremetal" ML2 mechanism driver is enabled in the Networking Service (neutron) in the overcloud by default when the Baremtal Service (ironic) is enabled. Previously the user would have to enable this driver manually by overriding the "NeutronMechanismDrivers" parameter. * Add new parameter 'GlanceInjectMetadataProperties', to add metadata properties to be injected in image. Add new parameter 'GlanceIgnoreUserRoles', to specify name of user roles to be ignored for injecting metadata properties in the image. * Add support for native TLS encryption on NBD for disk migration The NBD protocol previously runs in clear text, offering no security protection for the data transferred, unless it is tunnelled over some external transport like SSH. Such tunnelling is inefficient and inconvenient to manage. Support for TLS to the NBD clients & servers provided by QEMU was added. In tls-everywhere use case we want to take advantage of this feature to create the certificates and configure qemu to use nbd tls. * The RabbitMQ management plugin ("rabbitmq_management") is now enabled. By default RabbitMQ managment is available on port 15672 on the localhost ("127.0.0.1") interface. * OVS and neutron now supports endpoint creation on IPv6 networks. New network-*-v6-all.j2.yaml environment files are added to allow tenant network to be created on IPv6 addresses. Note that these files are only to be used for new deployments and not during update or upgrade. network_data*.yaml files are also edited to reflect the same. * Add container for the Swift container sharder service. This service is required for sharding containers. It is disabled by default and can be enabled by setting the SwiftContainerSharderEnabled to true. * The Shared File Systems service (manila) API has been switched to running behind httpd, and it now supports configuring TLS options. * This patch switches the default mechanism driver for neutron from openvswitch to OVN. DVR is now enabled by default which in the case of OVN means that we're distributing FIP N/S traffic as E/W is anyways distributed * When deploying mistral-executor, create a tripleo-admin user on the undercloud for running external deploy tasks with ansible. * Add new CinderNetappPoolNameSearchPattern parameter, which controls which Netapp FlexVol volumes represent pools in Cinder. Known Issues ************ * Add OvnDbInternal to EndpointMap and use it for ovn_db_host OVN controller/metadata use ovn_dbs_vip hiera key to configure the central ovn DB. This key is not available on split control plane or multi cell setup and therefore installation fails. With this change a new entry gets created in the EndpointMap named OvnDbInternal. This can then be exported for an overcloud stack and can be used as an input for the cell stack. The information from the EndpointMap is used for ovn-metadata and ovn-controller as the ovn_db_host information in puppet-tripleo Upgrade Notes ************* * Non-lifecycle stack actions like stack check and cancel update for undercloud are now disabled. Stack check is yet to be migrated to heat convergence architecture and cancel update is not recommended for overcloud. Both are disabled by adding required heat policy for undercloud. 'overcloud update abort' wrapper for stack cancel update had been dropped since few releases. * Installing haproxy services on baremetal is no longer supported. * Installing MySQL Server services on baremetal is no longer supported. * Installing Redis services on baremetal is no longer supported. * Installing sahara services on baremetal is no longer supported. * During upgrade from ml2/ovs please remember to provide similar environment file to environments/updates/update-from-ml2-ovs-from- rocky.yaml. This is good also to remember to provide this file as a first to avoid overwriting custom modification by upgrade environment file. If you will not provide such file during upgrade from ml2/ovs you will see error and notification about problems witch mutually exclusive network drivers. Deprecation Notes ***************** * Duplicate environment files "environments/neutron-sriov.yaml" and "environments/neutron-ovs-dpdk.yaml" file are deprecated. * Xinetd tripleo service is no longer managed. The xinetd service hasn't been managed since the switch to containers. OS::TripleO::Services::Xinetd is disabled by default and dropped from the roles. The OS::TripleO::Services::Xinetd will be removed in Train. * docker_puppet_tasks is deprecated in favor of container_puppet_tasks. docker_puppet_tasks is still working in Stein but will be removed in Train. * The NodeDataLookup parameter type was changed from string to json * Removed 'glance-registry' related changes since it's been deprecated from glance & no longer been used. * The TLS-related environment files in the environments/ directory were deleted. The ones in the environments/ssl/ are preferred instead. Namely, the following files:: enable-internal-tls.yaml, enable-tls.yaml, inject-trust-anchor-hiera.yaml, inject-trust- anchor.yaml, no-tls-endpoints-public-ip.yaml, tls-endpoints-public- dns.yaml tls-endpoints-public-ip.yaml, tls-everywhere-endpoints- dns.yaml. * TripleO UI is deprecated in Stein and will be removed in Train. * The CinderNetappStoragePools parameter is deprecated in favor of the new CinderNetappPoolNameSearchPattern parameter. The previously deprecated CinderNetappEseriesHostType parameter has been removed. * The /var/lib/docker-puppet is deprecated and can now be found under /var/lib/container-puppet. We don't have Docker anymore so we try to avoid confusion in the directories. The directory still exists but a readme file points to the right directory. Bug Fixes ********* * It is now possible for temporary containers inside THT to test if they are being run as part of a minor update by checking if the TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said containers need to export it to the container explicitely), see <service>_restart_bundles for examples. * When setting up TLS everywhere, some deployers may not have their FreIPA server in the ctlplane, causing the ipaclient registration to fail. We move this registration to host-prep tasks and invoke it using ansible. At this point, all networks should be set up and the FreeIPA server should be accessible. * * Bug 1784967 invalid JSON in NodeDataLookup error message should be more helpful * e0e885b8ca3332e0815c537a32c564cac81f7f7e moved the cellv2 discovery from control plane to compute services. In case the computes won't have access to the external API this task will fail. Switch nova_cell_v2_discover_host.py to use internal api. Other Notes *********** * Paramter "ConfigDebug" now also controls the paunch logs verbosity. * Octavia may be deployed for a standalone cloud, which has yet Nova services available for Amphorae SSH keys management. For that case, the parameter "OctaviaAmphoraSshKeyFile" must be defined by a user. Otherwise, it takes an empty value by usual for overcloud deployments meanings and Nova will be used to create a key-pair for Octavia instead. * The utility script "tools/merge-new-params-nic-config-script.py" previously used the "Controller" role by default if the "--role- name" argument was not specified. The argument ("--role-name") no longer have a default. It is now mandatory to specify the role when merging new parameters into existing network configuration templates. * Remove "NeutronExternalNetworkBridge" Heat parameter. Option "external_network_bridge" is deprecated and should not be used in Neutron. Changes in tripleo-heat-templates 10.3.0..10.4.0 ------------------------------------------------ 30968cedf Remove environments/baremetal-services.yaml 160cddda3 Rename docker_config_scripts to container_config_scripts b1d82e6ac Workaround rhel8,0 iptables bug causing neutron_ovs_agent to restart continuously 4453d1dc3 Flatten and move logrotate-crond service container e6ab4856d Do not restart bundles during a minor update ce23ccf53 CI: force ContainerCli to Docker when needed bb1a9ea62 ci/environments/ovb-ha: force Docker for ContainerCli 5d8e8bd86 image-serve: only uninstall docker-distribution when it was installed 3e62d483f Rename docker_puppet_tasks to container_puppet_tasks 9cb715a5e mistral-executor include host /etc/environment ebc9dd98e flatten the octavia service configurations 5b11bb39d Support cinder-volume running active-active 2325992ae Drop unused deployment services parameters b3fef6678 Fix logging config on misc services e14dfc832 Fix monitoring_subscription on misc services 81c1cae40 Rename /var/lib/docker-puppet to /var/lib/container-puppet 47ec1089a flatten database service Redis d02e80642 Disable SELinux separation for ironic_pxe_http 66a477509 Deprecate TripleO UI c86e81d35 Remove Docker when upgrading to Podman 548f54b39 Added tar option to preserve metadata of existing fetch_dir 7d957ff26 step5: flatten the neutron service configurations f101bbe8c step4: flatten the neutron service configurations 6dbfde9c8 flatten database service MySQL Server 65c62f47f allow to configure broadcast_dhcp in neutron DHCP server fcdef786e step3: flatten the neutron service configurations 1ed3d2002 Make heat yaql limits configurable d2eba382c Fix py3 compat for regex searches in YAML validate 0a9ff03c7 Add Mellanox SDN ML2 template for a containerized service ad5dc5ca6 Remove unused resources of PreNetworkConfig for NFV 127dbb4e8 Support cephfs_volume_mode parameter 13d70f6bf container-image-prepare: redirect all output to logfile 142c944e0 [FFU] Ensure compatibility with ansible 2.6. eab673e9c Fix skydive_vars evaluation ad582c7ae Drop the role service override for ovb badf39735 Add functionality to manage KSM on compute nodes per role 9b1bb23aa flatten the ec2 service configurations 37e1122f8 Add OvnDbInternal to EndpointMap and use it for ovn_db_host f1e6de3f0 Fix typo in get container_id ansible task 37ea33037 Add SSHD composable service to Networker role definition f0977f167 Do not bind mount the ovn_db folder for the ovn pcmk restart bundle b49629f08 Do not ignore Swift ring changes to trigger container restart f48ba5896 Use dedicated container tag per skydive service e3f697df6 Switch scenario00{1,4}-standalone to Ceph bluestore dbf63314d Podman support in haproxy-public-tls-inject 6f262c805 Apply stop period for paunch-managed stateful svcs 95362173c Don't look for primary_role ips in AllNodesValidationConfig 26a3d4336 Deprecate Docker 72aa2dfc0 Create deployment/deprecated directory acb61d2c1 step4: flatten nova service configuration ce0b89291 Change vxlan to geneve for network environment files 7133394c3 Be able to know when we are running inside a minor update workflow 359e72b60 standalone: switch container registry to ImageServce 9b5cb4b3a Enable OVN baremetal by default with Ironic service 5c2e741da Revert "Remove host-config-and-reboot interface" ee6f88213 Switch scenario001-002-003 to use Podman 3836f0ff7 nova_libvirt_init_secret: add net=host e2a8a494c Handle upper and lower case system uuids 2a8719960 Remove host-config-and-reboot interface 3a86fc57d Remove upgrade_tasks added during nova services flattening. 479821f1f Removes all pacemaker from scenario-standalone 1-3 environments 9d9feaf72 flatten collectd service configuration acebe2593 Correct sshd configuration within nova-migration-target f2412dacf Make openshift-ansible working dir owned by tripleo-admin a08daffcc Fix malformed mistal_executor kolla config file f7bc59d4b Fail to live migration if instance has NUMA topology 23e7aee08 Drop step_config from containerized Nova services 276743b5f Redis: fix podman start on reboot 284cfe911 Re-Add mysql configuration for nova host discovery 44245d19d Only request neutron certificate from neutron dhcp service 703bf1c05 Add missing RoleParameters and ServiceNames 8b69c6b58 Add CertmongerUser role to OVB defaults a0c3612db [FFU] Make sure group access work correctly with ansible 2.6. 6090dc667 step2: flatten the designate service configurations 5e46c2a57 flatten the barbican service configurations b99c0ce8a Add specific upgrade hiera data file. 3d07ad432 New parameter: ContainerLogStdoutPath cc05a8d54 Replace docker-distribution with apache image-serve 2e0af5858 Move openstack clients service 479d7f587 flatten qdrouterd service configs d59ac1bd9 Fix rabbitmq restart d6727aff7 Enable rabbitmq_management plugin dc9a76aa2 cell_v2 multi-cell 51a1e981f Translating scenario012 to standalone 9e264ea91 make skydive working with folder created by tripleo-admin 78f1901da Deprecate xinetd service management 5e629cacd Fix keystone opt deprecations in manila manifests 2a8385658 Move ipa enrollment to host_prep_tasks 56ebb309e Add missing parts from step2: flatten nova service configuration 6053eb196 Switch default neutron ML2 mechanism driver to OVN cb4ed31ea Introduce ContainerImagePrepareDebug parameter 1cb6886a2 Switch Manila API to httpd and support TLS 93bc329b0 Don't mount docker.sock in the mistral-executor container 9d2acc284 Revert "mistral-executor: bind-mount /var/lib/containers" b3a8610b9 flatten ceilometer service configuration 3e5488901 env/docker: add ContainerCli 94e307064 Restrict use of become to minimum necessary for Ceph deployment 92ea1131c step3: flatten nova service configuration 98ecf9760 step2: flatten nova service configuration 9689f6ed0 Re-Add the StackUpdateType parameter to the nova-vnc-proxy template 6e1ee4168 Drop Docker service from Undercloud roles f7bf4efee flatten sensu service configuration cab93fd31 flatten tripleo-ui service configuration 5c6dd22b8 Use net=none for gnocchi_init_lib 5ceb3c5ec Make ceph-ansible working dir owned by tripleo-admin c95f315ef Remove RoleConfig 07709c44f Enable glance image cache's cleaner and pruner 17d8c985b FFWD: Introduce workaround for neutron cisco plugin 01a865130 Do not mount ceph-ansible and octavia playbook within mistral container 2634ffaa5 Add GlobalConfigExtraMapData 38fb412ac minor update: move VIP before stopping pacemaker on a node ad803ab71 Sanitize the uuid string for ceph-ansible 2e5de85ce Fix with_items indentation in logs readme ec2-api. a40a4927b Remove upgrade_tasks added during nova services flatten. 1d44eeafb Force host_routes to be a list dca57f51b Remove the use of tests as filters as it will be deprecated. 58b99bf5e Do not pull image while tagging pcmk images in upgrade_tasks. b026b860c Set Ironic default interface when using networking-ansible edfe18063 Inject log-driver for podman containers 2e899f394 Move container-image-prepare.j2.yaml to deployment dir bf111425b flatten the fluentd service configurations b8d2dd3ac step1: flatten the designate service configurations 93f529764 Push some NodeDataLookup in scenario001 707dcf2b7 Disable tacker for scenario007 9d115a359 Add support for transferring MariaDB data between nodes a64fa251e Add support for persistence of MariaDB data during reprovisioning c9adaaeb2 Flatten rabbitmq service - step 2 aa2dc674f Adding dependency for NetworkDeployment in 'server_resource_name'Deployment ec5fbe8de Fix generation of configs that contain password files c01d9d847 Handle case change for dmidecode >= 3.1 in Ceph templates fb7ea6734 Flatten rabbitmq service - step 1 fe2fda491 Change NodeDataLookup type from string to json 2587f4e96 Copy undercloud.conf file during mistral-executor start up. 1814b3032 Remove unneeded iptables mount points 8a0ddc7f0 Export global_config for compute-only stack 18f4e1177 Disable stack check and cancel update for undercloud 95245f6ad Remove incorrect mapped_data key from cisco ml2 hieradata 2bae8cc78 step1: flatten nova service configuration 3238e547a flatten the horizon service configurations dd54e32d1 mysql: sync credentials in running container on password change a2d0899f9 Add ContainerImagePrepare service to ControllerStorageNfs role 65041ed9d Clean unmanaged rules pushed by iptables-services package d1fea280f step2: flatten the neutron service configurations fff1df6ee TLS everywhere: Mount the whole /etc/pki/libvirt/ directory in libvirt 898154857 Catch directories we can not change ownership ce1e7eafe TLS everywhere: Set post-save command for neutron dhcpd a76a0a127 TLS everywhere: Set post-save command for nova-vnc-proxy 25bc2a687 flatten the congress service edf4e9e73 flatten the panko service 8b89ff2f5 flatten the tacker service 27e8bbd2a flatten the manila service configurations dcdb82c50 step1: flatten the neutron service configurations efaf0c3be Run nova_statedir_owner on every run 4cfa7c066 certmonger: Don't restart haproxy on cert renewal 99b87fba1 mysql: do not stop container when upgrade doesn't update mysql image a0a09d29a run docker_puppet_tasks on any role 0d106a261 Create tripleo-admin user on the undercloud 1d3fe8cb2 flatten database service MySQL Client c618b2168 Add stop_grace_period for heat_engine container 05d77c9ed flatten haproxy service configuration ce2ec4af9 Correct *_short_bootstrap_node_name variable. bcd438344 Move the multipathd services into deployment c4242729b flatten the iscsid service f7fb76754 TLS everywhere: Set post-save command for redis 03c54b806 TLS everywhere: Set post-save command for RabbitMQ 514f99c57 TLS everywhere: Set post-save command for httpd 080b22c8b Add PacemakerNetwork definition cb668e6b4 Optional ICMP validation of controllers and gateways df7f43974 Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient 9164e6adb Move UpgradeInitCommand and UpgradeInitCommonCommand to run by Ansible f0aecdd36 flatten the swift service configurations b807077a2 Enable ML2 baremetal by default with Ironic service f279e6ce6 noop package installation inside docker_puppet_apply.sh cd354bc38 flatten the mistral service configurations 482ed3cab Remove conf.modules.d that doesn't exist 7d3c7b16b deployed-servers: symlink ansible-playbook 822a92a80 Add VLAN as a supported network type for OVN 648dfa2bd Reload haproxy when certificate is renewed ca041e2c4 haproxy: deploy IPtables rules from the host 639285f09 Update parameters for cinder's Netapp backend 096fa8774 Explicitly manage http configs ad81fba15 Mount mysql client configuration in nova cell discovery container 7f5dec079 Don't disable keepalived in nonha-arch.yaml ae2ccb5f4 Remove workflow_tasks f6b934bd6 Remove the scenario standalones from tht zuul layout - just use template d9b311172 container-image-prepare: disable logging on the task 87a869a40 Fix nova_cell_v2_discover_host.py with python3 a619d990c Address python3 string issues with subprocess f77d8e790 Add missing entries for Pure Storage Cinder Backend and fix typos 8a818ab22 Apply changes to cluster using updated inventory ff36d44af Generate post-deployment openshift-ansible inventory 1febc8b7b Store nodes information in a dict cb675a91a Fix openshift playbook import d9a43277e Adding support of glance cinder store settings 85d9cf495 Revert "post_deploy: support python3 for undercloud scripts." 2dcd56041 Remove all glance-registry related changes 416f43c83 Flatten etcd configuration c4f57e28c Move login-defs to deployment directory 213e5121c Move securetty to deployment dir 7fea2d075 Move kernel config to deployment directory a0400c998 Move selinux to deployment folder 1143714b3 post_deploy: support python3 for undercloud scripts. 55188215d Use internal interface for keystone in "wait for placement" script 38ddc4c49 nova-metadata: use keystone internal endpoint instead of admin c980a40e5 Designate: Use keystone v3 internal endpoint instead of admin 166803d05 Include the DB password in a Mistral environment for creating backups and restores 13ec67a3a Avoid dangling firewall rule for ssh access c2e2b6297 Ensure /var/lib/config-data exists before setting selinux context a6479d0b5 use include_tasks instead of include e8a53f56f Remove networks from Undercloud and Standalone roles c1116e59c Add network data for the undercloud 53027484a Skip templating disabled networks cde4134d5 Service check in nova_cell_v2_discover_host.py to use internal API 8dbbf94a6 Adding pyshim.sh to missing python commands 80fb16378 Drop unused puppet/services parameters 397e2b4a3 Remove external_network_bridge Neutron option 25d063197 Remove configuration for cni0 bridge 87bc72a37 Use net=none for *_init_log(s) containers 9b284e74c Create /run/netns if does not exist cb6d81bd9 mistral-executor: bind mount the docker socket only when needed ae7ec1c79 mistral-executor: bind-mount /var/lib/containers 3fa634908 UX - Useful error msg if role is not in roles data ccb242f91 Enable Glance image_conversion plugin when backend is rbd 2b7cb1987 Allow ssh from all for undercloud 6fefd102b Look for parameters in parameter_groups 123f40a56 flatten cinder service configuration fe9372ece Add support for native TLS encryption on NBD for disk migration a72f8d4ae Remove deprecated TLS-related environment files 2a5baa597 Allow Octavia deployments for Standalone 1e318b569 Ensure logs folder is created in prep hosts tasks. 9012fff84 Added Barbican option BarbicanPkcs11AlwaysSetCkaSensitive ae1efdd44 flatten sahara service configuration eb52c794d Add HorizonSecureCookies to environments/ssl/enable-tls.yaml 632a184a9 Fetch scheme/port from hiera instead of hard coding it beb7aa112 Use the tripleo-standalone-scenarios-full template f5fe93b1f Update memcache config in docker-uc-light env 144b74d3b Look for used parameters in conditionals de3576633 Make neutron ovs agent work with python3 c5d1b6fb6 Fix paunch logs verbosity control a3b55888f Drop duplicate keystone logging group parameter 34d0e5b02 nova-libvirt: conditionalize selinux bind-mount 8f297c22e Make ceph-ansible integration respect PythonInterpreter 726f0b0c2 Drop zaqar param duplicates f01318640 Enable memcached debug if Debug param is set 704b6870b Reuse the container in case we have a temporary podman failure 9eeb4518c Remove with_items for 'yum/package' d87efd29e Conditionalize docker socket bind-mount e26ef65e5 Transitioning to HAProxy 1.8 fda5b5ab3 docker-puppet: retry container run command 1bebfdcbd Mount system modules when calling system iptables 35aae8730 Be explicit when passing vars into deploy steps dc46a8684 Assure that updates job is listed in both check and gate 2e36a4cfe Remove unused jinja code in network-isolation environment dfe4f2ddb Remove gluster settings from previous deployments on re-deploy 87358befc Fix deployment of gluster with openshift AllInOne 9ed011efc flatten the heat service configurations 5a8950c70 Run 'Delete Upgrade Flag and Unset it via Rest' only once c740b5421 Remove default role-name from merge network param script 0b6375d69 Remove unused params from ci/environments/network/* templates 2b8ecaa11 Add missing Aodh monitoring_subscription e32663b1f Add missing Ironic monitoring_subscription 2dae0b05e Update Barbican HSM ansible roles 0015cc744 Gracefully shutdown Mysql before upgrade. ef1b85702 Add Swift container sharder service d70d128aa Enable virt_sandbox_use_netlink SELinux boolean for port healthchecks 3df5f8db1 Fall back service_net_map to ctlplane 99f1c1ece Make ODL deployment compatible with podman 4b8c7055c Set keystone bind_host to both public and admin a31585837 Allow container healthchecks to access netlink data f86c89e08 Add scenario002-standalone to gates as we make it voting fe8b808fd Allow overlay tunnel endpoints on IPv6 address ae8998f36 Enable image inject metadata properties & user roles to be ignored 7c070ab11 Fix address for glusterfs container images df8e59249 Restart openshift master services after stack update d59e016cd Fix files: for scenario003 standalone - pointing to wrong env 2d608e07b Move docker into deployment directory 33b5658f0 Deprecate duplicate NFV environment files e7c7f79f9 Snmp - Use net_cidr_map for firewall rules f2ff3eb74 Memcached - Use net_cidr_map for firewall rules 5666a4fe0 Designate - Use net_cidr_map for rndc_allowed_addresses da1de3aaf Apache - Use net_cidr_map for proxy_ips e0e885b8c Move cellv2 discovery from control plane services to compute services a433e05e6 implement default ssh-from-ctlplane rule via hiera 89faf9c02 flatten tripleo-packages service configuration 8cf1a9993 Don't force Horizon's secure cookies to disabled ab6395a64 Set container images for openshift 3.11 3e613f178 Remove openshift-ansible customization e26a5ea3b Rely on osa defaults for enabled services 841e17511 Update manila environment file name in capabilities-map f252778d6 Fix Chinese quotes a693e6f1c Enable ovs-stats by default when using ovs ed46e6e28 Per role Numa aware vswitch configuration 5cb7fee7a Introducing Nuage Neutron VRS resource. 54b78df00 Fix files conditions for scenario 007 and 008 806cbd470 Fix a spelling mistake. Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- all-nodes-validation.yaml | 12 + capabilities-map.yaml | 9 +- ci/common/ironic_standalone_post.yaml | 17 + ci/environments/multinode-3nodes-registry.yaml | 10 +- ci/environments/multinode-containers.yaml | 8 +- .../multiple-nics-ipv6/network-environment.yaml | 2 +- .../nic-configs/ceph-storage.yaml | 92 --- .../nic-configs/cinder-storage.yaml | 70 -- .../nic-configs/compute-dvr.yaml | 189 +++++ .../multiple-nics-ipv6/nic-configs/compute.yaml | 70 -- .../multiple-nics-ipv6/nic-configs/controller.yaml | 22 - .../nic-configs/swift-storage.yaml | 70 -- .../network/multiple-nics/network-environment.yaml | 2 +- .../multiple-nics/nic-configs/ceph-storage.yaml | 92 --- .../multiple-nics/nic-configs/cinder-storage.yaml | 92 --- .../multiple-nics/nic-configs/compute-dvr.yaml | 188 +++++ .../network/multiple-nics/nic-configs/compute.yaml | 70 -- .../multiple-nics/nic-configs/controller.yaml | 22 - .../multiple-nics/nic-configs/swift-storage.yaml | 70 -- .../public-bond/nic-configs/ceph-storage.yaml | 92 --- .../public-bond/nic-configs/cinder-storage.yaml | 70 -- .../network/public-bond/nic-configs/compute.yaml | 70 -- .../public-bond/nic-configs/controller.yaml | 28 - .../public-bond/nic-configs/swift-storage.yaml | 70 -- ci/environments/ovb-ha.yaml | 57 +- .../scenario000-multinode-containers.yaml | 10 +- .../scenario001-multinode-containers.yaml | 33 +- ci/environments/scenario001-standalone.yaml | 57 +- .../scenario002-multinode-containers.yaml | 33 +- ci/environments/scenario002-standalone.yaml | 40 +- .../scenario003-multinode-containers.yaml | 39 +- ci/environments/scenario003-standalone.yaml | 32 +- .../scenario004-multinode-containers.yaml | 31 +- ci/environments/scenario004-standalone.yaml | 31 +- .../scenario006-multinode-containers.yaml | 11 +- ci/environments/scenario006-multinode.yaml | 1 - .../scenario007-multinode-containers.yaml | 52 +- .../scenario008-multinode-containers.yaml | 4 + ci/environments/scenario009-multinode.yaml | 1 - .../scenario010-multinode-containers.yaml | 23 +- .../scenario012-multinode-containers.yaml | 23 +- ci/environments/scenario012-standalone.yaml | 42 ++ common/deploy-steps-tasks.yaml | 179 +++-- common/deploy-steps.j2 | 314 +++------ common/services.yaml | 54 +- .../__init__.py | 0 .../nova_cell_v2_discover_host.py | 109 +++ .../nova_statedir_ownership.py | 8 +- .../nova_wait_for_placement_service.py | 2 +- .../pyshim.sh | 0 .../deployed-server-bootstrap-centos.sh | 10 + deployed-server/deployed-server-bootstrap-rhel.sh | 10 + deployed-server/deployed-server-roles-data.yaml | 1 + deployed-server/deployed-server.yaml | 21 - deployment/aodh/aodh-api-container-puppet.yaml | 9 +- .../aodh/aodh-evaluator-container-puppet.yaml | 11 +- .../aodh/aodh-listener-container-puppet.yaml | 11 +- .../aodh/aodh-notifier-container-puppet.yaml | 11 +- .../barbican/barbican-api-container-puppet.yaml | 215 +++++- .../barbican/barbican-backend-dogtag-puppet.yaml | 0 .../barbican/barbican-backend-kmip-puppet.yaml | 0 .../barbican-backend-pkcs11-crypto-puppet.yaml | 5 + .../barbican-backend-simple-crypto-puppet.yaml | 0 .../ceilometer-agent-central-container-puppet.yaml | 40 +- .../ceilometer-agent-compute-container-puppet.yaml | 56 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 58 +- ...ometer-agent-notification-container-puppet.yaml | 44 +- .../ceilometer-base-container-puppet.yaml | 0 .../cinder/cinder-api-container-puppet.yaml | 149 +++- .../cinder-backend-dellemc-unity-puppet.yaml | 0 .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 0 .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 0 ...inder-backend-dellemc-xtremio-iscsi-puppet.yaml | 0 .../cinder/cinder-backend-dellps-puppet.yaml | 0 .../cinder/cinder-backend-dellsc-puppet.yaml | 0 .../cinder/cinder-backend-netapp-puppet.yaml | 22 +- .../cinder/cinder-backend-nvmeof-puppet.yaml | 0 .../cinder/cinder-backend-pure-puppet.yaml | 10 +- .../cinder/cinder-backend-scaleio-puppet.yaml | 0 .../cinder-backend-veritas-hyperscale-puppet.yaml | 0 .../cinder/cinder-backup-container-puppet.yaml | 73 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 20 +- .../cinder}/cinder-base.yaml | 0 .../cinder/cinder-common-container-puppet.yaml | 3 +- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 0 .../cinder/cinder-scheduler-container-puppet.yaml | 25 +- .../cinder/cinder-volume-container-puppet.yaml | 244 +++++-- .../cinder/cinder-volume-pacemaker-puppet.yaml | 33 +- .../openstack-clients-baremetal-puppet.yaml | 0 .../congress/congress-container-puppet.yaml | 139 +++- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 16 +- .../database/mysql-base.yaml | 22 - .../database/mysql-client.yaml | 0 .../database/mysql-container-puppet.yaml | 107 ++- .../database/mysql-pacemaker-puppet.yaml | 110 ++- .../database/redis-base-puppet.yaml | 0 .../database/redis-container-puppet.yaml | 60 +- .../database/redis-pacemaker-puppet.yaml | 30 +- deployment/deprecated/README.rst | 6 + .../docker/docker-baremetal-ansible.yaml | 0 .../docker/docker-registry-baremetal-ansible.yaml | 0 .../deprecated}/logging/fluentd-config.yaml | 0 .../logging/fluentd-container-puppet.yaml | 63 +- .../deprecated}/monitoring/sensu-base.yaml | 0 .../monitoring/sensu-client-container-puppet.yaml | 78 ++- .../panko/panko-api-container-puppet.yaml | 312 +++++++++ .../tripleo-ui/tripleo-ui-container-puppet.yaml | 119 +++- .../designate/designate-api-container-puppet.yaml | 54 +- .../designate}/designate-base.yaml | 0 .../designate-central-container-puppet.yaml | 74 +- .../designate/designate-mdns-container-puppet.yaml | 78 ++- .../designate-producer-container-puppet.yaml | 50 +- .../designate/designate-sink-container-puppet.yaml | 50 +- .../designate-worker-container-puppet.yaml | 100 ++- .../ec2/ec2-api-container-puppet.yaml | 192 +++++- .../etcd/etcd-container-puppet.yaml | 84 ++- deployment/glance/glance-api-container-puppet.yaml | 41 +- .../glance/glance-api-logging-file-container.yaml | 2 + .../glance/glance-registry-disabled-puppet.yaml | 57 -- .../haproxy/haproxy-container-puppet.yaml | 142 ++-- .../haproxy-internal-tls-certmonger.j2.yaml | 1 + .../haproxy/haproxy-pacemaker-puppet.yaml | 73 +- .../haproxy}/haproxy-public-tls-certmonger.yaml | 1 + .../haproxy}/haproxy-public-tls-inject.yaml | 6 +- .../heat/heat-api-cfn-container-puppet.yaml | 100 ++- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 0 .../heat/heat-api-container-puppet.yaml | 108 ++- .../heat/heat-base-puppet.yaml | 16 +- .../heat/heat-engine-container-puppet.yaml | 171 ++++- .../horizon/horizon-container-puppet.yaml | 182 ++++- .../image-serve/image-serve-baremetal-ansible.yaml | 83 +++ deployment/ironic/ironic-api-container-puppet.yaml | 11 +- .../ironic/ironic-conductor-container-puppet.yaml | 5 +- .../ironic/ironic-inspector-container-puppet.yaml | 14 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 6 + .../iscsid/iscsid-container-puppet.yaml | 21 +- .../keepalived/keepalived-container-puppet.yaml | 11 +- .../kernel/kernel-baremetal-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 34 +- .../login-defs/login-defs-baremetal-puppet.yaml | 0 .../logrotate-crond-container-puppet.yaml | 3 +- .../manila/manila-api-container-puppet.yaml | 134 +++- .../manila}/manila-base.yaml | 0 .../manila/manila-scheduler-container-puppet.yaml | 55 +- .../manila/manila-share-common.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 39 +- .../manila/manila-share-pacemaker-puppet.yaml | 27 +- .../memcached/memcached-container-puppet.yaml | 55 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 80 ++- deployment/metrics/collectd-container-puppet.yaml | 545 +++++++++++++++ .../metrics/qdr-container-puppet.yaml | 3 +- .../mistral/mistral-api-container-puppet.yaml | 94 ++- .../mistral}/mistral-base.yaml | 0 .../mistral/mistral-engine-container-puppet.yaml | 55 +- .../mistral-event-engine-container-puppet.yaml | 34 +- .../mistral/mistral-executor-container-puppet.yaml | 79 ++- .../multipathd/multipathd-container.yaml | 3 +- .../neutron/neutron-api-container-puppet.yaml | 238 ++++++- .../neutron-bgpvpn-api-container-puppet.yaml | 19 +- .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 0 .../neutron/neutron-cleanup | 0 .../neutron/neutron-cleanup.service | 0 .../neutron/neutron-dhcp-container-puppet.yaml | 140 +++- .../neutron-l2gw-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-l2gw-api-container-puppet.yaml | 21 +- .../neutron/neutron-l3-container-puppet.yaml | 100 ++- .../neutron-lbaas-api-container-puppet.yaml | 22 +- .../neutron/neutron-metadata-container-puppet.yaml | 96 ++- .../neutron-ovs-agent-container-puppet.yaml | 169 ++++- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 46 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 28 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 78 ++- .../neutron-plugin-nsx-container-puppet.yaml | 37 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 14 +- .../neutron-sriov-agent-container-puppet.yaml | 89 ++- .../nova/nova-api-container-puppet.yaml | 306 +++++---- .../nova/nova-base-puppet.yaml | 10 +- .../nova/nova-compute-common-container-puppet.yaml | 9 +- deployment/nova/nova-compute-container-puppet.yaml | 765 +++++++++++++++++++++ .../nova/nova-conductor-container-puppet.yaml | 121 +++- .../nova/nova-consoleauth-container-puppet.yaml | 49 +- .../nova/nova-ironic-container-puppet.yaml | 66 +- .../nova/nova-libvirt-container-puppet.yaml | 390 ++++++++++- .../nova/nova-libvirt-guests-container-puppet.yaml | 4 +- .../nova/nova-metadata-container-puppet.yaml | 129 +++- .../nova-migration-target-container-puppet.yaml | 62 +- .../nova/nova-placement-container-puppet.yaml | 118 +++- .../nova/nova-scheduler-container-puppet.yaml | 97 ++- .../nova/nova-vnc-proxy-container-puppet.yaml | 135 +++- .../nova/novajoin-container-puppet.yaml | 7 +- .../octavia/octavia-api-container-puppet.yaml | 142 +++- deployment/octavia/octavia-base.yaml | 215 ++++++ .../octavia/octavia-deployment-config.j2.yaml | 12 + .../octavia-health-manager-container-puppet.yaml | 65 +- .../octavia-housekeeping-container-puppet.yaml | 56 +- .../octavia/octavia-worker-container-puppet.yaml | 89 ++- deployment/podman/podman-baremetal-ansible.yaml | 49 ++ .../qdr/qdrouterd-container-puppet.yaml | 66 +- .../rabbitmq/rabbitmq-container-puppet.yaml | 168 ++++- ...rabbitmq-messaging-notify-container-puppet.yaml | 111 ++- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-notify-shared-puppet.yaml | 20 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 23 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 113 ++- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 16 +- .../sahara/sahara-api-container-puppet.yaml | 99 ++- .../sahara}/sahara-base.yaml | 0 .../sahara/sahara-engine-container-puppet.yaml | 56 +- .../securetty/securetty-baremetal-puppet.yaml | 0 .../selinux/selinux-baremetal-puppet.yaml | 0 deployment/snmp/snmp-baremetal-puppet.yaml | 33 +- deployment/sshd/sshd-baremetal-puppet.yaml | 26 +- .../services => deployment/swift}/swift-base.yaml | 0 .../swift/swift-dispersion-baremetal-puppet.yaml | 0 .../swift/swift-proxy-container-puppet.yaml | 241 ++++++- .../swift/swift-ringbuilder-container-puppet.yaml | 54 +- .../swift/swift-storage-container-puppet.yaml | 144 +++- .../tacker/tacker-container-puppet.yaml | 120 +++- .../tripleo-firewall-baremetal-puppet.yaml | 61 +- .../tripleo-packages-baremetal-puppet.yaml | 44 +- deployment/zaqar/zaqar-container-puppet.yaml | 24 +- .../services/logging/files/opendaylight-api.yaml | 2 +- .../services/messaging/notify-rabbitmq-shared.yaml | 54 -- ...aml => neutron-plugin-ml2-mlnx-sdn-assist.yaml} | 29 +- environments/barbican-backend-dogtag.yaml | 2 +- environments/barbican-backend-kmip.yaml | 2 +- environments/barbican-backend-pkcs11-atos.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- environments/barbican-backend-pkcs11.yaml | 5 +- environments/barbican-backend-simple-crypto.yaml | 2 +- environments/baremetal-services.yaml | 63 -- environments/cinder-backup.yaml | 4 +- environments/cinder-dellemc-unity-config.yaml | 2 +- environments/cinder-dellemc-vmax-iscsi-config.yaml | 2 +- environments/cinder-dellemc-vnx-config.yaml | 2 +- .../cinder-dellemc-xtremio-iscsi-config.yaml | 2 +- environments/cinder-dellps-config.yaml | 2 +- environments/cinder-dellsc-config.yaml | 2 +- environments/cinder-hpelefthand-config.yaml | 2 +- environments/cinder-netapp-config.yaml | 4 +- environments/cinder-nvmeof-config.yaml | 2 +- environments/cinder-pure-config.yaml | 3 +- environments/cinder-scaleio-config.yaml | 2 +- environments/cinder-volume-active-active.yaml | 8 + environments/collectd-environment.yaml | 2 +- environments/compute-real-time-example.yaml | 2 +- environments/computealt.yaml | 18 +- environments/config-debug.yaml | 2 +- environments/container-image-prepare-debug.yaml | 5 + .../disable-config-download-environment.yaml | 5 - environments/disable-workflow-tasks.yaml | 6 - environments/docker-ha.yaml | 12 +- environments/docker-uc-light.yaml | 36 +- environments/docker.yaml | 12 +- environments/enable-designate.yaml | 10 +- environments/enable-internal-tls.yaml | 27 - environments/enable-tls.yaml | 19 - environments/enable_congress.yaml | 2 +- environments/enable_tacker.yaml | 2 +- environments/external-loadbalancer-vip-v6-all.yaml | 40 ++ environments/hyperconverged-ceph.yaml | 1 + environments/inject-trust-anchor-hiera.yaml | 12 - environments/inject-trust-anchor.yaml | 10 - environments/kubernetes.yaml | 2 +- environments/logging-environment.yaml | 4 +- environments/login-defs.yaml | 2 +- environments/manila-cephfsganesha-config.yaml | 7 +- environments/manila-cephfsnative-config.yaml | 7 +- environments/manila-isilon-config.yaml | 6 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 6 +- environments/manila-vmax-config.yaml | 6 +- environments/manila-vnx-config.yaml | 6 +- .../rpc-qdrouterd-notify-rabbitmq-hybrid.yaml | 4 +- .../rpc-rabbitmq-notify-rabbitmq-shared.yaml | 4 +- environments/metrics-collectd-qdr.yaml | 4 +- environments/monitoring-environment.yaml | 4 +- environments/network-environment-v6-all.j2.yaml | 62 ++ environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 4 +- environments/network-isolation-v6-all.j2.yaml | 67 ++ environments/network-isolation-v6.j2.yaml | 9 - environments/network-isolation.j2.yaml | 9 - environments/neutron-bgpvpn-bagpipe.yaml | 5 +- environments/neutron-bgpvpn.yaml | 2 +- environments/neutron-l2gw.yaml | 5 +- environments/neutron-ml2-ansible.yaml | 3 +- environments/neutron-ml2-vpp.yaml | 2 +- environments/neutron-ovs-dpdk.yaml | 6 +- environments/neutron-ovs-dvr.yaml | 29 +- environments/neutron-sfc.yaml | 3 +- environments/neutron-sriov.yaml | 6 +- environments/no-tls-endpoints-public-ip.yaml | 120 ---- environments/nonha-arch.yaml | 12 +- environments/nsx-config.yaml | 2 +- environments/openshift.yaml | 4 +- environments/public-tls-undercloud.yaml | 2 +- environments/securetty.yaml | 2 +- environments/services-baremetal/barbican.yaml | 2 +- environments/services-baremetal/cinder-backup.yaml | 4 +- environments/services-baremetal/collectd.yaml | 2 +- environments/services-baremetal/congress.yaml | 2 +- environments/services-baremetal/ec2-api.yaml | 2 +- environments/services-baremetal/etcd.yaml | 2 +- environments/services-baremetal/fluentd.yaml | 2 +- environments/services-baremetal/manila.yaml | 6 +- environments/services-baremetal/mistral.yaml | 8 +- .../neutron-bgpvpn-opendaylight.yaml | 2 +- .../neutron-l2gw-opendaylight.yaml | 2 +- .../services-baremetal/neutron-lbaasv2.yaml | 2 +- .../services-baremetal/neutron-ml2-cisco-vts.yaml | 2 +- .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-ovs-dpdk.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services-baremetal/octavia.yaml | 10 +- environments/services-baremetal/sahara.yaml | 3 - environments/services-baremetal/sensu-client.yaml | 2 +- environments/services-baremetal/tacker.yaml | 2 +- .../services-baremetal/undercloud-ceilometer.yaml | 6 +- .../services-baremetal/undercloud-cinder.yaml | 6 +- .../services-baremetal/undercloud-gnocchi.yaml | 2 +- .../services-baremetal/undercloud-haproxy.yaml | 2 +- .../services-baremetal/undercloud-panko.yaml | 2 +- environments/services/barbican.yaml | 2 +- environments/services/cinder-backup.yaml | 4 +- environments/services/collectd.yaml | 2 +- environments/services/congress.yaml | 2 +- environments/services/ec2-api.yaml | 2 +- environments/services/etcd.yaml | 2 +- environments/services/fluentd.yaml | 2 +- .../services/haproxy-public-tls-certmonger.yaml | 2 +- environments/services/ironic-overcloud.yaml | 10 + environments/services/ironic.yaml | 5 +- environments/services/manila.yaml | 6 +- environments/services/mistral.yaml | 8 +- .../services/neutron-bgpvpn-opendaylight.yaml | 2 +- .../services/neutron-l2gw-opendaylight.yaml | 2 +- environments/services/neutron-lbaasv2.yaml | 2 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-ml2-cisco-vts.yaml | 2 +- environments/services/neutron-nsx-lbaasv2.yaml | 2 +- .../services/neutron-opendaylight-sriov.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 4 +- environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 33 +- environments/services/neutron-ovs.yaml | 35 + .../services/neutron-sfc-opendaylight.yaml | 2 +- environments/services/neutron-sfc-ovn.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/novajoin.yaml | 2 +- environments/services/octavia.yaml | 10 +- environments/services/qdr.yaml | 2 +- environments/services/sahara.yaml | 4 +- environments/services/sensu-client.yaml | 2 +- environments/services/tacker.yaml | 2 +- environments/services/tripleo-ui.yaml | 3 +- environments/services/undercloud-ceilometer.yaml | 6 +- environments/services/undercloud-cinder.yaml | 6 +- environments/services/undercloud-gnocchi.yaml | 2 +- environments/services/undercloud-haproxy.yaml | 2 +- environments/services/undercloud-panko.yaml | 2 +- environments/services/zaqar.yaml | 2 +- environments/ssl/enable-internal-tls.yaml | 3 +- environments/ssl/enable-tls.yaml | 4 + environments/ssl/no-tls-endpoints-public-ip.yaml | 1 + environments/ssl/tls-endpoints-public-dns.yaml | 1 + environments/ssl/tls-endpoints-public-ip.yaml | 1 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 1 + environments/standalone.yaml | 4 +- environments/standalone/standalone-overcloud.yaml | 4 +- environments/standalone/standalone-tripleo.yaml | 13 +- environments/storage/cinder-netapp-config.yaml | 10 +- environments/tls-endpoints-public-dns.yaml | 109 --- environments/tls-endpoints-public-ip.yaml | 109 --- environments/tls-everywhere-endpoints-dns.yaml | 105 --- environments/undercloud.yaml | 28 +- .../updates/update-from-ml2-ovs-from-rocky.yaml | 8 + .../cinder-veritas-hyperscale-config.yaml | 2 +- extraconfig/post_deploy/undercloud_post.py | 10 +- extraconfig/post_deploy/undercloud_post.yaml | 5 + extraconfig/pre_network/config_then_reboot.yaml | 7 + .../pre_network/host_config_and_reboot.yaml | 184 ----- extraconfig/services/ipaclient.yaml | 147 ++++ extraconfig/services/kubernetes-master.yaml | 4 +- extraconfig/services/openshift-cns.yaml | 53 +- extraconfig/services/openshift-master.yaml | 230 +++++-- extraconfig/services/openshift-node.yaml | 41 +- extraconfig/services/skydive-analyzer.yaml | 9 +- firstboot/os-net-config-mappings.yaml | 5 +- network/endpoints/endpoint_data.yaml | 6 + network/endpoints/endpoint_map.yaml | 82 +++ network/networks.j2.yaml | 4 +- network/ports/net_ip_list_map.j2.yaml | 42 +- network/ports/net_ip_map.j2.yaml | 22 +- network/ports/net_vip_map_external.j2.yaml | 10 +- network/ports/net_vip_map_external_v6.j2.yaml | 10 +- network/service_net_map.j2.yaml | 147 ++-- network_data.yaml | 1 - network_data_ganesha.yaml | 1 - network_data_routed.yaml | 2 - network_data_undercloud.yaml | 3 + overcloud-resource-registry-puppet.j2.yaml | 134 ++-- overcloud.j2.yaml | 312 ++++----- puppet/all-nodes-config.j2.yaml | 21 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 33 +- puppet/extraconfig/pre_deploy/per_node.yaml | 20 +- puppet/role.role.j2.yaml | 37 +- puppet/services/README.rst | 31 - puppet/services/apache.j2.yaml | 15 +- puppet/services/barbican-api.yaml | 206 ------ puppet/services/ceilometer-agent-central.yaml | 79 --- puppet/services/ceilometer-agent-compute.yaml | 74 -- puppet/services/ceilometer-agent-ipmi.yaml | 76 -- puppet/services/ceilometer-agent-notification.yaml | 71 -- puppet/services/certmonger-user.yaml | 4 + puppet/services/cinder-api.yaml | 197 ------ puppet/services/cinder-backup.yaml | 114 --- puppet/services/cinder-scheduler.yaml | 72 -- puppet/services/database/redis.yaml | 105 --- puppet/services/designate-api.yaml | 117 ---- puppet/services/designate-central.yaml | 101 --- puppet/services/designate-mdns.yaml | 106 --- puppet/services/designate-producer.yaml | 74 -- puppet/services/designate-sink.yaml | 74 -- puppet/services/designate-worker.yaml | 126 ---- puppet/services/ec2-api.yaml | 210 ------ puppet/services/haproxy.yaml | 175 ----- puppet/services/heat-api-cfn.yaml | 147 ---- puppet/services/heat-api.yaml | 154 ----- puppet/services/horizon.yaml | 197 ------ puppet/services/iscsid.yaml | 41 -- puppet/services/logging/fluentd.yaml | 82 --- puppet/services/manila-api.yaml | 104 --- puppet/services/manila-backend-cephfs.yaml | 4 + puppet/services/manila-scheduler.yaml | 75 -- puppet/services/manila-share.yaml | 70 -- puppet/services/messaging/notify-rabbitmq.yaml | 145 ---- puppet/services/messaging/rpc-qdrouterd.yaml | 101 --- puppet/services/messaging/rpc-rabbitmq.yaml | 146 ---- puppet/services/mistral-api.yaml | 135 ---- puppet/services/mistral-engine.yaml | 79 --- puppet/services/mistral-event-engine.yaml | 54 -- puppet/services/mistral-executor.yaml | 60 -- puppet/services/monitoring/sensu-client.yaml | 83 --- puppet/services/neutron-base.yaml | 31 +- puppet/services/neutron-compute-plugin-nuage.yaml | 2 +- .../services/neutron-controller-plugin-nuage.yaml | 81 +++ puppet/services/neutron-dhcp.yaml | 157 ----- puppet/services/neutron-l3-compute-dvr.yaml | 21 - puppet/services/neutron-l3.yaml | 137 ---- puppet/services/neutron-metadata.yaml | 140 ---- puppet/services/neutron-ovs-agent.yaml | 177 ----- puppet/services/neutron-plugin-ml2-ansible.yaml | 62 -- puppet/services/neutron-plugin-ml2-ovn.yaml | 22 +- puppet/services/neutron-plugin-ml2.yaml | 8 +- puppet/services/neutron-sriov-agent.yaml | 119 ---- puppet/services/nova-api.yaml | 338 --------- puppet/services/nova-compute.yaml | 440 ------------ puppet/services/nova-conductor.yaml | 98 --- puppet/services/nova-consoleauth.yaml | 72 -- puppet/services/nova-ironic.yaml | 71 -- puppet/services/nova-libvirt.yaml | 362 ---------- puppet/services/nova-metadata.yaml | 161 ----- puppet/services/nova-migration-target.yaml | 84 --- puppet/services/nova-placement.yaml | 159 ----- puppet/services/nova-scheduler.yaml | 118 ---- puppet/services/nova-vnc-proxy.yaml | 209 ------ puppet/services/octavia-api.yaml | 180 ----- puppet/services/octavia-base.yaml | 164 ----- puppet/services/octavia-controller.yaml | 108 --- puppet/services/octavia-health-manager.yaml | 105 --- puppet/services/octavia-housekeeping.yaml | 97 --- puppet/services/octavia-worker.yaml | 121 ---- puppet/services/opendaylight-api.yaml | 3 - puppet/services/opendaylight-ovs.yaml | 3 - puppet/services/ovn-controller.yaml | 1 + puppet/services/ovn-metadata.yaml | 6 +- puppet/services/pacemaker.yaml | 24 +- puppet/services/pacemaker/cinder-backup.yaml | 77 --- puppet/services/pacemaker/cinder-volume.yaml | 73 -- puppet/services/pacemaker/database/mysql.yaml | 87 --- puppet/services/pacemaker/database/redis.yaml | 94 --- puppet/services/pacemaker/haproxy.yaml | 70 -- puppet/services/pacemaker/manila-share.yaml | 59 -- puppet/services/pacemaker/rabbitmq.yaml | 58 -- puppet/services/panko-api.yaml | 124 ---- puppet/services/panko-base.yaml | 137 ---- puppet/services/qdr.yaml | 77 --- puppet/services/rabbitmq.yaml | 193 ------ puppet/services/sahara-api.yaml | 126 ---- puppet/services/sahara-engine.yaml | 73 -- puppet/services/swift-proxy.yaml | 283 -------- puppet/services/swift-ringbuilder.yaml | 100 --- puppet/services/swift-storage.yaml | 175 ----- releasenotes/notes/6.0.0-b52a14a71fc62788.yaml | 2 +- ...grade-specific-hiera-file-7a41a23017a545b9.yaml | 5 + .../ContainerLogStdoutPath-20cbce05a1710d8a.yaml | 5 + ...eph_volume_mode-parameter-5553a9b39718a749.yaml | 9 + ...-GlobalConfigExtraMapData-793757a2b767abe3.yaml | 5 + ...d-mellanox-sdn-ml2-docker-58d242b5a8c40ade.yaml | 5 + .../add-ovn-db-endpointmap-2f75dea0b3aa4513.yaml | 15 + .../add_compute_manage_ksm-86fcbd1dc9a193ca.yaml | 7 + ...-always-set-cka-sensitive-7a9dc31290899cac.yaml | 5 + ...dhcp-in-neutron-container-1e7835e4e7292492.yaml | 4 + ...nder-volume-active-active-976f2bc33ab52c94.yaml | 8 + ...ainer_image_prepare_debug-52fcb324633d2cf0.yaml | 6 + ...recate-duplicate-nfv-envs-615d5b97bae6f9a9.yaml | 5 + ...ecate-xinetd-service.yaml-d7594bf8a7b714e2.yaml | 7 + .../deprecate_docker_all-40eb568c9234a3d8.yaml | 5 + .../deprecated_services-172a1ae6348e6c52.yaml | 4 + ...eat-non-lifecycle-actions-d551fe4551d71770.yaml | 10 + .../docker_puppet_tasks-e74637224ee66f66.yaml | 5 + .../drop-baremetal-haproxy-5e2f0f3c9b8da664.yaml | 4 + ...op-baremetal-mysql-server-a36a2f39f88c8181.yaml | 4 + .../drop-baremetal-redis-2e2f221b9ee6f9cc.yaml | 4 + .../drop-baremetal-sahara-f2922322511047de.yaml | 4 + ...metal-with-ironic-service-8c2909023e3896a5.yaml | 6 + ...nject-metadata-properties-72cdc946748e9b1b.yaml | 7 + .../notes/logging-paunch-7fa8570b380a7ebd.yaml | 4 + .../notes/minor-update-env-20657417094d4aeb.yaml | 7 + ...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml | 8 + ...ata_lookup_string_to_json-69362e93d862bd87.yaml | 7 + ...ver_host_use_internal_api-1bebb3e9c6e69113.yaml | 7 + ...on_nbd_for_disk_migration-2e16003c4764a399.yaml | 12 + .../notes/octavia-standalone-f1f1121ba77981c3.yaml | 8 + ...-enable-management-plugin-94b27747e4f5e685.yaml | 6 + ...-nic-config-params-script-d670279038411978.yaml | 8 + ...-disabled-glance-registry-2738b41a2e200d95.yaml | 5 + ...external-bridge-parameter-a0c7e7ff8d937541.yaml | 6 + .../remove-old-tls-envs-137cf19b55526a81.yaml | 9 + ..._IPv6_for_tenant_networks-30938bfdde547969.yaml | 8 + .../swift-container-sharder-b96c2fa43aa66aac.yaml | 6 + ...-api-to-httpd-support-tls-9b995fe4113b2412.yaml | 6 + ...tch-to-default-ovn-driver-ab4ae9d348158d61.yaml | 16 + .../notes/tripleo_ui-1923e35ee139f777.yaml | 4 + .../undercloud-tripleo-admin-7043cc0b2e4bfb8a.yaml | 5 + ...-cinder-netapp-parameters-cf6da846e72007df.yaml | 11 + .../var_lib_docker_deprec-0c48311c01605228.yaml | 7 + roles/BlockStorage.yaml | 1 + roles/CellController.yaml | 56 ++ roles/CephAll.yaml | 1 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 4 +- roles/ControllerAllNovaStandalone.yaml | 2 +- roles/ControllerNoCeph.yaml | 4 +- roles/ControllerNovaStandalone.yaml | 2 +- roles/ControllerOpenstack.yaml | 2 +- roles/ControllerStorageNfs.yaml | 4 +- roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephFile.yaml | 1 + roles/HciCephMon.yaml | 1 + roles/HciCephObject.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 2 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 1 + roles/Standalone.yaml | 15 +- roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 10 - roles_data.yaml | 8 +- roles_data_undercloud.yaml | 10 - sample-env-generator/enable-services.yaml | 14 +- sample-env-generator/messaging.yaml | 14 +- sample-env-generator/networking.yaml | 2 +- sample-env-generator/openidc.yaml | 2 +- sample-env-generator/ssl.yaml | 23 +- sample-env-generator/standalone.yaml | 25 +- sample-env-generator/storage.yaml | 8 +- tools/merge-new-params-nic-config-script.py | 19 +- tools/process-templates.py | 2 + tools/yaml-validate.py | 80 +-- tox.ini | 4 +- validation-scripts/all-nodes.sh | 8 +- zuul.d/layout.yaml | 108 +-- 639 files changed, 12276 insertions(+), 16739 deletions(-)

1 0

puppet-octavia 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are thrilled to announce the release of: puppet-octavia 14.3.0: Puppet module for OpenStack Octavia This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-octavia/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Add new parameter, "workers" to health_manager which defaults to $::os_workers * Added octavia::api::provider_drivers and octavia::api::default_provider_driver configuration to support configuring different load balancer drivers in octavia. * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-octavia 14.2.0..14.3.0 ---------------------------------------- aa79dfd Prepare Stein M3 ed586f1 Add release note about Ubuntu py3 upgrade 9825c43 Use validate_legacy f78d430 Service_token_roles_required missing in the server config file 82ed793 Add support for configuring provider drivers 9aa0149 Change wiki to docs 3856be1 Use puppet 4 compatible mysql functions c588f6f Remove Ubuntu Xenial from metadata.json 4a866ff Fix lint issue e430afb Remove redundantly tested code efb5884 Inherit pyvers from openstacklib::defaults 5e7845e heatlh_manager default to os_workers a48d9b3 Modify puppet version 4 to 5 faf253e update apache.pp [oportunity to opportunity] Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/api.pp | 16 +++++++++ manifests/config.pp | 2 +- manifests/db.pp | 5 ++- manifests/db/mysql.pp | 4 +-- manifests/health_manager.pp | 9 ++++- manifests/keystone/authtoken.pp | 8 +++++ manifests/params.pp | 9 ++--- manifests/policy.pp | 2 +- manifests/worker.pp | 2 +- manifests/wsgi/apache.pp | 2 +- metadata.json | 17 +++++---- ...th_manager-worker-default-6259b601e01db4f3.yaml | 4 +++ ...dd-provider-driver-config-9f5352879efe3f9d.yaml | 6 ++++ .../notes/puppet4-mysql-func-2a3fa2c6b7e24554.yaml | 4 +++ .../release-note-ubuntu-py3-ff9dcddda18683a6.yaml | 10 ++++++ ...vice_token_roles_required-8294ec1e5b3fc75f.yaml | 5 +++ spec/classes/octavia_api_spec.rb | 6 ++++ spec/classes/octavia_client_spec.rb | 6 +--- spec/classes/octavia_db_spec.rb | 40 ---------------------- spec/classes/octavia_health_manager_spec.rb | 11 ++++++ spec/classes/octavia_keystone_authtoken_spec.rb | 3 ++ spec/classes/octavia_logging_spec.rb | 34 +++++++++--------- 23 files changed, 120 insertions(+), 87 deletions(-)

1 0

paunch 4.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We joyfully announce the release of: paunch 4.3.0: Utility to launch and manage containers using YAML based configuration data This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through launchpad: https://bugs.launchpad.net/paunch For more details, please see below. 4.3.0 ^^^^^ New Features ************ * Add new "cont_log_path". It must point to a directory, where the container engine will puts logs issued from containers standard output. It works only for podman. * Add new "--container-log-path" allowing to actually set cont_log_path from the CLI call directly. * Podman is now the default container runtime, replacing Docker. * Adds a new systemd_exec_flags parameter for paunch-managed systemd unit Deprecation Notes ***************** * Docker runtime is deprecated in Stein and will be removed in Train. Changes in paunch 4.2.0..4.3.0 ------------------------------ a6f17e5 Deprecate docker runtime e42b469 Switch to Podman by default 4be2e35 Keep the old paunch behaviour ca4a102 systemd: fix a typo in comments fba5e04 Inject log-driver for podman containers b452a33 Allow to pass some of systemd.exec flags f1c60c4 Revert "Always attempt a graceful container stop/remove" 074930f Increase and randomize healthcheck interval to avoid cpu congestion. b5a14c6 Always attempt a graceful container stop/remove 510f091 Implement podman rename via re-apply of containers 44ebb18 Raise exception on systemd failures fc5aecd Prevent podman healthcheck failures during deploy b8f67c9 podman: container names when running paunch list 1aef17a podman: only check image availability when inspecting image 0435006 Log warnings and other paunch info to stderr 5558e52 Fix comparing dictionaries for changes detection Diffstat (except docs and test files) ------------------------------------- README.rst | 11 +-- paunch/__init__.py | 71 +++++++-------- paunch/builder/base.py | 8 +- paunch/builder/podman.py | 19 +++- paunch/cmd.py | 26 ++++-- paunch/runner.py | 101 +++++++++++++++++++-- paunch/utils/common.py | 2 +- paunch/utils/systemd.py | 53 ++++++++--- .../notes/docker_deprecate-a12eb9c4ab7e6567.yaml | 4 + .../notes/podman-logging-91a1962a7aaacc0b.yaml | 7 ++ .../notes/podman_default-be591a4b208cfd6a.yaml | 4 + .../notes/systemd-flags-1a8b3ade8a5c4615.yaml | 3 + requirements.txt | 1 + 15 files changed, 301 insertions(+), 106 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 44a9f90..fd8f739 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9 @@ tenacity>=3.2.1 # Apache-2.0 +jmespath>=0.9.0 # MIT

1 0

murano-agent 3.6.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We high-spiritedly announce the release of: murano-agent 3.6.0: Python Murano Agent This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/murano-agent/ For more details, please see below. Changes in murano-agent 3.5.1..3.6.0 ------------------------------------ ce41ef5 add python 3.7 unit test job 0d0e9fa Add py36 to classifier and update tox version 532acc9 Use template for lower-constraints 8118665 Change openstack-dev to openstack-discuss 4076763 Fix unit tests for python3.6 c922c24 add python 3.6 unit test job 1ceb8dd switch documentation job to new PTI 934c53c import zuul job settings from project-config d0875ae Remove the unused tools scripts f69ddf3 murano-aget PTI docs build 47559e9 Fix murano agent docs generate error 94ffe1a Update reno for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 - .zuul.yaml | 14 +- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + setup.cfg | 10 +- test-requirements.txt | 5 - tools/install_venv.py | 72 --------- tools/install_venv_common.py | 172 --------------------- tools/with_venv.sh | 4 - tox.ini | 14 +- 13 files changed, 60 insertions(+), 470 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8e82374..b7c1f8a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,5 +10,0 @@ oslotest>=3.3.0 # Apache-2.0 - -# doc build requirements -openstackdocstheme>=1.20.0 # Apache-2.0 -sphinx>=1.6.5,!=1.6.6,!=1.6.7 # BSD -reno>=2.7.0 # Apache-2.0

1 0

puppet-tempest 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are delighted to announce the release of: puppet-tempest 14.3.0: Puppet module for OpenStack Tempest This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-tempest/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. Upgrade Notes ************* * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-tempest 14.2.0..14.3.0 ---------------------------------------- 2b73250 Prepare Stein M3 ccb158b Add release note about Ubuntu py3 upgrade b15d400 Use validate_legacy 44ba233 Remove Ubuntu Xenial from metadata.json 56cdcd2 Add python3-openstackclient to autorequire ce257c6 Fix openstackclient spec test 80814cd Modify puppet version 4 to 5 24ee220 Inherit pyvers from openstacklib::defaults Diffstat (except docs and test files) ------------------------------------- lib/puppet/type/tempest_ec2_credentials.rb | 2 +- lib/puppet/type/tempest_glance_id_setter.rb | 2 +- lib/puppet/type/tempest_neutron_net_id_setter.rb | 2 +- manifests/config.pp | 2 +- manifests/init.pp | 2 +- manifests/params.pp | 8 ++------ metadata.json | 9 ++++----- .../notes/release-note-ubuntu-py3-4b23ab1bfc1e534e.yaml | 10 ++++++++++ spec/classes/tempest_init_spec.rb | 6 +----- 9 files changed, 22 insertions(+), 21 deletions(-)

1 0

puppet-swift 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are satisfied to announce the release of: puppet-swift 14.3.0: Puppet module for OpenStack Swift This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-swift/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. Upgrade Notes ************* * The default value for swift::dispersion::auth_url is changed from http://127.0.0.1:5000/v2.0/ to http://127.0.0.1:5000/v3/ * The default value for swift::auth_file::auth_url is changed from http://127.0.0.1:5000/v2.0/ to http://127.0.0.1:5000/v3/ * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. * The deprecated parameter admin_token in swift::proxy::authtoken is now removed. Changes in puppet-swift 14.2.0..14.3.0 -------------------------------------- d513901 Prepare Stein M3 ba1ec6d Use validate_legacy 801104f Change keystone v2.0 to v3 828b558 Add release note about Ubuntu py3 upgrade 5a6296b Change wiki to docs 7ae11fb Remove Ubuntu Xenial from metadata.json bc8dc51 Inherit pyvers from openstacklib::defaults 6b478c7 Modify puppet version 4 to 5 1428c50 Remove swift::proxy::keystoneauth::admin_token Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- examples/site.pp | 3 +-- manifests/auth_file.pp | 4 ++-- manifests/config.pp | 7 ++++--- manifests/dispersion.pp | 2 +- manifests/params.pp | 8 +------- manifests/proxy.pp | 6 +++--- manifests/proxy/authtoken.pp | 9 --------- manifests/proxy/tempauth.pp | 14 +++++++------- manifests/ringbuilder/create.pp | 3 ++- manifests/ringbuilder/policy_ring.pp | 2 +- manifests/ringbuilder/rebalance.pp | 6 ++++-- manifests/storage/generic.pp | 3 ++- manifests/storage/node.pp | 3 ++- manifests/storage/server.pp | 11 ++++++----- metadata.json | 7 +++---- .../notes/change-keystone-v3-dd97e1db169b9b62.yaml | 8 ++++++++ .../notes/release-note-ubuntu-py3-166e8825549d2981.yaml | 10 ++++++++++ .../notes/remove-admin_token-14b3fd9fe23c018a.yaml | 4 ++++ spec/classes/swift_client_spec.rb | 6 +----- spec/classes/swift_dispersion_spec.rb | 2 +- spec/classes/swift_proxy_authtoken_spec.rb | 4 ++-- spec/classes/swift_proxy_spec.rb | 2 +- spec/defines/swift_storage_generic_spec.rb | 2 +- spec/defines/swift_storage_node_spec.rb | 2 +- spec/defines/swift_storage_server_spec.rb | 4 ++-- 26 files changed, 71 insertions(+), 63 deletions(-)

1 0

os-collect-config 10.2.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are amped to announce the release of: os-collect-config 10.2.0: Collect and cache metadata, run hooks on changes. This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 10.1.0..10.2.0 ------------------------------------------- 0bb4026 Change openstack-dev to openstack-discuss Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

tripleo-common 10.5.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are jazzed to announce the release of: tripleo-common 10.5.0: A common library for TripleO workflows. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 10.5.0 ^^^^^^ New Features * add support for unknown CA Changes in tripleo-common 10.4.0..10.5.0 ---------------------------------------- ebaf3373 utils/swift/download_container: python3 adjustment 1af49b19 Fix interaction between gitpython and eventlet 0786ed26 Revert "Modify roles to remove unused services" 7b0c621e Fix ansible tasks on python3 de25ee5f Small corrections in image_uploader 957c9bd5 Fix access of input parameters 174dcbcf mistral-executor: handle ansible-playbook-3 2f1c0b89 Specify Octavia amphora image hw_architecture property in Glance 61108029 Allow PythonImageUploader to accept unknown CA 37466897 Handle secret strings correctly 550537ac Handle swift interactions are strings as necessary 609d5eb0 drop msgpack now that kolla has dropped it as well 948a5f0c Warning cleanup in TestConfig 52fb87ce Modify roles to remove unused services d055f619 Delete FreeIPA enroll script e25456d9 Add support of extra variables. 8b4dbd7c Expunge the docker uploader 6f538dc8 Skip ssh_known_hosts tasks in check mode 762bf8c9 Don't always validate heat stack when adding parameters f15785e1 cinder block - dead code cleanup 9385dcc5 Allow tripleo-admin user to have a keypair 0618438f image-serve: add httpd_sys_content_t type to v2/index.json bd24d306 image-serve: redirect root to /v2 67a3c4d8 Improve retry behaviour of _copy_layer_registry_to_registry 853b22d8 image_uploader: conditionally import docker df12db5d drop python-crypto changes from overrides b38b4184 kolla_builder: don't build template mapping when not needed 0381d6cc Append qemu-img to Mistral executor package list 5d4d184b Add python3 packages to overrides f49319c3 Ensure docker is running before dropping containers 573f67df Use len to compare list at mistral c85e5ed1 Get osa container image from tripleo-common defaults 0d4e6223 image-serve: add httpd_sys_content_t type to image_data_dir fcdeb0c0 fix if statement compare strings with -gt b5944d0b Enable placement-api health check 6ab8c451 Sphinx throws warnings on workbooks descriptions 77998d43 Fix Sphinx warnings on auto generated workbooks docs Diffstat (except docs and test files) ------------------------------------- .../tripleo_kolla_template_overrides.j2 | 122 ++++-- healthcheck/common.sh | 2 +- playbooks/roles/common/defaults/main.yml | 1 + .../roles/octavia-undercloud/tasks/image_mgmt.yml | 1 + .../no-verify-registries-215e4df615e441ff.yaml | 3 + requirements.txt | 2 +- roles/tripleo-create-admin/README.md | 9 + roles/tripleo-create-admin/defaults/main.yml | 1 + roles/tripleo-create-admin/tasks/create_user.yml | 7 + roles/tripleo-docker-rm/tasks/main.yaml | 7 + roles/tripleo-image-serve/tasks/main.yml | 8 +- .../templates/image-serve.conf.j2 | 1 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 1 + scripts/create_freeipa_enroll_envfile.py | 240 ------------ scripts/tripleo-deploy-openshift | 23 +- setup.cfg | 1 - tripleo_common/actions/ansible.py | 2 +- tripleo_common/actions/container_images.py | 13 +- tripleo_common/actions/deployment.py | 15 +- tripleo_common/actions/heat_capabilities.py | 16 +- tripleo_common/actions/logging_to_swift.py | 13 +- tripleo_common/actions/parameters.py | 7 +- tripleo_common/actions/plan.py | 33 +- tripleo_common/actions/templates.py | 34 +- tripleo_common/actions/vcs.py | 3 +- tripleo_common/image/image_uploader.py | 209 +++------- tripleo_common/image/kolla_builder.py | 6 +- tripleo_common/update.py | 9 +- tripleo_common/utils/config.py | 4 +- tripleo_common/utils/passwords.py | 6 +- tripleo_common/utils/plan.py | 16 +- tripleo_common/utils/safe_import.py | 28 ++ tripleo_common/utils/swift.py | 26 +- tripleo_common/utils/validations.py | 4 +- workbooks/deployment.yaml | 4 +- workbooks/messaging.yaml | 6 +- workbooks/octavia_post.yaml | 2 + workbooks/package_update.yaml | 2 + workbooks/plan_management.yaml | 4 + workbooks/swift.yaml | 2 +- workbooks/swift_backup.yaml | 2 + 47 files changed, 580 insertions(+), 948 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6628c2fc..200ed81a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ Babel!=2.4.0,>=2.3.4 # BSD -docker>=2.4.2 # Apache-2.0 @@ -8,0 +8 @@ GitPython>=1.0.1 # BSD License (3 clause) +eventlet!=0.20.1,>=0.20.0 # MIT

1 0

os-refresh-config 10.2.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are gleeful to announce the release of: os-refresh-config 10.2.0: Refresh system configuration This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 10.1.0..10.2.0 ------------------------------------------- f1042d5 Change openstack-dev to openstack-discuss Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

puppet-heat 14.3.0 (stein)
by no-reply＠openstack.org 14 Mar '19

14 Mar '19

We are gleeful to announce the release of: puppet-heat 14.3.0: Puppet module for OpenStack Heat This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-heat/ For more details, please see below. 14.3.0 ^^^^^^ Prelude ******* In this release Ubuntu has moved all projects that supported it to python3 which means that there will be a lot of changes. The Puppet OpenStack project does not test the upgrade path from python2 to python3 packages so there might be manual steps required when moving to the python3 packages. New Features ************ * Service_token_roles_required missing in the server config file which allows backwards compatibility to ensure that the service tokens are compared against a list of possible roles for validity. Upgrade Notes ************* * This module now requires a puppetlabs-mysql version >= 6.0.0 * Ubuntu packages are now using python3, the upgrade path is not tested by Puppet OpenStack. Manual steps may be required when upgrading. Changes in puppet-heat 14.2.0..14.3.0 ------------------------------------- 05bf8a7 Prepare Stein M3 ac9a56e Change keystone v2.0 url to v3 66685ab Add release note about Ubuntu py3 upgrade e46b67d Use validate_legacy 532ab0e Service_token_roles_required missing in the server config file 1fd2d6d Change wiki to docs be38442 Use puppet 4 compatible mysql functions a76f651 Remove Ubuntu Xenial from metadata.json 2c9b264 Fix lint issue ca287bf Remove redundantly tested code 01ac308 Inherit pyvers from openstacklib::defaults 9fa99c2 Modify puppet version 4 to 5 Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/config.pp | 4 +- manifests/db.pp | 4 +- manifests/db/mysql.pp | 4 +- manifests/engine.pp | 3 +- manifests/init.pp | 4 +- manifests/keystone/auth.pp | 2 +- manifests/keystone/auth_cfn.pp | 2 +- manifests/keystone/authtoken.pp | 8 +++ manifests/params.pp | 7 +-- manifests/policy.pp | 2 +- manifests/wsgi/apache_api_cfn.pp | 2 +- metadata.json | 15 +++-- .../notes/puppet4-mysql-func-9583edec939bbaa2.yaml | 4 ++ .../release-note-ubuntu-py3-b9db3eea73644589.yaml | 10 +++ ...vice_token_roles_required-ae86f905a716e6f4.yaml | 5 ++ spec/classes/heat_client_spec.rb | 6 +- spec/classes/heat_db_spec.rb | 72 ++++------------------ spec/classes/heat_init_spec.rb | 4 +- spec/classes/heat_keystone_authtoken_spec.rb | 3 + spec/classes/heat_logging_spec.rb | 30 ++++----- 21 files changed, 84 insertions(+), 109 deletions(-)

1 0