July 2019 - Release-announce - lists.openstack.org

tripleo-puppet-elements 11.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We enthusiastically announce the release of: tripleo-puppet-elements 11.1.0: Puppet building rules for OpenStack images. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.0.0..11.1.0 ------------------------------------------------- 5e0060f Add Python 3 Train unit tests 6a1b92d Stop and disable libvirtd service on controller aabd884 Remove multinode jobs e472a92 Fix typo pankiclient to pankoclient cc2cdb5 Add RHEL8 support for overcloud-full image 9669efa update git.openstack.org to opendev a3bac6a lvm2 is required for cinder Diffstat (except docs and test files) ------------------------------------- README.rst | 4 +- elements/overcloud-agent/pkg-map | 5 ++ .../install.d/package-installs-overcloud-base | 1 + elements/overcloud-base/pkg-map | 9 +++ elements/overcloud-controller/pkg-map | 7 +++ .../post-install.d/51-disable-libvirtd-service | 7 +++ elements/overcloud-openstack-clients/pkg-map | 6 +- .../source-repository-puppet-modules | 66 +++++++++++----------- setup.cfg | 2 +- tox.ini | 2 +- zuul.d/layout.yaml | 5 +- 11 files changed, 70 insertions(+), 44 deletions(-)

1 0

tripleo-validations 11.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are pleased to announce the release of: tripleo-validations 11.1.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * The behavior of the "ironic-boot-configuration" validation has changed in order to suppport multi-arch. It now checks that each node has the correct associated ramdisk and kernel image according to the node's architecture and platform, and, when it does appear that the correct image is associated, checks that there is only one image in Glance with that name. Also, the vars "deploy_kernel_name" and "deploy_ramdisk_name" have changed to "deploy_kernel_name_base" and "deploy_ramdisk_name_base" respectively. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation Deprecation Notes ***************** * The Neutron LBaaS project was retired and support for it in TripleO removed. Other Notes *********** * The "deployment-images" validation has been removed, as its intended functionality became inseparable from "ironic-boot- configuration" in the multi-arch case. Changes in tripleo-validations 11.0.0..11.1.0 --------------------------------------------- e1d0bde Adds molecule testing for controller-ulimits 1ace29c Adds molecule testing for controller-token 49aa252 Adds molecule tests for ctlplane-ip-range validation 9bbd3b2 Adding new role automation with Ansible 5adfef9 Adds molecule tests for undercloud-disk-space 06bb613 Adds Molecule to haproxy validation role 95e9eab Add molecule testing on undercloud-debug role fe467b2 Add new role to validate tls-everywhere 647e9af Adds molecule testing for DNS validation e69d7b9 Use ansible_pkg_mgr fact instead of hardcoding yum command 4e6c26d Make Verify the RAM requirements task failing again 5f0e39a Add molecule tests for the undercloud-cpu role 31b32cd Add Python 3 Train unit tests 9750f94 Support multi-arch in deploy image validations bb48a7f Fix variables indentation for ceph-health validation 3619fe3 Add Molecule tests for the role xfs-check-ftype. 5bd4165 Add Molecule tests for the role undercloud-ram. 9831488 Deletes validations directory 33a8cc8 Remove Neutron LBaaS 0f66b7d Remove useless roles meta directory d4db54c Add support for the chrony implementation eed1c11 Remove useless cookiecutter files 990bc99 Documentation update with the new validations architecture 90bb581 Use sorted dictionary before iteration d5e948f Update the Undercloud Services list for the uc-service-status role 831b7ae Improve stackrc file sourcing ee1cec4 Use Undercloud local_ip to ensure the registry does answer or not 306f531 Add pkg names better management between OS releases 52eeb5b Update ceph-health for containers and failure options 39c530c Fix typo in the command to get the file_descriptors total_limit 7c729cc Add run-validations.sh script c18eadb Fix validations-specific Ansible output callback e25845d Add nova-status Ansible role Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- README.rst | 3 +- .../defaults/main.yml.j2 | 22 +- _skeleton_role_/handlers/main.yml | 15 + _skeleton_role_/molecule/default/Dockerfile.j2 | 38 ++ _skeleton_role_/molecule/default/molecule.yml | 49 ++ _skeleton_role_/molecule/default/playbook.yml.j2 | 22 + _skeleton_role_/molecule/default/verify.yml | 15 + _skeleton_role_/tasks/main.yml.j2 | 18 + _skeleton_role_/vars/main.yml.j2 | 22 + callback_plugins/validation_output.py | 172 +++---- {validations => library}/__init__.py | 0 library/check_ironic_boot_config.py | 186 +++++++ library/reportentry.py | 93 ++++ library/switch_vlans.py | 18 +- playbooks/ceph-health.yaml | 2 + playbooks/check-latest-minor-version.yaml | 2 - playbooks/deployment-images.yaml | 16 - playbooks/ironic-boot-configuration.yaml | 4 +- playbooks/neutron-sanity-check.yaml | 2 - playbooks/nova-status.yaml | 24 + playbooks/{ntpstat.yaml => ntp.yaml} | 6 +- playbooks/tls-everywhere-post-deployment.yaml | 18 + playbooks/tls-everywhere-pre-deployment.yaml | 17 + playbooks/tls-everywhere-prep.yaml | 14 + playbooks/undercloud-neutron-sanity-check.yaml | 2 - ...loyment-images_multi-arch-031eea343453e67c.yaml | 16 + .../remove-neutron-lbaas-e8168b4595506b91.yaml | 11 + role-addition.yml | 35 ++ roles/advanced-format-512e-support/meta/main.yml | 27 -- roles/ceph/defaults/main.yml | 3 + roles/ceph/meta/main.yml | 27 -- roles/ceph/tasks/ceph-health.yaml | 66 ++- roles/check-latest-minor-version/defaults/main.yml | 9 +- roles/check-latest-minor-version/meta/main.yml | 27 -- roles/check-network-gateway/meta/main.yml | 27 -- .../meta/main.yml | 27 -- .../containerized-undercloud-docker/meta/main.yml | 27 -- roles/controller-token/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../controller-token/molecule/default/molecule.yml | 47 ++ .../controller-token/molecule/default/playbook.yml | 53 ++ roles/controller-ulimits/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 49 ++ .../molecule/default/playbook.yml | 43 ++ roles/ctlplane-ip-range/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 47 ++ .../molecule/default/playbook.yml | 83 ++++ roles/default-node-count/meta/main.yml | 27 -- roles/deployment-images/defaults/main.yml | 3 - roles/deployment-images/meta/main.yml | 27 -- roles/deployment-images/tasks/main.yml | 22 - roles/deployment-images/vars/main.yml | 10 - roles/dhcp-validations/meta/main.yml | 28 -- roles/dns/meta/main.yml | 28 -- roles/dns/molecule/default/Dockerfile.j2 | 37 ++ roles/dns/molecule/default/molecule.yml | 46 ++ roles/dns/molecule/default/playbook.yml | 47 ++ roles/haproxy/meta/main.yml | 28 -- roles/haproxy/molecule/default/Dockerfile.j2 | 36 ++ roles/haproxy/molecule/default/molecule.yml | 47 ++ roles/haproxy/molecule/default/playbook.yml | 71 +++ roles/image-serve/defaults/main.yaml | 1 - roles/image-serve/meta/main.yaml | 28 -- roles/image-serve/tasks/main.yaml | 26 +- roles/ironic-boot-configuration/defaults/main.yml | 4 +- roles/ironic-boot-configuration/meta/main.yml | 27 -- roles/ironic-boot-configuration/tasks/main.yml | 33 +- roles/mysql-open-files-limit/meta/main.yml | 27 -- roles/network-environment/meta/main.yml | 27 -- roles/neutron-sanity-check/defaults/main.yml | 2 - roles/neutron-sanity-check/meta/main.yml | 28 -- roles/no-op-firewall-nova-driver/meta/main.yml | 27 -- roles/no-op/meta/main.yml | 27 -- roles/node-disks/meta/main.yml | 27 -- roles/node-health/meta/main.yml | 27 -- roles/nova-event-callback/meta/main.yml | 27 -- roles/nova-status/tasks/main.yml | 26 + roles/nova-status/vars/main.yml | 20 + roles/{ceilometerdb-size => ntp}/meta/main.yml | 0 roles/ntp/tasks/main.yml | 26 + roles/{ntpstat => ntp}/vars/main.yml | 4 +- roles/ntpstat/meta/main.yml | 28 -- roles/ntpstat/tasks/main.yml | 5 - roles/openshift-on-openstack/meta/main.yml | 28 -- roles/openstack-endpoints/meta/main.yml | 27 -- roles/ovs-dpdk-pmd/meta/main.yml | 28 -- roles/pacemaker-status/meta/main.yml | 28 -- roles/rabbitmq-limits/meta/main.yml | 28 -- roles/rabbitmq-limits/tasks/main.yml | 2 +- roles/repos/meta/main.yml | 27 -- roles/repos/tasks/main.yml | 5 +- roles/stack-health/meta/main.yml | 27 -- roles/stonith-exists/meta/main.yml | 27 -- roles/switch-vlans/meta/main.yml | 27 -- roles/tls-everywhere/defaults/main.yml | 6 + roles/tls-everywhere/handlers/main.yml | 6 + roles/tls-everywhere/tasks/common.yaml | 270 +++++++++++ .../tasks/overcloud-post-deployment.yaml | 78 +++ .../tasks/pre-deployment-containerized.yaml | 202 ++++++++ .../tasks/pre-deployment-non-containerized.yaml | 194 ++++++++ roles/tls-everywhere/tasks/pre-deployment.yaml | 68 +++ roles/tls-everywhere/tasks/prep.yaml | 122 +++++ roles/tls-everywhere/vars/main.yml | 1 + roles/undercloud-cpu/meta/main.yml | 28 -- .../undercloud-cpu/molecule/default/Dockerfile.j2 | 37 ++ roles/undercloud-cpu/molecule/default/molecule.yml | 46 ++ roles/undercloud-cpu/molecule/default/playbook.yml | 42 ++ roles/undercloud-debug/meta/main.yml | 27 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../undercloud-debug/molecule/default/molecule.yml | 47 ++ .../undercloud-debug/molecule/default/playbook.yml | 58 +++ roles/undercloud-disk-space/meta/main.yml | 28 -- .../molecule/default/Dockerfile.j2 | 37 ++ .../molecule/default/molecule.yml | 46 ++ .../molecule/default/playbook.yml | 44 ++ roles/undercloud-heat-purge-deleted/meta/main.yml | 28 -- roles/undercloud-process-count/meta/main.yml | 27 -- roles/undercloud-ram/meta/main.yml | 27 -- .../undercloud-ram/molecule/default/Dockerfile.j2 | 37 ++ roles/undercloud-ram/molecule/default/molecule.yml | 46 ++ roles/undercloud-ram/molecule/default/playbook.yml | 42 ++ roles/undercloud-ram/tasks/main.yml | 3 +- roles/undercloud-selinux-mode/meta/main.yml | 28 -- roles/undercloud-service-status/defaults/main.yml | 13 +- roles/undercloud-service-status/meta/main.yml | 28 -- roles/undercloud-tokenflush/meta/main.yml | 28 -- roles/xfs-check-ftype/meta/main.yml | 27 -- .../xfs-check-ftype/molecule/default/Dockerfile.j2 | 37 ++ .../xfs-check-ftype/molecule/default/molecule.yml | 48 ++ .../xfs-check-ftype/molecule/default/playbook.yml | 21 + roles/xfs-check-ftype/molecule/default/prepare.yml | 60 +++ roles/xfs-check-ftype/molecule/default/verify.yml | 15 + scripts/run-validations.sh | 106 ++++ setup.cfg | 3 +- tox.ini | 19 +- tripleo_validations/utils.py | 13 +- validations/512e.yaml | 20 - validations/callback_plugins/fail_if_no_hosts.py | 31 -- validations/callback_plugins/validation_output.py | 198 -------- validations/ceilometerdb-size.yaml | 46 -- validations/ceph-ansible-installed.yaml | 23 - validations/ceph-health.yaml | 30 -- validations/check-ftype.yaml | 34 -- validations/check-latest-minor-version.yaml | 23 - validations/check-network-gateway.yaml | 48 -- .../collect-flavors-and-verify-profiles.yaml | 22 - validations/containerized-undercloud-docker.yaml | 104 ---- validations/controller-token.yaml | 19 - validations/controller-ulimits.yaml | 38 -- validations/ctlplane-ip-range.yaml | 39 -- validations/default-node-count.yaml | 50 -- validations/deployment-images.yaml | 33 -- validations/dhcp-introspection.yaml | 26 - validations/dhcp-provisioning.yaml | 29 -- validations/dns.yaml | 14 - validations/files/rogue_dhcp.py | 239 --------- validations/haproxy.yaml | 37 -- validations/ironic-boot-configuration.yaml | 33 -- validations/library/__init__.py | 0 validations/library/advanced_format.py | 96 ---- validations/library/check_flavors.py | 181 ------- validations/library/check_package_update.py | 151 ------ validations/library/docker_facts.py | 249 ---------- validations/library/haproxy_conf.py | 88 ---- validations/library/hiera.py | 63 --- validations/library/icmp_ping.py | 61 --- validations/library/ini.py | 156 ------ validations/library/ip_range.py | 130 ----- validations/library/network_environment.py | 533 --------------------- validations/library/node_disks.py | 158 ------ validations/library/overcloudrc.py | 78 --- validations/library/ovs_dpdk_pmd_cpus_check.py | 137 ------ validations/library/pacemaker.py | 84 ---- validations/library/switch_vlans.py | 225 --------- validations/library/verify_profiles.py | 167 ------- validations/library/warn.py | 54 --- validations/lookup_plugins/glance_images.py | 78 --- validations/lookup_plugins/introspection_data.py | 52 -- validations/lookup_plugins/ironic_nodes.py | 101 ---- validations/lookup_plugins/nova_flavors.py | 59 --- .../lookup_plugins/nova_hypervisor_statistics.py | 50 -- validations/lookup_plugins/nova_servers.py | 91 ---- validations/lookup_plugins/roles_info.py | 83 ---- validations/lookup_plugins/stack_resources.py | 48 -- validations/lookup_plugins/tht.py | 47 -- validations/mysql-open-files-limit.yaml | 32 -- validations/network-environment.yaml | 26 - validations/neutron-sanity-check.yaml | 65 --- validations/no-op-firewall-nova-driver.yaml | 22 - validations/node-disks.yaml | 25 - validations/node-health.yaml | 39 -- validations/nova-event-callback.yaml | 91 ---- validations/ntpstat.yaml | 17 - validations/openshift-hw-requirements.yaml | 173 ------- validations/openshift-nw-requirements.yaml | 82 ---- validations/openstack-endpoints.yaml | 61 --- validations/ovs-dpdk-pmd-cpus-check.yaml | 23 - validations/pacemaker-status.yaml | 30 -- validations/rabbitmq-limits.yaml | 28 -- validations/repos.yaml | 43 -- validations/stack-health.yaml | 18 - validations/stonith-exists.yaml | 35 -- validations/switch-vlans.yaml | 30 -- validations/tasks/containerized_services.yaml | 29 -- validations/tasks/disk_space.yaml | 36 -- .../openshift-hw-requirements-warnings.j2 | 17 - validations/templates/unreachable_nodes.j2 | 9 - validations/undercloud-cpu.yaml | 17 - validations/undercloud-debug.yaml | 25 - validations/undercloud-disk-space-pre-upgrade.yaml | 20 - validations/undercloud-disk-space.yaml | 23 - validations/undercloud-heat-purge-deleted.yaml | 22 - validations/undercloud-neutron-sanity-check.yaml | 66 --- validations/undercloud-process-count.yaml | 49 -- validations/undercloud-ram.yaml | 19 - validations/undercloud-service-status.yaml | 22 - validations/undercloud-tokenflush.yaml | 25 - zuul.d/layout.yaml | 4 +- 231 files changed, 3680 insertions(+), 7113 deletions(-)

1 0

tripleo-ipsec 9.2.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are tickled pink to announce the release of: tripleo-ipsec 9.2.0: Ansible role for managing TripleO's IPSEC tunnels This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-ipsec Download the package from: https://tarballs.openstack.org/tripleo-ipsec/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-ipsec 9.1.0..9.2.0 ------------------------------------- ffe104c Update linting jobs a052773 Replace git.openstack.org URLs with opendev.org URLs 8c1fdab OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- handlers/main.yml | 2 +- setup.cfg | 2 +- tasks/hardcoded-network-discover.yml | 14 +++++++------- tasks/ipsec.yml | 2 +- tasks/legacy.yml | 4 ++-- tasks/uninstall.yml | 2 +- test-requirements.txt | 3 +++ tox.ini | 13 ++++++++++--- zuul.d/layout.yaml | 2 -- 11 files changed, 28 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..e8684a7 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,3 @@ +pbr>=1.6 +ansible +ansible-lint

1 0

tripleo-heat-templates 11.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are pumped to announce the release of: tripleo-heat-templates 11.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * *ContainerImageRegistryLogin* has been added to indicate if login calls should be issued by the container engine on deployment. The default is set to *false*. * Values specified in *ContainerImageRegistryCredentials* will now be used to issue a login call when deploying the container engine on the hosts if *ContainerImageRegistryLogin* is set to *true* * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * As ceph-dashboard is available on Ceph, the new ceph dashboard composable service enables a user scenario in which the dashboard is deployed along with the other ceph components using TripleO. This feature is disabled by default and can be enabled by operators adding to the deployment the ceph-dashboard.yaml environment file included in tripleo-heat-templates. * Add support for the Multipathd service on nodes that access Block Storage (cinder) volumes. Multipathd is an optional service that can be enabled by including environments/multipathd.yaml in the deployment. * Introduce new tag into roles that will create external_bridge (usable only for multiple-nics). * When running config-download manually, fact gathering at the play level can now be controlled with the gather_facts Ansible boolean variable. * Add parameter *NovaLiveMigrationWaitForVIFPlug* which allows to set *live_migration_wait_for_vif_plug* which in turn allows whether to wait for "network-vif-plugged" events before starting guest transfer. The default value for the parameter is set to true and it is set to false when *ovn* is in *NeutronMechanismDrivers* list. * Add *ContainerNovaLibvirtUlimit* to configure Ulimit for containerized Libvirt. Defaults to "nofile=131072,nproc=126960". * Enables new Neutron "kill script" feature in order to avoid dangling containers when it kills an agent. * Add parameter NovaLibvirtMemStatsPeriodSeconds, which allows to set *libvirt/mem_stats_period_seconds* parameter value to number of seconds to memory usage statistics period, zero or negative value mean to disable memory usage statistics. Default value for NovaLibvirtMemStatsPeriodSeconds is 10. * Add boolean parameter *NovaSchedulerLimitTenantsToPlacementAggregate* which allows to set *scheduler/limit_tenants_to_placement_aggregate* parameter value, to have tenant isolation with placement. It ensures hosts are in tenant-isolated host aggregate and availability zones will only be available to specific set of tenants. Default value for NovaSchedulerLimitTenantsToPlacementAggregate is false. * Parameter *scheduler/query_placement_for_image_type_support* is enabled by default for all deployments. Setting it causes the scheduler to ask Placement only for compute hosts that support the *disk_format* of the image used in the request which is beneficial for example, the libvirt driver, when using Ceph as an ephemeral backend, does not support *qcow2* images (without an expensive conversion step). Upgrade Notes ************* * During upgrade user will need to create custom roles_data.yaml and remove external_bridge from tags to be sure that bridge will be not added. * Removes the environment for deprecated non-config-download workflow. Now specifying --no-config-download/--stack-only in cli would create/update the heat stack but would not deploy configurations on the nodes. * The new role variable update_serial is introduced allowing parallel update execution. On Controller role this variable defaults to 1 as pacemaker has to be taken down and up in rolling fashion. The default value is 25 as that is default value for parallel ansible execution used by tripleo. Deprecation Notes ***************** * The template *aide-baremetal-puppet* has been deprecated. This template has been replaced by *aide-baremetal-ansible* which provides for the same functionality and interfaces. * Support for the Midonet plugin has been removed from TripleO Train. The reason is the lack of maintainers and testing around this plugin. * The environments at environments/deployed-server-bootstrap- environment-centos.yaml and environments/deployed-server-bootstrap- environment-rhel.yaml are deprecated as the functionality they enabled in the bootstrap scripts has been moved to the tripleo- boostrap ansible role provided by tripleo-common. * Deprecated environment files are removed. Removed "environments /neutron-sriov.yaml", use "environments/services/neutron-sriov.yaml" file. Removed "environments/neutron-ovs-dpdk.yaml", use "environments/services/neutron-ovs-dpdk.yaml" file. Removed "environments/ovs-dpdk-permissions.yaml", as the required parameter is added to the OvS-DPDK roles. * The rhel-registration scripts support has been removed. It was replaced in Rocky by the Ansible RHSM role. Upgrades have been tested and the new configuration is well documented. * Support for the Cisco UCSM plugin has been removed from TripleO Train. The reason is the lack of maintainers and testing around this plugin. Bug Fixes ********* * When changeing the "name_lower" of the "InternalApi" network and using the "service_net_map_replace" option in network data. The subnet referenced in "VipSubnetMapDefaults" did not take in account the custom lowercase name for the network, causing deployment error. See bug: 1832461 (https://bugs.launchpad.net/tripleo/+bug/1832461) * The passphrase for config option 'server_certs_key_passphrase', is used as a Fernet key in Octavia and thus must be 32 bytes long. In the case of an operator-provided passphrase, TripleO will validate that. * https://bugs.launchpad.net/neutron/+bug/1825943 * Adds the Neutron Routed Provider Networks (https://opendev.org/open stack/neutron/src/branch/master/releasenotes/notes/allow-update- subnet-segment-id-association-1fb02ace27e85bb8.yaml) ("segments") back to the list of default service plugins for the overcloud. Bug: 1831969 (https://bugs.launchpad.net/tripleo/+bug/1831969) * Certain nova containers require more locked memory that the default limit of 16KiB. Increase the default memlock to 64MiB via "DockerNovaComputeUlimit". As this is only a maximum limit and not a pre-allocatiosn this will not increase the memory requirements for all nova containers. To date the only container to require this is nova_cell_v2_discover_hosts which is short lived. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * https://review.opendev.org/#/c/662109/ removed the bind mount from /run inside the nova_migration_target container. But the nova- migration-wrapper inside the container needs access to the libvirt socket - https://github.com/rdo-packages/nova-distgit/blob/rpm- master/nova-migration-wrapper#L31 . This adds the bind mount of /run/libvirt to the nova_migration_target container to fix live migration issues. * Recent changes for e.g edge scenarios caused intended move of discovery from controller to bootstrap compute node. The task is triggered by deploy-identifier to make sure it gets run on any deploy,scale, ... run. If deploy run is triggered with --skip- deploy-identifier flag, discovery will not be triggered at and as result causing failures in previously supported scenarios. This change moves the host discovery task to be an ansible deploy_steps_tasks that it gets triggered even if --skip-deploy- identifier is used, or the compute bootstrap node is blacklisted. * Deployment with enabled NFS share for nova ephemeral storage fails. Podman fails to relable with mounted nfs in /var/lib/nova/instances and container fail to start with "operation not supported". This change only sets the z flag for the /var/lib/nova in case nfs is not enabled for the compute. Other Notes *********** * Services that were in extraconfig/services are now in deployment directory among other services. * The use of parameter "EC2MetadataIp" and the configuration of routes to metadata has been removed. Nothing is consuming metadata over the network anymore since config-drive is used as the data source. * The environment files to enable/disable config-download at environments/disable-config-download-environment.yaml and environments/config-download-environment.yaml are removed as disabling config-download was deprecated in Stein, and it's enabled by default. Changes in tripleo-heat-templates 11.0.0..11.1.0 ------------------------------------------------ 58a9f97a9 Restart only installed services 829e65855 Allow for configuration of the Manila CephFS backend with a remote Ceph 08e34dbca Re-Add facter cache for container configurations 1565c50be Revert "Add facter cache for container configurations" 0b0553fdf Move instanceha into scripts 91d287539 Remove support for Midonet plugin e6fe9ff3d Remove mac_hostname & random_string 2f3554cdc Remove extraconfig/services directory c2977e3c0 Add missing update_serial key to compute roles 3e7c15da2 Only run cellv2 host discovery on default cell a407d4f5d Add dashboard component as new ceph composable service. 4ec57c60f Add facter cache for container configurations 7f2e8b875 Use pipefail instead of checking PIPESTATUS 2b399078a Add scenario007-standalone environment file a23aa80c4 Add swift_config puppet-tag for swift-ringbuilder a0b9f90a2 Add a suffix for tmpwatch f99be0d82 Add bind mount for config setup 930298c1c Set scenario009 job voting to false 7dbdec29a Remove unused extraconfig scripts 2ccd77639 Remove support for Cisco UCSM plugin 7e8a2baf1 Fix default parameters in logindefs 5c5302923 Set HieradataVars as group vars instead 4a457fa52 Remove tripleo_ssh_known_hosts_use_template var 2f6f51914 Use Ansible for ssh known hosts config a6ff00885 Specify a default for container_registry_logins 6413ef838 Set nova_additional_cell as global_vars 55ad22584 Remove service_names hieradata file 4f9b32a9f Lookup pre/post deployment vars with hostvars 41d9901ef Reuse clouds_yaml.py from tripleo-common in tht 2596142ad Better debug for container-puppet tool 29aed4d33 Revert "Also set nova::network::neutron::dhcp_domain" 6e07f2a76 Convert the heat json format to a py dict 0aa06134c Use template for NetworkConfig script c5ba2cec8 Use Ansible for {{role}} and host_extraconfig hieradata 27e7005ad Use Ansible for net_ip_map hieradata b1fda5e8b Fix container-puppet tool standalone for podman 47d1430da Upgrade fixes for RabbitMQ and Pacemaker b81bec56f Allow logrotate to access container_file_t files 81e936db4 Update octavia to new tripleo-ansible PATH b8a9fbc0e Remove pre_deploy/rhel-registration d48d1bdb3 Support TLS deployments with KernelDisableIPv6 enabled c36433e34 Run NetworkConfig only if configuration script exists dfa594a6a Mount /var/run rw 2074b356f Add new parameter NovaSchedulerLimitTenantsToPlacementAggregate e677aeacd Set nova::keystone auth details hiera on compute b56c521e0 Don't use the z flag in case NovaNfsEnabled is true 7a52a6986 Drop EC2MetadataIp parameter and its uses f9831d8bc Remove puppet/deploy-artifacts.yaml 41e675770 Disable Docker in default Standalone environments 39a5545c4 Change OS::Heat::*Deployments to OS::Heat:*DeploymentGroup 58bf8a207 swift: ensure we get rsyslog state "--check" mode d665a2bb0 Remove the tripleo.plan_management.v1.publish_ui_logs_to_swift cron trigger 6ce5989e4 Increase the default memlock to 64MiB via ``DockerNovaComputeUlimit``. 84b78e8dd Convert heat template to use aide role 67d5ca353 Fix scenario012-standalone ironic job 65d7e55f5 Make nova ephemeral storage backend configurable per-role 5ba1fd2bc Revert "Revert "Remove os-collect-config related poperties and attributes"" f8779e502 Move nova cell v2 discovery to deploy_steps_tasks 059792eae Remove environments to enable/disable config-download 578bcb2ff Per-Role krb-service-principal for CompactServices f5295ed3a Fix nova compute container depends_on to be list b5a2a61df Revert "Remove os-collect-config related poperties and attributes" 8775e2d5a Fix ovn dbs control port 8ef4f3cac Add ContainerNovaLibvirtUlimit to tweak Ulimits a6fef3aad Adds constraint: OctaviaServerCertsKeyPassphrase must be 32 chars long 47f3af726 Prepare for Ceph by including Ansible roles 02fe40cd8 Run NetworkConfig if never run previously a76610657 Use Ansible for vip_data hieradata 4c34147cc Use Ansible for all_nodes hieradata f44f33939 Use Ansible for bootstrap_node hieradata 8860eee23 Add missing tag 'role_specific' for NovaPciPassthrough parameter 2d4430bd7 Avoid checking rc if we're in dry-run mode b2cc5f2a8 Convert heat template to use tuned role e4c4fcb2a Enable kill script for Neutron agents 537822d47 Add /run/libvirt to nova_migration_target container 634be405d Prefer CephPoolDefaultPgNum over counterintuitive Manila specific params dae0a89a8 Use per-subnet DNS nameservers for ctlplane 8d85e61c3 Replace git.openstack.org URLs with opendev.org URLs ea37ee663 Add container engine authentication support a89d46e03 Allow ssh from all ctlplane network subnets 906d03ea1 Configure the Multipathd service b17266199 Make Multipathd an optional service 90d05216b Replace /var/log/containers/swift symlink with directories 93c8eedae Remove faulty placement::config leftovers 56a35beb5 Idempotency for system_upgrade_prepare 2ca7c5503 Allow skipping RHSM with Leapp 55e1eac89 Podman 1.4.1 drops json-file in favor of k8s-file eeb0d5495 Add UndercloudMinion environments 8fac4c433 ceilometer_agent_notification: disable-panko.yaml e115e14e5 Use Ansible to configure the Hiera config cb767a97b Use Ansible for {{server_resource_name}}Deployment d3a9614d8 Don't create symlink for swift container logs 0d9efc378 Remove deprecated config-download-environment.yaml 45fa04594 Skip standalone deploys if tox jobs fail ea24b7820 Remove duplicated parameters about nova db archive 063b34ce4 Remove duplicated cinder::cron::db_purge::destination 92a0b41f3 Resolve symlinks when copying undercloud.conf to container. 5f9c0d667 Add DockerNovaComputeUlimit to nova_cell_v2_discover_hosts 7ac8cf9c2 Make comparisons case insensitive 3791bf36c Fix Ceph RGW listener port configuration b6c88a99a Remove duplicate mount destinations in containers 1a12568b7 Fix ipaclient script 6baf5326b Upgrade playbook fixes for OS upgrade cb8caaae4 Setup cluster definition based on the ansible limit option. 99b63d780 [AZs] Better detect OVN in NeutronMechanismDrivers 17e16e510 Interface for Ansible Host variables 825b30eb2 Add new parameter NovaLiveMigrationWaitForVIFPlug 79d9113e5 Use ansible for HostsConfig 0d67ecaf7 Disable iscsi.service to avoid iscsid on host from getting started 37a6aa859 Enable Request Filter for Image Types b31b7fd4e Use ansible for ArtifactsConfig 0cd9b7254 Use ansible for NetworkConfig ec68f1740 Use ansible for AllNodesValidationConfig ed5c2ad70 Fix bare reference of cinder_enable_iscsi_backend 002fcaad1 Fix NovaNfs role parameters 06d6fb3bd Remove extraneous references to RpcXXX parameters b8a8dda5b Remove duplicate key in UndercloudExtraConfig caf690f76 Remove scenario008 jobs 564d89b2f Fix network rename + service_net_map_replace 6947d0842 Add higher retry/delay defaults to check the quorum status. ce1da1f6c Remove deprecated NFV environment files 12aaf4b54 Also set nova::network::neutron::dhcp_domain 4373d6461 Temporarily add .yaml extension for all-nodes-deployment-hieradata.j2 d87c49f4d Add HostnameNetworkConfigMap output 203418529 Replace hardcoded gather_facts:no with variable ccabc8f8e Fix log owner on computes during overcloud deploy runs 2bd0012a6 Fix RedisVirtualIP when overrdiing InternalApi name_lower 20f34fc55 Rework neutron AZ configs considering OVN 89e9fe53b Remove os-collect-config related poperties and attributes 12c0f3a16 Remove get-occ-config.sh script for deployed server 3f0c2ceb0 Remove os-collect-config dependency from os-net-config c8311ecc5 Remove disable-config-download-environment.yaml e2a4d90aa Set cache_backend for token caching 770b578bf Explicitly set ansible_python_interpreter in external upgrade playbook 4070b62e8 Clean docker and podman after executing an update or upgrade 1de24c496 Re-enable manila dashboard 53650f963 Put on hold the Ansible package update until is fixed df3b4b3c5 Configure insecure registries before Pacemaker-managed image pulls 66c4e2365 Add new role parameter NovaLibvirtMemStatsPeriodSeconds c53e76627 Env file to disable undercloud nova 8eaac3026 keystone: drop duplicate -DFOREGROUND d03f29e48 Add panko_api_cron container da1827f7d Add networks to Standalone role a6ba0bcf3 Cleanup deprecated nova options f86635803 Run ceph-ansible using tripleo-ansible-inventory aa305a9d7 Fix correct network for nova-vnc 8c6bec227 Change all step checks to |int a59a188a6 Force ansible serial to 1 for the Controller 6b9b80d88 Enabling Neutron Routed Provider Networks (segments) 166dd42fc Add ComputeHCIOvsDpdk role 198cfb6f8 Remove deployed-server bootstrap resource a01c8703f Remove reference to removed OctaviaEventStreamerDriver param 7b3d8f786 Change package installs for Stein and OS upgrade 7c379543c Enable Ceph RGW 'account in url' option fda0f4284 Fix disappearing Puppet logs 3db1b7415 Increase neutron VNI Ranges for ML2/OVS deployments d6eb263d5 Add df plugin and make description consistent 90ecca6f6 DVR neutron template should enable ARP responder a68151d02 Convert Docker*Image parameters fe1bdee58 Add EndpointMap to the ironic post_deploy template ff7cce93e Add creating br-ex for compute node in ovn fdb204b96 Add in-flight health validations to Ceph deployment fa1a6111e Configure the region-related settings for core components 2efcb7b4e Revert "Revert "Switch off nova metadata api on the undercloud"" 0cd87414a Convert aide puppet to ansible 36670f60c Fix cleanup to remove external resources v6 6b0d025fd Make NovaResumeGuestsStateOnHostBoot podman compatible b3b9b44da Add {{role.name}}RemovalPoliciesMode parameter 462d45b82 Cleanup keystone items 3623b96c6 Add healthcheck to ironic_pxe_http 812e08607 Configure Horizon timezone according to the host timezone 1b46f36c8 Update min tox version to 2.0 Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 - README.rst | 2 +- capabilities-map.yaml | 10 - ci/common/ironic_standalone_post.yaml | 6 + ci/common/net-config-multinode-os-net-config.yaml | 5 - ci/common/net-config-multinode.yaml | 5 - ci/common/net-config-simple-bridge.yaml | 5 - ci/common/vbmc_setup.yaml | 11 +- ci/environments/multinode-3nodes.yaml | 2 + ci/environments/multinode-containers.yaml | 1 + .../nic-configs/ceph-storage.yaml | 7 - .../nic-configs/cinder-storage.yaml | 5 - .../nic-configs/compute-dvr.yaml | 7 - .../multiple-nics-ipv6/nic-configs/compute.yaml | 7 - .../multiple-nics-ipv6/nic-configs/controller.yaml | 7 - .../nic-configs/swift-storage.yaml | 5 - .../multiple-nics/nic-configs/ceph-storage.yaml | 7 - .../multiple-nics/nic-configs/cinder-storage.yaml | 5 - .../multiple-nics/nic-configs/compute-dvr.yaml | 7 - .../network/multiple-nics/nic-configs/compute.yaml | 7 - .../multiple-nics/nic-configs/controller.yaml | 8 - .../multiple-nics/nic-configs/swift-storage.yaml | 5 - .../public-bond/nic-configs/ceph-storage.yaml | 7 - .../public-bond/nic-configs/cinder-storage.yaml | 5 - .../network/public-bond/nic-configs/compute.yaml | 7 - .../public-bond/nic-configs/controller.yaml | 8 - .../public-bond/nic-configs/swift-storage.yaml | 5 - .../scenario001-multinode-containers.yaml | 5 + ci/environments/scenario001-standalone.yaml | 4 + .../scenario002-multinode-containers.yaml | 1 + .../scenario003-multinode-containers.yaml | 1 + .../scenario004-multinode-containers.yaml | 3 + ci/environments/scenario004-standalone.yaml | 3 + .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 56 +++ ci/environments/scenario009-multinode.yaml | 6 +- .../scenario010-multinode-containers.yaml | 3 + ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 1 + ci/environments/scenario012-standalone.yaml | 8 +- common/container-puppet.py | 64 ++- common/deploy-steps-tasks.yaml | 70 ++- common/deploy-steps.j2 | 556 ++++++++++++++++++--- .../nova_cell_v2_discover_hosts.py | 62 --- deployed-server/README.rst | 61 --- .../deployed-server-bootstrap-centos.sh | 4 + .../deployed-server-bootstrap-centos.yaml | 4 + deployed-server/deployed-server-bootstrap-rhel.sh | 4 + .../deployed-server-bootstrap-rhel.yaml | 4 + .../deployed-server-environment-output.yaml | 1 - deployed-server/deployed-server-roles-data.yaml | 4 + deployed-server/deployed-server.yaml | 5 - deployed-server/scripts/get-occ-config.sh | 164 ------ deployment/aide/aide-baremetal-ansible.yaml | 86 ++++ deployment/aodh/aodh-api-container-puppet.yaml | 8 +- deployment/aodh/aodh-base.yaml | 31 -- .../aodh/aodh-evaluator-container-puppet.yaml | 8 +- .../aodh/aodh-listener-container-puppet.yaml | 8 +- .../aodh/aodh-notifier-container-puppet.yaml | 8 +- .../barbican/barbican-api-container-puppet.yaml | 22 +- .../liquidio-compute-config-container-puppet.yaml | 8 +- .../ceilometer-agent-central-container-puppet.yaml | 8 +- .../ceilometer-agent-compute-container-puppet.yaml | 8 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 8 +- ...ometer-agent-notification-container-puppet.yaml | 26 +- .../ceilometer-base-container-puppet.yaml | 22 - deployment/ceph-ansible/ceph-base.yaml | 371 +++----------- deployment/ceph-ansible/ceph-client.yaml | 2 +- deployment/ceph-ansible/ceph-external.yaml | 2 +- deployment/ceph-ansible/ceph-grafana.yaml | 125 +++++ deployment/ceph-ansible/ceph-mds.yaml | 58 ++- deployment/ceph-ansible/ceph-mgr.yaml | 30 +- deployment/ceph-ansible/ceph-mon.yaml | 18 +- deployment/ceph-ansible/ceph-nfs.yaml | 4 +- deployment/ceph-ansible/ceph-osd.yaml | 16 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 2 +- deployment/ceph-ansible/ceph-rgw.yaml | 19 +- deployment/cinder/cinder-api-container-puppet.yaml | 10 +- .../cinder/cinder-backup-container-puppet.yaml | 8 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 18 +- deployment/cinder/cinder-base.yaml | 32 -- .../cinder/cinder-common-container-puppet.yaml | 20 +- .../cinder/cinder-scheduler-container-puppet.yaml | 8 +- .../cinder/cinder-volume-container-puppet.yaml | 8 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 18 +- deployment/database/mysql-container-puppet.yaml | 10 +- deployment/database/mysql-pacemaker-puppet.yaml | 86 +++- deployment/database/redis-container-puppet.yaml | 8 +- deployment/database/redis-pacemaker-puppet.yaml | 62 ++- .../aide/aide-baremetal-puppet.yaml | 0 .../docker/docker-baremetal-ansible.yaml | 71 +++ .../logging/fluentd-container-puppet.yaml | 8 +- .../monitoring/sensu-client-container-puppet.yaml | 8 +- .../nova/nova-consoleauth-container-puppet.yaml | 10 +- .../opendaylight-api-container-puppet.yaml | 8 +- .../panko/panko-api-container-puppet.yaml | 36 +- deployment/ec2/ec2-api-container-puppet.yaml | 12 +- deployment/etcd/etcd-container-puppet.yaml | 8 +- .../designate/designate-api-container-puppet.yaml | 8 +- .../designate-central-container-puppet.yaml | 8 +- .../designate/designate-mdns-container-puppet.yaml | 8 +- .../designate-producer-container-puppet.yaml | 8 +- .../designate/designate-sink-container-puppet.yaml | 8 +- .../designate-worker-container-puppet.yaml | 14 +- deployment/glance/glance-api-container-puppet.yaml | 76 ++- .../glance/glance-api-logging-file-container.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 8 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 8 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 8 +- deployment/haproxy/haproxy-container-puppet.yaml | 8 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 63 ++- deployment/heat/heat-api-cfn-container-puppet.yaml | 8 +- deployment/heat/heat-api-container-puppet.yaml | 10 +- deployment/heat/heat-base-puppet.yaml | 37 +- deployment/heat/heat-engine-container-puppet.yaml | 8 +- deployment/horizon/horizon-container-puppet.yaml | 15 +- .../ipa/ipaclient-baremetal-ansible.yaml | 4 + .../ipsec/ipsec-baremetal-ansible.yaml | 6 +- deployment/ironic/ironic-api-container-puppet.yaml | 8 +- deployment/ironic/ironic-base-puppet.yaml | 31 -- .../ironic/ironic-conductor-container-puppet.yaml | 8 +- .../ironic/ironic-inspector-container-puppet.yaml | 8 +- .../ironic-neutron-agent-container-puppet.yaml | 8 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 11 +- deployment/iscsid/iscsid-container-puppet.yaml | 17 +- .../keepalived/keepalived-container-puppet.yaml | 8 +- deployment/kernel/kernel-baremetal-puppet.yaml | 8 + deployment/keystone/keystone-container-puppet.yaml | 44 +- .../kubernetes-master-baremetal-ansible.yaml | 0 .../kubernetes-worker-baremetal-ansible.yaml | 0 deployment/logging/files/barbican-api.yaml | 4 +- deployment/logging/files/heat-engine.yaml | 4 +- deployment/logging/files/keystone.yaml | 4 +- deployment/logging/files/neutron-api.yaml | 4 +- deployment/logging/files/nova-api.yaml | 4 +- deployment/logging/files/nova-common.yaml | 4 +- deployment/logging/files/nova-metadata.yaml | 4 +- deployment/logging/files/panko-api.yaml | 4 +- deployment/logging/files/placement-api.yaml | 4 +- .../logging/rsyslog-sidecar-container-puppet.yaml | 4 +- deployment/logging/stdout/barbican-api.yaml | 8 +- deployment/logging/stdout/haproxy.yaml | 4 +- deployment/logging/stdout/heat-api-cfn.yaml | 8 +- deployment/logging/stdout/heat-api.yaml | 8 +- deployment/logging/stdout/keystone.yaml | 8 +- deployment/logging/stdout/nova-api.yaml | 8 +- deployment/logging/stdout/nova-common.yaml | 2 +- deployment/logging/stdout/nova-metadata.yaml | 8 +- deployment/logging/stdout/panko-api.yaml | 8 +- deployment/logging/stdout/placement-api.yaml | 8 +- .../login-defs/login-defs-baremetal-puppet.yaml | 10 +- .../logrotate-crond-container-puppet.yaml | 18 +- deployment/manila/manila-api-container-puppet.yaml | 8 +- deployment/manila/manila-base.yaml | 31 -- .../manila/manila-scheduler-container-puppet.yaml | 8 +- .../manila/manila-share-container-puppet.yaml | 8 +- .../manila/manila-share-pacemaker-puppet.yaml | 18 +- .../memcached/memcached-container-puppet.yaml | 8 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 +- deployment/metrics/collectd-container-puppet.yaml | 11 +- deployment/metrics/qdr-container-puppet.yaml | 8 +- .../mistral/mistral-api-container-puppet.yaml | 8 +- deployment/mistral/mistral-base.yaml | 31 -- .../mistral/mistral-engine-container-puppet.yaml | 8 +- .../mistral-event-engine-container-puppet.yaml | 8 +- .../mistral/mistral-executor-container-puppet.yaml | 9 +- deployment/multipathd/multipathd-container.yaml | 72 ++- deployment/neutron/kill-script | 71 +++ .../neutron/neutron-api-container-puppet.yaml | 55 +- deployment/neutron/neutron-az-config.yaml | 121 ----- deployment/neutron/neutron-base.yaml | 33 +- .../neutron-bgpvpn-api-container-puppet.yaml | 4 +- .../neutron/neutron-compute-plugin-midonet.yaml | 41 -- .../neutron/neutron-dhcp-container-puppet.yaml | 67 ++- .../neutron/neutron-l2gw-api-container-puppet.yaml | 4 +- .../neutron/neutron-l3-container-puppet.yaml | 75 ++- .../neutron/neutron-metadata-container-puppet.yaml | 8 +- .../neutron/neutron-midonet-baremetal-puppet.yaml | 74 --- .../neutron-ovs-agent-container-puppet.yaml | 11 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 4 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 4 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 4 +- .../neutron-plugin-ml2-container-puppet.yaml | 4 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 4 +- .../neutron-plugin-nsx-container-puppet.yaml | 4 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 8 +- deployment/nova/nova-api-container-puppet.yaml | 47 +- deployment/nova/nova-base-puppet.yaml | 34 +- .../nova/nova-compute-common-container-puppet.yaml | 38 +- deployment/nova/nova-compute-container-puppet.yaml | 194 +++++-- .../nova/nova-conductor-container-puppet.yaml | 10 +- deployment/nova/nova-ironic-container-puppet.yaml | 69 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 77 ++- .../nova/nova-metadata-container-puppet.yaml | 28 +- .../nova-migration-target-container-puppet.yaml | 31 +- .../nova/nova-scheduler-container-puppet.yaml | 25 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 16 +- deployment/nova/novajoin-container-puppet.yaml | 12 +- .../octavia/octavia-api-container-puppet.yaml | 10 +- deployment/octavia/octavia-base.yaml | 35 +- .../octavia/octavia-deployment-config.j2.yaml | 12 +- .../octavia-health-manager-container-puppet.yaml | 9 +- .../octavia-housekeeping-container-puppet.yaml | 8 +- .../octavia/octavia-worker-container-puppet.yaml | 8 +- .../openshift/openshift-cns-baremetal-ansible.yaml | 14 +- .../openshift-infra-baremetal-ansible.yaml | 0 .../openshift-master-baremetal-ansible.yaml | 82 +-- .../openshift-node-baremetal-ansible.yaml | 4 +- .../openshift-worker-baremetal-ansible.yaml | 0 .../ovn/ovn-controller-container-puppet.yaml | 8 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 12 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 25 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 38 +- .../pacemaker/clustercheck-container-puppet.yaml | 8 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 109 +++- .../placement/placement-api-container-puppet.yaml | 13 +- deployment/podman/podman-baremetal-ansible.yaml | 83 ++- deployment/qdr/qdrouterd-container-puppet.yaml | 8 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 8 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 8 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 74 ++- .../rabbitmq-messaging-pacemaker-puppet.yaml | 59 ++- .../rabbitmq-messaging-rpc-container-puppet.yaml | 8 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 73 ++- .../rhsm/rhsm-baremetal-ansible.yaml | 0 deployment/sahara/sahara-api-container-puppet.yaml | 8 +- deployment/sahara/sahara-base.yaml | 33 +- .../sahara/sahara-engine-container-puppet.yaml | 8 +- .../skydive/skydive-agent-baremetal-ansible.yaml | 0 .../skydive-analyzer-baremetal-ansible.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 60 +-- .../swift/swift-ringbuilder-container-puppet.yaml | 6 +- .../swift/swift-storage-container-puppet.yaml | 62 ++- deployment/tacker/tacker-container-puppet.yaml | 39 +- deployment/time/timezone-baremetal-ansible.yaml | 6 +- .../tripleo-firewall-baremetal-puppet.yaml | 13 +- .../tripleo-packages-baremetal-puppet.yaml | 60 ++- deployment/tuned/tuned-baremetal-ansible.yaml | 54 +- deployment/undercloud/minion-rabbitmq-puppet.yaml | 85 ++++ .../undercloud/tempest-container-puppet.yaml | 6 +- deployment/undercloud/undercloud-upgrade.yaml | 10 +- deployment/zaqar/zaqar-container-puppet.yaml | 8 +- .../ceph-ansible/ceph-ansible-per-role.yaml | 18 + environments/ceph-ansible/ceph-dashboard.yaml | 5 + environments/config-download-environment.yaml | 14 - ...ployed-server-bootstrap-environment-centos.yaml | 4 + ...deployed-server-bootstrap-environment-rhel.yaml | 4 + environments/deployed-server-environment.j2.yaml | 3 + .../disable-config-download-environment.yaml | 6 - environments/docker-uc-light.yaml | 2 +- environments/hyperconverged-ceph.yaml | 1 + environments/ipsec.yaml | 2 +- environments/kubernetes.yaml | 4 +- environments/lifecycle/upgrade-prepare.yaml | 5 - environments/manila-cephfsganesha-config.yaml | 10 +- environments/metrics/collectd-standalone.yaml | 6 +- environments/multipathd.yaml | 5 + environments/networking/neutron-midonet.yaml | 66 --- environments/neutron-az-config.yaml | 2 - environments/neutron-midonet.yaml | 28 -- environments/neutron-ml2-cisco-nexus-ucsm.yaml | 23 - environments/neutron-ovs-dpdk.yaml | 43 -- environments/neutron-ovs-dvr.yaml | 5 +- environments/neutron-sriov.yaml | 13 - environments/openshift-cns.yaml | 2 +- environments/openshift.yaml | 6 +- environments/ovs-dpdk-permissions.yaml | 20 - environments/rhsm.yaml | 2 +- .../services-baremetal/neutron-ml2-cisco-vts.yaml | 4 +- .../neutron-opendaylight-dpdk.yaml | 37 -- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 2 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- .../services-baremetal/neutron-ovs-dpdk.yaml | 11 - environments/services/heat-engine.yaml | 2 + environments/services/ironic-conductor.yaml | 2 + environments/services/neutron-ml2-cisco-vts.yaml | 4 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 +- environments/services/neutron-ovn-ha.yaml | 2 +- environments/services/neutron-ovn-standalone.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 4 +- environments/services/neutron-ovs.yaml | 4 +- environments/services/skydive-environment.yaml | 4 +- environments/ssl/enable-internal-tls.j2.yaml | 2 +- environments/standalone/standalone-tripleo.yaml | 6 +- environments/undercloud-disable-nova.yaml | 10 + environments/undercloud.yaml | 7 +- environments/undercloud/undercloud-minion.yaml | 253 ++++++++++ extraconfig/all_nodes/mac_hostname.j2.yaml | 77 --- extraconfig/all_nodes/random_string.j2.yaml | 51 -- .../krb-service-principals/role.role.j2.yaml | 17 +- extraconfig/post_deploy/clouds_yaml.py | 136 ++--- extraconfig/post_deploy/example.yaml | 2 +- extraconfig/post_deploy/example_run_on_update.yaml | 2 +- extraconfig/post_deploy/standalone_post.yaml | 4 +- .../post_deploy/undercloud_ctlplane_network.py | 24 +- extraconfig/post_deploy/undercloud_post.py | 9 - extraconfig/post_deploy/undercloud_post.yaml | 9 +- .../environment-rhel-registration.yaml | 27 - .../rhel-registration-resource-registry.yaml | 2 - .../rhel-registration/rhel-registration.yaml | 216 -------- .../rhel-registration/scripts/rhel-registration | 308 ------------ .../rhel-registration/scripts/rhel-unregistration | 21 - extraconfig/pre_network/boot-params-service.yaml | 2 +- extraconfig/pre_network/config_then_reboot.yaml | 77 --- extraconfig/services/README.rst | 6 - extraconfig/tasks/run_puppet.sh | 31 -- extraconfig/tasks/ssh/host_public_key.yaml | 56 --- extraconfig/tasks/ssh/known_hosts_config.yaml | 42 -- net-config-bond.j2.yaml | 5 - net-config-bridge.j2.yaml | 5 - net-config-linux-bridge.j2.yaml | 11 +- net-config-noop.j2.yaml | 5 - net-config-standalone.j2.yaml | 5 - ...config-static-bridge-with-external-dhcp.j2.yaml | 9 +- net-config-static-bridge.j2.yaml | 9 +- net-config-static.j2.yaml | 9 +- net-config-undercloud.j2.yaml | 5 - .../config/2-linux-bonds-vlans/role.role.j2.yaml | 10 +- .../bond-with-vlans/controller-no-external.j2.yaml | 10 +- .../config/bond-with-vlans/controller-v6.j2.yaml | 10 +- network/config/bond-with-vlans/role.role.j2.yaml | 10 +- network/config/multiple-nics/compute-dvr.j2.yaml | 11 +- network/config/multiple-nics/controller-v6.j2.yaml | 12 +- network/config/multiple-nics/role.role.j2.yaml | 13 +- .../controller-v6.j2.yaml | 11 +- .../role.role.j2.yaml | 11 +- .../controller-no-external.j2.yaml | 11 +- .../config/single-nic-vlans/controller-v6.j2.yaml | 11 +- network/config/single-nic-vlans/role.role.j2.yaml | 11 +- network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 147 +++--- network/ports/net_ip_list_map.j2.yaml | 114 ----- network/ports/noop.yaml | 3 + network/ports/port.j2 | 6 +- network/scripts/run-os-net-config.sh | 61 +-- network/service_net_map.j2.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 303 +++++------ puppet/all-nodes-config.j2.yaml | 262 ---------- puppet/deploy-artifacts.yaml | 32 -- .../all_nodes/neutron-midonet-all-nodes.yaml | 105 ---- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 284 ----------- puppet/role.role.j2.yaml | 253 ++++------ releasenotes/notes/6.0.0-b52a14a71fc62788.yaml | 2 +- ...-container-registry-login-08d6a87586c84a99.yaml | 10 + ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...remetal-puppet-deprecated-25388c875e1d9884.yaml | 5 + ...alApi-name-lower-override-7ea2635877b753c7.yaml | 8 + ...hboard_composable_service-f72dc4b1cd007734.yaml | 9 + .../configure-multipathd-d3fb4683b9ffbb4b.yaml | 6 + .../create-br-ex-for-compute-b967312323d45d9b.yaml | 9 + .../extraconfig_services-18ca28841974b8dd.yaml | 5 + .../fix-odl-karaf-logging-eca10973e57caa3a.yaml | 2 +- ...tr-replace-hostname-issue-393fb6954f12f7e6.yaml | 2 +- .../gather-facts-variable-d7f1d74d1dc68ee9.yaml | 4 + ...rver_certs_key_passphrase-908471f31d09f088.yaml | 5 + ...gration_wait_for_vif_plug-6d16da261a138fb8.yaml | 9 + .../notes/midonet_removal-9b91c6bb610b139e.yaml | 5 + ...arams_to_configure_ulimit-82057bf64d7173a8.yaml | 5 + ...neutron-az-config-service-3085b2c296df06c9.yaml | 32 +- .../neutron-kill-script-4d8b6a0130f6fcdd.yaml | 6 + ...-routed-provider-networks-2af1220125612d6f.yaml | 8 + .../nova-memlock-increase-066ed22764ed3ce1.yaml | 9 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + ..._mem_stats_period_seconds-b9b606232629cb38.yaml | 8 + .../notes/nova_metadata_wsgi-bfb240bc84194d05.yaml | 2 +- ...ion_target_libvirt_socket-585fa579e5b2704d.yaml | 9 + ...xternal_post_deploy_tasks-e978560ee59b8b56.yaml | 12 + .../nova_nfs_enabled_podman-a92ea12cd4cd92c8.yaml | 8 + .../nova_qemu_enable_config-c89016b4d93802d6.yaml | 2 +- ...ts_to_placement_aggregate-9889b0a73dd1d042.yaml | 9 + ...a_templated_cells_db_urls-2eb151090c49c51d.yaml | 2 +- ...lated_cells_transport_url-275f0b707d9227ab.yaml | 2 +- ...nova_api_db_for_placement-eea44dd48c768f04.yaml | 2 +- ..._placement_for_image_type-0bfbef90bb8c3871.yaml | 9 + ...server-bootstrap-resource-7de0596b90f1b15a.yaml | 8 + ...nfig-download-environment-04f61210d0a304a1.yaml | 8 + ...ove-ec2metadata-parameter-36e75f70d2322e55.yaml | 6 + ...fig-download-deprecations-a40fb47c0c0a49f1.yaml | 6 + ...emove_deprecated_nfv_envs-30f6b3552d34d489.yaml | 10 + .../notes/rhel-registration-2752c4e0a14cec98.yaml | 6 + .../notes/ucsm_removal-929fe9971ed4acc8.yaml | 5 + .../notes/update_serial-785ff794ff88fb2e.yaml | 9 + roles/BlockStorage.yaml | 2 + roles/CellController.yaml | 1 + roles/CephAll.yaml | 3 + roles/CephFile.yaml | 2 + roles/CephObject.yaml | 2 + roles/CephStorage.yaml | 2 + roles/Compute.yaml | 5 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 4 + roles/ComputeHCI.yaml | 3 + roles/ComputeHCIOvsDpdk.yaml | 68 +++ roles/ComputeInstanceHA.yaml | 2 + roles/ComputeLiquidio.yaml | 2 + roles/ComputeLocalEphemeral.yaml | 71 +++ roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 3 + roles/ComputeOvsDpdkSriov.yaml | 2 + roles/ComputeOvsDpdkSriovRT.yaml | 3 + roles/ComputePPC64LE.yaml | 2 + roles/ComputeRBDEphemeral.yaml | 71 +++ roles/ComputeRealTime.yaml | 3 + roles/ComputeSriov.yaml | 2 + roles/ComputeSriovRT.yaml | 3 + roles/Controller.yaml | 3 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 3 + roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 3 + roles/HciCephAll.yaml | 6 +- roles/HciCephFile.yaml | 3 + roles/HciCephMon.yaml | 3 + roles/HciCephObject.yaml | 3 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 3 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 2 + roles/OpenShiftAllInOne.yaml | 1 + roles/OpenShiftInfra.yaml | 1 + roles/OpenShiftMaster.yaml | 1 + roles/OpenShiftWorker.yaml | 1 + roles/README.rst | 3 + roles/Standalone.yaml | 13 + roles/Telemetry.yaml | 1 + roles/Undercloud.yaml | 2 +- roles/UndercloudMinion.yaml | 30 ++ roles_data.yaml | 14 + roles_data_undercloud.yaml | 2 +- sample-env-generator/networking.yaml | 32 -- sample-env-generator/ssl.yaml | 4 +- sample-env-generator/standalone.yaml | 5 +- sample-env-generator/undercloud-minion.yaml | 272 ++++++++++ .../instanceha => scripts}/check-run-nova-compute | 2 +- scripts/hosts-config.sh | 2 +- setup.cfg | 2 +- tools/process-templates.py | 4 + tools/yaml-validate.py | 48 +- tox.ini | 2 +- validation-scripts/all-nodes.sh | 12 +- zuul.d/layout.yaml | 38 +- 448 files changed, 5074 insertions(+), 5383 deletions(-)

1 0

paunch 5.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are thrilled to announce the release of: paunch 5.1.0: Utility to launch and manage containers using YAML based configuration data This release is part of the train release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.0.0..5.1.0 ------------------------------ 6e2ef79 Reduce the usage of "podman inspect" command 277eb72 runner: implement container_exist 4346861 runner: refactor image_exist a304153 Quote the health check command argument during a debug with print-cmd. d1eef29 Use k8s-file log driver with podman 87ab8dc Add upper constraints for testing a809d78 Revert "docker/compose: quote health-cmd" fe4d2ff Remove scenario008 jobs 74679ac Replace git.openstack.org URLs with opendev.org URLs Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- paunch/__init__.py | 12 +++++++++ paunch/builder/base.py | 13 ++++++--- paunch/builder/compose1.py | 3 ++- paunch/builder/podman.py | 2 +- paunch/runner.py | 51 ++++++++++++++++++++++------------- tox.ini | 3 ++- zuul.d/layout.yaml | 2 -- 10 files changed, 73 insertions(+), 30 deletions(-)

1 0

os-refresh-config 10.3.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are excited to announce the release of: os-refresh-config 10.3.0: Refresh system configuration This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 10.2.0..10.3.0 ------------------------------------------- 3c2edd5 Replace git.openstack.org URLs with opendev.org URLs 39c1df6 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- tox.ini | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

puppet-tripleo 11.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are psyched to announce the release of: puppet-tripleo 11.1.0: Puppet module for OpenStack TripleO This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * Added new parameter 'mpm_module' for the base Apache profile to configure the used MPM module. Defaults to 'prefork', which is also the default value for the config files installed with the package. * Two custom per-service hiera keys are added tripleo::haproxy::<service>::internal_bind_options and tripleo::haproxy::<service>::public_bind_options. They control additional custom options that can be added to the bind line of a specific service configuration in haproxy. One use case is to force older TLS versions for internal APIs that end up pointing to devices that do not support the latest TLS standard. They accept a single string or an array of strings. * Adds profile for rsyslogd composable service which aims to replace fluentd with the same behaviour. This means that rsyslog will be tailing OpenStack log files and forwarding it to central log collector (ELK) * Added TLS support for ELasticsearch output plugin in rsyslog service. Known Issues ************ * Allow a hiera key to add an additional rabbitmq policy in the resource agend. Deprecation Notes ***************** * The tuned puppet manifest for *tuned* was removed. The heat template invoking this manifest has been converted to Ansible. Bug Fixes ********* * The old DEFAULT/dhcp_domain setting was moved to api/dhcp_domain. nova::network::neutron::dhcp_domain will be removed later in the cycle. We need include nova::metadata which sets the new [api]/dhcp_domain as this is used by the virt driver to generate the config drive. Other Notes *********** * Add dateext and related paramters for containerized logrotate service to find easily when logfiles were rotated. Changes in puppet-tripleo 11.0.0..11.1.0 ---------------------------------------- 5c0380e6 Bump metadata for Train Milestone 2 e1cc8d0b Add tcp-check connect port line to haproxy redis stanza 6fb9d8e6 Allow to configure Apache MPM module 6e267158 Cleanup uuid == docker 5c10f331 Close OVN VIP race by adding an ordering constraint 5061ed8b Support TLS deployments with KernelDisableIPv6 enabled 1eafeb67 Add dateext and related parameters for logrotate 3273d291 Include nova::metadata to compute profile 7970733c Replace hiera('service_names') by hiera('enabled_services') f8eb9096 Remove unnecessary logic bcb17115 Add TLS support for rsyslog 03dd75eb Force to use markdown to prevent pypi issue bac59f43 Fix rabbitmq staged upgrade 77ffbe05 Fix amphora provider driver description 04c6f343 Remove tuned puppet manifest 392eacb0 Force --hostonly when regenerating the initramfs d4bd49ec Patch fluentd module for unit tests until code lands 31e5cc36 Fix bootstrap node for nova conductor 914cf1f1 Allow enabling custom backends with manila 526d040c Quote the hiera dot notation e9484ac7 Do not invoke host config in agent config 610c8d8d RabbitMQ: always allow promotion on HA queue during failover e9d74005 Remove scenario008 jobs 42f07b25 Allow overriding pacemaker_node_ips for staged upgrade ff13fa13 Base profile for rsyslogd becc4245 Explicitly disable all MySQL/MariaDB query_cache use e452c3d5 Introduce tripleo::config 08630540 Add region support for instance HA d585e8a1 Don't require memcached_node_ips when deploying keystone 8d2c3a0e IHA robustness improvements d319662c Allow custom per-service bind_options for haproxy b0515a89 add glue for nova serialproxy support Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 10 +- manifests/config.pp | 44 ++++++++ manifests/fencing.pp | 2 +- manifests/firewall.pp | 2 +- manifests/firewall/service_rules.pp | 2 +- manifests/haproxy.pp | 4 +- manifests/haproxy/endpoint.pp | 16 ++- manifests/haproxy/horizon_endpoint.pp | 14 +-- manifests/haproxy/service_endpoints.pp | 4 +- manifests/profile/base/apache.pp | 11 +- manifests/profile/base/database/mysql.pp | 2 + manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/kernel.pp | 2 +- manifests/profile/base/keystone.pp | 2 +- manifests/profile/base/logging/fluentd.pp | 2 +- manifests/profile/base/logging/logrotate.pp | 15 +++ manifests/profile/base/logging/rsyslog.pp | 120 +++++++++++++++++++++ .../profile/base/logging/rsyslog/file_input.pp | 37 +++++++ manifests/profile/base/manila/share.pp | 40 +++---- manifests/profile/base/metrics/collectd.pp | 2 +- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 4 +- manifests/profile/base/neutron/sriov.pp | 1 - manifests/profile/base/nova/compute.pp | 5 + manifests/profile/base/nova/conductor.pp | 2 +- manifests/profile/base/nova/libvirt.pp | 2 +- manifests/profile/base/nova/migration/target.pp | 4 +- manifests/profile/base/nova/serialproxy.pp | 33 ++++++ manifests/profile/base/octavia/api.pp | 2 +- manifests/profile/base/pacemaker.pp | 4 +- manifests/profile/base/pacemaker/instance_ha.pp | 9 +- manifests/profile/base/tuned.pp | 41 ------- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 12 ++- manifests/profile/pacemaker/rabbitmq_bundle.pp | 45 +++++--- manifests/tls_proxy.pp | 9 +- metadata.json | 2 +- ...xt-and-related-parameters-58dd288c74b818f7.yaml | 5 + .../notes/apache_mpm_tuning-deafdf6610ce57b2.yaml | 6 ++ .../haproxy-custom-bind-opts-09226d990c62063d.yaml | 10 ++ ..._compute_include_metadata-21757b44cb976e5d.yaml | 7 ++ .../rabbitmq_extra_policies-69cbc0a4afeac963.yaml | 5 + releasenotes/notes/rsyslog-205c11903ed92bdf.yaml | 5 + .../notes/rsyslog-tls-dfa676eda2ec646f.yaml | 3 + .../notes/tuned-removed-ab68a7109a1e7403.yaml | 4 + setup.cfg | 1 + spec/classes/tripleo_config_spec.rb | 45 ++++++++ spec/classes/tripleo_profile_base_apache_spec.rb | 9 ++ ...pleo_profile_base_database_mysql_client_spec.rb | 12 +-- .../tripleo_profile_base_logging_rsyslog_spec.rb | 105 ++++++++++++++++++ .../tripleo_profile_base_octavia_api_spec.rb | 2 +- .../classes/tripleo_profile_base_pacemaker_spec.rb | 2 +- spec/classes/tripleo_profile_base_tuned_spec.rb | 65 ----------- ...profile_base_logging_rsyslog_file_input_spec.rb | 60 +++++++++++ spec/fixtures/hieradata/step2.yaml | 10 ++ spec/fixtures/hieradata/step4.yaml | 2 +- templates/logrotate/containers_logrotate.conf.erb | 9 ++ zuul.d/layout.yaml | 8 -- 57 files changed, 690 insertions(+), 195 deletions(-)

1 0

os-collect-config 10.4.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We contentedly announce the release of: os-collect-config 10.4.0: Collect and cache metadata, run hooks on changes. This release is part of the train release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 10.3.0..10.4.0 ------------------------------------------- 8cda3f6 Add Python 3 Train unit tests fb53934 Replace git.openstack.org URLs with opendev.org URLs 45d7c54 OpenDev Migration Patch 48f03e5 Change python3.5 job to python3.7 job on Stein+ Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- setup.cfg | 17 +++++++++++------ tox.ini | 4 ++-- zuul.d/layout.yaml | 3 +-- 5 files changed, 16 insertions(+), 12 deletions(-)

1 0

tripleo-common 11.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We high-spiritedly announce the release of: tripleo-common 11.1.0: A common library for TripleO workflows. This release is part of the train release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * The *bindep.txt* file located in the project root contains all of the basic required packages needed when running local tests. * Developers can now use bindep to list system requirements. The bindep command will load the list of packages for the given platform using the *bindep.txt* file. * Bindep can now be leveraged via tox using the environment **bindep**. This tox environment will use bindep via the *bindep- install* script to install any missing packages on the local system which are required for development purposes. Bug Fixes ********* * The verbosity of the config-download ansible tasks now defaults to 0 instead of 1. This makes the tasks not verbose by default. The verbosity specified on the command line with the deployment command is now honored and can be used to disable verbosity or increase the verbosity level as needed. * The passphrase for config option 'server_certs_key_passphrase', is used as a Fernet key in Octavia and thus must be 32 bytes long. TripleO will now auto-generate 32 bytes long passphrase for OctaviaServerCertsKeyPassphrase. Changes in tripleo-common 11.0.0..11.1.0 ---------------------------------------- b40e95ec Set container=oci for our containers 33bd9240 Skip standalone deploys if tox jobs fail fd22cde2 Update kolla builder tests for new service path cbd8d715 Add get_key tasks for package update 9bcfc867 Set scenario009 job voting to false 0e08cc74 Rsyslog image pull ab0c5eb6 Make a more ansible-ish test on hieradata_files list content 0be1be77 Ensure we're raising proper exceptions 0faa6328 Correct how we fetch External and InternalApi networks name b58b71ec Remove the tripleo.plan_management.v1.list_sample_plans workflow 70b1daa4 Create <service> _cell_node_names if nova_additional_cell 3b15a4dc Remove pika from container builds cc4a3447 Make instances name/hostname optional 8ab13dd5 Also write NetworkConfig to role dir 3c4cb58d Added support of overcloud os_cloud 460b99ae Image Uploader - get_undercloud_registry IPv6 50e464c6 Remove tripleo-common/playbooks 59f82317 Add fqdn and cloud_domain templates to tripleo-hieradata b29b44c3 Add net_ip_map template to tripleo-hieradata 4596f0f3 Exit 1 when container image prepare fails aa8132b7 Processing available Ansible variables as 'parameters' not as 'metadata' 56921742 Get all the available Ansible variables for each validations 7d0da3b4 Stop writing allnodes_vars in inventory d60eb1b4 Python 3 fixes for tripleo-hieradata role 29ef322d Remove the tripleo.plan_management.v1.publish_ui_logs_to_swiftworkflow a2fef2af Remove the tripleo.plan_management.v1.download_logs workflow de2ab558 Ensure that OctaviaServerCertsKeyPassphrase is 32-byte long 1ebdaa70 Add sudo commands for validations tempfile created in Python3 ecd37380 Handle empty NetworkConfig 6d152eaf Linting hardening via pre-commit 1111d4ad Adds tox environment to test requirements conflicts b485aa18 Remove roles that have been imported into tripleo-ansible 8fb1b9ed Add new images for ceph dashboard composable service. 67440277 Check third-party container image metadata. 372be646 Don't calculate vips for some services a0100c43 Add vip_data template to tripleo-hieradata 008af910 Add all_nodes template to tripleo-hieradata. 73f27fe3 remove plotnetcfg from overcloud image yaml ca5f7f8f Fix regression in UpdateParametersAction 87c1cac5 trigger image-build off of image-yaml changes c94ee2bb Add template mode to tripleo-hieradata 06b38c4f Install dumb-init rpm 557fcf67 Minor tox molecule fixes 51d723a9 Handle registries with incorrect certs correctly 94c0c092 tripleo-hieradata: add hieradata_files param 7e8c221f Adds job that runs molecule tests afcd0890 tripleo-hieradata/per-host: use inventory_hostname 2d541ba5 Add tripleo-ansible directory namespace a1495d5f Fix ansible-lint errors 0f8d7630 Don't validate stack in task for backup ceph fetch dir 9e26f857 tripleo-hieradata: introduce hieradata_per_host 0c2efab5 Populate Ansible Host variables with AnsibleHostVarsMap 6cfc2046 Fix tripleo-upgrade-hiera key deleting 26a3d7e6 Fix bashate and flake8 errors 6942ac00 Update the Undercloud Services list in the inventory. 85b7a4ee Render NetworkConfig into config-download dir 70a9cab2 Preserve file extension in config-download 45998199 Remove scenario008 jobs 4071b56b Set resource_registry deployed-server port 8f2e1064 Increase timeout of temp swift URLs from 1 to 4 hours 067473ca Fix bare variable usage in ansible 3f486307 Add ceph-ansible support to tripleo-ansible-inventory 8862ea83 Add bindep support to tox 4132ee40 Add general LOG in kolla_builder.py. 82450668 Rework create_or_find_kernel_and_ramdisk to match the current reality 709f3b4d Convert Docker*Image parameters c58d7cda Transfer all images in a manifest list 8cf8db2f Replace git.openstack.org URLs with opendev.org URLs 12a415a8 utils/config: generate param_config.json if param_config exists 86bb40cf Don't force verbosity of 1 for config-download 5a11fb16 Remove ProcessTemplatesAction as base class 8519dccc Update programming language mentioned in setup.cfg Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 11 + .pre-commit-config.yaml | 36 ++ README.rst | 4 +- ansible_plugins/callback/json_error.py | 62 --- bindep.txt | 35 ++ .../container_image_prepare_defaults.yaml | 16 + container-images/overcloud_containers.yaml | 10 +- container-images/overcloud_containers.yaml.j2 | 421 +++++++++++---------- .../tripleo_kolla_template_overrides.j2 | 13 +- healthcheck/cron | 8 +- healthcheck/opendaylight-api | 2 +- healthcheck/zaqar-socket | 8 +- image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute.yaml | 1 - lower-constraints.txt | 3 - playbooks/octavia-files.yaml | 95 ----- playbooks/roles/common/defaults/main.yml | 19 - .../octavia-controller-config/handlers/main.yml | 5 - .../roles/octavia-controller-config/meta/main.yml | 2 - .../tasks/certificate.yml | 22 -- .../roles/octavia-controller-config/tasks/main.yml | 19 - .../tasks/netinterface.yml | 20 - .../octavia-controller-config/tasks/netport.yml | 57 --- .../octavia-controller-config/tasks/octavia.yml | 55 --- .../templates/ifcfg-br-int.j2 | 6 - .../octavia-controller-config/templates/ifcfg.j2 | 19 - .../templates/manager-post-deploy.conf.j2 | 2 - .../defaults/main.yml | 1 - .../octavia-controller-post-config/meta/main.yml | 2 - .../octavia-controller-post-config/tasks/main.yml | 46 --- .../roles/octavia-overcloud-config/meta/main.yml | 2 - .../octavia-overcloud-config/tasks/certs_gen.yml | 72 ---- .../roles/octavia-overcloud-config/tasks/main.yml | 6 - .../octavia-overcloud-config/tasks/network.yml | 82 ---- .../octavia-overcloud-config/tasks/quotas.yml | 4 - playbooks/roles/octavia-undercloud/meta/main.yml | 2 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 118 ------ playbooks/roles/octavia-undercloud/tasks/main.yml | 63 --- playbooks/rotate-keys.yaml | 72 ---- playbooks/swift_ring_rebalance.yaml | 121 ------ .../notes/bindep-tox-606dbe4ddf68f7a6.yaml | 12 + ...config-download-verbosity-ab2e89e169c208a7.yaml | 7 + ...fix-api-network-rendering-5a65009051a0f464.yaml | 2 +- ...rver_certs_key_passphrase-60cba4653109992c.yaml | 5 + ...date-programming-language-54ded15322426458.yaml | 5 + releasenotes/source/conf.py | 113 +++--- roles/tripleo-bootstrap/README.md | 39 -- roles/tripleo-bootstrap/defaults/main.yml | 13 - roles/tripleo-bootstrap/handlers/main.yml | 1 - roles/tripleo-bootstrap/meta/main.yml | 1 - roles/tripleo-bootstrap/tasks/main.yml | 94 ----- roles/tripleo-container-rm/README.md | 34 -- roles/tripleo-container-rm/defaults/main.yaml | 2 - roles/tripleo-container-rm/tasks/docker.yaml | 21 - roles/tripleo-container-rm/tasks/main.yaml | 5 - roles/tripleo-container-rm/tasks/podman.yaml | 41 -- roles/tripleo-container-tag/README.md | 42 -- roles/tripleo-container-tag/defaults/main.yaml | 3 - roles/tripleo-container-tag/tasks/main.yaml | 7 - roles/tripleo-create-admin/README.md | 57 --- roles/tripleo-create-admin/defaults/main.yml | 2 - .../tripleo-create-admin/tasks/authorize_user.yml | 5 - roles/tripleo-create-admin/tasks/create_user.yml | 38 -- roles/tripleo-create-admin/tasks/main.yml | 2 - roles/tripleo-docker-rm/README.md | 42 -- roles/tripleo-docker-rm/defaults/main.yaml | 2 - roles/tripleo-docker-rm/tasks/main.yaml | 22 -- roles/tripleo-hieradata/README.md | 2 + roles/tripleo-hieradata/defaults/main.yaml | 11 +- roles/tripleo-hieradata/tasks/all_hosts.yaml | 8 + roles/tripleo-hieradata/tasks/hieradata_vars.yaml | 5 + roles/tripleo-hieradata/tasks/main.yaml | 60 ++- roles/tripleo-hieradata/tasks/per_host.yaml | 9 + roles/tripleo-hieradata/templates/all_nodes.j2 | 56 +++ .../tripleo-hieradata/templates/bootstrap_node.j2 | 3 + roles/tripleo-hieradata/templates/cloud_domain.j2 | 3 + roles/tripleo-hieradata/templates/fqdn.j2 | 11 + roles/tripleo-hieradata/templates/net_ip_map.j2 | 18 + roles/tripleo-hieradata/templates/vip_data.j2 | 54 +++ roles/tripleo-hieradata/test-playbook.yaml | 15 +- roles/tripleo-image-serve/README.md | 34 -- roles/tripleo-image-serve/defaults/main.yml | 5 - roles/tripleo-image-serve/handlers/main.yml | 16 - roles/tripleo-image-serve/tasks/main.yml | 42 -- .../templates/image-serve.conf.j2 | 29 -- roles/tripleo-module-load/defaults/main.yaml | 7 - roles/tripleo-module-load/tasks/main.yaml | 52 --- .../templates/module-load.conf.j2 | 2 - roles/tripleo-persist/tasks/cleanup.yml | 4 +- roles/tripleo-persist/tasks/persist.yml | 14 +- roles/tripleo-persist/tasks/restore.yml | 8 +- roles/tripleo-ssh-known-hosts/README.md | 41 -- roles/tripleo-ssh-known-hosts/defaults/main.yml | 3 - roles/tripleo-ssh-known-hosts/handlers/main.yml | 1 - roles/tripleo-ssh-known-hosts/meta/main.yml | 1 - roles/tripleo-ssh-known-hosts/tasks/main.yml | 30 -- roles/tripleo-transfer/README.md | 57 --- roles/tripleo-transfer/defaults/main.yml | 5 - roles/tripleo-transfer/tasks/cleanup.yml | 6 - roles/tripleo-transfer/tasks/main.yml | 77 ---- roles/tripleo-transfer/test-playbook.yml | 11 - .../tasks/create-tripleo-upgrade-file.yml | 10 +- roles/tripleo-upgrade-hiera/tasks/remove-all.yml | 2 +- roles/tripleo-upgrade-hiera/tasks/remove.yml | 14 +- roles/tripleo-upgrade-hiera/tasks/set.yml | 2 +- scripts/bindep-install | 45 +++ scripts/pull-puppet-modules | 2 +- scripts/tripleo-build-images | 14 +- scripts/tripleo-config-download | 5 +- scripts/tripleo-container-image-prepare | 2 + scripts/tripleo-deploy-openshift | 118 +++--- setup.cfg | 21 +- sudoers | 6 +- test-requirements.txt | 6 +- tox.ini | 99 +++-- tripleo_common/actions/ansible.py | 10 + tripleo_common/actions/baremetal_deploy.py | 61 ++- tripleo_common/actions/config.py | 10 +- tripleo_common/actions/deployment.py | 50 ++- tripleo_common/actions/package_update.py | 11 +- tripleo_common/actions/parameters.py | 31 +- tripleo_common/actions/scale.py | 11 +- tripleo_common/actions/templates.py | 2 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 30 +- tripleo_common/image/image_export.py | 39 +- tripleo_common/image/image_uploader.py | 195 ++++++---- tripleo_common/image/kolla_builder.py | 14 +- tripleo_common/inventory.py | 34 +- tripleo_common/templates/deployments.yaml | 24 +- tripleo_common/templates/host_var_server.j2 | 8 +- .../utils/data/host_vars/overcloud-controller-0 | 3 + .../utils/data/host_vars/overcloud-novacompute-0 | 2 + .../utils/data/host_vars/overcloud-novacompute-1 | 2 + .../utils/data/host_vars/overcloud-novacompute-2 | 2 + tripleo_common/utils/clouds_yaml.py | 74 ++++ tripleo_common/utils/common.py | 27 ++ tripleo_common/utils/config.py | 68 +++- tripleo_common/utils/glance.py | 48 +-- tripleo_common/utils/nodes.py | 18 +- tripleo_common/utils/overcloudrc.py | 18 +- tripleo_common/utils/passwords.py | 2 + tripleo_common/utils/process.py | 4 +- tripleo_common/utils/validations.py | 11 +- workbooks/deployment.yaml | 38 +- workbooks/fernet-key-rotate.yaml | 2 +- workbooks/package_update.yaml | 25 ++ workbooks/plan_management.yaml | 227 +---------- workbooks/swift_ring_rebalance.yaml | 2 +- zuul.d/layout.yaml | 41 +- 169 files changed, 2200 insertions(+), 2896 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 698e4363..aec5dbe7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,2 +6,0 @@ openstackdocstheme>=1.18.1 # Apache-2.0 -hacking>=1.1.0,<1.2.0 # Apache-2.0 - @@ -12 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2; python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2; python_version>='3.4' # BSD @@ -20 +18,0 @@ urllib3>=1.21.1 # MIT -bashate>=0.2 # Apache-2.0

1 0

python-tripleoclient 12.1.0 (train)
by no-reply＠openstack.org 27 Jul '19

27 Jul '19

We are chuffed to announce the release of: python-tripleoclient 12.1.0: TripleO client This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * The validations can now be performed by calling Mistral or by calling "ansible-playbook". By default, the latter is used. The new "--use-mistral" option allows to execute either groups or a set of specific validations by calling Mistral instead of using the default mechanism, ie. "ansible-playbook". * OpenStack overcloud services cli and api is currently accessed through overcloudrc and clouds.yaml. This adds support for overcloud clouds.yaml file generation after deployment. The file can be found at ~/.config/openstack/clouds.yaml and /etc/openstack/clouds.yaml. * Undercloud "ctlplane" subnets can now have individual nameservers (per-subnet option "dns_nameservers"). If no subnet specific nameservers are specified for a subnet it will fall back to "undercloud_nameservers". * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image delete* allows you to maintain those images, and remove those that are no longer required. * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image list* gives you insight into your images. * With the new podman container setup comes an Apache served local image registry. *openstack tripleo container image show* will perform an inspection on a given image, and present the details. * Adds *openstack undercloud minion install* and *openstack undercloud minion upgrade* to install or upgrade an undercloud minion that can be used to scale heat-engine and ironic-conductor horizontally. Upgrade Notes ************* * The *openstack undercloud deploy* command has been removed. Use *openstack tripleo deploy* instead. Other Notes *********** * When running with --config-download-only, the enable ssh admin will now be skipped. Skipping the ssh admin workflow saves time when trying to do the config download workflow only. If the ssh admin workflow needs to be rerun, the "openstack overcloud admin" command can be used. Changes in python-tripleoclient 12.0.0..12.1.0 ---------------------------------------------- 4fc5e742 Implement tripleo container image show command e0d35b30 Renaming 'Metadata' column by 'Parameters' when listing validations 0a8fc376 Added for support for generating overcloud clouds.yaml 317f3cff Ensure files are closed, ensure no ResourceWarning on console f10fa0b3 Allow running validations by group using Ansible by default 27e1e4f8 Allow running validations by name using Ansible by default. 9de3452c Add log_path_dir parameter 978e16ef Implement tripleo container image delete command a7dd7a6b Validate all or no subnets use dns_nameservers 1acbef8a Improve validations run outputs through the CLI bd354f1f Ensure files exist before building/uploading plan e1a051d6 Send terminal erase sequence on tripleo deploy f1450b3a Don't pass the DNSServers param in undercloud env f05cbe32 mock kernel_arch() in tests. 831b1e7b Fix minion config test ee16c094 Allow per-subnet DNSNameServers for ctlplane network e096cca5 Remove undercloud deploy a37cd7c9 Allow deeper levels of nesting for pdf builds 96d39dc1 Improve handling of empty resource_registry 8de77cbe Add minion installation 5e66a91e Set IPv6 params True if undercloud local_ip is IPv6 c880c8fd Bump keystone middleware version to 4.18 81d26455 Fixup sphinx requirements 06fddc55 Use wait for stack ready from utils for tripleo deploy cb42cfe3 Retry heat stack polling on gateway problems d26d7d77 Drop config-download-environment.yaml from deployed_server_env 7ad1b812 nova-less-deploy: stop using glance for ironic-python-agent images 5249fbb2 Allow run_update_ansible_action run with Mistral or Ansible a715d271 Remove scenario008 jobs 73bc6f94 Improve yaml output of "openstack overcloud node provision" 50744f7c Wire in convert_docker_params 6aa19023 doc/requirements: fix sphinx requirement lines 7bd6a520 Don't look for execution in payload 8d84884f Add undercloud.conf enable_nova option d5126542 Skip ssh admin workflow with --config-download-only 8a3dc512 Change source for upper constraints 78b7a9d8 Update sphinx requirements for python 3.x 611b286c Implement tripleo container image list command de4bf54a Modify the constraints url in tox. Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + config-generator/minion.conf | 3 + lower-constraints.txt | 5 +- ...-using-Ansible-by-default-2dac0dfd9c7a4690.yaml | 8 + ...rcloud-cloud-yaml-support-fae7585c46eda8e8.yaml | 8 + .../per-subnet-nameservers-d53b5cdc6d099a6a.yaml | 6 + .../remove-undercloud-deploy-3cbbfe5f159cc71d.yaml | 5 + ...-for-config-download-only-442255cc3ac73534.yaml | 6 + ...eo-container-image-delete-050ab75bb6e7187d.yaml | 9 + ...pleo-container-image-list-97d38a0e8a899d89.yaml | 8 + ...pleo-container-image-show-af7453683ad74182.yaml | 8 + ...undercloud-minion-install-6b369d8f5f3d6a89.yaml | 6 + requirements.txt | 2 +- setup.cfg | 7 +- tox.ini | 7 +- tripleoclient/command.py | 4 + tripleoclient/config/minion.py | 159 ++++++++ tripleoclient/config/standalone.py | 14 +- tripleoclient/config/undercloud.py | 16 +- tripleoclient/constants.py | 9 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 17 +- .../test_overcloud_external_update.py | 4 +- .../test_overcloud_external_upgrade.py | 4 +- .../test_overcloud_ffwd_upgrade.py | 4 +- .../v1/overcloud_image/test_overcloud_image.py | 158 ++------ .../v1/overcloud_update/test_overcloud_update.py | 4 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 12 +- tripleoclient/utils.py | 300 ++++++++++++--- tripleoclient/v1/container_image.py | 173 +++++++++ tripleoclient/v1/minion_config.py | 405 +++++++++++++++++++++ tripleoclient/v1/mock_clouds_yaml.py | 3 + tripleoclient/v1/overcloud_deploy.py | 52 ++- tripleoclient/v1/overcloud_external_update.py | 2 +- tripleoclient/v1/overcloud_external_upgrade.py | 2 +- tripleoclient/v1/overcloud_ffwd_upgrade.py | 4 +- tripleoclient/v1/overcloud_image.py | 38 +- tripleoclient/v1/overcloud_node.py | 42 ++- tripleoclient/v1/overcloud_update.py | 2 +- tripleoclient/v1/overcloud_upgrade.py | 2 +- tripleoclient/v1/tripleo_deploy.py | 74 +++- tripleoclient/v1/tripleo_validator.py | 99 +++-- tripleoclient/v1/undercloud_config.py | 24 +- tripleoclient/v1/undercloud_deploy.py | 35 -- tripleoclient/v1/undercloud_minion.py | 156 ++++++++ tripleoclient/v1/undercloud_preflight.py | 31 ++ tripleoclient/workflows/deployment.py | 22 ++ tripleoclient/workflows/validations.py | 15 +- zuul.d/layout.yaml | 2 - 63 files changed, 2479 insertions(+), 512 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 51e2d413..3f5c9329 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=10.6.1 # Apache-2.0 +tripleo-common>=10.7.0 # Apache-2.0

1 0