June 2019 - Release-announce - lists.openstack.org

os-traits 0.15.0
by no-reply＠openstack.org 28 Jun '19

28 Jun '19

We joyfully announce the release of: os-traits 0.15.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 0.14.0..0.15.0 ----------------------------------- 74f8a3f Add COMPUTE_STATUS_DISABLED trait 95668fd add GOP, NONE and VIRTIO grapics models 21f232b add libvirt image metadata traits b7f385f Sync Sphinx requirement Diffstat (except docs and test files) ------------------------------------- os_traits/compute/graphics.py | 27 +++++++++++++++++++++++++++ os_traits/compute/net.py | 16 ++++++++++++++++ os_traits/compute/status.py | 18 ++++++++++++++++++ os_traits/compute/storage.py | 28 ++++++++++++++++++++++++++++ releasenotes/source/index.rst | 6 +++--- releasenotes/source/pike.rst | 6 +++--- releasenotes/source/rocky.rst | 6 +++--- releasenotes/source/stein.rst | 6 +++--- 9 files changed, 103 insertions(+), 13 deletions(-)

1 0

python-ironic-inspector-client 3.6.1 (train)
by no-reply＠openstack.org 28 Jun '19

28 Jun '19

We are thrilled to announce the release of: python-ironic-inspector-client 3.6.1: Python client for Ironic Inspector This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://bugs.launchpad.net/python-ironic-inspector-client/+bugs For more details, please see below. 3.6.1 ^^^^^ Bug Fixes * Fixes regression in 3.6.0 that caused the deprecated "uuid" argument to various calls to stop working. Changes in python-ironic-inspector-client 3.6.0..3.6.1 ------------------------------------------------------ 81ae133 Repair the deprecated uuid/uuids arguments 519190d Switch base job to ironic-base Diffstat (except docs and test files) ------------------------------------- ironic_inspector_client/test/test_v1.py | 46 ++++++++++++++++++++++ ironic_inspector_client/v1.py | 15 ++++--- .../notes/deprecated-uuid-d0c8e8980106e7f9.yaml | 5 +++ zuul.d/python-ironic-inspector-client-jobs.yaml | 7 +--- 4 files changed, 61 insertions(+), 12 deletions(-)

1 0

openstack-ansible 17.1.12 (queens)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We are glad to announce the release of: openstack-ansible 17.1.12: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 17.1.11..17.1.12 --------------------------------------------- 4f883439e Dropping support of 42.3 cc4c498ac Load extra variables correctly in wrapper e848fc874 Bump SHAs for stable/queens Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 78 +++++++++++----------- scripts/openstack-ansible.sh | 2 +- zuul.d/jobs.yaml | 29 -------- zuul.d/project.yaml | 4 -- 6 files changed, 44 insertions(+), 77 deletions(-)

1 0

python-saharaclient 2.2.1 (stein)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We joyfully announce the release of: python-saharaclient 2.2.1: Client library for Sahara API This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-saharaclient Download the package from: https://pypi.org/project/python-saharaclient Please report issues through: https://bugs.launchpad.net/python-saharaclient/+bugs For more details, please see below. 2.2.1 ^^^^^ Bug Fixes * Fix the "job binary download" command when Python 3 is used. Changes in python-saharaclient 2.2.0..2.2.1 ------------------------------------------- 564380a Py3: fix the OSC download job binary command ee66632 OpenDev Migration Patch 6e414fd Update UPPER_CONSTRAINTS_FILE for stable/stein 6d96f1a Update UPPER_CONSTRAINTS_FILE for stable/stein fcc553a Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .../notes/fix-job-binary-download-py3-5592eca2345305bd.yaml | 4 ++++ saharaclient/osc/v1/job_binaries.py | 2 +- tox.ini | 8 ++++---- 4 files changed, 11 insertions(+), 6 deletions(-)

1 0

openstack-ansible 18.1.8 (rocky)
by no-reply＠openstack.org 27 Jun '19

27 Jun '19

We contentedly announce the release of: openstack-ansible 18.1.8: Ansible playbooks for deploying OpenStack This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 18.1.8 ^^^^^^ New Features ************ * A new option has been added allowing deployers to disable any and all containers on a given host. The option *no_containers* is a boolean which, if undefined, will default to *false*. This option can be added to any host in the *openstack_user_config.yml* or via an override in *conf.d*. When this option is set to *true* the given host will be treated as a baremetal machine. The new option mirrors the existing environmental option *is_metal* but allows deployers to target specific hosts instead of entire groups. log_hosts: infra-1: ip: 172.16.24.2 no_containers: true Upgrade Notes ************* * The variable "tempest_image_dir_owner" is removed in favour of using default ansible user to create the image directory. * The data structure for "ceph_gpg_keys" has been changed to be a list of dicts, each of which is passed directly to the applicable apt_key/rpm_key module. As such any overrides would need to be reviewed to ensure that they do not pass any key/value pairs which would cause the module to fail. * The default values for "ceph_gpg_keys" have been changed for all supported platforms and now use vendored keys. This means that the task execution will no longer reach out to the internet to add the keys, making offline or proxy-based installations easier and more reliable. * A new value "epel_gpg_keys" can be overridden to use a different GPG key for the EPEL-7 RPM package repo instead of the vendored key used by default. Changes in openstack-ansible 18.1.7..18.1.8 ------------------------------------------- c8d05df75 Dropping support of 42.3 c49a2e4f9 Load extra variables correctly in wrapper 749fe63a3 Update SHA for heat eb24506c8 Add global HA policy for rabbitmq 0076f77a6 Bump SHAs for stable/rocky Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +-- inventory/group_vars/all/infra.yml | 5 ++ inventory/group_vars/all/oslo-messaging.yml | 2 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 76 +++++++++++----------- .../notes/oslomsg_policies-7ac27a5c2a7fbed2.yaml | 9 +++ scripts/openstack-ansible.sh | 2 +- zuul.d/jobs.yaml | 53 --------------- zuul.d/project-templates.yaml | 17 ----- 9 files changed, 61 insertions(+), 115 deletions(-)

1 0

python-ironic-inspector-client 3.6.0 (train)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are jazzed to announce the release of: python-ironic-inspector-client 3.6.0: Python client for Ironic Inspector This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://bugs.launchpad.net/python-ironic-inspector-client/+bugs For more details, please see below. 3.6.0 ^^^^^ Deprecation Notes * Parameter uuid is deprecated in ClientV1 and will be removed in future releases, please use node_id instead. Changes in python-ironic-inspector-client 3.5.0..3.6.0 ------------------------------------------------------ 70b763f Update Python 3 test runtimes for Train 440cd92 OSC: try fetching ironic-inspector URL from osc-lib e146a84 Update sphinx requirements 7eba393 Fetch requirements from opendev fa83584 OpenDev Migration Patch ed62c61 Dropping the py35 testing d04505b Replace openstack.org git:// URLs with https:// 084d1de Deprecates "uuid" parameters to Python calls when node is expected 19602a4 Update master for stable/stein 2e684a0 Find misteriously missing pep8 import check Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- functest-requirements.txt | 4 +- ironic_inspector_client/shell.py | 10 +- ironic_inspector_client/test/functional.py | 10 +- ironic_inspector_client/test/test_shell.py | 4 +- ironic_inspector_client/test/test_v1.py | 2 +- ironic_inspector_client/v1.py | 103 ++++++++++++--------- .../notes/version-uuid-b7f9e57589314fe9.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ setup.cfg | 4 +- test-requirements.txt | 1 + tox.ini | 23 ++++- zuul.d/project.yaml | 8 +- zuul.d/python-ironic-inspector-client-jobs.yaml | 8 +- 17 files changed, 123 insertions(+), 72 deletions(-) Requirements updates -------------------- diff --git a/functest-requirements.txt b/functest-requirements.txt index da203a1..03e3367 100644 --- a/functest-requirements.txt +++ b/functest-requirements.txt @@ -2,2 +2,2 @@ -git+git://git.openstack.org/openstack/ironic-inspector@be3f7eec18ad13dd6d5a94fe2963b45456fad19e#egg=ironic-inspector --r https://git.openstack.org/cgit/openstack/ironic-inspector/plain/test-requir… +git+https://opendev.org/openstack/ironic-inspector@be3f7eec18ad13dd6d5a94fe2963b45456fad19e#egg=ironic-inspector +-r https://opendev.org/openstack/ironic-inspector/raw/commit/be3f7eec18ad13dd6… \ No newline at end of file diff --git a/test-requirements.txt b/test-requirements.txt index 13ef714..fd278ea 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ fixtures>=3.0.0 # Apache-2.0/BSD +flake8-import-order>=0.13 # LGPLv3

1 0

tripleo-puppet-elements 8.1.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We enthusiastically announce the release of: tripleo-puppet-elements 8.1.0: Puppet building rules for OpenStack images. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 8.0.2..8.1.0 ----------------------------------------------- fe6b426 Add upper constraints 2284187 Remove redis from controller element b1cf744 OpenDev Migration Patch f0cb870 Install tmpwatch in the overcloud base image e795ab6 Add numactl to overcloud image Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- elements/overcloud-base/install.d/package-installs-overcloud-base | 2 ++ elements/overcloud-base/pkg-map | 4 +++- .../install.d/package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - tox.ini | 4 +++- 6 files changed, 9 insertions(+), 5 deletions(-)

1 0

tripleo-common 8.7.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are delighted to announce the release of: tripleo-common 8.7.0: A common library for TripleO workflows. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 8.7.0 ^^^^^ Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. * Fixes running the baremetal "provide" workflow with node names. * Workaround bug 1810932 by scripting an in-place update of ssh_known_hosts Changes in tripleo-common 8.6.8..8.7.0 -------------------------------------- ee175296 Add the ability to compute osds number counting lvm devices a80f1b03 [CVE-2019-3895] Set image owner id 2be48861 Add passphrase generation for Octavia 83c08960 Workaround ssh_known_hosts changes not being propagated to containers 8014dec6 Add XClarity in the list of supported hw types 4fe901d2 Don't use node count from failed stack parameters 14d6c5fc [Queens only] Set the deployment status on Mistral deployment tasks. 3ea5ae62 Standardise Workflow messaging and optionally persist messages 1c2c0a0a Remove amp_hw_arch from octavia_post dfab3485 OpenDev Migration Patch 324f30f2 Add message to the Payload for update_node task 87cef2ea Upgrades: Don't try to publish ansible output in ceph_install f5d06ad8 Fix running the baremetal provide workflow with node names 8315421b Clean up node registration output. ee9a5545 Configurable host network for inventory e5207aed Don't always validate heat stack when adding parameters 52ce413b Add workflow for plan deployment status 17a050f1 Specify Octavia amphora image hw_architecture property in Glance abafea83 Workflow and action for deployment failures a2550158 Run NetworkDeployment as async task 22e6135b Ansible json error callback plugin 5c398a07 Stops growth of massive dentry cache growth Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible_plugins/callback/json_error.py | 62 +++++ healthcheck/common.sh | 1 + playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../octavia-controller-config/tasks/octavia.yml | 12 + .../roles/octavia-undercloud/tasks/image_mgmt.yml | 46 +++- ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 + .../notes/provide-name-f75b6b61d3d8d693.yaml | 4 + ..._known_host_atomic_update-481e0baf3b3d6342.yaml | 5 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 30 +- setup.cfg | 2 + tripleo_common/actions/deployment.py | 52 ++++ tripleo_common/actions/parameters.py | 7 +- tripleo_common/actions/validations.py | 2 +- tripleo_common/constants.py | 7 + tripleo_common/inventory.py | 10 +- tripleo_common/templates/deployments.yaml | 39 ++- tripleo_common/utils/nodes.py | 1 + workbooks/baremetal.yaml | 39 +-- workbooks/ceph-ansible.yaml | 2 - workbooks/deployment.yaml | 305 +++++++++++++-------- workbooks/derive_params_formulas.yaml | 8 +- workbooks/messaging.yaml | 151 ++++++++++ workbooks/package_update.yaml | 1 + workbooks/plan_management.yaml | 3 + 30 files changed, 732 insertions(+), 184 deletions(-)

1 0

os-net-config 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are satisfied to announce the release of: os-net-config 8.5.0: OpenStack network configuration This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. 8.5.0 ^^^^^ New Features * A key called "domain" is now available for interfaces. This allows the setting of a domain for an ifcfg configuration, which will aide DNS search. * Support for configuring policy-based routing has been added. A new top-level object "route_table" has been added, which allows the user to add tables to the system route table at /etc/iproute2/rt_tables. Routes have a new "table" property for specifying which table to apply the route. Interfaces now have a "rules" property that allows the user to add arbitrary rules for when the system should use a particular routing table, such as input interface or source IP address. Changes in os-net-config 8.4.4..8.5.0 ------------------------------------- 10566ba Fixed the false InvalidConfigException for vfid=0 5c0b84d [FUP] Update sriov_pf.yaml samle with ethtool_opt 8133892 Add support for ethtool options for sriov_pf ports ffd2459 Unify ethtool options logic 18fa8b6 Add Policy Based Routing Support to os-net-config 683650a Add missing unit-test for IbInterface ethtool opts 580cce3 Add ability to specify multiple search domains 14690ff Enable setting domain parameter for interfaces cd0aa7d Modify udev rule for VF representor rename c505506 Add upper constraints to tox a09e801 OpenDev Migration Patch f7c1df0 Add ovs_options and ovs_extra parameters to VLAN object db52a40 Adding a udev rule to rename the vf representors. f386f12 Adding a udev rule to save sriov interface name before configuring switchdev 36a8fa9 Removing the warnings generated due to yaml.load() f26718f Fix os-net-config interface restarts when applying routes ccbda4e Configure switchdev mode in SR-IOV in os-net-config 9245f31 Allow adding sriov_pf over ovs_bridge, linux_bond and ovs_bond adff3c4 Fix incorrect application of 'ip' commands for bridges Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- etc/os-net-config/samples/bridge_vlan.json | 4 + etc/os-net-config/samples/bridge_vlan.yaml | 3 + etc/os-net-config/samples/routes.yaml | 52 ++ etc/os-net-config/samples/sriov_pf.json | 3 +- etc/os-net-config/samples/sriov_pf.yaml | 2 + etc/os-net-config/samples/sriov_pf_switchdev.json | 84 +++ etc/os-net-config/samples/sriov_pf_switchdev.yaml | 87 +++ os_net_config/__init__.py | 9 + os_net_config/cli.py | 23 +- os_net_config/impl_ifcfg.py | 243 +++++++- os_net_config/objects.py | 684 +++++++++++++-------- os_net_config/schema.yaml | 181 +++++- os_net_config/sriov_config.py | 163 ++++- os_net_config/utils.py | 13 +- os_net_config/validator.py | 2 +- .../enable-setting-domain-5557e2441c23a5a5.yaml | 5 + .../policy-based-routing-3fa1200ae155bbee.yaml | 10 + tox.ini | 4 +- 24 files changed, 1730 insertions(+), 353 deletions(-)

1 0

tripleo-validations 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are excited to announce the release of: tripleo-validations 8.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 8.4.5..8.5.0 ------------------------------------------- 49f8aad Sync 'validations/check-network-gateway.yaml' with the new role c2b34e2 Fix check-network-gateway validation 14c8416 Fix ctlplane-ip-range validations 4478763 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- tools/ansible-lint.sh | 2 +- validations/check-network-gateway.yaml | 45 ++++++++++++++++++++++++++-------- validations/ctlplane-ip-range.yaml | 28 +++++++++++++++------ 4 files changed, 58 insertions(+), 19 deletions(-)

1 0

python-tripleoclient 9.3.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are amped to announce the release of: python-tripleoclient 9.3.0: TripleO client This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 9.3.0 ^^^^^ New Features * A new command, openstack overcloud failures, is added to show the failures from a deployment plan when using config-download. * A new command, openstack overcloud status, is added to show the status of a deployment plan when using config-download. Changes in python-tripleoclient 9.2.7..9.3.0 -------------------------------------------- d38a5c1d Use OS_CACERT for zaqar's websocket connection 531c1504 Raise proper exception at webscocket close 7f8d8999 Handle tls endpoint for zaqar websocket client 901074e2 Add ODL deprecation warning in CLI 98a82780 Don't exit on a RUNNING message for deploy workflow e11afa0b OpenDev Migration Patch 6ce2039d [Queen Only] Add force option to undercloud update. 81484cc9 openstack overcloud failures 5a996ffa Use sync action get_deployment_failures 0d6a687e Don't validate stack when creating/updating plan 6851fc1b Check that the networks are defined on update 8072fc1e Add verbosity level to the ansible update/upgrade run 6b74184d Handle workflow error for enable_ssh_admin 10b14b06 overcloud plan deployment status 66fbbee6 Use a single queue for update/upgrade 4778455c Get the failed status for update prepare Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../notes/overcloud-failures-0e98b37251fb2be2.yaml | 4 + .../notes/overcloud-status-69d3cc931f50930e.yaml | 4 + setup.cfg | 2 + tripleoclient/constants.py | 19 ++- tripleoclient/exceptions.py | 4 + tripleoclient/plugin.py | 33 +++-- .../v1/overcloud_deploy/test_overcloud_deploy.py | 136 +++++++++++++++++++-- .../test_overcloud_ffwd_upgrade.py | 8 +- .../v1/overcloud_update/test_overcloud_update.py | 12 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 20 +-- tripleoclient/utils.py | 85 ++++++++++++- tripleoclient/v1/overcloud_deploy.py | 97 ++++++++++++++- tripleoclient/v1/overcloud_ffwd_upgrade.py | 9 +- tripleoclient/v1/overcloud_plan.py | 5 +- tripleoclient/v1/overcloud_update.py | 12 +- tripleoclient/v1/overcloud_upgrade.py | 13 +- tripleoclient/v1/undercloud.py | 20 ++- tripleoclient/v1/undercloud_backup.py | 4 +- tripleoclient/workflows/base.py | 4 +- tripleoclient/workflows/deployment.py | 72 ++++++++++- tripleoclient/workflows/package_update.py | 34 +++--- tripleoclient/workflows/plan_management.py | 11 +- 31 files changed, 732 insertions(+), 121 deletions(-)

1 0

paunch 2.5.2 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We contentedly announce the release of: paunch 2.5.2: Utility to launch and manage containers using YAML based configuration data This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. 2.5.2 ^^^^^ New Features * Add *--security-opt=xxx* option for the action run a container. Allows to define security options, such as turning labels (SELinux) on/off. Changes in paunch 2.5.1..2.5.2 ------------------------------ 90cf8bb Revert "docker/compose: quote health-cmd" dd9ca1a Add upper constraints for testing b4bce8a Allow configuring security options 6a39021 OpenDev Migration Patch 9fbbad5 docker/compose: quote health-cmd Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- paunch/builder/compose1.py | 2 ++ releasenotes/notes/Add-security-opt-76c14c9b39d35d3e.yaml | 5 +++++ tox.ini | 3 ++- 5 files changed, 14 insertions(+), 4 deletions(-)

1 0

os-apply-config 8.3.2 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: os-apply-config 8.3.2: Config files from cloud metadata This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 8.3.1..8.3.2 --------------------------------------- ad29f1d Don't render None as "null" 779fff5 OpenDev Migration Patch 3c570ff Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 4 ++-- os_apply_config/renderers.py | 2 ++ 4 files changed, 10 insertions(+), 3 deletions(-)

1 0

tripleo-heat-templates 8.4.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are satisfied to announce the release of: tripleo-heat-templates 8.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 8.4.0 ^^^^^ New Features ************ * Added the configuration option to disable Exact Match Cache (EMC) * Support setting values for "cephfs_volume_mode" manila parameter via the THT parameter ManilaCephFSCephVolumeMode. These control the POSIX rwx mode of the cephfs volumes, snapshots, and groups of these that back corresponding manila resources. Default value for ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the mode for these objects before it was settable. * Add new CinderNfsSnapshotSupport parameter, which controls whether cinder's NFS driver supports snapshots. The default value is True. * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * The parameter "NovaRbdPoolName" is changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * New parameter "NovaNfsVersion" allow configuring the NFS version used for nova storage (when NovaNfsEnabled is true). Since NFSv3 does not support full locking a NFSv4 version need to be used. To not break current installations the default is the previous hard coded version 4. * The Shared File Systems service (manila) API has been switched to running behind httpd, and it now supports configuring TLS options. Upgrade Notes ************* * Cinder's NFS driver does not support snapshots unless the feature is explicitly enabled (this policy was chosen to ensure compatibility with very old versions of libvirt). The CinderNfsSnapshotSupport default value is True, and so the new default behavior enables NFS snapshots. This change is safe because it just enables a capability (i.e. snapshots) that other cinder drivers generally provide. * Per-service config_settings should now use hiera interpolation to set the bind IP for services, e.g "%{hiera('internal_api')}" whereas prior to this release we replaced e.g internal_api for the IP address internally. The network name can still be derived from the ServiceNetMap - all the in-tree templates have been converted to the new format, but any out of tree templates may require similar adjustment. * Keystone catalog entries for Cinder's v1 API are no longer created, but existing entries will not be automatically deleted. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * It is now possible for temporary containers inside THT to test if they are being run as part of a minor update by checking if the TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said containers need to export it to the container explicitely), see <service>_restart_bundles for examples. * When setting up TLS everywhere, some deployers may not have their FreIPA server in the ctlplane, causing the ipaclient registration to fail. We move this registration to host-prep tasks and invoke it using ansible. At this point, all networks should be set up and the FreeIPA server should be accessible. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * With large number of OSDs, where each OSD need a connection, the default nofile (1024) of nova_compute is too small. This changes the default DockerNovaComputeUlimit to 131072 what is the same for cinder. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. * If nova-manage command was triggered on a host for the first time as root (usually manual runs) the nova-manage.log gets created as root user. On overcloud deploy runs the nova-manage command is run as nova user. In such situation the overcloud deploy fails as the nova user can not write to the nova-manage.log. With this change we run the chown of the logs files on every overcloud deploy to fix the nova-manage.log file permissions. * The keystone service and endpoint for Cinder's API v1 are no longer created. Cinder removed support for its v1 API in Queens. * Historically if a puppet definition for a pacemaker resource did change puppet would not update it. We now enable the updating of pacemaker resources by default. The main use case being restarting a bundle when a bind mount gets added. Puppet will wait for the resource to completely restart before proceeding with the deploy. Other Notes *********** * The common tasks in deploy-steps-tasks.yaml that are common to all roles are now tagged with one of: host_config, container_config, container_config_tasks, container_config_scripts, or container_startup_configs. * The step plays in deploy-steps.j2 (which generates the deploy_steps_tasks.yaml playbook) are now tagged with step[1-5] so that they can run individually if needed. Changes in tripleo-heat-templates 8.3.1..8.4.0 ---------------------------------------------- bc1bfd8f7 Fix NovaNfs role parameters 7e9e0cd60 Remove scenario008 jobs f6883a0bf Fix log owner on computes during overcloud deploy runs 190689f4e Use auth_uri for Neutron API for Nova Placement 8b73814e7 Re-enable manila dashboard 127508c0f Backport miss to run discovery via bootstrap_host_exec 103431bba Add ComputeHCIOvsDpdk role a17f79890 Fix correct network for nova-vnc 7b1e923ed Add panko_api_cron container 7e6b6bafa Add {{role.name}}RemovalPoliciesMode parameter 45ab7d963 Fix undefined variable python_interpreter 6cfa2976a Request certificate for using host service principals e42e72b0f Configure server_certs_key_passphrase for Octavia b2a9af00f Start/enable OVS on neutron ovs agent nodes 68dfc3006 Only request neutron certificate from neutron dhcp service 8d4f109a6 Clean metrics related environments 13f77b981 Revert "[queens-only] Write docker config scripts only if config exists" 0d77e3d31 Configure Neutron API for Nova Placement... 257315572 Fix ssl.yaml generating GaneshaInternal in the endpoint map 916a5378c OVN: Add env file to deploy SRIOV with OVN. 43b074c10 Do not bind /run on host to nova_migration_target be2977005 Remove bogus EXPERIMENTAL from services-docker file. 40467b0f3 [Rocky/Queens Only] Remove pre-upgrade validation tasks in cont services. 9934640fc Fix service auth URL in Octavia 82875a493 Fix haproxy stats network binding 073851d32 [queens-only] Write docker config scripts only if config exists 5e5f2d0f3 Fix custom network.name_lower in krb-service-principals 7edda0e2b Convert ServiceNetMap evals to hiera interpolation 525def101 Remove the iptables rules set via service_config_settings a3662c067 Run collectd socket cleanup on container start 560f88532 Make krb-service-principal metadata per-Role 2c4004d7a [stable queens/pike] Use server_not_blacklisted condition 67b2ec841 Add domain and no-ntp options to ipaclient e59c324e4 [FFWD] Fix cell0 database uri 2d9b95971 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames fd92a337b Add ability to specify dns search domains eee4d27a4 Fix IPA client when doing brownfield deployment of internal TLS 5c37edc49 Add mkhomedir option to ipa-client-install 4a377819d Only add internal_api_virtual_ip if InternalApi in network_data 35fc35bc1 Try a timesync as part of first boot 4bce0f151 Enable serial execution for ansible host 4bde3dc4d Add cinder credentials to nova conf c47de732a Set arp_notify to match ndisc_notify 306412539 Remove deprecated Ram/Disk filters in NovaSchedulerDefaultFilters 518741618 Fix NovaNfs role parameter precedence in conditions 10a6610f4 Remove OVNTunnelEncapType 181ecb583 Deployment: Properly pick bootstrap node per role 3ff4bdcd3 Enable ndisc_notify sysctl setting to notify of MAC changes f14b4dcd8 Add parameter to configure maxdelay in db purge/archive job 3c9f7577c Allow ssh from all for undercloud b81c74437 implement default ssh-from-ctlplane rule via hiera 72b0b93d2 Ensure there is no redis on host cce6c7e34 Run nova-manage as root to prevent wrong nova-manage.log permissions 92d860e73 Run nova_cell_v2_discover_hosts.py on every deploy run 74ba670bb Allow NovaNfs parameters to be role specific d8e4ee655 Avoid concurrent nova cell_v2 discovery instances fa69837f9 Switch Manila API to httpd and support TLS d158bc7fc Modifying the ovs-hw-offlaod file to adapt new changes 169ceb9a9 OpenDev Migration Patch 0fb8970bb fix storage.yaml to write environments/storage/nova-nfs.yaml 450d50f54 Run octavia-api under httpd 5f147a0b2 Add release check for ffwd upgrade tasks 7577c22f1 Allow NovaRbdPoolName to be role specific babe303f2 Fixed wrong cinder store user name 847ec663c ceilometer_agent_notification: disable-panko.yaml 33784c053 Remove deprecated value used to set nova_metadata_ip 9ddef7106 Provide option to disable EMC in puppet-vswitch 3c0a2190f Increase DockerNovaComputeUlimit default value 35b4bf6e0 Set ulimit 16384 for Neutron SR-IOV container bf87c099c Fix usage of satellite in organization mode bc30fb036 Increase default ulimit values for Neutron agents containers dc9a67ced Do not restart bundles during a minor update 79eddd155 Be able to know when we are running inside a minor update workflow 2a734381f Enable deep_compare of pcmk resources by default 9a1ebb368 Add GnocchiStorageS3BucketPrefix into deployment bb9592fd3 Add support to ping IPv6 metadata IP 3bc041b47 Fix tempest volume tests on queens 96de607ed Add support for cinder NFS snapshots f6c4f652c [queens-only] Remove primary role constraint to deploy NodeTLSData e51967ff2 Disable a directory listing of /icons in httpd. 9b78d4eff TLS everywhere: switch Octavia to use DNS entries ff5a5bf5a Simplify ssh known_hosts entries for non-default port 65b285ffa Include ssh known_hosts entries for non-default port 95b235403 Enable flat network for ovn 48b277cdc [Queens-only] Install and configure tmpwatch for log cleanup 221a9eb5d Pass all vars to deploy-steps-tasks.yaml with config-download 849d5ce55 Fix reload notification file 4826a2de3 Stop iscsid when running FFU tasks. 23271148f Make nfs version for nova ephemeral storage configurable bd5246616 Remove unused parameter NovaPassword fb4ef9101 Disable cinder's LVM backend when deploying Pure backend f7bae9b7f Fix python binary lookup regression 86c8de92b Don't create service or endpoint for cinder API v1 f036df558 Run chown for nova log files on every run to fix wrong permissions 1cb29d0c8 Add missing TLS configuration for ironic 68e57adde Remove ENV parameters for nova_cell_v2_discover_host.py ace57871f Convert with_dict tasks to use loop and be less chatty f56b8b547 Optional ICMP validation of controllers and gateways 4f4bd1c28 Tag tasks in in common tasks ec02985da Reload rsyslog/cron when we change timezones 2c7f55cf1 Support cephfs_volume_mode parameter 7fad087a8 Refactored configuration options for nova/neutron in manila f29a2fdeb Switch scenario004-multinode-containers to Ceph filestore 7761ae38d Fix idempotency for horizon container logs 9e26c529a Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient 0371fb3c3 Add missing entries for Pure Storage Cinder Backend and fix typos 8d77ea169 Move cellv2 discovery from control plane services to compute services 6d44ae7b6 (Queens only) Remove privileged capabilities from nova-metadata c05aa892e [stable/queens] Add a check for kernels args update to avoid unnecessary reboot 967542fcb [stable/queens] Disable default config-download method for PreNetworkConfig 8aa46b6c8 NFV: Support for config-download to deploy node with kernel args 75f604ed7 Remove the rokcy services from queens ComputeOvsDpdkSriov role fce40e60a Move ipa enrollment to host_prep_tasks a89cd6b19 Switch scenario00{1,4}-multinode-containers to Ceph bluestore 6297c1b2d [FFU] Ensure compatibility with ansible 2.6. 317c3ecea Don't look for primary_role ips in AllNodesValidationConfig a9d10fdf7 minor update: move VIP before stopping pacemaker on a node c49911a5b Upgrades: Ensure idempotency of pacemaker services f10d3c3d5 certmonger: Don't restart haproxy on cert renewal 57e4ac345 Remove "when failed" from debug task names 0bb498182 Tag step plays b87f6a257 Handle upper and lower case system uuids be9e50c4e Add CertmongerUser role to OVB defaults 7794cc60c Adding support of glance cinder store settings b6ebb07c7 Add missing RoleParameters and ServiceNames a247fa3a7 Remove ties between ceilometer and panko 4c51665b3 Fix generation of configs that contain password files 49a87e0be mysql: sync credentials in running container on password change b5f792f8f FFWD: Introduce workaround for neutron cisco plugin c9b06deaa mysql: do not overwrite password file during docker-puppet 1cbc51af3 Remove console as opendaylight log mechanism Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- all-nodes-validation.yaml | 12 ++ .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + ci/environments/ovb-ha.yaml | 2 + .../scenario001-multinode-containers.yaml | 13 +- .../scenario004-multinode-containers.yaml | 1 - ci/environments/scenario010-standalone.yaml | 99 +++++++++++ common/deploy-steps-tasks.yaml | 150 ++++++++++++++--- common/deploy-steps.j2 | 23 ++- .../{services.yaml => services/role.role.j2.yaml} | 17 +- deployed-server/deployed-server-roles-data.yaml | 1 + .../octavia/octavia-deployment-config.yaml | 10 +- .../nova_cell_v2_discover_hosts.py | 55 ++++++ .../nova_wait_for_compute_service.py | 96 +++++++++++ environments/cavium-liquidio.yaml | 2 +- environments/cinder-pure-config.yaml | 2 + environments/config-download-environment.yaml | 4 + environments/disable-panko.yaml | 11 ++ environments/hyperconverged-ceph.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-cephfsnative-config.yaml | 1 + environments/metrics/collect-read-rabbitmq.yaml | 15 ++ .../collectd-standalone.yaml} | 0 environments/metrics/collectd-write-qdr.yaml | 28 ++++ environments/neutron-ml2-ovn-ha.yaml | 2 +- environments/neutron-ovs-dpdk.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- environments/ovs-hw-offload.yaml | 16 +- .../neutron-opendaylight-dpdk.yaml | 4 +- .../neutron-opendaylight-hw-offload.yaml | 2 +- .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 1 - .../services-baremetal/neutron-ovs-dpdk.yaml | 2 +- .../services-baremetal/neutron-ovs-hw-offload.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services-baremetal/octavia.yaml | 5 +- .../services-docker/neutron-opendaylight.yaml | 1 - environments/services-docker/neutron-ovn-ha.yaml | 2 +- environments/services-docker/neutron-sriov.yaml | 5 +- .../services/neutron-opendaylight-dpdk.yaml | 4 +- .../services/neutron-opendaylight-hw-offload.yaml | 2 +- .../services/neutron-opendaylight-sriov.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 17 ++ environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-ovs-hw-offload.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/octavia.yaml | 5 +- ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 5 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 6 +- environments/storage-environment.yaml | 2 + environments/storage/external-ceph.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 2 + .../role.role.j2.yaml} | 29 +++- .../rhel-registration/rhel-registration.yaml | 6 + .../rhel-registration/scripts/rhel-registration | 13 +- extraconfig/pre_network/boot-params-service.yaml | 102 ++++++++++++ ...ible_host_config.yaml => boot_param_tasks.yaml} | 42 ++++- extraconfig/pre_network/config_then_reboot.yaml | 7 + .../pre_network/host_config_and_reboot.yaml | 30 +++- extraconfig/services/ipaclient.yaml | 184 +++++++++++++++++++++ extraconfig/services/tmpwatch-install.yaml | 43 +++++ firstboot/os-net-config-mappings.yaml | 5 +- firstboot/userdata_timesync.yaml | 97 +++++++++++ net-config-bond.j2.yaml | 8 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/scripts/run-os-net-config.sh | 10 +- network/service_net_map.j2.yaml | 2 + overcloud-resource-registry-puppet.j2.yaml | 20 ++- overcloud.j2.yaml | 29 ++-- puppet/all-nodes-config.j2.yaml | 12 +- puppet/extraconfig/pre_deploy/per_node.yaml | 16 +- puppet/role.role.j2.yaml | 33 ++-- puppet/services/aodh-api.yaml | 9 +- puppet/services/apache.j2.yaml | 13 +- puppet/services/barbican-api.yaml | 7 +- puppet/services/ceph-base.yaml | 21 ++- puppet/services/ceph-external.yaml | 9 +- puppet/services/ceph-mon.yaml | 8 +- puppet/services/ceph-rgw.yaml | 7 +- puppet/services/cinder-api.yaml | 23 ++- puppet/services/cinder-backend-pure.yaml | 19 ++- puppet/services/cinder-base.yaml | 8 +- puppet/services/cinder-volume.yaml | 16 +- puppet/services/congress.yaml | 7 +- puppet/services/database/mongodb.yaml | 9 +- puppet/services/database/mysql-client.yaml | 7 +- puppet/services/database/mysql.yaml | 25 ++- puppet/services/database/redis-base.yaml | 14 +- puppet/services/docker-registry.yaml | 6 +- puppet/services/ec2-api.yaml | 12 +- puppet/services/etcd.yaml | 9 +- puppet/services/glance-api.yaml | 21 ++- puppet/services/gnocchi-api.yaml | 9 +- puppet/services/gnocchi-base.yaml | 5 + .../haproxy-internal-tls-certmonger.j2.yaml | 10 +- puppet/services/haproxy-public-tls-certmonger.yaml | 2 +- puppet/services/haproxy.yaml | 6 + puppet/services/heat-api-cfn.yaml | 16 +- puppet/services/heat-api.yaml | 16 +- puppet/services/horizon.yaml | 13 +- puppet/services/ironic-api.yaml | 16 +- puppet/services/ironic-conductor.yaml | 30 +++- puppet/services/ironic-inspector.yaml | 14 +- puppet/services/kernel.yaml | 4 + puppet/services/keystone.yaml | 16 +- puppet/services/manila-api.yaml | 56 ++++++- puppet/services/manila-backend-cephfs.yaml | 4 + puppet/services/manila-scheduler.yaml | 21 +-- puppet/services/manila-share.yaml | 17 ++ puppet/services/memcached.yaml | 7 +- puppet/services/metrics/collectd.yaml | 1 + puppet/services/mistral-api.yaml | 14 +- puppet/services/neutron-api.yaml | 24 ++- puppet/services/neutron-base.yaml | 30 ---- puppet/services/neutron-dhcp.yaml | 15 ++ puppet/services/neutron-linuxbridge-agent.yaml | 7 +- puppet/services/neutron-metadata.yaml | 1 - puppet/services/neutron-ovs-agent.yaml | 16 +- puppet/services/neutron-plugin-ml2-ovn.yaml | 7 +- puppet/services/nova-api.yaml | 9 +- puppet/services/nova-base.yaml | 13 +- puppet/services/nova-compute.yaml | 71 +++++++- puppet/services/nova-libvirt.yaml | 13 +- puppet/services/nova-metadata.yaml | 12 +- puppet/services/nova-migration-target.yaml | 24 ++- puppet/services/nova-placement.yaml | 9 +- puppet/services/nova-vnc-proxy.yaml | 15 +- puppet/services/octavia-api.yaml | 41 ++--- puppet/services/octavia-base.yaml | 8 +- puppet/services/opendaylight-api.yaml | 7 +- puppet/services/opendaylight-ovs.yaml | 7 +- puppet/services/openvswitch.yaml | 9 + puppet/services/ovn-controller.yaml | 12 +- puppet/services/ovn-dbs.yaml | 7 +- puppet/services/pacemaker.yaml | 23 +++ puppet/services/pacemaker/database/mysql.yaml | 8 +- puppet/services/pacemaker/database/redis.yaml | 6 +- puppet/services/panko-api.yaml | 9 +- puppet/services/qdr.yaml | 7 +- puppet/services/rabbitmq.yaml | 16 +- puppet/services/sahara-api.yaml | 9 +- puppet/services/sshd.yaml | 19 ++- puppet/services/swift-proxy.yaml | 14 +- puppet/services/swift-storage.yaml | 7 +- puppet/services/tacker.yaml | 7 +- puppet/services/time/timezone.yaml | 13 ++ puppet/services/tripleo-firewall.yaml | 6 + puppet/services/zaqar-api.yaml | 21 ++- .../notes/OvsDisableEMC-ab29e5c08856d439.yaml | 3 + ...eph_volume_mode-parameter-5553a9b39718a749.yaml | 9 + ...nder-nfs-snapshot-support-16664aa46a67a5ad.yaml | 13 ++ ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/hiera_net_ip_map-ff866b443a28bdc4.yaml | 9 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../notes/minor-update-env-20657417094d4aeb.yaml | 7 + ...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml | 8 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va-rbd-pool-role-specific-010f6072d641d84f.yaml | 6 + ...va_add_nfs_vers_parameter-62b9e9d6150358d1.yaml | 8 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + .../nova_compute_nofile-0427e49cc8ae70a6.yaml | 6 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + ...run_chown_on_every_deploy-c366af9898ecaeed.yaml | 9 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + .../remove-cinder-api-v1-66a24998d7f8e985.yaml | 9 + ...-api-to-httpd-support-tls-9b995fe4113b2412.yaml | 5 + .../notes/tag-common-tasks-4a78275787655fdd.yaml | 6 + .../notes/tag-step-plays-b1b1ea7584f1665d.yaml | 5 + ...-pcmk-resource-by-default-ed54100721f55a30.yaml | 8 + roles/BlockStorage.yaml | 1 + roles/CephAll.yaml | 1 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 61 +++++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 4 +- roles/ComputeOvsDpdkSriovRT.yaml | 4 +- roles/ComputeRealTime.yaml | 2 + roles/ComputeSriov.yaml | 2 + roles/ComputeSriovRT.yaml | 2 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephFile.yaml | 1 + roles/HciCephMon.yaml | 1 + roles/HciCephObject.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 1 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 1 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 1 + roles_data.yaml | 6 + roles_data_undercloud.yaml | 1 + sample-env-generator/ssl.yaml | 13 +- sample-env-generator/storage.yaml | 2 + tools/check-up-to-date.sh | 2 +- tools/process-templates.py | 7 + tools/yaml-diff.py | 32 ++++ tools/yaml-validate.py | 22 ++- validation-scripts/all-nodes.sh | 8 +- zuul.d/layout.yaml | 7 - 337 files changed, 3059 insertions(+), 1009 deletions(-)

1 0

puppet-tripleo 8.5.0 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We enthusiastically announce the release of: puppet-tripleo 8.5.0: Puppet module for OpenStack TripleO This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 8.5.0 ^^^^^ New Features * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * Add the ability to configure the nfs_snapshot_support parameter associated with Cinder's NFS backend. Changes in puppet-tripleo 8.4.1..8.5.0 -------------------------------------- 4ad7bb2d Release 8.5.0 (queens) 233390c6 Remove scenario008 jobs 7846d0f4 Allow mysql options to be set for the HA bundle 78f21fcf Only request certs in step 1 5553f8df Revert "Refactor collectd/gnocchi integration" 0ed388fe Revert "Only request certs in step 1" af477310 Only request certs in step 1 2abb6f11 Add support for external Ganesha service in Manila Share profile 06be0e18 Allow external Ganesha for the cephfs manila backend 87744ef3 Fix tripleo::haproxy::stats to be more correct and flexible 51ddc3a4 Switch metrics qdrs to edge mode 2a9f0d89 Refactor collectd/gnocchi integration 19af98c5 Rebuild initramfs after applying change in kernel parameters ec4b1b6f Fix horizon firewall rules in composable roles 2e7ef9d3 Add nova::cinder to nova compute ffb16f60 Fix missing version requirements a7724704 certmonger: Add dnsnames parameter to redis cert request ca09edf7 Expose innodb_lock_wait_timeout via hieradata. 8cbdf9b5 Fix kolla permissions errors inside nova_virtlogd d8b0dc73 remove ssh from tripleo::firewall::pre fdd7375e Move unfencing to meta_params 3078d2f1 Support redfish inside a fencing yaml file 249d5a27 Enable disablereuse option in Zaqar proxy backend bc58f0b9 Check for neutron_plugin_ml2_ansible service when including plugin 01e9a88e Add httpd and tls support to manila-api d6126d0f OpenDev Migration Patch f73b12b5 Run octavia-api under apache 6b3573b0 Add an Endpoint in ceilometer 9e55aa1d Disable curl globbing 0fd68e46 Simplify logrotate job 0965019e Fix ntp module version to an existing tag/branch 5ccf98ca Allow neutron wrapper containers log to syslog fbe6e4b1 Add ability to configure Cinder's NFS snapshot support 2a5f69fa Add missing s3 case in gnocchi::api 64e29232 Handle image_volume_cache_enabled in PureStorage Cinder backend. f4aac8ac Fix generating connections to OVN db 421b47cd snmp: remove ununsed trapsink 48dbeafd Pin puppet-sensu module 148d993e Enable internal TLS options for ironic API 0bcc21d0 Support cephfs_volume_mode parameter a3ad6637 Adding a udev rule to save sriov interface name before configuring switchdev 25c13e70 Change haproxy mode to http for octavia Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 4 +- lib/puppet/provider/sriov_vf_config/numvfs.rb | 18 +++ manifests/certmonger/ca/crl.pp | 2 +- manifests/certmonger/redis.pp | 9 +- manifests/fencing.pp | 3 + manifests/firewall/pre.pp | 6 - manifests/haproxy.pp | 16 ++- manifests/haproxy/horizon_endpoint.pp | 27 ++++ manifests/haproxy/stats.pp | 19 +-- manifests/profile/base/ceilometer.pp | 67 ++++++++-- manifests/profile/base/certmonger_user.pp | 138 +++++++++++--------- manifests/profile/base/cinder/volume/nfs.pp | 6 + manifests/profile/base/cinder/volume/pure.pp | 6 + manifests/profile/base/database/mysql.pp | 7 + manifests/profile/base/gnocchi/api.pp | 1 + manifests/profile/base/kernel.pp | 8 ++ manifests/profile/base/manila/api.pp | 40 ++++++ manifests/profile/base/manila/share.pp | 29 +++-- manifests/profile/base/metrics/qdr.pp | 145 +++++++++++++++++++++ manifests/profile/base/neutron/agents/ovn.pp | 2 +- manifests/profile/base/neutron/ovn_metadata.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 11 +- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/libvirt.pp | 14 +- manifests/profile/base/octavia/api.pp | 41 ++++-- manifests/profile/base/pacemaker/instance_ha.pp | 2 +- manifests/profile/base/snmp.pp | 1 - manifests/profile/base/swift/ringbuilder.pp | 4 +- .../profile/pacemaker/database/mysql_bundle.pp | 8 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +-- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 4 +- manifests/profile/pacemaker/ovn_northd.pp | 4 +- manifests/ui.pp | 5 +- metadata.json | 8 +- ...eph_volume_mode-parameter-220b1026aebd9e3b.yaml | 5 + ...nder-nfs-snapshot-support-ac547f24dddf97e8.yaml | 5 + spec/classes/tripleo_certmonger_ca_crl_spec.rb | 4 +- spec/classes/tripleo_firewall_spec.rb | 13 -- .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 27 +++- .../tripleo_profile_base_octavia_api_spec.rb | 1 - .../classes/tripleo_profile_base_pacemaker_spec.rb | 2 +- spec/classes/tripleo_profile_base_snmp_spec.rb | 1 - ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 1 + templates/logrotate/containers_logrotate.conf.erb | 7 - templates/neutron/dibbler-client.epp | 1 + templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 1 + templates/neutron/keepalived.epp | 1 + templates/neutron/radvd.epp | 1 + templates/redis/redis-notifications.sh.erb | 2 +- templates/switchdev/switchdev.epp | 1 + zuul.d/layout.yaml | 8 -- 55 files changed, 576 insertions(+), 195 deletions(-)

1 0

instack-undercloud 8.4.8 (queens)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are gleeful to announce the release of: instack-undercloud 8.4.8: instack-undercloud This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in instack-undercloud 8.4.7..8.4.8 ------------------------------------------ 957a34bd Fixed mistral hanging processing the list of failed actions 0238882e Fix stack_name reference 89b09d3e Remove deprecated Ram/Disk filters in scheduler_default_filters a098fbc6 [queens-only] Increase the innodb file size by default d12465b4 [queens-only] Rename the systemctl-daemon-reload exec 5babfee1 Wrap the undercloud public_host IP for IPv6 7d1e5994 Get the stack name if possible before running the validations group 3d856388 [queens] re-add ssh firewall rule 67720755 OpenDev Migration Patch a96812f8 Enable override of overcloud status check for undercloud update. dc2f29ac [Queens-only] Ensure epmd is spawned by systemd before redeploy bbe2840e [Queens-only] Restart Erlang VM on undercloud upgrade 1a5a2a63 Disable stack check and cancel update for undercloud Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../puppet-stack-config/puppet-stack-config.pp | 6 +- .../puppet-stack-config.yaml.template | 11 +- .../os-apply-config/root/stackrc | 2 +- .../configure.d/40-stop-running-epmd | 35 +++++++ instack_undercloud/undercloud.py | 109 ++++++++++++++------ scripts/instack-pre-upgrade-undercloud | 4 + scripts/instack-upgrade-undercloud | 4 + templates/config.json.template | 1 + 10 files changed, 243 insertions(+), 44 deletions(-)

1 0

rally 1.6.0
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We joyfully announce the release of: rally 1.6.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 1.5.1..1.6.0 ----------------------------- ee13ba498 Propose 1.6.0 release 45cc9ad01 [verify ]Fix several py3 issues c5a5bc83d Update SQLAlchemy in upper-constraints.txt bcdcfc790 install_rally.sh: moved zypper pkg manager up to handle case when yum is installed on SUSE to fulfill dependencies. f99f44224 Allow regular expressions in skip-list 3f4c55771 [changelog] get back 1.4.1 release Diffstat (except docs and test files) ------------------------------------- CHANGELOG.rst | 18 ++++ ...step_9_verifying_cloud_via_tempest_verifier.rst | 11 ++- etc/docker/README.md | 8 +- install_rally.sh | 15 +-- rally/api.py | 3 +- rally/cli/commands/verify.py | 11 ++- rally/common/db/api.py | 16 ++-- rally/plugins/common/verification/testr.py | 12 +-- rally/verification/context.py | 46 +++++++++ rally/verification/manager.py | 10 +- .../unit/plugins/common/verification/test_testr.py | 105 +++++++++++++++++++-- upper-constraints.txt | 4 +- 16 files changed, 223 insertions(+), 45 deletions(-)

1 0

ironic 12.2.0 (train)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We contentedly announce the release of: ironic 12.2.0: OpenStack Bare Metal Provisioning This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.2.0 ^^^^^^ New Features ************ * Adds option "allow_deleting_available_nodes" to control whether nodes in state "available" should be deletable (which is and stays the default). Setting this option to "False" will remove "available" from the list of states in which nodes can be deleted from ironic. It hence provides protection against accidental removal of nodes which are ready for allocation (and is meant as a safeguard for the operational effort to bring nodes into this state). For backwards compatibility reasons, the default value for this option is "True". The other states in which nodes can be deleted from ironic ("manageable", "enroll", and "adoptfail") remain unchanged. This option can be changed without service restart. * Adds capability to hardware type "idrac" for creating and deleting RAID sets without rebooting the baremetal node. This realtime mechanism is supported on PERC H730 and H740 RAID controllers that are running firmware version 25.5.5.0005 or later. * Adds "reset_idrac" and "known_good_state" cleaning steps to hardware type "idrac". "reset_idrac" actually resets the iDRAC; "known_good_state" also resets the iDRAC and clears the Lifecycle Controller job queue to make sure the iDRAC is in good state. * API version 1.58 allows backfilling allocations for existing deployed nodes by providing "node" to "POST /v1/allocations". * API version 1.57 adds a REST API endpoint for updating an existing allocation. Only "name" and "extra" fields are allowed to be updated. * Adds a new option "enable_mdns" which enables publishing the baremetal API endpoint via mDNS as specified in the API SIG guideline (http://specs.openstack.org/openstack/api-sig/guidelines /dns-sd.html). * Adds a "[conductor]send_sensor_data_for_undeployed_nodes" option to enable ironic to collect and transmit sensor data for all nodes for which sensor data collection is available. By default, this option is not enabled which aligns with the prior behavior of sensor data collection and transmission where such data was only collected if an "instance_uuid" was present to signify that the node has been or is being deployed. With this option set to "True", operators may be able to identify hardware in a faulty state through the sensor data and take action before an instance workload is deployed. * The Smart-Nic functionality that was added to the Bare Metal Service during the Stein cycle can now be used with a Train version of the Networking Service (neutron) as Smart-Nic support merged into that project during the Train development cycle. Upgrade Notes ************* * Updates the minimum required version of "python-dracclient" to "3.0.0" when using the "idrac" hardware type. * Removes "commit_required" from the dictionary returned by the "set_bios_config" vendor passthru call in the "idrac" hardware type. "commit_required" was split into two keys: "is_commit_required" and "is_reboot_required", which indicate the actions necessary to complete setting the BIOS settings. "commit_required" was removed in "python-dracclient" version 3.0.0. * Removes deprecated option "[ilo]/power_retry". Please use "[conductor]/soft_power_off_timeout" instead. * Removes the configuration option "[DEFAULT]/hash_distribution_replicas" which was deprecated in the Stein cycle. * Removes the configuration option "[DEFAULT]enabled_drivers". The option was deprecated in Rocky, and setting this option has raised an exception preventing conductor from starting since then. "[DEFAULT]enabled_hardware_types" should be used instead. * Updates the minimum required version of "ironic-lib" to "2.17.1". Deprecation Notes ***************** * The configuration option "[DEFAULT]/fatal_exception_format_errors" is now deprecated. Please use the configuration option "[ironic_lib]/fatal_exception_format_errors" instead. Bug Fixes ********* * Fixes an issue where the Networking Service performs a pre-flight operation which can exceed the prior default for "30" seconds. The new default is "45" seconds, and operators can tune the setting via the "[neutron]request_timeout" setting. * Fixes overflowing of the node fields "last_error" and "maintenance_reason", which would prevent the object from being correctly committed to the database. The maximum message length can be customized through a new configuration parameter, "[DEFAULT]/log_in_db_max_size" (default, 4096 characters). * Fixes an issue encountered during deployment, more precisely during the configdrive partition creation step. On some specific devices like NVMe drives, the created configdrive partition could not be correctly identified (required to dump data onto it afterward). See story 2005764 (https://storyboard.openstack.org/#!/story/2005764) * Fixes an issue regarding the "ansible" deploy interface cleaning workflow. Handling the error in the driver and returning nothing caused the manager to consider the step done and go to the next one instead of interrupting the cleaning workflow. * Fixes an issue with the "ansible" deploy interface where raw images could not be streamed correctly to the host. * Fixes deployment with the "ansible" deploy interface and instance images with GPT partition table. * Fixes traceback on cleaning of nodes with the "redfish" hardware type if their BMC does not support BIOS settings. * Fixes an issue where the sensor data parsing method for the "ipmitool" interface lacked the ability to handle the automatically included *ipmitool* debugging information when the "debug" option is set to "True" in the ironic.conf file. As such, extra debugging information supplied by the underlying "ipmitool" command is disregarded. More information can be found in story 2005331 (https://storyboard.openstack.org/#!/story/2005332) * Fixes an issue where deploy fails during node preparation if the node "capabilities" are passed as string. * Fixes GRUB configuration file generation procedure when building bootable ISO images that include user EFI boot loader image. Prior to this fix, no bootable ISO image could be generated unless EFI boot loader is extracted from deploy ISO image. * Fixes an issue when the image source is a local file, the image will be truncated to 2G and fails deployment due to image corruption. * Fixes binary files upload to Swift. Prior to this fix, binary file upload to Swift might fail at unicode characters interpretation. * The internal JSON RPC server now binds to "::" by default, allowing it to work correctly with IPv6. * This fix binds the jsonschema to use draft-04 for raid schema. The jsonschema 3.0.1 supports draft-03, draft-04, draft-06 and draft-07 and by default the validate function uses latest draft validator. Draft-04 is the latest draft in the jsonschema 2.6. Hence binding the schema to draft-04 validator makes it compliant for both jsonschema 2.6 and jsonschema 3.0.1. * Fixes the duplication of the "ipxe" tag when using IPv6, which leads to the dhcp server possibly returning an incorrect response to the DHCPv6 client. * Fixes an issue where nodes in the process of deployment may have metrics data collected and transmitted during the deployment process which may erroneously generate alarms depending on the operator's monitoring configuration. This was due to a database filter relying upon the indicator of an "instance_uuid" as opposed to the state of a node. * No longer tries to create a temporary URL with zero lifetime if the "deploy_callback_timeout" option is set to zero. The default of 1800 seconds is used in that case. Use the new "configdrive_swift_temp_url_duration" option to override. Changes in ironic 12.1.0..12.2.0 -------------------------------- 0cf907bd0 Spruce up release notes for 12.2.0 release dcab7df39 Update API history and release mapping for 12.2.0 d02acfb3b DRAC: Adding reset_idrac and known_good_state cleaning steps 809653e12 devstack: add missing variables for ironic-python-agent-builder 2fde1940b Remove ipxe tags when ipx6 is in use. c59dc1386 Update qemu hook to facilitate Multicast 46884deba redfish: handle missing Bios attribute 43f7bf9f0 Fix :param: in docstring df5ac6d5b Updates ironic for using ironic-python-agent-builder c2ab34a8c Do not log an exception if Allocation is deleted during handling. 6ca99d673 Add release note updating status of smartnics f5dbf8ba0 Switch to use exception from ironic-lib 87464fbbc Change constraints opendev.org to release.openstack.org a09a34207 Ansible module: fix configdrive partition creation step a3634840f Remove deprecated option [DEFAULT]enabled_drivers 9ffb6054d Fix regex string in the hacking check 2d4380e32 Add api-ref for allocation update 55e8d3fde Add a pxe/uefi/grub2 CI job 234dea98b Bump lower mock version to 3.0.0 77b8898fd Start using importlib for Python 3.x 99137706e Remove XML support in parsable_error middleware 45020712d Fix binary file upload to Swift 5c4efd3b6 fix typo in code comment 5b0ec703c Software RAID: Trigger grub installation on the holder disks 73845b365 Move stray reno file db7d9bb1f Trivial: correct configuration option copy-pased from inspector cc10323db Remove commit_required in iDRAC hardware type 75d796e73 Make the multinode grenade job voting again 6849a43cf devstack: configure rabbit outside of API configuration 2c42e3cdf Blacklist python-cinderclient 4.0.0 c36a01a43 Publish baremetal endpoint via mdns 4537e2c54 Fix inaccurate url links 9ed910139 Update sphinx requirements a0f0e52b8 Allocation API: correct setting name to None 8f6bf4f9d Allocation API: backfilling allocations 306aebad4 Fix GRUB config path when building EFI ISO 5d054cac4 Add DHCP server part to make the document more detail f8e1fbf30 Do not try to return mock as JSON in unit tests 5dd64771d Remove deprecated option [ilo]power_retry aec48ca27 Add API to allow update allocation name and extra field befc4a61e Update Python 3 test runtimes for Train a89e903f7 Replace hardcoded "stack" user to $STACK_USER bace52165 Run vbmcd as stack user in devstack 9d5461506 Adding enabled_boot_interface attribute in tempest config d308d10cd Add openstack commands in node deployment guide 2c8f3a95a Add a high level vision reflection document 3a54fe3e8 Add iDRAC driver realtime RAID creation and deletion 810670cf1 Correct spelling errors a280696a0 Replace git.openstack.org URLs with opendev.org URLs bda02c43f Direct bridge to be setup bb8101ca9 Fix pyghmi path d0e6c6cb1 OpenDev Migration Patch e9540f5d2 Removes `hash_distribution_replicas` configuration option 9124a4a13 Truncate node text fields when too long ada661185 Add note for alternative checksums 18fdc447e Make the JSON RPC server work with both IPv4 and IPv6 b60975641 Jsonschema 3.0.1: Binding the schema to draft-04 708319742 Place upper bound on python-dracclient version c2588c4de devstack: Remove syslinux dependency 2039138cf Do not try to create temporary URLs with zero lifetime 84741e940 Ansible module: fix partition_configdrive.sh file 1d0accbbe Use the PUBLIC_BRIDGE for vxlan edd78ce09 Move devstack emulators configs under /etc/ironic 84dfc151e Uncap jsonschema in requirements 3fce1a54a Split ibmc power/reboot classes 2bb05fef7 Temporarily mark grenade multinode as non-voting 01b0be9db Improve VirtualBMC use in Devstack 380519c07 Run IPMI, SNMP and Redfish BMC emulators as stack 9d9e7df87 Add UEFI firmware to Redfish emulator config 4964d1771 Add systemd unit for sushy emulator in devstack df5261bb3 Ansible module: fix clean error handling e8a8b7897 [Trivial] Fix typo in agent_base_vendor unit test 7d0cd4c28 Fix exception generation errors 56bec518b Add a request_timeout to neutron 74357e5d0 doc: update ibmc driver support servers document 732bbd851 Ansible module fix: stream_url 68ba34552 Make it possible to send sensor data for all nodes 3e703a6b2 Slightly rephrase note in tenant networking docs d52aacd29 Bump sphinxcontrib-pecanwsme to 0.10.0 418a5668a ipmi: Ignore sensor debug data 692cbd2ac Make 'noop' the explicit default of default_storage_interface 00342d997 Docs: correct expected host format for drac_address b5e34e167 Check for deploy.deploy deploy step in heartbeat 17a65c89b Workaround for sendfile size limit 6f22c0014 Workaround for uefi job with ubuntu bionic 228dfe308 Replace openstack.org git:// URLs with https:// 37c443700 Remove vbmc log file in devstack ad6c2f7e5 Add versions to release notes series 944585151 Imported Translations from Zanata 8b86cdd90 Update master for stable/stein 93a40e3fc Fix capabilities passed as string in agent prepare f25a83b57 Respect $USE_PYTHON3 settings for gunicorn 407724a22 Migrate ironic-grenade-dsvm-multinode-multitenant job to Ubuntu Bionic Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- api-ref/source/baremetal-api-v1-allocation.inc | 65 +++ api-ref/source/parameters.yaml | 18 +- .../source/samples/allocation-update-request.json | 7 + .../source/samples/allocation-update-response.json | 26 + bindep.txt | 3 + devstack/common_settings | 2 +- devstack/files/debs/ironic | 3 +- devstack/files/hooks/qemu.py | 14 + devstack/lib/ironic | 357 +++++++++---- devstack/tools/ironic/scripts/cleanup-node.sh | 5 - devstack/tools/ironic/scripts/create-node.sh | 6 - devstack/tools/ironic/templates/vm.xml | 5 + devstack/upgrade/settings | 2 +- .../contributor/ironic-multitenant-networking.rst | 4 +- .../include/configure-ironic-api-mod_wsgi.inc | 2 +- .../install/include/kernel-boot-parameters.inc | 2 +- driver-requirements.txt | 2 +- ironic/api/controllers/v1/allocation.py | 106 +++- ironic/api/controllers/v1/utils.py | 18 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/api/middleware/parsable_error.py | 29 +- ironic/cmd/dbsync.py | 10 +- ironic/common/driver_factory.py | 6 - ironic/common/exception.py | 119 +---- ironic/common/glance_service/v2/image_service.py | 6 +- ironic/common/image_service.py | 16 +- ironic/common/images.py | 7 +- ironic/common/neutron.py | 3 +- ironic/common/policy.py | 5 + ironic/common/pxe_utils.py | 29 +- ironic/common/release_mappings.py | 21 +- ironic/common/swift.py | 2 +- ironic/conductor/allocations.py | 88 ++++ ironic/conductor/base_manager.py | 77 +-- ironic/conductor/manager.py | 63 ++- ironic/conductor/rpcapi.py | 3 +- ironic/conf/conductor.py | 20 + ironic/conf/default.py | 27 +- ironic/conf/ilo.py | 8 - ironic/conf/json_rpc.py | 2 +- ironic/conf/neutron.py | 9 + ironic/db/sqlalchemy/api.py | 2 +- ironic/drivers/ibmc.py | 3 +- ironic/drivers/modules/agent.py | 2 +- ironic/drivers/modules/agent_base_vendor.py | 65 ++- ironic/drivers/modules/ansible/deploy.py | 15 +- .../ansible/playbooks/library/stream_url.py | 2 +- .../roles/deploy/files/partition_configdrive.sh | 29 +- ironic/drivers/modules/deploy_utils.py | 3 +- ironic/drivers/modules/drac/bios.py | 9 +- ironic/drivers/modules/drac/management.py | 32 ++ ironic/drivers/modules/drac/raid.py | 57 ++- ironic/drivers/modules/drac/vendor_passthru.py | 18 +- ironic/drivers/modules/ilo/power.py | 12 +- ironic/drivers/modules/ipmitool.py | 3 + ironic/drivers/modules/pxe.py | 6 +- ironic/drivers/modules/redfish/bios.py | 24 +- ironic/drivers/modules/xclarity/common.py | 6 +- ironic/drivers/raid_config_schema.json | 1 + ironic/hacking/checks.py | 2 +- ironic/objects/node.py | 17 +- ...ction-for-available-nodes-25f163d69782ef63.yaml | 12 - .../unit/api/controllers/v1/test_allocation.py | 273 +++++++++- .../unit/drivers/modules/ansible/test_deploy.py | 11 +- .../unit/drivers/modules/drac/test_management.py | 26 + .../unit/drivers/modules/redfish/test_bios.py | 68 ++- .../unit/drivers/modules/test_agent_base_vendor.py | 168 ++++++- .../unit/drivers/modules/test_deploy_utils.py | 11 +- lower-constraints.txt | 6 +- .../{set-stack-key.yaml => pre.yaml} | 4 +- .../run.yaml | 12 +- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 8 +- .../legacy/ironic-dsvm-base-multinode/pre.yaml | 6 +- playbooks/legacy/ironic-dsvm-base/pre.yaml | 6 +- ...d-neutron-request-timeout-1f7372af81f14ddd.yaml | 7 + ...ction-for-available-nodes-25f163d69782ef63.yaml | 12 + .../add-realtime-support-d814d5917836e9e2.yaml | 13 + ...drac_and_known_good_state-cdbebf97d7b87fe7.yaml | 8 + .../allocation-backfill-c31e84c5fcf24216.yaml | 5 + .../allow-allocation-update-94d862c3da454be2.yaml | 5 + .../notes/bug-2005377-5c63357681a465ec.yaml | 7 + .../notes/bug-2005764-15f45e11b9f9c96d.yaml | 8 + releasenotes/notes/bug-30315-e46eafe5b575f3da.yaml | 8 + releasenotes/notes/bug-30316-8c53358681e464eb.yaml | 4 + releasenotes/notes/bug-30317-a972c8d879c98941.yaml | 5 + .../notes/cleaning-bios-d74a4947d2525b80.yaml | 5 + ...sor-data-fix-for-ipmitool-eb13e80ccdd984db.yaml | 10 + ...abilities-as-string-agent-7c5c7975560ce280.yaml | 5 + .../notes/fix-esp-grub-path-9e5532993dccc07a.yaml | 7 + .../fix-sendfile-size-cap-d9966a96e2d7db51.yaml | 6 + .../fix-swift-binary-upload-bf9471fca29290e1.yaml | 5 + ...ac-remove-commit_required-d9ea849e8f5e78e2.yaml | 9 + ...ve-deprecated-power-retry-ba29a21f03fe8dbb.yaml | 5 + .../notes/json-rpc-bind-a0348cc6f5efe812.yaml | 5 + .../notes/jsonschema_draft04-1cb5fc4a3852f9ae.yaml | 9 + releasenotes/notes/mdns-a5f4034257139e31.yaml | 6 + ...ash_distribution_replicas-08351358eba4c9e1.yaml | 5 + .../remove-enabled-drivers-5afcd77b53da1499.yaml | 7 + ...emove-ipxe-tags-with-ipv6-cf4b7937c27590d6.yaml | 6 + ...sensor-data-for-all-nodes-a732d9df43e74318.yaml | 19 + ...gic-has-merged-in-neutron-79078280d40f042c.yaml | 7 + .../use-ironic-lib-exception-4bff237c9667bf46.yaml | 8 + .../notes/zero-temp-url-c21e208f8933c6f6.yaml | 7 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 559 ++++++++++++++++++++- releasenotes/source/stein.rst | 6 + requirements.txt | 6 +- setup.cfg | 3 +- test-requirements.txt | 2 +- tools/config/ironic-config-generator.conf | 2 + tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 37 +- zuul.d/legacy-ironic-jobs.yaml | 17 +- zuul.d/project.yaml | 4 +- 167 files changed, 3428 insertions(+), 896 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 6b4765745..fd0dbc4d3 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -12 +12 @@ UcsSdk==0.8.2.2;python_version<'3' -python-dracclient>=1.5.0 +python-dracclient>=3.0.0,<4.0.0 diff --git a/requirements.txt b/requirements.txt index ba1845d8d..86c36219d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ WebOb>=1.7.1 # MIT -python-cinderclient>=3.3.0 # Apache-2.0 +python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0 @@ -14 +14 @@ keystoneauth1>=3.4.0 # Apache-2.0 -ironic-lib>=2.15.0 # Apache-2.0 +ironic-lib>=2.17.1 # Apache-2.0 @@ -46 +46 @@ oslo.versionedobjects>=1.31.2 # Apache-2.0 -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 373d2a4da..9ec005c94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD +mock>=3.0.0 # BSD

1 0

tripleo-validations 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: tripleo-validations 9.4.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 9.3.1..9.4.0 ------------------------------------------- 8a84c01 Sync 'validations/check-network-gateway.yaml' with the new role bf11998 Update generate_validations_doc.py script 0c926c1 Fix introspection data lookup e6aee5e Ignore new ansible-lint pipefail rule 361061f OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- requirements.txt | 1 + test-requirements.txt | 3 +- tools/ansible-lint.sh | 5 +- validations/check-network-gateway.yaml | 21 ++++-- validations/ironic-boot-configuration.yaml | 2 +- validations/library/switch_vlans.py | 8 +-- validations/lookup_plugins/introspection_data.py | 31 +++++---- 11 files changed, 97 insertions(+), 57 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 51340da..5c0c887 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,0 +11 @@ python-ironicclient>=2.3.0 # Apache-2.0 +python-ironic-inspector-client>=3.1.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..fdb0845 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

os-net-config 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are excited to announce the release of: os-net-config 9.4.0: OpenStack network configuration This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. 9.4.0 ^^^^^ New Features * A key called "domain" is now available for interfaces. This allows the setting of a domain for an ifcfg configuration, which will aide DNS search. * Support for configuring policy-based routing has been added. A new top-level object "route_table" has been added, which allows the user to add tables to the system route table at /etc/iproute2/rt_tables. Routes have a new "table" property for specifying which table to apply the route. Interfaces now have a "rules" property that allows the user to add arbitrary rules for when the system should use a particular routing table, such as input interface or source IP address. Changes in os-net-config 9.3.0..9.4.0 ------------------------------------- f535a00 Fixed the false InvalidConfigException for vfid=0 c4c32a4 [FUP] Update sriov_pf.yaml samle with ethtool_opt 6e440e0 Add support for ethtool options for sriov_pf ports 7010fc9 Unify ethtool options logic 6eb5155 Add Policy Based Routing Support to os-net-config d3a35d0 Add missing unit-test for IbInterface ethtool opts 6c4bd92 Add ability to specify multiple search domains 45e3f04 Enable setting domain parameter for interfaces 9ed8760 Modify udev rule for VF representor rename cf22de9 Add upper constraints to tox f1ceda9 OpenDev Migration Patch 8a8fd7a Add ovs_options and ovs_extra parameters to VLAN object fb0a122 Adding a udev rule to rename the vf representors. 7f53623 Adding a udev rule to save sriov interface name before configuring switchdev df7c75e Removing the warnings generated due to yaml.load() 21dfd95 Fix os-net-config interface restarts when applying routes 7130a4e Update .gitreview for stable/rocky a0477bc Configure switchdev mode in SR-IOV in os-net-config 1cd665b Allow adding sriov_pf over ovs_bridge, linux_bond and ovs_bond 88ffc50 Fix incorrect application of 'ip' commands for bridges Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- etc/os-net-config/samples/bridge_vlan.json | 4 + etc/os-net-config/samples/bridge_vlan.yaml | 3 + etc/os-net-config/samples/routes.yaml | 52 ++ etc/os-net-config/samples/sriov_pf.json | 3 +- etc/os-net-config/samples/sriov_pf.yaml | 2 + etc/os-net-config/samples/sriov_pf_switchdev.json | 84 +++ etc/os-net-config/samples/sriov_pf_switchdev.yaml | 87 +++ os_net_config/__init__.py | 9 + os_net_config/cli.py | 23 +- os_net_config/impl_ifcfg.py | 243 +++++++- os_net_config/objects.py | 659 +++++++++++++-------- os_net_config/schema.yaml | 160 ++++- os_net_config/sriov_config.py | 163 ++++- os_net_config/utils.py | 13 +- os_net_config/validator.py | 2 +- .../enable-setting-domain-5557e2441c23a5a5.yaml | 5 + .../policy-based-routing-3fa1200ae155bbee.yaml | 10 + tox.ini | 4 +- 24 files changed, 1691 insertions(+), 347 deletions(-)

1 0

tripleo-puppet-elements 9.1.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are delighted to announce the release of: tripleo-puppet-elements 9.1.0: Puppet building rules for OpenStack images. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 9.0.1..9.1.0 ----------------------------------------------- 81729a1 Add element to install all openstack clients f64be13 Add upper constraints 1ab58f2 Remove redis from controller element e03bdf3 OpenDev Migration Patch 94381a1 Install tmpwatch in the overcloud base image 1c906bc Add numactl to overcloud image Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .../install.d/package-installs-overcloud-base | 2 + elements/overcloud-base/pkg-map | 4 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 2 - elements/overcloud-controller/pkg-map | 2 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ tox.ini | 4 +- 11 files changed, 100 insertions(+), 7 deletions(-)

1 0

os-apply-config 9.1.2 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are pleased to announce the release of: os-apply-config 9.1.2: Config files from cloud metadata This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 9.1.1..9.1.2 --------------------------------------- 07165a9 Don't render None as "null" ec6aaba OpenDev Migration Patch cc1fe60 Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 4 ++-- os_apply_config/renderers.py | 2 ++ 4 files changed, 10 insertions(+), 3 deletions(-)

1 0

tripleo-common 9.6.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are chuffed to announce the release of: tripleo-common 9.6.0: A common library for TripleO workflows. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 9.6.0 ^^^^^ New Features ************ * *tripleo-deploy-openshift* script now understands the *--plan* option to run the openshift-ansible playbooks for a deployment named differently than "openshift". * Introduce a *--playbook* option to the *tripleo-deploy-openshift* script in order to be able to run openshift-ansible playbook directly on already deployed servers. Deprecation Notes ***************** * The *--config-download-dir* option to the *tripleo-deploy- openshift* script is deprecated in favor of *--plan*. Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. * Fixes running the baremetal "provide" workflow with node names. Changes in tripleo-common 9.5.0..9.6.0 -------------------------------------- cb2ef256 Remove scenario008 jobs 718a7b17 Handle failed nodes when enabling ssh admin b7da1144 Pass execution_id to tripleo.ansible-playbook. c4c35df0 Add the ability to compute osds number counting lvm devices 375192b1 [CVE-2019-3895] Set image owner id 23371a7a Add passphrase generation for Octavia 4bbd5324 Add new healthchecks for zaqar services b1676eac Remove amp_hw_arch from octavia_post 40fa70be OpenDev Migration Patch d1f1826b scen009 voting on rocky only 74ec63dc Add image_source to containers 5ab3b3de Upgrades: Don't try to publish ansible output in ceph_install 7c4809d3 Fix running the baremetal provide workflow with node names e07dc084 Clean up node registration output. 3658ae99 Option to run osa playbooks from path 4575b64f Pass additional args to tripleo-deploy-openshift as ansible options 201e9793 Add ability to run osa playbooks from tripleo-deploy-openshift 7af813eb Introduce a --plan option to replace --config-download-dir 5ae6367d Don't always validate heat stack when adding parameters ef5bf9de Specify Octavia amphora image hw_architecture property in Glance f965b037 Skip ssh_known_hosts tasks in check mode 7d5ccbe9 Install ipmitool in the mistral_executor image 50c9efc9 Append qemu-img to Mistral executor package list 1e63f067 Stops growth of massive dentry cache growth b897967a Get osa container image from tripleo-common defaults d91f6d99 Add missing queue_name input parameter for listing validations Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- container-images/overcloud_containers.yaml | 136 +++++++++++++++++++++ container-images/overcloud_containers.yaml.j2 | 136 +++++++++++++++++++++ .../tripleo_kolla_template_overrides.j2 | 2 +- healthcheck/common.sh | 11 +- healthcheck/zaqar-api | 6 + healthcheck/zaqar-socket | 15 +++ playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../octavia-controller-config/tasks/octavia.yml | 12 ++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 46 ++++++- ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 ++ .../notes/provide-name-f75b6b61d3d8d693.yaml | 4 + ...eploy-openshift-plan-name-89135e3a68307047.yaml | 10 ++ ...deploy-openshift-playbook-ac8b49a212545c0f.yaml | 6 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 1 + scripts/tripleo-deploy-openshift | 91 +++++++++++--- tripleo_common/actions/parameters.py | 7 +- tripleo_common/constants.py | 1 + tripleo_common/image/kolla_builder.py | 3 + workbooks/access.yaml | 12 +- workbooks/baremetal.yaml | 34 ++---- workbooks/ceph-ansible.yaml | 2 - workbooks/deployment.yaml | 1 + workbooks/derive_params_formulas.yaml | 8 +- workbooks/fernet-key-rotate.yaml | 1 + workbooks/octavia_post.yaml | 2 + workbooks/plan_management.yaml | 4 + workbooks/skydive-ansible.yaml | 1 + workbooks/swift_backup.yaml | 2 + workbooks/swift_ring_rebalance.yaml | 1 + workbooks/validations.yaml | 4 +- zuul.d/layout.yaml | 6 +- 35 files changed, 591 insertions(+), 97 deletions(-)

1 0

puppet-tripleo 9.5.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We exuberantly announce the release of: puppet-tripleo 9.5.0: Puppet module for OpenStack TripleO This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 9.5.0 ^^^^^ New Features * Add the ability to configure the nfs_snapshot_support parameter associated with Cinder's NFS backend. Changes in puppet-tripleo 9.4.0..9.5.0 -------------------------------------- e4c894da Prepare 9.5.0 release (rocky) 1bcd64dc Remove scenario008 jobs efc1f024 Only request certs in step 1 2d888eb8 Allow mysql options to be set for the HA bundle 7ae85edf Add support for external Ganesha service in Manila Share profile da474f17 Allow external Ganesha for the cephfs manila backend 73fdcc0d Fix tripleo::haproxy::stats to be more correct and flexible c5986da9 Rebuild initramfs after applying change in kernel parameters b34f02c7 Fix horizon firewall rules in composable roles 9806d033 Add nova::cinder to nova compute 701c9786 Refactor collectd/gnocchi integration 3ee2d176 Fix missing version requirements 624840b8 certmonger: Add dnsnames parameter to redis cert request a8d0172e Expose innodb_lock_wait_timeout via hieradata. 89735a1f Allow neutron wrapper containers log to syslog d16e5124 redis HA: allow SELinux relabel for /var/run/redis 47034b22 remove ssh from tripleo::firewall::pre 9614c949 Support redfish inside a fencing yaml file 638ba0b9 Fix keepalived VIP monitoring script 0c692c99 OpenDev Migration Patch ecea0804 Add an Endpoint in ceilometer c1f6857a Add httpd and tls support to manila-api f91852a6 Fix ntp module version to an existing tag/branch 8851b883 Add ability to configure Cinder's NFS snapshot support 9517c7b0 Add missing s3 case in gnocchi::api 67712f04 Run octavia-api under apache bfdd7300 Fix generating connections to OVN db 8c4c8e0b Handle image_volume_cache_enabled in PureStorage Cinder backend. 679d4f89 Simplify logrotate job 368474f1 Pin puppet-sensu module b1bc0410 Enable internal TLS options for ironic API b5220a72 Adding a udev rule to save sriov interface name before configuring switchdev Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 4 +- lib/puppet/provider/sriov_vf_config/numvfs.rb | 18 +++ manifests/certmonger/redis.pp | 9 +- manifests/fencing.pp | 3 + manifests/firewall/pre.pp | 6 - manifests/haproxy.pp | 15 ++- manifests/haproxy/horizon_endpoint.pp | 27 ++++ manifests/haproxy/stats.pp | 19 +-- manifests/keepalived.pp | 2 +- manifests/profile/base/ceilometer.pp | 69 ++++++++-- manifests/profile/base/certmonger_user.pp | 150 +++++++++++---------- manifests/profile/base/cinder/volume/nfs.pp | 6 + manifests/profile/base/cinder/volume/pure.pp | 6 + manifests/profile/base/database/mysql.pp | 7 + manifests/profile/base/gnocchi/api.pp | 1 + manifests/profile/base/kernel.pp | 8 ++ manifests/profile/base/manila/api.pp | 40 ++++++ manifests/profile/base/manila/share.pp | 29 ++-- manifests/profile/base/metrics/collectd.pp | 15 ++- manifests/profile/base/metrics/collectd/gnocchi.pp | 37 ++++- manifests/profile/base/metrics/qdr.pp | 12 ++ manifests/profile/base/neutron/agents/ovn.pp | 2 +- manifests/profile/base/neutron/ovn_metadata.pp | 2 +- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/octavia/api.pp | 41 ++++-- .../profile/pacemaker/database/mysql_bundle.pp | 8 +- .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +-- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 4 +- manifests/profile/pacemaker/ovn_northd.pp | 4 +- metadata.json | 6 +- ...nder-nfs-snapshot-support-ac547f24dddf97e8.yaml | 5 + spec/classes/tripleo_firewall_spec.rb | 13 -- spec/classes/tripleo_keepalive_spec.rb | 2 +- .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 27 +++- .../tripleo_profile_base_octavia_api_spec.rb | 1 - ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 1 + templates/collectd/collectd-gnocchi.conf.erb | 62 --------- templates/logrotate/containers_logrotate.conf.erb | 7 - templates/neutron/dibbler-client.epp | 1 + templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 1 + templates/neutron/keepalived.epp | 1 + templates/neutron/radvd.epp | 1 + templates/switchdev/switchdev.epp | 1 + zuul.d/layout.yaml | 8 -- 49 files changed, 460 insertions(+), 256 deletions(-)

1 0

tripleo-heat-templates 9.4.0 (rocky)
by no-reply＠openstack.org 21 Jun '19

21 Jun '19

We are tickled pink to announce the release of: tripleo-heat-templates 9.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 9.4.0 ^^^^^ New Features ************ * Added the configuration option to disable Exact Match Cache (EMC) * Support setting values for "cephfs_volume_mode" manila parameter via the THT parameter ManilaCephFSCephVolumeMode. These control the POSIX rwx mode of the cephfs volumes, snapshots, and groups of these that back corresponding manila resources. Default value for ManilaCephFSCephVolumeMode is '0755', backwards-compatible with the mode for these objects before it was settable. * Add new CinderNfsSnapshotSupport parameter, which controls whether cinder's NFS driver supports snapshots. The default value is True. * Add neutron-plugin-ml2-mlnx-sdn-assist as a containerized Neutron Core service template to support Mellanox SDN ml2 plugin. * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * The parameter "NovaRbdPoolName" is changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * New parameter "NovaNfsVersion" allow configuring the NFS version used for nova storage (when NovaNfsEnabled is true). Since NFSv3 does not support full locking a NFSv4 version need to be used. To not break current installations the default is the previous hard coded version 4. * The Shared File Systems service (manila) API has been switched to running behind httpd, and it now supports configuring TLS options. Upgrade Notes ************* * Cinder's NFS driver does not support snapshots unless the feature is explicitly enabled (this policy was chosen to ensure compatibility with very old versions of libvirt). The CinderNfsSnapshotSupport default value is True, and so the new default behavior enables NFS snapshots. This change is safe because it just enables a capability (i.e. snapshots) that other cinder drivers generally provide. * Keystone catalog entries for Cinder's v1 API are no longer created, but existing entries will not be automatically deleted. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * Fixes an issue that caused a subnet to be wrongly created on the Undercloud provisioning network based on environment default values. If the default "ctlplane-subnet" was renamed in "undercloud.conf", the defaults for "ctlplane-subnet" in "environments/undercloud.yaml" was merged with the subnets defined in "undercloud.conf". See bug 1820330 (https://bugs.launchpad.net/tripleo/+bug/1820330) * It is now possible for temporary containers inside THT to test if they are being run as part of a minor update by checking if the TRIPLEO_MINOR_UPDATE environment variable is set to 'true' (said containers need to export it to the container explicitely), see <service>_restart_bundles for examples. * When setting up TLS everywhere, some deployers may not have their FreIPA server in the ctlplane, causing the ipaclient registration to fail. We move this registration to host-prep tasks and invoke it using ansible. At this point, all networks should be set up and the FreeIPA server should be accessible. * e0e885b8ca3332e0815c537a32c564cac81f7f7e moved the cellv2 discovery from control plane to compute services. In case the computes won't have access to the external API this task will fail. Switch nova_cell_v2_discover_host.py to use internal api. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * With large number of OSDs, where each OSD need a connection, the default nofile (1024) of nova_compute is too small. This changes the default DockerNovaComputeUlimit to 131072 what is the same for cinder. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. * If nova-manage command was triggered on a host for the first time as root (usually manual runs) the nova-manage.log gets created as root user. On overcloud deploy runs the nova-manage command is run as nova user. In such situation the overcloud deploy fails as the nova user can not write to the nova-manage.log. With this change we run the chown of the logs files on every overcloud deploy to fix the nova-manage.log file permissions. * The keystone service and endpoint for Cinder's API v1 are no longer created. Cinder removed support for its v1 API in Queens. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 9.3.0..9.4.0 ---------------------------------------------- 66cd92439 Handle openvswitch meta-package on undercloud upgrade. fbd3638e2 Fix NovaNfs role parameters d37bdf779 Set cache_backend for token caching f1bca94ff Remove scenario008 jobs fb5f69dcb [FUP] Backport - krb-service-principal metadata per-Role d574fddb1 Fix log owner on computes during overcloud deploy runs 17a937496 Re-enable manila dashboard 8aa434389 Backport miss to run discovery via bootstrap_host_exec b99969ea6 Fix correct network for nova-vnc 0ebecb29a Add ComputeHCIOvsDpdk role 435496082 Add panko_api_cron container dcb9df6ce Add {{role.name}}RemovalPoliciesMode parameter a8f5bb11d Fix undefined variable python_interpreter 8bf53825d Request certificate for using host service principals de16ec8b0 Configure server_certs_key_passphrase for Octavia d6184b833 Ensure we aren't running some dry-run also for Pacemaker case dcce160c2 DVR neutron template should enable ARP responder 97eb154e9 Only request neutron certificate from neutron dhcp service 38cfa3436 Configure Neutron API for Nova Placement... 6c92c5195 Fix ssl.yaml generating GaneshaInternal in the endpoint map 42695fbd9 Set TenantNetPhysnetMtu to 0 to allow different MTUs 7329ca67a Do not bind /run on host to nova_migration_target a483d0b53 Start/enable OVS on neutron ovs agent nodes 0663f3fea Fix service auth URL in Octavia 379d6ad76 Fix custom network.name_lower in krb-service-principals b56035e65 Fix haproxy stats network binding 3e972555e Add CephAnsibleEnvironmentVariables to nodes-uuid call 218582c4c Make krb-service-principal metadata per-Role ebd0c4944 Add domain and no-ntp options to ipaclient ff10e2f6b Remove the iptables rules set via service_config_settings 8e13d5778 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 9c2822879 Add ability to specify dns search domains bfd445661 Fix IPA client when doing brownfield deployment of internal TLS 3ed420e8a Only add internal_api_virtual_ip if InternalApi in network_data 7ae142710 Add mkhomedir option to ipa-client-install 45dcd0e5a Try a timesync as part of first boot 74fd3fe5b standalone/undercloud - post: use EndpointMap to fetch Keystone URL 448c9b81b Enable serial execution for ansible host debdaa4b3 Set arp_notify to match ndisc_notify 8da661b1c Add cinder credentials to nova conf 7e0a4d0e5 [Rocky/Queens Only] Remove pre-upgrade validation tasks in cont services. fdac2bbcd Clean metrics related environments dd46170b7 Fix NovaNfs role parameter precedence in conditions 9995be9fd Remove OVNTunnelEncapType 884a0ad20 Enable ndisc_notify sysctl setting to notify of MAC changes edce8a943 Remove ceph-ansible fetch directory after it is saved 93c81bb62 Change setype for non container /var/log/nova-placement 733ec337c Add parameter to configure maxdelay in db purge/archive job d9eadc4c8 Change setype for non container /var/log/<service> directories 5ed8883ca ensure /var/run/redis is present upon reboot cba7c2285 Allow ssh from all for undercloud 747abdd15 Ensure there is no redis on host 123535d8c implement default ssh-from-ctlplane rule via hiera a96883899 Run nova-manage as root to prevent wrong nova-manage.log permissions ef076b244 Run nova_cell_v2_discover_hosts.py on every deploy run 4d478753b Allow NovaNfs parameters to be role specific 64f80a0b4 Avoid concurrent nova cell_v2 discovery instances 9850aeaeb OpenDev Migration Patch 738bc3ca7 fix storage.yaml to write environments/storage/nova-nfs.yaml fbf755979 Modifying the ovs-hw-offlaod file to adapt new changes 5b5e4a5f8 Allow NovaRbdPoolName to be role specific cd3fa6994 Move scenario 10 (octavia) to non-voting check job ae36e234e Fixed wrong cinder store user name cdfd00412 Set Standalone's br-ctlplane MTU 1f054551b Switch Manila API to httpd and support TLS 5203a4a83 ceilometer_agent_notification: disable-panko.yaml d3b70308b Run octavia-api under httpd 5435f13da Correct error catching while in "--check" mode 47284b1f0 Remove deprecated value used to set nova_metadata_ip 741cbadc2 Check if source directory does exist before linking e2e41c0df Increase DockerNovaComputeUlimit default value af755c3e8 Fix usage of satellite in organization mode 12543005b Set ulimit 16384 for Neutron SR-IOV container 178773f92 Increase default ulimit values for Neutron agents containers 562359bf2 Bind mount undercloud.conf with ,z in mistral_executor f24f23b96 Do not archive ceph-ansible fetch directory if it is empty 2e2f29760 Ensure we get rsyslog state, even in "--check" mode a3dc76b06 Provide option to disable EMC in puppet-vswitch a39f0c564 Do not restart bundles during a minor update fb77857f7 Be able to know when we are running inside a minor update workflow 913b73947 Add GnocchiStorageS3BucketPrefix into deployment ecb01485c Add support for cinder NFS snapshots 17fed07c0 Disable a directory listing of /icons in httpd. 8aff87b8a TLS everywhere: switch Octavia to use DNS entries 8896c2259 Enable flat network for ovn ac4bd32a7 Fix reload notification file 00102a206 Make nfs version for nova ephemeral storage configurable 6145c590b Remove unused parameter NovaPassword b158626b4 Include python-panko client. f9d7d92a4 Disable cinder's LVM backend when deploying Pure backend 9e37ce9ab [Rocky-only] Install and configure tmpwatch for log cleanup 08792a670 scen09 voting on rocky 50063195e Remove UndercloudCtlplaneSubnets defaults in UC env 65a185885 Update manila environment file name in capabilities-map 4bd3d245c Fix python binary lookup regression 4cd63e71d Remove ENV parameters for nova_cell_v2_discover_host.py 85885cbcf Run chown for nova log files on every run to fix wrong permissions e224d619c Add missing TLS configuration for ironic 22d83bbb0 Optional ICMP validation of controllers and gateways 05413a18b Enable authtoken cache 2859ba651 Add Mellanox SDN ML2 template for a containerized service 745369e8a Enable Glance image_conversion plugin when backend is rbd d0a6cb1d3 Add tempest workspace volume for tempest 6646e1ce1 Reload rsyslog/cron when we change timezones 0ef34d51c Allow embedded Skydive etcd port 6b916fec1 Use dedicated container tag per skydive service 0fc5b0efc Fix idempotency for horizon container logs a368910cd Refactored configuration options for nova/neutron in manila bfe4379bc Add missing entries for Pure Storage Cinder Backend and fix typos f34e27928 Make heat yaql limits configurable e02cb626a Rework nova_cell_v2_discover_host.py to use nova.conf and python novaclient e5d6b52c1 Fix nova_cell_v2_discover_host.py with python3 eef9d3e49 Service check in nova_cell_v2_discover_host.py to use internal API d7704bbf5 Move cellv2 discovery from control plane services to compute services 5baa88d94 Added tar option to preserve metadata of existing fetch_dir 9ae5fd8f3 Don't create service or endpoint for cinder API v1 d8740f616 Support cephfs_volume_mode parameter 61911edb5 Switch scenario00{1,4}-multinode-containers to Ceph bluestore 1792fa2be [FFU] Ensure compatibility with ansible 2.6. 19373b0ef Move ipa enrollment to host_prep_tasks db722bfd0 Don't look for primary_role ips in AllNodesValidationConfig 82a648fcc certmonger: Don't restart haproxy on cert renewal 759b711b9 Handle upper and lower case system uuids f56814ebe Upgrades: Ensure idempotency of pacemaker services 3e5484c61 Add CertmongerUser role to OVB defaults 5e725bf58 FFWD: Introduce workaround for neutron cisco plugin 0a39efefe Add missing RoleParameters and ServiceNames 44a3f5ac4 Fail to live migration if instance has NUMA topology 23ac104bf Remove ties between ceilometer and panko 02298dd07 Adding support of glance cinder store settings 3bd4a2a8b TLS everywhere: Mount the whole /etc/pki/libvirt/ directory in libvirt d07af320a TLS everywhere: Set post-save command for neutron dhcpd 5a2e205c1 TLS everywhere: Set post-save command for nova-vnc-proxy 8d06db25a TLS everywhere: Set post-save command for redis a1430fbf6 TLS everywhere: Set post-save command for RabbitMQ 6be616a38 TLS everywhere: Set post-save command for httpd 64e564aaf Reload haproxy when certificate is renewed d9f8ca29d Set Ironic default interface when using networking-ansible d2e191e76 Fix deployment of gluster with openshift AllInOne ad9712b60 Fix logging for metrics_qdr 936fd94d2 Run collectd socket cleanup on container start 1dfc4267f Apply changes to cluster using updated inventory 3ce479fb1 Generate post-deployment openshift-ansible inventory 9a07d00c1 Store nodes information in a dict ee486f2f6 Set container images for openshift 3.11 bda0c48e6 Remove openshift-ansible customization 7e98a5823 fix typo in ansible module name in "upgrade_tasks" of octavia* Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- all-nodes-validation.yaml | 12 ++ capabilities-map.yaml | 7 +- ci/common/vbmc_setup.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + ci/environments/ovb-ha.yaml | 2 + .../scenario001-multinode-containers.yaml | 13 +- .../scenario004-multinode-containers.yaml | 14 +- .../scenario010-multinode-containers.yaml | 1 + ci/environments/scenario010-standalone.yaml | 99 ++++++++++ common/deploy-steps-tasks.yaml | 2 + common/deploy-steps.j2 | 11 +- .../{services.yaml => services/role.role.j2.yaml} | 17 +- deployed-server/deployed-server-roles-data.yaml | 1 + .../services/logging/files/opendaylight-api.yaml | 2 +- .../neutron-plugin-ml2-mlnx-sdn-assist.yaml | 65 +++++++ .../octavia/octavia-deployment-config.yaml | 11 +- .../nova_cell_v2_discover_hosts.py | 55 ++++++ .../nova_wait_for_compute_service.py | 96 +++++++++ environments/cinder-pure-config.yaml | 2 + environments/disable-panko.yaml | 1 + ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 4 +- environments/hyperconverged-ceph.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-cephfsnative-config.yaml | 1 + environments/metrics/collect-read-rabbitmq.yaml | 15 ++ .../collectd-standalone.yaml} | 0 .../collectd-write-qdr.yaml} | 0 environments/neutron-ml2-ansible.yaml | 1 + environments/neutron-ml2-ovn-ha.yaml | 2 +- environments/neutron-ovs-dvr.yaml | 3 + environments/ovs-hw-offload.yaml | 16 +- environments/services-baremetal/octavia.yaml | 5 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-hw-offload.yaml | 2 +- environments/services/octavia.yaml | 5 +- ...ternal-tls.yaml => enable-internal-tls.j2.yaml} | 5 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 6 +- environments/standalone.yaml | 1 + environments/standalone/standalone-tripleo.yaml | 5 + environments/storage-environment.yaml | 2 + environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 64 +++++- .../role.role.j2.yaml} | 29 ++- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 43 +---- extraconfig/post_deploy/undercloud_post.yaml | 35 +--- .../rhel-registration/rhel-registration.yaml | 6 + .../rhel-registration/scripts/rhel-registration | 13 +- extraconfig/pre_network/config_then_reboot.yaml | 7 + extraconfig/services/ipaclient.yaml | 184 ++++++++++++++++++ extraconfig/services/openshift-cns.yaml | 14 +- extraconfig/services/openshift-master.yaml | 214 +++++++++++++++------ extraconfig/services/openshift-node.yaml | 41 +++- extraconfig/services/skydive-analyzer.yaml | 9 +- extraconfig/services/tmpwatch-install.yaml | 44 +++++ firstboot/os-net-config-mappings.yaml | 5 +- firstboot/userdata_timesync.yaml | 97 ++++++++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 7 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 6 + .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 2 + overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 37 ++-- puppet/all-nodes-config.j2.yaml | 12 +- puppet/extraconfig/pre_deploy/per_node.yaml | 12 ++ puppet/services/apache.j2.yaml | 2 + puppet/services/cinder-api.yaml | 9 +- puppet/services/cinder-backend-pure.yaml | 19 +- puppet/services/cinder-base.yaml | 8 +- puppet/services/cinder-volume.yaml | 7 + puppet/services/database/mysql.yaml | 10 +- puppet/services/database/redis.yaml | 4 +- puppet/services/glance-api.yaml | 21 +- puppet/services/gnocchi-base.yaml | 5 + .../haproxy-internal-tls-certmonger.j2.yaml | 11 +- puppet/services/haproxy-public-tls-certmonger.yaml | 1 + puppet/services/haproxy.yaml | 6 + puppet/services/heat-base.yaml | 16 +- puppet/services/horizon.yaml | 6 - puppet/services/kernel.yaml | 4 + puppet/services/manila-api.yaml | 47 +++++ puppet/services/manila-backend-cephfs.yaml | 4 + puppet/services/manila-scheduler.yaml | 21 +- puppet/services/manila-share.yaml | 17 ++ puppet/services/messaging/notify-rabbitmq.yaml | 2 + puppet/services/messaging/rpc-rabbitmq.yaml | 2 + puppet/services/metrics/collectd.yaml | 1 + puppet/services/neutron-api.yaml | 10 + puppet/services/neutron-base.yaml | 29 --- puppet/services/neutron-dhcp.yaml | 15 ++ puppet/services/neutron-metadata.yaml | 1 - puppet/services/neutron-ovs-agent.yaml | 9 + puppet/services/neutron-plugin-ml2-ovn.yaml | 7 +- puppet/services/nova-base.yaml | 6 + puppet/services/nova-compute.yaml | 62 +++++- puppet/services/nova-vnc-proxy.yaml | 7 +- puppet/services/octavia-api.yaml | 39 +--- puppet/services/octavia-base.yaml | 8 +- puppet/services/openstack-clients.yaml | 1 + puppet/services/openvswitch.yaml | 9 + puppet/services/ovn-controller.yaml | 5 - puppet/services/rabbitmq.yaml | 2 + puppet/services/sshd.yaml | 21 +- puppet/services/time/timezone.yaml | 13 ++ puppet/services/tripleo-firewall.yaml | 6 + .../notes/OvsDisableEMC-ab29e5c08856d439.yaml | 3 + ...eph_volume_mode-parameter-5553a9b39718a749.yaml | 9 + ...nder-nfs-snapshot-support-16664aa46a67a5ad.yaml | 13 ++ ...d-mellanox-sdn-ml2-docker-58d242b5a8c40ade.yaml | 5 + ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...ne-subnet-defaults-merged-5a6061b29618f5cf.yaml | 9 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + .../notes/minor-update-env-20657417094d4aeb.yaml | 7 + ...enroll-to-host-prep-tasks-934c6e0a9f75f15b.yaml | 8 + .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...va-rbd-pool-role-specific-010f6072d641d84f.yaml | 6 + ...va_add_nfs_vers_parameter-62b9e9d6150358d1.yaml | 8 + ...ver_host_use_internal_api-1bebb3e9c6e69113.yaml | 7 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + .../nova_compute_nofile-0427e49cc8ae70a6.yaml | 6 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + ...run_chown_on_every_deploy-c366af9898ecaeed.yaml | 9 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + .../remove-cinder-api-v1-66a24998d7f8e985.yaml | 9 + ...-api-to-httpd-support-tls-9b995fe4113b2412.yaml | 5 + roles/BlockStorage.yaml | 1 + roles/CephAll.yaml | 1 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 60 ++++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephFile.yaml | 1 + roles/HciCephMon.yaml | 1 + roles/HciCephObject.yaml | 1 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 1 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 1 + roles/Standalone.yaml | 3 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 1 + roles_data.yaml | 6 + roles_data_undercloud.yaml | 1 + sample-env-generator/ssl.yaml | 13 +- sample-env-generator/standalone.yaml | 8 + sample-env-generator/storage.yaml | 3 + tools/check-up-to-date.sh | 2 +- tools/process-templates.py | 7 + tools/yaml-diff.py | 32 +++ tools/yaml-validate.py | 14 +- validation-scripts/all-nodes.sh | 8 +- zuul.d/layout.yaml | 21 +- 315 files changed, 2701 insertions(+), 1024 deletions(-)

1 0