June 2019 - Release-announce - lists.openstack.org

os-traits 0.15.0
by no-reply＠openstack.org 29 Jun '19

29 Jun '19

We joyfully announce the release of: os-traits 0.15.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 0.14.0..0.15.0 ----------------------------------- 74f8a3f Add COMPUTE_STATUS_DISABLED trait 95668fd add GOP, NONE and VIRTIO grapics models 21f232b add libvirt image metadata traits b7f385f Sync Sphinx requirement Diffstat (except docs and test files) ------------------------------------- os_traits/compute/graphics.py | 27 +++++++++++++++++++++++++++ os_traits/compute/net.py | 16 ++++++++++++++++ os_traits/compute/status.py | 18 ++++++++++++++++++ os_traits/compute/storage.py | 28 ++++++++++++++++++++++++++++ releasenotes/source/index.rst | 6 +++--- releasenotes/source/pike.rst | 6 +++--- releasenotes/source/rocky.rst | 6 +++--- releasenotes/source/stein.rst | 6 +++--- 9 files changed, 103 insertions(+), 13 deletions(-)

1 0

python-ironic-inspector-client 3.6.1 (train)
by no-reply＠openstack.org 28 Jun '19

28 Jun '19

We are thrilled to announce the release of: python-ironic-inspector-client 3.6.1: Python client for Ironic Inspector This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://bugs.launchpad.net/python-ironic-inspector-client/+bugs For more details, please see below. 3.6.1 ^^^^^ Bug Fixes * Fixes regression in 3.6.0 that caused the deprecated "uuid" argument to various calls to stop working. Changes in python-ironic-inspector-client 3.6.0..3.6.1 ------------------------------------------------------ 81ae133 Repair the deprecated uuid/uuids arguments 519190d Switch base job to ironic-base Diffstat (except docs and test files) ------------------------------------- ironic_inspector_client/test/test_v1.py | 46 ++++++++++++++++++++++ ironic_inspector_client/v1.py | 15 ++++--- .../notes/deprecated-uuid-d0c8e8980106e7f9.yaml | 5 +++ zuul.d/python-ironic-inspector-client-jobs.yaml | 7 +--- 4 files changed, 61 insertions(+), 12 deletions(-)

1 0

openstack-ansible 17.1.12 (queens)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We are glad to announce the release of: openstack-ansible 17.1.12: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 17.1.11..17.1.12 --------------------------------------------- 4f883439e Dropping support of 42.3 cc4c498ac Load extra variables correctly in wrapper e848fc874 Bump SHAs for stable/queens Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 78 +++++++++++----------- scripts/openstack-ansible.sh | 2 +- zuul.d/jobs.yaml | 29 -------- zuul.d/project.yaml | 4 -- 6 files changed, 44 insertions(+), 77 deletions(-)

1 0

python-saharaclient 2.2.1 (stein)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We joyfully announce the release of: python-saharaclient 2.2.1: Client library for Sahara API This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-saharaclient Download the package from: https://pypi.org/project/python-saharaclient Please report issues through: https://bugs.launchpad.net/python-saharaclient/+bugs For more details, please see below. 2.2.1 ^^^^^ Bug Fixes * Fix the "job binary download" command when Python 3 is used. Changes in python-saharaclient 2.2.0..2.2.1 ------------------------------------------- 564380a Py3: fix the OSC download job binary command ee66632 OpenDev Migration Patch 6e414fd Update UPPER_CONSTRAINTS_FILE for stable/stein 6d96f1a Update UPPER_CONSTRAINTS_FILE for stable/stein fcc553a Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .../notes/fix-job-binary-download-py3-5592eca2345305bd.yaml | 4 ++++ saharaclient/osc/v1/job_binaries.py | 2 +- tox.ini | 8 ++++---- 4 files changed, 11 insertions(+), 6 deletions(-)

1 0

openstack-ansible 18.1.8 (rocky)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We contentedly announce the release of: openstack-ansible 18.1.8: Ansible playbooks for deploying OpenStack This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 18.1.8 ^^^^^^ New Features ************ * A new option has been added allowing deployers to disable any and all containers on a given host. The option *no_containers* is a boolean which, if undefined, will default to *false*. This option can be added to any host in the *openstack_user_config.yml* or via an override in *conf.d*. When this option is set to *true* the given host will be treated as a baremetal machine. The new option mirrors the existing environmental option *is_metal* but allows deployers to target specific hosts instead of entire groups. log_hosts: infra-1: ip: 172.16.24.2 no_containers: true Upgrade Notes ************* * The variable "tempest_image_dir_owner" is removed in favour of using default ansible user to create the image directory. * The data structure for "ceph_gpg_keys" has been changed to be a list of dicts, each of which is passed directly to the applicable apt_key/rpm_key module. As such any overrides would need to be reviewed to ensure that they do not pass any key/value pairs which would cause the module to fail. * The default values for "ceph_gpg_keys" have been changed for all supported platforms and now use vendored keys. This means that the task execution will no longer reach out to the internet to add the keys, making offline or proxy-based installations easier and more reliable. * A new value "epel_gpg_keys" can be overridden to use a different GPG key for the EPEL-7 RPM package repo instead of the vendored key used by default. Changes in openstack-ansible 18.1.7..18.1.8 ------------------------------------------- c8d05df75 Dropping support of 42.3 c49a2e4f9 Load extra variables correctly in wrapper 749fe63a3 Update SHA for heat eb24506c8 Add global HA policy for rabbitmq 0076f77a6 Bump SHAs for stable/rocky Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +-- inventory/group_vars/all/infra.yml | 5 ++ inventory/group_vars/all/oslo-messaging.yml | 2 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 76 +++++++++++----------- .../notes/oslomsg_policies-7ac27a5c2a7fbed2.yaml | 9 +++ scripts/openstack-ansible.sh | 2 +- zuul.d/jobs.yaml | 53 --------------- zuul.d/project-templates.yaml | 17 ----- 9 files changed, 61 insertions(+), 115 deletions(-)

1 0

python-ironic-inspector-client 3.6.0 (train)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are jazzed to announce the release of: python-ironic-inspector-client 3.6.0: Python client for Ironic Inspector This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://bugs.launchpad.net/python-ironic-inspector-client/+bugs For more details, please see below. 3.6.0 ^^^^^ Deprecation Notes * Parameter uuid is deprecated in ClientV1 and will be removed in future releases, please use node_id instead. Changes in python-ironic-inspector-client 3.5.0..3.6.0 ------------------------------------------------------ 70b763f Update Python 3 test runtimes for Train 440cd92 OSC: try fetching ironic-inspector URL from osc-lib e146a84 Update sphinx requirements 7eba393 Fetch requirements from opendev fa83584 OpenDev Migration Patch ed62c61 Dropping the py35 testing d04505b Replace openstack.org git:// URLs with https:// 084d1de Deprecates "uuid" parameters to Python calls when node is expected 19602a4 Update master for stable/stein 2e684a0 Find misteriously missing pep8 import check Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- functest-requirements.txt | 4 +- ironic_inspector_client/shell.py | 10 +- ironic_inspector_client/test/functional.py | 10 +- ironic_inspector_client/test/test_shell.py | 4 +- ironic_inspector_client/test/test_v1.py | 2 +- ironic_inspector_client/v1.py | 103 ++++++++++++--------- .../notes/version-uuid-b7f9e57589314fe9.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ setup.cfg | 4 +- test-requirements.txt | 1 + tox.ini | 23 ++++- zuul.d/project.yaml | 8 +- zuul.d/python-ironic-inspector-client-jobs.yaml | 8 +- 17 files changed, 123 insertions(+), 72 deletions(-) Requirements updates -------------------- diff --git a/functest-requirements.txt b/functest-requirements.txt index da203a1..03e3367 100644 --- a/functest-requirements.txt +++ b/functest-requirements.txt @@ -2,2 +2,2 @@ -git+git://git.openstack.org/openstack/ironic-inspector@be3f7eec18ad13dd6d5a94fe2963b45456fad19e#egg=ironic-inspector --r https://git.openstack.org/cgit/openstack/ironic-inspector/plain/test-requir… +git+https://opendev.org/openstack/ironic-inspector@be3f7eec18ad13dd6d5a94fe2963b45456fad19e#egg=ironic-inspector +-r https://opendev.org/openstack/ironic-inspector/raw/commit/be3f7eec18ad13dd6… \ No newline at end of file diff --git a/test-requirements.txt b/test-requirements.txt index 13ef714..fd278ea 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ fixtures>=3.0.0 # Apache-2.0/BSD +flake8-import-order>=0.13 # LGPLv3

1 0

tripleo-puppet-elements 8.1.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We enthusiastically announce the release of: tripleo-puppet-elements 8.1.0: Puppet building rules for OpenStack images. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 8.0.2..8.1.0 ----------------------------------------------- fe6b426 Add upper constraints 2284187 Remove redis from controller element b1cf744 OpenDev Migration Patch f0cb870 Install tmpwatch in the overcloud base image e795ab6 Add numactl to overcloud image Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- elements/overcloud-base/install.d/package-installs-overcloud-base | 2 ++ elements/overcloud-base/pkg-map | 4 +++- .../install.d/package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - tox.ini | 4 +++- 6 files changed, 9 insertions(+), 5 deletions(-)

1 0

tripleo-common 8.7.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are delighted to announce the release of: tripleo-common 8.7.0: A common library for TripleO workflows. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 8.7.0 ^^^^^ Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. * Fixes running the baremetal "provide" workflow with node names. * Workaround bug 1810932 by scripting an in-place update of ssh_known_hosts Changes in tripleo-common 8.6.8..8.7.0 -------------------------------------- ee175296 Add the ability to compute osds number counting lvm devices a80f1b03 [CVE-2019-3895] Set image owner id 2be48861 Add passphrase generation for Octavia 83c08960 Workaround ssh_known_hosts changes not being propagated to containers 8014dec6 Add XClarity in the list of supported hw types 4fe901d2 Don't use node count from failed stack parameters 14d6c5fc [Queens only] Set the deployment status on Mistral deployment tasks. 3ea5ae62 Standardise Workflow messaging and optionally persist messages 1c2c0a0a Remove amp_hw_arch from octavia_post dfab3485 OpenDev Migration Patch 324f30f2 Add message to the Payload for update_node task 87cef2ea Upgrades: Don't try to publish ansible output in ceph_install f5d06ad8 Fix running the baremetal provide workflow with node names 8315421b Clean up node registration output. ee9a5545 Configurable host network for inventory e5207aed Don't always validate heat stack when adding parameters 52ce413b Add workflow for plan deployment status 17a050f1 Specify Octavia amphora image hw_architecture property in Glance abafea83 Workflow and action for deployment failures a2550158 Run NetworkDeployment as async task 22e6135b Ansible json error callback plugin 5c398a07 Stops growth of massive dentry cache growth Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible_plugins/callback/json_error.py | 62 +++++ healthcheck/common.sh | 1 + playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../octavia-controller-config/tasks/octavia.yml | 12 + .../roles/octavia-undercloud/tasks/image_mgmt.yml | 46 +++- ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 + .../notes/provide-name-f75b6b61d3d8d693.yaml | 4 + ..._known_host_atomic_update-481e0baf3b3d6342.yaml | 5 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 30 +- setup.cfg | 2 + tripleo_common/actions/deployment.py | 52 ++++ tripleo_common/actions/parameters.py | 7 +- tripleo_common/actions/validations.py | 2 +- tripleo_common/constants.py | 7 + tripleo_common/inventory.py | 10 +- tripleo_common/templates/deployments.yaml | 39 ++- tripleo_common/utils/nodes.py | 1 + workbooks/baremetal.yaml | 39 +-- workbooks/ceph-ansible.yaml | 2 - workbooks/deployment.yaml | 305 +++++++++++++-------- workbooks/derive_params_formulas.yaml | 8 +- workbooks/messaging.yaml | 151 ++++++++++ workbooks/package_update.yaml | 1 + workbooks/plan_management.yaml | 3 + 30 files changed, 732 insertions(+), 184 deletions(-)

1 0

os-net-config 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are satisfied to announce the release of: os-net-config 8.5.0: OpenStack network configuration This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. 8.5.0 ^^^^^ New Features * A key called "domain" is now available for interfaces. This allows the setting of a domain for an ifcfg configuration, which will aide DNS search. * Support for configuring policy-based routing has been added. A new top-level object "route_table" has been added, which allows the user to add tables to the system route table at /etc/iproute2/rt_tables. Routes have a new "table" property for specifying which table to apply the route. Interfaces now have a "rules" property that allows the user to add arbitrary rules for when the system should use a particular routing table, such as input interface or source IP address. Changes in os-net-config 8.4.4..8.5.0 ------------------------------------- 10566ba Fixed the false InvalidConfigException for vfid=0 5c0b84d [FUP] Update sriov_pf.yaml samle with ethtool_opt 8133892 Add support for ethtool options for sriov_pf ports ffd2459 Unify ethtool options logic 18fa8b6 Add Policy Based Routing Support to os-net-config 683650a Add missing unit-test for IbInterface ethtool opts 580cce3 Add ability to specify multiple search domains 14690ff Enable setting domain parameter for interfaces cd0aa7d Modify udev rule for VF representor rename c505506 Add upper constraints to tox a09e801 OpenDev Migration Patch f7c1df0 Add ovs_options and ovs_extra parameters to VLAN object db52a40 Adding a udev rule to rename the vf representors. f386f12 Adding a udev rule to save sriov interface name before configuring switchdev 36a8fa9 Removing the warnings generated due to yaml.load() f26718f Fix os-net-config interface restarts when applying routes ccbda4e Configure switchdev mode in SR-IOV in os-net-config 9245f31 Allow adding sriov_pf over ovs_bridge, linux_bond and ovs_bond adff3c4 Fix incorrect application of 'ip' commands for bridges Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- etc/os-net-config/samples/bridge_vlan.json | 4 + etc/os-net-config/samples/bridge_vlan.yaml | 3 + etc/os-net-config/samples/routes.yaml | 52 ++ etc/os-net-config/samples/sriov_pf.json | 3 +- etc/os-net-config/samples/sriov_pf.yaml | 2 + etc/os-net-config/samples/sriov_pf_switchdev.json | 84 +++ etc/os-net-config/samples/sriov_pf_switchdev.yaml | 87 +++ os_net_config/__init__.py | 9 + os_net_config/cli.py | 23 +- os_net_config/impl_ifcfg.py | 243 +++++++- os_net_config/objects.py | 684 +++++++++++++-------- os_net_config/schema.yaml | 181 +++++- os_net_config/sriov_config.py | 163 ++++- os_net_config/utils.py | 13 +- os_net_config/validator.py | 2 +- .../enable-setting-domain-5557e2441c23a5a5.yaml | 5 + .../policy-based-routing-3fa1200ae155bbee.yaml | 10 + tox.ini | 4 +- 24 files changed, 1730 insertions(+), 353 deletions(-)

1 0

tripleo-validations 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are excited to announce the release of: tripleo-validations 8.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 8.4.5..8.5.0 ------------------------------------------- 49f8aad Sync 'validations/check-network-gateway.yaml' with the new role c2b34e2 Fix check-network-gateway validation 14c8416 Fix ctlplane-ip-range validations 4478763 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- tools/ansible-lint.sh | 2 +- validations/check-network-gateway.yaml | 45 ++++++++++++++++++++++++++-------- validations/ctlplane-ip-range.yaml | 28 +++++++++++++++------ 4 files changed, 58 insertions(+), 19 deletions(-)

1 0

python-tripleoclient 9.3.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are amped to announce the release of: python-tripleoclient 9.3.0: TripleO client This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 9.3.0 ^^^^^ New Features * A new command, openstack overcloud failures, is added to show the failures from a deployment plan when using config-download. * A new command, openstack overcloud status, is added to show the status of a deployment plan when using config-download. Changes in python-tripleoclient 9.2.7..9.3.0 -------------------------------------------- d38a5c1d Use OS_CACERT for zaqar's websocket connection 531c1504 Raise proper exception at webscocket close 7f8d8999 Handle tls endpoint for zaqar websocket client 901074e2 Add ODL deprecation warning in CLI 98a82780 Don't exit on a RUNNING message for deploy workflow e11afa0b OpenDev Migration Patch 6ce2039d [Queen Only] Add force option to undercloud update. 81484cc9 openstack overcloud failures 5a996ffa Use sync action get_deployment_failures 0d6a687e Don't validate stack when creating/updating plan 6851fc1b Check that the networks are defined on update 8072fc1e Add verbosity level to the ansible update/upgrade run 6b74184d Handle workflow error for enable_ssh_admin 10b14b06 overcloud plan deployment status 66fbbee6 Use a single queue for update/upgrade 4778455c Get the failed status for update prepare Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../notes/overcloud-failures-0e98b37251fb2be2.yaml | 4 + .../notes/overcloud-status-69d3cc931f50930e.yaml | 4 + setup.cfg | 2 + tripleoclient/constants.py | 19 ++- tripleoclient/exceptions.py | 4 + tripleoclient/plugin.py | 33 +++-- .../v1/overcloud_deploy/test_overcloud_deploy.py | 136 +++++++++++++++++++-- .../test_overcloud_ffwd_upgrade.py | 8 +- .../v1/overcloud_update/test_overcloud_update.py | 12 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 20 +-- tripleoclient/utils.py | 85 ++++++++++++- tripleoclient/v1/overcloud_deploy.py | 97 ++++++++++++++- tripleoclient/v1/overcloud_ffwd_upgrade.py | 9 +- tripleoclient/v1/overcloud_plan.py | 5 +- tripleoclient/v1/overcloud_update.py | 12 +- tripleoclient/v1/overcloud_upgrade.py | 13 +- tripleoclient/v1/undercloud.py | 20 ++- tripleoclient/v1/undercloud_backup.py | 4 +- tripleoclient/workflows/base.py | 4 +- tripleoclient/workflows/deployment.py | 72 ++++++++++- tripleoclient/workflows/package_update.py | 34 +++--- tripleoclient/workflows/plan_management.py | 11 +- 31 files changed, 732 insertions(+), 121 deletions(-)

1 0

paunch 2.5.2 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We contentedly announce the release of: paunch 2.5.2: Utility to launch and manage containers using YAML based configuration data This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. 2.5.2 ^^^^^ New Features * Add *--security-opt=xxx* option for the action run a container. Allows to define security options, such as turning labels (SELinux) on/off. Changes in paunch 2.5.1..2.5.2 ------------------------------ 90cf8bb Revert "docker/compose: quote health-cmd" dd9ca1a Add upper constraints for testing b4bce8a Allow configuring security options 6a39021 OpenDev Migration Patch 9fbbad5 docker/compose: quote health-cmd Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- paunch/builder/compose1.py | 2 ++ releasenotes/notes/Add-security-opt-76c14c9b39d35d3e.yaml | 5 +++++ tox.ini | 3 ++- 5 files changed, 14 insertions(+), 4 deletions(-)

1 0

os-apply-config 8.3.2 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: os-apply-config 8.3.2: Config files from cloud metadata This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 8.3.1..8.3.2 --------------------------------------- ad29f1d Don't render None as "null" 779fff5 OpenDev Migration Patch 3c570ff Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 4 ++-- os_apply_config/renderers.py | 2 ++ 4 files changed, 10 insertions(+), 3 deletions(-)

1 0

tripleo-heat-templates 8.4.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are satisfied to announce the release of: tripleo-heat-templates 8.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 8.4.0 ^^^^^ New Features ************ * Added the configuration option to disable Exact Match Cache (EMC) * Support setting values for "cephfs_volume_mode" manila parameter via the THT parameter ManilaCephFSCephVolumeMode. These control the POSIX rwx mode of the cephfs volumes, snapshots, and groups of these that back corresponding manila resources. Default value for ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the mode for these objects before it was settable. * Add new CinderNfsSnapshotSupport parameter, which controls whether cinder's NFS driver supports snapshots. The default value is True. * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * The parameter "NovaRbdPoolName" is changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * New parameter "NovaNfsVersion" allow configuring the NFS version used for nova storage (when NovaNfsEnabled is true). Since NFSv3 does not support full locking a NFSv4 version need to be used. To not break current installations the default is the previous hard coded version 4. * The Shared File Systems service (manila) API has been switched to running behind httpd, and it now supports configuring TLS options. Upgrade Notes ************* * Cinder's NFS driver does not support snapshots unless the feature is explicitly enabled (this policy was chosen to ensure compatibility with very old versions of libvirt). The CinderNfsSnapshotSupport default value is True, and so the new default behavior enables NFS snapshots. This change is safe because it just enables a capability (i.e. snapshots) that other cinder drivers generally provide. * Per-service config_settings should now use hiera interpolation to set the bind IP for services, e.g "%{hiera('internal_api')}" whereas prior to this release we replaced e.g internal_api for the IP address internally. The network name can still be derived from the ServiceNetMap - all the in-tree templates have been converted to the new format, but any out of tree templates may require similar adjustment. * Keystone catalog entries for Cinder's v1 API are no longer created, but existing entries will not be automatically deleted. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * It is now possible for temporary containers inside THT to test if they are being run as part of a minor update by checking if the TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said containers need to export it to the container explicitely), see <service>_restart_bundles for examples. * When setting up TLS everywhere, some deployers may not have their FreIPA server in the ctlplane, causing the ipaclient registration to fail. We move this registration to host-prep tasks and invoke it using ansible. At this point, all networks should be set up and the FreeIPA server should be accessible. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * With large number of OSDs, where each OSD need a connection, the default nofile (1024) of nova_compute is too small. This changes the default DockerNovaComputeUlimit to 131072 what is the same for cinder. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. * If nova-manage command was triggered on a host for the first time as root (usually manual runs) the nova-manage.log gets created as root user. On overcloud deploy runs the nova-manage command is run as nova user. In such situation the overcloud deploy fails as the nova user can not write to the nova-manage.log. With this change we run the chown of the logs files on every overcloud deploy to fix the nova-manage.log file permissions. * The keystone service and endpoint for Cinder's API v1 are no longer created. Cinder removed support for its v1 API in Queens. * Historically if a puppet definition for a pacemaker resource did change puppet would not update it. We now enable the updating of pacemaker resources by default. The main use case being restarting a bundle when a bind mount gets added. Puppet will wait for the resource to completely restart before proceeding with the deploy. Other Notes *********** * The common tasks in deploy-steps-tasks.yaml that are common to all roles are now tagged with one of: host_config, container_config, container_config_tasks, container_config_scripts, or container_startup_configs. * The step plays in deploy-steps.j2 (which generates the deploy_steps_tasks.yaml playbook) are now tagged with step[1-5] so that they can run individually if needed. Changes in tripleo-heat-templates 8.3.1..8.4.0 ---------------------------------------------- bc1bfd8f7 Fix NovaNfs role parameters 7e9e0cd60 Remove scenario008 jobs f6883a0bf Fix log owner on computes during overcloud deploy runs 190689f4e Use auth_uri for Neutron API for Nova Placement 8b73814e7 Re-enable manila dashboard 127508c0f Backport miss to run discovery via bootstrap_host_exec 103431bba Add ComputeHCIOvsDpdk role a17f79890 Fix correct network for nova-vnc 7b1e923ed Add panko_api_cron container 7e6b6bafa Add {{role.name}}RemovalPoliciesMode parameter 45ab7d963 Fix undefined variable python_interpreter 6cfa2976a Request certificate for using host service principals e42e72b0f Configure server_certs_key_passphrase for Octavia b2a9af00f Start/enable OVS on neutron ovs agent nodes 68dfc3006 Only request neutron certificate from neutron dhcp service 8d4f109a6 Clean metrics related environments 13f77b981 Revert "[queens-only] Write docker config scripts only if config exists" 0d77e3d31 Configure Neutron API for Nova Placement... 257315572 Fix ssl.yaml generating GaneshaInternal in the endpoint map 916a5378c OVN: Add env file to deploy SRIOV with OVN. 43b074c10 Do not bind /run on host to nova_migration_target be2977005 Remove bogus EXPERIMENTAL from services-docker file. 40467b0f3 [Rocky/Queens Only] Remove pre-upgrade validation tasks in cont services. 9934640fc Fix service auth URL in Octavia 82875a493 Fix haproxy stats network binding 073851d32 [queens-only] Write docker config scripts only if config exists 5e5f2d0f3 Fix custom network.name_lower in krb-service-principals 7edda0e2b Convert ServiceNetMap evals to hiera interpolation 525def101 Remove the iptables rules set via service_config_settings a3662c067 Run collectd socket cleanup on container start 560f88532 Make krb-service-principal metadata per-Role 2c4004d7a [stable queens/pike] Use server_not_blacklisted condition 67b2ec841 Add domain and no-ntp options to ipaclient e59c324e4 [FFWD] Fix cell0 database uri 2d9b95971 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames fd92a337b Add ability to specify dns search domains eee4d27a4 Fix IPA client when doing brownfield deployment of internal TLS 5c37edc49 Add mkhomedir option to ipa-client-install 4a377819d Only add internal_api_virtual_ip if InternalApi in network_data 35fc35bc1 Try a timesync as part of first boot 4bce0f151 Enable serial execution for ansible host 4bde3dc4d Add cinder credentials to nova conf c47de732a Set arp_notify to match ndisc_notify 306412539 Remove deprecated Ram/Disk filters in NovaSchedulerDefaultFilters 518741618 Fix NovaNfs role parameter precedence in conditions 10a6610f4 Remove OVNTunnelEncapType 181ecb583 Deployment: Properly pick bootstrap node per role 3ff4bdcd3 Enable ndisc_notify sysctl setting to notify of MAC changes f14b4dcd8 Add parameter to configure maxdelay in db purge/archive job 3c9f7577c Allow ssh from all for undercloud b81c74437 implement default ssh-from-ctlplane rule via hiera 72b0b93d2 Ensure there is no redis on host cce6c7e34 Run nova-manage as root to prevent wrong nova-manage.log permissions 92d860e73 Run nova_cell_v2_discover_hosts.py on every deploy run 74ba670bb Allow NovaNfs parameters to be role specific d8e4ee655 Avoid concurrent nova cell_v2 discovery instances fa69837f9 Switch Manila API to httpd and support TLS d158bc7fc Modifying the ovs-hw-offlaod file to adapt new changes 169ceb9a9 OpenDev Migration Patch 0fb8970bb fix storage.yaml to write environments/storage/nova-nfs.yaml 450d50f54 Run octavia-api under httpd 5f147a0b2 Add release check for ffwd upgrade tasks 7577c22f1 Allow NovaRbdPoolName to be role specific babe303f2 Fixed wrong cinder store user name 847ec663c ceilometer_agent_notification: disable-panko.yaml 33784c053 Remove deprecated value used to set nova_metadata_ip 9ddef7106 Provide option to disable EMC in puppet-vswitch 3c0a2190f Increase DockerNovaComputeUlimit default value 35b4bf6e0 Set ulimit 16384 for Neutron SR-IOV container bf87c099c Fix usage of satellite in organization mode bc30fb036 Increase default ulimit values for Neutron agents containers dc9a67ced Do not restart bundles during a minor update 79eddd155 Be able to know when we are running inside a minor update workflow 2a734381f Enable deep_compare of pcmk resources by default 9a1ebb368 Add GnocchiStorageS3BucketPrefix into deployment bb9592fd3 Add support to ping IPv6 metadata IP 3bc041b47 Fix tempest volume tests on queens 96de607ed Add support for cinder NFS snapshots f6c4f652c [queens-only] Remove primary role constraint to deploy NodeTLSData e51967ff2 Disable a directory listing of /icons in httpd. 9b78d4eff TLS everywhere: switch Octavia to use DNS entries ff5a5bf5a Simplify ssh known_hosts entries for non-default port 65b285ffa Include ssh known_hosts entries for non-default port 95b235403 Enable flat network for ovn 48b277cdc [Queens-only] Install and configure tmpwatch for log cleanup 221a9eb5d Pass all vars to deploy-steps-tasks.yaml with config-download 849d5ce55 Fix reload notification file 4826a2de3 Stop iscsid when running FFU tasks. 23271148f Make nfs version for nova ephemeral storage configurable bd5246616 Remove unused parameter NovaPassword fb4ef9101 Disable cinder's LVM backend when deploying Pure backend f7bae9b7f Fix python binary lookup regression 86c8de92b Don't create service or endpoint for cinder API v1 f036df558 Run chown for nova log files on every run to fix wrong permissions 1cb29d0c8 Add missing TLS configuration for ironic 68e57adde Remove ENV parameters for nova_cell_v2_discover_host.py ace57871f Convert with_dict tasks to use loop and be less chatty f56b8b547 Optional ICMP validation of controllers and gateways 4f4bd1c28 Tag tasks in in common tasks ec02985da Reload rsyslog/cron when we change timezones 2c7f55cf1 Support cephfs_volume_mode parameter 7fad087a8 Refactored configuration options for nova/neutron in manila f29a2fdeb Switch scenario004-multinode-containers to Ceph filestore 7761ae38d Fix idempotency for horizon container logs 9e26c529a Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient 0371fb3c3 Add missing entries for Pure Storage Cinder Backend and fix typos 8d77ea169 Move cellv2 discovery from control plane services to compute services 6d44ae7b6 (Queens only) Remove privileged capabilities from nova-metadata c05aa892e [stable/queens] Add a check for kernels args update to avoid unnecessary reboot 967542fcb [stable/queens] Disable default config-download method for PreNetworkConfig 8aa46b6c8 NFV: Support for config-download to deploy node with kernel args 75f604ed7 Remove the rokcy services from queens ComputeOvsDpdkSriov role fce40e60a Move ipa enrollment to host_prep_tasks a89cd6b19 Switch scenario00{1,4}-multinode-containers to Ceph bluestore 6297c1b2d [FFU] Ensure compatibility with ansible 2.6. 317c3ecea Don't look for primary_role ips in AllNodesValidationConfig a9d10fdf7 minor update: move VIP before stopping pacemaker on a node c49911a5b Upgrades: Ensure idempotency of pacemaker services f10d3c3d5 certmonger: Don't restart haproxy on cert renewal 57e4ac345 Remove "when failed" from debug task names 0bb498182 Tag step plays b87f6a257 Handle upper and lower case system uuids be9e50c4e Add CertmongerUser role to OVB defaults 7794cc60c Adding support of glance cinder store settings b6ebb07c7 Add missing RoleParameters and ServiceNames a247fa3a7 Remove ties between ceilometer and panko 4c51665b3 Fix generation of configs that contain password files 49a87e0be mysql: sync credentials in running container on password change b5f792f8f FFWD: Introduce workaround for neutron cisco plugin c9b06deaa mysql: do not overwrite password file during docker-puppet 1cbc51af3 Remove console as opendaylight log mechanism Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- all-nodes-validation.yaml | 12 ++ .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + ci/environments/ovb-ha.yaml | 2 + .../scenario001-multinode-containers.yaml | 13 +- .../scenario004-multinode-containers.yaml | 1 - ci/environments/scenario010-standalone.yaml | 99 +++++++++++ common/deploy-steps-tasks.yaml | 150 ++++++++++++++--- common/deploy-steps.j2 | 23 ++- .../{services.yaml => services/role.role.j2.yaml} | 17 +- deployed-server/deployed-server-roles-data.yaml | 1 + .../octavia/octavia-deployment-config.yaml | 10 +- .../nova_cell_v2_discover_hosts.py | 55 ++++++ .../nova_wait_for_compute_service.py | 96 +++++++++++ environments/cavium-liquidio.yaml | 2 +- environments/cinder-pure-config.yaml | 2 + environments/config-download-environment.yaml | 4 + environments/disable-panko.yaml | 11 ++ environments/hyperconverged-ceph.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-cephfsnative-config.yaml | 1 + environments/metrics/collect-read-rabbitmq.yaml | 15 ++ .../collectd-standalone.yaml} | 0 environments/metrics/collectd-write-qdr.yaml | 28 ++++ environments/neutron-ml2-ovn-ha.yaml | 2 +- environments/neutron-ovs-dpdk.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- environments/ovs-hw-offload.yaml | 16 +- .../neutron-opendaylight-dpdk.yaml | 4 +- .../neutron-opendaylight-hw-offload.yaml | 2 +- .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 1 - .../services-baremetal/neutron-ovs-dpdk.yaml | 2 +- .../services-baremetal/neutron-ovs-hw-offload.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services-baremetal/octavia.yaml | 5 +- .../services-docker/neutron-opendaylight.yaml | 1 - environments/services-docker/neutron-ovn-ha.yaml | 2 +- environments/services-docker/neutron-sriov.yaml | 5 +- .../services/neutron-opendaylight-dpdk.yaml | 4 +- .../services/neutron-opendaylight-hw-offload.yaml | 2 +- .../services/neutron-opendaylight-sriov.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 17 ++ environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-ovs-hw-offload.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/octavia.yaml | 5 +- ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 5 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 6 +- environments/storage-environment.yaml | 2 + environments/storage/external-ceph.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 2 + .../role.role.j2.yaml} | 29 +++- .../rhel-registration/rhel-registration.yaml | 6 + .../rhel-registration/scripts/rhel-registration | 13 +- extraconfig/pre_network/boot-params-service.yaml | 102 ++++++++++++ ...ible_host_config.yaml => boot_param_tasks.yaml} | 42 ++++- extraconfig/pre_network/config_then_reboot.yaml | 7 + .../pre_network/host_config_and_reboot.yaml | 30 +++- extraconfig/services/ipaclient.yaml | 184 +++++++++++++++++++++ extraconfig/services/tmpwatch-install.yaml | 43 +++++ firstboot/os-net-config-mappings.yaml | 5 +- firstboot/userdata_timesync.yaml | 97 +++++++++++ net-config-bond.j2.yaml | 8 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/scripts/run-os-net-config.sh | 10 +- network/service_net_map.j2.yaml | 2 + overcloud-resource-registry-puppet.j2.yaml | 20 ++- overcloud.j2.yaml | 29 ++-- puppet/all-nodes-config.j2.yaml | 12 +- puppet/extraconfig/pre_deploy/per_node.yaml | 16 +- puppet/role.role.j2.yaml | 33 ++-- puppet/services/aodh-api.yaml | 9 +- puppet/services/apache.j2.yaml | 13 +- puppet/services/barbican-api.yaml | 7 +- puppet/services/ceph-base.yaml | 21 ++- puppet/services/ceph-external.yaml | 9 +- puppet/services/ceph-mon.yaml | 8 +- puppet/services/ceph-rgw.yaml | 7 +- puppet/services/cinder-api.yaml | 23 ++- puppet/services/cinder-backend-pure.yaml | 19 ++- puppet/services/cinder-base.yaml | 8 +- puppet/services/cinder-volume.yaml | 16 +- puppet/services/congress.yaml | 7 +- puppet/services/database/mongodb.yaml | 9 +- puppet/services/database/mysql-client.yaml | 7 +- puppet/services/database/mysql.yaml | 25 ++- puppet/services/database/redis-base.yaml | 14 +- puppet/services/docker-registry.yaml | 6 +- puppet/services/ec2-api.yaml | 12 +- puppet/services/etcd.yaml | 9 +- puppet/services/glance-api.yaml | 21 ++- puppet/services/gnocchi-api.yaml | 9 +- puppet/services/gnocchi-base.yaml | 5 + .../haproxy-internal-tls-certmonger.j2.yaml | 10 +- puppet/services/haproxy-public-tls-certmonger.yaml | 2 +- puppet/services/haproxy.yaml | 6 + puppet/services/heat-api-cfn.yaml | 16 +- puppet/services/heat-api.yaml | 16 +- puppet/services/horizon.yaml | 13 +- puppet/services/ironic-api.yaml | 16 +- puppet/services/ironic-conductor.yaml | 30 +++- puppet/services/ironic-inspector.yaml | 14 +- puppet/services/kernel.yaml | 4 + puppet/services/keystone.yaml | 16 +- puppet/services/manila-api.yaml | 56 ++++++- puppet/services/manila-backend-cephfs.yaml | 4 + puppet/services/manila-scheduler.yaml | 21 +-- puppet/services/manila-share.yaml | 17 ++ puppet/services/memcached.yaml | 7 +- puppet/services/metrics/collectd.yaml | 1 + puppet/services/mistral-api.yaml | 14 +- puppet/services/neutron-api.yaml | 24 ++- puppet/services/neutron-base.yaml | 30 ---- puppet/services/neutron-dhcp.yaml | 15 ++ puppet/services/neutron-linuxbridge-agent.yaml | 7 +- puppet/services/neutron-metadata.yaml | 1 - puppet/services/neutron-ovs-agent.yaml | 16 +- puppet/services/neutron-plugin-ml2-ovn.yaml | 7 +- puppet/services/nova-api.yaml | 9 +- puppet/services/nova-base.yaml | 13 +- puppet/services/nova-compute.yaml | 71 +++++++- puppet/services/nova-libvirt.yaml | 13 +- puppet/services/nova-metadata.yaml | 12 +- puppet/services/nova-migration-target.yaml | 24 ++- puppet/services/nova-placement.yaml | 9 +- puppet/services/nova-vnc-proxy.yaml | 15 +- puppet/services/octavia-api.yaml | 41 ++--- puppet/services/octavia-base.yaml | 8 +- puppet/services/opendaylight-api.yaml | 7 +- puppet/services/opendaylight-ovs.yaml | 7 +- puppet/services/openvswitch.yaml | 9 + puppet/services/ovn-controller.yaml | 12 +- puppet/services/ovn-dbs.yaml | 7 +- puppet/services/pacemaker.yaml | 23 +++ puppet/services/pacemaker/database/mysql.yaml | 8 +- puppet/services/pacemaker/database/redis.yaml | 6 +- puppet/services/panko-api.yaml | 9 +- puppet/services/qdr.yaml | 7 +- puppet/services/rabbitmq.yaml | 16 +- puppet/services/sahara-api.yaml | 9 +- puppet/services/sshd.yaml | 19 ++- puppet/services/swift-proxy.yaml | 14 +- puppet/services/swift-storage.yaml | 7 +- puppet/services/tacker.yaml | 7 +- puppet/services/time/timezone.yaml | 13 ++ puppet/services/tripleo-firewall.yaml | 6 + puppet/services/zaqar-api.yaml | 21 ++- .../notes/OvsDisableEMC-ab29e5c08856d439.yaml | 3 + ...eph_volume_mode-parameter-5553a9b39718a749.yaml | 9 + ...nder-nfs-snapshot-support-16664aa46a67a5ad.yaml | 13 ++ ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/hiera_net_ip_map-ff866b443a28bdc4.yaml | 9 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../notes/minor-update-env-20657417094d4aeb.yaml | 7 + ...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml | 8 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va-rbd-pool-role-specific-010f6072d641d84f.yaml | 6 + ...va_add_nfs_vers_parameter-62b9e9d6150358d1.yaml | 8 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + .../nova_compute_nofile-0427e49cc8ae70a6.yaml | 6 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + ...run_chown_on_every_deploy-c366af9898ecaeed.yaml | 9 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + .../remove-cinder-api-v1-66a24998d7f8e985.yaml | 9 + ...-api-to-httpd-support-tls-9b995fe4113b2412.yaml | 5 + .../notes/tag-common-tasks-4a78275787655fdd.yaml | 6 + .../notes/tag-step-plays-b1b1ea7584f1665d.yaml | 5 + ...-pcmk-resource-by-default-ed54100721f55a30.yaml | 8 + roles/BlockStorage.yaml | 1 + roles/CephAll.yaml | 1 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 61 +++++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 4 +- roles/ComputeOvsDpdkSriovRT.yaml | 4 +- roles/ComputeRealTime.yaml | 2 + roles/ComputeSriov.yaml | 2 + roles/ComputeSriovRT.yaml | 2 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephFile.yaml | 1 + roles/HciCephMon.yaml | 1 + roles/HciCephObject.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 1 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 1 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 1 + roles_data.yaml | 6 + roles_data_undercloud.yaml | 1 + sample-env-generator/ssl.yaml | 13 +- sample-env-generator/storage.yaml | 2 + tools/check-up-to-date.sh | 2 +- tools/process-templates.py | 7 + tools/yaml-diff.py | 32 ++++ tools/yaml-validate.py | 22 ++- validation-scripts/all-nodes.sh | 8 +- zuul.d/layout.yaml | 7 - 337 files changed, 3059 insertions(+), 1009 deletions(-)

1 0

puppet-tripleo 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We enthusiastically announce the release of: puppet-tripleo 8.5.0: Puppet module for OpenStack TripleO This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 8.5.0 ^^^^^ New Features * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * Add the ability to configure the nfs_snapshot_support parameter associated with Cinder's NFS backend. Changes in puppet-tripleo 8.4.1..8.5.0 -------------------------------------- 4ad7bb2d Release 8.5.0 (queens) 233390c6 Remove scenario008 jobs 7846d0f4 Allow mysql options to be set for the HA bundle 78f21fcf Only request certs in step 1 5553f8df Revert "Refactor collectd/gnocchi integration" 0ed388fe Revert "Only request certs in step 1" af477310 Only request certs in step 1 2abb6f11 Add support for external Ganesha service in Manila Share profile 06be0e18 Allow external Ganesha for the cephfs manila backend 87744ef3 Fix tripleo::haproxy::stats to be more correct and flexible 51ddc3a4 Switch metrics qdrs to edge mode 2a9f0d89 Refactor collectd/gnocchi integration 19af98c5 Rebuild initramfs after applying change in kernel parameters ec4b1b6f Fix horizon firewall rules in composable roles 2e7ef9d3 Add nova::cinder to nova compute ffb16f60 Fix missing version requirements a7724704 certmonger: Add dnsnames parameter to redis cert request ca09edf7 Expose innodb_lock_wait_timeout via hieradata. 8cbdf9b5 Fix kolla permissions errors inside nova_virtlogd d8b0dc73 remove ssh from tripleo::firewall::pre fdd7375e Move unfencing to meta_params 3078d2f1 Support redfish inside a fencing yaml file 249d5a27 Enable disablereuse option in Zaqar proxy backend bc58f0b9 Check for neutron_plugin_ml2_ansible service when including plugin 01e9a88e Add httpd and tls support to manila-api d6126d0f OpenDev Migration Patch f73b12b5 Run octavia-api under apache 6b3573b0 Add an Endpoint in ceilometer 9e55aa1d Disable curl globbing 0fd68e46 Simplify logrotate job 0965019e Fix ntp module version to an existing tag/branch 5ccf98ca Allow neutron wrapper containers log to syslog fbe6e4b1 Add ability to configure Cinder's NFS snapshot support 2a5f69fa Add missing s3 case in gnocchi::api 64e29232 Handle image_volume_cache_enabled in PureStorage Cinder backend. f4aac8ac Fix generating connections to OVN db 421b47cd snmp: remove ununsed trapsink 48dbeafd Pin puppet-sensu module 148d993e Enable internal TLS options for ironic API 0bcc21d0 Support cephfs_volume_mode parameter a3ad6637 Adding a udev rule to save sriov interface name before configuring switchdev 25c13e70 Change haproxy mode to http for octavia Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 4 +- lib/puppet/provider/sriov_vf_config/numvfs.rb | 18 +++ manifests/certmonger/ca/crl.pp | 2 +- manifests/certmonger/redis.pp | 9 +- manifests/fencing.pp | 3 + manifests/firewall/pre.pp | 6 - manifests/haproxy.pp | 16 ++- manifests/haproxy/horizon_endpoint.pp | 27 ++++ manifests/haproxy/stats.pp | 19 +-- manifests/profile/base/ceilometer.pp | 67 ++++++++-- manifests/profile/base/certmonger_user.pp | 138 +++++++++++--------- manifests/profile/base/cinder/volume/nfs.pp | 6 + manifests/profile/base/cinder/volume/pure.pp | 6 + manifests/profile/base/database/mysql.pp | 7 + manifests/profile/base/gnocchi/api.pp | 1 + manifests/profile/base/kernel.pp | 8 ++ manifests/profile/base/manila/api.pp | 40 ++++++ manifests/profile/base/manila/share.pp | 29 +++-- manifests/profile/base/metrics/qdr.pp | 145 +++++++++++++++++++++ manifests/profile/base/neutron/agents/ovn.pp | 2 +- manifests/profile/base/neutron/ovn_metadata.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 11 +- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/libvirt.pp | 14 +- manifests/profile/base/octavia/api.pp | 41 ++++-- manifests/profile/base/pacemaker/instance_ha.pp | 2 +- manifests/profile/base/snmp.pp | 1 - manifests/profile/base/swift/ringbuilder.pp | 4 +- .../profile/pacemaker/database/mysql_bundle.pp | 8 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +-- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 4 +- manifests/profile/pacemaker/ovn_northd.pp | 4 +- manifests/ui.pp | 5 +- metadata.json | 8 +- ...eph_volume_mode-parameter-220b1026aebd9e3b.yaml | 5 + ...nder-nfs-snapshot-support-ac547f24dddf97e8.yaml | 5 + spec/classes/tripleo_certmonger_ca_crl_spec.rb | 4 +- spec/classes/tripleo_firewall_spec.rb | 13 -- .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 27 +++- .../tripleo_profile_base_octavia_api_spec.rb | 1 - .../classes/tripleo_profile_base_pacemaker_spec.rb | 2 +- spec/classes/tripleo_profile_base_snmp_spec.rb | 1 - ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 1 + templates/logrotate/containers_logrotate.conf.erb | 7 - templates/neutron/dibbler-client.epp | 1 + templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 1 + templates/neutron/keepalived.epp | 1 + templates/neutron/radvd.epp | 1 + templates/redis/redis-notifications.sh.erb | 2 +- templates/switchdev/switchdev.epp | 1 + zuul.d/layout.yaml | 8 -- 55 files changed, 576 insertions(+), 195 deletions(-)

1 0

instack-undercloud 8.4.8 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are gleeful to announce the release of: instack-undercloud 8.4.8: instack-undercloud This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in instack-undercloud 8.4.7..8.4.8 ------------------------------------------ 957a34bd Fixed mistral hanging processing the list of failed actions 0238882e Fix stack_name reference 89b09d3e Remove deprecated Ram/Disk filters in scheduler_default_filters a098fbc6 [queens-only] Increase the innodb file size by default d12465b4 [queens-only] Rename the systemctl-daemon-reload exec 5babfee1 Wrap the undercloud public_host IP for IPv6 7d1e5994 Get the stack name if possible before running the validations group 3d856388 [queens] re-add ssh firewall rule 67720755 OpenDev Migration Patch a96812f8 Enable override of overcloud status check for undercloud update. dc2f29ac [Queens-only] Ensure epmd is spawned by systemd before redeploy bbe2840e [Queens-only] Restart Erlang VM on undercloud upgrade 1a5a2a63 Disable stack check and cancel update for undercloud Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../puppet-stack-config/puppet-stack-config.pp | 6 +- .../puppet-stack-config.yaml.template | 11 +- .../os-apply-config/root/stackrc | 2 +- .../configure.d/40-stop-running-epmd | 35 +++++++ instack_undercloud/undercloud.py | 109 ++++++++++++++------ scripts/instack-pre-upgrade-undercloud | 4 + scripts/instack-upgrade-undercloud | 4 + templates/config.json.template | 1 + 10 files changed, 243 insertions(+), 44 deletions(-)

1 0

rally 1.6.0
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We joyfully announce the release of: rally 1.6.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 1.5.1..1.6.0 ----------------------------- ee13ba498 Propose 1.6.0 release 45cc9ad01 [verify ]Fix several py3 issues c5a5bc83d Update SQLAlchemy in upper-constraints.txt bcdcfc790 install_rally.sh: moved zypper pkg manager up to handle case when yum is installed on SUSE to fulfill dependencies. f99f44224 Allow regular expressions in skip-list 3f4c55771 [changelog] get back 1.4.1 release Diffstat (except docs and test files) ------------------------------------- CHANGELOG.rst | 18 ++++ ...step_9_verifying_cloud_via_tempest_verifier.rst | 11 ++- etc/docker/README.md | 8 +- install_rally.sh | 15 +-- rally/api.py | 3 +- rally/cli/commands/verify.py | 11 ++- rally/common/db/api.py | 16 ++-- rally/plugins/common/verification/testr.py | 12 +-- rally/verification/context.py | 46 +++++++++ rally/verification/manager.py | 10 +- .../unit/plugins/common/verification/test_testr.py | 105 +++++++++++++++++++-- upper-constraints.txt | 4 +- 16 files changed, 223 insertions(+), 45 deletions(-)

1 0

ironic 12.2.0 (train)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We contentedly announce the release of: ironic 12.2.0: OpenStack Bare Metal Provisioning This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.2.0 ^^^^^^ New Features ************ * Adds option "allow_deleting_available_nodes" to control whether nodes in state "available" should be deletable (which is and stays the default). Setting this option to "False" will remove "available" from the list of states in which nodes can be deleted from ironic. It hence provides protection against accidental removal of nodes which are ready for allocation (and is meant as a safeguard for the operational effort to bring nodes into this state). For backwards compatibility reasons, the default value for this option is "True". The other states in which nodes can be deleted from ironic ("manageable", "enroll", and "adoptfail") remain unchanged. This option can be changed without service restart. * Adds capability to hardware type "idrac" for creating and deleting RAID sets without rebooting the baremetal node. This realtime mechanism is supported on PERC H730 and H740 RAID controllers that are running firmware version 25.5.5.0005 or later. * Adds "reset_idrac" and "known_good_state" cleaning steps to hardware type "idrac". "reset_idrac" actually resets the iDRAC; "known_good_state" also resets the iDRAC and clears the Lifecycle Controller job queue to make sure the iDRAC is in good state. * API version 1.58 allows backfilling allocations for existing deployed nodes by providing "node" to "POST /v1/allocations". * API version 1.57 adds a REST API endpoint for updating an existing allocation. Only "name" and "extra" fields are allowed to be updated. * Adds a new option "enable_mdns" which enables publishing the baremetal API endpoint via mDNS as specified in the API SIG guideline (http://specs.openstack.org/openstack/api-sig/guidelines /dns-sd.html). * Adds a "[conductor]send_sensor_data_for_undeployed_nodes" option to enable ironic to collect and transmit sensor data for all nodes for which sensor data collection is available. By default, this option is not enabled which aligns with the prior behavior of sensor data collection and transmission where such data was only collected if an "instance_uuid" was present to signify that the node has been or is being deployed. With this option set to "True", operators may be able to identify hardware in a faulty state through the sensor data and take action before an instance workload is deployed. * The Smart-Nic functionality that was added to the Bare Metal Service during the Stein cycle can now be used with a Train version of the Networking Service (neutron) as Smart-Nic support merged into that project during the Train development cycle. Upgrade Notes ************* * Updates the minimum required version of "python-dracclient" to "3.0.0" when using the "idrac" hardware type. * Removes "commit_required" from the dictionary returned by the "set_bios_config" vendor passthru call in the "idrac" hardware type. "commit_required" was split into two keys: "is_commit_required" and "is_reboot_required", which indicate the actions necessary to complete setting the BIOS settings. "commit_required" was removed in "python-dracclient" version 3.0.0. * Removes deprecated option "[ilo]/power_retry". Please use "[conductor]/soft_power_off_timeout" instead. * Removes the configuration option "[DEFAULT]/hash_distribution_replicas" which was deprecated in the Stein cycle. * Removes the configuration option "[DEFAULT]enabled_drivers". The option was deprecated in Rocky, and setting this option has raised an exception preventing conductor from starting since then. "[DEFAULT]enabled_hardware_types" should be used instead. * Updates the minimum required version of "ironic-lib" to "2.17.1". Deprecation Notes ***************** * The configuration option "[DEFAULT]/fatal_exception_format_errors" is now deprecated. Please use the configuration option "[ironic_lib]/fatal_exception_format_errors" instead. Bug Fixes ********* * Fixes an issue where the Networking Service performs a pre-flight operation which can exceed the prior default for "30" seconds. The new default is "45" seconds, and operators can tune the setting via the "[neutron]request_timeout" setting. * Fixes overflowing of the node fields "last_error" and "maintenance_reason", which would prevent the object from being correctly committed to the database. The maximum message length can be customized through a new configuration parameter, "[DEFAULT]/log_in_db_max_size" (default, 4096 characters). * Fixes an issue encountered during deployment, more precisely during the configdrive partition creation step. On some specific devices like NVMe drives, the created configdrive partition could not be correctly identified (required to dump data onto it afterward). See story 2005764 (https://storyboard.openstack.org/#!/story/2005764) * Fixes an issue regarding the "ansible" deploy interface cleaning workflow. Handling the error in the driver and returning nothing caused the manager to consider the step done and go to the next one instead of interrupting the cleaning workflow. * Fixes an issue with the "ansible" deploy interface where raw images could not be streamed correctly to the host. * Fixes deployment with the "ansible" deploy interface and instance images with GPT partition table. * Fixes traceback on cleaning of nodes with the "redfish" hardware type if their BMC does not support BIOS settings. * Fixes an issue where the sensor data parsing method for the "ipmitool" interface lacked the ability to handle the automatically included *ipmitool* debugging information when the "debug" option is set to "True" in the ironic.conf file. As such, extra debugging information supplied by the underlying "ipmitool" command is disregarded. More information can be found in story 2005331 (https://storyboard.openstack.org/#!/story/2005332) * Fixes an issue where deploy fails during node preparation if the node "capabilities" are passed as string. * Fixes GRUB configuration file generation procedure when building bootable ISO images that include user EFI boot loader image. Prior to this fix, no bootable ISO image could be generated unless EFI boot loader is extracted from deploy ISO image. * Fixes an issue when the image source is a local file, the image will be truncated to 2G and fails deployment due to image corruption. * Fixes binary files upload to Swift. Prior to this fix, binary file upload to Swift might fail at unicode characters interpretation. * The internal JSON RPC server now binds to "::" by default, allowing it to work correctly with IPv6. * This fix binds the jsonschema to use draft-04 for raid schema. The jsonschema 3.0.1 supports draft-03, draft-04, draft-06 and draft-07 and by default the validate function uses latest draft validator. Draft-04 is the latest draft in the jsonschema 2.6. Hence binding the schema to draft-04 validator makes it compliant for both jsonschema 2.6 and jsonschema 3.0.1. * Fixes the duplication of the "ipxe" tag when using IPv6, which leads to the dhcp server possibly returning an incorrect response to the DHCPv6 client. * Fixes an issue where nodes in the process of deployment may have metrics data collected and transmitted during the deployment process which may erroneously generate alarms depending on the operator's monitoring configuration. This was due to a database filter relying upon the indicator of an "instance_uuid" as opposed to the state of a node. * No longer tries to create a temporary URL with zero lifetime if the "deploy_callback_timeout" option is set to zero. The default of 1800 seconds is used in that case. Use the new "configdrive_swift_temp_url_duration" option to override. Changes in ironic 12.1.0..12.2.0 -------------------------------- 0cf907bd0 Spruce up release notes for 12.2.0 release dcab7df39 Update API history and release mapping for 12.2.0 d02acfb3b DRAC: Adding reset_idrac and known_good_state cleaning steps 809653e12 devstack: add missing variables for ironic-python-agent-builder 2fde1940b Remove ipxe tags when ipx6 is in use. c59dc1386 Update qemu hook to facilitate Multicast 46884deba redfish: handle missing Bios attribute 43f7bf9f0 Fix :param: in docstring df5ac6d5b Updates ironic for using ironic-python-agent-builder c2ab34a8c Do not log an exception if Allocation is deleted during handling. 6ca99d673 Add release note updating status of smartnics f5dbf8ba0 Switch to use exception from ironic-lib 87464fbbc Change constraints opendev.org to release.openstack.org a09a34207 Ansible module: fix configdrive partition creation step a3634840f Remove deprecated option [DEFAULT]enabled_drivers 9ffb6054d Fix regex string in the hacking check 2d4380e32 Add api-ref for allocation update 55e8d3fde Add a pxe/uefi/grub2 CI job 234dea98b Bump lower mock version to 3.0.0 77b8898fd Start using importlib for Python 3.x 99137706e Remove XML support in parsable_error middleware 45020712d Fix binary file upload to Swift 5c4efd3b6 fix typo in code comment 5b0ec703c Software RAID: Trigger grub installation on the holder disks 73845b365 Move stray reno file db7d9bb1f Trivial: correct configuration option copy-pased from inspector cc10323db Remove commit_required in iDRAC hardware type 75d796e73 Make the multinode grenade job voting again 6849a43cf devstack: configure rabbit outside of API configuration 2c42e3cdf Blacklist python-cinderclient 4.0.0 c36a01a43 Publish baremetal endpoint via mdns 4537e2c54 Fix inaccurate url links 9ed910139 Update sphinx requirements a0f0e52b8 Allocation API: correct setting name to None 8f6bf4f9d Allocation API: backfilling allocations 306aebad4 Fix GRUB config path when building EFI ISO 5d054cac4 Add DHCP server part to make the document more detail f8e1fbf30 Do not try to return mock as JSON in unit tests 5dd64771d Remove deprecated option [ilo]power_retry aec48ca27 Add API to allow update allocation name and extra field befc4a61e Update Python 3 test runtimes for Train a89e903f7 Replace hardcoded "stack" user to $STACK_USER bace52165 Run vbmcd as stack user in devstack 9d5461506 Adding enabled_boot_interface attribute in tempest config d308d10cd Add openstack commands in node deployment guide 2c8f3a95a Add a high level vision reflection document 3a54fe3e8 Add iDRAC driver realtime RAID creation and deletion 810670cf1 Correct spelling errors a280696a0 Replace git.openstack.org URLs with opendev.org URLs bda02c43f Direct bridge to be setup bb8101ca9 Fix pyghmi path d0e6c6cb1 OpenDev Migration Patch e9540f5d2 Removes `hash_distribution_replicas` configuration option 9124a4a13 Truncate node text fields when too long ada661185 Add note for alternative checksums 18fdc447e Make the JSON RPC server work with both IPv4 and IPv6 b60975641 Jsonschema 3.0.1: Binding the schema to draft-04 708319742 Place upper bound on python-dracclient version c2588c4de devstack: Remove syslinux dependency 2039138cf Do not try to create temporary URLs with zero lifetime 84741e940 Ansible module: fix partition_configdrive.sh file 1d0accbbe Use the PUBLIC_BRIDGE for vxlan edd78ce09 Move devstack emulators configs under /etc/ironic 84dfc151e Uncap jsonschema in requirements 3fce1a54a Split ibmc power/reboot classes 2bb05fef7 Temporarily mark grenade multinode as non-voting 01b0be9db Improve VirtualBMC use in Devstack 380519c07 Run IPMI, SNMP and Redfish BMC emulators as stack 9d9e7df87 Add UEFI firmware to Redfish emulator config 4964d1771 Add systemd unit for sushy emulator in devstack df5261bb3 Ansible module: fix clean error handling e8a8b7897 [Trivial] Fix typo in agent_base_vendor unit test 7d0cd4c28 Fix exception generation errors 56bec518b Add a request_timeout to neutron 74357e5d0 doc: update ibmc driver support servers document 732bbd851 Ansible module fix: stream_url 68ba34552 Make it possible to send sensor data for all nodes 3e703a6b2 Slightly rephrase note in tenant networking docs d52aacd29 Bump sphinxcontrib-pecanwsme to 0.10.0 418a5668a ipmi: Ignore sensor debug data 692cbd2ac Make 'noop' the explicit default of default_storage_interface 00342d997 Docs: correct expected host format for drac_address b5e34e167 Check for deploy.deploy deploy step in heartbeat 17a65c89b Workaround for sendfile size limit 6f22c0014 Workaround for uefi job with ubuntu bionic 228dfe308 Replace openstack.org git:// URLs with https:// 37c443700 Remove vbmc log file in devstack ad6c2f7e5 Add versions to release notes series 944585151 Imported Translations from Zanata 8b86cdd90 Update master for stable/stein 93a40e3fc Fix capabilities passed as string in agent prepare f25a83b57 Respect $USE_PYTHON3 settings for gunicorn 407724a22 Migrate ironic-grenade-dsvm-multinode-multitenant job to Ubuntu Bionic Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- api-ref/source/baremetal-api-v1-allocation.inc | 65 +++ api-ref/source/parameters.yaml | 18 +- .../source/samples/allocation-update-request.json | 7 + .../source/samples/allocation-update-response.json | 26 + bindep.txt | 3 + devstack/common_settings | 2 +- devstack/files/debs/ironic | 3 +- devstack/files/hooks/qemu.py | 14 + devstack/lib/ironic | 357 +++++++++---- devstack/tools/ironic/scripts/cleanup-node.sh | 5 - devstack/tools/ironic/scripts/create-node.sh | 6 - devstack/tools/ironic/templates/vm.xml | 5 + devstack/upgrade/settings | 2 +- .../contributor/ironic-multitenant-networking.rst | 4 +- .../include/configure-ironic-api-mod_wsgi.inc | 2 +- .../install/include/kernel-boot-parameters.inc | 2 +- driver-requirements.txt | 2 +- ironic/api/controllers/v1/allocation.py | 106 +++- ironic/api/controllers/v1/utils.py | 18 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/api/middleware/parsable_error.py | 29 +- ironic/cmd/dbsync.py | 10 +- ironic/common/driver_factory.py | 6 - ironic/common/exception.py | 119 +---- ironic/common/glance_service/v2/image_service.py | 6 +- ironic/common/image_service.py | 16 +- ironic/common/images.py | 7 +- ironic/common/neutron.py | 3 +- ironic/common/policy.py | 5 + ironic/common/pxe_utils.py | 29 +- ironic/common/release_mappings.py | 21 +- ironic/common/swift.py | 2 +- ironic/conductor/allocations.py | 88 ++++ ironic/conductor/base_manager.py | 77 +-- ironic/conductor/manager.py | 63 ++- ironic/conductor/rpcapi.py | 3 +- ironic/conf/conductor.py | 20 + ironic/conf/default.py | 27 +- ironic/conf/ilo.py | 8 - ironic/conf/json_rpc.py | 2 +- ironic/conf/neutron.py | 9 + ironic/db/sqlalchemy/api.py | 2 +- ironic/drivers/ibmc.py | 3 +- ironic/drivers/modules/agent.py | 2 +- ironic/drivers/modules/agent_base_vendor.py | 65 ++- ironic/drivers/modules/ansible/deploy.py | 15 +- .../ansible/playbooks/library/stream_url.py | 2 +- .../roles/deploy/files/partition_configdrive.sh | 29 +- ironic/drivers/modules/deploy_utils.py | 3 +- ironic/drivers/modules/drac/bios.py | 9 +- ironic/drivers/modules/drac/management.py | 32 ++ ironic/drivers/modules/drac/raid.py | 57 ++- ironic/drivers/modules/drac/vendor_passthru.py | 18 +- ironic/drivers/modules/ilo/power.py | 12 +- ironic/drivers/modules/ipmitool.py | 3 + ironic/drivers/modules/pxe.py | 6 +- ironic/drivers/modules/redfish/bios.py | 24 +- ironic/drivers/modules/xclarity/common.py | 6 +- ironic/drivers/raid_config_schema.json | 1 + ironic/hacking/checks.py | 2 +- ironic/objects/node.py | 17 +- ...ction-for-available-nodes-25f163d69782ef63.yaml | 12 - .../unit/api/controllers/v1/test_allocation.py | 273 +++++++++- .../unit/drivers/modules/ansible/test_deploy.py | 11 +- .../unit/drivers/modules/drac/test_management.py | 26 + .../unit/drivers/modules/redfish/test_bios.py | 68 ++- .../unit/drivers/modules/test_agent_base_vendor.py | 168 ++++++- .../unit/drivers/modules/test_deploy_utils.py | 11 +- lower-constraints.txt | 6 +- .../{set-stack-key.yaml => pre.yaml} | 4 +- .../run.yaml | 12 +- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 8 +- .../legacy/ironic-dsvm-base-multinode/pre.yaml | 6 +- playbooks/legacy/ironic-dsvm-base/pre.yaml | 6 +- ...d-neutron-request-timeout-1f7372af81f14ddd.yaml | 7 + ...ction-for-available-nodes-25f163d69782ef63.yaml | 12 + .../add-realtime-support-d814d5917836e9e2.yaml | 13 + ...drac_and_known_good_state-cdbebf97d7b87fe7.yaml | 8 + .../allocation-backfill-c31e84c5fcf24216.yaml | 5 + .../allow-allocation-update-94d862c3da454be2.yaml | 5 + .../notes/bug-2005377-5c63357681a465ec.yaml | 7 + .../notes/bug-2005764-15f45e11b9f9c96d.yaml | 8 + releasenotes/notes/bug-30315-e46eafe5b575f3da.yaml | 8 + releasenotes/notes/bug-30316-8c53358681e464eb.yaml | 4 + releasenotes/notes/bug-30317-a972c8d879c98941.yaml | 5 + .../notes/cleaning-bios-d74a4947d2525b80.yaml | 5 + ...sor-data-fix-for-ipmitool-eb13e80ccdd984db.yaml | 10 + ...abilities-as-string-agent-7c5c7975560ce280.yaml | 5 + .../notes/fix-esp-grub-path-9e5532993dccc07a.yaml | 7 + .../fix-sendfile-size-cap-d9966a96e2d7db51.yaml | 6 + .../fix-swift-binary-upload-bf9471fca29290e1.yaml | 5 + ...ac-remove-commit_required-d9ea849e8f5e78e2.yaml | 9 + ...ve-deprecated-power-retry-ba29a21f03fe8dbb.yaml | 5 + .../notes/json-rpc-bind-a0348cc6f5efe812.yaml | 5 + .../notes/jsonschema_draft04-1cb5fc4a3852f9ae.yaml | 9 + releasenotes/notes/mdns-a5f4034257139e31.yaml | 6 + ...ash_distribution_replicas-08351358eba4c9e1.yaml | 5 + .../remove-enabled-drivers-5afcd77b53da1499.yaml | 7 + ...emove-ipxe-tags-with-ipv6-cf4b7937c27590d6.yaml | 6 + ...sensor-data-for-all-nodes-a732d9df43e74318.yaml | 19 + ...gic-has-merged-in-neutron-79078280d40f042c.yaml | 7 + .../use-ironic-lib-exception-4bff237c9667bf46.yaml | 8 + .../notes/zero-temp-url-c21e208f8933c6f6.yaml | 7 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 559 ++++++++++++++++++++- releasenotes/source/stein.rst | 6 + requirements.txt | 6 +- setup.cfg | 3 +- test-requirements.txt | 2 +- tools/config/ironic-config-generator.conf | 2 + tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 37 +- zuul.d/legacy-ironic-jobs.yaml | 17 +- zuul.d/project.yaml | 4 +- 167 files changed, 3428 insertions(+), 896 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 6b4765745..fd0dbc4d3 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -12 +12 @@ UcsSdk==0.8.2.2;python_version<'3' -python-dracclient>=1.5.0 +python-dracclient>=3.0.0,<4.0.0 diff --git a/requirements.txt b/requirements.txt index ba1845d8d..86c36219d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ WebOb>=1.7.1 # MIT -python-cinderclient>=3.3.0 # Apache-2.0 +python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0 @@ -14 +14 @@ keystoneauth1>=3.4.0 # Apache-2.0 -ironic-lib>=2.15.0 # Apache-2.0 +ironic-lib>=2.17.1 # Apache-2.0 @@ -46 +46 @@ oslo.versionedobjects>=1.31.2 # Apache-2.0 -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 373d2a4da..9ec005c94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD +mock>=3.0.0 # BSD

1 0

tripleo-validations 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: tripleo-validations 9.4.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 9.3.1..9.4.0 ------------------------------------------- 8a84c01 Sync 'validations/check-network-gateway.yaml' with the new role bf11998 Update generate_validations_doc.py script 0c926c1 Fix introspection data lookup e6aee5e Ignore new ansible-lint pipefail rule 361061f OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- requirements.txt | 1 + test-requirements.txt | 3 +- tools/ansible-lint.sh | 5 +- validations/check-network-gateway.yaml | 21 ++++-- validations/ironic-boot-configuration.yaml | 2 +- validations/library/switch_vlans.py | 8 +-- validations/lookup_plugins/introspection_data.py | 31 +++++---- 11 files changed, 97 insertions(+), 57 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 51340da..5c0c887 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,0 +11 @@ python-ironicclient>=2.3.0 # Apache-2.0 +python-ironic-inspector-client>=3.1.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..fdb0845 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

os-net-config 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are excited to announce the release of: os-net-config 9.4.0: OpenStack network configuration This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. 9.4.0 ^^^^^ New Features * A key called "domain" is now available for interfaces. This allows the setting of a domain for an ifcfg configuration, which will aide DNS search. * Support for configuring policy-based routing has been added. A new top-level object "route_table" has been added, which allows the user to add tables to the system route table at /etc/iproute2/rt_tables. Routes have a new "table" property for specifying which table to apply the route. Interfaces now have a "rules" property that allows the user to add arbitrary rules for when the system should use a particular routing table, such as input interface or source IP address. Changes in os-net-config 9.3.0..9.4.0 ------------------------------------- f535a00 Fixed the false InvalidConfigException for vfid=0 c4c32a4 [FUP] Update sriov_pf.yaml samle with ethtool_opt 6e440e0 Add support for ethtool options for sriov_pf ports 7010fc9 Unify ethtool options logic 6eb5155 Add Policy Based Routing Support to os-net-config d3a35d0 Add missing unit-test for IbInterface ethtool opts 6c4bd92 Add ability to specify multiple search domains 45e3f04 Enable setting domain parameter for interfaces 9ed8760 Modify udev rule for VF representor rename cf22de9 Add upper constraints to tox f1ceda9 OpenDev Migration Patch 8a8fd7a Add ovs_options and ovs_extra parameters to VLAN object fb0a122 Adding a udev rule to rename the vf representors. 7f53623 Adding a udev rule to save sriov interface name before configuring switchdev df7c75e Removing the warnings generated due to yaml.load() 21dfd95 Fix os-net-config interface restarts when applying routes 7130a4e Update .gitreview for stable/rocky a0477bc Configure switchdev mode in SR-IOV in os-net-config 1cd665b Allow adding sriov_pf over ovs_bridge, linux_bond and ovs_bond 88ffc50 Fix incorrect application of 'ip' commands for bridges Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- etc/os-net-config/samples/bridge_vlan.json | 4 + etc/os-net-config/samples/bridge_vlan.yaml | 3 + etc/os-net-config/samples/routes.yaml | 52 ++ etc/os-net-config/samples/sriov_pf.json | 3 +- etc/os-net-config/samples/sriov_pf.yaml | 2 + etc/os-net-config/samples/sriov_pf_switchdev.json | 84 +++ etc/os-net-config/samples/sriov_pf_switchdev.yaml | 87 +++ os_net_config/__init__.py | 9 + os_net_config/cli.py | 23 +- os_net_config/impl_ifcfg.py | 243 +++++++- os_net_config/objects.py | 659 +++++++++++++-------- os_net_config/schema.yaml | 160 ++++- os_net_config/sriov_config.py | 163 ++++- os_net_config/utils.py | 13 +- os_net_config/validator.py | 2 +- .../enable-setting-domain-5557e2441c23a5a5.yaml | 5 + .../policy-based-routing-3fa1200ae155bbee.yaml | 10 + tox.ini | 4 +- 24 files changed, 1691 insertions(+), 347 deletions(-)

1 0

tripleo-puppet-elements 9.1.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are delighted to announce the release of: tripleo-puppet-elements 9.1.0: Puppet building rules for OpenStack images. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 9.0.1..9.1.0 ----------------------------------------------- 81729a1 Add element to install all openstack clients f64be13 Add upper constraints 1ab58f2 Remove redis from controller element e03bdf3 OpenDev Migration Patch 94381a1 Install tmpwatch in the overcloud base image 1c906bc Add numactl to overcloud image Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../install.d/package-installs-overcloud-base | 2 + elements/overcloud-base/pkg-map | 4 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 2 - elements/overcloud-controller/pkg-map | 2 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ tox.ini | 4 +- 11 files changed, 100 insertions(+), 7 deletions(-)

1 0

os-apply-config 9.1.2 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are pleased to announce the release of: os-apply-config 9.1.2: Config files from cloud metadata This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 9.1.1..9.1.2 --------------------------------------- 07165a9 Don't render None as "null" ec6aaba OpenDev Migration Patch cc1fe60 Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 4 ++-- os_apply_config/renderers.py | 2 ++ 4 files changed, 10 insertions(+), 3 deletions(-)

1 0

tripleo-common 9.6.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: tripleo-common 9.6.0: A common library for TripleO workflows. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 9.6.0 ^^^^^ New Features ************ * *tripleo-deploy-openshift* script now understands the *--plan* option to run the openshift-ansible playbooks for a deployment named differently than "openshift". * Introduce a *--playbook* option to the *tripleo-deploy-openshift* script in order to be able to run openshift-ansible playbook directly on already deployed servers. Deprecation Notes ***************** * The *--config-download-dir* option to the *tripleo-deploy- openshift* script is deprecated in favor of *--plan*. Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. * Fixes running the baremetal "provide" workflow with node names. Changes in tripleo-common 9.5.0..9.6.0 -------------------------------------- cb2ef256 Remove scenario008 jobs 718a7b17 Handle failed nodes when enabling ssh admin b7da1144 Pass execution_id to tripleo.ansible-playbook. c4c35df0 Add the ability to compute osds number counting lvm devices 375192b1 [CVE-2019-3895] Set image owner id 23371a7a Add passphrase generation for Octavia 4bbd5324 Add new healthchecks for zaqar services b1676eac Remove amp_hw_arch from octavia_post 40fa70be OpenDev Migration Patch d1f1826b scen009 voting on rocky only 74ec63dc Add image_source to containers 5ab3b3de Upgrades: Don't try to publish ansible output in ceph_install 7c4809d3 Fix running the baremetal provide workflow with node names e07dc084 Clean up node registration output. 3658ae99 Option to run osa playbooks from path 4575b64f Pass additional args to tripleo-deploy-openshift as ansible options 201e9793 Add ability to run osa playbooks from tripleo-deploy-openshift 7af813eb Introduce a --plan option to replace --config-download-dir 5ae6367d Don't always validate heat stack when adding parameters ef5bf9de Specify Octavia amphora image hw_architecture property in Glance f965b037 Skip ssh_known_hosts tasks in check mode 7d5ccbe9 Install ipmitool in the mistral_executor image 50c9efc9 Append qemu-img to Mistral executor package list 1e63f067 Stops growth of massive dentry cache growth b897967a Get osa container image from tripleo-common defaults d91f6d99 Add missing queue_name input parameter for listing validations Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- container-images/overcloud_containers.yaml | 136 +++++++++++++++++++++ container-images/overcloud_containers.yaml.j2 | 136 +++++++++++++++++++++ .../tripleo_kolla_template_overrides.j2 | 2 +- healthcheck/common.sh | 11 +- healthcheck/zaqar-api | 6 + healthcheck/zaqar-socket | 15 +++ playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../octavia-controller-config/tasks/octavia.yml | 12 ++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 46 ++++++- ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 ++ .../notes/provide-name-f75b6b61d3d8d693.yaml | 4 + ...eploy-openshift-plan-name-89135e3a68307047.yaml | 10 ++ ...deploy-openshift-playbook-ac8b49a212545c0f.yaml | 6 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 1 + scripts/tripleo-deploy-openshift | 91 +++++++++++--- tripleo_common/actions/parameters.py | 7 +- tripleo_common/constants.py | 1 + tripleo_common/image/kolla_builder.py | 3 + workbooks/access.yaml | 12 +- workbooks/baremetal.yaml | 34 ++---- workbooks/ceph-ansible.yaml | 2 - workbooks/deployment.yaml | 1 + workbooks/derive_params_formulas.yaml | 8 +- workbooks/fernet-key-rotate.yaml | 1 + workbooks/octavia_post.yaml | 2 + workbooks/plan_management.yaml | 4 + workbooks/skydive-ansible.yaml | 1 + workbooks/swift_backup.yaml | 2 + workbooks/swift_ring_rebalance.yaml | 1 + workbooks/validations.yaml | 4 +- zuul.d/layout.yaml | 6 +- 35 files changed, 591 insertions(+), 97 deletions(-)

1 0

puppet-tripleo 9.5.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We exuberantly announce the release of: puppet-tripleo 9.5.0: Puppet module for OpenStack TripleO This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 9.5.0 ^^^^^ New Features * Add the ability to configure the nfs_snapshot_support parameter associated with Cinder's NFS backend. Changes in puppet-tripleo 9.4.0..9.5.0 -------------------------------------- e4c894da Prepare 9.5.0 release (rocky) 1bcd64dc Remove scenario008 jobs efc1f024 Only request certs in step 1 2d888eb8 Allow mysql options to be set for the HA bundle 7ae85edf Add support for external Ganesha service in Manila Share profile da474f17 Allow external Ganesha for the cephfs manila backend 73fdcc0d Fix tripleo::haproxy::stats to be more correct and flexible c5986da9 Rebuild initramfs after applying change in kernel parameters b34f02c7 Fix horizon firewall rules in composable roles 9806d033 Add nova::cinder to nova compute 701c9786 Refactor collectd/gnocchi integration 3ee2d176 Fix missing version requirements 624840b8 certmonger: Add dnsnames parameter to redis cert request a8d0172e Expose innodb_lock_wait_timeout via hieradata. 89735a1f Allow neutron wrapper containers log to syslog d16e5124 redis HA: allow SELinux relabel for /var/run/redis 47034b22 remove ssh from tripleo::firewall::pre 9614c949 Support redfish inside a fencing yaml file 638ba0b9 Fix keepalived VIP monitoring script 0c692c99 OpenDev Migration Patch ecea0804 Add an Endpoint in ceilometer c1f6857a Add httpd and tls support to manila-api f91852a6 Fix ntp module version to an existing tag/branch 8851b883 Add ability to configure Cinder's NFS snapshot support 9517c7b0 Add missing s3 case in gnocchi::api 67712f04 Run octavia-api under apache bfdd7300 Fix generating connections to OVN db 8c4c8e0b Handle image_volume_cache_enabled in PureStorage Cinder backend. 679d4f89 Simplify logrotate job 368474f1 Pin puppet-sensu module b1bc0410 Enable internal TLS options for ironic API b5220a72 Adding a udev rule to save sriov interface name before configuring switchdev Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 4 +- lib/puppet/provider/sriov_vf_config/numvfs.rb | 18 +++ manifests/certmonger/redis.pp | 9 +- manifests/fencing.pp | 3 + manifests/firewall/pre.pp | 6 - manifests/haproxy.pp | 15 ++- manifests/haproxy/horizon_endpoint.pp | 27 ++++ manifests/haproxy/stats.pp | 19 +-- manifests/keepalived.pp | 2 +- manifests/profile/base/ceilometer.pp | 69 ++++++++-- manifests/profile/base/certmonger_user.pp | 150 +++++++++++---------- manifests/profile/base/cinder/volume/nfs.pp | 6 + manifests/profile/base/cinder/volume/pure.pp | 6 + manifests/profile/base/database/mysql.pp | 7 + manifests/profile/base/gnocchi/api.pp | 1 + manifests/profile/base/kernel.pp | 8 ++ manifests/profile/base/manila/api.pp | 40 ++++++ manifests/profile/base/manila/share.pp | 29 ++-- manifests/profile/base/metrics/collectd.pp | 15 ++- manifests/profile/base/metrics/collectd/gnocchi.pp | 37 ++++- manifests/profile/base/metrics/qdr.pp | 12 ++ manifests/profile/base/neutron/agents/ovn.pp | 2 +- manifests/profile/base/neutron/ovn_metadata.pp | 2 +- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/octavia/api.pp | 41 ++++-- .../profile/pacemaker/database/mysql_bundle.pp | 8 +- .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +-- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 4 +- manifests/profile/pacemaker/ovn_northd.pp | 4 +- metadata.json | 6 +- ...nder-nfs-snapshot-support-ac547f24dddf97e8.yaml | 5 + spec/classes/tripleo_firewall_spec.rb | 13 -- spec/classes/tripleo_keepalive_spec.rb | 2 +- .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 27 +++- .../tripleo_profile_base_octavia_api_spec.rb | 1 - ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 1 + templates/collectd/collectd-gnocchi.conf.erb | 62 --------- templates/logrotate/containers_logrotate.conf.erb | 7 - templates/neutron/dibbler-client.epp | 1 + templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 1 + templates/neutron/keepalived.epp | 1 + templates/neutron/radvd.epp | 1 + templates/switchdev/switchdev.epp | 1 + zuul.d/layout.yaml | 8 -- 49 files changed, 460 insertions(+), 256 deletions(-)

1 0

tripleo-heat-templates 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are tickled pink to announce the release of: tripleo-heat-templates 9.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 9.4.0 ^^^^^ New Features ************ * Added the configuration option to disable Exact Match Cache (EMC) * Support setting values for "cephfs_volume_mode" manila parameter via the THT parameter ManilaCephFSCephVolumeMode. These control the POSIX rwx mode of the cephfs volumes, snapshots, and groups of these that back corresponding manila resources. Default value for ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the mode for these objects before it was settable. * Add new CinderNfsSnapshotSupport parameter, which controls whether cinder's NFS driver supports snapshots. The default value is True. * Add neutron-plugin-ml2-mlnx-sdn-assist as a containerized Neutron Core service template to support Mellanox SDN ml2 plugin. * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * The parameter "NovaRbdPoolName" is changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * New parameter "NovaNfsVersion" allow configuring the NFS version used for nova storage (when NovaNfsEnabled is true). Since NFSv3 does not support full locking a NFSv4 version need to be used. To not break current installations the default is the previous hard coded version 4. * The Shared File Systems service (manila) API has been switched to running behind httpd, and it now supports configuring TLS options. Upgrade Notes ************* * Cinder's NFS driver does not support snapshots unless the feature is explicitly enabled (this policy was chosen to ensure compatibility with very old versions of libvirt). The CinderNfsSnapshotSupport default value is True, and so the new default behavior enables NFS snapshots. This change is safe because it just enables a capability (i.e. snapshots) that other cinder drivers generally provide. * Keystone catalog entries for Cinder's v1 API are no longer created, but existing entries will not be automatically deleted. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * Fixes an issue that caused a subnet to be wrongly created on the Undercloud provisioning network based on environment default values. If the default "ctlplane-subnet" was renamed in "undercloud.conf", the defaults for "ctlplane-subnet" in "environments/undercloud.yaml" was merged with the subnets defined in "undercloud.conf". See bug 1820330 (https://bugs.launchpad.net/tripleo/+bug/1820330) * It is now possible for temporary containers inside THT to test if they are being run as part of a minor update by checking if the TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said containers need to export it to the container explicitely), see <service>_restart_bundles for examples. * When setting up TLS everywhere, some deployers may not have their FreIPA server in the ctlplane, causing the ipaclient registration to fail. We move this registration to host-prep tasks and invoke it using ansible. At this point, all networks should be set up and the FreeIPA server should be accessible. * e0e885b8ca3332e0815c537a32c564cac81f7f7e moved the cellv2 discovery from control plane to compute services. In case the computes won't have access to the external API this task will fail. Switch nova_cell_v2_discover_host.py to use internal api. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * With large number of OSDs, where each OSD need a connection, the default nofile (1024) of nova_compute is too small. This changes the default DockerNovaComputeUlimit to 131072 what is the same for cinder. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. * If nova-manage command was triggered on a host for the first time as root (usually manual runs) the nova-manage.log gets created as root user. On overcloud deploy runs the nova-manage command is run as nova user. In such situation the overcloud deploy fails as the nova user can not write to the nova-manage.log. With this change we run the chown of the logs files on every overcloud deploy to fix the nova-manage.log file permissions. * The keystone service and endpoint for Cinder's API v1 are no longer created. Cinder removed support for its v1 API in Queens. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 9.3.0..9.4.0 ---------------------------------------------- 66cd92439 Handle openvswitch meta-package on undercloud upgrade. fbd3638e2 Fix NovaNfs role parameters d37bdf779 Set cache_backend for token caching f1bca94ff Remove scenario008 jobs fb5f69dcb [FUP] Backport - krb-service-principal metadata per-Role d574fddb1 Fix log owner on computes during overcloud deploy runs 17a937496 Re-enable manila dashboard 8aa434389 Backport miss to run discovery via bootstrap_host_exec b99969ea6 Fix correct network for nova-vnc 0ebecb29a Add ComputeHCIOvsDpdk role 435496082 Add panko_api_cron container dcb9df6ce Add {{role.name}}RemovalPoliciesMode parameter a8f5bb11d Fix undefined variable python_interpreter 8bf53825d Request certificate for using host service principals de16ec8b0 Configure server_certs_key_passphrase for Octavia d6184b833 Ensure we aren't running some dry-run also for Pacemaker case dcce160c2 DVR neutron template should enable ARP responder 97eb154e9 Only request neutron certificate from neutron dhcp service 38cfa3436 Configure Neutron API for Nova Placement... 6c92c5195 Fix ssl.yaml generating GaneshaInternal in the endpoint map 42695fbd9 Set TenantNetPhysnetMtu to 0 to allow different MTUs 7329ca67a Do not bind /run on host to nova_migration_target a483d0b53 Start/enable OVS on neutron ovs agent nodes 0663f3fea Fix service auth URL in Octavia 379d6ad76 Fix custom network.name_lower in krb-service-principals b56035e65 Fix haproxy stats network binding 3e972555e Add CephAnsibleEnvironmentVariables to nodes-uuid call 218582c4c Make krb-service-principal metadata per-Role ebd0c4944 Add domain and no-ntp options to ipaclient ff10e2f6b Remove the iptables rules set via service_config_settings 8e13d5778 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 9c2822879 Add ability to specify dns search domains bfd445661 Fix IPA client when doing brownfield deployment of internal TLS 3ed420e8a Only add internal_api_virtual_ip if InternalApi in network_data 7ae142710 Add mkhomedir option to ipa-client-install 45dcd0e5a Try a timesync as part of first boot 74fd3fe5b standalone/undercloud - post: use EndpointMap to fetch Keystone URL 448c9b81b Enable serial execution for ansible host debdaa4b3 Set arp_notify to match ndisc_notify 8da661b1c Add cinder credentials to nova conf 7e0a4d0e5 [Rocky/Queens Only] Remove pre-upgrade validation tasks in cont services. fdac2bbcd Clean metrics related environments dd46170b7 Fix NovaNfs role parameter precedence in conditions 9995be9fd Remove OVNTunnelEncapType 884a0ad20 Enable ndisc_notify sysctl setting to notify of MAC changes edce8a943 Remove ceph-ansible fetch directory after it is saved 93c81bb62 Change setype for non container /var/log/nova-placement 733ec337c Add parameter to configure maxdelay in db purge/archive job d9eadc4c8 Change setype for non container /var/log/<service> directories 5ed8883ca ensure /var/run/redis is present upon reboot cba7c2285 Allow ssh from all for undercloud 747abdd15 Ensure there is no redis on host 123535d8c implement default ssh-from-ctlplane rule via hiera a96883899 Run nova-manage as root to prevent wrong nova-manage.log permissions ef076b244 Run nova_cell_v2_discover_hosts.py on every deploy run 4d478753b Allow NovaNfs parameters to be role specific 64f80a0b4 Avoid concurrent nova cell_v2 discovery instances 9850aeaeb OpenDev Migration Patch 738bc3ca7 fix storage.yaml to write environments/storage/nova-nfs.yaml fbf755979 Modifying the ovs-hw-offlaod file to adapt new changes 5b5e4a5f8 Allow NovaRbdPoolName to be role specific cd3fa6994 Move scenario 10 (octavia) to non-voting check job ae36e234e Fixed wrong cinder store user name cdfd00412 Set Standalone's br-ctlplane MTU 1f054551b Switch Manila API to httpd and support TLS 5203a4a83 ceilometer_agent_notification: disable-panko.yaml d3b70308b Run octavia-api under httpd 5435f13da Correct error catching while in "--check" mode 47284b1f0 Remove deprecated value used to set nova_metadata_ip 741cbadc2 Check if source directory does exist before linking e2e41c0df Increase DockerNovaComputeUlimit default value af755c3e8 Fix usage of satellite in organization mode 12543005b Set ulimit 16384 for Neutron SR-IOV container 178773f92 Increase default ulimit values for Neutron agents containers 562359bf2 Bind mount undercloud.conf with ,z in mistral_executor f24f23b96 Do not archive ceph-ansible fetch directory if it is empty 2e2f29760 Ensure we get rsyslog state, even in "--check" mode a3dc76b06 Provide option to disable EMC in puppet-vswitch a39f0c564 Do not restart bundles during a minor update fb77857f7 Be able to know when we are running inside a minor update workflow 913b73947 Add GnocchiStorageS3BucketPrefix into deployment ecb01485c Add support for cinder NFS snapshots 17fed07c0 Disable a directory listing of /icons in httpd. 8aff87b8a TLS everywhere: switch Octavia to use DNS entries 8896c2259 Enable flat network for ovn ac4bd32a7 Fix reload notification file 00102a206 Make nfs version for nova ephemeral storage configurable 6145c590b Remove unused parameter NovaPassword b158626b4 Include python-panko client. f9d7d92a4 Disable cinder's LVM backend when deploying Pure backend 9e37ce9ab [Rocky-only] Install and configure tmpwatch for log cleanup 08792a670 scen09 voting on rocky 50063195e Remove UndercloudCtlplaneSubnets defaults in UC env 65a185885 Update manila environment file name in capabilities-map 4bd3d245c Fix python binary lookup regression 4cd63e71d Remove ENV parameters for nova_cell_v2_discover_host.py 85885cbcf Run chown for nova log files on every run to fix wrong permissions e224d619c Add missing TLS configuration for ironic 22d83bbb0 Optional ICMP validation of controllers and gateways 05413a18b Enable authtoken cache 2859ba651 Add Mellanox SDN ML2 template for a containerized service 745369e8a Enable Glance image_conversion plugin when backend is rbd d0a6cb1d3 Add tempest workspace volume for tempest 6646e1ce1 Reload rsyslog/cron when we change timezones 0ef34d51c Allow embedded Skydive etcd port 6b916fec1 Use dedicated container tag per skydive service 0fc5b0efc Fix idempotency for horizon container logs a368910cd Refactored configuration options for nova/neutron in manila bfe4379bc Add missing entries for Pure Storage Cinder Backend and fix typos f34e27928 Make heat yaql limits configurable e02cb626a Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient e5d6b52c1 Fix nova_cell_v2_discover_host.py with python3 eef9d3e49 Service check in nova_cell_v2_discover_host.py to use internal API d7704bbf5 Move cellv2 discovery from control plane services to compute services 5baa88d94 Added tar option to preserve metadata of existing fetch_dir 9ae5fd8f3 Don't create service or endpoint for cinder API v1 d8740f616 Support cephfs_volume_mode parameter 61911edb5 Switch scenario00{1,4}-multinode-containers to Ceph bluestore 1792fa2be [FFU] Ensure compatibility with ansible 2.6. 19373b0ef Move ipa enrollment to host_prep_tasks db722bfd0 Don't look for primary_role ips in AllNodesValidationConfig 82a648fcc certmonger: Don't restart haproxy on cert renewal 759b711b9 Handle upper and lower case system uuids f56814ebe Upgrades: Ensure idempotency of pacemaker services 3e5484c61 Add CertmongerUser role to OVB defaults 5e725bf58 FFWD: Introduce workaround for neutron cisco plugin 0a39efefe Add missing RoleParameters and ServiceNames 44a3f5ac4 Fail to live migration if instance has NUMA topology 23ac104bf Remove ties between ceilometer and panko 02298dd07 Adding support of glance cinder store settings 3bd4a2a8b TLS everywhere: Mount the whole /etc/pki/libvirt/ directory in libvirt d07af320a TLS everywhere: Set post-save command for neutron dhcpd 5a2e205c1 TLS everywhere: Set post-save command for nova-vnc-proxy 8d06db25a TLS everywhere: Set post-save command for redis a1430fbf6 TLS everywhere: Set post-save command for RabbitMQ 6be616a38 TLS everywhere: Set post-save command for httpd 64e564aaf Reload haproxy when certificate is renewed d9f8ca29d Set Ironic default interface when using networking-ansible d2e191e76 Fix deployment of gluster with openshift AllInOne ad9712b60 Fix logging for metrics_qdr 936fd94d2 Run collectd socket cleanup on container start 1dfc4267f Apply changes to cluster using updated inventory 3ce479fb1 Generate post-deployment openshift-ansible inventory 9a07d00c1 Store nodes information in a dict ee486f2f6 Set container images for openshift 3.11 bda0c48e6 Remove openshift-ansible customization 7e98a5823 fix typo in ansible module name in "upgrade_tasks" of octavia* Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- all-nodes-validation.yaml | 12 ++ capabilities-map.yaml | 7 +- ci/common/vbmc_setup.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + ci/environments/ovb-ha.yaml | 2 + .../scenario001-multinode-containers.yaml | 13 +- .../scenario004-multinode-containers.yaml | 14 +- .../scenario010-multinode-containers.yaml | 1 + ci/environments/scenario010-standalone.yaml | 99 ++++++++++ common/deploy-steps-tasks.yaml | 2 + common/deploy-steps.j2 | 11 +- .../{services.yaml => services/role.role.j2.yaml} | 17 +- deployed-server/deployed-server-roles-data.yaml | 1 + .../services/logging/files/opendaylight-api.yaml | 2 +- .../neutron-plugin-ml2-mlnx-sdn-assist.yaml | 65 +++++++ .../octavia/octavia-deployment-config.yaml | 11 +- .../nova_cell_v2_discover_hosts.py | 55 ++++++ .../nova_wait_for_compute_service.py | 96 +++++++++ environments/cinder-pure-config.yaml | 2 + environments/disable-panko.yaml | 1 + ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 4 +- environments/hyperconverged-ceph.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-cephfsnative-config.yaml | 1 + environments/metrics/collect-read-rabbitmq.yaml | 15 ++ .../collectd-standalone.yaml} | 0 .../collectd-write-qdr.yaml} | 0 environments/neutron-ml2-ansible.yaml | 1 + environments/neutron-ml2-ovn-ha.yaml | 2 +- environments/neutron-ovs-dvr.yaml | 3 + environments/ovs-hw-offload.yaml | 16 +- environments/services-baremetal/octavia.yaml | 5 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-hw-offload.yaml | 2 +- environments/services/octavia.yaml | 5 +- ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 5 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 6 +- environments/standalone.yaml | 1 + environments/standalone/standalone-tripleo.yaml | 5 + environments/storage-environment.yaml | 2 + environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 64 +++++- .../role.role.j2.yaml} | 29 ++- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 43 +---- extraconfig/post_deploy/undercloud_post.yaml | 35 +--- .../rhel-registration/rhel-registration.yaml | 6 + .../rhel-registration/scripts/rhel-registration | 13 +- extraconfig/pre_network/config_then_reboot.yaml | 7 + extraconfig/services/ipaclient.yaml | 184 ++++++++++++++++++ extraconfig/services/openshift-cns.yaml | 14 +- extraconfig/services/openshift-master.yaml | 214 +++++++++++++++------ extraconfig/services/openshift-node.yaml | 41 +++- extraconfig/services/skydive-analyzer.yaml | 9 +- extraconfig/services/tmpwatch-install.yaml | 44 +++++ firstboot/os-net-config-mappings.yaml | 5 +- firstboot/userdata_timesync.yaml | 97 ++++++++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 7 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 2 + overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 37 ++-- puppet/all-nodes-config.j2.yaml | 12 +- puppet/extraconfig/pre_deploy/per_node.yaml | 12 ++ puppet/services/apache.j2.yaml | 2 + puppet/services/cinder-api.yaml | 9 +- puppet/services/cinder-backend-pure.yaml | 19 +- puppet/services/cinder-base.yaml | 8 +- puppet/services/cinder-volume.yaml | 7 + puppet/services/database/mysql.yaml | 10 +- puppet/services/database/redis.yaml | 4 +- puppet/services/glance-api.yaml | 21 +- puppet/services/gnocchi-base.yaml | 5 + .../haproxy-internal-tls-certmonger.j2.yaml | 11 +- puppet/services/haproxy-public-tls-certmonger.yaml | 1 + puppet/services/haproxy.yaml | 6 + puppet/services/heat-base.yaml | 16 +- puppet/services/horizon.yaml | 6 - puppet/services/kernel.yaml | 4 + puppet/services/manila-api.yaml | 47 +++++ puppet/services/manila-backend-cephfs.yaml | 4 + puppet/services/manila-scheduler.yaml | 21 +- puppet/services/manila-share.yaml | 17 ++ puppet/services/messaging/notify-rabbitmq.yaml | 2 + puppet/services/messaging/rpc-rabbitmq.yaml | 2 + puppet/services/metrics/collectd.yaml | 1 + puppet/services/neutron-api.yaml | 10 + puppet/services/neutron-base.yaml | 29 --- puppet/services/neutron-dhcp.yaml | 15 ++ puppet/services/neutron-metadata.yaml | 1 - puppet/services/neutron-ovs-agent.yaml | 9 + puppet/services/neutron-plugin-ml2-ovn.yaml | 7 +- puppet/services/nova-base.yaml | 6 + puppet/services/nova-compute.yaml | 62 +++++- puppet/services/nova-vnc-proxy.yaml | 7 +- puppet/services/octavia-api.yaml | 39 +--- puppet/services/octavia-base.yaml | 8 +- puppet/services/openstack-clients.yaml | 1 + puppet/services/openvswitch.yaml | 9 + puppet/services/ovn-controller.yaml | 5 - puppet/services/rabbitmq.yaml | 2 + puppet/services/sshd.yaml | 21 +- puppet/services/time/timezone.yaml | 13 ++ puppet/services/tripleo-firewall.yaml | 6 + .../notes/OvsDisableEMC-ab29e5c08856d439.yaml | 3 + ...eph_volume_mode-parameter-5553a9b39718a749.yaml | 9 + ...nder-nfs-snapshot-support-16664aa46a67a5ad.yaml | 13 ++ ...d-mellanox-sdn-ml2-docker-58d242b5a8c40ade.yaml | 5 + ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...ne-subnet-defaults-merged-5a6061b29618f5cf.yaml | 9 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../notes/minor-update-env-20657417094d4aeb.yaml | 7 + ...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml | 8 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va-rbd-pool-role-specific-010f6072d641d84f.yaml | 6 + ...va_add_nfs_vers_parameter-62b9e9d6150358d1.yaml | 8 + ...ver_host_use_internal_api-1bebb3e9c6e69113.yaml | 7 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + .../nova_compute_nofile-0427e49cc8ae70a6.yaml | 6 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + ...run_chown_on_every_deploy-c366af9898ecaeed.yaml | 9 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + .../remove-cinder-api-v1-66a24998d7f8e985.yaml | 9 + ...-api-to-httpd-support-tls-9b995fe4113b2412.yaml | 5 + roles/BlockStorage.yaml | 1 + roles/CephAll.yaml | 1 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 60 ++++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephFile.yaml | 1 + roles/HciCephMon.yaml | 1 + roles/HciCephObject.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 1 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 1 + roles/Standalone.yaml | 3 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 1 + roles_data.yaml | 6 + roles_data_undercloud.yaml | 1 + sample-env-generator/ssl.yaml | 13 +- sample-env-generator/standalone.yaml | 8 + sample-env-generator/storage.yaml | 3 + tools/check-up-to-date.sh | 2 +- tools/process-templates.py | 7 + tools/yaml-diff.py | 32 +++ tools/yaml-validate.py | 14 +- validation-scripts/all-nodes.sh | 8 +- zuul.d/layout.yaml | 21 +- 315 files changed, 2701 insertions(+), 1024 deletions(-)

1 0

python-tripleoclient 10.7.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are stoked to announce the release of: python-tripleoclient 10.7.0: TripleO client This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 10.6.1..10.7.0 ---------------------------------------------- 8d9fa8ac Raise proper exception at webscocket close 6b0bf909 undercloud: resolve undercloud_*_host ef8d2a16 Add ODL deprecation warning in CLI ba03c5e1 Use OS_CACERT for zaqar's websocket connection 3afc7cd1 OpenDev Migration Patch e89a0a68 Allow 'container image prepare' to support drivers a48d4961 scen009 voting on rocky only 4b01ede2 Don't validate stack when creating/updating plan ab723400 Check that the networks are defined on update 17009e1e Add verbosity level to the ansible update/upgrade run e930de11 Get the failed status for update prepare ddc53a06 Check proxy env vars 272beb2d Run hostname check for standalone e38c775e get_parser() should return a parser 7538644d Use a single queue for update/upgrade Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- lower-constraints.txt | 2 +- requirements.txt | 2 +- tripleoclient/constants.py | 46 +++- tripleoclient/exceptions.py | 8 + tripleoclient/plugin.py | 28 +-- .../v1/overcloud_deploy/test_overcloud_deploy.py | 40 ++- .../test_overcloud_external_update.py | 3 +- .../test_overcloud_external_upgrade.py | 3 +- .../test_overcloud_ffwd_upgrade.py | 8 +- .../v1/overcloud_update/test_overcloud_update.py | 12 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 20 +- tripleoclient/utils.py | 273 ++++++++++++++++++++- tripleoclient/v1/container_image.py | 2 + tripleoclient/v1/overcloud_deploy.py | 14 +- tripleoclient/v1/overcloud_external_update.py | 5 +- tripleoclient/v1/overcloud_external_upgrade.py | 5 +- tripleoclient/v1/overcloud_ffwd_upgrade.py | 9 +- tripleoclient/v1/overcloud_plan.py | 3 +- tripleoclient/v1/overcloud_update.py | 11 +- tripleoclient/v1/overcloud_upgrade.py | 12 +- tripleoclient/v1/tripleo_config.py | 2 + tripleoclient/v1/tripleo_deploy.py | 29 +++ tripleoclient/v1/undercloud_config.py | 28 ++- tripleoclient/v1/undercloud_preflight.py | 69 +----- tripleoclient/workflows/base.py | 2 +- tripleoclient/workflows/package_update.py | 34 +-- tripleoclient/workflows/plan_management.py | 11 +- zuul.d/layout.yaml | 3 + 36 files changed, 818 insertions(+), 207 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 395cdf0e..a863e53d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=9.1.0 # Apache-2.0 +tripleo-common>=9.5.0 # Apache-2.0

1 0

oslo.cache 1.36.0 (train)
by no-reply＠openstack.org 20 Jun '19

20 Jun '19

We are tickled pink to announce the release of: oslo.cache 1.36.0: Cache storage for OpenStack projects. This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 1.35.0..1.36.0 ------------------------------------ 4ff8379 Pass server_max_value_length to memcached client Diffstat (except docs and test files) ------------------------------------- oslo_cache/backends/memcache_pool.py | 2 ++ 1 file changed, 2 insertions(+)

1 0

puppet-manila 13.3.2 (rocky)
by no-reply＠openstack.org 20 Jun '19

20 Jun '19

We are pumped to announce the release of: puppet-manila 13.3.2: Puppet module for OpenStack Manila This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 13.3.2 ^^^^^^ New Features ************ * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * New parameters are added to the cephfs backend to permit configuration with an external Ganesha service; the new parameters define if Ganesha is remote and what are the username/password or private key to log on the remote host. Upgrade Notes ************* * Keystone v2 has been oficially deprecated. Add new configuration options for nova and neutron to be used with keystone v3. Deprecation Notes ***************** * Deprecate nova_catalog_info, nova_catalog_admin_info, nova_api_insecure, nova_ca_certificates_file, nova_admin_username, nova_admin_password, nova_admin_tenant_name and nova_admin_auth_url from nova section in manila.conf. Deprecate neutron_api_insecure, neutron_ca_certificates_file, neutron_url, neutron_url_timeout, neutron_admin_username, neutron_admin_password, neutron_admin_tenant_name, neutron_region_name, neutron_admin_auth_url and neutron_auth_strategy from neutron section in manila.conf. Changes in puppet-manila 13.3.1..13.3.2 --------------------------------------- 001ed33 Update module version b0732d7 Add parameters necessary to use a remote Ganesha service f969ee6 OpenDev Migration Patch 6881e9a Support cephfs_volume_mode parameter 8fb1fa1 Updating nova and neutron configuration Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- manifests/backend/cephfs.pp | 67 ++++-- manifests/compute/nova.pp | 170 +++++++++++++--- manifests/network/neutron.pp | 226 ++++++++++++++++----- metadata.json | 2 +- ...hfs_volume_mode-parameter-8f6bf0eb5b6fc425.yaml | 6 + ...ternal-ganesha-parameters-9aebf44f7cf01438.yaml | 7 + ...a-neutron-with-keystonev3-3386a497d476d7d8.yaml | 14 ++ spec/classes/manila_compute_nova_spec.rb | 86 +++++--- spec/classes/manila_network_neutron_spec.rb | 124 +++++++---- spec/defines/manila_backend_cephfs_spec.rb | 29 ++- 11 files changed, 558 insertions(+), 175 deletions(-)

1 0

pbr 5.3.1
by no-reply＠openstack.org 20 Jun '19

20 Jun '19

We are chuffed to announce the release of: pbr 5.3.1: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 5.3.0..5.3.1 --------------------------- a7e5c02 Fix Windows support c691c63 Install more dependencies for integration testing Diffstat (except docs and test files) ------------------------------------- pbr/hooks/files.py | 7 +++++++ pbr/util.py | 18 ++++++++++++++---- tools/integration.sh | 2 +- 3 files changed, 22 insertions(+), 5 deletions(-)

1 0

puppet-manila 12.5.1 (queens)
by no-reply＠openstack.org 20 Jun '19

20 Jun '19

We are thrilled to announce the release of: puppet-manila 12.5.1: Puppet module for OpenStack Manila This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 12.5.1 ^^^^^^ New Features ************ * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * New parameters are added to the cephfs backend to permit configuration with an external Ganesha service; the new parameters define if Ganesha is remote and what are the username/password or private key to log on the remote host. * The manila API service can now be installed with Apache, instead of the package-provided built-in eventlet based wsgi server. Set $manila::api::service_name to 'httpd' to run the Manila API as virtual host on an apache based web server. * Add openstack-db tag to Exec that run db-sync. Upgrade Notes ************* * Keystone v2 has been oficially deprecated. Add new configuration options for nova and neutron to be used with keystone v3. Deprecation Notes ***************** * Deprecate nova_catalog_info, nova_catalog_admin_info, nova_api_insecure, nova_ca_certificates_file, nova_admin_username, nova_admin_password, nova_admin_tenant_name and nova_admin_auth_url from nova section in manila.conf. Deprecate neutron_api_insecure, neutron_ca_certificates_file, neutron_url, neutron_url_timeout, neutron_admin_username, neutron_admin_password, neutron_admin_tenant_name, neutron_region_name, neutron_admin_auth_url and neutron_auth_strategy from neutron section in manila.conf. Changes in puppet-manila 12.5.0..12.5.1 --------------------------------------- 95e86b8 Update module version 4ca7fdc Add parameters necessary to use a remote Ganesha service 706bf9b OpenDev Migration Patch 8f65066 Support manila-api deployment with Apache c7b2127 Support cephfs_volume_mode parameter d4eaa27 Updating nova and neutron configuration e8b5a98 Add 'openstack-db' tag to db-sync Exec resource 2d71af0 import zuul job settings from project-config 18ef723 Update Gemfile to pull spec_helper from stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 + Gemfile | 1 + manifests/api.pp | 45 +++- manifests/backend/cephfs.pp | 67 ++++-- manifests/compute/nova.pp | 170 +++++++++++++--- manifests/db/sync.pp | 1 + manifests/keystone/auth.pp | 3 - manifests/network/neutron.pp | 226 ++++++++++++++++----- manifests/params.pp | 4 + manifests/wsgi/apache.pp | 164 +++++++++++++++ metadata.json | 6 +- ...hfs_volume_mode-parameter-8f6bf0eb5b6fc425.yaml | 6 + ...ternal-ganesha-parameters-9aebf44f7cf01438.yaml | 7 + .../notes/manila-wsgi-893b66e84d4a9133.yaml | 7 + .../notes/openstack_db_tag-b328cfe24b29b287.yaml | 3 + ...a-neutron-with-keystonev3-3386a497d476d7d8.yaml | 14 ++ spec/acceptance/basic_manila_spec.rb | 10 +- spec/classes/manila_api_spec.rb | 47 ++++- spec/classes/manila_compute_nova_spec.rb | 86 ++++++++ spec/classes/manila_db_sync_spec.rb | 1 + spec/classes/manila_network_neutron_spec.rb | 124 +++++++---- spec/classes/manila_wsgi_apache_spec.rb | 112 ++++++++++ spec/defines/manila_backend_cephfs_spec.rb | 29 ++- 24 files changed, 974 insertions(+), 162 deletions(-)

1 0

puppet-manila 14.4.1 (stein)
by no-reply＠openstack.org 20 Jun '19

20 Jun '19

We are jazzed to announce the release of: puppet-manila 14.4.1: Puppet module for OpenStack Manila This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 14.4.1 ^^^^^^ New Features * New parameters are added to the cephfs backend to permit configuration with an external Ganesha service; the new parameters define if Ganesha is remote and what are the username/password or private key to log on the remote host. Changes in puppet-manila 14.4.0..14.4.1 --------------------------------------- ecbb3a4 Update module version 49a2468 Add parameters necessary to use a remote Ganesha service 5247d70 OpenDev Migration Patch c2dda32 Switch to stable/stein 6a79707 Update UPPER_CONSTRAINTS_FILE for stable/stein 31491c4 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- Gemfile | 1 + manifests/backend/cephfs.pp | 64 ++++++++++++++++------ metadata.json | 2 +- ...ternal-ganesha-parameters-9aebf44f7cf01438.yaml | 7 +++ spec/defines/manila_backend_cephfs_spec.rb | 29 ++++++---- tox.ini | 2 +- 7 files changed, 77 insertions(+), 31 deletions(-)

1 0

nova 18.2.1 (rocky)
by no-reply＠openstack.org 18 Jun '19

18 Jun '19

We are happy to announce the release of: nova 18.2.1: Cloud computing fabric controller This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 18.2.1 ^^^^^^ Bug Fixes * The os-volume_attachments update API, commonly referred to as the swap volume API will now return a "400" (BadRequest) error when attempting to swap from a multi attached volume with more than one active read/write attachment resolving bug #1775418. (https://developer.openstack.org/api-ref/compute/?expanded=update-a -volume-attachment-detail) (https://launchpad.net/bugs/1775418) * Fixes a bug that caused Nova to fail on mounting Quobyte volumes whose volume URL contained multiple registries. Changes in nova 18.2.0..18.2.1 ------------------------------ 1ed3f8f9e4 [ironic] Don't remove instance info twice in destroy 3b1f1e356f docs: Don't version links to reno docs 0d2d4d6889 tox: Use basepython of python3.5 841d7d329d Allow driver to properly unplug VIFs on destination on confirm resize 28e7be8c8b Move get_pci_mapping_for_migration to MigrationContext 7737d29731 Replace the invalid index of nova-rocky releasenote 9fed1803b4 Workaround missing RequestSpec.instance_group.uuid c958ad8a68 Fixes multi-registry config in Quobyte driver a0a187c9bb Add regression recreate test for bug 1830747 c19d602f9b Block swap volume on volumes with >1 rw attachment e06a66fe9f Fix live-migration when glance image deleted 19ca8bcc22 Include all network devices in nova diagnostics 9fea5a2f34 [stable-only] Improve the reno for consoleauth upgrade check 01bfb7863c Add functional confirm_migration_error test dac3239e92 [stable-only] Delete allocations even if _confirm_resize raises (part 2) 0c9f98f64f Restore connection_info after live migration rollback fd5c454738 libvirt: Do not reraise DiskNotFound exceptions during resize b9caf7d9c7 Stop logging traceback when skipping quiesce 4540cd6ef9 Fix retry of instance_update_and_get_original 6310cdd27c Fix assert methods in unit tests 7e5b0b2b37 Skip _exclude_nested_providers() if not nested 8e130e2be7 Use migration_status during volume migrating and retyping 786083c91f libvirt: Always disconnect volumes after libvirtError exceptions 34b4220448 libvirt: Stop ignoring unknown libvirtError exceptions during volume attach d2ab3cef4e Pass on region when we don't have a valid ironic endpoint fa275544c2 AZ list performance optimization: avoid double service list DB fetch 8241b47967 xenapi/agent: Change openssl error handling 2c6e59e835 libvirt: Avoid using os-brick encryptors when device_path isn't provided dc0ded897b Create request spec, build request and mappings in one transaction 35bda4ec38 Fix {min|max}_version in ironic Adapter setup 585e62e244 Fix regression in glance client call cf435a9450 OpenDev Migration Patch 8703282508 libvirt: set device address tag only if setting disk unit 37ac54a42e Delete allocations even if _confirm_resize raises 2a25d1e48b Error out migration when confirm_resize fails b8ca269a67 Don't warn on network-vif-unplugged event during live migration 2cde44659c libvirt: disconnect volume when encryption fails 7766027c89 Move create of ComputeAPI object in websocketproxy 6a7e45c750 Add missing libvirt exception during device detach bf3a6ad7c9 doc: Fix openstack CLI command 94e17f988d doc: Capitalize keystone domain name 07ccc82af0 prevent common kwargs from glance client failure 6f07f76902 Fix bug preventing forbidden traits from working a40bce7f80 Adding tests to demonstrate bug #1821824 31c08d0c7d Do not persist RequestSpec.ignore_hosts 77164128bf Add functional regression test for bug 1669054 f1ac5183d4 Temporarily mutate migration object in finish_revert_resize 1342cd75e9 Update instance.availability_zone on revertResize 440c0fb0ad Add functional recreate test for bug 1819963 c8cb120964 Fix incomplete instance data returned after build failure 8d757888a8 Override the 'get' method in DriverBlockDevice class 9cc0ca8afd Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- api-ref/source/os-volume-attachments.inc | 3 + nova/api/openstack/compute/availability_zone.py | 16 +- nova/api/openstack/compute/volumes.py | 3 +- .../placement/handlers/allocation_candidate.py | 44 +--- .../placement/objects/resource_provider.py | 49 +++- nova/availability_zones.py | 23 +- nova/compute/api.py | 108 ++++++++- nova/compute/manager.py | 259 ++++++++++++++------- nova/conductor/manager.py | 22 +- nova/console/websocketproxy.py | 14 +- nova/db/sqlalchemy/api.py | 21 +- nova/exception.py | 9 + nova/image/glance.py | 45 ++-- nova/network/neutronv2/api.py | 47 +--- nova/objects/migration_context.py | 32 +++ nova/objects/request_spec.py | 22 +- nova/scheduler/utils.py | 3 +- .../functional/regressions/test_bug_1669054.py | 79 +++++++ .../functional/regressions/test_bug_1830747.py | 128 ++++++++++ .../openstack/compute/test_availability_zone.py | 92 ++++++-- .../unit/api/openstack/compute/test_volumes.py | 75 ++++++ nova/virt/block_device.py | 8 + nova/virt/fake.py | 6 +- nova/virt/ironic/client_wrapper.py | 12 +- nova/virt/ironic/driver.py | 13 +- nova/virt/libvirt/driver.py | 94 +++++--- nova/virt/libvirt/guest.py | 3 +- nova/virt/libvirt/imagebackend.py | 14 +- nova/virt/libvirt/volume/quobyte.py | 54 ++--- nova/virt/libvirt/volume/volume.py | 17 +- nova/virt/xenapi/agent.py | 18 +- nova/volume/cinder.py | 3 + playbooks/legacy/nova-caching-scheduler/run.yaml | 6 +- playbooks/legacy/nova-cells-v1/run.yaml | 6 +- .../legacy/nova-grenade-live-migration/run.yaml | 8 +- playbooks/legacy/nova-live-migration/run.yaml | 6 +- playbooks/legacy/nova-lvm/run.yaml | 6 +- playbooks/legacy/nova-multiattach/run.yaml | 6 +- playbooks/legacy/nova-next/run.yaml | 6 +- .../notes/bug-1775418-754fc50261f5d7c3.yaml | 10 + ...status-check-consoleauths-618acb3a67f97418.yaml | 10 +- .../notes/qb-bug-1730933-6695470ebaee0fbd.yaml | 5 + .../notes/rocky-prelude-b78b51b9026ed336.yaml | 2 +- tox.ini | 2 +- 80 files changed, 2313 insertions(+), 616 deletions(-)

1 0

glance_store 0.29.1 (train)
by no-reply＠openstack.org 17 Jun '19

17 Jun '19

We are thrilled to announce the release of: glance_store 0.29.1: OpenStack Image Service Store Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 0.29.1 ^^^^^^ Critical Issues *************** * glance_store 0.29.0 was released with backwards incompatible changes. There was no corresponding releasenote to mention this. 0.29.1 has reverted said change which will be included to 1.0.0 release later on the cycle. Bug Fixes ********* * Following bugs were fixed and included after 0.28.0 release: * Bug 1824533: Do not include ETag when puting manifest in chunked uploads * Bug 1818915: Python3: Fix return type on CooperativeReader.read * Bug 1805332: Prevent unicode object error from zero-byte read (https://code.launchpad.net/bugs/1824533) (https://code.launchpad.net/bugs/1818915) (https://code.launchpad.net/bugs/1805332) Changes in glance_store 0.29.0..0.29.1 -------------------------------------- a11649d Add 0.29.1 releasenotes f2a12d3 Revert "Change location metadata key 'backend' to 'store'" Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/cinder.py | 2 +- glance_store/_drivers/filesystem.py | 2 +- glance_store/_drivers/rbd.py | 2 +- glance_store/_drivers/swift/store.py | 2 +- glance_store/_drivers/vmware_datastore.py | 2 +- .../notes/0.29.1-notes-ded2a1d473a306c7.yaml | 17 ++++++++++++ 11 files changed, 53 insertions(+), 36 deletions(-)

1 0

ironic-lib 2.18.0 (train)
by no-reply＠openstack.org 17 Jun '19

17 Jun '19

We are chuffed to announce the release of: ironic-lib 2.18.0: Ironic common library This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://bugs.launchpad.net/ironic-lib/+bugs For more details, please see below. Changes in ironic-lib 2.17.1..2.18.0 ------------------------------------ 04d9ebf Update Python 3 test runtimes for Train 56887c9 mdns: allow specifying which interfaces to listen on Diffstat (except docs and test files) ------------------------------------- ironic_lib/mdns.py | 7 ++++++- setup.cfg | 1 + zuul.d/project.yaml | 3 +-- 4 files changed, 23 insertions(+), 3 deletions(-)

1 0

osc-lib 1.13.0 (train)
by no-reply＠openstack.org 17 Jun '19

17 Jun '19

We joyfully announce the release of: osc-lib 1.13.0: OpenStackClient Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 1.13.0 ^^^^^^ Bug Fixes * Fixes incorrect error when using "auth_type: none" in "clouds.yaml". * Respects the "<service type>_endpoint_override" configuration options, similarly to openstacksdk. Changes in osc-lib 1.12.1..1.13.0 --------------------------------- d2a97c1 Corrent using auth_type=none in clouds.yaml 8f8d48e Add FakeModule from OSC b016b99 Move the _tag module from OSC to osc-lib b788f24 Final switch to stestr 8c1418a Dropping the py35 testing 5a9501b Updates for OpenDev transition 687c310 OpenDev Migration Patch c3d8c30 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - README.rst | 2 +- osc_lib/api/auth.py | 2 +- osc_lib/clientmanager.py | 13 +- osc_lib/utils/tags.py | 174 +++++++++++++++++++++ .../notes/auth-type-none-d96760912605f822.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + setup.cfg | 2 +- tox.ini | 14 +- 15 files changed, 418 insertions(+), 14 deletions(-)

1 0

heat-translator 1.4.0 (train)
by no-reply＠openstack.org 15 Jun '19

15 Jun '19

We contentedly announce the release of: heat-translator 1.4.0: Tool to translate non-heat templates to Heat Orchestration Template. This release is part of the train release series. The source is available from: https://opendev.org/openstack/heat-translator Download the package from: https://pypi.org/project/heat-translator Please report issues through: https://bugs.launchpad.net/heat-translator/+bugs For more details, please see below. Changes in heat-translator 1.3.0..1.4.0 --------------------------------------- 33ac9fd OpenDev Migration Patch 8d98b55 Dropping the py35 testing 68e06e2 Create VNF with parameter file using scaling policy 23c9457 add python 3.7 unit test job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- setup.cfg | 1 - tox.ini | 2 +- translator/hot/tosca/tosca_policies_scaling.py | 11 ++- translator/hot/translate_node_templates.py | 8 +- .../nfv/hot_tosca_nfv_autoscaling_with_param.yaml | 66 +++++++++++++++ .../data/hot_output/reservation/SP_RSV_res.yaml | 4 + .../test_tosca_nfv_autoscaling_with_params.yaml | 94 +++++++++++++++++++++ 12 files changed, 316 insertions(+), 10 deletions(-)

1 0

pbr 5.3.0
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are excited to announce the release of: pbr 5.3.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 5.2.1..5.3.0 --------------------------- 96b84a9 Stop using pbr sphinx integration e8e9da3 Switch to release.o.o for constraints ab3db59 Make WSGI tests listen on localhost de739bb Allow git-tags to be SemVer compliant 3b102a5 Read description file as utf-8 Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + pbr/git.py | 7 ++++++- pbr/util.py | 3 ++- setup.cfg | 13 ------------- tox.ini | 16 ++++++++++++---- 13 files changed, 67 insertions(+), 30 deletions(-)

1 0

oslo.config 6.10.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are ecstatic to announce the release of: oslo.config 6.10.0: Oslo Configuration API This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. 6.10.0 ^^^^^^ New Features * The "oslo-config-validator" tool now has a new option, "--exclude- group", that allows deployers to ignore certain groups that might not appear in the sample config data, perhaps because the name of the group depends on other configuration values. This way the validator can still be used on the known groups. Changes in oslo.config 6.9.0..6.10.0 ------------------------------------ 9513d26 Fix coverage tox venv a6313ba Cap Bandit below 1.6.0 and update Sphinx requirement bab1556 Add a Quick Start tutorial 893d6c1 Revert "Replace git.openstack.org URLs with opendev.org URLs" 144e16d Document precedence of config sources 034a90d Replace git.openstack.org URLs with opendev.org URLs 2ee2ad6 Move user docs to top of index c30d9c0 Add exclude-groups option to config validator Diffstat (except docs and test files) ------------------------------------- oslo_config/validator.py | 8 +++ .../validator-exclude-groups-ad2f046522a3407e.yaml | 8 +++ test-requirements.txt | 5 +- tox.ini | 2 + 11 files changed, 133 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ffbe9cc..dab06dd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -23 +23,2 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD @@ -30 +31 @@ requests_mock>=1.5.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0

castellan 1.3.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are stoked to announce the release of: castellan 1.3.0: Generic Key Manager interface for OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 1.2.2..1.3.0 --------------------------------- 3e5a18c Cap Bandit below 1.6.0 and update Sphinx requirement ff6d1dd List requests as explicit dependency c9ce2c6 Use opendev repository cf1d772 OpenDev Migration Patch ebc4ba6 Dropping the py35 testing 79b30bf Replace openstack.org git:// URLs with https:// 0337ff3 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 4 ++-- README.rst | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ requirements.txt | 1 + setup.cfg | 2 +- test-requirements.txt | 5 +++-- tox.ini | 2 +- 9 files changed, 17 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index eeeb417..0d89d61 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,0 +16 @@ keystoneauth1>=3.4.0 # Apache-2.0 +requests>=2.14.2,!=2.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 918095d..09534b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD @@ -16 +17 @@ testtools>=2.2.0 # MIT -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0

oslo.db 5.0.1 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are gleeful to announce the release of: oslo.db 5.0.1: Oslo Database library This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 5.0.0..5.0.1 ------------------------------- 459de14 Rollback existing nested transacvtion before restarting 2f8250f Dropping the py35 testing Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - oslo_db/sqlalchemy/utils.py | 4 ++++ setup.cfg | 2 +- tox.ini | 2 +- 4 files changed, 6 insertions(+), 3 deletions(-)

1 0

oslo.messaging 9.7.2 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are glad to announce the release of: oslo.messaging 9.7.2: Oslo Messaging API This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 9.7.1..9.7.2 -------------------------------------- 1a860467 Add help msg to payload for CLI notifier Diffstat (except docs and test files) ------------------------------------- oslo_messaging/notify/notifier.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

keystonemiddleware 6.1.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are happy to announce the release of: keystonemiddleware 6.1.0: Middleware for OpenStack Identity This release is part of the train release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 6.1.0 ^^^^^ New Features * [bug 1830002 (https://bugs.launchpad.net/keystonemiddleware/+bug/1830002) In order to allow an installation to work without deploying an admin Identity endpoint, a new option *interface* has been added, allowing select the Identity endpoint that is being used when verifying auth tokens. It defaults to *admin* in order to replicate the old behaviour, but may be set to *public* or *internal* as needed. Changes in keystonemiddleware 6.0.0..6.1.0 ------------------------------------------ f6037a3 Add a new option to choose the Identity endpoint e93d078 Blacklist bandit 1.6.0 & cap sphinx for 2.7 3e40971 OpenDev Migration Patch fa0500e Bump memcached minimum version 27b916e Fix string format error dd43941 Update the min version of tox e192963 Run lower-constraints on Bionic and update python-keystoneclient 3ece927 Run lower-constraints job on Xenial c321f1e Update master for stable/stein c706ceb Drop py35 jobs a2f0477 Fix debug tox environment Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - keystonemiddleware/auth_token/__init__.py | 7 ++++--- keystonemiddleware/auth_token/_auth.py | 2 +- keystonemiddleware/auth_token/_identity.py | 15 +++++++++++---- keystonemiddleware/auth_token/_opts.py | 6 +++++- lower-constraints.txt | 4 ++-- releasenotes/notes/interface-option-ed551d2a3162668d.yaml | 9 +++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ requirements.txt | 2 +- setup.cfg | 3 ++- test-requirements.txt | 4 ++-- tox.ini | 11 ++++------- 17 files changed, 55 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b392bb7..80b26d4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ pycadf!=2.0.0,>=1.1.0 # Apache-2.0 -python-keystoneclient>=3.8.0 # Apache-2.0 +python-keystoneclient>=3.10.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3153d81..6ca0c43 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18 +18 @@ testtools>=2.2.0 # MIT -python-memcached>=1.56 # PSF +python-memcached>=1.59 # PSF @@ -23 +23 @@ oslo.messaging>=5.29.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0

1 0

metalsmith 0.13.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are pleased to announce the release of: metalsmith 0.13.0: Deployment and Scheduling tool for Bare Metal This release is part of the train release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 0.13.0 ^^^^^^ New Features ************ * It is now possible to provide custom "user_data" into instance configuration. Upgrade Notes ************* * An allocation name is now used for hostname instead of a custom "extra" field. Previously deployed instances will no longer be recognized, use the allocation backfilling to make them recognized again. * The "InstanceConfig" class has been split into "GenericConfig" and "CloudInitConfig" for clarity on which features come from what. * The deprecated "delay" argument to the "wait_for_provisioning" call has been removed. * Instance states (members of the "InstanceState" enumeration) can no longer be compared to strings. This was deprecated in the Stein release. Deprecation Notes ***************** * The exception classes "DeploymentFailure", "TraitsNotFound" and "NoNodesReserved" are deprecated and no longer used after transitioning to the allocation API. * The "metalsmith.InstanceConfig" class is deprecated, use "GenericConfig" or "CloudInitConfig" from the new module "metalsmith.instance_config". Changes in metalsmith 0.12.0..0.13.0 ------------------------------------ e9c25b0 Use allocation name for hostname instead of a custom field 349e507 Split InstanceConfig into GenericConfig and CloudInitConfig 0e7fa76 Remove features deprecated in Stein Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 2 +- metalsmith/__init__.py | 2 +- metalsmith/_cmd.py | 6 +- metalsmith/_instance.py | 20 +- metalsmith/_provisioner.py | 263 +++++++---- metalsmith/_utils.py | 82 +--- metalsmith/exceptions.py | 15 +- metalsmith/{_config.py => instance_config.py} | 133 ++++-- metalsmith/test/test_cmd.py | 8 +- metalsmith/test/test_instance.py | 10 +- .../{test_config.py => test_instance_config.py} | 86 +++- metalsmith/test/test_provisioner.py | 521 ++++++++++++++++----- metalsmith/test/test_utils.py | 73 --- .../allocation-hostname-f148e8adf0aee89a.yaml | 11 + .../notes/instance-config-c4ea6a169f782138.yaml | 14 + .../notes/stein-deprecation-6a4c9217a6ac4f13.yaml | 8 + requirements.txt | 2 +- 17 files changed, 792 insertions(+), 464 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d7dc353..e62de22 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -openstacksdk>=0.28.0 # Apache-2.0 +openstacksdk>=0.29.0 # Apache-2.0

1 0

kolla-ansible 7.1.1 (rocky)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are overjoyed to announce the release of: kolla-ansible 7.1.1: Ansible Deployment of Kolla containers This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 7.1.1 ^^^^^ New Features * Add support for deploying the Monasca fork of Grafana, which includes Keystone integration. * Add the Monasca Log Metrics service. This service is responsible for generating metrics from log files. * Add support for deploying the Monasca Notification service. The Notification service is responsible for notifiying users when an alert, as defined via the Monasca API, is generated by the Monasca Thresh topology. * Add support for deploying the Monasca Persister process. The Persister is responsible for reading metrics, alarms and events from Kafka and storing them in a variety of backends. * Add support for deploying the Monasca thresh service, an Apache Storm topology for alerting. * Add the Monasca Agent which provides host and application specific monitoring data collection and forwarding. * Docker logs are no longer allowed to grow unbounded and have been limited to a fixed size per container. Two new variables have been added, *docker_log_max_file* and *docker_log_max_size* which default to 5 and 50MB respectively. This means that for each container, there should be no more than 250MB of Docker logs. Changes in kolla-ansible 7.1.0..7.1.1 ------------------------------------- 153ce503f nova: Fix DBNotAllowed during compute startup 5998650bc Fix bifrost tests (Rocky) ccd9bb837 Pin ARA to <1.0.0 and use stable setup interface to find callback plugin 2ee13e179 Set log message field name in Monasca Fluentd plugin 1ed54bab9 Fix format file message field 354aa1d19 Constrain the size of Docker logs ce533592e Fix kolla-docker possible undefined variable 2d4c3dec9 CI Test: Support being source of a Ceph upgrade 20b7e39d4 Fix issues obtaining Keystone token with Monasca Grafana 47580bde5 update the event_connection to connection for panko 7cdc4e55f Find Monasca agent plugins locally dcbbe92c2 Call Grafana APIs only once 42b95ea6f Enable Kibana if Monasca enabled 7ccda50a6 Update log metrics config for Logstash downgrade d838be86b Make monasca notification templates optional 86a17c736 Parse Monasca Log API timestamps correctly 3180e735b Make Kafka maintenance easier 76b2a48e4 Automate Monasca documentation for configuring Kafka c905df48e Automatically configure Monasca Grafana datasource 54e87a438 Add documentation for Monasca standalone deployment fad05dd00 Add support for deploying Monasca Grafana ffd53bd8a Add missing HAProxy port checks for Monasca e4eae799f Add missing project name for Monasca c941e6622 Monasca specific config for Fluentd 884d8cb7e Support deploying the Monasca Agent 10fe8e47a Add initial documentation for Monasca 36bd647f3 Don't set recurse on config folders 5b687716f Forward system logs to Monasca Log API 8087e7fa0 Support using binary Logstash image 62f08e4c2 Update Monasca Log Transformer config 0cff413da Update Monasca Log Persister config 35294d768 Increase maximum payload size for Monasca Log API ba25dbc0d Prevent Monasca Notification using YAML mode d9c55e9d3 Support custom monasca-notification templates 3c4ba68f6 Disable InfluxDB reporting d2486b94d Improve registration of Monasca InfluxDB database ffd3a89cf Add region to Monasca Log API eeb04c76f Support configuring Monasca Persister performance 646919fc6 Add missing Monasca persister and notification dimensions 0e62bd7b9 Support deploying Monasca Persister 84cdd5468 Add some missing parameters for Monasca Notification f816100c8 Support deploying Monasca Notification engine 65c1e5b0d Support deploying Monasca Thresh 212f4c51b Support deploying an Apache Storm cluster 0d2c348e1 Improve scalability of Kafka 00f782095 Support deploying Monasca Log Metrics 5ab6ec8e8 Support configuring Monasca log pipeline performance b3b25f786 Remove Kafka partitions config option 9310955cd Use alembic migrations to bootstrap Monasca database 1d86b9a0b Check if glance_upgrading is defined before using it 1f655ed9c Increase retries numbers of grafana check task c418f7458 Set external web URL for Prometheus services 75dc31d92 Revert "Load configfs kernel module for iscsid" eb42bd286 OpenDev Migration Patch 4e8977c46 Load configfs kernel module for iscsid dd231570b Add customizable gnocchi volume c9ed94a58 Fix command connect to replica set primary d19a4c921 add version to OPENSTACK_KEYSTONE_URL 3203d19c3 Don't use easy_install on Ubuntu 18+ b8cd3a06e Change heat bootstrap to use internal API interface a47870032 Use database_address and database_port var for mariadb check dc1319420 Check configuration file permissions in CI fc9384117 Fix up config file permissions on the host Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible/group_vars/all.yml | 33 ++- ansible/inventory/all-in-one | 41 ++++ ansible/inventory/multinode | 41 ++++ ansible/library/kolla_docker.py | 3 +- ansible/roles/baremetal/defaults/main.yml | 7 + ansible/roles/baremetal/tasks/install.yml | 5 +- ansible/roles/baremetal/tasks/post-install.yml | 1 + .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/ceilometer/tasks/config.yml | 4 +- ansible/roles/ceph/tasks/start_mdss.yml | 2 +- ansible/roles/ceph/tasks/start_mgrs.yml | 2 +- ansible/roles/cinder/tasks/config.yml | 3 + ansible/roles/common/tasks/config.yml | 30 ++- .../conf/filter/00-record_transformer.conf.j2 | 22 ++ .../templates/conf/format/apache_access.conf.j2 | 2 +- .../templates/conf/format/wsgi_access.conf.j2 | 2 +- .../templates/conf/format/wsgi_python.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 32 ++- .../templates/conf/output/02-monasca.conf.j2 | 14 ++ .../common/templates/cron-logrotate-storm.conf.j2 | 3 + ansible/roles/common/templates/cron.json.j2 | 1 + ansible/roles/designate/tasks/backend_external.yml | 2 + ansible/roles/designate/tasks/config.yml | 2 +- ansible/roles/destroy/tasks/cleanup_host.yml | 1 + ansible/roles/freezer/tasks/config.yml | 2 +- ansible/roles/glance/handlers/main.yml | 2 +- ansible/roles/gnocchi/defaults/main.yml | 6 +- ansible/roles/gnocchi/tasks/ceph.yml | 1 + ansible/roles/gnocchi/tasks/config.yml | 1 + ansible/roles/gnocchi/tasks/external_ceph.yml | 2 + ansible/roles/grafana/tasks/config.yml | 1 + ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/haproxy/tasks/precheck.yml | 81 +++++++ ansible/roles/haproxy/templates/haproxy.cfg.j2 | 26 +++ ansible/roles/heat/tasks/bootstrap_service.yml | 1 + ansible/roles/heat/tasks/config.yml | 1 - ansible/roles/horizon/defaults/main.yml | 2 +- ansible/roles/influxdb/templates/influxdb.conf.j2 | 2 +- ansible/roles/ironic/tasks/config.yml | 2 +- ansible/roles/kafka/defaults/main.yml | 1 + ansible/roles/kafka/tasks/config.yml | 1 - .../kafka/templates/kafka.server.properties.j2 | 15 +- ansible/roles/keystone/tasks/config.yml | 1 + ansible/roles/manila/tasks/config.yml | 1 + ansible/roles/mariadb/tasks/check.yml | 2 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 13 +- ansible/roles/monasca/defaults/main.yml | 168 +++++++++++++- ansible/roles/monasca/handlers/main.yml | 173 +++++++++++++++ ansible/roles/monasca/tasks/bootstrap.yml | 29 ++- ansible/roles/monasca/tasks/bootstrap_service.yml | 5 - ansible/roles/monasca/tasks/config.yml | 244 ++++++++++++++++++++- ansible/roles/monasca/tasks/deploy.yml | 28 ++- ansible/roles/monasca/tasks/post_config.yml | 94 ++++++++ ansible/roles/monasca/tasks/precheck.yml | 33 +++ ansible/roles/monasca/tasks/register.yml | 12 + .../monasca-agent-collector/agent-collector.yml.j2 | 9 + .../monasca-agent-collector.json.j2 | 24 ++ .../monasca-agent-collector/plugins/cpu.yaml | 5 + .../monasca-agent-collector/plugins/disk.yaml | 7 + .../monasca-agent-collector/plugins/memory.yaml | 5 + .../monasca-agent-collector/plugins/network.yaml | 6 + .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 26 +++ .../monasca-agent-forwarder.json.j2 | 18 ++ .../monasca-agent-statsd/agent-statsd.yml.j2 | 12 + .../monasca-agent-statsd.json.j2 | 18 ++ .../monasca/templates/monasca-api/api.conf.j2 | 1 - .../templates/monasca-grafana/grafana.ini.j2 | 55 +++++ .../monasca-grafana/monasca-grafana.json.j2 | 23 ++ .../templates/monasca-log-api/log-api.conf.j2 | 5 + .../monasca-log-metrics/log-metrics.conf.j2 | 76 +++++++ .../monasca-log-metrics.json.j2 | 18 ++ .../monasca-log-persister/log-persister.conf.j2 | 4 +- .../monasca-log-persister.json.j2 | 4 +- .../log-transformer.conf.j2 | 24 +- .../monasca-log-transformer.json.j2 | 2 +- .../monasca-notification.json.j2 | 25 +++ .../monasca-notification/notification.conf.j2 | 25 +++ .../monasca-persister/monasca-persister.json.j2 | 18 ++ .../templates/monasca-persister/persister.conf.j2 | 23 ++ .../monasca-thresh/monasca-thresh.json.j2 | 29 +++ .../monasca/templates/monasca-thresh/storm.yml.j2 | 9 + .../templates/monasca-thresh/thresh-config.yml.j2 | 132 +++++++++++ ansible/roles/neutron/tasks/config.yml | 8 +- ansible/roles/nova/tasks/config-nova-fake.yml | 2 +- ansible/roles/nova/tasks/config.yml | 5 +- ansible/roles/nova/templates/nova.conf.j2 | 2 + ansible/roles/octavia/tasks/config.yml | 2 + ansible/roles/opendaylight/tasks/config.yml | 1 + ansible/roles/openvswitch/tasks/config.yml | 4 +- ansible/roles/ovs-dpdk/tasks/config.yml | 3 +- ansible/roles/panko/tasks/bootstrap.yml | 2 +- ansible/roles/panko/templates/panko.conf.j2 | 4 +- ansible/roles/prometheus/tasks/config.yml | 4 + .../templates/prometheus-alertmanager.json.j2 | 2 +- .../prometheus/templates/prometheus-server.json.j2 | 2 +- ansible/roles/rabbitmq/tasks/config.yml | 4 +- ansible/roles/storm/defaults/main.yml | 47 ++++ ansible/roles/storm/handlers/main.yml | 44 ++++ ansible/roles/storm/meta/main.yml | 3 + ansible/roles/storm/tasks/check.yml | 1 + ansible/roles/storm/tasks/config.yml | 83 +++++++ ansible/roles/storm/tasks/deploy.yml | 5 + ansible/roles/storm/tasks/main.yml | 2 + ansible/roles/storm/tasks/precheck.yml | 41 ++++ ansible/roles/storm/tasks/pull.yml | 10 + ansible/roles/storm/tasks/reconfigure.yml | 2 + ansible/roles/storm/tasks/upgrade.yml | 2 + ansible/roles/storm/templates/storm-nimbus.json.j2 | 23 ++ ansible/roles/storm/templates/storm-worker.json.j2 | 23 ++ ansible/roles/storm/templates/storm.yml.j2 | 14 ++ ansible/roles/swift/tasks/config.yml | 1 + ansible/roles/trove/tasks/config.yml | 1 + ansible/roles/watcher/tasks/config.yml | 1 + ansible/roles/zookeeper/tasks/config.yml | 1 - ansible/site.yml | 12 +- etc/kolla/globals.yml | 1 + etc/kolla/passwords.yml | 2 + .../add-monasca-grafana-c31d4407c33939e4.yaml | 5 + .../add-monasca-log-metrics-370846df015ff96a.yaml | 5 + .../add-monasca-notification-03283c42a8df3d71.yaml | 7 + .../add-monasca-persister-c8fdd3d127b2438e.yaml | 6 + .../notes/add-monasca-thresh-f7a860ce996684f9.yaml | 5 + .../notes/add_monasca_agent-2b3b2f484a9e7168.yaml | 4 + .../limit-docker-log-size-33133da03b232ece.yaml | 8 + tools/cleanup-host | 5 + tools/setup_gate.sh | 55 ++++- zuul.d/base.yaml | 2 +- 134 files changed, 2514 insertions(+), 97 deletions(-)

1 0

kolla-ansible 6.2.1 (queens)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are tickled pink to announce the release of: kolla-ansible 6.2.1: Ansible Deployment of Kolla containers This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. Changes in kolla-ansible 6.2.0..6.2.1 ------------------------------------- ce546013e Upgrade identity v2 to identity v3 API 15fff2328 Fix kolla-docker possible undefined variable 686529752 OpenDev Migration Patch 9fcfbd330 Change heat bootstrap to use internal API interface Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible/library/kolla_docker.py | 3 +- ansible/roles/heat/tasks/bootstrap_service.yml | 1 + .../templates/providers.d/openstack-infra.conf.j2 | 7 ++-- .../roles/neutron/templates/neutron_lbaas.conf.j2 | 7 ++-- 7 files changed, 53 insertions(+), 7 deletions(-)

1 0

kolla 6.2.2 (queens)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We contentedly announce the release of: kolla 6.2.2: Kolla OpenStack Deployment This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 6.2.2 ^^^^^ New Features * The manila-api dockerfile now contains support for httpd and mod_wsgi packages for all supported platforms. It also contains the mod_ssl package for RHEL/centos and oraclelinux. Docker entrypoints can now use the httpd configuration seeded to run the manila-api service with httpd/mod_wsgi. Changes in kolla 6.2.1..6.2.2 ----------------------------- ed2860eb5 Bump service versions for Queens 8dd4c953f Install ceph-mds in ceph-base on ubuntu/debian 916198a9e Fix bandit failure B105 in keystone fernet d8a1c3eb7 Add sqlite package to manila-share 8dbb96249 Install udevadm in ironic-conductor image 177f5eb64 OpenDev Migration Patch 62307b854 Add support to deploy manila-api with Apache/wsgi Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../keystone-fernet/fetch_fernet_tokens.py | 3 +- kolla/common/config.py | 16 +++---- ...i-httpd-packages-and-conf-1bea1364037cd64e.yaml | 8 ++++ 9 files changed, 91 insertions(+), 18 deletions(-)

1 0

ironic-inspector 8.2.2 (stein)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are pumped to announce the release of: ironic-inspector 8.2.2: Hardware introspection for OpenStack Bare Metal This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.2.2 ^^^^^ Bug Fixes * Fixes an issue when extra_hardware plugin failed to save extra hardware information to Swift, the collected information is not processed and consumed. * Fixes an issue while mapping port InfiniBand MAC address to EthernetOverInfiniBand MAC. Prior to this fix, it will fail to map and raise an exception. Changes in ironic-inspector 8.2.1..8.2.2 ---------------------------------------- ccff6e8 Convert Swift connection errors into more obvious ones 7e7a729 Improve error handling of extra_hardware c819642 pxe_filter: fix get blacklist error Diffstat (except docs and test files) ------------------------------------- ironic_inspector/common/swift.py | 21 ++++++++---- ironic_inspector/plugins/extra_hardware.py | 13 +++++--- ironic_inspector/pxe_filter/iptables.py | 4 +-- ironic_inspector/test/unit/test_iptables.py | 18 +++++++---- .../test/unit/test_plugins_extra_hardware.py | 37 ++++++++++++++++++++++ ironic_inspector/test/unit/test_swift.py | 20 +++++++++++- ...ix-extra-hardware-process-c0635a972de37b0a.yaml | 6 ++++ ...-pxe-filter-get-blacklist-2dde59d51c1d010f.yaml | 6 ++++ 8 files changed, 105 insertions(+), 20 deletions(-)

1 0

ironic-python-agent 3.7.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are chuffed to announce the release of: ironic-python-agent 3.7.0: Ironic Python Agent Ramdisk This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 3.7.0 ^^^^^ New Features ************ * Add the hostname to the introspection data. This will likely be the hostname as set by the DHCP server. * IPv6 BMC address is now discovered during inspection and sent as a new "bmc_v6address" inventory field. * Supports fetching baremetal and baremetal introspection endpoints from mDNS instead of providing them via kernel parameters or a configuration file. See story 2005393 (https://storyboard.openstack.org/#!/story/2005393) for more details. * Adds support for software RAID via the generic hardware manager. By means of the target_raid_config a single RAID-1 or one RAID-1 plus one RAID-N can be configured (where N can be 0, 1, and 1+0). The RAID is created/deleted during manual cleaning. Note that this initial implementation will use all available devices for the setup of the software RAID device(s). Upgrade Notes ************* * When no baremetal API URL is provided (e.g. via the "ipa-api-url" kernel parameter), ironic-python-agent now tries to get the URL using mDNS service discovery. Bug Fixes ********* * Supports channel numbers 1 to 11 when looking for a BMC address. This is consistent with the IPMI specification v2.0. Previously, only channels 1 to 7 were considered. * Mounts "/run" into chroot when installing bootloader to prevent timeouts. * Fixes an issue with retrieving all available physical memory. For more details see story 2005308 (https://storyboard.openstack.org/#!/story/2005308) * Fixes an issue that md5 checksum is still required in the image information when os_hash_algo and os_hash_value are present. The "checksum" field is now optional, while "os_hash_algo" and "os_hash_value" fields must be set if the "checksum" field is not provided. Changes in ironic-python-agent 3.6.0..3.7.0 ------------------------------------------- 48f9914 Software RAID: Protect RAID metadata upon cleaning 7b3469e Get the hostname of the introspected host 5140c3b Software RAID: Don't preformat log strings 3e2d348 Software RAID: Check if install partition exists 6579471 Add a non-voting metalsmith job e2bdb30 Software RAID: Add mdadm to IPA images fea7f86 Software RAID: Fix race in test for get_holder_disks 4535305 Software RAID: Fix shell commands 3352d40 Incorporate bandit support in CI 8fe390e Software RAID: Add IPA deploy support 2db123d Software RAID: Create/delete configurations dcffadc Docs: Add bmc_v6address hardware inventory 5c5328c Supports fetching API endpoints from mDNS 9103967 Do not run bashate on generated TinyIPA files 06aea36 Clean up release notes a9cac52 Relax checksum fields validation e30f1d7 Update sphinx requirements eb875cc Add more channel number for detecting BMC IPv6 address a2d25de show inspection callback url in error messages 21393cb report the URL when heartbeats fail 4e086f9 Do not use metadata checksums with ext4 66d3c8e Add more channel number for detecting BMC IP address 9c35f02 Bind mount /run into chroot when installing grub b15d5d5 Replace git.openstack.org URLs with opendev.org URLs a88e619 Fix download upper constraints 93dae93 Fetch upper constraints from opendev.org ba7d273 OpenDev Migration Patch ac4904e Switch to Debian Stretch for building CoreOS images d8018b9 Ironic python agent does not extract correct available memory 5bc59d2 Dropping the py35 testing ae8e10e Update minimum hardware version 4cb2ac4 Fix docs job failure due to malformated docstring 518c338 Discover IPv6 BMC address b7cfa91 Replace openstack.org git:// URLs with https:// b81b7c1 Add 'interface' to get_clean_steps docstring ce9d0ef Add versions to release notes series 775e75d Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Dockerfile | 15 +- README.rst | 4 +- imagebuild/common/generate_upper_constraints.sh | 2 +- imagebuild/tinyipa/README.rst | 2 +- imagebuild/tinyipa/build_files/finalreqs.lst | 1 + ironic_python_agent/agent.py | 24 +- ironic_python_agent/config.py | 44 +- ironic_python_agent/errors.py | 9 + ironic_python_agent/extensions/image.py | 45 +- ironic_python_agent/extensions/standby.py | 33 +- ironic_python_agent/hardware.py | 503 +++++++++++- ironic_python_agent/inspector.py | 16 +- ironic_python_agent/netutils.py | 7 + ironic_python_agent/numa_inspector.py | 69 +- ironic_python_agent/utils.py | 5 +- lower-constraints.txt | 3 +- playbooks/ironic-python-agent-buildimage/post.yaml | 12 +- playbooks/ironic-python-agent-buildimage/run.yaml | 2 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../run.yaml | 10 +- .../run.yaml | 10 +- plugin-requirements.txt | 2 +- .../notes/add-hostname-8bbf24712b6a4919.yaml | 5 + .../add-more-lan-channels-8f5197ed5f057c25.yaml | 6 + .../notes/bindmount-run-4c6a31d3ee4e0ed6.yaml | 4 + ...discover-ipv6-bmc-address-b3b357ff6c5d822c.yaml | 5 + .../get-physical-memory-535a32362bcdf83a.yaml | 6 + releasenotes/notes/mdns-e020484e64d76edb.yaml | 12 + .../relax-checksum-feeding-11044ae02b411a07.yaml | 8 + .../notes/software-raid-4a88e6c5af9ea742.yaml | 9 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 +- releasenotes/source/stein.rst | 6 + requirements.txt | 2 +- test-requirements.txt | 4 +- tools/run_bashate.sh | 2 + tox.ini | 7 +- zuul.d/ironic-python-agent-jobs.yaml | 31 +- zuul.d/legacy-ironic-jobs.yaml | 4 +- zuul.d/project.yaml | 5 +- 51 files changed, 1925 insertions(+), 172 deletions(-) Requirements updates -------------------- diff --git a/plugin-requirements.txt b/plugin-requirements.txt index 3af0a52..3a75a5e 100644 --- a/plugin-requirements.txt +++ b/plugin-requirements.txt @@ -2 +2 @@ -hardware>=0.20.0 +hardware>=0.20.1 diff --git a/requirements.txt b/requirements.txt index 904fa91..6e1ac7d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -24 +24 @@ WSME>=0.8.0 # MIT -ironic-lib>=2.16.0 # Apache-2.0 +ironic-lib>=2.17.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b8ba6dd..25c8aaa 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ flake8-import-order>=0.13 # LGPLv3 +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 @@ -15 +16,2 @@ doc8>=0.6.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

kolla 7.0.3 (rocky)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are gleeful to announce the release of: kolla 7.0.3: Kolla OpenStack Deployment This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 7.0.3 ^^^^^ New Features * The manila-api dockerfile now contains support for httpd and mod_wsgi packages for all supported platforms. It also contains the mod_ssl package for RHEL/centos and oraclelinux. Docker entrypoints can now use the httpd configuration seeded to run the manila-api service with httpd/mod_wsgi. * Add the Monasca fork of Grafana (v4.0.1). The Monasca fork of Grafana adds Keystone integration, allowing Grafana users to log in with their OpenStack credentials and see Metrics from their OpenStack project. * The Monasca output plugin is now installed in the Fluentd container to enable posting logs from Fluentd to the Monasca Log API. Changes in kolla 7.0.2..7.0.3 ----------------------------- 9d85b96b3 Bump Monasca Notification version in Rocky 8e9cc856b Remove HTTP configuration shipped in openstack-nova-placement-api RPM 594b06453 Bump Monasca Fluentd plugin version e4929da14 Add CI trigger for ceph jobs 63d63ab97 Fix multiple mon deployment failures dfb993542 Bump service versions Rocky 0eb7f031c Fix bandit failure B105 in keystone fernet d0cc542d8 Add sqlite package to manila-share 230454962 Improve doc of kolla-build '--docker-dir' option a756a6b90 Use latest release of Monasca Log API d505ca46e Build and install Fluentd Monasca plugin 86047d11b Downgrade Logstash for Monasca 521b802ba Use alembic migrations to deploy Monasca DB aa445283e Add monasca user to Monasca thresh container a300a8396 Fix potential Monasca-thresh start failure 85bf3dcbe Fix naming of override template 1117af45a Add Monasca template override file 0cb2d2e34 Install udevadm in ironic-conductor image 31a7cfcef Bump OpenStack service versions (Rocky) c5ffe9b21 OpenDev Migration Patch 7bb4770d2 Pin kafka java version to 8 on ubuntu 8e8ede2b4 Fix the problem that the crush map is changed 9c83d8ab1 Add missing dependency for Monasca Grafana image 6af1eb8f4 Add Monasca Grafana image 9f8594132 Fix the problem of osd initialization failed 6ebcb5675 Add support to deploy manila-api with Apache/wsgi Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.d/centos.yaml | 4 ++ .zuul.d/oraclelinux.yaml | 2 + .zuul.d/ubuntu.yaml | 2 + .../monasca-template-overrides.j2 | 3 + .../keystone-fernet/fetch_fernet_tokens.py | 3 +- kolla/common/config.py | 29 ++++---- ...i-httpd-packages-and-conf-1bea1364037cd64e.yaml | 8 +++ .../add-monasca-grafana-868f1dd95725a030.yaml | 6 ++ ...-monasca-api-from-fluentd-1b653db78a8644e7.yaml | 5 ++ 27 files changed, 314 insertions(+), 41 deletions(-)

1 0

os-ken 0.4.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are excited to announce the release of: os-ken 0.4.0: A component-based software defined networking framework for OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 0.3.1..0.4.0 ------------------------------ b9e3c674 Dropping the py35 testing 379a7694 OpenDev Migration Patch 4429c77b Fix import for oskenbgp 408d1ec8 Remove oslosphinx from lower-constraints 7cab51ac Do not raise exception if Activity is already stopped 7995cb63 Update master for stable/stein 6e920c89 add python 3.7 unit test job a3b706a7 Fix pep8 errors in os-ken f57d8b3b Remove requirements unit tests module f312e12b Change openstack-dev to openstack-discuss Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- lower-constraints.txt | 3 +- os_ken/services/protocols/bgp/base.py | 7 ++- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ setup.cfg | 4 +- tox.ini | 5 +- 11 files changed, 26 insertions(+), 104 deletions(-)

1 0

cliff 2.15.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We exuberantly announce the release of: cliff 2.15.0: Command Line Interface Formulation Framework This release is part of the train release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://bugs.launchpad.net/python-cliff/+bugs For more details, please see below. Changes in cliff 2.14.1..2.15.0 ------------------------------- 4465e25 Dropping the py35 testing ffb579b Updates for OpenDev transition 6e52ba5 OpenDev Migration Patch 6e5c1e0 add python 3.7 unit test job b895afe Missing carriage return in some cases, using -f json 122a779 Change openstack-dev to openstack-discuss a4ff48c Remove dead files 854e59b add argparse conflict handler "ignore" Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 4 +- MANIFEST.in | 6 -- Makefile | 21 ------ README.rst | 2 +- cliff/_argparse.py | 80 ++++++++++++++++++++- cliff/command.py | 1 + cliff/formatters/json_format.py | 1 + setup.cfg | 4 +- tox.ini | 4 +- 13 files changed, 116 insertions(+), 194 deletions(-)

1 0

ovsdbapp 0.16.0 (train)
by no-reply＠openstack.org 14 Jun '19

14 Jun '19

We are overjoyed to announce the release of: ovsdbapp 0.16.0: A library for creating OVSDB applications This release is part of the train release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 0.15.0..0.16.0 ---------------------------------- ceea8a2 Make Event logging more useful by default 0fe5351 TrivialFix: Fix the chassis_del comment in Southbound API 776377f Change the order of parameters for lsp_bind method 9f8dc44 Allow match_ip in LrNatDelCommand to be IP network 048473d Add missing tox environment "functional-py36" 354c87d OpenDev Migration Patch 3c6c766 add an option to let the user choose the right time to start connection 4eabf17 Make it possible to opt out of nested transactions 53b1026 Update master for stable/stein 8d8ab85 Add db_create_row method c52e53b Add mock.patch.stopall cleanup handler to base test class 9a2ba5e Mock Thread for both connection tests dc35ed1 Remove vtep-related code from venv testing 5e14117 modify RowEvent hash key a0f7d79 Make event debug log more useful ae5b175 Pass kwargs from execute to transaction() ab42b08 Switch functional and tempest jobs to python3 25abc29 Bump appdirs lower constraint 4ee25ad Break out match_fn from matches Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- lower-constraints.txt | 2 +- ovsdbapp/api.py | 24 ++++++++++++++++---- ovsdbapp/backend/ovs_idl/__init__.py | 10 ++++++--- ovsdbapp/backend/ovs_idl/command.py | 15 ++++++++----- ovsdbapp/backend/ovs_idl/event.py | 18 +++++++++------ ovsdbapp/backend/ovs_idl/idlutils.py | 11 +++++++++ ovsdbapp/event.py | 10 +++++++-- ovsdbapp/schema/ovn_northbound/commands.py | 9 +++++++- ovsdbapp/schema/ovn_southbound/api.py | 4 ++-- ovsdbapp/schema/ovn_southbound/impl_idl.py | 4 ++-- .../schema/open_vswitch/test_common_db.py | 15 +++++++++++++ .../schema/ovn_northbound/test_impl_idl.py | 26 ++++++++++++++++++++++ .../unit/schema/open_vswitch/test_impl_idl.py | 16 +++++++++++++ ovsdbapp/venv.py | 16 +------------ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++++ tox.ini | 6 +++++ zuul.d/ovsdbapp-jobs.yaml | 1 + zuul.d/project.yaml | 2 ++ 23 files changed, 181 insertions(+), 49 deletions(-)

1 0

ovsdbapp 0.12.4 (rocky)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are amped to announce the release of: ovsdbapp 0.12.4: A library for creating OVSDB applications This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 0.12.3..0.12.4 ---------------------------------- 57f3c1a Add WaitEvent to the API fc484c7 OpenDev Migration Patch 890fd13 Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ovsdbapp/backend/ovs_idl/event.py | 4 ++++ ovsdbapp/event.py | 20 ++++++++++++++++++ .../schema/ovn_southbound/test_impl_idl.py | 24 +++++++--------------- .../run.yaml | 12 +++++------ zuul.d/legacy-ovsdbapp-jobs.yaml | 2 +- 6 files changed, 39 insertions(+), 25 deletions(-)

1 0

python-novaclient 13.0.1 (stein)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are stoked to announce the release of: python-novaclient 13.0.1: Client library for OpenStack Compute API This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. Changes in python-novaclient 13.0.0..13.0.1 ------------------------------------------- ef842ca0 Set the lower limit of api_version for volume_type a787f270 OpenDev Migration Patch 60bf9a23 Add test for console-log and docs for bug 1746534 2ca1814a Revert "Fix crashing console-log" 70ed7918 Replace openstack.org git:// URLs with https:// bb72726a Update UPPER_CONSTRAINTS_FILE for stable/stein 3a348d58 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 2 +- novaclient/v2/shell.py | 8 ++--- .../legacy/novaclient-dsvm-functional/run.yaml | 6 ++-- tox.ini | 8 ++--- 7 files changed, 73 insertions(+), 15 deletions(-)

1 0

python-tempestconf 2.2.1
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are chuffed to announce the release of: python-tempestconf 2.2.1: python-tempestconf will automatically generates the tempest configuration based on your cloud. The source is available from: https://opendev.org/openstack/python-tempestconf Download the package from: https://pypi.org/project/python-tempestconf For more details, please see below. 2.2.1 ^^^^^ Deprecation Notes * The *api_extensions* config option in the *compute-feature- enabled* group has been deprecated since Tempest 14.0. Therefore the option will be no longer set by python-tempestconf. Changes in python-tempestconf 2.2.0..2.2.1 ------------------------------------------ aa20435 Deprecate api_extensions of compute service 9d67bf7 Fix checking for volume backup 3abb0ae Clear the difference between service type and name e8f5ec6 Edit doc regarding override values 7831742 Update default cirros image to 0.4.0 21fa0d7 Fix checking of roles 1d51de5 Add a job for tempest plugins a7172e6 Remove heat_stack_owner role assigning to user Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 +++++++++ config_tempest/constants.py | 4 +- config_tempest/main.py | 4 +- config_tempest/services/base.py | 21 +++--- config_tempest/services/compute.py | 10 +-- config_tempest/services/identity.py | 6 +- config_tempest/services/image.py | 6 +- config_tempest/services/services.py | 36 ++++++---- config_tempest/services/share.py | 2 +- config_tempest/services/volume.py | 15 ++-- config_tempest/users.py | 51 ++++++++------ playbooks/python-tempestconf-tempest-devstack.yaml | 16 +++++ ...re-enabled-api_extensions-df602e3835a47816.yaml | 6 ++ roles/install-plugins/README.rst | 19 ++++++ roles/install-plugins/defaults/main.yaml | 1 + roles/install-plugins/tasks/main.yaml | 16 +++++ 29 files changed, 277 insertions(+), 112 deletions(-)

1 0

python-openstackclient 3.19.0 (train)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are gleeful to announce the release of: python-openstackclient 3.19.0: OpenStack Command-line Client This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 3.19.0 ^^^^^^ New Features ************ * Add "--changes-before" option to the "server list" command. This requires Compute API version '2.66' or later. [:lpbug: *1827844*] * Add "security_group" as a valid "--type" value for the "network rbac create" and "network rbac list" commands. * Add "--description" option to "server create", "server rebuild", "server set" and "server unset" commands. [Bug 2002005 (https://storyboard.openstack.org/#!/story/2002005) Deprecation Notes ***************** * The "--live" option on the "openstack server migrate" command has been deprecated and is being replaced with two new options: * "--live-migration": This will signal that the migration is a live migration. * "--host": This can be used to request a target host for the live migration but requires "--os-compute-api-version" 2.30 or greater so the requested host can be validated by the scheduler. The "--live" option is problematic in that it requires a host and prior to compute API version 2.30, specifying a host during live migration will bypass validation by the scheduler which could result in failures to actually migrate the server to the specified host or over-subscribe the host. The "--live" and "--host" options are mutually exclusive. Furthermore, if both the "--live" and "--live-migration" options are used the "--live-migration" option takes priority. Bug Fixes ********* * Bug 1411190 has been fixed by providing a "--live-migration" and "-- host" option to the "openstack server migrate" command. (https://bugs.launchpad.net/python-openstackclient/+bug/1411190) * Fix RuntimeError in "project show" command running under Python 3. [Bug 1740232 (https://bugs.launchpad.net/python- openstackclient/+bug/1740232)] * Re-open stdout in binary mode before writing object data in "object save --file -" command. [Bug 1775482 (https://bugs.launchpad.net /python-openstackclient/+bug/1775482)] * Fix "endpoint group delete" command to properly delete endpoint groups. [Story 2005521 (https://storyboard.openstack.org/#!/story/2005521) * The "--limit" option of the "image list" command was previously ignored. [Bug 2004314 (https://storyboard.openstack.org/#!/story/2004314) Changes in python-openstackclient 3.18.0..3.19.0 ------------------------------------------------ ef1fd388 Add changes-before attribute to server list 30579897 Deprecate openstack server migrate --host option 6f1f44d4 Batch up minor cleanups for release 99c3be93 Serialize more aggregate functional tests c77a9621 Compute: Add description support for server 1b2595a9 Remove code migrated to osc-lib long ago bb659cf4 Aggregate functional test tweak f1791179 Update sphinx requirement. 4b91cd49 Stop leaving temp files after unit test runs 6385d642 Blacklist Bandit 1.6.0 due to directory exclusion bug 04e03b2a Fix bug in endpoint group deletion e6bbc995 document the --timing option 8c1ec6f9 Fix link to new opendev repo 42cd4b2e Document that server dump create requires 2.17 a8309a2a Dropping the py35 testing 0f56b7d0 Followup opendev cleanup and test jobs b3da2a67 OpenDev Migration Patch 8ce203f8 Fix docs bug link to go to storyboard rather than launchpad 4f3cda73 Tweak network segment range fiunction tests 415b4805 Before writing object data to stdout, re-open it in binary mode 589026cd Volume backup functional test tweak c53de321 Ignore case in security group rule --ethertype c684fd92 Update master for stable/stein 510e9a7b Fix: incorrect check when no shared/private input 77413470 Fix service discovery in functional tests 28c06d06 Fix: set invalid None project_id on range creation be7a7581 Add 'security_group' type support to network rbac commands aaf73cbf Fix --limit option in image list sub-command b18e79c0 Delete the LB object quotas set command in openstackclient 71f138b1 Fix RuntimeError when showing project which has extra properties Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 19 +- README.rst | 2 +- openstackclient/api/object_store_v1.py | 5 +- openstackclient/api/utils.py | 84 ---- openstackclient/common/clientmanager.py | 7 - openstackclient/common/commandmanager.py | 59 --- openstackclient/common/quota.py | 3 - openstackclient/compute/v2/aggregate.py | 2 + openstackclient/compute/v2/server.py | 164 ++++++- openstackclient/identity/v2_0/project.py | 2 +- openstackclient/identity/v3/endpoint_group.py | 6 +- openstackclient/image/v1/image.py | 2 +- openstackclient/image/v2/image.py | 7 +- openstackclient/network/v2/network_rbac.py | 13 +- .../network/v2/network_segment_range.py | 6 +- openstackclient/network/v2/security_group_rule.py | 9 + openstackclient/network/v2/subnet.py | 19 +- openstackclient/shell.py | 2 +- .../functional/network/v2/test_floating_ip.py | 2 +- .../network/v2/test_network_segment_range.py | 26 +- .../functional/network/v2/test_subnet_pool.py | 4 +- .../unit/network/v2/test_network_segment_range.py | 89 +++- .../network/v2/test_security_group_rule_network.py | 24 + ...11190-live-migration-host-655ae6befa6a3de2.yaml | 27 ++ .../notes/bug-1633582-df2bee534c2da7fc.yaml | 4 +- .../notes/bug-1740232-91ad72c2ac165f35.yaml | 5 + .../notes/bug-1775482-7ed2a9a8765b313e.yaml | 6 + .../notes/bug-1827844-8f1de120087c6a22.yaml | 6 + .../notes/bug-2005521-0274fc26bd9b3842.yaml | 5 + releasenotes/notes/bug-27882-402ced7ffe930058.yaml | 5 + .../rbac-add-security-group-35370701a06ac906.yaml | 5 + .../notes/server-description-ae9618fc09544cac.yaml | 6 + releasenotes/source/conf.py | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/pre_20_releases.rst | 2 +- releasenotes/source/stein.rst | 6 + setup.cfg | 1 - test-requirements.txt | 2 +- tox.ini | 10 +- 69 files changed, 1727 insertions(+), 627 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8ec69331..4cb66cfd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ osprofiler>=1.4.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0

1 0

puppet-placement 2.0.0 (train)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are chuffed to announce the release of: puppet-placement 2.0.0: Puppet module for OpenStack placement This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 1.2.0..2.0.0 ---------------------------------------- 876265f Bump version for the start of Train Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

puppet-monasca 4.0.0 (train)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are pumped to announce the release of: puppet-monasca 4.0.0 This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-monasca Download the package from: https://tarballs.openstack.org/puppet-monasca/ Please report issues through: https://bugs.launchpad.net/puppet-monasca/+bugs For more details, please see below. Changes in puppet-monasca 3.4.0..4.0.0 -------------------------------------- 7cc3105 Bump version for the start of Train ff25372 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ 3 files changed, 11 insertions(+), 4 deletions(-)

1 0

openstacksdk 0.31.1 (train)
by no-reply＠openstack.org 13 Jun '19

13 Jun '19

We are jazzed to announce the release of: openstacksdk 0.31.1: An SDK for building applications to work with OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.31.1 ^^^^^^ Bug Fixes * Updated the Rackspace vendor entry to use *"False"* for the value of *xenapi_use_agent* instead of *false*, because that's what the remote side expects. The recent update to use the Resource layer exposed the incorrect setting causing image uploads to Rackspace to fail. Changes in openstacksdk 0.31.0..0.31.1 -------------------------------------- fdf43169 Set xenapi_use_agent to "False" instead of false 402c9f73 Add access alias (aka) for the resource attributes de03f4f5 Use Resource layer for compute AZ and Aggregates Diffstat (except docs and test files) ------------------------------------- openstack/cloud/_compute.py | 91 +++---------- openstack/cloud/_image.py | 2 +- openstack/compute/v2/_proxy.py | 18 +-- openstack/compute/v2/aggregate.py | 1 + openstack/compute/v2/availability_zone.py | 3 +- openstack/config/vendors/rackspace.json | 2 +- openstack/resource.py | 142 +++++++++++++-------- .../unit/compute/v2/test_availability_zone.py | 6 - .../notes/xenapi-use-agent-ecc33e520da81ffa.yaml | 7 + 14 files changed, 332 insertions(+), 196 deletions(-)

1 0

os-brick 2.9.0 (train)
by no-reply＠openstack.org 12 Jun '19

12 Jun '19

We are overjoyed to announce the release of: os-brick 2.9.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. Changes in os-brick 2.8.1..2.9.0 -------------------------------- 5dc5a55 Provide setting to ignore lvm descriptor leak warnings 80e37a3 Ignore pep8 W503/W504 255b5c8 Replace git.openstack.org URLs with opendev.org URLs 2b36eaf OpenDev Migration Patch d71c267 Fix invalid escape sequence warnings 614b2cb Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 6 ++-- os_brick/initiator/connectors/iscsi.py | 2 +- os_brick/local_dev/lvm.py | 23 +++++++----- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++ tox.ini | 14 ++++++-- 9 files changed, 76 insertions(+), 37 deletions(-)

1 0

tooz 1.65.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are chuffed to announce the release of: tooz 1.65.0: Coordination library for distributed systems. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 1.64.2..1.65.0 ------------------------------ ef5277d Move test deps to test-requirements.txt 8793340 Remove unused requirements. 89b61cd Update Sphinx requirement and uncap grpcio 42672e3 Referencing testenv deps now works d2dec45 Update master for stable/stein 96633f3 Replace git.openstack.org URLs with opendev.org URLs d47b1a7 Remove py35, add py37 classifiers 8207427 Unblock tooz gate c02f9dd OpenDev Migration Patch de3a5f8 add python 3.7 unit test job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 110 ++++++++++++++------------ README.rst | 2 +- playbooks/stop-redis.yaml | 12 +++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 2 +- setup.cfg | 17 +--- test-requirements.txt | 12 +++ tox.ini | 40 ++-------- 16 files changed, 118 insertions(+), 117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b2aee6d..9dab502 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ oslo.serialization>=1.10.0 # Apache-2.0 -grpcio>=1.0.0,<1.16.0 +grpcio>=1.18.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..77d9ee3 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,12 @@ + +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +mock>=2.0 # BSD +python-subunit>=0.0.18 # Apache-2.0/BSD +testtools>=1.4.0 # MIT +coverage>=3.6 # Apache-2.0 +fixtures>=3.0.0 # Apache-2.0/BSD +pifpaf>=0.10.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 +stestr>=2.0.0

1 0

octavia-lib 1.2.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are stoked to announce the release of: octavia-lib 1.2.0: A library to support Octavia provider drivers. This release is part of the train release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 1.2.0 ^^^^^ New Features * Add the ability to pass multiple VIP objects to providers. This allows for multiple subnets/IPs on a single LB. Changes in octavia-lib 1.1.1..1.2.0 ----------------------------------- 7c9cb9d Add 'additional_vips' field to driver datamodel 625f171 Replace git.openstack.org URLs with opendev.org URLs 5376e03 Add project_id to all of the data model objects 3fc6659 Cap sphinx for py2 to match global requirements effa28a Add python 3.7 testing 94aef0a OpenDev Migration Patch 1215103 Remove python3.5 jobs for Train e631497 Remove testtools from test-requirements.txt c9ae679 Do not install README.rst and LICENSE d6def9c Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 ++++ .gitreview | 2 +- README.rst | 2 +- octavia_lib/api/drivers/data_models.py | 23 +++++++++++++++------- ...dd-additional-vip-support-becdb29c5187b514.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 6 +----- test-requirements.txt | 1 - tox.ini | 6 +++--- zuul.d/projects.yaml | 2 +- 15 files changed, 60 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f0ad8f1..56a501c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +15,0 @@ stestr>=2.0.0 # Apache-2.0 -testtools>=2.2.0 # MIT

1 0

openstacksdk 0.31.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We joyfully announce the release of: openstacksdk 0.31.0: An SDK for building applications to work with OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.31.0 ^^^^^^ New Features ************ * "has_{service_type}" is a boolean config option that allows asserting that a given service does not exist or should not be used in a given cloud. Doing this will now cause the corresponding service "Proxy" object to not be created and in its place is an object that will throw exceptions if used. * "{service_type}_disabled_reason" is a new string config option that can be set to indicate a reason why a service has been disabled. This string will be used in exceptions or log warnings emitted. Bug Fixes ********* * The baremetal calls "wait_for_nodes_provision_state", "wait_for_allocation" and the baremetal introspection call "wait_for_introspection" now raise "ResourceFailure" on reaching an error state instead of a generic "SDKException". Changes in openstacksdk 0.30.0..0.31.0 -------------------------------------- f4fa6fab baremetal: raise more specific ResourceFailure in wait_for_* methods f7860861 Pin to latest os-service-types 3bac4abb Add release note for new disable service functionality 879f7d4f Minor fixups from from_conf changes 82079022 Handle oslo.config exceptions in from_conf 38847204 Support skipping unknown QP Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 2 +- openstack/baremetal/v1/_proxy.py | 6 +++ openstack/baremetal/v1/allocation.py | 5 +- openstack/baremetal/v1/node.py | 15 ++++-- openstack/baremetal_introspection/v1/_proxy.py | 3 ++ .../baremetal_introspection/v1/introspection.py | 5 +- openstack/cloud/openstackcloud.py | 2 +- openstack/config/cloud_region.py | 63 +++++++++++++++++++--- openstack/connection.py | 1 + openstack/exceptions.py | 4 ++ openstack/resource.py | 50 +++++++++++------ openstack/service_description.py | 17 ++++++ .../unit/baremetal_introspection/v1/test_proxy.py | 2 +- .../notes/baremetal-wait-e4571cdb150b188a.yaml | 7 +++ .../notes/disable-service-39df96ef8a817785.yaml | 12 +++++ requirements.txt | 2 +- 22 files changed, 280 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9062efb8..42da24b3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ six>=1.10.0 # MIT -os-service-types>=1.2.0 # Apache-2.0 +os-service-types>=1.7.0 # Apache-2.0

1 0

sushy 1.9.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are amped to announce the release of: sushy 1.9.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the train release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 1.9.0 ^^^^^ New Features ************ * "Bios" resource introduces "update_status" property that exposes the status and any errors of last BIOS attribute update. * Adds the "IndicatorLED" property to the "Drive" resource. The state of the LED can be read and can be changed via the ".set_indicator_led()" method of the "Drive" sushy class. * Adds support for the Fabric resource to the library. * Adds the Power resource to the Library. * Adds mappings and constants for possible values of System Type in System resource. This represents the type of the computer system. * Adds the Thermal resource to the Library. * Adds "CapacityBites", "Manufacturer", "Model", "PartNumber", "SerialNumber" and "Status" properties to the "Drive" resource. * The "IndicatorLED" property of "System" and "Chassis" resources made settable with the introduction of the ".set_indicator_led()" method to the respective sushy classes. * Update sushy models to support the Redfish SettingsApplyTime and OperationApplyTimeSupport annotations. Deprecation Notes ***************** * Deprecates system-specific indicator LEDs as redundant. The "SYSTEM_INDICATOR_LED_LIT", "SYSTEM_INDICATOR_LED_BLINKING", "SYSTEM_INDICATOR_LED_OFF" and "SYSTEM_INDICATOR_LED_UNKNOWN" constants should not be used. Generic indicator LED constants should be used instead. Those are "INDICATOR_LED_LIT", "INDICATOR_LED_BLINKING", "INDICATOR_LED_OFF" and "INDICATOR_LED_UNKNOWN" respectively. * The "operation_apply_time_support" and "maintenance_window" properties in the "SettingsField" class are deprecated. The "SettingsField" class represents the "@Redfish.Settings" annotation and those properties cannot appear within this annotation. Instead use the "apply_time_settings" property in the target resource (e.g. "Bios" resource). Other Notes *********** * Includes Redfish standard message registry files that are licensed under Creative Commons Attribution 4.0 License: https://creativecommons.org/licenses/by/4.0/ Changes in sushy 1.8.0..1.9.0 ----------------------------- 6f4539d Use collections.abc instead of collections when available 51032b6 Add @Redfish.Settings update status and expose it for BIOS 74e37a7 Update sphinx requirements 6cb68f8 Cleanup for Standard message registry loading 188a72c Add Power and Thermal resources to Chassis 103737a update git.openstack.org to opendev 3630088 OpenDev Migration Patch f2cf60f Deprecate System-specific `IndicatorLED` state constants fa09bbc Dropping the py35 testing 2f08e09 Update model to support ApplyTime annotations ad15a88 Adding Power resource schema 324f564 Expand Drive schema 87dcc7a Adding Thermal resource schema 4ad580b Add settable `IndicatorLED` property to the `Drive` resource c8a6354 Add settable `IndicatorLED` of `System` and `Chassis` d35a30f Add versions to release notes series e348ac8 Add mappings for `system_type` 680d023 Add `FabricCollection` and `Fabric` classes 5b5794d Change sushy devstack job to python3 fc311f9 Fix wrong default JsonDataReader() argument fa8ce98 Add public resource loading and message parsing 7993f04 Add support for loading packaged standard registries 798458d Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 5 +- .../add-bios-update-status-cc59816c374b78e4.yaml | 5 + .../notes/add-drive-led-97b687013fec88c9.yaml | 6 + .../notes/add-fabric-support-1520f7fcb0e12539.yaml | 5 + .../notes/add-power-resource-e141ddf298673305.yaml | 4 + .../add-system-type-mapping-bf456c5c15a90877.yaml | 5 + .../add-thermal-resource-5c965a3c940f9028.yaml | 4 + .../deprecate-system-leds-f1a72422c53d281e.yaml | 9 + .../expand-drive-schema-042901f919be646c.yaml | 5 + .../notes/make-leds-settable-c82cb513de0171f5.yaml | 6 + ...standard-registry-license-0ded489afd6cfad1.yaml | 6 + ...update-apply-time-support-53c5445b58cd3b42.yaml | 13 + releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 +- releasenotes/source/queens.rst | 6 +- releasenotes/source/rocky.rst | 6 +- releasenotes/source/stein.rst | 6 + setup.cfg | 2 +- sushy/__init__.py | 1 + sushy/main.py | 87 +++- sushy/resources/base.py | 47 +- sushy/resources/chassis/chassis.py | 50 ++ sushy/resources/chassis/power/__init__.py | 0 sushy/resources/chassis/power/constants.py | 69 +++ sushy/resources/chassis/power/mappings.py | 40 ++ sushy/resources/chassis/power/power.py | 122 +++++ sushy/resources/chassis/thermal/__init__.py | 0 sushy/resources/chassis/thermal/constants.py | 18 + sushy/resources/chassis/thermal/mappings.py | 18 + sushy/resources/chassis/thermal/thermal.py | 138 ++++++ sushy/resources/common.py | 40 +- sushy/resources/fabric/__init__.py | 0 sushy/resources/fabric/constants.py | 42 ++ sushy/resources/fabric/fabric.py | 77 +++ sushy/resources/fabric/mappings.py | 47 ++ sushy/resources/mappings.py | 2 + sushy/resources/registry/message_registry.py | 26 + sushy/resources/registry/message_registry_file.py | 38 ++ sushy/resources/settings.py | 124 ++++- sushy/resources/system/bios.py | 27 + sushy/resources/system/constants.py | 35 +- sushy/resources/system/mappings.py | 12 + sushy/resources/system/storage/drive.py | 46 +- sushy/resources/system/storage/volume.py | 5 + sushy/resources/system/system.py | 39 +- sushy/standard_registries/Base.1.0.0.json | 466 ++++++++++++++++++ sushy/standard_registries/Base.1.2.0.json | 517 ++++++++++++++++++++ sushy/standard_registries/Base.1.3.0.json | 535 ++++++++++++++++++++ sushy/standard_registries/Base.1.3.1.json | 535 ++++++++++++++++++++ sushy/standard_registries/Base.1.4.0.json | 542 +++++++++++++++++++++ .../resources/registry/test_message_registry.py | 42 ++ .../registry/test_message_registry_file.py | 68 +++ .../unit/resources/system/storage/test_drive.py | 24 + .../unit/resources/system/storage/test_volume.py | 14 +- sushy/utils.py | 14 +- test-requirements.txt | 3 +- tox.ini | 2 +- zuul.d/project.yaml | 3 +- zuul.d/sushy-jobs.yaml | 8 + 81 files changed, 4781 insertions(+), 123 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1d8472a..6f8ebee 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

renderspec 1.11.1
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are gleeful to announce the release of: renderspec 1.11.1: Jinja2 template renderer for generating .spec files The source is available from: https://opendev.org/openstack/renderspec Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.11.0..1.11.1 ------------------------------------ 10dba17 Fix _pymod2pkg_translate when skip_pyversion is None Diffstat (except docs and test files) ------------------------------------- renderspec/contextfuncs.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)

1 0

puppet-tripleo 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are amped to announce the release of: puppet-tripleo 11.0.0: Puppet module for OpenStack TripleO This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * Adds ovn_db_host and ovn_nb_port to configure ovn nb connection string for OVN Provider driver. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation * Remove ntp profile and puppet-ntp usage. Deprecation Notes ***************** * The Neutron LBaaS project was retired and support for it in TripleO removed. Bug Fixes ********* * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html Changes in puppet-tripleo 10.4.0..11.0.0 ---------------------------------------- 99b386e3 Bump metadata for Train Milestone 1 f95c6d1b Remove Neutron LBaaS 16c5f169 Make sure we pass the proper new pcs 0.10 variables 44afda83 Allow external Ganesha for the cephfs manila backend dabfc9e1 Add support for external Ganesha service in Manila Share profile 3ef8e3e3 Rebuild initramfs after applying change in kernel parameters c6858e7a Fix amphora provider driver description e76519d2 Fix tripleo::haproxy::stats to be more correct and flexible a869d20b Retiring TripleO-UI 6c2e164a Fix horizon firewall rules in composable roles 8ff689bc Make sure to set umask 022 for nova_migration_target logins 1d3ef8bc Write TLS config under section [client] in tripleo.cnf 1ae89eb0 Include 'octavia' driver on ML2/OVN deployments 578da586 Add nova::cinder to nova compute 710c6173 Remove deprecated admin ssl options e4039299 Remove NovaConsoleauth Service a87f8be7 Let fluentd not create /etc/rsyslog.d/fluentd.conf file 54602918 Update version in metadata.json ce0cffe0 Remove ntp 10216c78 Expose innodb_lock_wait_timeout via hieradata. ccbaeac7 Switch metrics qdrs to edge mode ffdc816e Safeguard against 'Undef' length() checks. afebff58 redis HA: allow SELinux relabel for /var/run/redis 977cf8f5 Remove unused docker_distribution template 5cbead72 Fix puppet unit ci config bacfec86 Implement stonith levels and enable kdump agent. 9de8c4eb Fixup tests for puppet 6 f1ae850e Remove ODL tests fee08693 Remove puppet selinux management 953b4c36 nova: Remove profile::base::nova::placement 42642c45 OpenDev Migration Patch f5d6110a Fix keepalived VIP monitoring script d1bbad06 Bump metadata for release 523fe8ad Fix missing version requirements f2cf8379 Update master for stable/stein d88db3ad Add support to set ovs_nb_connection 2a1167dd Set octavia provider_drivers config option correctly f5a7ca6f Correct how podman exec is called for the neutron-keepalived-state-change 3af5c2f2 placement: Initial extraction of the Placement service from Nova a07db290 Use validate_legacy Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 9 +- manifests/cluster/cassandra.pp | 2 +- manifests/cluster/zookeeper.pp | 2 +- manifests/fencing.pp | 92 +++++--- manifests/firewall/rule.pp | 4 +- manifests/haproxy.pp | 55 +++-- manifests/haproxy/horizon_endpoint.pp | 27 +++ manifests/haproxy/stats.pp | 19 +- manifests/host/liquidio/config.pp | 4 +- manifests/keepalived.pp | 2 +- manifests/network/contrail/config.pp | 7 +- manifests/network/contrail/neutron_plugin.pp | 2 +- manifests/profile/base/aide/rules.pp | 2 +- manifests/profile/base/database/mysql.pp | 15 +- manifests/profile/base/database/mysql/client.pp | 8 +- manifests/profile/base/database/mysql/user.pp | 2 +- manifests/profile/base/etcd.pp | 2 +- manifests/profile/base/kernel.pp | 8 + manifests/profile/base/keystone.pp | 16 +- manifests/profile/base/logging/fluentd.pp | 25 ++- manifests/profile/base/manila/share.pp | 29 ++- manifests/profile/base/metrics/qdr.pp | 11 +- manifests/profile/base/neutron/agents/lbaas.pp | 41 ---- manifests/profile/base/neutron/lbaas.pp | 35 --- manifests/profile/base/neutron/opendaylight.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/consoleauth.pp | 33 --- manifests/profile/base/nova/migration/target.pp | 17 +- manifests/profile/base/octavia/api.pp | 16 +- manifests/profile/base/pacemaker.pp | 20 +- manifests/profile/base/pacemaker_remote.pp | 18 ++ manifests/profile/base/placement.pp | 46 ++++ .../base/{nova/placement.pp => placement/api.pp} | 33 ++- manifests/profile/base/placement/authtoken.pp | 44 ++++ manifests/profile/base/securetty.pp | 3 +- manifests/profile/base/snmp.pp | 2 +- manifests/profile/base/swift/ringbuilder.pp | 2 +- manifests/profile/base/time/ntp.pp | 35 --- .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +- manifests/profile/pacemaker/neutron/lbaas.pp | 44 ---- manifests/selinux.pp | 74 ------- manifests/ui.pp | 238 --------------------- metadata.json | 8 +- ...octavia-ovn-nb-connection-9d5bc428c4ff35af.yaml | 5 + ...a_remove_nova-consoleauth-c126434b3dbda106.yaml | 15 ++ .../remove-neutron-lbaas-f6337e030a200b64.yaml | 12 ++ .../notes/remove-ntp-34d5eb69bfc231b0.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + spec/classes/tripleo_haproxy_spec.rb | 7 +- spec/classes/tripleo_keepalive_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 20 +- .../tripleo_profile_base_logging_fluentd_spec.rb | 9 +- ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 198 ----------------- .../tripleo_profile_base_nova_consoleauth_spec.rb | 62 ------ spec/classes/tripleo_profile_base_nova_spec.rb | 3 - .../tripleo_profile_base_octavia_api_spec.rb | 13 +- ...c.rb => tripleo_profile_base_placement_spec.rb} | 54 ++--- spec/classes/tripleo_profile_base_time_ntp_spec.rb | 39 ---- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- spec/classes/tripleo_selinux_spec.rb | 73 ------- spec/classes/tripleo_ui_spec.rb | 133 ------------ spec/defines/tripleo_haproxy_endpoint_spec.rb | 14 +- spec/fixtures/hieradata/default.yaml | 28 ++- .../docker_distribution/registry_config.yml.erb | 11 - .../neutron/neutron-keepalived-state-change.epp | 9 +- zuul.d/layout.yaml | 6 +- 69 files changed, 551 insertions(+), 1259 deletions(-)

1 0

tripleo-common 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are glad to announce the release of: tripleo-common 11.0.0: A common library for TripleO workflows. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * If the *AdditionalArchitectures* parameter has entries then the container image prepare will prepare images for all architectures instead of just the default one. A new boolean field *multi_arch* can also be set in *ContainerImagePrepare* entries to determine the multi arch behaviour for images in that entry. If any entry sets a *multi_arch* value then *AdditionalArchitectures* is ignored. * tripleo-container-rm is the new role that replaces tripleo-docker- rm which is in charge of tearing down containers running in Docker or Podman. If the container_cli is Podman, the role takes care of systemd cleanup for both the container and its healthcheck if it does exist. Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html * Fixed an issue were amphora load balancers would fail to create. The problem was because Octavia certificate files were being created in a wrong path and with invalid content. * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. Changes in tripleo-common 10.7.0..11.0.0 ---------------------------------------- 7c89493e Add the ability to compute osds number counting lvm devices f15e6ac3 Overcloud-full image templates for RHEL8 b4d13dc8 Add deployed-server bootstrap tasks to tripleo-bootstrap ba3891b3 Add tripleo-hieradata role 6b722063 Template each deployment file e7c5eab7 [CVE-2019-3895] Set image owner id 4de9f78b Fix Octavia certificate file path and content f3a93bff Fix validations_inputs temporary file name 294f67bd fix 404 when requesting empty tripleo container image catalog feb49b8c Handle failed neutron-plugin-ml2.yaml lookup 37fc8e31 Stop sending execution object via Zaqar message c13c9cf5 Enable staging-ovirt (fence_rhevm) fencing agent. 063e4934 Remove NovaConsoleauth Service 5a7081ea Remove duplications of tasks in scale workbook 030ad3e2 workbooks/deployment: add support to choose playbook name 68334a00 workbooks/deployment: add support to filter nodes when running Ansible 5dcad572 Make get_enabled_services() more robust 35cfa6d3 Use a typemap file instead of symlinks for tags 08ae3286 Define the interface for multi arch image prepare 88524377 Add serial option in the inventory 228fadca Add task to read remote pub key 136d8c75 Fix privileges in task fro tripleo-admin a14bfd9f [Trivial fix]Remove unnecessary slash 13775b8e Introduce tripleo-container-rm 508324b1 Run ansible before scale down 2e54cff0 Use oslo_rootwrap subprocess module in order to gain proper eventlet awareness 878a7727 bootstrap: install network-scripts if EL8 cf86a8d6 tripleo-bootstrap: only enable network, not starting. d0831dc4 Fix chown command in write_inputs_file function 2d52d467 tripleo-bootstrap: ensure network service is enabled & started 4f5a2750 Add new healthchecks for zaqar services 4c3d5182 Fixup octavia-api healthcheck f292c839 Remove images that are not in use anymore 2ee6de2b nova: Remove nova-placement images and healthchecks 2f4e72b8 OpenDev Migration Patch e39577bc Update master for stable/stein b7618c7c Add missing ws seperator between words e368e152 docker-rm: check if rpm dependency is actually installed ab490622 Use 'DEFAULT_VALIDATIONS_BASEDIR' variable from constants.py 05a1f1fa Update default Ceph container image to use to the Nautilus version 9314396e Adds redfish support to 'overcloud generate fencing'. 26967343 Check for file existance in file modification check Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../container_image_prepare_defaults.yaml | 2 +- container-images/overcloud_containers.yaml | 8 +- container-images/overcloud_containers.yaml.j2 | 24 ----- .../tripleo_kolla_template_overrides.j2 | 16 +-- healthcheck/common.sh | 5 + healthcheck/nova-consoleauth | 14 --- healthcheck/octavia-api | 12 +-- healthcheck/{nova-placement => zaqar-api} | 2 +- healthcheck/zaqar-socket | 15 +++ image-yaml/overcloud-images-python3.yaml | 8 +- image-yaml/overcloud-images-rhel8.yaml | 19 ++++ lower-constraints.txt | 1 + playbooks/octavia-files.yaml | 1 + .../tasks/certificate.yml | 8 +- .../octavia-controller-config/tasks/octavia.yml | 12 +++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 45 +++++++-- .../notes/multi_arch_image-3c3730cbba95be19.yaml | 9 ++ ...a_remove_nova-consoleauth-95df6d63822ef787.yaml | 15 +++ ...ificates-path-and-content-e8acf1e859e75135.yaml | 6 ++ ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 ++ .../tripleo-container-rm-082aa93d2de1e8bc.yaml | 7 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 1 + roles/tripleo-bootstrap/defaults/main.yml | 4 + roles/tripleo-bootstrap/tasks/main.yml | 75 ++++++++++++++ roles/tripleo-container-rm/README.md | 34 +++++++ roles/tripleo-container-rm/defaults/main.yaml | 2 + roles/tripleo-container-rm/tasks/docker.yaml | 21 ++++ roles/tripleo-container-rm/tasks/main.yaml | 5 + roles/tripleo-container-rm/tasks/podman.yaml | 41 ++++++++ roles/tripleo-create-admin/tasks/create_user.yml | 10 +- roles/tripleo-docker-rm/README.md | 2 + roles/tripleo-docker-rm/tasks/main.yaml | 13 +-- roles/tripleo-hieradata/README.md | 35 +++++++ roles/tripleo-hieradata/defaults/main.yaml | 3 + roles/tripleo-hieradata/tasks/main.yaml | 27 +++++ roles/tripleo-hieradata/test-playbook.yaml | 9 ++ sudoers | 1 - tripleo_common/actions/ansible.py | 26 +++-- tripleo_common/actions/parameters.py | 28 +++++- tripleo_common/constants.py | 6 +- tripleo_common/image/image_export.py | 99 ++++++++++++++++-- tripleo_common/image/image_uploader.py | 24 ++++- tripleo_common/image/kolla_builder.py | 27 ++++- tripleo_common/inventory.py | 4 +- tripleo_common/templates/deployment.j2 | 2 - tripleo_common/templates/deployments.yaml | 48 +++++++-- .../ControllerHostEntryDeployment | 2 - .../data/overcloud-controller-0/MyExtraConfigPost | 2 - .../utils/data/overcloud-controller-0/MyPostConfig | 2 - .../data/overcloud-controller-0/NetworkDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-0/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-0/NetworkDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-1/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-1/NetworkDeployment | 2 - .../data/overcloud-novacompute-2/AnsibleDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-2/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-2/NetworkDeployment | 2 - tripleo_common/update.py | 29 +++--- tripleo_common/utils/validations.py | 7 +- workbooks/deployment.yaml | 17 +++- workbooks/derive_params_formulas.yaml | 8 +- workbooks/messaging.yaml | 4 +- workbooks/scale.yaml | 8 +- 74 files changed, 932 insertions(+), 230 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c304a4be..51b6b604 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.rootwrap>=5.8.0 # Apache-2.0

1 0

tripleo-validations 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We contentedly announce the release of: tripleo-validations 11.0.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 10.4.0..11.0.0 --------------------------------------------- 879818a Sync Sphinx requirement bf206aa Add option to fail if ceph-ansible is not installed f144be5 [Python3] Adds bytes to str conversion management 9c4d18b Fix invalid 'ignore_missing_file' attribute in a task bbe6696 Makes rogue_dhcp.py script Python3 aware d483ace Fix Jinja2's default filter usage 90a3576 Add serial option in tripleo-ansible-inventory script 8f7f0f5 New validation: ensure image-serve service is working as expected d376c40 Replace git.openstack.org URLs with opendev.org URLs 855e48c OpenDev Migration Patch 23de9d3 Fix Jinja2's default filter usage 4b94a5c Update master for stable/stein a678cbf Clean up some old roles dependencies. 177d299 Adds roles support in the script generating the validations doc. ee28ae4 Add collect-flavors-and-verify-profiles role 82ccd69 Migrate ansible-lint to pre-commit 6972ddd Add Podman support to rabbitmq-limits validation 7c76022 Add Podman support to mysql-open-files-limit validation ff7d255 Improve the network_gateway check on the provisioning network e195488 Fix minor typo in validations/check-ftype.yaml 3b9aca8 Retire the undercloud-selinux-mode validation Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 23 ++++++++++++++ .gitreview | 2 +- .pre-commit-config.yaml | 29 ++++++++++++++++++ README.rst | 4 +-- lookup_plugins/tht.py | 5 ++++ playbooks/ceph-ansible-installed.yaml | 1 + playbooks/collect-flavors-and-verify-profiles.yaml | 13 ++++++++ playbooks/image-serve.yaml | 13 ++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++ roles/ceph/defaults/main.yml | 2 ++ roles/ceph/tasks/ceph-ansible-installed.yaml | 10 ++++++- roles/check-network-gateway/tasks/main.yml | 6 ++-- .../meta/main.yml | 27 +++++++++++++++++ .../tasks/main.yml | 11 +++++++ .../vars/main.yml | 9 ++++++ roles/ctlplane-ip-range/tasks/main.yml | 4 +-- roles/dhcp-validations/files/rogue_dhcp.py | 31 ++++++++++++------- .../dhcp-validations/tasks/dhcp-provisioning.yaml | 2 +- roles/image-serve/defaults/main.yaml | 3 ++ roles/image-serve/meta/main.yaml | 28 +++++++++++++++++ roles/image-serve/tasks/main.yaml | 22 ++++++++++++++ roles/image-serve/vars/main.yml | 7 +++++ roles/mysql-open-files-limit/tasks/main.yml | 4 +-- roles/neutron-sanity-check/tasks/main.yml | 2 +- roles/no-op-firewall-nova-driver/meta/main.yml | 3 +- roles/rabbitmq-limits/tasks/main.yml | 5 ++-- roles/undercloud-debug/tasks/main.yml | 2 +- roles/undercloud-heat-purge-deleted/meta/main.yml | 3 +- roles/undercloud-heat-purge-deleted/tasks/main.yml | 2 +- roles/undercloud-process-count/meta/main.yml | 3 +- roles/undercloud-process-count/tasks/main.yml | 2 +- roles/undercloud-tokenflush/meta/main.yml | 3 +- roles/undercloud-tokenflush/tasks/main.yml | 2 +- scripts/tripleo-ansible-inventory | 6 ++-- test-requirements.txt | 3 +- tools/ansible-lint.sh | 22 -------------- tools/validate-files.py | 6 +++- tox.ini | 7 ++--- validations/check-ftype.yaml | 2 +- validations/check-network-gateway.yaml | 11 ++++++- validations/mysql-open-files-limit.yaml | 10 ++++++- validations/rabbitmq-limits.yaml | 12 ++++++-- validations/undercloud-selinux-mode.yaml | 35 ---------------------- 47 files changed, 320 insertions(+), 115 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..25a16ff 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

os-net-config 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are pumped to announce the release of: os-net-config 11.0.0: OpenStack network configuration This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 10.4.0..11.0.0 --------------------------------------- 115c36b Unify ethtool options logic 2c13c0e Add support for ethtool options for sriov_pf ports afc7a8f Add missing unit-test for IbInterface ethtool opts 53d57da Publish documents 8465e5c Update docs testing 6d38af7 Replace git.openstack.org URLs with opendev.org URLs 22aeee1 Modify udev rule for VF representor rename a061232 Add upper constraints to tox 8634e3a Uncap jsonschema 19d05f3 OpenDev Migration Patch 58b742d Update master for stable/stein 98e561a Add ability to specify multiple search domains 36af6fd Update master for stable/stein 4dbff4f Change python3.5 job to python3.7 job on Stein+ Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- CONTRIBUTING.rst | 6 +- README.rst | 159 +++++++++++++++++---------------- os_net_config/impl_ifcfg.py | 12 +-- os_net_config/objects.py | 6 +- os_net_config/schema.yaml | 52 ++++++----- os_net_config/sriov_config.py | 46 ++++++++-- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 2 +- setup.cfg | 2 +- test-requirements.txt | 3 - tox.ini | 8 +- zuul.d/layout.yaml | 2 + 18 files changed, 284 insertions(+), 126 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 14c6a96..7253862 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ PyYAML>=3.10.0 # MIT -jsonschema>=2.0.0,<3.0.0 # MIT +jsonschema>=2.0.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 4d74591..2347322 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 @@ -15 +12,0 @@ mock>=2.0 # BSD -openstackdocstheme>=1.18.1 # Apache-2.0

1 0

tripleo-heat-templates 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are psyched to announce the release of: tripleo-heat-templates 11.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * Add GlanceImageCacheDir parameter to set base directory location that the Image Cache uses. Add GlanceImageCacheMaxSize parameter to set the upper limit on cache size, in bytes, after which the cache- pruner cleans up the image cache. Add GlanceImageCacheStallTime parameter to set the amount of time to let an image remain in the cache without being accessed. * Bluestore replaces Filestore as the default Ceph backend. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * *IronicConductorGroup* allows to define an Ironic Conductor Group so that the managed baremetal nodes may be later manually distributed by operators across multiple conductors. By default, *IronicConductorGroup* takes an empty value, which creates no conductor groups associated with the given Ironic Conductor service instance. Note: There is the default Ironic conductor group named "''", but it cannot be re-defined with *IronicConductorGroup* because of the empty value has been reserved for another purposes in t-h-t. * *IronicRpcTransport* controlls the remote procedure call transport between Ironic Conductor and API processes. For some case, like Edge DCN, this parameter may be set to 'json-rpc', when the used messaging broker should not be stretched over WAN. For such cases, this option also plays nicely alongside the Ironic Conductor Groups (https://docs.openstack.org/ironic/latest/admin/conductor- groups.html) feature. Defaults to an empty value, which leaves the corresponding service's default value intact. * A new service, NeutronAZConfig, is avaialable which can be used to configure Neutron for using avaialabiity zones. By default the service is mapped to None, but can be enabled by including *environments/neutron-az-config.yaml*. "NeutronDefaultAvailabilityZones", "NeutronDhcpAgentAvailabilityZone", "NeutronL3AgentAvailabilityZone", "NeutronDhcpAgentsPerNetwork", "NeutronNetworkSchedulerDriver", "NeutronRouterSchedulerDriver" and "NeutronDhcpLoadType" parameters can be used to configure various AZ configurations. By default, "Neutron*AvailabilityZone" takes the name of the heat stack/deployment plan, and "NeutronDefaultAvailabilityZones" takes an additional value 'nova'. For details, see Official Documentaion (https://docs.openstack.org/neutron/latest/admin/config-az.html) * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * Add role parameter NovaLibvirtNumPciePorts which sets *libvirt/num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. When using the 'q35' machine type, by default, it allows only a *single* PCIe device to be hotplugged. And Nova currently sets 'num_pcie_ports' to "0" (which means, it defaults to libvirt's "1"), which is not sufficient for hotplug use. Default for NovaLibvirtNumPciePorts is 16. * Added OVN-DPDK support * Introduced two new numeric parameters OvsRevalidatorCores and OvsHandlerCores to set values of n-revalidator-threads and n -handler-threads on openvswitch. * Composable service templates can now define scale_tasks. They are meant for scale down/up logic of services which need to be stopped/started during the scaling procedure. All happens within a single playbook and the down/up Ansible tags are required to differenciate them during the run. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation * Removed the OS::TripleO::Services::Ntp service and related ntp files as chrony is the new default. Deprecation Notes ***************** * OpenDaylight service is deprecated in Stein and will be disabled in future releases. * OS::TripleO::Services::SELinux has been deprecated. Management of selinux configuration is now handled via ansible during the deployment. * The following files are removed (environments/neutron-ml2-ovn-dvr- ha.yaml and environments/neutron-ml2-ovn-ha.yaml). The reason for this is that the maintained versions are kept under environment/services and to avoid confusion we remove the unmaintained ones. * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO * The Neutron LBaaS project was retired and support for it in TripleO removed. * The template *tuned-baremetal-puppet* has been deprecated. This template has been replaced by *tuned-baremetal-ansible* which provides for the same functionality and interfaces. Bug Fixes ********* * OpenDaylight inactivity probe for setting the OVSDB timeout now defaults to 180s. This helps fix scale issues for large number of computes nodes in OpenDaylight deployments. * Fixed launchpad bug 1831122 (https://bugs.launchpad.net/tripleo/+bug/1831122) with the NetApp Backend. * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html * With 405366fa32583e88c34417e5f46fa574ed8f4e98 the parameters RpcPort, RpcUserName, RpcPassword and RpcUseSSL got deprecated and nova::rabbitmq_port removed. As a result the healtcheck get called with null parameter and fail. We now get the global_config_settings from RabbitMQService and use oslo_messaging_rpc_port for the healthcheck. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 10.5.0..11.0.0 ------------------------------------------------ 0e11de618 Configure Neutron API for Nova Placement... 0f6dabc72 Add new role parameter NovaLibvirtNumPciePorts c0860d58a Do not assume the CNI config directory exists 67f8a42a8 Remove tripleo-ui references 14436f915 Remove Neutron LBaaS d6b08579a Set TenantNetPhysnetMtu to 0 to allow different MTUs 9be6c1c93 Use ansible for AllNodesDeployment 0cb21704e Drop dhcp_domain from ironic compute 715d9c2f2 Ensure ceph-ansible is installed 7cbcea8b5 Add support for Ironic Conductor Groups 1c4304aea Make node_ips generic in the Heat template efa301786 Move puppet/services/README and releasenotes 4101b35bc Move compute-instanceha, neutron-ovn-dvr-ha to deployments d799f4193 Move vpp, and veritas-hyperscale into deployment 3ae00015e Move masq-nets, swift-external, and validations to deployment 2e2750b72 Move auditd, ca-cert, certmonger to deployment 48ca0b4ac Move openvswitch into deployments 8e4f70322 Fix netapp deployment manifest 34e1c75e5 Remove unnecessary openldap-clients package from overcloud controllers 8e482688d Convert tuned puppet to ansible 05f4b253b Refactor ovn_dbs upgrade_tasks. 0e6769b4b Remove baremetal to containerized pacemaker upgrade_tasks. bf8cde549 Remove OpenStack packages right before upgrading the operating system b0519479c Add operating system upgrade preparation via Leapp 6d9560e17 Respect tags in upgrade tasks f8ca0d41a Reintroduce upgrade tasks for stopping pacemaker cluster 6454247dd Delete the stale and incorrect ovn environment files 7910cf3b4 Fix ssl.yaml generating GaneshaInternal in the endpoint map b4223ead2 Do not bind /run on host to nova_migration_target 30708633d Switch to use $NETWORK_uri for memcached f708ab7a8 krb-service-principals support service_net_map_replace c0fcf8674 Fix custom network.name_lower in krb-service-principals f7b8be6cc Fix manila-scheduler-container-puppet.yaml typo c450bae2b ceph-base: Update ceph-ansible default playbook 6f6032e81 novajoin: set project_name to service d8ebe0c50 neutron: force project_name for midonet & bigswitch d75aee60f cinder: set cinder::nova::project_name to service 9d5c972d9 Stop all services before upgrading node's OS. e97d4dcfd Initialize ip(6)tables "raw" table bbc18dd8d Handle openvswitch meta-package on undercloud upgrade. 1cd8347c2 mistral-event-engine: only import ::tripleo::profile::base::mistral a3f5d1282 Adapt sensu on refactor 504f8fc75 Re-add amphora flavor management settings 824dd9003 Use make_url to wrap IPv6 addresses in brackets. edfbeae91 Add domain and no-ntp options to ipaclient 45f5c283e Fix haproxy stats network binding acc4fb032 Add support for Ironic Rpc Transport override 68bfc2672 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 6858ef411 Add CephAnsibleEnvironmentVariables to nodes-uuid call 7ac8e67d8 Set force_config_drive only when OVNMetadata is disabled 114e5778f Remove the iptables rules set via service_config_settings 5e83eeda5 Override ovn::controller::hostname to use hiera:fqdn_canonical 016279b71 standalone/undercloud - post: use EndpointMap to fetch Keystone URL eafe39085 Try a timesync as part of first boot 885715855 Ensure openstack clients are installed 4559d3b74 Configure server_certs_key_passphrase for Octavia cf6fc40c6 Ironic Inspector - use make_url for db connection cb8d27105 Sync the ControllerStorageNfs role with the Controller role 8f8b750e4 Add cinder credentials to nova conf 6e150aeb0 Correct ceph configuration for scenario 10 environments e9c26b6d3 Consolidate RpcPort healthchecks 05f650d5d Fix IPA client when doing brownfield deployment of internal TLS 3c5ad2aab OVS Revalidator and handler threads 3778e6121 Configure nova_compute for vendordata bb95ce843 Remove HostEntryDeployment 3a1948390 Remove InstanceIdDeployment 32bf12e20 Fix NovaNfs role parameter precedence in conditions bbbca8d65 Modified the way fluentd configures rsyslog aeb91c34f Re-add undercloud-aodh.yaml 18bae394a Move neutron base, plugins to deployment cc95b17ed Ensure we aren't running some dry-run also for Pacemaker case ef6c23ef6 Fix haproxy firewall rules 967d42b54 placement: Add nova_api data extraction step during deployment 1f2a71e41 Add more settings for glance image cache 2471642f6 [ipaclient] Fix type of MakeHomeDir heat param c5fe51147 Use RpcPort for container healthchecks 20dbe3206 Remove NovaConsoleauth Service 0c19fa2b9 Fix the step_config input in the OvS-DPDK template c901a4137 Enable zaqar healthchecks b20ca116a Remove OVNTunnelEncapType bbd2d9448 Allow multiple same options in nova.conf 055d15f92 Gracefully handle empty config json data 485b3c964 Remove hardcoded RabbitMQService 940de74b8 Default CephAnsibleDisksConfig to bluestore f3df90f2c Set arp_notify to match ndisc_notify 6ce5b5e12 Revert "Switch off nova metadata api on the undercloud" 9755a1b2d Enable serial execution for ansible host a8ec69941 Clean up leftover mount point after docker stop. d2fae913d Copy keys for tripleo-admin user 4b113a7a1 Enable ndisc_notify sysctl setting to notify of MAC changes 9e14ae6c9 Set configure_delegated_roles a parameter d1b187a56 Scale-down tasks for nova-compute 738486f10 Revert "mistral: configure heartbeat parameters to avoid action timeout" 894481faf Enable Podman Service For Lacking Roles 3abededac Remove NTP 90562b6f5 Use timesync service 36148ff6a Propagate AdditionalArchitectures to container image prepare db89f2d9a Avoid issues with non-existing directories d9c83dbf9 Adjust deployed-server install package list for RHEL8 87549eb4c Remove ceph-ansible fetch directory as privileged user 28a675dea Switch off nova metadata api on the undercloud 4d4263f4f Set debug level of nova container_config_scripts only when enabled 372ca2248 Use oslo_messaging_rpc_port for nova rpc healthchecks 75361e66b ensure /var/run/redis is present upon reboot 1e33dfa8f Fix cinder-backup deployment templates 53657f618 Remove ceph-ansible fetch directory after it is saved 5906f45ff Change setype for non container /var/log/<service> directories 63c451869 nova: Remove the NovaPlacement service 08015d6f9 Run nova-manage as root to prevent wrong nova-manage.log permissions ae439aa39 MetricsQdr: Build sslProfiles without internal TLS dfc99bad0 Run nova_cell_v2_discover_hosts.py on every deploy run 5a4223c86 Ensure there is no redis on host 155074693 Override ceph_mon to v2 protocol 910765965 Create /var/log/placement on host for file logging e0d26441f Add ServiceNetMap to global_vars bfd3fea2e Add Keystone admin/public to enabled services list cd6a1b3d4 Drop puppet/services/metrics/collectd.yaml a82f3f0c7 Scale-down tasks for RHSM 5d66b9c1e Introduce scale_tasks 72d52593b nova_metadata firewall_rules missmatch 44d6d689e Adapt check-docker-health for podman 096816a23 Simplify and correct how we provide the undercloud.conf to mistral 9e4bb8b86 Activate health checks for cron containers e2159e552 fup: Keep NovaPlacement in the service registry for upgrades f62189850 fup: Add comment removed by I9e3287bcbe9d317f32bf6b468c6ee17f04b6fff9 afe583b39 heat: use oslo_messaging_rpc_port for nova rpc healthchecks 8e60f8361 Properly indent placement::firewall_rules 54c54d384 Add ANSIBLE_GATHER_TIMEOUT=60 to ceph-ansible run 3eb5ca307 Split upgrade_steps_playbook into different plays. ba14b75c8 Move pacemaker, pacemaker-remote into deployments 4a9f2ac05 Move Manila backends into deployment 3fc9ea118 OpenDev Migration Patch 555178160 placement: Introduce an extracted PlacementAPI service 1c241362f fix storage.yaml to write environments/storage/nova-nfs.yaml 455119d0b Update master for stable/stein e7dee7bd2 Remove puppet selinux management 908e6b981 Avoid concurrent nova cell_v2 discovery instances 0a5b248c9 Add OS::TripleO::NeutronAZConfig 7e73fac11 Evaluating ansible_check_mode as a boolean 8ff04029f Use oslo_messaging_rpc_port for nova rpc healthchecks 1295868dd Allow NovaNfs parameters to be role specific 9f6caf772 Fix service auth URL in Octavia 91c08c1e2 Add ability to specify dns search domains fca094570 Add DPDK support for OVN 492816a16 Clean metrics related environments 2a34ccb62 Add parameter to configure maxdelay in db purge/archive job 364a0eaab Add mkhomedir option to ipa-client-install Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- capabilities-map.yaml | 5 - ci/common/vbmc_setup.yaml | 5 + ci/environments/multinode-3nodes-registry.yaml | 4 +- ci/environments/multinode-3nodes.yaml | 7 +- ci/environments/multinode-containers.yaml | 4 +- .../nic-configs/compute-dvr.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../multiple-nics/nic-configs/compute-dvr.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + .../scenario000-multinode-containers.yaml | 6 +- .../scenario001-multinode-containers.yaml | 8 +- ci/environments/scenario001-standalone.yaml | 2 + .../scenario002-multinode-containers.yaml | 8 +- .../scenario003-multinode-containers.yaml | 8 +- .../scenario004-multinode-containers.yaml | 10 +- ci/environments/scenario004-standalone.yaml | 7 +- .../scenario006-multinode-containers.yaml | 4 +- ci/environments/scenario006-multinode.yaml | 6 +- .../scenario007-multinode-containers.yaml | 6 +- .../scenario008-multinode-containers.yaml | 6 +- ci/environments/scenario009-multinode.yaml | 2 +- .../scenario010-multinode-containers.yaml | 9 +- ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 8 +- ci/environments/scenario012-standalone.yaml | 4 +- common/container-puppet.py | 5 + common/deploy-steps-tasks.yaml | 54 +-- common/deploy-steps.j2 | 219 +++++++-- common/services/role.role.j2.yaml | 11 + .../nova_cell_v2_discover_hosts.py | 62 +++ .../nova_statedir_ownership.py | 9 +- ...er_host.py => nova_wait_for_compute_service.py} | 63 +-- .../nova_wait_for_placement_service.py | 29 +- deployed-server/deployed-server-bootstrap-rhel.sh | 4 +- deployed-server/deployed-server-roles-data.yaml | 15 +- deployed-server/deployed-server.yaml | 49 +- deployment/README.rst | 119 ++++- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 10 +- .../auditd/auditd-baremetal-puppet.yaml | 0 .../barbican/barbican-api-container-puppet.yaml | 51 +-- .../ceilometer-agent-compute-container-puppet.yaml | 14 +- ...ometer-agent-notification-container-puppet.yaml | 14 +- deployment/ceph-ansible/ceph-base.yaml | 26 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- .../certs/ca-certs-baremetal-puppet.yaml | 0 .../certs/certmonger-user-baremetal-puppet.yaml | 0 deployment/cinder/cinder-api-container-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 19 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 45 +- deployment/cinder/cinder-base.yaml | 9 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 10 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 -- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 5 + deployment/containers-common.yaml | 16 +- deployment/database/mysql-pacemaker-puppet.yaml | 52 +-- deployment/database/redis-container-puppet.yaml | 18 +- deployment/database/redis-pacemaker-puppet.yaml | 47 +- .../logging/fluentd-container-puppet.yaml | 27 +- .../monitoring/sensu-client-container-puppet.yaml | 42 +- .../nova/nova-consoleauth-container-puppet.yaml | 14 +- .../nova/nova-placement-container-puppet.yaml | 242 ---------- .../opendaylight-ovs-baremetal-puppet.yaml | 2 +- .../tripleo-ui/tripleo-ui-container-puppet.yaml | 45 -- .../tuned/tuned-baremetal-puppet.yml} | 0 deployment/glance/glance-api-container-puppet.yaml | 23 + deployment/haproxy/haproxy-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 54 +-- deployment/heat/heat-api-container-puppet.yaml | 2 + deployment/heat/heat-engine-container-puppet.yaml | 16 +- deployment/horizon/horizon-container-puppet.yaml | 7 - deployment/ironic/ironic-base-puppet.yaml | 13 + .../ironic/ironic-conductor-container-puppet.yaml | 22 +- .../ironic/ironic-inspector-container-puppet.yaml | 18 +- .../ironic-neutron-agent-container-puppet.yaml | 3 +- deployment/kernel/kernel-baremetal-puppet.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 2 + deployment/logging/files/barbican-api.yaml | 2 +- deployment/logging/files/heat-api-cfn.yaml | 2 +- deployment/logging/files/heat-api.yaml | 2 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 2 +- deployment/logging/files/neutron-api.yaml | 2 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 2 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 2 +- deployment/logging/files/nova-placement.yaml | 49 -- deployment/logging/files/opendaylight-api.yaml | 2 +- deployment/logging/files/panko-api.yaml | 2 +- deployment/logging/files/placement-api.yaml | 49 ++ .../{nova-placement.yaml => placement-api.yaml} | 34 +- .../logrotate-crond-container-puppet.yaml | 2 + .../manila}/manila-backend-cephfs.yaml | 0 .../manila}/manila-backend-isilon.yaml | 0 .../manila}/manila-backend-netapp.yaml | 0 .../manila}/manila-backend-unity.yaml | 0 .../manila}/manila-backend-vmax.yaml | 0 .../manila}/manila-backend-vnx.yaml | 0 .../manila/manila-scheduler-container-puppet.yaml | 14 +- .../manila/manila-share-pacemaker-puppet.yaml | 43 -- .../masquerade-networks-baremetal-puppet.yaml | 0 .../memcached/memcached-container-puppet.yaml | 6 + deployment/metrics/collectd-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 2 +- deployment/mistral/mistral-base.yaml | 35 -- .../mistral/mistral-engine-container-puppet.yaml | 14 +- .../mistral-event-engine-container-puppet.yaml | 16 +- .../mistral/mistral-executor-container-puppet.yaml | 39 +- .../neutron/neutron-api-container-puppet.yaml | 12 +- deployment/neutron/neutron-az-config.yaml | 121 +++++ .../neutron}/neutron-base.yaml | 0 .../neutron-bigswitch-agent-baremetal-puppet.yaml | 0 .../neutron}/neutron-compute-plugin-midonet.yaml | 0 .../neutron}/neutron-compute-plugin-nuage.yaml | 0 .../neutron}/neutron-compute-plugin-plumgrid.yaml | 0 .../neutron}/neutron-controller-plugin-nuage.yaml | 0 .../neutron/neutron-dhcp-container-puppet.yaml | 16 +- .../neutron}/neutron-l3-compute-dvr.yaml | 0 .../neutron/neutron-l3-container-puppet.yaml | 16 +- .../neutron-lbaas-api-container-puppet.yaml | 70 --- ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-metadata-container-puppet.yaml | 12 +- .../neutron/neutron-midonet-baremetal-puppet.yaml | 0 .../neutron-ovn-dpdk-config-container-puppet.yaml | 91 ++++ .../neutron-ovs-agent-container-puppet.yaml | 16 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 5 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 2 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 2 +- .../neutron}/neutron-plugin-ml2-fujitsu-cfab.yaml | 0 .../neutron}/neutron-plugin-ml2-fujitsu-fossw.yaml | 0 ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 2 +- .../neutron}/neutron-plugin-ml2-nuage.yaml | 0 .../neutron}/neutron-plugin-ml2-odl.yaml | 0 .../neutron}/neutron-plugin-ml2-ovn.yaml | 21 + .../neutron}/neutron-plugin-ml2.yaml | 0 .../neutron}/neutron-plugin-nuage.yaml | 0 .../neutron}/neutron-plugin-plumgrid.yaml | 0 .../neutron-sriov-agent-container-puppet.yaml | 16 +- .../neutron}/neutron-sriov-host-config.yaml | 0 .../neutron-vpp-agent-baremetal-puppet.yaml | 0 deployment/nova/nova-api-container-puppet.yaml | 10 +- deployment/nova/nova-base-puppet.yaml | 32 +- .../nova/nova-compute-common-container-puppet.yaml | 11 +- deployment/nova/nova-compute-container-puppet.yaml | 260 ++++++++--- deployment/nova/nova-ironic-container-puppet.yaml | 36 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 1 - .../nova/nova-scheduler-container-puppet.yaml | 10 +- deployment/nova/novajoin-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 17 +- deployment/octavia/octavia-base.yaml | 8 +- .../octavia/octavia-deployment-config.j2.yaml | 11 +- .../octavia-health-manager-container-puppet.yaml | 7 - .../octavia/octavia-worker-container-puppet.yaml | 14 +- .../openvswitch/openvswitch-baremetal-puppet.yaml | 18 + .../ovn/ovn-controller-container-puppet.yaml | 13 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 112 ++--- deployment/ovn/ovn-metadata-container-puppet.yaml | 2 +- .../compute-instanceha-baremetal-puppet.yaml | 0 .../pacemaker/ovn-dbs-baremetal-puppet.yaml | 0 .../pacemaker/pacemaker-baremetal-puppet.yaml | 10 + .../pacemaker-remote-baremetal-puppet.yaml | 0 .../placement/placement-api-container-puppet.yaml | 298 ++++++++++++ deployment/podman/podman-baremetal-ansible.yaml | 24 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 41 -- .../rabbitmq-messaging-pacemaker-puppet.yaml | 42 -- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 42 -- .../sahara/sahara-engine-container-puppet.yaml | 10 +- deployment/selinux/selinux-baremetal-puppet.yaml | 48 -- .../external-swift-proxy-baremetal-puppet.yaml | 0 .../swift/swift-storage-container-puppet.yaml | 2 +- deployment/time/ntp-baremetal-puppet.yaml | 115 ----- .../tripleo-firewall-baremetal-puppet.yaml | 47 ++ .../tripleo-packages-baremetal-puppet.yaml | 57 +++ deployment/tuned/tuned-baremetal-ansible.yaml | 111 +++++ deployment/undercloud/undercloud-upgrade.yaml | 143 ++++++ .../tripleo-validations-baremetal-puppet.yaml | 0 ...tas-hyperscale-controller-baremetal-puppet.yaml | 0 .../vpp/vpp-baremetal-puppet.yaml | 0 deployment/zaqar/zaqar-container-puppet.yaml | 8 + environments/auditd.yaml | 3 +- environments/compute-instanceha.yaml | 3 +- environments/docker-ha.yaml | 4 +- environments/docker-uc-light.yaml | 2 +- environments/low-memory-usage.yaml | 3 +- environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 2 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 2 +- environments/manila-vmax-config.yaml | 2 +- environments/manila-vnx-config.yaml | 2 +- environments/metrics/collect-read-rabbitmq.yaml | 15 + .../collectd-standalone.yaml} | 2 +- .../collectd-write-qdr.yaml} | 4 +- environments/networking/neutron-midonet.yaml | 2 +- environments/neutron-az-config.yaml | 2 + environments/neutron-linuxbridge.yaml | 3 +- environments/neutron-midonet.yaml | 2 +- environments/neutron-ml2-bigswitch.yaml | 3 +- environments/neutron-ml2-fujitsu-cfab.yaml | 2 +- environments/neutron-ml2-fujitsu-fossw.yaml | 2 +- environments/neutron-ml2-ovn-dvr-ha.yaml | 29 -- environments/neutron-ml2-ovn-ha.yaml | 31 -- environments/neutron-ml2-vpp.yaml | 5 +- environments/neutron-nsx.yaml | 2 +- environments/neutron-ovs-dvr.yaml | 2 +- environments/neutron-plumgrid.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- .../services-baremetal/neutron-lbaasv2.yaml | 19 - .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 2 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 4 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services-baremetal/octavia.yaml | 5 +- environments/services/masquerade-networks.yaml | 2 +- environments/services/neutron-lbaasv2.yaml | 7 - environments/services/neutron-nsx-lbaasv2.yaml | 6 - .../services/neutron-opendaylight-sriov.yaml | 2 +- environments/services/neutron-opendaylight.yaml | 2 +- environments/services/neutron-ovn-dpdk.yaml | 7 + environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-ovn-standalone.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 2 +- environments/services/neutron-ovs.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/octavia.yaml | 5 +- environments/services/ptp.yaml | 1 - environments/services/tripleo-ui.yaml | 3 - environments/services/undercloud-aodh.yaml | 7 + environments/services/vpp.yaml | 3 +- environments/ssl/enable-internal-tls.j2.yaml | 2 +- environments/ssl/no-tls-endpoints-public-ip.yaml | 6 +- environments/ssl/tls-endpoints-public-dns.yaml | 6 +- environments/ssl/tls-endpoints-public-ip.yaml | 6 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 8 +- environments/standalone.yaml | 2 - environments/standalone/standalone-overcloud.yaml | 1 - environments/standalone/standalone-tripleo.yaml | 1 - environments/stdout-logging.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/swift-external.yaml | 2 +- environments/tripleo-validations.yaml | 2 +- environments/undercloud.yaml | 67 ++- .../veritas-hyperscale-config.yaml | 2 +- .../krb-service-principals/role.role.j2.yaml | 22 +- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 42 +- extraconfig/post_deploy/undercloud_post.yaml | 34 +- extraconfig/pre_network/boot-params-service.yaml | 2 +- extraconfig/pre_network/boot_param_tasks.yaml | 19 +- .../pre_network/host_config_and_reboot.yaml | 2 +- extraconfig/services/ipaclient.yaml | 63 ++- extraconfig/services/rhsm.yaml | 9 +- firstboot/userdata_timesync.yaml | 97 ++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 6 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 498 ++++++++++----------- network/ports/ctlplane_vip.yaml | 8 +- network/ports/net_ip_list_map.j2.yaml | 59 +-- network/ports/net_ip_map.j2.yaml | 8 +- network/ports/net_vip_map_external.j2.yaml | 16 +- network/ports/net_vip_map_external_v6.j2.yaml | 19 +- network/ports/noop.yaml | 8 +- network/ports/port.j2 | 16 +- network/ports/port_from_pool.j2 | 16 +- network/ports/vip.yaml | 8 +- network/ports/vip_v6.yaml | 13 +- network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 5 +- overcloud-resource-registry-puppet.j2.yaml | 40 +- overcloud.j2.yaml | 58 ++- puppet/all-nodes-config.j2.yaml | 58 ++- .../all_nodes/neutron-midonet-all-nodes.yaml | 1 + .../controller/neutron-ml2-bigswitch.yaml | 1 + puppet/services/README.rst | 194 -------- puppet/services/metrics/collectd.yaml | 433 ------------------ puppet/services/neutron-lbaas-agent.yaml | 70 --- ...t-inactivity-probe-config-a89f6dcd204192a8.yaml | 0 ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../add_image_cache_settings-50af5ff56a7d7f75.yaml | 10 + .../bluestore_disks_config-f5553b0540237c4c.yaml | 4 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...31122-fix-netapp-env-file-e5aeb0c2bf417d2b.yaml | 6 + ...cate-opendaylight-service-64b960923324edc4.yaml | 0 ...ate-puppet-selinux-config-cc8d2788c534d628.yaml | 5 + ...eprecated-vn-ha-env-files-f0d967d173dcdb16.yaml | 7 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../ironic-conductor-groups-577543f8ca612f06.yaml | 13 + .../ironic-rpc-transport-b637fd2a3b99fee7.yaml | 11 + .../notes/mistral_timeout-c00344d5b3d8c4b0.yaml | 6 - ...neutron-az-config-service-3085b2c296df06c9.yaml | 14 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va_libvirt_num_pcie_ports-f904bf0fb9a7b19e.yaml | 12 + ...a_remove_nova-consoleauth-227cbeb44e9ab5ef.yaml | 15 + .../nova_rpc_healthcheck-adbe5307dc04eeac.yaml | 9 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + releasenotes/notes/ovn-dpdk-15e8747068682f91.yaml | 3 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + ...ator-handler-threads.yaml-f5a12d1066b042f1.yaml | 3 + .../remove-neutron-lbaas-e72025b67de3563b.yaml | 11 + .../notes/remove-ntp-20905abec5281f54.yaml | 5 + .../notes/scale_tasks-2042b294d074b37a.yaml | 8 + ...remetal-puppet-deprecated-3e97347917905254.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + roles/CellController.yaml | 3 +- roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 4 +- roles/ComputeOvsDpdkSriovRT.yaml | 4 +- roles/Controller.yaml | 6 +- roles/ControllerAllNovaStandalone.yaml | 2 +- roles/ControllerNoCeph.yaml | 6 +- roles/ControllerNovaStandalone.yaml | 3 +- roles/ControllerOpenstack.yaml | 6 +- roles/ControllerStorageNfs.yaml | 19 +- roles/Networker.yaml | 1 - roles/Novacontrol.yaml | 3 +- roles/Standalone.yaml | 6 +- roles/Undercloud.yaml | 4 +- roles_data.yaml | 6 +- roles_data_undercloud.yaml | 4 +- sample-env-generator/composable-roles.yaml | 6 +- sample-env-generator/enable-services.yaml | 2 +- sample-env-generator/networking.yaml | 4 +- sample-env-generator/ssl.yaml | 31 +- sample-env-generator/standalone.yaml | 10 +- sample-env-generator/storage.yaml | 3 +- tools/yaml-validate.py | 7 +- 361 files changed, 3438 insertions(+), 3283 deletions(-)

1 0

tripleo-puppet-elements 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We enthusiastically announce the release of: tripleo-puppet-elements 11.0.0: Puppet building rules for OpenStack images. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 10.3.0..11.0.0 ------------------------------------------------- 6a3c2b3 Add element to install all openstack clients 98368f1 Add upper constraints 95c9300 OpenDev Migration Patch 8f7b4a1 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ tox.ini | 4 +- 11 files changed, 102 insertions(+), 4 deletions(-)

1 0

paunch 5.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We exuberantly announce the release of: paunch 5.0.0: Utility to launch and manage containers using YAML based configuration data This release is part of the train release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. 5.0.0 ^^^^^ New Features * docker learns 'hostname' which maps to docker run --hostname and 'extra_hosts' mapping to docker run --add-host. * When deploying with Podman, we can disable the container healthchecks by using paunch apply --healtcheck-disabled. * paunch learns 'hostname' wich maps to podman run --hostname and 'extra_hosts' mapping to podman run --add-host. Changes in paunch 4.4.0..5.0.0 ------------------------------ ecc2047 Ensure we don't have any trailing "requires" for paunch units 52d0b2d Corrected how health check unit and link are removed 2567495 Introduce the systemctl module to provide simple systemctl commands wrap 7e85445 Add missing link between healthcheck unit and main service efb015c Fix doc build 1978877 Add 'hostname' and 'extra_hosts' to docker e948fdc Add 'hostname' and 'extra_hosts' to podman 0cf1526 update git.openstack.org to opendev 37d6058 OpenDev Migration Patch fbf35b8 Update master for stable/stein a3da968 [Configuration] Add missing py37 and corrected default envlist. 817c243 Introduce paunch apply --healthcheck-disabled affc28f docker/compose: quote health-cmd cdc5ffc Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 6 +- paunch/__init__.py | 7 +- paunch/builder/base.py | 6 +- paunch/builder/compose1.py | 6 +- paunch/builder/podman.py | 9 ++- paunch/cmd.py | 10 ++- paunch/runner.py | 11 +-- paunch/utils/systemctl.py | 66 ++++++++++++++++++ paunch/utils/systemd.py | 59 +++++++++------- ...name-and-extra_hosts-args-8a2b2b06f69e1f20.yaml | 6 ++ .../healthcheck_disabled-373c8c26e8dc50c6.yaml | 5 ++ ...name-and-extra_hosts-args-27335af0a5694ba6.yaml | 5 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ test-requirements.txt | 2 - tox.ini | 5 +- 23 files changed, 304 insertions(+), 59 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ad110d4..7ad08e8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD @@ -14 +12,0 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=1.18.1 # Apache-2.0

1 0

python-tripleoclient 12.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are stoked to announce the release of: python-tripleoclient 12.0.0: TripleO client This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Added a y/n prompt to the node delete command to prevent a user from accidently executing a node delete action since it's a destructive action. Upgrade Notes ************* * *enable_ui* has been removed from the undercloud configuration options. Deprecation Notes ***************** * The scale and flavor params have been deprecated since Newton. This is the start of the process to removing these params. The CLI will now throw an error if any of the old scale and/or flavor params are passed. This check should be removed in a future release. Bug Fixes ********* * The verbosity of the config-download ansible tasks for deployment are now controlled by the verbosity level specified on the command line. Changes in python-tripleoclient 11.4.0..12.0.0 ---------------------------------------------- 75defc10 Remove tripleo-ui items from the undercloud install b44d6f84 Drop the port from DockerInsecureRegistryAddress 2b3b7f1e Add a user confirmation to node delete cc6ddee2 Fix sample_default for host_routes option 648cc2bc Don't force verbosity of 1 for config-download 0989e39c Fix exception message ca1d6344 Remove pull source option. 1fee54b9 Add ODL deprecation warning in CLI fd61c26a Refactor stack output fetching 16326a86 workflows/scale: re-use the deployment workbook to run Ansible c925c3b9 undercloud: resolve undercloud_*_host 0228a39e Increase max_nested_stack_depth for heat 51a98807 Get validations playbooks from playbooks directory 42af1381 Fix overcloud node instrospect exception output 200d20a7 Update --*-flavor --*-count description d0130ff9 Replace git.openstack.org URLs with opendev.org URLs 25d98a68 scale-down: run ansible_scale_down workflow before node_delete 4460b91b OpenDev Migration Patch 9ce58e97 Remove service environment file and images file. 9e930fdd Remove nodes and roles options. cefb2df8 undercloud: wire ContainerHealthcheckDisabled f0310b34 Update undercloud_nameserver help text 6666e3de Make usage of --*-flavor and --*-count an error b3cef86b Do not log tracebacks for expected exceptions 182fd0d6 Update master for stable/stein ef0e5085 Make overcloud_config working with Python 3 0041ec4c Add checking mechanism driver during upgrade 28cf1133 Allow running the no-op group validation Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ...nfirmation-to-node-delete-ca8c240bfd71c0ba.yaml | 6 + ...config-download-verbosity-75fa34c110c00657.yaml | 4 + .../notes/remove-tripleo-ui-0176ef82f8563b92.yaml | 4 + .../notes/scale-params-error-4fa64ae7569ab3f4.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + tox.ini | 6 +- tripleoclient/command.py | 4 +- tripleoclient/config/standalone.py | 5 - tripleoclient/config/undercloud.py | 14 +- tripleoclient/constants.py | 18 ++- tripleoclient/exceptions.py | 50 +++--- tripleoclient/heat_launcher.py | 3 +- .../healthcheck_disabled-d0878072273d1496.yaml | 5 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 47 +++--- .../v1/overcloud_update/test_overcloud_update.py | 62 +------- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 49 +++--- tripleoclient/utils.py | 168 +++++++++++++++++++-- tripleoclient/v1/container_image.py | 33 ---- tripleoclient/v1/overcloud_config.py | 2 +- tripleoclient/v1/overcloud_deploy.py | 47 ++++-- tripleoclient/v1/overcloud_node.py | 14 ++ tripleoclient/v1/overcloud_update.py | 45 ++---- tripleoclient/v1/overcloud_upgrade.py | 46 ++---- tripleoclient/v1/tripleo_deploy.py | 3 +- tripleoclient/v1/undercloud_config.py | 50 +++--- tripleoclient/v1/undercloud_preflight.py | 9 +- tripleoclient/workflows/baremetal.py | 4 +- tripleoclient/workflows/deployment.py | 2 +- tripleoclient/workflows/plan_management.py | 2 +- tripleoclient/workflows/scale.py | 40 +++-- 38 files changed, 630 insertions(+), 370 deletions(-)

1 0

os-win 4.3.0 (train)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We joyfully announce the release of: os-win 4.3.0: Windows / Hyper-V library for OpenStack projects. This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-win Download the package from: https://pypi.org/project/os-win Please report issues through: https://bugs.launchpad.net/os-win/+bugs For more details, please see below. Changes in os-win 4.2.0..4.3.0 ------------------------------ f9bed1a Replace git.openstack.org URLs with opendev.org URLs 930ac47 OpenDev Migration Patch af911eb Dropping the py35 testing 8954d1c Update master for stable/stein ec959ea Update hacking version 19a4ab5 add python 3.7 unit test job b07ba3d Replace testrepository with stestr 5c3f7cd Add mutex class Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 2 +- .stestr.conf | 3 ++ .testr.conf | 7 --- .zuul.yaml | 2 +- HACKING.rst | 2 +- README.rst | 2 +- lower-constraints.txt | 6 +-- os_win/utils/baseutils.py | 6 +-- os_win/utils/processutils.py | 56 ++++++++++++++++++++++ os_win/utils/win32utils.py | 13 ++++++ os_win/utils/winapi/libs/kernel32.py | 15 ++++++ os_win/utilsfactory.py | 5 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ setup.cfg | 2 +- test-requirements.txt | 4 +- tox.ini | 11 ++--- 24 files changed, 247 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 48a4232..691a1b3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -13 +13 @@ oslotest>=3.2.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

monasca-common 2.14.0 (train)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We jubilantly announce the release of: monasca-common 2.14.0: Monasca common python modules This release is part of the train release series. The source is available from: https://opendev.org/openstack/monasca-common Download the package from: https://tarballs.openstack.org/monasca-common/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-common 2.13.0..2.14.0 ---------------------------------------- e9d3b95 Upgrade Alpine version 807ebf0 Change links usage 3d824b7 Upgrade Python version 40b8086 Blacklist bandit 1.6.0 16923fd Replace git.openstack.org URLs with opendev.org URLs 625ed07 Dropping the py35 testing 61e2e00 OpenDev Migration Patch 34fd0fc Use proper naming for docker services image zuul jobs 58c7922 Use full branch name as build_image.sh argument 5bdd986 Catch the case when no new messages are available 7fb3622 Convert mysql port to int in wait script ffbe2a1 Don't remove tempest tests from installation folder 4c077af Support full links in Docker wait script 5cfcbda Use proper naming for docker base image zuul jobs 4f70a64 Fix monasca-common for building Docker image Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 17 ++++++++--------- README.rst | 2 +- monasca_common/confluent_kafka/consumer.py | 4 ++++ playbooks/docker_build_service.yml | 4 ++-- setup.cfg | 2 +- test-requirements.txt | 2 +- tox.ini | 17 ++++------------- 13 files changed, 49 insertions(+), 45 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 32857d6..a74545d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0

1 0

python-octaviaclient 1.4.1 (queens)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We contentedly announce the release of: python-octaviaclient 1.4.1: Octavia client for OpenStack Load Balancing This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/911 For more details, please see below. 1.4.1 ^^^^^ Bug Fixes * The client will now always ask for a JSON format response from the Octavia API. This resolves a client side bug should certain errors be returned by the API. Changes in python-octaviaclient 1.4.0..1.4.1 -------------------------------------------- f87cb8f OpenDev Migration Patch 64f64d5 Make sure we always requests JSON responses 7c25d5e import zuul job settings from project-config a7c5412 Updated from global requirements 180b279 Update UPPER_CONSTRAINTS_FILE for stable/queens d3d217e Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 11 +++ octaviaclient/api/v2/octavia.py | 98 ++++++++++++---------- ...to-request-JSON-responses-8d942dafca785c70.yaml | 6 ++ tox.ini | 6 +- 6 files changed, 76 insertions(+), 50 deletions(-)

1 0

octavia 4.0.1 (stein)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We exuberantly announce the release of: octavia 4.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 4.0.1 ^^^^^ Bug Fixes * Fixed duplicated IPv6 addresses in Active/Standby mode in CentOS amphorae. * Fixed an issue where the listener API would accept null/None values for fields that must have a valid value, such as connection- limit. Now when a PUT call is made to one of these fields with null as the value the API will reset the field value to the field default value. * Fixed a bug that prevents spare amphora rotation. Changes in octavia 4.0.0..4.0.1 ------------------------------- 3ac8f296 Performance improvement for non-udp health checks 30a4feb8 Bandit test exclusions syntax change 7dc3cb97 Fix IPv6 in Active/Standby topology on CentOS aa259d12 Fix spare amphora failover 8e3e8b1f Fix listener API handling of None/null updates cbf4079a OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../api_server/templates/rh_plug_vip_ethX.conf.j2 | 2 + octavia/api/v2/controllers/listener.py | 30 +++++++++ octavia/api/v2/types/listener.py | 6 +- octavia/common/constants.py | 1 + .../healthmanager/health_drivers/update_db.py | 20 +++--- octavia/controller/worker/controller_worker.py | 2 +- octavia/db/repositories.py | 4 +- .../healthmanager/health_drivers/test_update_db.py | 72 ++++++++++++++++++---- playbooks/image-build/run.yaml | 2 +- playbooks/legacy/grenade-devstack-octavia/run.yaml | 10 +-- .../legacy/octavia-v1-dsvm-py3x-scenario/run.yaml | 6 +- playbooks/legacy/octavia-v1-dsvm-scenario/run.yaml | 6 +- ...-active-standby-in-centos-4e47140e0e139de8.yaml | 4 ++ .../None-fde2ffab82e783a4.yaml | 7 +++ ...ed-spare-amphora-rotation-007ba406411a313d.yaml | 4 ++ tox.ini | 2 +- zuul.d/jobs.yaml | 6 +- 20 files changed, 210 insertions(+), 43 deletions(-)

1 0

python-octaviaclient 1.8.1 (stein)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We jubilantly announce the release of: python-octaviaclient 1.8.1: Octavia client for OpenStack Load Balancing This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 1.8.1 ^^^^^ Bug Fixes * The client will now always ask for a JSON format response from the Octavia API. This resolves a client side bug should certain errors be returned by the API. Changes in python-octaviaclient 1.8.0..1.8.1 -------------------------------------------- f3bb183 OpenDev Migration Patch e48e310 Make sure we always requests JSON responses 4f0638a Update UPPER_CONSTRAINTS_FILE for stable/stein 6bcf04b Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- octaviaclient/api/v2/octavia.py | 130 +++++++++++---------- ...to-request-JSON-responses-8d942dafca785c70.yaml | 6 + tox.ini | 6 +- 4 files changed, 80 insertions(+), 65 deletions(-)

1 0

python-octaviaclient 1.6.1 (rocky)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We are excited to announce the release of: python-octaviaclient 1.6.1: Octavia client for OpenStack Load Balancing This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/911 For more details, please see below. 1.6.1 ^^^^^ Bug Fixes * The client will now always ask for a JSON format response from the Octavia API. This resolves a client side bug should certain errors be returned by the API. Changes in python-octaviaclient 1.6.0..1.6.1 -------------------------------------------- 24ba6fb OpenDev Migration Patch 0059096 Make sure we always requests JSON responses 78e9145 import zuul job settings from project-config be9a6c7 Update UPPER_CONSTRAINTS_FILE for stable/rocky d88740e Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- octaviaclient/api/v2/octavia.py | 100 +++++++++++---------- ...to-request-JSON-responses-8d942dafca785c70.yaml | 6 ++ tox.ini | 6 +- zuul.d/projects.yaml | 10 +++ 5 files changed, 75 insertions(+), 50 deletions(-)

1 0

octavia 3.1.1 (rocky)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We are stoked to announce the release of: octavia 3.1.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 3.1.1 ^^^^^ Bug Fixes * Fixed duplicated IPv6 addresses in Active/Standby mode in CentOS amphorae. * Fixed an issue where the listener API would accept null/None values for fields that must have a valid value, such as connection- limit. Now when a PUT call is made to one of these fields with null as the value the API will reset the field value to the field default value. Changes in octavia 3.1.0..3.1.1 ------------------------------- e801a6f2 Treat null admin_state_up as False 76bdcfd6 Performance improvement for non-udp health checks 2bf15e86 Bandit test exclusions syntax change cedb553b Fix IPv6 in Active/Standby topology on CentOS 85584435 Fix listener API handling of None/null updates 6da36f03 OpenDev Migration Patch c0e13c2f Fix a lifecycle bug with child objects Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../api_server/templates/rh_plug_vip_ethX.conf.j2 | 2 + octavia/api/common/types.py | 6 ++ octavia/api/v2/controllers/health_monitor.py | 3 + octavia/api/v2/controllers/l7rule.py | 4 ++ octavia/api/v2/controllers/listener.py | 28 +++++++++ octavia/api/v2/controllers/member.py | 13 ++++ octavia/api/v2/types/listener.py | 6 +- octavia/common/constants.py | 1 + .../healthmanager/health_drivers/update_db.py | 20 +++--- octavia/controller/worker/task_utils.py | 16 +++++ octavia/controller/worker/tasks/lifecycle_tasks.py | 2 + octavia/db/repositories.py | 4 +- .../healthmanager/health_drivers/test_update_db.py | 72 ++++++++++++++++++---- playbooks/legacy/grenade-devstack-octavia/run.yaml | 10 +-- .../run.yaml | 6 +- .../legacy/octavia-v1-dsvm-py3x-scenario/run.yaml | 6 +- .../octavia-v1-dsvm-scenario-kvm-centos.7/run.yaml | 6 +- .../legacy/octavia-v1-dsvm-scenario-lxd/run.yaml | 10 +-- .../octavia-v1-dsvm-scenario-multinode/run.yaml | 6 +- playbooks/legacy/octavia-v1-dsvm-scenario/run.yaml | 6 +- ...-active-standby-in-centos-4e47140e0e139de8.yaml | 4 ++ .../None-fde2ffab82e783a4.yaml | 7 +++ tox.ini | 2 +- zuul.d/jobs.yaml | 10 +-- 31 files changed, 327 insertions(+), 59 deletions(-)

1 0

octavia 2.1.1 (queens)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We are ecstatic to announce the release of: octavia 2.1.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 2.1.1 ^^^^^ Bug Fixes * Fixed duplicated IPv6 addresses in Active/Standby mode in CentOS amphorae. * Fixed an issue where the listener API would accept null/None values for fields that must have a valid value, such as connection- limit. Now when a PUT call is made to one of these fields with null as the value the API will reset the field value to the field default value. Changes in octavia 2.1.0..2.1.1 ------------------------------- c09da200 Treat null admin_state_up as False a3a14116 Bandit test exclusions syntax change de4eeff8 Fix IPv6 in Active/Standby topology on CentOS d086b3a9 Fix listener API handling of None/null updates c28dd927 OpenDev Migration Patch f6963578 Fix a lifecycle bug with child objects 3731e167 Improve resource quota response message 8071ccd2 Add lb_id comment to amp haproxy listener config Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../api_server/templates/rh_plug_vip_ethX.conf.j2 | 2 ++ octavia/api/common/types.py | 6 ++++ octavia/api/v1/controllers/health_monitor.py | 4 ++- octavia/api/v1/controllers/listener.py | 3 +- octavia/api/v1/controllers/load_balancer.py | 3 +- octavia/api/v1/controllers/member.py | 4 ++- octavia/api/v1/controllers/pool.py | 3 +- octavia/api/v2/controllers/health_monitor.py | 6 +++- octavia/api/v2/controllers/l7policy.py | 3 +- octavia/api/v2/controllers/l7rule.py | 4 +++ octavia/api/v2/controllers/listener.py | 19 +++++++++++- octavia/api/v2/controllers/load_balancer.py | 8 +++-- octavia/api/v2/controllers/member.py | 19 ++++++++++-- octavia/api/v2/controllers/pool.py | 9 ++++-- octavia/api/v2/types/listener.py | 6 ++-- octavia/common/constants.py | 1 + octavia/common/exceptions.py | 2 +- octavia/common/jinja/haproxy/jinja_cfg.py | 2 +- octavia/common/jinja/haproxy/templates/base.j2 | 2 +- .../common/jinja/haproxy/templates/haproxy.cfg.j2 | 2 +- octavia/controller/worker/task_utils.py | 16 ++++++++++ octavia/controller/worker/tasks/lifecycle_tasks.py | 2 ++ octavia/db/repositories.py | 25 ++++++++++----- .../agent/api_server/test_haproxy_compatibility.py | 2 +- .../unit/common/sample_configs/sample_configs.py | 20 ++---------- .../run.yaml | 6 ++-- .../legacy/octavia-v1-dsvm-py3x-scenario/run.yaml | 6 ++-- .../octavia-v1-dsvm-scenario-kvm-centos.7/run.yaml | 6 ++-- .../octavia-v1-dsvm-scenario-multinode/run.yaml | 6 ++-- playbooks/legacy/octavia-v1-dsvm-scenario/run.yaml | 6 ++-- ...-active-standby-in-centos-4e47140e0e139de8.yaml | 4 +++ .../None-fde2ffab82e783a4.yaml | 7 +++++ tox.ini | 2 +- zuul.d/jobs.yaml | 4 +-- 40 files changed, 263 insertions(+), 69 deletions(-)

1 0

os_vif 1.16.0 (train)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We are jazzed to announce the release of: os_vif 1.16.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. 1.16.0 ^^^^^^ Security Issues * Prevent Linux Bridge from replying to ARP messages. It should reply only if the target IP address is a local address configured on the incoming interface and it should always use the best local address. See The ARP flux problem (http://linux-ip.net/html/ether- arp.html #ether-arp-flux) for more information. Changes in os_vif 1.15.1..1.16.0 -------------------------------- ecc3620 Remove unused vif_plug_ovs.i18n module 81f2002 Fix Kuryr-Kubernetes job name 9fb8282 Replace git.openstack.org URLs with opendev.org URLs 9ad9b84 Prevent "qbr" Linux Bridge from replying to ARP messages ee124d2 Remove IP proxy methods 1f78150 OpenDev Migration Patch c63366d Refactor functional base test classes 96e08ca Drop testtools from test-requirements.txt a7ee27e Replace openstack.org git:// URLs with https:// 3cc0b79 Update master for stable/stein dfe319b docs: Use sphinx.ext.autodoc for profile, datapath offload types 8609f8a docs: Use sphinx.ext.autodoc for VIF types Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 10 +- README.rst | 2 +- os_vif/internal/command/ip/__init__.py | 37 ----- os_vif/internal/{command => ip}/__init__.py | 0 os_vif/internal/{command => }/ip/api.py | 4 +- os_vif/internal/{command => }/ip/ip_command.py | 0 os_vif/internal/{command => }/ip/linux/__init__.py | 0 .../{command => }/ip/linux/impl_pyroute2.py | 2 +- .../internal/{command => }/ip/windows/__init__.py | 0 .../{command => }/ip/windows/impl_netifaces.py | 2 +- os_vif/objects/vif.py | 124 +++++++++++++---- .../internal/command/ip/test_impl_pyroute2.py | 2 +- .../unit/internal/command/ip/windows/__init__.py | 0 .../unit/internal/{command => ip}/__init__.py | 0 .../internal/{command/ip => ip/linux}/__init__.py | 0 .../{command => }/ip/linux/test_impl_pyroute2.py | 2 +- .../unit/internal/{command => }/ip/test_api.py | 6 +- .../{command/ip/linux => ip/windows}/__init__.py | 0 .../ip/windows/test_impl_netifaces.py | 2 +- playbooks/os-vif-ovs/run.yaml | 6 +- .../prevent-lb-reply-arp-6459133bfb056069.yaml | 8 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + test-requirements.txt | 1 - tox.ini | 4 +- vif_plug_linux_bridge/linux_net.py | 19 ++- vif_plug_ovs/i18n.py | 39 ------ vif_plug_ovs/linux_net.py | 19 ++- vif_plug_ovs/ovs.py | 2 +- 42 files changed, 310 insertions(+), 426 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index da7c80a..3edcbaa 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=2.2.0 # MIT

1 0

python-ironicclient 2.8.0 (train)
by no-reply＠openstack.org 07 Jun '19

07 Jun '19

We enthusiastically announce the release of: python-ironicclient 2.8.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://bugs.launchpad.net/python-ironicclient/+bugs For more details, please see below. 2.8.0 ^^^^^ New Features ************ * Adds the "--node" argument to "baremetal allocation create" to support allocation backfilling. * Adds support for the allocation update API introduced in API version 1.57. Adds new commands: * "openstack baremetal allocation set" * "openstack baremetal allocation unset" Bug Fixes ********* * Prevent trying to access endpoints with "/v1/v1" when using endpoint overrides containing "/v1". Changes in python-ironicclient 2.7.0..2.8.0 ------------------------------------------- a22874b Add allocation update API c3c82c4 Update sphinx requirements 03adb81 Allocation API: support allocation backfilling 4565af8 Do not try to use /v1/v1 when endpoint_override is used 5e8680c Fetch requirements from opendev 060029f OpenDev Migration Patch 7f69c53 Dropping the py35 testing f8b0d1a Uncap jsonschema 9cd6ce7 Replace openstack.org git:// URLs with https:// ef992f6 Update master for stable/stein 9b881cb Run jobs under python2 and python3 8071d5d Use endpoint_override in version negotiation 2c349cc Move to zuulv3 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 6 +- ironicclient/common/http.py | 21 +-- ironicclient/osc/v1/baremetal_allocation.py | 108 ++++++++++++++- .../functional/osc/v1/test_baremetal_allocation.py | 33 ++++- .../osc/v1/test_baremetal_deploy_template_basic.py | 5 +- .../osc/v1/test_baremetal_node_negative.py | 14 +- ironicclient/v1/allocation.py | 10 +- playbooks/functional/run.yaml | 55 ++++++++ .../legacy/ironicclient-dsvm-functional/post.yaml | 15 -- .../legacy/ironicclient-dsvm-functional/run.yaml | 68 --------- .../legacy/ironicclient-tempest-dsvm-src/post.yaml | 15 -- .../legacy/ironicclient-tempest-dsvm-src/run.yaml | 113 --------------- .../allocation-backfill-4d4e51af2f787a72.yaml | 5 + .../allow-allocation-update-b4fb715045ab40a2.yaml | 8 ++ .../notes/endpoint-strip-dea59ccb05628a35.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + requirements.txt | 2 +- setup.cfg | 3 +- tools/run_functional.sh | 28 ---- tox.ini | 19 ++- zuul.d/ironicclient-jobs.yaml | 63 +++++++++ zuul.d/legacy-ironicclient-jobs.yaml | 42 ------ zuul.d/project.yaml | 13 +- 35 files changed, 513 insertions(+), 379 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9189585..c15ce97 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ dogpile.cache>=0.6.2 # BSD -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT

1 0

glance_store 0.29.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are stoked to announce the release of: glance_store 0.29.0: OpenStack Image Service Store Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 0.29.0 ^^^^^^ New Features ************ * Added keyword argument to "register_store_opts" and "create_multi_stores" calls to configure reserved stores by the consuming service. This feature will allow a mix of operator- configured stores via enabled_backends configuration option set in the [glance_store] section of the consuming service's configuration file, and stores that are reserved for use by the consuming service. Upgrade Notes ************* * The "store_capabilities_update_min_interval" configuration option, deprecated since the Rocky release, has been removed. The option configured a capability that was not implemented by any glance_store drivers. Thus its removal will have no impact on any deployments. Changes in glance_store 0.28.0..0.29.0 -------------------------------------- 0c73abc Rethinking file system access 54744cc Change location metadata key 'backend' to 'store' d5dc27e Add location prefix url to store instance 201e6e2 Add releasenote for option removal d0d883e Removed 'store_capabilities_update_min_interval' config option ae2ffc3 Dropping the py35 testing a6de131 Modify deprecation warning for stores options d7acfb4 Replace git.openstack.org URLs with opendev.org URLs 4fde142 Fix failing tips-py35 jobs 25908e2 OpenDev Migration Patch ed356fc Do not include ETag when puting manifest in chunked uploads 1b58e67 Update irrelevant-files for tempest tests 0a31665 Python3: Fix return type on CooperativeReader.read a42acbb Uncap jsonschema 2719c2a Update master for stable/stein 1d25a2b Prevent unicode object error from zero-byte read d3029fe Return bytes even when get()ing a zero-byte image from swift 54a728f Update help text for rbd_ceph_conf 8564d6c Change rbd default conf path 0b23b4f remove bandit from testing Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 49 +++++++------ README.rst | 2 +- glance_store/_drivers/cinder.py | 7 +- glance_store/_drivers/filesystem.py | 8 ++- glance_store/_drivers/http.py | 10 +++ glance_store/_drivers/rbd.py | 39 +++++++--- glance_store/_drivers/sheepdog.py | 7 ++ glance_store/_drivers/swift/store.py | 83 ++++++++++++++++++++-- glance_store/_drivers/vmware_datastore.py | 15 +++- glance_store/backend.py | 56 +-------------- glance_store/capabilities.py | 49 ------------- glance_store/common/utils.py | 2 +- glance_store/driver.py | 5 ++ glance_store/multi_backend.py | 69 ++++-------------- lower-constraints.txt | 1 - .../notes/pike-relnote-9f547df14184d18c.yaml | 12 ++-- .../notes/queens-relnote-5fa2d009d9a9e458.yaml | 2 +- ...e-cap-update-min-interval-21fea4173ed4a09b.yaml | 6 ++ ...hinking-filesystem-access-5ab872fd0c0d27db.yaml | 9 +++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 2 +- setup.cfg | 2 +- test-requirements.txt | 1 - tox.ini | 19 +---- 37 files changed, 422 insertions(+), 274 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e02741c..65fdd87 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ six>=1.10.0 # MIT -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 2ddcc91..c3b3255 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -23 +22,0 @@ os-testr>=1.0.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0

1 0

puppet-magnum 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are happy to announce the release of: puppet-magnum 15.0.0: Puppet module for Magnum This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-magnum Download the package from: https://tarballs.openstack.org/puppet-magnum/ Please report issues through: https://bugs.launchpad.net/puppet-magnum/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * The init.pp main class has been modified to include more standard parameters, as seen in other puppet-openstack modules. None of the new parameters are required, therefore the module stays backward compatible. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-magnum 14.4.0..15.0.0 --------------------------------------- 3e35783 Update keystone/authtoken.pp to match features of other modules 5ef05e7 Fixup oslo::messaging tests 92f7ffb Fix-up standard rabbit config in init.pp 487ca43 Deprecate idle_timeout option bbf8382 Move to opendev fd4a677 Fix Repository 3f4f18b Replace git.openstack.org with opendev.org/openstack ee8bd06 OpenDev Migration Patch 6088c8c Add Beaker-Rspec to the table of contents 44b7cea Remove extra spaces fafecac Bump version for the start of Train 28683b4 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 13 +- manifests/db.pp | 52 +++++--- manifests/init.pp | 128 ++++++++++++++++++-- manifests/keystone/authtoken.pp | 31 +++-- metadata.json | 10 +- ...te_idle_timeout_parameter-97899c049837b2c6.yaml | 4 + .../notes/init-parameters-cb3af59d539dd3be.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + spec/classes/magnum_db_spec.rb | 54 ++++----- spec/classes/magnum_init_spec.rb | 134 ++++++++++++++++----- spec/classes/magnum_keystone_authtoken_spec.rb | 14 ++- tox.ini | 2 +- 15 files changed, 344 insertions(+), 115 deletions(-)

1 0

puppet-openstacklib 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are excited to announce the release of: puppet-openstacklib 15.0.0: Puppet module for OpenStack Openstacklib This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Utility to handle prefixing IPv6 address with "inet6:". This is useful for services relying on python-memcached which require the "inet6:[<ip_address]:<port>" format. Upgrade Notes ************* * Puppet OpenStack does not officially support Puppet 4 anymore. Deployments should use Puppet 5 or Puppet 6. Changes in puppet-openstacklib 14.4.0..15.0.0 --------------------------------------------- 7d0f1b7 inet6_prefix() - add test with prefix in input 1f13d87 inet6 prefix utility 6399a0e Remove Puppet 4 support e30f0f5 Move to opendev 76cd957 Move to opendev d8c745e Fix Repository b017e54 Replace git.openstack.org with opendev.org/openstack bdfce08 OpenDev Migration Patch 181ebe3 Add Beaker-Rspec to the table of contents 8ed8ad5 Bump version for the start of Train 6c61c2b Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 17 ++++++------ lib/puppet/functions/inet6_prefix.rb | 31 ++++++++++++++++++++++ manifests/defaults.pp | 7 ----- metadata.json | 4 +-- .../memcached-inet6-prefix-91e867d03bc5f6e2.yaml | 6 +++++ .../notes/remove-puppet-4-7edd1536c4078f7a.yaml | 5 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++++ spec/functions/inet6_prefix_spec.rb | 19 +++++++++++++ tox.ini | 2 +- 12 files changed, 82 insertions(+), 20 deletions(-)

1 0

puppet-vitrage 5.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are psyched to announce the release of: puppet-vitrage 5.0.0: Puppet module for OpenStack Vitrage This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. 5.0.0 ^^^^^ Deprecation Notes * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-vitrage 4.4.0..5.0.0 -------------------------------------- 416218e Fix client spec test a5010d2 Deprecate idle_timeout option f99f8c0 Move to opendev 9da9742 Move to opendev 53f963e Fix Repository 40daf36 OpenDev Migration Patch 1e68a4b Add Beaker-Rspec to the table of contents 7887de1 Bump version for the start of Train a0bc2d0 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 11 +++-- manifests/db.pp | 52 +++++++++++++-------- metadata.json | 10 ++-- ...te_idle_timeout_parameter-930ece6871e4ce09.yaml | 4 ++ ...e_persistor_config_params-2898e5dd42fdd5f3.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/classes/vitrage_client_spec.rb | 1 + spec/classes/vitrage_db_spec.rb | 54 +++++++++++----------- tox.ini | 2 +- 12 files changed, 87 insertions(+), 60 deletions(-)

1 0

puppet-aodh 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are glad to announce the release of: puppet-aodh 15.0.0: Puppet module for OpenStack Aodh This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add openstackclient installation to the client class. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-aodh 14.4.0..15.0.0 ------------------------------------- d19b120 Add openstackclient installation to the client class 9b10d77 Deprecate idle_timeout option 78d5b88 Move to opendev 0e689c2 Fix Repository 43d7e4a Replace git.openstack.org with opendev.org/openstack b80cb36 OpenDev Migration Patch bc8f568 Add Beaker-Rspec to the table of contents 262dad5 Bump version for the start of Train 80937dc Update master for stable/stein 4beecfa Provide more useful fail message Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 13 ++--- manifests/client.pp | 2 + manifests/db.pp | 57 +++++++++++++-------- manifests/params.pp | 3 +- metadata.json | 10 ++-- ...dd-openstackclient-client-9a93fa6590a23eb9.yaml | 3 ++ ...te_idle_timeout_parameter-9d919d33762fb5db.yaml | 4 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/classes/aodh_client_spec.rb | 2 + spec/classes/aodh_db_spec.rb | 58 +++++++++++----------- tox.ini | 2 +- 14 files changed, 99 insertions(+), 66 deletions(-)

1 0

puppet-mistral 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We exuberantly announce the release of: puppet-mistral 15.0.0: Puppet module for OpenStack Mistral This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add openstackclient installation to the client class. * Add new parameters to configure hearbeat related options, max_missed_heartbeats check_interval and first_heartbeat_timeout. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-mistral 14.4.0..15.0.0 ---------------------------------------- b33ccfd Add openstackclient installation to the client class 7b2a9b0 Deprecate idle_timeout option f3eac9e Move to opendev 00f2cab Fix Repository 4e55249 OpenDev Migration Patch 5fd5db4 Add Beaker-Rspec to the table of contents 104896c Add more options to configure Heartbeat options b3a6853 Bump version for the start of Train 52ed6c2 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 11 ++-- manifests/client.pp | 2 + manifests/db.pp | 65 +++++++++++++--------- manifests/init.pp | 39 +++++++++++-- metadata.json | 10 ++-- ...dd-openstackclient-client-af0f5c3f707e1f49.yaml | 3 + ...te_idle_timeout_parameter-b1568af63281c7ae.yaml | 4 ++ .../notes/heartbeats-98aed300614308da.yaml | 5 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ spec/classes/mistral_client_spec.rb | 2 + spec/classes/mistral_db_spec.rb | 54 +++++++++--------- spec/classes/mistral_init_spec.rb | 17 ++++++ tox.ini | 2 +- 16 files changed, 154 insertions(+), 71 deletions(-)

1 0

puppet-congress 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We jubilantly announce the release of: puppet-congress 15.0.0: Puppet module for OpenStack Congress This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-congress Download the package from: https://tarballs.openstack.org/puppet-congress/ Please report issues through: https://bugs.launchpad.net/puppet-congress/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add openstackclient installation to the client class. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-congress 14.4.0..15.0.0 ----------------------------------------- 49d89d3 Add openstackclient installation to the client class 1f2c317 Deprecate idle_timeout option c2eea48 Move to opendev e89f20b Fix Repository bb95054 Replace git.openstack.org with opendev.org/openstack f840bd8 OpenDev Migration Patch d83348b Add Beaker-Rspec to the table of contents dfedf04 Disable beaker jobs for now d569919 Bump version for the start of Train e9c90e0 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 4 +- Gemfile | 2 +- README.md | 9 ++-- manifests/client.pp | 2 + manifests/db.pp | 52 +++++++++++++-------- metadata.json | 10 ++-- ...dd-openstackclient-client-9e49434320313093.yaml | 3 ++ ...te_idle_timeout_parameter-af6d704f1e7126ba.yaml | 4 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/classes/congress_client_spec.rb | 1 + spec/classes/congress_db_spec.rb | 54 +++++++++++----------- tox.ini | 2 +- 14 files changed, 93 insertions(+), 59 deletions(-)

1 0

puppet-swift 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We jubilantly announce the release of: puppet-swift 15.0.0: Puppet module for OpenStack Swift This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 15.0.0 ^^^^^^ Upgrade Notes * The default value for swift::keymaster::project_name has been changed from 'service' to 'services'. Changes in puppet-swift 14.4.0..15.0.0 -------------------------------------- 1041c07 Consistent project name 1fde777 Fix client spec test 9208f91 Port puppet-swift-tripleo-standalone to os_tempest ce1abdd Move to opendev 47aef3b Fix Repository d78f9cf Replace git.openstack.org with opendev.org/openstack a0b32ce OpenDev Migration Patch ca8c736 Add Beaker-Rspec to the table of contents 7ba3659 Bump version for the start of Train d21985f Update master for stable/stein 19634d2 Provide more useful fail message Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 5 +++-- Gemfile | 2 +- README.md | 9 +++++---- manifests/keymaster.pp | 3 +-- manifests/params.pp | 3 ++- metadata.json | 6 +++--- releasenotes/notes/consistent-project-name-9b53534b86710ff3.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ spec/classes/swift_client_spec.rb | 1 + spec/classes/swift_keymaster.rb | 2 +- tox.ini | 2 +- 13 files changed, 31 insertions(+), 16 deletions(-)

1 0

python-troveclient 2.18.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We eagerly announce the release of: python-troveclient 2.18.0: Client library for OpenStack DBaaS API This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-troveclient Download the package from: https://pypi.org/project/python-troveclient Please report issues through: https://bugs.launchpad.net/python-troveclient/+bugs For more details, please see below. 2.18.0 ^^^^^^ New Features * Allow users to delete database instances in batch. * Admin user can use "openstack database instance list --all- projects" to get database instances of all the projects. Changes in python-troveclient 2.17.0..2.18.0 -------------------------------------------- 20926f1 Restore the index method for Management class 16d1ded Support to batch delete database instances be04075 Add release note for --all-projects support 7a79117 Get all the database instances by admin d0d53a2 Disable some CI jobs fdc65de OpenDev Migration Patch 8d6161c Replace openstack.org git:// URLs with https:// 463eab4 Update hacking version a446475 Change openstack-dev to openstack-discuss 6b9efeb Add Python 3.6 classifier to setup.cfg fcec6ca add python 3.6 unit test job dfba415 Add python3 compatibility for guest logs features e796d97 Add scenario tests to gate and check pipeline 494c332 Update min tox version to 2.0 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 61 +++++++------- ...delete-database-instances-7938121487fb11e9.yaml | 2 + ...l-database-instance-admin-3f1b83a487dd11e9.yaml | 3 + setup.cfg | 3 +- test-requirements.txt | 2 +- tox.ini | 4 +- troveclient/__init__.py | 4 +- troveclient/common.py | 2 +- troveclient/compat/cli.py | 7 +- troveclient/compat/mcli.py | 3 +- troveclient/osc/v1/base.py | 34 ++++++++ troveclient/osc/v1/database_instances.py | 76 +++++++++++++----- troveclient/service_catalog.py | 8 +- troveclient/utils.py | 5 ++ troveclient/v1/backups.py | 4 +- troveclient/v1/client.py | 6 +- troveclient/v1/instances.py | 4 +- troveclient/v1/management.py | 27 +++---- troveclient/v1/shell.py | 22 +++--- 25 files changed, 291 insertions(+), 156 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0503eb1..a39ef08 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0

1 0

ironic-lib 2.14.2 (rocky)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are excited to announce the release of: ironic-lib 2.14.2: Ironic common library This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://bugs.launchpad.net/ironic-lib/+bugs For more details, please see below. 2.14.2 ^^^^^^ Bug Fixes * Fixes an issues when parsing GPT partitions with names or multiple flags. See story 2005322 (https://storyboard.openstack.org/#!/story/2005322) for details. Changes in ironic-lib 2.14.1..2.14.2 ------------------------------------ 9731ae3 Include partiton name and flags from parted output 929da3c OpenDev Migration Patch 2adb02c Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ironic_lib/disk_utils.py | 8 ++-- .../run.yaml | 10 ++--- .../run.yaml | 10 ++--- .../run.yaml | 10 ++--- .../run.yaml | 10 ++--- .../extend-list-partitions-b71f81c77f6ecfdb.yaml | 6 +++ zuul.d/legacy-ironic-lib-jobs.yaml | 2 +- 9 files changed, 75 insertions(+), 27 deletions(-)

1 0

nova 19.0.1 (stein)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are tickled pink to announce the release of: nova 19.0.1: Cloud computing fabric controller This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 19.0.1 ^^^^^^ Bug Fixes * The os-volume_attachments update API, commonly referred to as the swap volume API will now return a "400" (BadRequest) error when attempting to swap from a multi attached volume with more than one active read/write attachment resolving bug #1775418. (https://developer.openstack.org/api-ref/compute/?expanded=update-a -volume-attachment-detail) (https://launchpad.net/bugs/1775418) * Fixes a bug that caused Nova to fail on mounting Quobyte volumes whose volume URL contained multiple registries. Changes in nova 19.0.0..19.0.1 ------------------------------ 8569eb9b4f Workaround missing RequestSpec.instance_group.uuid 8478a75480 Add regression recreate test for bug 1830747 95ace7cf8d [ironic] Don't remove instance info twice in destroy 9b21d1067a Block swap volume on volumes with >1 rw attachment b8f2cd689f cleanup evacuated instances not on hypervisor b45f47c757 Fix live-migration when glance image deleted dc7eb62c27 docs: Don't version links to reno docs 77a339c4e8 Allow driver to properly unplug VIFs on destination on confirm resize 84bb00a86d Move get_pci_mapping_for_migration to MigrationContext 656aa1cd40 Fixes multi-registry config in Quobyte driver ea71592d7a [stable-only] Improve the reno for consoleauth upgrade check c094a6ef0c Disable limit if affinity(anti)/same(different)host is requested 4ff46ff767 Restore connection_info after live migration rollback f1280ab849 libvirt: Do not reraise DiskNotFound exceptions during resize e13513010f Fix target used in nova.policy.check_is_admin 2f7b1031a9 Stop logging traceback when skipping quiesce 8330ab4e61 Skip _exclude_nested_providers() if not nested d250834734 Fix assert methods in unit tests 61fef49b15 Fix retry of instance_update_and_get_original d7d7f11543 Add functional confirm_migration_error test cfc3fa4908 Only call _fill_provider_mapping if claim succeeds 1c774315a5 Handle placement error during re-schedule c38a821902 Fix exception type in test_boot_reschedule_fill_provider_mapping_raises 07a1a8ff7d Reproduce bug #1819460 in functional test a2b1ef5f11 Log when port resource is leaked during port delete 91282f879c Use migration_status during volume migrating and retyping af07ddb734 Exclude fake marker instance when listing servers 840f109afc Add regression test for bug 1825034 1d4f64b190 Include all network devices in nova diagnostics 048d5b790f libvirt: Always disconnect volumes after libvirtError exceptions b3dedefcc5 libvirt: Stop ignoring unknown libvirtError exceptions during volume attach 3285210add Fix volume-backed resize with a smaller disk flavor b123b05a48 Fix help for ironic.peer_list config a1db4507ac Add functional regression recreate test for bug 1825020 c6432ac021 libvirt: Avoid using os-brick encryptors when device_path isn't provided c280d747fb AZ list performance optimization: avoid double service list DB fetch 64793cf6f7 xenapi/agent: Change openssl error handling 7cd816f43a Do not perform port update in case of baremetal instance. 222f462444 Pass on region when we don't have a valid ironic endpoint 870e5bcfb6 Create request spec, build request and mappings in one transaction e6ca3838d9 Fix {min|max}_version in ironic Adapter setup b3b1e6d4da OpenDev Migration Patch 7500c1910c libvirt: set device address tag only if setting disk unit 2bbd7f4a0c Change a log level for overwriting allocation d773e3b146 libvirt: disconnect volume when encryption fails fe5c8a517a Do not log a warning about not using compute monitors ef25fff5ec doc: Capitalize keystone domain name 5f515060f6 Delete allocations even if _confirm_resize raises 17e6ca7272 Don't warn on network-vif-unplugged event during live migration 972d4e0eb3 Error out migration when confirm_resize fails 6a5be4ae25 Fix bug preventing forbidden traits from working c97466456f Adding tests to demonstrate bug #1821824 b1b28169af Move create of ComputeAPI object in websocketproxy 76dfb9d0b6 Do not persist RequestSpec.ignore_hosts 20c1414945 Add functional regression test for bug 1669054 bcb42a43a9 Temporarily mutate migration object in finish_revert_resize 99b3f44eb1 Add retry_on_deadlock to migration_update DB API 7ccea385b1 doc: Fix openstack CLI command 26e5991283 Update instance.availability_zone on revertResize 0b2345442d Add functional recreate test for bug 1819963 eec39762cf Fix incomplete instance data returned after build failure a98fb711b5 Use Selection object to fill request group mapping ae40ceba84 Override the 'get' method in DriverBlockDevice class d0f540742e Eventlet monkey patching should be as early as possible Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- api-ref/source/os-volume-attachments.inc | 3 + nova/__init__.py | 11 - nova/api/openstack/__init__.py | 1 + nova/api/openstack/compute/availability_zone.py | 16 +- nova/api/openstack/compute/views/servers.py | 6 +- nova/api/openstack/compute/volumes.py | 3 +- .../placement/handlers/allocation_candidate.py | 44 +-- .../placement/objects/resource_provider.py | 49 +++- nova/api/openstack/wsgi_app.py | 2 - nova/availability_zones.py | 23 +- nova/cmd/__init__.py | 6 +- nova/compute/api.py | 170 ++++++++++- nova/compute/manager.py | 311 ++++++++++++++------ nova/compute/monitors/__init__.py | 10 +- nova/conductor/manager.py | 110 ++++--- nova/conf/compute.py | 6 +- nova/conf/ironic.py | 10 +- nova/console/websocketproxy.py | 14 +- nova/context.py | 6 +- nova/db/sqlalchemy/api.py | 22 +- nova/exception.py | 9 + nova/monkey_patch.py | 97 ++++++ nova/network/neutronv2/api.py | 47 +-- nova/objects/migration_context.py | 32 ++ nova/objects/request_spec.py | 22 +- nova/policy.py | 2 +- nova/scheduler/client/report.py | 8 +- nova/scheduler/utils.py | 9 +- nova/test.py | 3 +- .../functional/libvirt/test_pci_sriov_servers.py | 76 +++++ .../functional/regressions/test_bug_1669054.py | 79 +++++ .../functional/regressions/test_bug_1825020.py | 80 +++++ .../functional/regressions/test_bug_1825034.py | 88 ++++++ .../functional/regressions/test_bug_1830747.py | 149 ++++++++++ .../openstack/compute/test_availability_zone.py | 92 ++++-- .../unit/api/openstack/compute/test_volumes.py | 75 +++++ nova/utils.py | 21 -- nova/virt/block_device.py | 8 + nova/virt/driver.py | 13 + nova/virt/fake.py | 6 +- nova/virt/ironic/client_wrapper.py | 12 +- nova/virt/ironic/driver.py | 18 +- nova/virt/libvirt/driver.py | 94 ++++-- nova/virt/libvirt/imagebackend.py | 14 +- nova/virt/libvirt/volume/quobyte.py | 54 ++-- nova/virt/libvirt/volume/volume.py | 17 +- nova/virt/xenapi/agent.py | 17 +- nova/volume/cinder.py | 3 + playbooks/legacy/nova-cells-v1/run.yaml | 6 +- .../legacy/nova-grenade-live-migration/run.yaml | 8 +- playbooks/legacy/nova-live-migration/run.yaml | 6 +- playbooks/legacy/nova-lvm/run.yaml | 6 +- playbooks/legacy/nova-next/run.yaml | 6 +- .../notes/bug-1775418-754fc50261f5d7c3.yaml | 10 + ...status-check-consoleauths-618acb3a67f97418.yaml | 10 +- .../notes/qb-bug-1730933-6695470ebaee0fbd.yaml | 5 + 97 files changed, 3356 insertions(+), 875 deletions(-)

1 0

puppet-trove 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We exuberantly announce the release of: puppet-trove 15.0.0: Puppet module for OpenStack Trove This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add openstackclient installation to the client class. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-trove 14.4.0..15.0.0 -------------------------------------- 742ce23 Fix client spec test 321a15b Add openstackclient installation to the client class 2cbfbf7 Deprecate idle_timeout option b7ddd3b Move to opendev 90e75ef Fix Repository 99726b2 Replace git.openstack.org with opendev.org/openstack 307fff8 OpenDev Migration Patch 44a2c6a Add Beaker-Rspec to the table of contents c8234d2 Bump version for the start of Train 4ba3084 Update master for stable/stein ca4c7ec Provide more useful fail message Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 13 ++--- manifests/client.pp | 2 + manifests/db.pp | 61 +++++++++++++--------- manifests/params.pp | 3 +- metadata.json | 10 ++-- ...dd-openstackclient-client-aa12e000df7722b3.yaml | 3 ++ ...te_idle_timeout_parameter-a47e878d44bf161b.yaml | 4 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/classes/trove_client_spec.rb | 3 ++ spec/classes/trove_db_spec.rb | 48 ++++++++--------- tox.ini | 2 +- 14 files changed, 97 insertions(+), 63 deletions(-)

1 0

puppet-nova 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are jazzed to announce the release of: puppet-nova 15.0.0: Puppet module for OpenStack Nova This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Adds the cross_az_attach parameter to allow configuring attach between instance and volume in different availability zones. * Add the log_file option for logging. * The ca_file is now configurable for the TLS transport in nova's live migration options for libvirt. * The crl_file is now configurable for the TLS transport in nova's live migration options for libvirt. * Add parameter *num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. * Add parameter *live_migration_wait_for_vif_plug* to whether to wait for "network-vif-plugged" events before starting guest transfer. * Indicates that the nova-metadata API service has been deployed per- cell, so that we can have better performance and data isolation in a multi-cell deployment. Users should consider the use of this configuration depending on how neutron is setup. If networks span cells, you might need to run nova-metadata API service globally. If your networks are segmented along cell boundaries, then you can run nova-metadata API service per cell. When running nova-metadata API service per cell, you should also configure each Neutron metadata- agent to point to the corresponding nova-metadata API service. * The libvirt driver allows passing different mount options to the nfs client. "[libvirt]/nfs_mount_options", defaulting to <None>. Upgrade Notes ************* * The default value for nova::metadata::novajoin::api::project_name has been changed from 'service' to 'services'. * The nova-consoleauth service is now deprecated and not deployed. This means the nova::consoleauth has no effect now and does not manage the package or service for consoleauth. Deployments should stop this service and remove the package if it's deployed. * The deprecated cells v1 classes nova::cells, nova::manage::cells and the nova_cells resource is removed. * The following deprecated parameters in nova::quota has been removed. Please see the name in paranthesis for the new proper name. * "quota_instances" (now "instances") * "quota_cores" (now "cores") * "quota_ram" (now "ram") * "quota_floating_ips" (now "floating_ips") * "quota_fixed_ips" (now "fixed_ips") * "quota_metadata_items" (now "metadata_items") * "quota_injected_files" (now "injected_files") * "quota_injected_file_content_bytes" (now "injected_file_content_bytes") * "quota_injected_file_path_length" (now "injected_file_path_length") * "quota_security_groups" (now "security_groups") * "quota_security_group_rules" (now "security_group_rules") * "quota_key_pairs" (now "key_pairs") * "quota_server_groups" (now "server_groups") * "quota_server_group_members" (now "server_group_members") * The deprecated nova-network classes nova::network::bridge, nova::network::flat, nova::network::flatdhcp and nova::network::vlan classes is now removed. * The deprecated nova_network resource is now removed. * The deprecated class nova::compute::neutron is now removed. * The deprecated class nova::manage::network is now removed. * The deprecated parameter nova::use_ipv6 is now removed. Deprecation Notes ***************** * The nova-consoleauth service is deprecated. The nova::consoleauth class has no effect now and will be removed in the next release. * The nova::upgrade_level_consoleauth parameter is deprecated, has no effect and will be removed in the next release. * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Bug Fixes ********* * Add cinder credentials in cinder section of nova conf to fix issue when reclaim_instance_interval > 0 and delete instance which booted from volume 'delete_on_termination' set as true. The volume status showing attached and in-use, even after instance deletion, since the admin context didn't have any token info hence call to cinder api failed. In case when context is is_admin and without token,added cinder creds used to do authentication with user/project info to call cinder api. [Bug 1734025 (https://bugs.launchpad.net/nova/+bug/1734025) Changes in puppet-nova 14.4.0..15.0.0 ------------------------------------- 3e7cd13 Add parameter for `libvirt/num_pcie_ports` 282ef4e Add parameter for `compute/live_migration_wait_for_vif_plug` 2156248 Consistent project name a738129 Deprecate nova-consoleauth service 10abd32 Revert "Remove deprecated nova::network::neutron params" 9950ec3 Fix client spec test 848ac0b Add cinder credentials in nova conf b3028e6 Change to use non-deprecated security group rule syntax 8cae2de Remove nova-network code 561e16a Remove deprecated nova::network::neutron params 07993b7 Remove deprecated quota parameters 5302224 Remove cells v1 code d59b2ea Port puppet-nova-tripleo-standalone to os_tempest 4478fdc Deprecate idle_timeout option c7d1f40 placement: Remove service deployment from puppet-nova ba2f95c Move to opendev 767516c Move to opendev 2d08a57 Fix Repository 7dabb32 Replace git.openstack.org with opendev.org/openstack b3d96d4 OpenDev Migration Patch 366aaf2 Move cross_az_attach above deprecated params fd7587d Include nova::availability_zone in scheduler.pp 4ee717d Add local_metadata_per_cell option 6afa191 Bump version for the start of Train fa7fbd9 Update master for stable/stein ae9fc45 Enable configuration of ca_file and crl_file for nova live migration 958c5b2 Adds the cross_az_attach parameter 709affe Debian: Fix Nova serial proxy package name 9f12976 Adds functionality to modudify the nfs clients mount options a538d92 Correct virtlock / virtlogd service names for Debian. Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 5 +- Gemfile | 2 +- README.md | 4 +- examples/nova_with_pacemaker.pp | 6 - lib/puppet/provider/nova_cells/nova_manage.rb | 92 --------- lib/puppet/provider/nova_network/nova.rb | 43 ---- .../provider/nova_security_rule/openstack.rb | 6 +- lib/puppet/type/nova_cells.rb | 117 ----------- lib/puppet/type/nova_network.rb | 71 ------- manifests/cells.pp | 222 --------------------- manifests/cinder.pp | 78 ++++++++ manifests/compute.pp | 46 +++-- manifests/compute/libvirt.pp | 16 ++ manifests/compute/neutron.pp | 50 ----- manifests/consoleauth.pp | 14 +- manifests/db.pp | 84 +++----- manifests/db/mysql_placement.pp | 67 ------- manifests/deps.pp | 11 - manifests/init.pp | 49 ++--- manifests/keystone/auth_placement.pp | 101 ---------- manifests/manage/cells.pp | 94 --------- manifests/manage/network.pp | 75 ------- manifests/metadata.pp | 14 ++ manifests/metadata/novajoin/api.pp | 4 +- manifests/migration/libvirt.pp | 24 +++ manifests/network/bridge.pp | 47 ----- manifests/network/flat.pp | 46 ----- manifests/network/flatdhcp.pp | 83 -------- manifests/network/vlan.pp | 76 ------- manifests/params.pp | 33 +-- manifests/placement.pp | 51 +---- manifests/placement/service.pp | 65 ------ manifests/quota.pp | 117 ++--------- ..._vendordata_from_metadata-5bc86b342574d8e8.yaml | 2 +- manifests/scheduler.pp | 1 + manifests/wsgi/apache_placement.pp | 189 ------------------ metadata.json | 16 +- .../notes/add-cinder-creds-91a50b74c8bdb541.yaml | 12 ++ ...ross-az-attach-parameters-3ebc84f8882dd941.yaml | 4 + ...migration_with_native_tls-4293ca305e98cdc3.yaml | 2 +- .../consistent-project-name-40ef75b7e11461f4.yaml | 5 + .../deprecate-consoleauth-7c39573925d3f6a7.yaml | 14 ++ ...te_idle_timeout_parameter-93d5ad93f8e43c2c.yaml | 4 + ...cate_notify_on_api_faults-c7eb47adc3c92671.yaml | 2 +- .../libvirt-ca-file-crl-file-c6672aa3d12382cb.yaml | 8 + .../libvirt_num_pcie_ports-427923117bd13a65.yaml | 8 + ...gration_wait_for_vif_plug-b50f7840c4da6659.yaml | 6 + .../local_metadata_per_cell-5b8f56d8d97510a3.yaml | 12 ++ ...nfs_mount_options_support-97b15b09475b5b21.yaml | 6 + .../notes/remove-cells-v1-62de6d3d3a782df1.yaml | 5 + .../remove-deprecated-quota-aee8756d8d13bd8b.yaml | 20 ++ .../remove-nova-network-ac5d104fd47e3efc.yaml | 13 ++ ...der_catalog_info_v2_to_v3-c5d442dbbae2327e.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + spec/classes/nova_api_spec.rb | 8 +- spec/classes/nova_cells_spec.rb | 170 ---------------- spec/classes/nova_cinder_spec.rb | 59 ++++++ spec/classes/nova_client_spec.rb | 1 + spec/classes/nova_compute_libvirt_spec.rb | 11 +- spec/classes/nova_compute_neutron_spec.rb | 50 ----- spec/classes/nova_compute_spec.rb | 4 + spec/classes/nova_conductor_spec.rb | 8 +- spec/classes/nova_consoleauth_spec.rb | 34 ---- spec/classes/nova_db_mysql_placement_spec.rb | 85 -------- spec/classes/nova_db_spec.rb | 28 +-- spec/classes/nova_init_spec.rb | 7 +- spec/classes/nova_keystone_auth_placement_spec.rb | 195 ------------------ spec/classes/nova_metadata_novajoin_api_spec.rb | 4 +- spec/classes/nova_metadata_spec.rb | 11 +- spec/classes/nova_migration_libvirt_spec.rb | 12 ++ spec/classes/nova_network_flat_spec.rb | 38 ---- spec/classes/nova_network_flatdhcp_spec.rb | 50 ----- spec/classes/nova_network_vlan_spec.rb | 48 ----- spec/classes/nova_placement_spec.rb | 46 ----- spec/classes/nova_quota_spec.rb | 38 ---- spec/classes/nova_scheduler_spec.rb | 8 +- spec/classes/nova_serial_proxy_spec.rb | 9 +- spec/classes/nova_wsgi_apache_placement_spec.rb | 147 -------------- spec/defines/nova_manage_networks_spec.rb | 74 ------- spec/fixtures/manifests/site.pp | 1 - spec/hosts/test-001_spec.rb | 6 +- spec/unit/provider/nova_network/nova_spec.rb | 64 ------ .../provider/nova_security_rule/openstack_spec.rb | 2 +- spec/unit/type/nova_network_spec.rb | 12 -- tox.ini | 2 +- 87 files changed, 510 insertions(+), 2875 deletions(-)

1 0

puppet-neutron 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We joyfully announce the release of: puppet-neutron 15.0.0: Puppet module for OpenStack Neutron This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add openstackclient installation to the client class. * Added the ability to configure rpc_response_max_timeout. Upgrade Notes ************* * The default value for neutron::plugins::cisco::keystone_auth_url is changed from http://127.0.0.1:5000/v2.0/ to http://127.0.0.1:5000/v3/ * The default value for neutron::plugins::plumgrid::connection is changed from http://127.0.0.1:5000/v2.0 to http://127.0.0.1:5000/v3 * The default value for neutron::plugins::midonet::keystone_tenant and neutron::plugins::ml2::bigswitch::restproxy::auth_tenant has been changed from 'service' to 'services'. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Bug Fixes ********* * As of Queens the neutron-vpn-agent package for Ubuntu is no longer provided and has been replaced with the package python-neutron- vpnaas. * On Debian there is no package named openswan and the package that should be installed for VPNaaS is strongswan. Changes in puppet-neutron 14.4.0..15.0.0 ---------------------------------------- 4a7a2ab Consistent project name 33574de Add openstackclient installation to the client class 60d755c Port puppet-neutron-tripleo-standalone job to os_tempest 7de1fd6 Deprecate idle_timeout option 17fe2a3 Move to opendev 46b1e4d Fix incorrect VPNaaS packages c73d43a Move to opendev 7e21982 Fix Repository 8f6c151 Replace git.openstack.org with opendev.org/openstack fd1e02d OpenDev Migration Patch a1efe2c Unified agent section of ini files 2a80b8e Add Beaker-Rspec to the table of contents bfbef8b Fix polling_interval section for sriov agent d0842b0 Correct the ovn option name for vhost socket directory ff403bc Add rpc_response_max_timeout d5cc8d3 Remove br-tun check from beaker c24b1dd Add DPDK support for OVN ba5082d Bump version for the start of Train c861149 Fix dependency cycle from Mellanox ML2 plugin 888c8dc Deprecate nova_metadata_ip 2f100ff Update master for stable/stein 4341812 Change keystone v2.0 to v3 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 7 +-- Gemfile | 2 +- README.md | 13 +++--- lib/puppet/provider/neutron.rb | 2 +- manifests/agents/dhcp.pp | 2 +- manifests/agents/l3.pp | 4 +- manifests/agents/metadata.pp | 15 ++++-- manifests/agents/ml2/sriov.pp | 2 +- manifests/client.pp | 2 + manifests/db.pp | 54 ++++++++++++++-------- manifests/init.pp | 2 +- manifests/params.pp | 4 +- manifests/plugins/cisco.pp | 4 +- manifests/plugins/midonet.pp | 2 +- manifests/plugins/ml2/bigswitch/restproxy.pp | 2 +- manifests/plugins/ml2/mellanox.pp | 2 +- manifests/plugins/ml2/midonet.pp | 2 +- manifests/plugins/ml2/ovn.pp | 7 +++ manifests/plugins/plumgrid.pp | 4 +- manifests/server.pp | 6 +++ manifests/services/fwaas.pp | 3 +- metadata.json | 14 +++--- ...of-neutron-vpnaas-service-eb981d400e4d7c3e.yaml | 2 +- ...dd-openstackclient-client-b004bb8103268611.yaml | 3 ++ ...-rpc_response_max_timeout-9c6c8a33c0f1c376.yaml | 4 ++ .../notes/change-keystone-v3-971aae0570c1f364.yaml | 8 ++++ .../consistent-project-name-6e29ffc13a767486.yaml | 6 +++ ...te_idle_timeout_parameter-8ea770612f1c9102.yaml | 4 ++ .../notes/lbaasv2-default-066d13cf24fc4c49.yaml | 2 +- ...vpnaas_ubuntu_package_fix-7c0e74066ad01e7e.yaml | 8 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/acceptance/basic_neutron_spec.rb | 3 +- spec/classes/neutron_agents_dhcp_spec.rb | 4 +- spec/classes/neutron_agents_l3_spec.rb | 6 +-- spec/classes/neutron_agents_metadata_spec.rb | 1 - spec/classes/neutron_agents_ml2_sriov_spec.rb | 2 +- spec/classes/neutron_agents_vpnaas_spec.rb | 2 +- spec/classes/neutron_client_spec.rb | 2 + spec/classes/neutron_db_spec.rb | 54 +++++++++++----------- spec/classes/neutron_plugins_cisco_spec.rb | 2 +- ...neutron_plugins_ml2_bigswitch_restproxy_spec.rb | 4 +- spec/classes/neutron_plugins_ml2_mellanox_spec.rb | 2 +- spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +++ spec/classes/neutron_plugins_opencontrail_spec.rb | 2 +- spec/classes/neutron_plugins_plumgrid_spec.rb | 2 +- spec/classes/neutron_server_notifications_spec.rb | 8 ++-- spec/classes/neutron_server_placement_spec.rb | 8 ++-- spec/classes/neutron_server_spec.rb | 1 + spec/classes/neutron_services_fwaas_spec.rb | 4 +- spec/classes/neutron_services_vpnaas_spec.rb | 2 +- .../neutron_security_group/openstack_spec.rb | 2 +- spec/unit/provider/neutron_spec.rb | 2 +- tox.ini | 2 +- 55 files changed, 205 insertions(+), 117 deletions(-)

1 0

puppet-openstack_extras 15.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are psyched to announce the release of: puppet-openstack_extras 15.0.0: Puppet module for OpenStack Openstack_extras This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 14.4.0..15.0.0 ------------------------------------------------- 266f24c Fix setting-up Buster's backport repository 4193298 Move to opendev d9ba195 Fix Repository 6d5f849 Replace git.openstack.org with opendev.org/openstack 6129737 OpenDev Migration Patch 63e2294 Update repos to Train 699910c Bump version for the start of Train 2db03b2 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 4 ++-- manifests/repo/debian/debian.pp | 4 +++- manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 4 ++-- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ spec/classes/openstack_extras_repo_debian_debian_spec.rb | 10 +++++----- spec/classes/openstack_extras_repo_debian_ubuntu_spec.rb | 6 +++--- spec/classes/openstack_extras_repo_redhat_redhat_spec.rb | 10 +++++----- tox.ini | 2 +- 13 files changed, 32 insertions(+), 23 deletions(-)

1 0

puppet-glare 4.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We are stoked to announce the release of: puppet-glare 4.0.0: Puppet module for OpenStack Glare This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-glare Download the package from: https://tarballs.openstack.org/puppet-glare/ Please report issues through: https://bugs.launchpad.net/puppet-glare/+bugs For more details, please see below. 4.0.0 ^^^^^ Deprecation Notes * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-glare 3.4.0..4.0.0 ------------------------------------ 625ef78 Deprecate idle_timeout option 4219400 Move to opendev 9267b66 Fix Repository c192118 Replace git.openstack.org with opendev.org/openstack 706e2ac OpenDev Migration Patch 324b498 Configure vcenter_password as secret a3a3583 Add Beaker-Rspec to the table of contents e5b01d1 Bump version for the start of Train 866466d Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 13 +++--- manifests/backend/vsphere.pp | 2 +- manifests/db.pp | 52 +++++++++++++-------- metadata.json | 10 ++-- ...te_idle_timeout_parameter-bb16d5b5b4300b0f.yaml | 4 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ spec/classes/glare_backend_vsphere_spec.rb | 2 +- spec/classes/glare_db_spec.rb | 54 +++++++++++----------- tox.ini | 2 +- 12 files changed, 88 insertions(+), 62 deletions(-)

1 0

puppet-qdr 4.0.0 (train)
by no-reply＠openstack.org 06 Jun '19

06 Jun '19

We high-spiritedly announce the release of: puppet-qdr 4.0.0 This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-qdr Download the package from: https://tarballs.openstack.org/puppet-qdr/ Please report issues through: https://bugs.launchpad.net/puppet-qdr/+bugs For more details, please see below. Changes in puppet-qdr 3.4.0..4.0.0 ---------------------------------- 43522c5 MetricsQdr: fix minor spacing issue in qdrouterd template ad40016 Move to opendev bab38de Fix Repository 33f6f8b OpenDev Migration Patch 32b0d2c Bump version for the start of Train fa0bb78 Update master for stable/stein f07ef21 Provide more useful fail message Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Gemfile | 2 +- README.md | 2 +- manifests/params.pp | 3 ++- metadata.json | 4 ++-- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ templates/qdrouterd.conf.erb | 2 +- tox.ini | 2 +- 9 files changed, 16 insertions(+), 8 deletions(-)

1 0