June 2019 - Release-announce - lists.openstack.org

tooz 1.65.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are chuffed to announce the release of: tooz 1.65.0: Coordination library for distributed systems. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 1.64.2..1.65.0 ------------------------------ ef5277d Move test deps to test-requirements.txt 8793340 Remove unused requirements. 89b61cd Update Sphinx requirement and uncap grpcio 42672e3 Referencing testenv deps now works d2dec45 Update master for stable/stein 96633f3 Replace git.openstack.org URLs with opendev.org URLs d47b1a7 Remove py35, add py37 classifiers 8207427 Unblock tooz gate c02f9dd OpenDev Migration Patch de3a5f8 add python 3.7 unit test job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 110 ++++++++++++++------------ README.rst | 2 +- playbooks/stop-redis.yaml | 12 +++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 2 +- setup.cfg | 17 +--- test-requirements.txt | 12 +++ tox.ini | 40 ++-------- 16 files changed, 118 insertions(+), 117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b2aee6d..9dab502 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ oslo.serialization>=1.10.0 # Apache-2.0 -grpcio>=1.0.0,<1.16.0 +grpcio>=1.18.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..77d9ee3 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,12 @@ + +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +mock>=2.0 # BSD +python-subunit>=0.0.18 # Apache-2.0/BSD +testtools>=1.4.0 # MIT +coverage>=3.6 # Apache-2.0 +fixtures>=3.0.0 # Apache-2.0/BSD +pifpaf>=0.10.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 +stestr>=2.0.0

1 0

octavia-lib 1.2.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are stoked to announce the release of: octavia-lib 1.2.0: A library to support Octavia provider drivers. This release is part of the train release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 1.2.0 ^^^^^ New Features * Add the ability to pass multiple VIP objects to providers. This allows for multiple subnets/IPs on a single LB. Changes in octavia-lib 1.1.1..1.2.0 ----------------------------------- 7c9cb9d Add 'additional_vips' field to driver datamodel 625f171 Replace git.openstack.org URLs with opendev.org URLs 5376e03 Add project_id to all of the data model objects 3fc6659 Cap sphinx for py2 to match global requirements effa28a Add python 3.7 testing 94aef0a OpenDev Migration Patch 1215103 Remove python3.5 jobs for Train e631497 Remove testtools from test-requirements.txt c9ae679 Do not install README.rst and LICENSE d6def9c Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 ++++ .gitreview | 2 +- README.rst | 2 +- octavia_lib/api/drivers/data_models.py | 23 +++++++++++++++------- ...dd-additional-vip-support-becdb29c5187b514.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 6 +----- test-requirements.txt | 1 - tox.ini | 6 +++--- zuul.d/projects.yaml | 2 +- 15 files changed, 60 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f0ad8f1..56a501c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +15,0 @@ stestr>=2.0.0 # Apache-2.0 -testtools>=2.2.0 # MIT

1 0

openstacksdk 0.31.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We joyfully announce the release of: openstacksdk 0.31.0: An SDK for building applications to work with OpenStack This release is part of the train release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.31.0 ^^^^^^ New Features ************ * "has_{service_type}" is a boolean config option that allows asserting that a given service does not exist or should not be used in a given cloud. Doing this will now cause the corresponding service "Proxy" object to not be created and in its place is an object that will throw exceptions if used. * "{service_type}_disabled_reason" is a new string config option that can be set to indicate a reason why a service has been disabled. This string will be used in exceptions or log warnings emitted. Bug Fixes ********* * The baremetal calls "wait_for_nodes_provision_state", "wait_for_allocation" and the baremetal introspection call "wait_for_introspection" now raise "ResourceFailure" on reaching an error state instead of a generic "SDKException". Changes in openstacksdk 0.30.0..0.31.0 -------------------------------------- f4fa6fab baremetal: raise more specific ResourceFailure in wait_for_* methods f7860861 Pin to latest os-service-types 3bac4abb Add release note for new disable service functionality 879f7d4f Minor fixups from from_conf changes 82079022 Handle oslo.config exceptions in from_conf 38847204 Support skipping unknown QP Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 2 +- openstack/baremetal/v1/_proxy.py | 6 +++ openstack/baremetal/v1/allocation.py | 5 +- openstack/baremetal/v1/node.py | 15 ++++-- openstack/baremetal_introspection/v1/_proxy.py | 3 ++ .../baremetal_introspection/v1/introspection.py | 5 +- openstack/cloud/openstackcloud.py | 2 +- openstack/config/cloud_region.py | 63 +++++++++++++++++++--- openstack/connection.py | 1 + openstack/exceptions.py | 4 ++ openstack/resource.py | 50 +++++++++++------ openstack/service_description.py | 17 ++++++ .../unit/baremetal_introspection/v1/test_proxy.py | 2 +- .../notes/baremetal-wait-e4571cdb150b188a.yaml | 7 +++ .../notes/disable-service-39df96ef8a817785.yaml | 12 +++++ requirements.txt | 2 +- 22 files changed, 280 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9062efb8..42da24b3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ six>=1.10.0 # MIT -os-service-types>=1.2.0 # Apache-2.0 +os-service-types>=1.7.0 # Apache-2.0

1 0

sushy 1.9.0 (train)
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are amped to announce the release of: sushy 1.9.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the train release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 1.9.0 ^^^^^ New Features ************ * "Bios" resource introduces "update_status" property that exposes the status and any errors of last BIOS attribute update. * Adds the "IndicatorLED" property to the "Drive" resource. The state of the LED can be read and can be changed via the ".set_indicator_led()" method of the "Drive" sushy class. * Adds support for the Fabric resource to the library. * Adds the Power resource to the Library. * Adds mappings and constants for possible values of System Type in System resource. This represents the type of the computer system. * Adds the Thermal resource to the Library. * Adds "CapacityBites", "Manufacturer", "Model", "PartNumber", "SerialNumber" and "Status" properties to the "Drive" resource. * The "IndicatorLED" property of "System" and "Chassis" resources made settable with the introduction of the ".set_indicator_led()" method to the respective sushy classes. * Update sushy models to support the Redfish SettingsApplyTime and OperationApplyTimeSupport annotations. Deprecation Notes ***************** * Deprecates system-specific indicator LEDs as redundant. The "SYSTEM_INDICATOR_LED_LIT", "SYSTEM_INDICATOR_LED_BLINKING", "SYSTEM_INDICATOR_LED_OFF" and "SYSTEM_INDICATOR_LED_UNKNOWN" constants should not be used. Generic indicator LED constants should be used instead. Those are "INDICATOR_LED_LIT", "INDICATOR_LED_BLINKING", "INDICATOR_LED_OFF" and "INDICATOR_LED_UNKNOWN" respectively. * The "operation_apply_time_support" and "maintenance_window" properties in the "SettingsField" class are deprecated. The "SettingsField" class represents the "@Redfish.Settings" annotation and those properties cannot appear within this annotation. Instead use the "apply_time_settings" property in the target resource (e.g. "Bios" resource). Other Notes *********** * Includes Redfish standard message registry files that are licensed under Creative Commons Attribution 4.0 License: https://creativecommons.org/licenses/by/4.0/ Changes in sushy 1.8.0..1.9.0 ----------------------------- 6f4539d Use collections.abc instead of collections when available 51032b6 Add @Redfish.Settings update status and expose it for BIOS 74e37a7 Update sphinx requirements 6cb68f8 Cleanup for Standard message registry loading 188a72c Add Power and Thermal resources to Chassis 103737a update git.openstack.org to opendev 3630088 OpenDev Migration Patch f2cf60f Deprecate System-specific `IndicatorLED` state constants fa09bbc Dropping the py35 testing 2f08e09 Update model to support ApplyTime annotations ad15a88 Adding Power resource schema 324f564 Expand Drive schema 87dcc7a Adding Thermal resource schema 4ad580b Add settable `IndicatorLED` property to the `Drive` resource c8a6354 Add settable `IndicatorLED` of `System` and `Chassis` d35a30f Add versions to release notes series e348ac8 Add mappings for `system_type` 680d023 Add `FabricCollection` and `Fabric` classes 5b5794d Change sushy devstack job to python3 fc311f9 Fix wrong default JsonDataReader() argument fa8ce98 Add public resource loading and message parsing 7993f04 Add support for loading packaged standard registries 798458d Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 5 +- .../add-bios-update-status-cc59816c374b78e4.yaml | 5 + .../notes/add-drive-led-97b687013fec88c9.yaml | 6 + .../notes/add-fabric-support-1520f7fcb0e12539.yaml | 5 + .../notes/add-power-resource-e141ddf298673305.yaml | 4 + .../add-system-type-mapping-bf456c5c15a90877.yaml | 5 + .../add-thermal-resource-5c965a3c940f9028.yaml | 4 + .../deprecate-system-leds-f1a72422c53d281e.yaml | 9 + .../expand-drive-schema-042901f919be646c.yaml | 5 + .../notes/make-leds-settable-c82cb513de0171f5.yaml | 6 + ...standard-registry-license-0ded489afd6cfad1.yaml | 6 + ...update-apply-time-support-53c5445b58cd3b42.yaml | 13 + releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 +- releasenotes/source/queens.rst | 6 +- releasenotes/source/rocky.rst | 6 +- releasenotes/source/stein.rst | 6 + setup.cfg | 2 +- sushy/__init__.py | 1 + sushy/main.py | 87 +++- sushy/resources/base.py | 47 +- sushy/resources/chassis/chassis.py | 50 ++ sushy/resources/chassis/power/__init__.py | 0 sushy/resources/chassis/power/constants.py | 69 +++ sushy/resources/chassis/power/mappings.py | 40 ++ sushy/resources/chassis/power/power.py | 122 +++++ sushy/resources/chassis/thermal/__init__.py | 0 sushy/resources/chassis/thermal/constants.py | 18 + sushy/resources/chassis/thermal/mappings.py | 18 + sushy/resources/chassis/thermal/thermal.py | 138 ++++++ sushy/resources/common.py | 40 +- sushy/resources/fabric/__init__.py | 0 sushy/resources/fabric/constants.py | 42 ++ sushy/resources/fabric/fabric.py | 77 +++ sushy/resources/fabric/mappings.py | 47 ++ sushy/resources/mappings.py | 2 + sushy/resources/registry/message_registry.py | 26 + sushy/resources/registry/message_registry_file.py | 38 ++ sushy/resources/settings.py | 124 ++++- sushy/resources/system/bios.py | 27 + sushy/resources/system/constants.py | 35 +- sushy/resources/system/mappings.py | 12 + sushy/resources/system/storage/drive.py | 46 +- sushy/resources/system/storage/volume.py | 5 + sushy/resources/system/system.py | 39 +- sushy/standard_registries/Base.1.0.0.json | 466 ++++++++++++++++++ sushy/standard_registries/Base.1.2.0.json | 517 ++++++++++++++++++++ sushy/standard_registries/Base.1.3.0.json | 535 ++++++++++++++++++++ sushy/standard_registries/Base.1.3.1.json | 535 ++++++++++++++++++++ sushy/standard_registries/Base.1.4.0.json | 542 +++++++++++++++++++++ .../resources/registry/test_message_registry.py | 42 ++ .../registry/test_message_registry_file.py | 68 +++ .../unit/resources/system/storage/test_drive.py | 24 + .../unit/resources/system/storage/test_volume.py | 14 +- sushy/utils.py | 14 +- test-requirements.txt | 3 +- tox.ini | 2 +- zuul.d/project.yaml | 3 +- zuul.d/sushy-jobs.yaml | 8 + 81 files changed, 4781 insertions(+), 123 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1d8472a..6f8ebee 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

renderspec 1.11.1
by no-reply＠openstack.org 10 Jun '19

10 Jun '19

We are gleeful to announce the release of: renderspec 1.11.1: Jinja2 template renderer for generating .spec files The source is available from: https://opendev.org/openstack/renderspec Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.11.0..1.11.1 ------------------------------------ 10dba17 Fix _pymod2pkg_translate when skip_pyversion is None Diffstat (except docs and test files) ------------------------------------- renderspec/contextfuncs.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)

1 0

puppet-tripleo 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are amped to announce the release of: puppet-tripleo 11.0.0: Puppet module for OpenStack TripleO This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * Adds ovn_db_host and ovn_nb_port to configure ovn nb connection string for OVN Provider driver. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation * Remove ntp profile and puppet-ntp usage. Deprecation Notes ***************** * The Neutron LBaaS project was retired and support for it in TripleO removed. Bug Fixes ********* * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html Changes in puppet-tripleo 10.4.0..11.0.0 ---------------------------------------- 99b386e3 Bump metadata for Train Milestone 1 f95c6d1b Remove Neutron LBaaS 16c5f169 Make sure we pass the proper new pcs 0.10 variables 44afda83 Allow external Ganesha for the cephfs manila backend dabfc9e1 Add support for external Ganesha service in Manila Share profile 3ef8e3e3 Rebuild initramfs after applying change in kernel parameters c6858e7a Fix amphora provider driver description e76519d2 Fix tripleo::haproxy::stats to be more correct and flexible a869d20b Retiring TripleO-UI 6c2e164a Fix horizon firewall rules in composable roles 8ff689bc Make sure to set umask 022 for nova_migration_target logins 1d3ef8bc Write TLS config under section [client] in tripleo.cnf 1ae89eb0 Include 'octavia' driver on ML2/OVN deployments 578da586 Add nova::cinder to nova compute 710c6173 Remove deprecated admin ssl options e4039299 Remove NovaConsoleauth Service a87f8be7 Let fluentd not create /etc/rsyslog.d/fluentd.conf file 54602918 Update version in metadata.json ce0cffe0 Remove ntp 10216c78 Expose innodb_lock_wait_timeout via hieradata. ccbaeac7 Switch metrics qdrs to edge mode ffdc816e Safeguard against 'Undef' length() checks. afebff58 redis HA: allow SELinux relabel for /var/run/redis 977cf8f5 Remove unused docker_distribution template 5cbead72 Fix puppet unit ci config bacfec86 Implement stonith levels and enable kdump agent. 9de8c4eb Fixup tests for puppet 6 f1ae850e Remove ODL tests fee08693 Remove puppet selinux management 953b4c36 nova: Remove profile::base::nova::placement 42642c45 OpenDev Migration Patch f5d6110a Fix keepalived VIP monitoring script d1bbad06 Bump metadata for release 523fe8ad Fix missing version requirements f2cf8379 Update master for stable/stein d88db3ad Add support to set ovs_nb_connection 2a1167dd Set octavia provider_drivers config option correctly f5a7ca6f Correct how podman exec is called for the neutron-keepalived-state-change 3af5c2f2 placement: Initial extraction of the Placement service from Nova a07db290 Use validate_legacy Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 9 +- manifests/cluster/cassandra.pp | 2 +- manifests/cluster/zookeeper.pp | 2 +- manifests/fencing.pp | 92 +++++--- manifests/firewall/rule.pp | 4 +- manifests/haproxy.pp | 55 +++-- manifests/haproxy/horizon_endpoint.pp | 27 +++ manifests/haproxy/stats.pp | 19 +- manifests/host/liquidio/config.pp | 4 +- manifests/keepalived.pp | 2 +- manifests/network/contrail/config.pp | 7 +- manifests/network/contrail/neutron_plugin.pp | 2 +- manifests/profile/base/aide/rules.pp | 2 +- manifests/profile/base/database/mysql.pp | 15 +- manifests/profile/base/database/mysql/client.pp | 8 +- manifests/profile/base/database/mysql/user.pp | 2 +- manifests/profile/base/etcd.pp | 2 +- manifests/profile/base/kernel.pp | 8 + manifests/profile/base/keystone.pp | 16 +- manifests/profile/base/logging/fluentd.pp | 25 ++- manifests/profile/base/manila/share.pp | 29 ++- manifests/profile/base/metrics/qdr.pp | 11 +- manifests/profile/base/neutron/agents/lbaas.pp | 41 ---- manifests/profile/base/neutron/lbaas.pp | 35 --- manifests/profile/base/neutron/opendaylight.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/consoleauth.pp | 33 --- manifests/profile/base/nova/migration/target.pp | 17 +- manifests/profile/base/octavia/api.pp | 16 +- manifests/profile/base/pacemaker.pp | 20 +- manifests/profile/base/pacemaker_remote.pp | 18 ++ manifests/profile/base/placement.pp | 46 ++++ .../base/{nova/placement.pp => placement/api.pp} | 33 ++- manifests/profile/base/placement/authtoken.pp | 44 ++++ manifests/profile/base/securetty.pp | 3 +- manifests/profile/base/snmp.pp | 2 +- manifests/profile/base/swift/ringbuilder.pp | 2 +- manifests/profile/base/time/ntp.pp | 35 --- .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +- manifests/profile/pacemaker/neutron/lbaas.pp | 44 ---- manifests/selinux.pp | 74 ------- manifests/ui.pp | 238 --------------------- metadata.json | 8 +- ...octavia-ovn-nb-connection-9d5bc428c4ff35af.yaml | 5 + ...a_remove_nova-consoleauth-c126434b3dbda106.yaml | 15 ++ .../remove-neutron-lbaas-f6337e030a200b64.yaml | 12 ++ .../notes/remove-ntp-34d5eb69bfc231b0.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + spec/classes/tripleo_haproxy_spec.rb | 7 +- spec/classes/tripleo_keepalive_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 20 +- .../tripleo_profile_base_logging_fluentd_spec.rb | 9 +- ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 198 ----------------- .../tripleo_profile_base_nova_consoleauth_spec.rb | 62 ------ spec/classes/tripleo_profile_base_nova_spec.rb | 3 - .../tripleo_profile_base_octavia_api_spec.rb | 13 +- ...c.rb => tripleo_profile_base_placement_spec.rb} | 54 ++--- spec/classes/tripleo_profile_base_time_ntp_spec.rb | 39 ---- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- spec/classes/tripleo_selinux_spec.rb | 73 ------- spec/classes/tripleo_ui_spec.rb | 133 ------------ spec/defines/tripleo_haproxy_endpoint_spec.rb | 14 +- spec/fixtures/hieradata/default.yaml | 28 ++- .../docker_distribution/registry_config.yml.erb | 11 - .../neutron/neutron-keepalived-state-change.epp | 9 +- zuul.d/layout.yaml | 6 +- 69 files changed, 551 insertions(+), 1259 deletions(-)

1 0

tripleo-common 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are glad to announce the release of: tripleo-common 11.0.0: A common library for TripleO workflows. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * If the *AdditionalArchitectures* parameter has entries then the container image prepare will prepare images for all architectures instead of just the default one. A new boolean field *multi_arch* can also be set in *ContainerImagePrepare* entries to determine the multi arch behaviour for images in that entry. If any entry sets a *multi_arch* value then *AdditionalArchitectures* is ignored. * tripleo-container-rm is the new role that replaces tripleo-docker- rm which is in charge of tearing down containers running in Docker or Podman. If the container_cli is Podman, the role takes care of systemd cleanup for both the container and its healthcheck if it does exist. Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html * Fixed an issue were amphora load balancers would fail to create. The problem was because Octavia certificate files were being created in a wrong path and with invalid content. * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. Changes in tripleo-common 10.7.0..11.0.0 ---------------------------------------- 7c89493e Add the ability to compute osds number counting lvm devices f15e6ac3 Overcloud-full image templates for RHEL8 b4d13dc8 Add deployed-server bootstrap tasks to tripleo-bootstrap ba3891b3 Add tripleo-hieradata role 6b722063 Template each deployment file e7c5eab7 [CVE-2019-3895] Set image owner id 4de9f78b Fix Octavia certificate file path and content f3a93bff Fix validations_inputs temporary file name 294f67bd fix 404 when requesting empty tripleo container image catalog feb49b8c Handle failed neutron-plugin-ml2.yaml lookup 37fc8e31 Stop sending execution object via Zaqar message c13c9cf5 Enable staging-ovirt (fence_rhevm) fencing agent. 063e4934 Remove NovaConsoleauth Service 5a7081ea Remove duplications of tasks in scale workbook 030ad3e2 workbooks/deployment: add support to choose playbook name 68334a00 workbooks/deployment: add support to filter nodes when running Ansible 5dcad572 Make get_enabled_services() more robust 35cfa6d3 Use a typemap file instead of symlinks for tags 08ae3286 Define the interface for multi arch image prepare 88524377 Add serial option in the inventory 228fadca Add task to read remote pub key 136d8c75 Fix privileges in task fro tripleo-admin a14bfd9f [Trivial fix]Remove unnecessary slash 13775b8e Introduce tripleo-container-rm 508324b1 Run ansible before scale down 2e54cff0 Use oslo_rootwrap subprocess module in order to gain proper eventlet awareness 878a7727 bootstrap: install network-scripts if EL8 cf86a8d6 tripleo-bootstrap: only enable network, not starting. d0831dc4 Fix chown command in write_inputs_file function 2d52d467 tripleo-bootstrap: ensure network service is enabled & started 4f5a2750 Add new healthchecks for zaqar services 4c3d5182 Fixup octavia-api healthcheck f292c839 Remove images that are not in use anymore 2ee6de2b nova: Remove nova-placement images and healthchecks 2f4e72b8 OpenDev Migration Patch e39577bc Update master for stable/stein b7618c7c Add missing ws seperator between words e368e152 docker-rm: check if rpm dependency is actually installed ab490622 Use 'DEFAULT_VALIDATIONS_BASEDIR' variable from constants.py 05a1f1fa Update default Ceph container image to use to the Nautilus version 9314396e Adds redfish support to 'overcloud generate fencing'. 26967343 Check for file existance in file modification check Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../container_image_prepare_defaults.yaml | 2 +- container-images/overcloud_containers.yaml | 8 +- container-images/overcloud_containers.yaml.j2 | 24 ----- .../tripleo_kolla_template_overrides.j2 | 16 +-- healthcheck/common.sh | 5 + healthcheck/nova-consoleauth | 14 --- healthcheck/octavia-api | 12 +-- healthcheck/{nova-placement => zaqar-api} | 2 +- healthcheck/zaqar-socket | 15 +++ image-yaml/overcloud-images-python3.yaml | 8 +- image-yaml/overcloud-images-rhel8.yaml | 19 ++++ lower-constraints.txt | 1 + playbooks/octavia-files.yaml | 1 + .../tasks/certificate.yml | 8 +- .../octavia-controller-config/tasks/octavia.yml | 12 +++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 45 +++++++-- .../notes/multi_arch_image-3c3730cbba95be19.yaml | 9 ++ ...a_remove_nova-consoleauth-95df6d63822ef787.yaml | 15 +++ ...ificates-path-and-content-e8acf1e859e75135.yaml | 6 ++ ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 ++ .../tripleo-container-rm-082aa93d2de1e8bc.yaml | 7 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 1 + roles/tripleo-bootstrap/defaults/main.yml | 4 + roles/tripleo-bootstrap/tasks/main.yml | 75 ++++++++++++++ roles/tripleo-container-rm/README.md | 34 +++++++ roles/tripleo-container-rm/defaults/main.yaml | 2 + roles/tripleo-container-rm/tasks/docker.yaml | 21 ++++ roles/tripleo-container-rm/tasks/main.yaml | 5 + roles/tripleo-container-rm/tasks/podman.yaml | 41 ++++++++ roles/tripleo-create-admin/tasks/create_user.yml | 10 +- roles/tripleo-docker-rm/README.md | 2 + roles/tripleo-docker-rm/tasks/main.yaml | 13 +-- roles/tripleo-hieradata/README.md | 35 +++++++ roles/tripleo-hieradata/defaults/main.yaml | 3 + roles/tripleo-hieradata/tasks/main.yaml | 27 +++++ roles/tripleo-hieradata/test-playbook.yaml | 9 ++ sudoers | 1 - tripleo_common/actions/ansible.py | 26 +++-- tripleo_common/actions/parameters.py | 28 +++++- tripleo_common/constants.py | 6 +- tripleo_common/image/image_export.py | 99 ++++++++++++++++-- tripleo_common/image/image_uploader.py | 24 ++++- tripleo_common/image/kolla_builder.py | 27 ++++- tripleo_common/inventory.py | 4 +- tripleo_common/templates/deployment.j2 | 2 - tripleo_common/templates/deployments.yaml | 48 +++++++-- .../ControllerHostEntryDeployment | 2 - .../data/overcloud-controller-0/MyExtraConfigPost | 2 - .../utils/data/overcloud-controller-0/MyPostConfig | 2 - .../data/overcloud-controller-0/NetworkDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-0/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-0/NetworkDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-1/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-1/NetworkDeployment | 2 - .../data/overcloud-novacompute-2/AnsibleDeployment | 2 - .../ComputeHostEntryDeployment | 2 - .../data/overcloud-novacompute-2/MyExtraConfigPost | 2 - .../data/overcloud-novacompute-2/NetworkDeployment | 2 - tripleo_common/update.py | 29 +++--- tripleo_common/utils/validations.py | 7 +- workbooks/deployment.yaml | 17 +++- workbooks/derive_params_formulas.yaml | 8 +- workbooks/messaging.yaml | 4 +- workbooks/scale.yaml | 8 +- 74 files changed, 932 insertions(+), 230 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c304a4be..51b6b604 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.rootwrap>=5.8.0 # Apache-2.0

1 0

tripleo-validations 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We contentedly announce the release of: tripleo-validations 11.0.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 10.4.0..11.0.0 --------------------------------------------- 879818a Sync Sphinx requirement bf206aa Add option to fail if ceph-ansible is not installed f144be5 [Python3] Adds bytes to str conversion management 9c4d18b Fix invalid 'ignore_missing_file' attribute in a task bbe6696 Makes rogue_dhcp.py script Python3 aware d483ace Fix Jinja2's default filter usage 90a3576 Add serial option in tripleo-ansible-inventory script 8f7f0f5 New validation: ensure image-serve service is working as expected d376c40 Replace git.openstack.org URLs with opendev.org URLs 855e48c OpenDev Migration Patch 23de9d3 Fix Jinja2's default filter usage 4b94a5c Update master for stable/stein a678cbf Clean up some old roles dependencies. 177d299 Adds roles support in the script generating the validations doc. ee28ae4 Add collect-flavors-and-verify-profiles role 82ccd69 Migrate ansible-lint to pre-commit 6972ddd Add Podman support to rabbitmq-limits validation 7c76022 Add Podman support to mysql-open-files-limit validation ff7d255 Improve the network_gateway check on the provisioning network e195488 Fix minor typo in validations/check-ftype.yaml 3b9aca8 Retire the undercloud-selinux-mode validation Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 23 ++++++++++++++ .gitreview | 2 +- .pre-commit-config.yaml | 29 ++++++++++++++++++ README.rst | 4 +-- lookup_plugins/tht.py | 5 ++++ playbooks/ceph-ansible-installed.yaml | 1 + playbooks/collect-flavors-and-verify-profiles.yaml | 13 ++++++++ playbooks/image-serve.yaml | 13 ++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++ roles/ceph/defaults/main.yml | 2 ++ roles/ceph/tasks/ceph-ansible-installed.yaml | 10 ++++++- roles/check-network-gateway/tasks/main.yml | 6 ++-- .../meta/main.yml | 27 +++++++++++++++++ .../tasks/main.yml | 11 +++++++ .../vars/main.yml | 9 ++++++ roles/ctlplane-ip-range/tasks/main.yml | 4 +-- roles/dhcp-validations/files/rogue_dhcp.py | 31 ++++++++++++------- .../dhcp-validations/tasks/dhcp-provisioning.yaml | 2 +- roles/image-serve/defaults/main.yaml | 3 ++ roles/image-serve/meta/main.yaml | 28 +++++++++++++++++ roles/image-serve/tasks/main.yaml | 22 ++++++++++++++ roles/image-serve/vars/main.yml | 7 +++++ roles/mysql-open-files-limit/tasks/main.yml | 4 +-- roles/neutron-sanity-check/tasks/main.yml | 2 +- roles/no-op-firewall-nova-driver/meta/main.yml | 3 +- roles/rabbitmq-limits/tasks/main.yml | 5 ++-- roles/undercloud-debug/tasks/main.yml | 2 +- roles/undercloud-heat-purge-deleted/meta/main.yml | 3 +- roles/undercloud-heat-purge-deleted/tasks/main.yml | 2 +- roles/undercloud-process-count/meta/main.yml | 3 +- roles/undercloud-process-count/tasks/main.yml | 2 +- roles/undercloud-tokenflush/meta/main.yml | 3 +- roles/undercloud-tokenflush/tasks/main.yml | 2 +- scripts/tripleo-ansible-inventory | 6 ++-- test-requirements.txt | 3 +- tools/ansible-lint.sh | 22 -------------- tools/validate-files.py | 6 +++- tox.ini | 7 ++--- validations/check-ftype.yaml | 2 +- validations/check-network-gateway.yaml | 11 ++++++- validations/mysql-open-files-limit.yaml | 10 ++++++- validations/rabbitmq-limits.yaml | 12 ++++++-- validations/undercloud-selinux-mode.yaml | 35 ---------------------- 47 files changed, 320 insertions(+), 115 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..25a16ff 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

os-net-config 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are pumped to announce the release of: os-net-config 11.0.0: OpenStack network configuration This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 10.4.0..11.0.0 --------------------------------------- 115c36b Unify ethtool options logic 2c13c0e Add support for ethtool options for sriov_pf ports afc7a8f Add missing unit-test for IbInterface ethtool opts 53d57da Publish documents 8465e5c Update docs testing 6d38af7 Replace git.openstack.org URLs with opendev.org URLs 22aeee1 Modify udev rule for VF representor rename a061232 Add upper constraints to tox 8634e3a Uncap jsonschema 19d05f3 OpenDev Migration Patch 58b742d Update master for stable/stein 98e561a Add ability to specify multiple search domains 36af6fd Update master for stable/stein 4dbff4f Change python3.5 job to python3.7 job on Stein+ Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- CONTRIBUTING.rst | 6 +- README.rst | 159 +++++++++++++++++---------------- os_net_config/impl_ifcfg.py | 12 +-- os_net_config/objects.py | 6 +- os_net_config/schema.yaml | 52 ++++++----- os_net_config/sriov_config.py | 46 ++++++++-- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ requirements.txt | 2 +- setup.cfg | 2 +- test-requirements.txt | 3 - tox.ini | 8 +- zuul.d/layout.yaml | 2 + 18 files changed, 284 insertions(+), 126 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 14c6a96..7253862 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ PyYAML>=3.10.0 # MIT -jsonschema>=2.0.0,<3.0.0 # MIT +jsonschema>=2.0.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 4d74591..2347322 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 @@ -15 +12,0 @@ mock>=2.0 # BSD -openstackdocstheme>=1.18.1 # Apache-2.0

1 0

tripleo-heat-templates 11.0.0 (train)
by no-reply＠openstack.org 08 Jun '19

08 Jun '19

We are psyched to announce the release of: tripleo-heat-templates 11.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * Add GlanceImageCacheDir parameter to set base directory location that the Image Cache uses. Add GlanceImageCacheMaxSize parameter to set the upper limit on cache size, in bytes, after which the cache- pruner cleans up the image cache. Add GlanceImageCacheStallTime parameter to set the amount of time to let an image remain in the cache without being accessed. * Bluestore replaces Filestore as the default Ceph backend. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * *IronicConductorGroup* allows to define an Ironic Conductor Group so that the managed baremetal nodes may be later manually distributed by operators across multiple conductors. By default, *IronicConductorGroup* takes an empty value, which creates no conductor groups associated with the given Ironic Conductor service instance. Note: There is the default Ironic conductor group named "''", but it cannot be re-defined with *IronicConductorGroup* because of the empty value has been reserved for another purposes in t-h-t. * *IronicRpcTransport* controlls the remote procedure call transport between Ironic Conductor and API processes. For some case, like Edge DCN, this parameter may be set to 'json-rpc', when the used messaging broker should not be stretched over WAN. For such cases, this option also plays nicely alongside the Ironic Conductor Groups (https://docs.openstack.org/ironic/latest/admin/conductor- groups.html) feature. Defaults to an empty value, which leaves the corresponding service's default value intact. * A new service, NeutronAZConfig, is avaialable which can be used to configure Neutron for using avaialabiity zones. By default the service is mapped to None, but can be enabled by including *environments/neutron-az-config.yaml*. "NeutronDefaultAvailabilityZones", "NeutronDhcpAgentAvailabilityZone", "NeutronL3AgentAvailabilityZone", "NeutronDhcpAgentsPerNetwork", "NeutronNetworkSchedulerDriver", "NeutronRouterSchedulerDriver" and "NeutronDhcpLoadType" parameters can be used to configure various AZ configurations. By default, "Neutron*AvailabilityZone" takes the name of the heat stack/deployment plan, and "NeutronDefaultAvailabilityZones" takes an additional value 'nova'. For details, see Official Documentaion (https://docs.openstack.org/neutron/latest/admin/config-az.html) * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * Add role parameter NovaLibvirtNumPciePorts which sets *libvirt/num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. When using the 'q35' machine type, by default, it allows only a *single* PCIe device to be hotplugged. And Nova currently sets 'num_pcie_ports' to "0" (which means, it defaults to libvirt's "1"), which is not sufficient for hotplug use. Default for NovaLibvirtNumPciePorts is 16. * Added OVN-DPDK support * Introduced two new numeric parameters OvsRevalidatorCores and OvsHandlerCores to set values of n-revalidator-threads and n -handler-threads on openvswitch. * Composable service templates can now define scale_tasks. They are meant for scale down/up logic of services which need to be stopped/started during the scaling procedure. All happens within a single playbook and the down/up Ansible tags are required to differenciate them during the run. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation * Removed the OS::TripleO::Services::Ntp service and related ntp files as chrony is the new default. Deprecation Notes ***************** * OpenDaylight service is deprecated in Stein and will be disabled in future releases. * OS::TripleO::Services::SELinux has been deprecated. Management of selinux configuration is now handled via ansible during the deployment. * The following files are removed (environments/neutron-ml2-ovn-dvr- ha.yaml and environments/neutron-ml2-ovn-ha.yaml). The reason for this is that the maintained versions are kept under environment/services and to avoid confusion we remove the unmaintained ones. * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO * The Neutron LBaaS project was retired and support for it in TripleO removed. * The template *tuned-baremetal-puppet* has been deprecated. This template has been replaced by *tuned-baremetal-ansible* which provides for the same functionality and interfaces. Bug Fixes ********* * OpenDaylight inactivity probe for setting the OVSDB timeout now defaults to 180s. This helps fix scale issues for large number of computes nodes in OpenDaylight deployments. * Fixed launchpad bug 1831122 (https://bugs.launchpad.net/tripleo/+bug/1831122) with the NetApp Backend. * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html * With 405366fa32583e88c34417e5f46fa574ed8f4e98 the parameters RpcPort, RpcUserName, RpcPassword and RpcUseSSL got deprecated and nova::rabbitmq_port removed. As a result the healtcheck get called with null parameter and fail. We now get the global_config_settings from RabbitMQService and use oslo_messaging_rpc_port for the healthcheck. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 10.5.0..11.0.0 ------------------------------------------------ 0e11de618 Configure Neutron API for Nova Placement... 0f6dabc72 Add new role parameter NovaLibvirtNumPciePorts c0860d58a Do not assume the CNI config directory exists 67f8a42a8 Remove tripleo-ui references 14436f915 Remove Neutron LBaaS d6b08579a Set TenantNetPhysnetMtu to 0 to allow different MTUs 9be6c1c93 Use ansible for AllNodesDeployment 0cb21704e Drop dhcp_domain from ironic compute 715d9c2f2 Ensure ceph-ansible is installed 7cbcea8b5 Add support for Ironic Conductor Groups 1c4304aea Make node_ips generic in the Heat template efa301786 Move puppet/services/README and releasenotes 4101b35bc Move compute-instanceha, neutron-ovn-dvr-ha to deployments d799f4193 Move vpp, and veritas-hyperscale into deployment 3ae00015e Move masq-nets, swift-external, and validations to deployment 2e2750b72 Move auditd, ca-cert, certmonger to deployment 48ca0b4ac Move openvswitch into deployments 8e4f70322 Fix netapp deployment manifest 34e1c75e5 Remove unnecessary openldap-clients package from overcloud controllers 8e482688d Convert tuned puppet to ansible 05f4b253b Refactor ovn_dbs upgrade_tasks. 0e6769b4b Remove baremetal to containerized pacemaker upgrade_tasks. bf8cde549 Remove OpenStack packages right before upgrading the operating system b0519479c Add operating system upgrade preparation via Leapp 6d9560e17 Respect tags in upgrade tasks f8ca0d41a Reintroduce upgrade tasks for stopping pacemaker cluster 6454247dd Delete the stale and incorrect ovn environment files 7910cf3b4 Fix ssl.yaml generating GaneshaInternal in the endpoint map b4223ead2 Do not bind /run on host to nova_migration_target 30708633d Switch to use $NETWORK_uri for memcached f708ab7a8 krb-service-principals support service_net_map_replace c0fcf8674 Fix custom network.name_lower in krb-service-principals f7b8be6cc Fix manila-scheduler-container-puppet.yaml typo c450bae2b ceph-base: Update ceph-ansible default playbook 6f6032e81 novajoin: set project_name to service d8ebe0c50 neutron: force project_name for midonet & bigswitch d75aee60f cinder: set cinder::nova::project_name to service 9d5c972d9 Stop all services before upgrading node's OS. e97d4dcfd Initialize ip(6)tables "raw" table bbc18dd8d Handle openvswitch meta-package on undercloud upgrade. 1cd8347c2 mistral-event-engine: only import ::tripleo::profile::base::mistral a3f5d1282 Adapt sensu on refactor 504f8fc75 Re-add amphora flavor management settings 824dd9003 Use make_url to wrap IPv6 addresses in brackets. edfbeae91 Add domain and no-ntp options to ipaclient 45f5c283e Fix haproxy stats network binding acc4fb032 Add support for Ironic Rpc Transport override 68bfc2672 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 6858ef411 Add CephAnsibleEnvironmentVariables to nodes-uuid call 7ac8e67d8 Set force_config_drive only when OVNMetadata is disabled 114e5778f Remove the iptables rules set via service_config_settings 5e83eeda5 Override ovn::controller::hostname to use hiera:fqdn_canonical 016279b71 standalone/undercloud - post: use EndpointMap to fetch Keystone URL eafe39085 Try a timesync as part of first boot 885715855 Ensure openstack clients are installed 4559d3b74 Configure server_certs_key_passphrase for Octavia cf6fc40c6 Ironic Inspector - use make_url for db connection cb8d27105 Sync the ControllerStorageNfs role with the Controller role 8f8b750e4 Add cinder credentials to nova conf 6e150aeb0 Correct ceph configuration for scenario 10 environments e9c26b6d3 Consolidate RpcPort healthchecks 05f650d5d Fix IPA client when doing brownfield deployment of internal TLS 3c5ad2aab OVS Revalidator and handler threads 3778e6121 Configure nova_compute for vendordata bb95ce843 Remove HostEntryDeployment 3a1948390 Remove InstanceIdDeployment 32bf12e20 Fix NovaNfs role parameter precedence in conditions bbbca8d65 Modified the way fluentd configures rsyslog aeb91c34f Re-add undercloud-aodh.yaml 18bae394a Move neutron base, plugins to deployment cc95b17ed Ensure we aren't running some dry-run also for Pacemaker case ef6c23ef6 Fix haproxy firewall rules 967d42b54 placement: Add nova_api data extraction step during deployment 1f2a71e41 Add more settings for glance image cache 2471642f6 [ipaclient] Fix type of MakeHomeDir heat param c5fe51147 Use RpcPort for container healthchecks 20dbe3206 Remove NovaConsoleauth Service 0c19fa2b9 Fix the step_config input in the OvS-DPDK template c901a4137 Enable zaqar healthchecks b20ca116a Remove OVNTunnelEncapType bbd2d9448 Allow multiple same options in nova.conf 055d15f92 Gracefully handle empty config json data 485b3c964 Remove hardcoded RabbitMQService 940de74b8 Default CephAnsibleDisksConfig to bluestore f3df90f2c Set arp_notify to match ndisc_notify 6ce5b5e12 Revert "Switch off nova metadata api on the undercloud" 9755a1b2d Enable serial execution for ansible host a8ec69941 Clean up leftover mount point after docker stop. d2fae913d Copy keys for tripleo-admin user 4b113a7a1 Enable ndisc_notify sysctl setting to notify of MAC changes 9e14ae6c9 Set configure_delegated_roles a parameter d1b187a56 Scale-down tasks for nova-compute 738486f10 Revert "mistral: configure heartbeat parameters to avoid action timeout" 894481faf Enable Podman Service For Lacking Roles 3abededac Remove NTP 90562b6f5 Use timesync service 36148ff6a Propagate AdditionalArchitectures to container image prepare db89f2d9a Avoid issues with non-existing directories d9c83dbf9 Adjust deployed-server install package list for RHEL8 87549eb4c Remove ceph-ansible fetch directory as privileged user 28a675dea Switch off nova metadata api on the undercloud 4d4263f4f Set debug level of nova container_config_scripts only when enabled 372ca2248 Use oslo_messaging_rpc_port for nova rpc healthchecks 75361e66b ensure /var/run/redis is present upon reboot 1e33dfa8f Fix cinder-backup deployment templates 53657f618 Remove ceph-ansible fetch directory after it is saved 5906f45ff Change setype for non container /var/log/<service> directories 63c451869 nova: Remove the NovaPlacement service 08015d6f9 Run nova-manage as root to prevent wrong nova-manage.log permissions ae439aa39 MetricsQdr: Build sslProfiles without internal TLS dfc99bad0 Run nova_cell_v2_discover_hosts.py on every deploy run 5a4223c86 Ensure there is no redis on host 155074693 Override ceph_mon to v2 protocol 910765965 Create /var/log/placement on host for file logging e0d26441f Add ServiceNetMap to global_vars bfd3fea2e Add Keystone admin/public to enabled services list cd6a1b3d4 Drop puppet/services/metrics/collectd.yaml a82f3f0c7 Scale-down tasks for RHSM 5d66b9c1e Introduce scale_tasks 72d52593b nova_metadata firewall_rules missmatch 44d6d689e Adapt check-docker-health for podman 096816a23 Simplify and correct how we provide the undercloud.conf to mistral 9e4bb8b86 Activate health checks for cron containers e2159e552 fup: Keep NovaPlacement in the service registry for upgrades f62189850 fup: Add comment removed by I9e3287bcbe9d317f32bf6b468c6ee17f04b6fff9 afe583b39 heat: use oslo_messaging_rpc_port for nova rpc healthchecks 8e60f8361 Properly indent placement::firewall_rules 54c54d384 Add ANSIBLE_GATHER_TIMEOUT=60 to ceph-ansible run 3eb5ca307 Split upgrade_steps_playbook into different plays. ba14b75c8 Move pacemaker, pacemaker-remote into deployments 4a9f2ac05 Move Manila backends into deployment 3fc9ea118 OpenDev Migration Patch 555178160 placement: Introduce an extracted PlacementAPI service 1c241362f fix storage.yaml to write environments/storage/nova-nfs.yaml 455119d0b Update master for stable/stein e7dee7bd2 Remove puppet selinux management 908e6b981 Avoid concurrent nova cell_v2 discovery instances 0a5b248c9 Add OS::TripleO::NeutronAZConfig 7e73fac11 Evaluating ansible_check_mode as a boolean 8ff04029f Use oslo_messaging_rpc_port for nova rpc healthchecks 1295868dd Allow NovaNfs parameters to be role specific 9f6caf772 Fix service auth URL in Octavia 91c08c1e2 Add ability to specify dns search domains fca094570 Add DPDK support for OVN 492816a16 Clean metrics related environments 2a34ccb62 Add parameter to configure maxdelay in db purge/archive job 364a0eaab Add mkhomedir option to ipa-client-install Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- capabilities-map.yaml | 5 - ci/common/vbmc_setup.yaml | 5 + ci/environments/multinode-3nodes-registry.yaml | 4 +- ci/environments/multinode-3nodes.yaml | 7 +- ci/environments/multinode-containers.yaml | 4 +- .../nic-configs/compute-dvr.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../multiple-nics/nic-configs/compute-dvr.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + .../scenario000-multinode-containers.yaml | 6 +- .../scenario001-multinode-containers.yaml | 8 +- ci/environments/scenario001-standalone.yaml | 2 + .../scenario002-multinode-containers.yaml | 8 +- .../scenario003-multinode-containers.yaml | 8 +- .../scenario004-multinode-containers.yaml | 10 +- ci/environments/scenario004-standalone.yaml | 7 +- .../scenario006-multinode-containers.yaml | 4 +- ci/environments/scenario006-multinode.yaml | 6 +- .../scenario007-multinode-containers.yaml | 6 +- .../scenario008-multinode-containers.yaml | 6 +- ci/environments/scenario009-multinode.yaml | 2 +- .../scenario010-multinode-containers.yaml | 9 +- ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 8 +- ci/environments/scenario012-standalone.yaml | 4 +- common/container-puppet.py | 5 + common/deploy-steps-tasks.yaml | 54 +-- common/deploy-steps.j2 | 219 +++++++-- common/services/role.role.j2.yaml | 11 + .../nova_cell_v2_discover_hosts.py | 62 +++ .../nova_statedir_ownership.py | 9 +- ...er_host.py => nova_wait_for_compute_service.py} | 63 +-- .../nova_wait_for_placement_service.py | 29 +- deployed-server/deployed-server-bootstrap-rhel.sh | 4 +- deployed-server/deployed-server-roles-data.yaml | 15 +- deployed-server/deployed-server.yaml | 49 +- deployment/README.rst | 119 ++++- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 10 +- .../auditd/auditd-baremetal-puppet.yaml | 0 .../barbican/barbican-api-container-puppet.yaml | 51 +-- .../ceilometer-agent-compute-container-puppet.yaml | 14 +- ...ometer-agent-notification-container-puppet.yaml | 14 +- deployment/ceph-ansible/ceph-base.yaml | 26 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- .../certs/ca-certs-baremetal-puppet.yaml | 0 .../certs/certmonger-user-baremetal-puppet.yaml | 0 deployment/cinder/cinder-api-container-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 19 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 45 +- deployment/cinder/cinder-base.yaml | 9 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 10 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 -- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 5 + deployment/containers-common.yaml | 16 +- deployment/database/mysql-pacemaker-puppet.yaml | 52 +-- deployment/database/redis-container-puppet.yaml | 18 +- deployment/database/redis-pacemaker-puppet.yaml | 47 +- .../logging/fluentd-container-puppet.yaml | 27 +- .../monitoring/sensu-client-container-puppet.yaml | 42 +- .../nova/nova-consoleauth-container-puppet.yaml | 14 +- .../nova/nova-placement-container-puppet.yaml | 242 ---------- .../opendaylight-ovs-baremetal-puppet.yaml | 2 +- .../tripleo-ui/tripleo-ui-container-puppet.yaml | 45 -- .../tuned/tuned-baremetal-puppet.yml} | 0 deployment/glance/glance-api-container-puppet.yaml | 23 + deployment/haproxy/haproxy-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 54 +-- deployment/heat/heat-api-container-puppet.yaml | 2 + deployment/heat/heat-engine-container-puppet.yaml | 16 +- deployment/horizon/horizon-container-puppet.yaml | 7 - deployment/ironic/ironic-base-puppet.yaml | 13 + .../ironic/ironic-conductor-container-puppet.yaml | 22 +- .../ironic/ironic-inspector-container-puppet.yaml | 18 +- .../ironic-neutron-agent-container-puppet.yaml | 3 +- deployment/kernel/kernel-baremetal-puppet.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 2 + deployment/logging/files/barbican-api.yaml | 2 +- deployment/logging/files/heat-api-cfn.yaml | 2 +- deployment/logging/files/heat-api.yaml | 2 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 2 +- deployment/logging/files/neutron-api.yaml | 2 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 2 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 2 +- deployment/logging/files/nova-placement.yaml | 49 -- deployment/logging/files/opendaylight-api.yaml | 2 +- deployment/logging/files/panko-api.yaml | 2 +- deployment/logging/files/placement-api.yaml | 49 ++ .../{nova-placement.yaml => placement-api.yaml} | 34 +- .../logrotate-crond-container-puppet.yaml | 2 + .../manila}/manila-backend-cephfs.yaml | 0 .../manila}/manila-backend-isilon.yaml | 0 .../manila}/manila-backend-netapp.yaml | 0 .../manila}/manila-backend-unity.yaml | 0 .../manila}/manila-backend-vmax.yaml | 0 .../manila}/manila-backend-vnx.yaml | 0 .../manila/manila-scheduler-container-puppet.yaml | 14 +- .../manila/manila-share-pacemaker-puppet.yaml | 43 -- .../masquerade-networks-baremetal-puppet.yaml | 0 .../memcached/memcached-container-puppet.yaml | 6 + deployment/metrics/collectd-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 2 +- deployment/mistral/mistral-base.yaml | 35 -- .../mistral/mistral-engine-container-puppet.yaml | 14 +- .../mistral-event-engine-container-puppet.yaml | 16 +- .../mistral/mistral-executor-container-puppet.yaml | 39 +- .../neutron/neutron-api-container-puppet.yaml | 12 +- deployment/neutron/neutron-az-config.yaml | 121 +++++ .../neutron}/neutron-base.yaml | 0 .../neutron-bigswitch-agent-baremetal-puppet.yaml | 0 .../neutron}/neutron-compute-plugin-midonet.yaml | 0 .../neutron}/neutron-compute-plugin-nuage.yaml | 0 .../neutron}/neutron-compute-plugin-plumgrid.yaml | 0 .../neutron}/neutron-controller-plugin-nuage.yaml | 0 .../neutron/neutron-dhcp-container-puppet.yaml | 16 +- .../neutron}/neutron-l3-compute-dvr.yaml | 0 .../neutron/neutron-l3-container-puppet.yaml | 16 +- .../neutron-lbaas-api-container-puppet.yaml | 70 --- ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-metadata-container-puppet.yaml | 12 +- .../neutron/neutron-midonet-baremetal-puppet.yaml | 0 .../neutron-ovn-dpdk-config-container-puppet.yaml | 91 ++++ .../neutron-ovs-agent-container-puppet.yaml | 16 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 5 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 2 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 2 +- .../neutron}/neutron-plugin-ml2-fujitsu-cfab.yaml | 0 .../neutron}/neutron-plugin-ml2-fujitsu-fossw.yaml | 0 ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 2 +- .../neutron}/neutron-plugin-ml2-nuage.yaml | 0 .../neutron}/neutron-plugin-ml2-odl.yaml | 0 .../neutron}/neutron-plugin-ml2-ovn.yaml | 21 + .../neutron}/neutron-plugin-ml2.yaml | 0 .../neutron}/neutron-plugin-nuage.yaml | 0 .../neutron}/neutron-plugin-plumgrid.yaml | 0 .../neutron-sriov-agent-container-puppet.yaml | 16 +- .../neutron}/neutron-sriov-host-config.yaml | 0 .../neutron-vpp-agent-baremetal-puppet.yaml | 0 deployment/nova/nova-api-container-puppet.yaml | 10 +- deployment/nova/nova-base-puppet.yaml | 32 +- .../nova/nova-compute-common-container-puppet.yaml | 11 +- deployment/nova/nova-compute-container-puppet.yaml | 260 ++++++++--- deployment/nova/nova-ironic-container-puppet.yaml | 36 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 1 - .../nova/nova-scheduler-container-puppet.yaml | 10 +- deployment/nova/novajoin-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 17 +- deployment/octavia/octavia-base.yaml | 8 +- .../octavia/octavia-deployment-config.j2.yaml | 11 +- .../octavia-health-manager-container-puppet.yaml | 7 - .../octavia/octavia-worker-container-puppet.yaml | 14 +- .../openvswitch/openvswitch-baremetal-puppet.yaml | 18 + .../ovn/ovn-controller-container-puppet.yaml | 13 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 112 ++--- deployment/ovn/ovn-metadata-container-puppet.yaml | 2 +- .../compute-instanceha-baremetal-puppet.yaml | 0 .../pacemaker/ovn-dbs-baremetal-puppet.yaml | 0 .../pacemaker/pacemaker-baremetal-puppet.yaml | 10 + .../pacemaker-remote-baremetal-puppet.yaml | 0 .../placement/placement-api-container-puppet.yaml | 298 ++++++++++++ deployment/podman/podman-baremetal-ansible.yaml | 24 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 41 -- .../rabbitmq-messaging-pacemaker-puppet.yaml | 42 -- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 42 -- .../sahara/sahara-engine-container-puppet.yaml | 10 +- deployment/selinux/selinux-baremetal-puppet.yaml | 48 -- .../external-swift-proxy-baremetal-puppet.yaml | 0 .../swift/swift-storage-container-puppet.yaml | 2 +- deployment/time/ntp-baremetal-puppet.yaml | 115 ----- .../tripleo-firewall-baremetal-puppet.yaml | 47 ++ .../tripleo-packages-baremetal-puppet.yaml | 57 +++ deployment/tuned/tuned-baremetal-ansible.yaml | 111 +++++ deployment/undercloud/undercloud-upgrade.yaml | 143 ++++++ .../tripleo-validations-baremetal-puppet.yaml | 0 ...tas-hyperscale-controller-baremetal-puppet.yaml | 0 .../vpp/vpp-baremetal-puppet.yaml | 0 deployment/zaqar/zaqar-container-puppet.yaml | 8 + environments/auditd.yaml | 3 +- environments/compute-instanceha.yaml | 3 +- environments/docker-ha.yaml | 4 +- environments/docker-uc-light.yaml | 2 +- environments/low-memory-usage.yaml | 3 +- environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 2 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 2 +- environments/manila-vmax-config.yaml | 2 +- environments/manila-vnx-config.yaml | 2 +- environments/metrics/collect-read-rabbitmq.yaml | 15 + .../collectd-standalone.yaml} | 2 +- .../collectd-write-qdr.yaml} | 4 +- environments/networking/neutron-midonet.yaml | 2 +- environments/neutron-az-config.yaml | 2 + environments/neutron-linuxbridge.yaml | 3 +- environments/neutron-midonet.yaml | 2 +- environments/neutron-ml2-bigswitch.yaml | 3 +- environments/neutron-ml2-fujitsu-cfab.yaml | 2 +- environments/neutron-ml2-fujitsu-fossw.yaml | 2 +- environments/neutron-ml2-ovn-dvr-ha.yaml | 29 -- environments/neutron-ml2-ovn-ha.yaml | 31 -- environments/neutron-ml2-vpp.yaml | 5 +- environments/neutron-nsx.yaml | 2 +- environments/neutron-ovs-dvr.yaml | 2 +- environments/neutron-plumgrid.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- .../services-baremetal/neutron-lbaasv2.yaml | 19 - .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 2 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 4 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services-baremetal/octavia.yaml | 5 +- environments/services/masquerade-networks.yaml | 2 +- environments/services/neutron-lbaasv2.yaml | 7 - environments/services/neutron-nsx-lbaasv2.yaml | 6 - .../services/neutron-opendaylight-sriov.yaml | 2 +- environments/services/neutron-opendaylight.yaml | 2 +- environments/services/neutron-ovn-dpdk.yaml | 7 + environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-ovn-standalone.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 2 +- environments/services/neutron-ovs.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/octavia.yaml | 5 +- environments/services/ptp.yaml | 1 - environments/services/tripleo-ui.yaml | 3 - environments/services/undercloud-aodh.yaml | 7 + environments/services/vpp.yaml | 3 +- environments/ssl/enable-internal-tls.j2.yaml | 2 +- environments/ssl/no-tls-endpoints-public-ip.yaml | 6 +- environments/ssl/tls-endpoints-public-dns.yaml | 6 +- environments/ssl/tls-endpoints-public-ip.yaml | 6 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 8 +- environments/standalone.yaml | 2 - environments/standalone/standalone-overcloud.yaml | 1 - environments/standalone/standalone-tripleo.yaml | 1 - environments/stdout-logging.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/swift-external.yaml | 2 +- environments/tripleo-validations.yaml | 2 +- environments/undercloud.yaml | 67 ++- .../veritas-hyperscale-config.yaml | 2 +- .../krb-service-principals/role.role.j2.yaml | 22 +- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 42 +- extraconfig/post_deploy/undercloud_post.yaml | 34 +- extraconfig/pre_network/boot-params-service.yaml | 2 +- extraconfig/pre_network/boot_param_tasks.yaml | 19 +- .../pre_network/host_config_and_reboot.yaml | 2 +- extraconfig/services/ipaclient.yaml | 63 ++- extraconfig/services/rhsm.yaml | 9 +- firstboot/userdata_timesync.yaml | 97 ++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 6 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 498 ++++++++++----------- network/ports/ctlplane_vip.yaml | 8 +- network/ports/net_ip_list_map.j2.yaml | 59 +-- network/ports/net_ip_map.j2.yaml | 8 +- network/ports/net_vip_map_external.j2.yaml | 16 +- network/ports/net_vip_map_external_v6.j2.yaml | 19 +- network/ports/noop.yaml | 8 +- network/ports/port.j2 | 16 +- network/ports/port_from_pool.j2 | 16 +- network/ports/vip.yaml | 8 +- network/ports/vip_v6.yaml | 13 +- network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 5 +- overcloud-resource-registry-puppet.j2.yaml | 40 +- overcloud.j2.yaml | 58 ++- puppet/all-nodes-config.j2.yaml | 58 ++- .../all_nodes/neutron-midonet-all-nodes.yaml | 1 + .../controller/neutron-ml2-bigswitch.yaml | 1 + puppet/services/README.rst | 194 -------- puppet/services/metrics/collectd.yaml | 433 ------------------ puppet/services/neutron-lbaas-agent.yaml | 70 --- ...t-inactivity-probe-config-a89f6dcd204192a8.yaml | 0 ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../add_image_cache_settings-50af5ff56a7d7f75.yaml | 10 + .../bluestore_disks_config-f5553b0540237c4c.yaml | 4 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...31122-fix-netapp-env-file-e5aeb0c2bf417d2b.yaml | 6 + ...cate-opendaylight-service-64b960923324edc4.yaml | 0 ...ate-puppet-selinux-config-cc8d2788c534d628.yaml | 5 + ...eprecated-vn-ha-env-files-f0d967d173dcdb16.yaml | 7 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../ironic-conductor-groups-577543f8ca612f06.yaml | 13 + .../ironic-rpc-transport-b637fd2a3b99fee7.yaml | 11 + .../notes/mistral_timeout-c00344d5b3d8c4b0.yaml | 6 - ...neutron-az-config-service-3085b2c296df06c9.yaml | 14 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va_libvirt_num_pcie_ports-f904bf0fb9a7b19e.yaml | 12 + ...a_remove_nova-consoleauth-227cbeb44e9ab5ef.yaml | 15 + .../nova_rpc_healthcheck-adbe5307dc04eeac.yaml | 9 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + releasenotes/notes/ovn-dpdk-15e8747068682f91.yaml | 3 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + ...ator-handler-threads.yaml-f5a12d1066b042f1.yaml | 3 + .../remove-neutron-lbaas-e72025b67de3563b.yaml | 11 + .../notes/remove-ntp-20905abec5281f54.yaml | 5 + .../notes/scale_tasks-2042b294d074b37a.yaml | 8 + ...remetal-puppet-deprecated-3e97347917905254.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + roles/CellController.yaml | 3 +- roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 4 +- roles/ComputeOvsDpdkSriovRT.yaml | 4 +- roles/Controller.yaml | 6 +- roles/ControllerAllNovaStandalone.yaml | 2 +- roles/ControllerNoCeph.yaml | 6 +- roles/ControllerNovaStandalone.yaml | 3 +- roles/ControllerOpenstack.yaml | 6 +- roles/ControllerStorageNfs.yaml | 19 +- roles/Networker.yaml | 1 - roles/Novacontrol.yaml | 3 +- roles/Standalone.yaml | 6 +- roles/Undercloud.yaml | 4 +- roles_data.yaml | 6 +- roles_data_undercloud.yaml | 4 +- sample-env-generator/composable-roles.yaml | 6 +- sample-env-generator/enable-services.yaml | 2 +- sample-env-generator/networking.yaml | 4 +- sample-env-generator/ssl.yaml | 31 +- sample-env-generator/standalone.yaml | 10 +- sample-env-generator/storage.yaml | 3 +- tools/yaml-validate.py | 7 +- 361 files changed, 3438 insertions(+), 3283 deletions(-)

1 0