July 2019 - Release-announce - lists.openstack.org

nova 17.0.11 (queens)
by no-reply＠openstack.org 11 Jul '19

11 Jul '19

We are ecstatic to announce the release of: nova 17.0.11: Cloud computing fabric controller This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 17.0.11 ^^^^^^^ Upgrade Notes ************* * Live migration of instances with NUMA topologies is now disabled by default when using the libvirt driver. This includes live migration of instances with CPU pinning or hugepages. CPU pinning and huge page information for such instances is not currently re- calculated, as noted in bug #1289064. This means that if instances were already present on the destination host, the migrated instance could be placed on the same dedicated cores as these instances or use hugepages allocated for another instance. Alternately, if the host platforms were not homogeneous, the instance could be assigned to non-existent cores or be inadvertently split across host NUMA nodes. The long term solution to these issues is to recalculate the XML on the destination node. When this work is completed, the restriction on live migration with NUMA topologies will be lifted. For operators that are aware of the issues and are able to manually work around them, the "[workarounds] enable_numa_live_migration" option can be used to allow the broken behavior. For more information, refer to bug #1289064. (https://bugs.launchpad.net/nova/+bug/1289064) (https://blueprints.launchpad.net/nova/+spec/numa-aware-live- migration) Bug Fixes ********* * The os-volume_attachments update API, commonly referred to as the swap volume API will now return a "400" (BadRequest) error when attempting to swap from a multi attached volume with more than one active read/write attachment resolving bug #1775418. (https://developer.openstack.org/api-ref/compute/?expanded=update-a -volume-attachment-detail) (https://launchpad.net/bugs/1775418) Changes in nova 17.0.10..17.0.11 -------------------------------- 9cbd2aedde fix up numa-topology live migration hypervisor check 9999bce00f Fail to live migration if instance has a NUMA topology ab445a027a Allow driver to properly unplug VIFs on destination on confirm resize 8519b1ce6d Move get_pci_mapping_for_migration to MigrationContext d3bdeb2615 libvirt: Do not reraise DiskNotFound exceptions during resize 2009859b52 Include all network devices in nova diagnostics 20b90f2e26 Workaround missing RequestSpec.instance_group.uuid 581df2c986 Add regression recreate test for bug 1830747 95a3e0cf6a Restore connection_info after live migration rollback 88fd40fe5d DRY up test_rollback_live_migration_set_migration_status 58a140487c Block swap volume on volumes with >1 rw attachment 55deddf65d Fix live-migration when glance image deleted 944b24f462 Add functional confirm_migration_error test 5600309a1f [stable-only] Delete allocations even if _confirm_resize raises (part 2) b8435d6001 Delete allocations even if _confirm_resize raises 0cad3089d3 Stop logging traceback when skipping quiesce f9c2503609 Fix retry of instance_update_and_get_original 89063ecb61 Teardown networking when rolling back live migration even if shared disk 01141392db Use migration_status during volume migrating and retyping 99a63a6633 libvirt: Always disconnect volumes after libvirtError exceptions 63b45a87b8 libvirt: Stop ignoring unknown libvirtError exceptions during volume attach ba3ad2d65a Fix {min|max}_version in ironic Adapter setup 22cd12dbb7 Create request spec, build request and mappings in one transaction 5b0adaa0ca xenapi/agent: Change openssl error handling ec43a1348d libvirt: Avoid using os-brick encryptors when device_path isn't provided 899e881b18 Fix nova-grenade-live-migration run book for opendev migration d4dbbb645a Fix regression in glance client call 1cee746085 OpenDev Migration Patch 76418a32cb Move legacy-grenade-dsvm-neutron-multinode-live-migration in-tree 5d5e7be8cb Fix legacy-grenade-dsvm-neutron-multinode-live-migration c8ad9f4e19 libvirt: set device address tag only if setting disk unit ee52fb12bb libvirt: disconnect volume when encryption fails 5433dc6a75 Add missing libvirt exception during device detach c6a42cd3b3 Error out migration when confirm_resize fails f1554d1b52 prevent common kwargs from glance client failure dba9b722af Define irrelevant-files for tempest-full-py3 job 1b6f48354b Delete instance_id_mappings record in instance_destroy 8f1773a7af Do not persist RequestSpec.ignore_hosts 9fd4082d7c Add functional regression test for bug 1669054 99cbbcfd61 Update instance.availability_zone on revertResize 1b15a342e3 Add functional recreate test for bug 1819963 50a0c6a4b9 [Stable Only] hardware: Handle races during pinning ddc2c9118a Fix incomplete instance data returned after build failure ee07c1c67d Update instance.availability_zone during live migration 36d93675d9 Update resources once in update_available_resource 705284e18c Don't persist zero allocation ratios in ResourceTracker 7a3b072442 Document unset/reset wrinkle for *_allocation_ratio options 1265e9e8e2 Replace openstack.org git:// URLs with https:// 4a7575bf14 Ignore VolumeAttachmentNotFound exception in compute.manager Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 74 +++++-- api-ref/source/os-volume-attachments.inc | 3 + nova/api/openstack/compute/migrate_server.py | 6 +- nova/api/openstack/compute/volumes.py | 3 +- nova/compute/api.py | 108 ++++++++- nova/compute/manager.py | 246 +++++++++++++++------ nova/compute/resource_tracker.py | 32 ++- nova/conductor/manager.py | 22 +- nova/conductor/tasks/live_migrate.py | 34 +++ nova/conf/compute.py | 12 +- nova/conf/workarounds.py | 26 +++ nova/db/sqlalchemy/api.py | 23 +- nova/exception.py | 5 + nova/image/glance.py | 45 ++-- nova/network/neutronv2/api.py | 47 +--- nova/objects/migration_context.py | 32 +++ nova/objects/request_spec.py | 22 +- .../functional/regressions/test_bug_1669054.py | 84 +++++++ .../functional/regressions/test_bug_1830747.py | 131 +++++++++++ .../openstack/compute/admin_only_action_common.py | 37 ++-- .../api/openstack/compute/test_migrate_server.py | 8 +- .../unit/api/openstack/compute/test_volumes.py | 76 +++++++ .../unit/conductor/tasks/test_live_migrate.py | 54 ++++- nova/virt/fake.py | 6 +- nova/virt/hardware.py | 12 + nova/virt/ironic/client_wrapper.py | 8 +- nova/virt/libvirt/driver.py | 94 +++++--- nova/virt/libvirt/guest.py | 3 +- nova/virt/libvirt/imagebackend.py | 14 +- nova/virt/libvirt/volume/volume.py | 17 +- nova/virt/xenapi/agent.py | 18 +- nova/volume/cinder.py | 3 + playbooks/legacy/nova-cells-v1/run.yaml | 6 +- .../legacy/nova-grenade-live-migration/post.yaml | 15 ++ .../legacy/nova-grenade-live-migration/run.yaml | 58 +++++ playbooks/legacy/nova-live-migration/run.yaml | 6 +- playbooks/legacy/nova-lvm/run.yaml | 6 +- playbooks/legacy/nova-multiattach/run.yaml | 6 +- playbooks/legacy/nova-next/run.yaml | 6 +- .../notes/bug-1775418-754fc50261f5d7c3.yaml | 10 + ...-live-migration-with-numa-bc710a1bcde25957.yaml | 25 +++ 70 files changed, 2605 insertions(+), 508 deletions(-)

1 0

os-testr 1.1.0
by no-reply＠openstack.org 11 Jul '19

11 Jul '19

We joyfully announce the release of: os-testr 1.1.0: A testr wrapper to provide functionality for OpenStack projects The source is available from: https://opendev.org/openstack/os-testr Download the package from: https://pypi.org/project/os-testr For more details, please see below. 1.1.0 ^^^^^ Deprecation Notes * The "ostestr" command is now deprecated explicitly. We already switched to use "stestr" command instead. And we haven't maintained this command recently. For more information about stestr, see https://stestr.readthedocs.io/en/latest/ Changes in os-testr 1.0.0..1.1.0 -------------------------------- 414bbf6 Update hacking version ad00e6d Replace git.openstack.org URLs with opendev.org URLs a5bc990 Deprecate ostestr command 70f183c Fix warning message with double "to" 77002ea Dropping the py35 testing 5674bb0 OpenDev Migration Patch 595c06c Default concurrency to 0 to avoid TypeError in stestr a36d10a add python 3.7 unit test job bb4bfbf Removed older version of python3.4 from setup.cfg 59db2de Change openstack-dev to openstack-discuss 6a73644 Update the home-page URL ed3bc63 Use updated hacking url link dd00f4b add python 3.6 unit test job 1807cef switch documentation job to new PTI de316a6 import zuul job settings from project-config 9b412d7 fix tox python3 overrides ca7669b Trivial: Update pypi url to new url cc19ccf Updated from global requirements 2b3e2e8 Fix load command in pdb/no-discover path 3eba9cd Avoid tox_install.sh for constraints support 88bdf7d Remove useless links and indentations 96db910 Fix regex builder 22644f4 Updated from global requirements 3fd82f6 Updated from global requirements b6ac6ac Fix .testr.conf detection: test path follows discover Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 ++ CONTRIBUTING.rst | 6 +- HACKING.rst | 4 +- README.rst | 23 ++++- os_testr/ostestr.py | 63 +++++++----- os_testr/regex_builder.py | 68 +++++++------ os_testr/subunit2html.py | 22 ++--- ...deprecate-ostestr-command-3ac0bff93265fa09.yaml | 7 ++ releasenotes/source/conf.py | 96 ++++++++++++++++++ releasenotes/source/index.rst | 14 +++ releasenotes/source/unreleased.rst | 5 + requirements.txt | 4 +- setup.cfg | 7 +- test-requirements.txt | 8 +- tools/tox_install.sh | 30 ------ tox.ini | 35 +++++-- 26 files changed, 522 insertions(+), 227 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 95cd081..2b57d08 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7,2 @@ stestr>=1.0.0 # Apache-2.0 -python-subunit>=0.0.18 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +python-subunit>=1.0.0 # Apache-2.0/BSD +testtools>=2.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7e12060..01cca94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -8,3 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -13 +11 @@ ddt>=1.0.1 # MIT -six>=1.9.0 # MIT +six>=1.10.0 # MIT

1 0

ironic-inspector 9.1.0 (train)
by no-reply＠openstack.org 09 Jul '19

09 Jul '19

We are overjoyed to announce the release of: ironic-inspector 9.1.0: Hardware introspection for OpenStack Bare Metal This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Adds the capability for introspection data to be posted to the API when a baremetal node is in "active" or "rescue" states. This feature may be useful for data center operators who wish to update introspection data periodically. To enable this feature, set "[processing]permit_active_introspection" to "True". When this is set, the value of "[processing]power_off" is overridden for nodes in "active" or "rescue" states. * Adds support to enroll node with IPv6 BMC address. Introduces a configuration option "[discovery]enabled_bmc_address_version" to specify the order of preferred IP version of the BMC address. Upgrade Notes ************* * The deprecated options from the "ironic" section "os_region", "auth_strategy", "ironic_url", "os_service_type" and "os_endpoint_type" have been removed. Please use **keystoneauth** options instead. * The deprecation configuration options "os_service_type", "os_region" and "os_endpoint_type" from the "[swift]" section have been removed. Deprecation Notes ***************** * The configuration option "[swift]max_retries" is deprecated. It has been doing nothing for a few releases already. Bug Fixes ********* * No longer fails introspection if memory or CPU information is not provided in the inventory. These are no longer required for scheduling, introspection should not require them either. Changes in ironic-inspector 9.0.0..9.1.0 ---------------------------------------- 59a4c64 Move dbsync to the correct path 9d1c6a4 Use oslo_db.sqlalchemy.test_fixtures 46a90d6 Enable processing of active nodes a6509ba Revert "Lets temporarily disable broken templates so we can fix gate" da7d3bb Lets temporarily disable broken templates so we can fix gate f3fd8e9 Comment out race prone sqlite db model sync test b7bb387 add local bindep.txt 30a4e09 Adds bandit template and exclude some of tests 85a3186 Use openstacksdk for accessing Swift fcb0ca8 Use bmc ipv6 address while processing introspection data 40450dc Remove deprecated authentication options for accessing ironic 48d5d56 Document storage backends and migrating between them ca044c9 Remove deprecated options for accessing Swift 463d0a2 Stop failing on missing memory or CPU 686a64b Update Python 3 test runtimes for Train d571794 Simplify locking code f53cbe3 Remove pci_devices config option 52349c6 Incorporate bandit support in CI Diffstat (except docs and test files) ------------------------------------- bindep.txt | 6 + ironic_inspector/{ => cmd}/dbsync.py | 4 +- ironic_inspector/common/ironic.py | 65 ++-- ironic_inspector/common/swift.py | 42 +-- ironic_inspector/conf/discovery.py | 10 + ironic_inspector/conf/ironic.py | 35 -- ironic_inspector/conf/opts.py | 1 - ironic_inspector/conf/processing.py | 10 +- ironic_inspector/conf/swift.py | 22 +- ironic_inspector/introspect.py | 2 +- ironic_inspector/node_cache.py | 75 ++-- ironic_inspector/plugins/discovery.py | 13 +- ironic_inspector/plugins/pci_devices.py | 17 - ironic_inspector/plugins/standard.py | 32 +- ironic_inspector/process.py | 16 +- ironic_inspector/test/base.py | 4 +- ironic_inspector/test/functional.py | 2 +- ironic_inspector/test/unit/test_common_ironic.py | 20 +- ironic_inspector/test/unit/test_introspect.py | 12 +- ironic_inspector/test/unit/test_migrations.py | 100 ++---- ironic_inspector/test/unit/test_node_cache.py | 41 ++- .../test/unit/test_plugins_discovery.py | 34 +- .../test/unit/test_plugins_standard.py | 36 +- ironic_inspector/test/unit/test_process.py | 47 ++- ironic_inspector/test/unit/test_swift.py | 144 +++----- ironic_inspector/utils.py | 23 +- lower-constraints.txt | 4 +- .../active-introspection-949f4a50c9d5218a.yaml | 11 + .../notes/cpu-memory-cfdc72b625780871.yaml | 6 + .../notes/deprecated-ironic-1751ceec6295917d.yaml | 7 + ...-nodes-with-bmc-v6address-ba224f4a8a151c53.yaml | 6 + .../notes/swift-deprecations-d7680b867fae7f3d.yaml | 5 + .../notes/swift-max-retries-dfaecb74bd3aba9a.yaml | 5 + requirements.txt | 2 +- setup.cfg | 5 +- test-requirements.txt | 1 + tools/bandit.yml | 400 +++++++++++++++++++++ tox.ini | 6 + zuul.d/ironic-inspector-jobs.yaml | 21 ++ zuul.d/project.yaml | 5 +- 42 files changed, 894 insertions(+), 432 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d750d33..ae6ea25 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +18,0 @@ python-ironicclient>=2.3.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 @@ -20,0 +20 @@ pytz>=2013.6 # MIT +openstacksdk>=0.30.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2507ea4..ce3392e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0

1 0

ironic-python-agent 4.0.0 (train)
by no-reply＠openstack.org 09 Jul '19

09 Jul '19

We joyfully announce the release of: ironic-python-agent 4.0.0: Ironic Python Agent Ramdisk This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 4.0.0 ^^^^^ New Features ************ * Adds a new CLI command "ironic-collect-introspection-data" to enable manually publishing into the "baremetal-introspection" service. Executing this command on a system unknown to the Bare Metal service will likely result in the machine becoming registered to Ironic, and as such this command should be used with caution. If the capability to update introspection data for running machines has been enabled in the Bare Metal introspection service, then an operator may use this command in the "active" or "rescue" states to update introspection data. Bug Fixes ********* * The "lshw" output no longer pollutes the debug logging. Instead, it's stored as part of the ramdisk logs. * Fixes the missing ipv6 module for TinyCore based IPA images which are used in CI testing. Changes in ironic-python-agent 3.7.0..4.0.0 ------------------------------------------- 696606f manual introspection trigger command f7740c7 improve error messages during node lookup failures 69064a8 Correct formatting of a warning when lshw cannot be run dc3e26a Add Python 3 Train unit tests 6f634c3 Adds bandit template and exclude some of tests 94048fe Stop logging lshw output, collect it with other logs instead cf30024 Add IPv6 module for tinycore dd7e7fd Removes tinyipa from IPA Diffstat (except docs and test files) ------------------------------------- imagebuild/README.rst | 2 - imagebuild/tinyipa/.gitignore | 13 - imagebuild/tinyipa/Makefile | 45 --- imagebuild/tinyipa/README.rst | 146 -------- imagebuild/tinyipa/add-ssh-tinyipa.sh | 139 ------- imagebuild/tinyipa/build-instance-images.sh | 36 -- imagebuild/tinyipa/build-iso.sh | 16 - imagebuild/tinyipa/build-tinyipa.sh | 197 ---------- imagebuild/tinyipa/build_files/bootlocal.sh | 74 ---- imagebuild/tinyipa/build_files/buildreqs.lst | 25 -- .../tinyipa/build_files/buildreqs_python2.lst | 2 - .../tinyipa/build_files/buildreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/dhcp.sh | 21 -- imagebuild/tinyipa/build_files/fakeuname | 110 ------ imagebuild/tinyipa/build_files/finalreqs.lst | 17 - .../tinyipa/build_files/finalreqs_python2.lst | 1 - .../tinyipa/build_files/finalreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/isolinux.cfg | 9 - imagebuild/tinyipa/common.sh | 56 --- imagebuild/tinyipa/finalise-tinyipa.sh | 246 ------------- imagebuild/tinyipa/install-deps.sh | 23 -- imagebuild/tinyipa/tc-mirror.sh | 53 --- imagebuild/tinyipa/udhcpc.script | 44 --- ironic_python_agent/agent.py | 9 +- ironic_python_agent/cmd/inspect.py | 30 ++ ironic_python_agent/config.py | 12 + ironic_python_agent/extensions/standby.py | 3 +- ironic_python_agent/hardware.py | 4 +- ironic_python_agent/inspect.py | 86 +++++ ironic_python_agent/inspector.py | 4 +- ironic_python_agent/ironic_api_client.py | 19 +- ironic_python_agent/utils.py | 1 + releasenotes/notes/lshw-cb89894be057bdc9.yaml | 5 + .../manual-introspection-b04b5c25f5e004ac.yaml | 13 + .../notes/tinycore-ipv6-1b620c61402b5720.yaml | 5 + setup.cfg | 17 +- tools/bandit.yml | 401 +++++++++++++++++++++ tox.ini | 3 +- zuul.d/ironic-python-agent-jobs.yaml | 3 +- zuul.d/project.yaml | 2 +- 44 files changed, 638 insertions(+), 1305 deletions(-)

1 0

neutron-fwaas 13.0.2 (rocky)
by no-reply＠openstack.org 08 Jul '19

08 Jul '19

We are jazzed to announce the release of: neutron-fwaas 13.0.2: OpenStack Networking FWaaS This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 13.0.1..13.0.2 --------------------------------------- ea7590e4e netfilter_log: Correctly decode binary type prefix 55a5a41b4 OpenDev Migration Patch 0a7172bd0 Fix the verification method before creating and updating the firewall rule 54a8a5bc1 Replace openstack.org git:// URLs with https:// 5b31f2320 Subscribe Neutron port update events for FWG Logging handling 2f55bd16e Fix firewall rule 'shared' check in updating fwp 78159b799 Load neutron_fwaas.conf with '--config-file' for neutron-server 42ea1e0fa Correct package name libnetfilter-log on CentOS 90951a5ec Upper-constrain neutron to stable/rocky 5ece265b6 Move port validation support into the driver eafcbce19 Fix associating firewall group with DVR/L3HA port Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- devstack/plugin.sh | 15 +- lower-constraints.txt | 2 +- neutron_fwaas/common/exceptions.py | 4 +- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 40 ++-- .../privileged/netfilter_log/libnetfilter_log.py | 4 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 44 ++--- .../firewall/service_drivers/agents/agents.py | 17 ++ .../firewall/service_drivers/driver_api.py | 6 + .../logapi/agents/drivers/iptables/driver.py | 4 + neutron_fwaas/services/logapi/common/log_db_api.py | 19 +- .../services/logapi/common/port_callback.py | 40 ++++ .../unit/db/firewall/v2/test_firewall_db_v2.py | 64 +++++-- .../unit/services/firewall/test_fwaas_plugin_v2.py | 51 +++++- .../unit/services/logapi/common/test_log_db_api.py | 38 +++- .../services/logapi/common/test_port_callback.py | 203 +++++++++++++++++++++ playbooks/neutron-fwaas-fullstack/run.yaml | 6 +- requirements.txt | 2 +- 19 files changed, 483 insertions(+), 86 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4bd3c06a..5cf313b4c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) -neutron>=13.0.0.0b1 # Apache-2.0 +neutron>=13.0.0.0b1,<14.0.0.0b1 # Apache-2.0

1 0

python-tripleoclient 11.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are happy to announce the release of: python-tripleoclient 11.5.0: TripleO client This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 11.4.0..11.5.0 ---------------------------------------------- 9bd04ae3 Improve validations run outputs through the CLI f78809a3 Ensure files exist before building/uploading plan 7d41f81e Send terminal erase sequence on tripleo deploy 34bde896 Retry heat stack polling on gateway problems f36d8995 Drop the port from DockerInsecureRegistryAddress c67f4862 Fix sample_default for host_routes option 7c21abb2 Replace git.openstack.org URLs with opendev.org URLs a55573f2 Add ODL deprecation warning in CLI 94645382 Increase max_nested_stack_depth for heat 098fdb2c undercloud: resolve undercloud_*_host de5027d6 Get validations playbooks from playbooks directory f6862341 Do not log tracebacks for expected exceptions e7875ece Add a comment about nodes and roles options. 9808a162 Revert "Remove nodes and roles options." 97fe3def Update undercloud_nameserver help text 7b368365 Remove nodes and roles options. 0fe4fb67 undercloud: wire ContainerHealthcheckDisabled 61240a06 Remove service environment file and images file. 2bab41de OpenDev Migration Patch f09d8402 Add checking mechanism driver during upgrade 3ae5ac60 Make overcloud_config working with Python 3 0ca816dc Update UPPER_CONSTRAINTS_FILE for stable/stein 14f02dd6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- tox.ini | 6 +- tripleoclient/command.py | 4 +- tripleoclient/config/undercloud.py | 14 +- tripleoclient/constants.py | 15 +- tripleoclient/exceptions.py | 50 +++--- tripleoclient/heat_launcher.py | 3 +- .../healthcheck_disabled-d0878072273d1496.yaml | 5 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 7 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 11 ++ tripleoclient/utils.py | 186 ++++++++++++++++++++- tripleoclient/v1/container_image.py | 25 --- tripleoclient/v1/overcloud_config.py | 2 +- tripleoclient/v1/overcloud_deploy.py | 31 ++++ tripleoclient/v1/overcloud_update.py | 7 + tripleoclient/v1/overcloud_upgrade.py | 8 + tripleoclient/v1/tripleo_deploy.py | 19 ++- tripleoclient/v1/tripleo_validator.py | 22 +-- tripleoclient/v1/undercloud_config.py | 46 +++-- tripleoclient/workflows/plan_management.py | 2 +- tripleoclient/workflows/validations.py | 15 +- 24 files changed, 559 insertions(+), 116 deletions(-)

1 0

tripleo-image-elements 10.4.1 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are delighted to announce the release of: tripleo-image-elements 10.4.1: Disk image builder elements for deploying OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.4.0..10.4.1 ------------------------------------------------ 2c8a6a57 Remove note in README regarding security hardened images 3228347d [Documentation] Migrate the format. 7d6edd9c OpenDev Migration Patch dceeba5e Update UPPER_CONSTRAINTS_FILE for stable/stein 067819e1 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- README.md => README.rst | 17 ++++++++++------- elements/overcloud-secure-uefi/README.rst | 4 ---- elements/overcloud-secure/README.rst | 4 ---- setup.cfg | 2 +- tox.ini | 2 +- 6 files changed, 14 insertions(+), 18 deletions(-)

1 0

tripleo-validations 10.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are delighted to announce the release of: tripleo-validations 10.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.5.0 ^^^^^^ Deprecation Notes * All the validations in the *validations* directory have been migrated into their own Ansible roles from Stein release and will be removed from Train. You can now run the validations from the *playbooks* directory. For more information, please see: https://docs.openstack.org/tripleo-validations/latest/readme.html #directory-structure Changes in tripleo-validations 10.4.0..10.5.0 --------------------------------------------- fb838d3 Deprecate all the `validations` directory contents fae8a85 Documentation update with the new validations architecture 367fbf3 Add support for the chrony implementation 673148d Use sorted dictionary before iteration 7193778 Update the Undercloud Services list for the uc-service-status role 2d6b0da Improve stackrc file sourcing e0f9050 Use Undercloud local_ip to ensure the registry does answer or not 869ca65 Add pkg names better management between OS releases d0cece2 Add nova-status Ansible role 853d731 Update ceph-health for containers and failure options d5e22f8 Sync 'validations/check-network-gateway.yaml' with the new role 97ee5d4 Sync 'validations/lookup_plugins/tht.py' 8727fda Sync 'validations/callback_plugins/validation_output.py' 472d4a8 Sync 'validations/ceilometerdb-size.yaml' with the new role 73392f4 Sync 'validations/check-latest-minor-version.yaml' with the new role f233d2e Sync 'validations/ctlplane-ip-range.yaml' with the new role 983e33f Sync 'validations/controller-token.yaml' with the new role 2e75f97 Sync 'validations/haproxy.yaml' with the new role ea91001 Sync 'validations/ironic-boot-configuration.yaml' with the new role 41813f3 Sync 'validations/dhcp-provisioning.yaml' with the new role 40f33af Add run-validations.sh script 427f596 Sync 'validations/dhcp-introspection.yaml' with the new role f702793 Sync 'validations/no-op-firewall-nova-driver.yaml' with the new role 4ab6701 Fix typo in the command to get the file_descriptors total_limit 619e4d7 Sync 'validations/mysql-open-files-limit.yaml' with the new role 7a24b92 Sync 'validations/node-disks.yaml' with the new role 4f0edec Sync 'validations/nova-event-callback.yaml' with the new role e57d5b1 Sync 'validations/pacemaker-status.yaml' with the new role 337a9ff Sync 'validations/openstack-endpoints.yaml' with the new role 396e54a Sync 'validations/rabbitmq-limits.yaml' with the new role 4f94b30 Sync Sphinx requirement 8ee7475 Fix validations-specific Ansible output callback 7c4ab4a Sync 'validations/undercloud-debug.yaml' with the new role 5e96673 Sync 'validations/stonith-exists.yaml' with the new role 00b4857 Sync 'validations/repos.yaml' with the new role 5a8b859 Sync 'validations/switch-vlans.yaml' with the new role 8fb4099 Sync 'validations/tasks/disk_space.yaml' with the new role 637142b Sync 'validations/stack-health.yaml' with the new role 373d262 Sync 'validations/undercloud-cpu.yaml' with the new role 920710f Sync 'validations/undercloud-process-count.yaml' with the new role 3b784f2 Sync 'validations/undercloud-service-status.yaml' with the new role 80c5d07 Sync 'validations/undercloud-heat-purge-deleted.yaml' with the new role a6ee958 Sync 'validations/check-ftype.yaml' with the new role 448ea8d Sync 'validations/ceph-ansible-installed.yaml' with the new role 9d40d16 Sync 'validations/undercloud-tokenflush.yaml' with the new role 9aeeb97 Sync 'validations/undercloud-ram.yaml' with the new role 9d3d676 New validation: ensure image-serve service is working as expected 4af560c Add option to fail if ceph-ansible is not installed 904bd27 Clean up some old roles dependencies. 25012a4 Add collect-flavors-and-verify-profiles role a919cb3 Fix invalid 'ignore_missing_file' attribute in a task 1027a4f [Python3] Adds bytes to str conversion management db89c5d Makes rogue_dhcp.py script Python3 aware 6ead160 Fix Jinja2's default filter usage db08b15 Adds roles support in the script generating the validations doc. 47ad831 Update UPPER_CONSTRAINTS_FILE for stable/stein 001288a Migrate ansible-lint to pre-commit ebe7ad2 Fix Jinja2's default filter usage 9d08e89 OpenDev Migration Patch deaf09e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 23 +++ .gitreview | 3 +- .pre-commit-config.yaml | 29 +++ README.rst | 3 +- callback_plugins/validation_output.py | 172 +++++++++--------- library/switch_vlans.py | 18 +- lookup_plugins/tht.py | 5 + playbooks/ceph-ansible-installed.yaml | 1 + playbooks/ceph-health.yaml | 2 + playbooks/check-latest-minor-version.yaml | 2 - playbooks/collect-flavors-and-verify-profiles.yaml | 13 ++ playbooks/image-serve.yaml | 13 ++ playbooks/nova-status.yaml | 24 +++ playbooks/{ntpstat.yaml => ntp.yaml} | 6 +- ...ons-directory-deprecation-6ff07dae6f456743.yaml | 10 ++ roles/ceph/defaults/main.yml | 5 + roles/ceph/tasks/ceph-ansible-installed.yaml | 10 +- roles/ceph/tasks/ceph-health.yaml | 66 ++++++- roles/check-latest-minor-version/defaults/main.yml | 9 +- roles/check-network-gateway/tasks/main.yml | 6 +- .../meta/main.yml | 27 +++ .../tasks/main.yml | 11 ++ .../vars/main.yml | 9 + roles/ctlplane-ip-range/tasks/main.yml | 4 +- roles/dhcp-validations/files/rogue_dhcp.py | 31 ++-- .../dhcp-validations/tasks/dhcp-provisioning.yaml | 2 +- roles/image-serve/defaults/main.yaml | 2 + .../meta/main.yml => image-serve/meta/main.yaml} | 0 roles/image-serve/tasks/main.yaml | 40 +++++ roles/image-serve/vars/main.yml | 7 + roles/mysql-open-files-limit/tasks/main.yml | 4 +- roles/neutron-sanity-check/tasks/main.yml | 2 +- roles/no-op-firewall-nova-driver/meta/main.yml | 3 +- roles/nova-status/meta/main.yml | 27 +++ roles/nova-status/tasks/main.yml | 26 +++ roles/nova-status/vars/main.yml | 20 +++ roles/ntp/meta/main.yml | 28 +++ roles/ntp/tasks/main.yml | 26 +++ roles/{ntpstat => ntp}/vars/main.yml | 4 +- roles/ntpstat/tasks/main.yml | 5 - roles/rabbitmq-limits/tasks/main.yml | 5 +- roles/undercloud-debug/tasks/main.yml | 2 +- roles/undercloud-heat-purge-deleted/meta/main.yml | 3 +- roles/undercloud-heat-purge-deleted/tasks/main.yml | 2 +- roles/undercloud-process-count/meta/main.yml | 3 +- roles/undercloud-process-count/tasks/main.yml | 2 +- roles/undercloud-service-status/defaults/main.yml | 13 +- roles/undercloud-tokenflush/meta/main.yml | 3 +- roles/undercloud-tokenflush/tasks/main.yml | 2 +- scripts/run-validations.sh | 106 +++++++++++ setup.cfg | 1 + test-requirements.txt | 3 +- tools/ansible-lint.sh | 22 --- tools/validate-files.py | 6 +- tox.ini | 7 +- tripleo_validations/utils.py | 13 +- validations/512e.yaml | 1 + validations/callback_plugins/validation_output.py | 172 +++++++++--------- validations/ceilometerdb-size.yaml | 9 +- validations/ceph-ansible-installed.yaml | 12 +- validations/ceph-health.yaml | 1 + validations/check-ftype.yaml | 4 +- validations/check-latest-minor-version.yaml | 10 +- validations/check-network-gateway.yaml | 23 ++- .../collect-flavors-and-verify-profiles.yaml | 2 + validations/containerized-undercloud-docker.yaml | 1 + validations/controller-token.yaml | 9 +- validations/controller-ulimits.yaml | 2 + validations/ctlplane-ip-range.yaml | 9 +- validations/default-node-count.yaml | 3 +- validations/deployment-images.yaml | 2 + validations/dhcp-introspection.yaml | 15 +- validations/dhcp-provisioning.yaml | 4 +- validations/dns.yaml | 2 + validations/haproxy.yaml | 45 ++++- validations/ironic-boot-configuration.yaml | 13 +- validations/lookup_plugins/tht.py | 5 + validations/mysql-open-files-limit.yaml | 12 +- validations/network-environment.yaml | 2 + validations/neutron-sanity-check.yaml | 2 + validations/no-op-firewall-nova-driver.yaml | 8 +- validations/node-disks.yaml | 15 +- validations/node-health.yaml | 2 + validations/nova-event-callback.yaml | 126 +++++++------ validations/ntpstat.yaml | 2 + validations/openshift-hw-requirements.yaml | 2 +- validations/openshift-nw-requirements.yaml | 2 + validations/openstack-endpoints.yaml | 16 +- validations/ovs-dpdk-pmd-cpus-check.yaml | 2 + validations/pacemaker-status.yaml | 5 +- validations/rabbitmq-limits.yaml | 15 +- validations/repos.yaml | 7 + validations/stack-health.yaml | 6 +- validations/stonith-exists.yaml | 11 +- validations/switch-vlans.yaml | 15 +- validations/tasks/deprecation.yaml | 12 ++ validations/tasks/disk_space.yaml | 4 +- validations/undercloud-cpu.yaml | 7 +- validations/undercloud-debug.yaml | 19 +- validations/undercloud-disk-space-pre-upgrade.yaml | 1 + validations/undercloud-disk-space.yaml | 1 + validations/undercloud-heat-purge-deleted.yaml | 28 ++- validations/undercloud-neutron-sanity-check.yaml | 2 + validations/undercloud-process-count.yaml | 18 +- validations/undercloud-ram.yaml | 7 +- validations/undercloud-selinux-mode.yaml | 3 +- validations/undercloud-service-status.yaml | 10 +- validations/undercloud-tokenflush.yaml | 20 ++- 111 files changed, 1371 insertions(+), 460 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..25a16ff 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

tripleo-common 10.8.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are gleeful to announce the release of: tripleo-common 10.8.0: A common library for TripleO workflows. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 10.8.0 ^^^^^^ Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Fixed an issue were amphora load balancers would fail to create. The problem was because Octavia certificate files were being created in a wrong path and with invalid content. * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. Changes in tripleo-common 10.7.0..10.8.0 ---------------------------------------- f48331f3 Fix tripleo-upgrade-hiera key deleting 783a6924 remove plotnetcfg from overcloud image yaml 6763c998 Overcloud-full image templates for RHEL8 f08c6058 Update the Undercloud Services list in the inventory. 5cdd4692 Increase timeout of temp swift URLs from 1 to 4 hours c258f87e Remove scenario008 jobs 277902e6 Fix bare variable usage in ansible 571422a1 Add the ability to compute osds number counting lvm devices 728e59ed [CVE-2019-3895] Set image owner id c93be003 Adds redfish support to 'overcloud generate fencing'. 71c099f2 Fix Octavia certificate file path and content f38d89e7 fix 404 when requesting empty tripleo container image catalog af719c4c Fix validations_inputs temporary file name 93314d98 [Stein-Only] Switch container images to stein namespace 4ed86885 Add task to read remote pub key a9e05d47 Make get_enabled_services() more robust fac2c32d bootstrap: install network-scripts if EL8 6f55c891 Use oslo_rootwrap subprocess module in order to gain proper eventlet awareness 59738bd5 Use 'DEFAULT_VALIDATIONS_BASEDIR' variable from constants.py 27a4322b Fix chown command in write_inputs_file function 787ec853 Add new healthchecks for zaqar services 5de8867b tripleo-bootstrap: only enable network, not starting. 24c55464 tripleo-bootstrap: ensure network service is enabled & started 83d05ffc Update default Ceph container image to use to the Nautilus version f19863f3 docker-rm: check if rpm dependency is actually installed 992749c6 Check for file existance in file modification check 83526f8a OpenDev Migration Patch b90b0e61 Update UPPER_CONSTRAINTS_FILE for stable/stein 0917a3e6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .../container_image_prepare_defaults.yaml | 4 +- container-images/overcloud_containers.yaml | 210 ++++++++++----------- .../tripleo_kolla_template_overrides.j2 | 4 +- healthcheck/common.sh | 5 + healthcheck/zaqar-api | 6 + healthcheck/zaqar-socket | 15 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 9 +- image-yaml/overcloud-images-rhel8.yaml | 19 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute.yaml | 1 - lower-constraints.txt | 1 + playbooks/octavia-files.yaml | 1 + .../tasks/certificate.yml | 8 +- .../octavia-controller-config/tasks/octavia.yml | 12 ++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 45 ++++- ...ificates-path-and-content-e8acf1e859e75135.yaml | 6 + ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 + requirements.txt | 1 + roles/tripleo-bootstrap/tasks/main.yml | 23 +++ roles/tripleo-create-admin/tasks/create_user.yml | 7 +- roles/tripleo-docker-rm/tasks/main.yaml | 13 +- roles/tripleo-upgrade-hiera/tasks/remove.yml | 12 +- sudoers | 1 - tox.ini | 2 +- tripleo_common/actions/ansible.py | 26 +-- tripleo_common/actions/parameters.py | 14 +- tripleo_common/image/image_uploader.py | 11 +- tripleo_common/image/kolla_builder.py | 6 + tripleo_common/inventory.py | 6 +- tripleo_common/templates/deployments.yaml | 20 +- tripleo_common/utils/validations.py | 7 +- workbooks/deployment.yaml | 2 +- workbooks/derive_params_formulas.yaml | 8 +- zuul.d/layout.yaml | 5 - 42 files changed, 500 insertions(+), 263 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c304a4be..51b6b604 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.rootwrap>=5.8.0 # Apache-2.0

1 0

tripleo-puppet-elements 10.3.1 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We jubilantly announce the release of: tripleo-puppet-elements 10.3.1: Puppet building rules for OpenStack images. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 10.3.0..10.3.1 ------------------------------------------------- 79c0c76 Add element to install all openstack clients f18333d Add upper constraints 9ba1438 OpenDev Migration Patch 223633d Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ tox.ini | 4 +- 9 files changed, 96 insertions(+), 4 deletions(-)

1 0

puppet-tripleo 10.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are pleased to announce the release of: puppet-tripleo 10.5.0: Puppet module for OpenStack TripleO This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 10.5.0 ^^^^^^ New Features ************ * Adds ovn_db_host and ovn_nb_port to configure ovn nb connection string for OVN Provider driver. Known Issues ************ * Allow a hiera key to add an additional rabbitmq policy in the resource agend. Changes in puppet-tripleo 10.4.1..10.5.0 ---------------------------------------- fa517262 Bump metadata for a stein release ecbec17a Allow enabling custom backends with manila 74a7262e Allow overriding pacemaker_node_ips for staged upgrade 53b3156e Force --hostonly when regenerating the initramfs d1893722 Do not invoke host config in agent config c1428dd2 Quote the hiera dot notation a2ceac8b IHA robustness improvements af8b1cfb RabbitMQ: always allow promotion on HA queue during failover 4ddddb44 Remove scenario008 jobs 584d3cfe Make sure we pass the proper new pcs 0.10 variables 0c81daf7 Add support for external Ganesha service in Manila Share profile 7317a2b2 Allow external Ganesha for the cephfs manila backend 1948495e Switch metrics qdrs to edge mode 7559e636 Rebuild initramfs after applying change in kernel parameters ef577909 Fix tripleo::haproxy::stats to be more correct and flexible 6b4c231c Fix amphora provider driver description f58d8af3 Fix horizon firewall rules in composable roles 61a73d12 Write TLS config under section [client] in tripleo.cnf 4b596a53 Make sure to set umask 022 for nova_migration_target logins 5a48995c Include 'octavia' driver on ML2/OVN deployments 96d970c5 Add nova::cinder to nova compute 4fc3d8a4 Let fluentd not create /etc/rsyslog.d/fluentd.conf file 153d6b5a Expose innodb_lock_wait_timeout via hieradata. 73168f04 Remove unused docker_distribution template 3edc3929 redis HA: allow SELinux relabel for /var/run/redis ad0e5975 Add support to set ovs_nb_connection 24fa66cf Fix keepalived VIP monitoring script a2e3f344 Set octavia provider_drivers config option correctly c60e80da Correct how podman exec is called for the neutron-keepalived-state-change 053528bb Update UPPER_CONSTRAINTS_FILE for stable/stein 45c4d4e0 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/firewall/service_rules.pp | 2 +- manifests/haproxy.pp | 13 +++- manifests/haproxy/horizon_endpoint.pp | 27 +++++++++ manifests/haproxy/service_endpoints.pp | 4 +- manifests/haproxy/stats.pp | 19 +++--- manifests/keepalived.pp | 2 +- manifests/profile/base/database/mysql.pp | 7 +++ manifests/profile/base/database/mysql/client.pp | 8 ++- manifests/profile/base/kernel.pp | 8 +++ manifests/profile/base/logging/fluentd.pp | 25 +++++--- manifests/profile/base/manila/share.pp | 69 +++++++++++++--------- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/metrics/qdr.pp | 11 ++-- manifests/profile/base/neutron/sriov.pp | 1 - manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/migration/target.pp | 7 +++ manifests/profile/base/octavia/api.pp | 16 ++++- manifests/profile/base/pacemaker.pp | 24 ++++++-- manifests/profile/base/pacemaker/instance_ha.pp | 1 + manifests/profile/base/pacemaker_remote.pp | 18 ++++++ .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 ++---- manifests/profile/pacemaker/rabbitmq_bundle.pp | 28 +++++++-- metadata.json | 2 +- ...octavia-ovn-nb-connection-9d5bc428c4ff35af.yaml | 5 ++ .../rabbitmq_extra_policies-69cbc0a4afeac963.yaml | 5 ++ spec/classes/tripleo_keepalive_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 20 +++++-- .../tripleo_profile_base_logging_fluentd_spec.rb | 9 ++- .../tripleo_profile_base_octavia_api_spec.rb | 13 ++-- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +-- .../docker_distribution/registry_config.yml.erb | 11 ---- .../neutron/neutron-keepalived-state-change.epp | 9 ++- tox.ini | 2 +- zuul.d/layout.yaml | 8 --- 36 files changed, 283 insertions(+), 124 deletions(-)

1 0

tripleo-heat-templates 10.6.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We jubilantly announce the release of: tripleo-heat-templates 10.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.6.0 ^^^^^^ New Features ************ * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * Add GlanceImageCacheDir parameter to set base directory location that the Image Cache uses. Add GlanceImageCacheMaxSize parameter to set the upper limit on cache size, in bytes, after which the cache- pruner cleans up the image cache. Add GlanceImageCacheStallTime parameter to set the amount of time to let an image remain in the cache without being accessed. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * Introduce new tag into roles that will create external_bridge (usable only for multiple-nics). * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Add parameter *NovaLiveMigrationWaitForVIFPlug* which allows to set *live_migration_wait_for_vif_plug* which in turn allows whether to wait for "network-vif-plugged" events before starting guest transfer. The default value for the parameter is set to true and it is set to false when *ovn* is in *NeutronMechanismDrivers* list. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * Add role parameter NovaLibvirtNumPciePorts which sets *libvirt/num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. When using the 'q35' machine type, by default, it allows only a *single* PCIe device to be hotplugged. And Nova currently sets 'num_pcie_ports' to "0" (which means, it defaults to libvirt's "1"), which is not sufficient for hotplug use. Default for NovaLibvirtNumPciePorts is 16. * Added OVN-DPDK support * Introduced two new numeric parameters OvsRevalidatorCores and OvsHandlerCores to set values of n-revalidator-threads and n -handler-threads on openvswitch. Upgrade Notes ************* * During upgrade user will need to create custom roles_data.yaml and remove external_bridge from tags to be sure that bridge will be not added. * The new role variable update_serial is introduced allowing parallel update execution. On Controller role this variable defaults to 1 as pacemaker has to be taken down and up in rolling fashion. The default value is 25 as that is default value for parallel ansible execution used by tripleo. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixed launchpad bug 1831122 (https://bugs.launchpad.net/tripleo/+bug/1831122) with the NetApp Backend. * When changeing the "name_lower" of the "InternalApi" network and using the "service_net_map_replace" option in network data. The subnet referenced in "VipSubnetMapDefaults" did not take in account the custom lowercase name for the network, causing deployment error. See bug: 1832461 (https://bugs.launchpad.net/tripleo/+bug/1832461) * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * https://review.opendev.org/#/c/662109/ removed the bind mount from /run inside the nova_migration_target container. But the nova- migration-wrapper inside the container needs access to the libvirt socket - https://github.com/rdo-packages/nova-distgit/blob/rpm- master/nova-migration-wrapper#L31 . This adds the bind mount of /run/libvirt to the nova_migration_target container to fix live migration issues. * With 405366fa32583e88c34417e5f46fa574ed8f4e98 the parameters RpcPort, RpcUserName, RpcPassword and RpcUseSSL got deprecated and nova::rabbitmq_port removed. As a result the healtcheck get called with null parameter and fail. We now get the global_config_settings from RabbitMQService and use oslo_messaging_rpc_port for the healthcheck. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 10.5.0..10.6.0 ------------------------------------------------ 23d2bd9a7 Add missing tag 'role_specific' for NovaPciPassthrough parameter 9a1491a42 ceilometer_agent_notification: disable-panko.yaml 93ead16ca Avoid checking rc if we're in dry-run mode 534a23576 Setup cluster definition based on the ansible limit option. 1425671a3 Add /run/libvirt to nova_migration_target container f736d4471 Make comparisons case insensitive 80c40e03d Fix Ceph RGW listener port configuration 6f2877d98 Replace /var/log/containers/swift symlink with directories 1eaabaf36 Fix ipaclient script dcd135f99 Allow ssh from all ctlplane network subnets 273f9a32a Configure insecure registries before Pacemaker-managed image pulls 1cedab103 Change package installs for Stein and OS upgrade aaf25b8de Do not assume the CNI config directory exists 2accf4d25 Refactor ovn_dbs upgrade_tasks. 0af8eb1c6 Remove baremetal to containerized pacemaker upgrade_tasks. 34450cc63 Remove OpenStack packages right before upgrading the operating system 7f393a3d4 Add operating system upgrade preparation via Leapp 6c60a77c1 Reintroduce upgrade tasks for stopping pacemaker cluster 8d6b51b77 Stop all services before upgrading node's OS. 1f6a24f6a Don't create symlink for swift container logs 086238e91 Enable Ceph RGW 'account in url' option 04320fe1b Remove os-collect-config related poperties and attributes 99039a819 Override ovn::controller::hostname to use hiera:fqdn_canonical aa280e94c Remove duplicate mount destinations in containers 1d2d1b29a Revert "ceilometer_agent_notification: disable-panko.yaml" 5e70fa869 Disable iscsi.service to avoid iscsid on host from getting started 6b5defe6d Add new parameter NovaLiveMigrationWaitForVIFPlug eff837623 Fix bare reference of cinder_enable_iscsi_backend 126ab3981 Put on hold the Ansible package update until is fixed 459b873c2 Fix network rename + service_net_map_replace 247e8e86f Fix NovaNfs role parameters d5d227b54 Explicitly set ansible_python_interpreter in external upgrade playbook 0f5bc4d1b Set cache_backend for token caching d76839874 Remove scenario008 jobs c433f9258 Remove incorrect use of PlacementApi in ControllerStorageNfs 09465e426 Handle openvswitch meta-package on undercloud upgrade. 46741fc85 Fix RedisVirtualIP when overrdiing InternalApi name_lower 0339c45d9 Force ansible serial to 1 for the Controller 1d02e964d Fix log owner on computes during overcloud deploy runs d52e34b8c Re-enable manila dashboard e5e7fea69 Add networks to Standalone role 3ba431d30 Make NovaResumeGuestsStateOnHostBoot podman compatible 1797d56cc OVS Revalidator and handler threads e6c610ac6 Fix correct network for nova-vnc c2ceefcd5 Add panko_api_cron container b4779ec17 Add {{role.name}}RemovalPoliciesMode parameter aa2be6cbe Add ComputeHCIOvsDpdk role 242efd05c Fix disappearing Puppet logs b12c8035d Add more settings for glance image cache fb659ead8 DVR neutron template should enable ARP responder 96444da0e Clean metrics related environments c6294bd8a Add creating br-ex for compute node in ovn 13b693676 Add healthcheck to ironic_pxe_http b9992d965 Add new role parameter NovaLibvirtNumPciePorts bc9397f32 Configure Neutron API for Nova Placement... b74dad7a8 Fix ssl.yaml generating GaneshaInternal in the endpoint map 5b1ba9846 Do not bind /run on host to nova_migration_target a199e335b Set TenantNetPhysnetMtu to 0 to allow different MTUs fd5619871 Ensure openstack clients are installed 517175cce Fix service auth URL in Octavia 7d18d96a4 Add DPDK support for OVN c1865bafb Fix custom network.name_lower in krb-service-principals 152e46575 Fix netapp deployment manifest 8b3fceb0b Fix haproxy stats network binding 705fdb625 ceph-base: Update ceph-ansible default playbook d0eb1d939 Remove unnecessary openldap-clients package from overcloud controllers 5d1aa80d0 Adapt sensu on refactor 37ec3710a Configure server_certs_key_passphrase for Octavia 1f79242a0 Correct ceph configuration for scenario 10 environments 4514ed6c3 Re-add amphora flavor management settings 108b8469f Initialize ip(6)tables "raw" table ece7858d7 Fix manila-scheduler-container-puppet.yaml typo 9f3bb796f Add domain and no-ntp options to ipaclient e1f51a5f5 Add CephAnsibleEnvironmentVariables to nodes-uuid call 3fddb7711 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 6b4f03f9e Remove the iptables rules set via service_config_settings d033c1a3e Add ability to specify dns search domains 952511f65 Fix IPA client when doing brownfield deployment of internal TLS aa6dc4cbc Add mkhomedir option to ipa-client-install 5c014c674 Set force_config_drive only when OVNMetadata is disabled ed5f481aa standalone/undercloud - post: use EndpointMap to fetch Keystone URL 93f31d38b Enable serial execution for ansible host b23fd9f70 Try a timesync as part of first boot 3aa22c917 Add cinder credentials to nova conf 1616da335 Set arp_notify to match ndisc_notify 0c31f04f4 Activate health checks for cron containers 53fbc70e7 Fix NovaNfs role parameter precedence in conditions 999626d85 Ensure we aren't running some dry-run also for Pacemaker case 0317a5b7d Modified the way fluentd configures rsyslog 2b4268e7d Re-add undercloud-aodh.yaml 038d887d8 Fix haproxy firewall rules bfc0add03 Remove OVNTunnelEncapType 9118472dc Use RpcPort for container healthchecks 3978faeaa Adapt check-docker-health for podman 039ce1c3c Gracefully handle empty config json data ba1e21743 Fix the step_config input in the OvS-DPDK template 93155b544 Allow multiple same options in nova.conf 835b862c9 Enable zaqar healthchecks 5715c98b5 Copy keys for tripleo-admin user b15532ae0 Enable ndisc_notify sysctl setting to notify of MAC changes eb898e234 Use timesync service 0152ce48b Clean up leftover mount point after docker stop. 480100564 Enable Podman Service For Lacking Roles 9096b4941 Use oslo_messaging_rpc_port for nova rpc healthchecks f5ef977e1 Revert "mistral: configure heartbeat parameters to avoid action timeout" 125cecfcb Fix cinder-backup deployment templates 6e6d23838 Avoid issues with non-existing directories 28a0d3c53 Set debug level of nova container_config_scripts only when enabled 2ee3e849e Adjust deployed-server install package list for RHEL8 4e36f4918 Change setype for non container /var/log/nova-placement 2093cca40 Change setype for non container /var/log/<service> directories 44f39920b Remove ceph-ansible fetch directory as privileged user e6c0e71d7 Update UPPER_CONSTRAINTS_FILE for stable/stein 4d43cffd3 Update .gitreview for stable/stein 8437f6c9c ensure /var/run/redis is present upon reboot 1762e9b63 ceilometer_agent_notification: disable-panko.yaml 3a4a77356 Add parameter to configure maxdelay in db purge/archive job cc2517688 Remove ceph-ansible fetch directory after it is saved 517033961 Ensure there is no redis on host 2c0785069 Run nova_cell_v2_discover_hosts.py on every deploy run 4a6ba2bba Run nova-manage as root to prevent wrong nova-manage.log permissions 04a24ed7a Drop puppet/services/metrics/collectd.yaml 7fd94ab52 MetricsQdr: Build sslProfiles without internal TLS a32d70319 fix storage.yaml to write environments/storage/nova-nfs.yaml 0cd185954 Allow NovaNfs parameters to be role specific 63a7d6d92 heat: use oslo_messaging_rpc_port for nova rpc healthchecks 6dbd0d3fe Add ANSIBLE_GATHER_TIMEOUT=60 to ceph-ansible run d5234ca15 Move Manila backends into deployment 8b7590dd0 Override ceph_mon to v2 protocol 8fd58b4b8 Avoid concurrent nova cell_v2 discovery instances 847a2057c Use oslo_messaging_rpc_port for nova rpc healthchecks d4218d1f3 Evaluating ansible_check_mode as a boolean c630f13fd OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- ci/common/vbmc_setup.yaml | 5 + ci/environments/multinode-3nodes.yaml | 4 +- ci/environments/multinode-containers.yaml | 2 +- .../nic-configs/compute-dvr.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../multiple-nics/nic-configs/compute-dvr.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + .../scenario000-multinode-containers.yaml | 2 +- .../scenario001-multinode-containers.yaml | 2 +- ci/environments/scenario001-standalone.yaml | 1 + .../scenario002-multinode-containers.yaml | 2 +- .../scenario003-multinode-containers.yaml | 2 +- .../scenario004-multinode-containers.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 3 +- .../scenario006-multinode-containers.yaml | 2 +- ci/environments/scenario006-multinode.yaml | 4 +- .../scenario007-multinode-containers.yaml | 2 +- .../scenario008-multinode-containers.yaml | 2 +- ci/environments/scenario009-multinode.yaml | 2 +- .../scenario010-multinode-containers.yaml | 3 +- ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 2 +- common/container-puppet.py | 12 +- common/deploy-steps-tasks.yaml | 60 +-- common/deploy-steps.j2 | 31 +- .../nova_cell_v2_discover_hosts.py | 62 +++ .../nova_statedir_ownership.py | 9 +- ...er_host.py => nova_wait_for_compute_service.py} | 63 +-- .../nova_wait_for_placement_service.py | 29 +- deployed-server/deployed-server-bootstrap-rhel.sh | 4 +- deployed-server/deployed-server-roles-data.yaml | 10 +- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 10 +- ...ometer-agent-notification-container-puppet.yaml | 18 +- deployment/ceph-ansible/ceph-base.yaml | 18 +- deployment/ceph-ansible/ceph-rgw.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 19 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 45 +-- deployment/cinder/cinder-base.yaml | 8 +- .../cinder/cinder-common-container-puppet.yaml | 2 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 10 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 --- deployment/containers-common.yaml | 16 +- deployment/database/mysql-pacemaker-puppet.yaml | 110 +++--- deployment/database/redis-container-puppet.yaml | 18 +- deployment/database/redis-pacemaker-puppet.yaml | 95 +++-- .../logging/fluentd-container-puppet.yaml | 27 +- .../monitoring/sensu-client-container-puppet.yaml | 42 +- .../panko/panko-api-container-puppet.yaml | 28 ++ deployment/glance/glance-api-container-puppet.yaml | 23 ++ deployment/haproxy/haproxy-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 99 ++--- deployment/heat/heat-api-container-puppet.yaml | 2 + deployment/heat/heat-engine-container-puppet.yaml | 10 +- deployment/horizon/horizon-container-puppet.yaml | 8 +- .../ironic/ironic-conductor-container-puppet.yaml | 10 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 3 +- deployment/iscsid/iscsid-container-puppet.yaml | 9 + deployment/kernel/kernel-baremetal-puppet.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 2 + deployment/logging/files/barbican-api.yaml | 2 +- deployment/logging/files/heat-api-cfn.yaml | 2 +- deployment/logging/files/heat-api.yaml | 2 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 2 +- deployment/logging/files/neutron-api.yaml | 2 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 2 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 2 +- deployment/logging/files/nova-placement.yaml | 2 +- deployment/logging/files/opendaylight-api.yaml | 2 +- deployment/logging/files/panko-api.yaml | 2 +- .../logrotate-crond-container-puppet.yaml | 2 + .../manila}/manila-backend-cephfs.yaml | 0 .../manila}/manila-backend-isilon.yaml | 0 .../manila}/manila-backend-netapp.yaml | 0 .../manila}/manila-backend-unity.yaml | 0 .../manila}/manila-backend-vmax.yaml | 0 .../manila}/manila-backend-vnx.yaml | 0 .../manila/manila-share-pacemaker-puppet.yaml | 43 -- deployment/metrics/collectd-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 2 +- deployment/mistral/mistral-base.yaml | 35 -- .../mistral/mistral-executor-container-puppet.yaml | 1 + .../neutron/neutron-api-container-puppet.yaml | 10 + .../neutron/neutron-metadata-container-puppet.yaml | 10 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 91 +++++ .../neutron-ovs-agent-container-puppet.yaml | 1 - .../neutron-ovs-dpdk-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 10 +- .../nova/nova-compute-common-container-puppet.yaml | 11 +- deployment/nova/nova-compute-container-puppet.yaml | 287 +++++++++++--- deployment/nova/nova-ironic-container-puppet.yaml | 35 +- deployment/nova/nova-libvirt-container-puppet.yaml | 7 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 10 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 17 +- deployment/octavia/octavia-base.yaml | 8 +- .../octavia/octavia-deployment-config.j2.yaml | 11 +- .../ovn/ovn-controller-container-puppet.yaml | 13 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 112 +++--- deployment/podman/podman-baremetal-ansible.yaml | 40 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 83 ++-- .../sahara/sahara-engine-container-puppet.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 22 +- .../swift/swift-storage-container-puppet.yaml | 36 +- .../tripleo-firewall-baremetal-puppet.yaml | 60 ++- .../tripleo-packages-baremetal-puppet.yaml | 99 ++++- deployment/undercloud/undercloud-upgrade.yaml | 150 ++++++- deployment/zaqar/zaqar-container-puppet.yaml | 8 + environments/lifecycle/upgrade-prepare.yaml | 5 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 2 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 2 +- environments/manila-vmax-config.yaml | 2 +- environments/manila-vnx-config.yaml | 2 +- environments/metrics/collect-read-rabbitmq.yaml | 15 + .../collectd-standalone.yaml} | 2 +- .../collectd-write-qdr.yaml} | 4 +- environments/neutron-ovs-dvr.yaml | 3 + environments/services-baremetal/octavia.yaml | 5 +- environments/services/neutron-ovn-dpdk.yaml | 7 + environments/services/octavia.yaml | 5 +- environments/services/undercloud-aodh.yaml | 7 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 8 +- .../krb-service-principals/role.role.j2.yaml | 22 +- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 42 +- extraconfig/post_deploy/undercloud_post.yaml | 34 +- .../pre_network/host_config_and_reboot.yaml | 2 +- extraconfig/services/ipaclient.yaml | 67 +++- firstboot/userdata_timesync.yaml | 97 +++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 6 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 9 +- .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 147 +++---- network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 4 +- overcloud-resource-registry-puppet.j2.yaml | 4 + overcloud.j2.yaml | 44 +-- puppet/role.role.j2.yaml | 34 +- puppet/services/metrics/collectd.yaml | 433 --------------------- puppet/services/neutron-plugin-ml2-ovn.yaml | 21 + puppet/services/openvswitch.yaml | 18 + puppet/services/pacemaker.yaml | 107 ++++- ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../add_image_cache_settings-50af5ff56a7d7f75.yaml | 10 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...31122-fix-netapp-env-file-e5aeb0c2bf417d2b.yaml | 6 + ...alApi-name-lower-override-7ea2635877b753c7.yaml | 8 + .../create-br-ex-for-compute-b967312323d45d9b.yaml | 9 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + ...gration_wait_for_vif_plug-6d16da261a138fb8.yaml | 9 + .../notes/mistral_timeout-c00344d5b3d8c4b0.yaml | 6 - .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + ...va_libvirt_num_pcie_ports-f904bf0fb9a7b19e.yaml | 12 + ...ion_target_libvirt_socket-585fa579e5b2704d.yaml | 9 + .../nova_rpc_healthcheck-adbe5307dc04eeac.yaml | 9 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + releasenotes/notes/ovn-dpdk-15e8747068682f91.yaml | 3 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + ...ator-handler-threads.yaml-f5a12d1066b042f1.yaml | 3 + .../notes/update_serial-785ff794ff88fb2e.yaml | 9 + roles/BlockStorage.yaml | 1 + roles/CellController.yaml | 4 +- roles/CephAll.yaml | 2 + roles/CephFile.yaml | 2 + roles/CephObject.yaml | 2 + roles/CephStorage.yaml | 2 + roles/Compute.yaml | 4 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 3 + roles/ComputeHCI.yaml | 2 + roles/ComputeHCIOvsDpdk.yaml | 65 ++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 5 +- roles/ComputeOvsDpdkSriovRT.yaml | 5 +- roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 3 +- roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 2 + roles/HciCephAll.yaml | 2 + roles/HciCephFile.yaml | 2 + roles/HciCephMon.yaml | 2 + roles/HciCephObject.yaml | 2 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 3 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 2 + roles/OpenShiftAllInOne.yaml | 1 + roles/OpenShiftInfra.yaml | 1 + roles/OpenShiftMaster.yaml | 1 + roles/OpenShiftWorker.yaml | 1 + roles/README.rst | 3 + roles/Standalone.yaml | 11 + roles/Telemetry.yaml | 1 + roles_data.yaml | 11 + sample-env-generator/ssl.yaml | 2 +- sample-env-generator/storage.yaml | 3 +- tools/yaml-validate.py | 6 +- tox.ini | 2 +- validation-scripts/all-nodes.sh | 10 +- zuul.d/layout.yaml | 11 - 253 files changed, 2567 insertions(+), 1626 deletions(-)

1 0

paunch 4.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are satisfied to announce the release of: paunch 4.5.0: Utility to launch and manage containers using YAML based configuration data This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. 4.5.0 ^^^^^ New Features * When deploying with Podman, we can disable the container healthchecks by using paunch apply --healtcheck-disabled. * paunch learns 'hostname' wich maps to podman run --hostname and 'extra_hosts' mapping to podman run --add-host. Changes in paunch 4.4.0..4.5.0 ------------------------------ 210c0d6 Quote the health check command argument during a debug with print-cmd. fb76030 Revert "docker/compose: quote health-cmd" a7e28c3 Add upper constraints for testing 1a40ff9 Remove scenario008 jobs dd2da3f Ensure we don't have any trailing "requires" for paunch units cbc9607 Corrected how health check unit and link are removed 835c3d6 Introduce the systemctl module to provide simple systemctl commands wrap 04207b2 Add missing link between healthcheck unit and main service 300a275 Fix doc build 4ef4e63 Add 'hostname' and 'extra_hosts' to podman 8ebca97 Update .gitreview for stable/stein 251ca7e docker/compose: quote health-cmd 086209d Introduce paunch apply --healthcheck-disabled 9c73429 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- paunch/__init__.py | 19 ++++- paunch/builder/base.py | 6 +- paunch/builder/compose1.py | 3 +- paunch/builder/podman.py | 9 ++- paunch/cmd.py | 10 ++- paunch/runner.py | 11 +-- paunch/utils/systemctl.py | 66 ++++++++++++++++++ paunch/utils/systemd.py | 59 +++++++++------- .../healthcheck_disabled-373c8c26e8dc50c6.yaml | 5 ++ ...name-and-extra_hosts-args-27335af0a5694ba6.yaml | 5 ++ test-requirements.txt | 2 - tox.ini | 6 +- zuul.d/layout.yaml | 2 - 20 files changed, 289 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ad110d4..7ad08e8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD @@ -14 +12,0 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=1.18.1 # Apache-2.0

1 0

oslotest 3.8.0 (train)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We jubilantly announce the release of: oslotest 3.8.0: Oslo test framework This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslotest Download the package from: https://pypi.org/project/oslotest Please report issues through: https://bugs.launchpad.net/oslotest/+bugs For more details, please see below. Changes in oslotest 3.7.1..3.8.0 -------------------------------- 52ac194 Sync Sphinx requirement c36485c Replace git.openstack.org URLs with opendev.org URLs f8f6b14 Stop testing mock functionality 1a3490d OpenDev Migration Patch d10fe40 Dropping the py35 testing 72a20f7 Replace openstack.org git:// URLs with https:// 010b47e Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 8 ++++---- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ setup.cfg | 2 +- test-requirements.txt | 3 ++- tox.ini | 4 ++-- 9 files changed, 18 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 88bee06..6b64bc4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13,2 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.5 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.5;python_version>='3.4' # BSD

1 0

renderspec 1.12.0
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are delighted to announce the release of: renderspec 1.12.0: Jinja2 template renderer for generating .spec files The source is available from: https://opendev.org/openstack/renderspec Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.11.1..1.12.0 ------------------------------------ 8083f1e Add contextfunctions 'py2' and 'py3' Diffstat (except docs and test files) ------------------------------------- renderspec/contextfuncs.py | 20 ++++++++++++++++++++ 3 files changed, 54 insertions(+)

1 0

os-api-ref 1.6.2
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We joyfully announce the release of: os-api-ref 1.6.2: Sphinx Extensions to support API reference sites in OpenStack The source is available from: https://opendev.org/openstack/os-api-ref Download the package from: https://tarballs.openstack.org/os-api-ref/ For more details, please see below. Changes in os-api-ref 1.6.1..1.6.2 ---------------------------------- 678238d Add Python 3 Train unit tests 2a3f534 Add support for Sphinx v2.1 f8557cb Update Testing for Train d9d4cb5 Replace git.openstack.org URLs with opendev.org URLs 525eee5 Add support for Sphinx 2.0 72de61e OpenDev Migration Patch c6874c7 trivial: Remove unused attribute Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 5 +- README.rst | 2 +- os_api_ref/__init__.py | 4 -- setup.cfg | 3 +- tox.ini | 8 +-- 8 files changed, 145 insertions(+), 18 deletions(-)

1 0

ansible-role-redhat-subscription 1.0.4
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We are overjoyed to announce the release of: ansible-role-redhat-subscription 1.0.4: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.0.3..1.0.4 -------------------------------------------------------- fceb51c Fix issue with long description by using markdown format Diffstat (except docs and test files) ------------------------------------- setup.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

neutron 12.1.0 (queens)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We are jazzed to announce the release of: neutron 12.1.0: OpenStack Networking This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 12.1.0 ^^^^^^ Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. Changes in neutron 12.0.6..12.1.0 --------------------------------- 05d6f0892f DVR: on new port only send router update on port's host 4091dc33d7 Use status_code instead of status in requests ae542f6854 metadata: use requests for comms with nova api 021008cd69 Reset MAC on unbinding direct-physical port ee85fd74cf Optimize the code that fixes the race condition of DHCP agent. 0fc1d32e52 SRIOV agent: wait VFs initialization on embedded switch create fc0e0a5725 improve dvr port update under large scale deployment 836f79e7b7 Packets getting lost during SNAT with too many connections 9b3e401533 [DVR] Block ARP to dvr router's port instead of subnet's gateway 7891c7cd05 Make OVS controller inactivity_probe configurable 8c7c26c5bd Revert "Pass network's dns_domain to dnsmasq conf" aa0d4f5f64 Use list instead of six.viewkeys to avoid py2 to py3 problems 90dfa1938d Only store segmenthostmapping when enable segment plugin 21f150dc5d Wait to ipv6 accept_ra be really changed by L3 agent 0cd42257aa Allow first address in an IPv6 subnet as valid unicast e02b66a858 Show all SG rules belong to SG in group's details 5505517295 [DHCP] Don't resync network if same port is alredy in cache 698a5e30f4 Remove rootwrap configuration from neutron-keepalived-state-change 8bff653d90 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 265d1cffdd Ensure dvr ha router gateway port binding host 14208661ae Async notify neutron-server for HA states d02b0bef21 Fix handling of network:shared field in policy module c3ee286a55 Fix creating policy rules from subattributes. b5f7bd333e Add missing policy actions to policy.json file a4ab08026e Keep HA ports info for HA router during entire lifecycle 2c6f733933 Get ports query: extract limit and use it only at the end. d075028146 Use dynamic lazy mode for fetching security group rules 8915febaaf objects: avoid deepcopying models in test_db_obj 31320156e4 Revert iptables TCP checksum-fill code b3a12e15f4 Give some HA router case specific resources 861f85056e Move subnet postcommit out of transaction for bulk create 66ac2f0ded OpenDev Migration Patch 03f65602df Fix attribute mismatch in router provider update 8ba5899942 Check master/backup router status in DVR functional tests 0e808b4a6a Set HA failover bridges veth pair devices UP 8693aede07 neutron.conf needs lock_path set for router to operate This change is adding required configuration in neutron.conf to set the lock_path parameter, which was missing in compute-install-ubuntu.rst 39afe0a129 Do not call update_device_list in large sets 72c9a7ef84 Choose random value for HA routes' vr_id 42a5a48c37 DVR: Correctly change MTU in fip namespace 3d434814ef Handle DBConnectionError in skip_if_timeout decorator dd5e89e717 Improve port dhcp Provisioning 2ec575f084 Rename router processing queue code to be more generic f0a88de46f Fix regression with SG read API with empty ruleset 5dbb26b423 Change ovs version we use in fullstack tests df4e0a5394 Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 28 +-- etc/policy.json | 8 + neutron/agent/common/ovs_lib.py | 7 + .../resource_processing_queue.py} | 120 +++++------ neutron/agent/dhcp/agent.py | 229 ++++++++++++++------- neutron/agent/l3/agent.py | 50 ++--- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 6 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 22 +- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++- neutron/agent/linux/dhcp.py | 27 +-- neutron/agent/linux/iptables_manager.py | 22 ++ neutron/agent/linux/keepalived.py | 2 + neutron/agent/metadata/agent.py | 47 +++-- neutron/agent/metadata/driver.py | 10 - neutron/agent/rpc.py | 29 ++- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 54 ++++- neutron/api/rpc/handlers/dhcp_rpc.py | 15 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 6 + neutron/common/utils.py | 7 + neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_dvrscheduler_db.py | 29 ++- neutron/db/l3_hamode_db.py | 31 ++- neutron/db/models/securitygroup.py | 2 +- neutron/db/securitygroups_db.py | 6 +- neutron/ipam/utils.py | 27 ++- neutron/objects/base.py | 66 +++++- neutron/objects/common_types.py | 23 +++ neutron/objects/ports.py | 17 +- neutron/objects/securitygroup.py | 4 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 +- neutron/policy.py | 54 ++++- .../service_providers/driver_controller.py | 7 +- neutron/services/segments/db.py | 27 ++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../test_resource_processing_queue.py} | 65 +++--- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 37 +++- .../mech_sriov/agent/test_eswitch_manager.py | 56 +++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 +- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../service_providers/test_driver_controller.py | 29 +++ playbooks/legacy/neutron-fullstack/run.yaml | 6 +- playbooks/legacy/neutron-functional/run.yaml | 6 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- playbooks/legacy/neutron-rally-neutron/run.yaml | 40 ++-- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 6 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 6 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-ovsfw/run.yaml | 6 +- ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 13 -- ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + requirements.txt | 1 + 99 files changed, 1905 insertions(+), 788 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b2cf2d0158..55210099fa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,0 +13 @@ httplib2>=0.9.1 # MIT +requests!=2.20.0,>=2.14.2 # Apache-2.0

1 0

osprofiler 2.8.1 (train)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We are excited to announce the release of: osprofiler 2.8.1: OpenStack Profiler Library This release is part of the train release series. The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler Please report issues through: https://bugs.launchpad.net/osprofiler/+bugs For more details, please see below. Changes in osprofiler 2.8.0..2.8.1 ---------------------------------- ede0ec4 Bring env OSPROFILER_CONNECTION_STRING into effect 55b0542 Support standalone placement in the devstack Diffstat (except docs and test files) ------------------------------------- devstack/lib/osprofiler | 1 + osprofiler/cmd/commands.py | 13 +++++++++++-- 2 files changed, 12 insertions(+), 2 deletions(-)

1 0

sahara-tests 0.9.0 (stein)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We are stoked to announce the release of: sahara-tests 0.9.0: Sahara tests This release is part of the stein release series. The source is available from: https://opendev.org/openstack/sahara-tests Download the package from: https://tarballs.openstack.org/sahara-tests/ Please report issues through: https://storyboard.openstack.org/#!/project/940 For more details, please see below. 0.9.0 ^^^^^ Prelude ******* Stein test templates are now available, while Ocata test templates have been removed. New Features ************ * Allow to enable boot_from_volume on node group templates when running scenario tests with APIv2. * sahara-scenario now supports testing the S3 API for job binaries and data sources, a feature introduced in Rocky. The code can be enabled using the "s3" feature and various templates now runs an S3-based job too when the feature is enabled from the command line. * A folder with scenario templates for Stein has been added. It is a subset of the templates in the main directory. Deprecation Notes ***************** * The Ocata-specific job templates have been removed. This means that starting from this release Ocata is not supported (it is under Extended Maintenance now). Bug Fixes ********* * Properly handle more use cases when only Keystone v3 is enabled and/or its service URI is missing the /v3 suffix. Changes in sahara-tests 0.8.0..0.9.0 ------------------------------------ 4ed9f32 scenario tests: allow to use boot_from_volume on NGT 1c8cb70 Properly handle authentication with Keystone v3 4c1d164 CLI tests: more testing and Python 3 fixes 3333341 Unblock the gates (fix for bandit, workaround for stestr) 4680504 Scenario tests: add the test templates for Stein baabb6f Replace git.openstack.org URLs with opendev.org URLs e663a7e OpenDev Migration Patch bfe9cc1 doc: update the references to rally commands 45985a7 Replace openstack.org git:// URLs with https:// 5e33889 Scenario test runner: support for S3 testing a5fee8c More Python 3 jobs: scenario (by default) and devstack Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .stestr.conf | 2 +- .zuul.yaml | 64 ++++++++------ README.rst | 2 +- etc/scenario/gate/credentials_s3.yaml.mako | 6 ++ etc/scenario/gate/edp_s3.yaml.mako | 25 ++++++ etc/scenario/gate/spark-1.6.0.yaml.mako | 2 + etc/scenario/simple-testcase.yaml | 8 +- .../notes/more-auth-fixes-9ba23ceb54ba042a.yaml | 5 ++ ...scenario-boot-from-volume-a87c680b03f560a0.yaml | 5 ++ .../notes/scenario-s3-20d41440d84af3a9.yaml | 8 ++ .../test-templates-stein-751a4344bfcca652.yaml | 11 +++ requirements.txt | 1 + roles/run-sahara-scenario/defaults/main.yaml | 3 +- roles/run-sahara-scenario/tasks/main.yaml | 9 +- roles/setup-sahara-scenario-env/defaults/main.yaml | 1 + roles/setup-sahara-scenario-env/tasks/main.yaml | 4 + .../setup-sahara-scenario-env/tasks/setup_s3.yaml | 29 +++++++ .../templates/sahara_scenario_conf.ini.j2 | 7 ++ .../scenario/defaults/ambari-2.4.yaml.mako | 3 + .../scenario/defaults/ambari-2.5.yaml.mako | 3 + .../scenario/defaults/ambari-2.6.yaml.mako | 3 + .../scenario/defaults/cdh-5.11.0.yaml.mako | 5 +- .../scenario/defaults/cdh-5.13.0.yaml.mako | 3 + .../scenario/defaults/credentials_s3.yaml.mako | 6 ++ .../scenario/defaults/mapr-5.2.0.mrv2.yaml.mako | 3 + .../scenario/defaults/pike/cdh-5.11.0.yaml.mako | 2 +- .../scenario/defaults/queens/cdh-5.11.0.yaml.mako | 2 +- .../scenario/defaults/rocky/ambari-2.4.yaml.mako | 3 + .../scenario/defaults/rocky/ambari-2.5.yaml.mako | 3 + .../scenario/defaults/rocky/ambari-2.6.yaml.mako | 3 + .../scenario/defaults/rocky/cdh-5.11.0.yaml.mako | 5 +- .../scenario/defaults/rocky/cdh-5.13.0.yaml.mako | 3 + .../scenario/defaults/rocky/cdh-5.9.0.yaml.mako | 3 + .../defaults/rocky/mapr-5.2.0.mrv2.yaml.mako | 3 + .../ambari-2.3.yaml.mako} | 4 +- .../scenario/defaults/stein/ambari-2.4.yaml.mako | 72 ++++++++++++++++ .../scenario/defaults/stein/ambari-2.5.yaml.mako | 72 ++++++++++++++++ .../scenario/defaults/stein/ambari-2.6.yaml.mako | 72 ++++++++++++++++ .../cdh-5.11.0.yaml.mako} | 11 ++- .../scenario/defaults/stein/cdh-5.13.0.yaml.mako | 97 ++++++++++++++++++++++ .../defaults/{ocata => stein}/cdh-5.9.0.yaml.mako | 3 + .../{ocata => stein}/mapr-5.2.0.mrv2.yaml.mako | 3 + .../spark-2.2.yaml.mako} | 6 +- .../scenario/defaults/stein/spark-2.3.yaml.mako | 37 +++++++++ .../storm-1.1.0.yaml.mako} | 6 +- .../scenario/defaults/stein/storm-1.2.0.yaml.mako | 37 +++++++++ .../{ocata => stein}/vanilla-2.7.1.yaml.mako | 0 .../defaults/stein/vanilla-2.7.5.yaml.mako | 84 +++++++++++++++++++ .../defaults/stein/vanilla-2.8.2.yaml.mako | 84 +++++++++++++++++++ .../scenario/defaults/storm-1.2.0.yaml.mako | 2 +- test-requirements.txt | 1 + tools/gate/scenario/dsvm-scenario-rc | 6 +- tox.ini | 8 +- 72 files changed, 1129 insertions(+), 101 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c0f8a5d..b5a7778 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,0 +8 @@ Mako>=0.4.0 # MIT +botocore>=1.5.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 83d727e..c99d2d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 +bandit!=1.6.0

1 0

oslo.upgradecheck 0.3.0 (train)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We contentedly announce the release of: oslo.upgradecheck 0.3.0: Common code for writing OpenStack upgrade checks This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.upgradecheck Download the package from: https://pypi.org/project/oslo.upgradecheck Please report issues through: https://bugs.launchpad.net/oslo.upgradecheck/+bugs For more details, please see below. 0.3.0 ^^^^^ New Features * oslo.upgradecheck now supports the command line flag "--json" to have the upgrade check results output in a compact, machine readable JSON format. The default output without this flag remains a human readable table of the results. Changes in oslo.upgradecheck 0.2.1..0.3.0 ----------------------------------------- 3a92c6e Enable JSON results output 1878153 Sync Sphinx requirement 0430df3 Replace git.openstack.org URLs with opendev.org URLs d723930 OpenDev Migration Patch 41f47ae Dropping the py35 testing b1a3426 Update master for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- HACKING.rst | 2 +- README.rst | 6 +-- oslo_upgradecheck/upgradecheck.py | 58 +++++++++++++++------- releasenotes/notes/.placeholder | 0 .../notes/json-output-78a9e19588b7b1e1.yaml | 7 +++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ setup.cfg | 1 - test-requirements.txt | 3 +- tox.ini | 2 +- 12 files changed, 66 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 270a8ea..cf3bc33 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ stestr>=2.0.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

pbr 5.4.0
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We eagerly announce the release of: pbr 5.4.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 5.4.0 ^^^^^ New Features * Add an option to print only the version of a package Example: $ pbr info -s pkgname 1.2.3 Changes in pbr 5.3.1..5.4.0 --------------------------- c715db6 option to print only the version of a package Diffstat (except docs and test files) ------------------------------------- pbr/cmd/main.py | 9 +++++++-- releasenotes/notes/cmd-e6664dcbd42d3935.yaml | 11 +++++++++++ 2 files changed, 18 insertions(+), 2 deletions(-)

1 0

python-qinlingclient 2.2.0 (train)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We are gleeful to announce the release of: python-qinlingclient 2.2.0: python-qinlingclient This release is part of the train release series. The source is available from: https://opendev.org/openstack/python-qinlingclient Download the package from: https://pypi.org/project/python-qinlingclient Please report issues through: https://storyboard.openstack.org/#!/project/926 For more details, please see below. Changes in python-qinlingclient 2.1.0..2.2.0 -------------------------------------------- a3ce167 Update the Launchpad to Storyboard fb58059 Add doc/requirements.txt to releasenotes tox environment 0649ad4 Update json module to jsonutils 3ffe4d0 Fix unit test failure 36d3987 Fix the filter description for resource list 0d219b1 Replace git.openstack.org URLs with opendev.org URLs 52cab5a OpenDev Migration Patch 76d8811 Dropping the py35 testing b74e891 Update master for stable/stein 1d4dcfd add python 3.7 unit test job b5d3383 Change openstack-dev to openstack-discuss fbc139f Add Python 3.6 classifier to setup.cfg 6737ae7 add python 3.6 unit test job Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 2 +- CONTRIBUTING.rst | 2 +- README.rst | 2 +- qinlingclient/osc/v1/base.py | 28 ++++++++++++++++++++-- qinlingclient/osc/v1/function.py | 16 ++++++------- qinlingclient/osc/v1/function_alias.py | 1 + qinlingclient/osc/v1/function_execution.py | 1 + qinlingclient/osc/v1/job.py | 1 + qinlingclient/osc/v1/webhook.py | 1 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++++ setup.cfg | 4 ++-- setup.sh | 2 +- tox.ini | 9 ++++--- 22 files changed, 91 insertions(+), 46 deletions(-)

1 0

oslo.config 6.11.0 (train)
by no-reply＠openstack.org 04 Jul '19

04 Jul '19

We joyfully announce the release of: oslo.config 6.11.0: Oslo Configuration API This release is part of the train release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 6.10.0..6.11.0 ------------------------------------- 0f29826 Remove '.testr.conf' 2610dff Switch to sphinxcontrib-apidoc a2e8aa9 Deprecate ConfigFilter dc9b711 Add unit tests for validator 0c734ac Add special handling for keystone_authtoken group Diffstat (except docs and test files) ------------------------------------- .testr.conf | 4 -- lower-constraints.txt | 2 +- oslo_config/cfgfilter.py | 7 +++ oslo_config/sphinxext.py | 1 + oslo_config/validator.py | 22 +++++-- test-requirements.txt | 2 +- 21 files changed, 180 insertions(+), 127 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index dab06dd..ce22df6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27 +27 @@ sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD -mock>=2.0.0 # BSD +mock>=3.0.0 # BSD

1 0

neutron-lib 1.28.0 (train)
by no-reply＠openstack.org 03 Jul '19

03 Jul '19

We are gleeful to announce the release of: neutron-lib 1.28.0: Neutron shared routines and utilities This release is part of the train release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 1.28.0 ^^^^^^ New Features ************ * A new exception named "NetworkAddressScopeAffinityError" has been added in neutron_lib/exceptions/address_scope.py. This is to be raised by consumers when network / address scope affinity constraints are violated on subnet creation and subnet pool updates. * Added two new parameters in "portbindings.port.vif_details": * "connectivity": a string informing about the back-end connectivity level (l2, l3 or not specified). * "bound_drivers": a dictionary mapping the binding level to the driver name. * The "SqlFixture" and "StaticSqlFixture" are now available in "neutron_lib.fixtures". * The "subnet-dns-publish-fixed-ip" API extension is added. It adds the "dns_publish_fixed_ip" attribute to subnets, indicating whether to publish DNS records for fixed IPs from this subnet in an external DNS service. For details see [bug 1784879 (https://launchpad.net/bugs/1784879) * Add "ETHERTYPE_RARP" constant which represents RARP protocol to support live-migration. Bug Fixes ********* * Static route validator should verify that routed CIDR isn't a loopback. Loopback addresses should not be routable. Bug: 1834012 (https://bugs.launchpad.net/neutron/+bug/1834012) Other Notes *********** * Parent resource mapping was added to "EXT_PARENT_RESOURCE_MAPPING" in "neutron_lib.services.constants" for the "l3-conntrack-helper" extension. Changes in neutron-lib 1.27.0..1.28.0 ------------------------------------- 7a58374 make sql fixtures public bf810d2 Update flake8 style enforcement d441518 Introduce NetworkAddressScopeAffinityError 8417717 Loopback address routing should be invalid c26573f Add new vif_details parameters d2cabd9 Fix subnet_dns_publish_fixed_ip extension 56e0979 Add 'dns_publish_fixed_ip' attribute to Subnet 7d11cd6 Add rarp protocol for neutron constants 7a0a41b Add conntrack helper to parent resource mapping 28e71cb placement client: fix routed prov networks working c977378 [api-ref] Update info about internal_ip_address in FIP port forwarding e02c4b2 [api-ref] Add short warning about ANY IP address in allowed address pair 2f9c969 fix doc periodic log url Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/parameters.yaml | 27 ++++++-- api-ref/source/v2/ports.inc | 7 ++ .../v2/samples/subnets/subnet-create-response.json | 1 + .../v2/samples/subnets/subnet-show-response.json | 1 + .../v2/samples/subnets/subnet-update-response.json | 1 + .../subnets/subnets-create-bulk-response.json | 2 + .../v2/samples/subnets/subnets-list-response.json | 2 + api-ref/source/v2/subnets.inc | 16 +++++ lower-constraints.txt | 6 +- neutron_lib/api/definitions/__init__.py | 2 + neutron_lib/api/definitions/base.py | 1 + neutron_lib/api/definitions/portbindings.py | 7 ++ .../api/definitions/subnet_dns_publish_fixed_ip.py | 80 ++++++++++++++++++++++ neutron_lib/api/validators/__init__.py | 2 + neutron_lib/constants.py | 1 + neutron_lib/exceptions/address_scope.py | 5 ++ neutron_lib/fixture.py | 4 +- neutron_lib/placement/client.py | 7 +- neutron_lib/plugins/constants.py | 1 + neutron_lib/services/constants.py | 3 +- .../test_subnet_dns_publish_fixed_ip.py | 21 ++++++ ...ress-scope-affinity-error-8f6b4493a92142d4.yaml | 7 ++ ...r-parent-resource-mapping-95a4a2cb6f6536fe.yaml | 6 ++ ...ew-vif-details-parameters-71e70ab5e7c26c45.yaml | 9 +++ .../public-sql-fixtures-35d0aa74a368e217.yaml | 4 ++ ...bnet-dns-publish-fixed-ip-031d78bbc85a419e.yaml | 8 +++ .../support-rarp-protocol-44f5c67784e74db4.yaml | 4 ++ ...ator_check_route_loopback-bc2166b10a754c77.yaml | 7 ++ tox.ini | 6 +- 36 files changed, 250 insertions(+), 20 deletions(-)

1 0

neutron 14.0.2 (stein)
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We are delighted to announce the release of: neutron 14.0.2: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.0.2 ^^^^^^ New Features ************ * Added support for custom scripts used to kill external processes managed by neutron agents, such as "dnsmasq" or "keepalived". Such custom scripts, if defined, will be used instead default "kill" command to kill such external processes. Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. Bug Fixes ********* * Previously a network's "dns_domain" attribute was ignored by the DHCP agent. With this release, OpenStack deployments using Neutron's DHCP agent will be able to specify a per network "dns_domain" and have instances configure that domain in their dns resolver configuration files (Linux's /etc/resolv.conf) to allow for local partial DNS lookups. The per-network "dns_domain" value will override the DHCP agent's default "dns_domain" configuration value. Note that it's also possible to update a network's "dns_domain", and that new value will be propogated to new instances or when instances renew their DHCP lease. However, existing leases will live on with the old "dns_domain" value. Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. Changes in neutron 14.0.1..14.0.2 --------------------------------- e3330b10a9 Release notes for dns_domain behavioural changes fc8861d9ef Join on explcit relationship paths 4cd7ba7fde DVR: on new port only send router update on port's host fb2a4c90a1 Revert "Pass network's dns_domain to dnsmasq conf" ea3aafcad7 Updating bgp driver to match what neutron-dynamic-routing supports e6cab0f414 rbac: Catch correct exception for duplicated entry 05804a325e Optimize the code that fixes the race condition of DHCP agent. a48f157db5 SRIOV agent: wait VFs initialization on embedded switch create aa7893bc1b Reset MAC on unbinding direct-physical port 64fb6dd3e2 Switch to new engine facade for Route objects 702d4b3214 Add kill hooks for external processes cb172b4c20 improve dvr port update under large scale deployment a7c9cc870e [DVR] Block ARP to dvr router's port instead of subnet's gateway 690e1824a0 Use list instead of six.viewkeys to avoid py2 to py3 problems 62e0bee820 Support multiple external networks in L3 agent dc80a2c4e6 Wait to ipv6 accept_ra be really changed by L3 agent acd081c298 Show all SG rules belong to SG in group's details 5339544a0d [Functional tests] Test keepalived in namespaces 6e661ecd2d Make OVS controller inactivity_probe configurable 89e9c45e86 [DHCP] Don't resync network if same port is alredy in cache fe4fc33f1c Add update_id for ResourceUpdate 49af575eff Allow first address in an IPv6 subnet as valid unicast 45135364f9 Remove rootwrap configuration from neutron-keepalived-state-change eded5d2d6a Packets getting lost during SNAT with too many connections fef6b12bfe Ensure dvr ha router gateway port binding host 68cb1239d2 Async notify neutron-server for HA states db2d3895d1 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 9fc95ca512 Change curl to osc for listing resource provider inventories 5c821a3fcf Keep HA ports info for HA router during entire lifecycle 70e3790210 List ha router count should not include dvr local router aba4b16ca6 Add RHEL8 platform-python to the L3 rootwrap filters 3b8f7a0179 Don't count ports with inactive bindings as serviceable dvr ports 5d0c27e836 Give some HA router case specific resources 3ed45a4584 Fix handling of network:shared field in policy module 83231738ea Fix creating policy rules from subattributes. 06a91226e8 Fix bandit and sphinx requirements for stable/stein fd88d5c1aa Move subnet postcommit out of transaction for bulk create fe09b40d57 Get ports query: extract limit and use it only at the end. 72077c79da Not process port forwarding if no snat functionality dde99aa719 Revert iptables TCP checksum-fill code 78555ee346 Check master/backup router status in DVR functional tests 4e43ce5414 Set HA failover bridges veth pair devices UP c9f98e63e3 OpenDev Migration Patch dc3a314674 Avoid fullstack QoS tests to handle other test ports ee682138b9 DVR: Correctly change MTU in fip namespace 2aa200bdb9 Choose random value for HA routes' vr_id d7764064d0 Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 34 ++--- etc/neutron/rootwrap.d/dhcp.filters | 2 + etc/neutron/rootwrap.d/dibbler.filters | 4 + etc/neutron/rootwrap.d/l3.filters | 12 ++ etc/rootwrap.conf | 2 +- neutron/agent/common/ovs_lib.py | 7 + neutron/agent/common/resource_processing_queue.py | 22 +++ neutron/agent/dhcp/agent.py | 12 +- neutron/agent/l3/agent.py | 33 +++-- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 6 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/extensions/port_forwarding.py | 4 + neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 25 +++- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++-- neutron/agent/linux/dhcp.py | 29 ++-- neutron/agent/linux/external_process.py | 10 +- neutron/agent/linux/iptables_manager.py | 21 +++ neutron/agent/linux/keepalived.py | 3 + neutron/agent/metadata/driver.py | 14 +- neutron/api/rpc/handlers/dhcp_rpc.py | 14 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 4 + neutron/common/utils.py | 7 + neutron/conf/agent/common.py | 9 ++ neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/conf/policies/port.py | 31 ++++- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_agentschedulers_db.py | 12 +- neutron/db/l3_dvrscheduler_db.py | 38 +++--- neutron/db/l3_hamode_db.py | 31 ++++- neutron/db/rbac_db_mixin.py | 4 +- neutron/db/securitygroups_db.py | 4 +- neutron/ipam/utils.py | 25 ++-- neutron/objects/subnet.py | 2 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 ++- neutron/policy.py | 54 +++++++- .../functional/agent/linux/test_keepalived.py | 20 ++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../agent/l3/extensions/test_port_forwarding.py | 16 +++ .../unit/agent/linux/test_external_process.py | 43 ++++++ .../mech_sriov/agent/test_eswitch_manager.py | 56 ++++++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- .../legacy/neutron-tempest-postgres-full/run.yaml | 6 +- .../neutron-tempest-with-os-ken-master/run.yaml | 6 +- .../add-custom-kill-scripts-af405ba49142d59c.yaml | 7 + ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 14 +- ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + test-requirements.txt | 2 +- 93 files changed, 1330 insertions(+), 514 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c1f849f4c5..3aca6003e0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0

ansible-role-container-registry 1.1.0
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We eagerly announce the release of: ansible-role-container-registry 1.1.0: ansible-container-registry - Ansible role to deploy a container registry The source is available from: https://opendev.org/openstack/ansible-role-container-registry Download the package from: https://tarballs.openstack.org/ansible-role-container-registry/ For more details, please see below. Changes in ansible-role-container-registry 1.0.0..1.1.0 ------------------------------------------------------- 9bf5868 Add docker login support 80af0d2 Fix docker network option condition b54b8ac Update to opendev 1aee1a7 OpenDev Migration Patch 0cc1894 Improve condition checking about docker registry config 70a9413 docker: add reset_connection df0ca83 Fix become for tasks and handlers 30cdb28 Update min tox version to 2.0 2cba7e3 Fix linting issues 61760f2 docker: check if ftype exists 502ee19 Reduce the number of tripleo jobs 88c26d2 Allow to skip docker reconfiguration 5e1ba52 Add xfs ftype check during install 693c4f3 use include_tasks instead of include f0fab9b fix tox python3 overrides 119f525 Remove release-openstack-server a6263fe fix tox python3 overrides b33f893 Correctly set registry_pkg_manager d7e0e8f Add missing quotes in shell task. 4f89546 Add support for dnf Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 7 ++ ci-scripts/ansible-lint.sh | 4 +- defaults/main.yml | 2 + handlers/main.yml | 5 +- setup.cfg | 2 +- tasks/docker-distribution.yml | 5 +- tasks/docker-login.yml | 11 ++ tasks/docker-update.yml | 76 ++++++++----- tasks/docker.yml | 255 +++++++++++++++++++++++++----------------- tasks/main.yml | 4 +- tox.ini | 11 +- zuul.d/layout.yaml | 5 +- 13 files changed, 249 insertions(+), 140 deletions(-)

1 0

ansible-role-tripleo-modify-image 1.1.0
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We joyfully announce the release of: ansible-role-tripleo-modify-image 1.1.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.0.0..1.1.0 --------------------------------------------------------- 6dab9dd Fix dnf repoquery regression b25fe25 Allow devs to modify images with Python directories 8b366d2 Makes buildah retries more verbose 9f112a5 dev_install: fetch git/gerrit from opendev 60cb00d yum_update.sh: don't fail when plugin package is unavailable for install 8fa6dd7 Use 'dnf repoquery' when system uses DNF 367f3e0 Small yum_update.sh improvements f33cad7 Revert "yum_update.sh improvements" c475c83 yum_update.sh improvements f1dfdc6 OpenDev Migration Patch 012209a Convert readme to rst c0bcc3c Don't print commands during yum update 9014df9 Speed up execution time of yum_update.sh 8f0c6bf Fix dev install (yum -y...) 410408e Ported tripleo-modify-image to py3 b541c5e Run all linters via pre-commit e60ad5d yum_update_buildah: add retry x3 8b82f78 Track obsoleted packages replacements for updates d7d7592 Mount in yum_update.sh when running it 8dba05a Append to the tag on buildah commit f77b9a2 yum_update: cp the script in /tmp before buildah cp 0bdc068 Update hacking version to latest 9dac7d6 Use buildah commands for yum update to improve speed d67f1ef Replace scenario001-multinode with scenario001-standalone 08903c0 Fix line length for lint 970708d Use a tempfile for the modified Dockerfile 97b54c3 Set WORKDIR / in the dockerfiles 618d3ab Add dev mode install playbook for source installs 2cdc844 Use with_list for Ansible < 2.5 compatibility 20cefdf Update min tox version to 2.0 48a56c1 Add retries to docker_image_facts eb2b92f fix tox python3 overrides 04b52bd Remove release-openstack-server 79aed38 fix tox python3 overrides c9d0857 Remove compare_host_packages strategy 96b3971 Cleanup modify directory 821fcbf Don't use copy module for /etc/yum.repos.d b58b916 Don't yum update files which are not installed b47b569 Fix local (non-root) docker build support 678b93f Fix 'too many arguments' error 9d4b320 Install yum priorities to containers before update bca80b3 Fix type in variable which blocked updates 07a2358 Fix the roles_path to actually work in a venv 7b587fe Only do yum update when needed a2229e7 Add Buildah support Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 + .gitreview | 2 +- .pre-commit-config.yaml | 40 ++++++++ .yamllint | 7 ++ LICENSE | 1 - README.md | 114 --------------------- README.rst | 233 ++++++++++++++++++++++++++++++++++++++++++ ansible.cfg | 3 +- defaults/main.yml | 5 +- files/compare-package-json.py | 33 ------ files/dev_install.sh | 48 +++++++++ files/rpm_install.sh | 2 +- files/yum_update.sh | 51 +++++++-- meta/main.yml | 8 +- setup.cfg | 8 +- setup.py | 1 + tasks/dev_install.yml | 47 +++++++++ tasks/get_original_user.yml | 26 +++++ tasks/main.yml | 1 + tasks/modify_image.yml | 27 +++-- tasks/precheck.yml | 10 ++ tasks/rpm_install.yml | 19 ++-- tasks/yum_update.yml | 83 +-------------- tasks/yum_update_buildah.yml | 84 +++++++++++++++ tasks/yum_update_docker.yml | 57 +++++++++++ templates/Dockerfile-dev.j2 | 15 +++ templates/Dockerfile-rpm.j2 | 1 + templates/Dockerfile-yum.j2 | 8 +- test-requirements.txt | 2 +- tox.ini | 37 ++++--- vars/main.yml | 5 + zuul.d/layout.yaml | 6 +- 32 files changed, 691 insertions(+), 295 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c3ed418..94dba19 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +pre-commit # MIT

1 0

ansible-role-chrony 1.0.0
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We are satisfied to announce the release of: ansible-role-chrony 1.0.0: ansible-role-chrony - Ansible chrony role This is the first release of ansible-role-chrony. The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony f3352cd63407d136ececbd45a5eddcef582c8f00..1.0.0 ------------------------------------------------------------------------------ 494f3c4 Update to opendev bece846 OpenDev Migration Patch 068668b Force chrony restart on config change f1f09db Change openstack-dev to openstack-discuss 9baecd0 Move default values to defaults 20f7d9f Add tripleo-standalone for coverage aa3f21c Remove setup.py check from pep8 job 1c49217 Update min tox version to 2.0 ed0d7e3 Fix missing folders 3257982 Fix .gitreview e1d3b78 Add zuul configuration f9330ac Remove zuul configuration 9bf57a5 Fix gitignore

1 0

octavia-tempest-plugin 1.1.0 (train)
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We eagerly announce the release of: octavia-tempest-plugin 1.1.0: Tempest plugin for Octavia This release is part of the train release series. The source is available from: https://opendev.org/openstack/octavia-tempest-plugin Download the package from: https://tarballs.openstack.org/octavia-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia-tempest-plugin 1.0.0..1.1.0 ---------------------------------------------- 070297f Save amphora logs in gate 0f6c647 Fix tests not honoring the provider setting. 7c5b901 Fix the IPv6 tests for no ipv6-public-subnet 980f5de Replace git.openstack.org URLs with opendev.org URLs 2b9432f Fix ipv6 multinode gate (use private subnet) 564facf Add TLS Barbican jobs against stable branches 9777f11 Drop requirement on octavia-lib eed1c6b OpenDev Migration Patch ccf5254 Add octavia-v2-dsvm-scenario-ubuntu-xenial job cc7dbcd Add config option for pool algorithms c2e1216 Add iptables-based active/standby scenario test 37c9302 Add the provider flavor capabilities service client. 9028bd8 Run octavia-tempest-plugin against stable/stein bdf01df Fix octavia-tempest-plugin releasenotes theme 3bfe791 Adapt protocol and skip tests depending on config Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- README.rst | 2 +- octavia_tempest_plugin/clients.py | 5 + octavia_tempest_plugin/common/constants.py | 2 + octavia_tempest_plugin/config.py | 25 +- .../load_balancer/v2/flavor_capabilities_client.py | 76 ++++++ .../v2/test_active_standby_iptables.py | 303 +++++++++++++++++++++ .../barbican_scenario/v2/test_tls_barbican.py | 4 +- playbooks/act_stby_iptables/pre.yaml | 16 ++ releasenotes/source/conf.py | 47 ++-- requirements.txt | 1 - tox.ini | 6 +- zuul.d/jobs.yaml | 124 ++++++++- zuul.d/projects.yaml | 23 ++ 23 files changed, 641 insertions(+), 64 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c9f839c..3b78bc3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -octavia-lib>=1.0.0 # Apache-2.0

1 0

neutron 13.0.4 (rocky)
by no-reply＠openstack.org 01 Jul '19

01 Jul '19

We are psyched to announce the release of: neutron 13.0.4: OpenStack Networking This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 13.0.4 ^^^^^^ Upgrade Notes ************* * The first address in an IPv6 network is now a valid, usable IP for routers. It had previously been reserved, but now can be assigned to a router so that an IPv6 address ending in "::" could be a valid default route. * During the dependency resolution procedure, the code that loads service plugins was refactored to not raise an exception if one plugin is configured multiple times, with the last one taking effect. This is a change from the previous behavior. Bug Fixes ********* * Adds the "router" service plugin to the "port_forwarding" service plugin required list. For more info see https://bugs.launchpad.net/neutron/+bug/1809238 Other Notes *********** * In order to improve heavy load ovs agent restart success rate, instead a retry or fullsync, the native driver "of_connect_timeout" and "of_request_timeout" are now set to 300s. The value does not have side effect for the regular pressure ovs agent. * If an instance port is under a dvr router, and the port already has binding port forwarding(s). Neutron will no longer allow binding a floating IP to that port again, because dvr floating IP traffic rules will break the existing port forwarding functionality. * A new option "[ovs] of_inactivity_probe" has been added to allow changing the inactivity probe interval when using the OVS ML2 agent with the native OpenFlow driver. Operators can increase this if they are experiencing OpenFlow timeouts. The default value is 10 seconds. * Neutron now supports having service plugins require other plugin(s) as dependencies. For example, the "port_forwarding" service plugin requires the "router" service plugin to achieve full functionality. A new list, "required_service_plugins", was added to each service plugin so the required dependencies of each service plugin can be initialized. If one service plugin requires another, but the requirement is not set in the config file, neutron will now initialize it to the plugin directory. Changes in neutron 13.0.3..13.0.4 --------------------------------- feab3462b2 Release notes for dns_domain behavioural changes b1b0937eb4 DVR: on new port only send router update on port's host 3842bb21af Reset MAC on unbinding direct-physical port 1146526304 Optimize the code that fixes the race condition of DHCP agent. b681fe6754 SRIOV agent: wait VFs initialization on embedded switch create 8ed443ca66 Switch to new engine facade for Route objects 3e55534795 Make OVS controller inactivity_probe configurable cace923951 improve dvr port update under large scale deployment c80598dd58 Revert "Pass network's dns_domain to dnsmasq conf" 1dd35515d4 Packets getting lost during SNAT with too many connections 6af5ea2afc [DVR] Block ARP to dvr router's port instead of subnet's gateway 5424bdc38b Use list instead of six.viewkeys to avoid py2 to py3 problems 7f8c446d5f Only store segmenthostmapping when enable segment plugin 1559c79594 Wait to ipv6 accept_ra be really changed by L3 agent b84b9f2dcc Add port_forwarding to devstack plugin 663c727f99 Allow first address in an IPv6 subnet as valid unicast 252d80058c Show all SG rules belong to SG in group's details 946faaf361 [DHCP] Don't resync network if same port is alredy in cache 9a498d993f Remove rootwrap configuration from neutron-keepalived-state-change d908227050 Use six.viewkeys instead of dict.keys to avoid py2 to py3 problems 2f91450fcf Ensure dvr ha router gateway port binding host 88a362df09 Async notify neutron-server for HA states 0bac076056 Fix handling of network:shared field in policy module 8e777c681f Fix creating policy rules from subattributes. 13cb3cd34c Keep HA ports info for HA router during entire lifecycle d3c757134d Don't count ports with inactive bindings as serviceable dvr ports cd53b51732 Use dynamic lazy mode for fetching security group rules 9b2dc84959 Not process port forwarding if no snat functionality 04e995be98 Revert iptables TCP checksum-fill code d9ff4aee20 Get ports query: extract limit and use it only at the end. d080a805c1 Move subnet postcommit out of transaction for bulk create 1214e59cc2 OpenDev Migration Patch c50bdf2329 Give some HA router case specific resources 8280d75723 Check master/backup router status in DVR functional tests 827d6434d7 Set HA failover bridges veth pair devices UP bdeae63365 neutron.conf needs lock_path set for router to operate This change is adding required configuration in neutron.conf to set the lock_path parameter, which was missing in compute-install-ubuntu.rst 5d705468de Do not call update_device_list in large sets fb0c062899 Avoid loading same service plugin more than once 2331e5fefc Add dependency for service plugin 087e8f6bee Prevent bind fip to port has port forwarding 21bbe03619 Make test service_plugins override simple ee2ed681c4 Choose random value for HA routes' vr_id f71767bd02 DVR: Correctly change MTU in fip namespace 14ed5515b9 Handle DBConnectionError in skip_if_timeout decorator 0e71c29155 Fix regression with SG read API with empty ruleset 8f93410716 Not set fip to ERROR if it exists on device ef8ecef922 Set router_id if floating IP has port_forwardings 26a9765afb Change default local ovs connection timeout Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 42 +++--- devstack/lib/fip_port_forwarding | 4 + devstack/plugin.sh | 4 + etc/policy.json | 8 +- neutron/agent/common/ovs_lib.py | 7 + neutron/agent/dhcp/agent.py | 12 +- neutron/agent/l3/agent.py | 2 +- neutron/agent/l3/dvr_edge_ha_router.py | 2 +- neutron/agent/l3/dvr_edge_router.py | 13 +- neutron/agent/l3/dvr_fip_ns.py | 9 +- neutron/agent/l3/dvr_local_router.py | 7 +- neutron/agent/l3/extensions/port_forwarding.py | 4 + neutron/agent/l3/ha.py | 3 + neutron/agent/l3/ha_router.py | 22 ++- neutron/agent/l3/keepalived_state_change.py | 2 - neutron/agent/l3/router_info.py | 26 ++-- neutron/agent/linux/dhcp.py | 28 ++-- neutron/agent/linux/ip_lib.py | 1 + neutron/agent/linux/iptables_manager.py | 21 +++ neutron/agent/linux/keepalived.py | 2 + neutron/agent/metadata/driver.py | 10 -- neutron/agent/rpc.py | 29 +++- neutron/api/rpc/handlers/dhcp_rpc.py | 15 +- neutron/api/rpc/handlers/l3_rpc.py | 11 +- neutron/common/constants.py | 6 + neutron/common/utils.py | 7 + neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 +- neutron/db/db_base_plugin_v2.py | 12 +- neutron/db/ipam_backend_mixin.py | 11 +- neutron/db/ipam_pluggable_backend.py | 5 + neutron/db/l3_db.py | 21 +++ neutron/db/l3_dvrscheduler_db.py | 31 ++-- neutron/db/l3_hamode_db.py | 31 +++- neutron/db/models/securitygroup.py | 2 +- neutron/db/securitygroups_db.py | 6 +- neutron/ipam/utils.py | 27 ++-- neutron/manager.py | 76 ++++++---- neutron/objects/base.py | 54 ++++++- neutron/objects/common_types.py | 23 +++ neutron/objects/securitygroup.py | 4 +- neutron/objects/subnet.py | 2 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 4 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 50 ++++++- .../agent/openflow/native/ovs_bridge.py | 1 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 7 +- neutron/plugins/ml2/plugin.py | 21 ++- neutron/policy.py | 54 ++++++- .../services/portforwarding/common/exceptions.py | 6 + neutron/services/portforwarding/pf_plugin.py | 24 ++++ neutron/services/segments/db.py | 27 +++- .../l3_router/test_l3_dvr_router_plugin.py | 4 +- .../portforwarding/test_port_forwarding.py | 23 ++- .../agent/l3/extensions/test_port_forwarding.py | 16 +++ .../test_expose_port_forwarding_in_fip.py | 127 ++++++++++++++++- .../mech_sriov/agent/test_eswitch_manager.py | 56 ++++++++ .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 21 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 15 +- .../legacy/neutron-fullstack-python35/run.yaml | 6 +- .../legacy/neutron-fullstack-with-uwsgi/run.yaml | 6 +- playbooks/legacy/neutron-fullstack/run.yaml | 6 +- .../legacy/neutron-functional-python35/run.yaml | 6 +- .../legacy/neutron-functional-with-uwsgi/run.yaml | 6 +- playbooks/legacy/neutron-functional/run.yaml | 6 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 8 +- .../legacy/neutron-grenade-multinode/run.yaml | 8 +- playbooks/legacy/neutron-grenade/run.yaml | 8 +- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 6 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 6 +- .../neutron-tempest-iptables_hybrid/run.yaml | 6 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 6 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 6 +- .../legacy/neutron-tempest-postgres-full/run.yaml | 6 +- .../neutron-tempest-with-ryu-master/run.yaml | 6 +- ...change-of-default-timeout-b09d11683526e27d.yaml | 7 + .../notes/dns_domain-6f0e628aeb3c650c.yaml | 14 +- .../fip-binding-limitation-1d2509950847b085.yaml | 7 + ...v6_first_ip_address_valid-cd94b47bdcc642cf.yaml | 6 + ...tivity-probe-configurable-39d669014d961c5c.yaml | 7 + ...service-plugin-dependency-c8bf620b2526b869.yaml | 22 +++ 108 files changed, 1719 insertions(+), 533 deletions(-)

1 0