October 2020 - Release-announce - lists.openstack.org

karbor-dashboard 1.5.1 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are jazzed to announce the release of: karbor-dashboard 1.5.1: Karbor Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/karbor-dashboard Download the package from: https://tarballs.openstack.org/karbor-dashboard/ Please report issues through: https://bugs.launchpad.net/karbor-dashboard/+bugs For more details, please see below. Changes in karbor-dashboard 1.5.0..1.5.1 ---------------------------------------- 74badc3 Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

heat-agents 2.1.1 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are overjoyed to announce the release of: heat-agents 2.1.1: heat-agents This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/heat-agents Download the package from: https://tarballs.openstack.org/heat-agents/ Please report issues through: https://bugs.launchpad.net/heat-agents/+bugs For more details, please see below. Changes in heat-agents 2.1.0..2.1.1 ----------------------------------- cde92ce Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

blazar-dashboard 2.0.1 (train)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are excited to announce the release of: blazar-dashboard 2.0.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 2.0.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 2.0.0..2.0.1 ---------------------------------------- 63e9c5d Use json.loads instead of eval for JSON parsing e39e27a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 75b32f1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 6 +++--- 8 files changed, 26 insertions(+), 15 deletions(-)

1 0

blazar-dashboard 1.3.1 (stein)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are excited to announce the release of: blazar-dashboard 1.3.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 1.3.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 1.3.0..1.3.1 ---------------------------------------- ee10b2c Use json.loads instead of eval for JSON parsing 17b53e9 OpenDev Migration Patch f1b8b15 Update UPPER_CONSTRAINTS_FILE for stable/stein f5e6a4e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 6 +++--- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 3.0.1 (ussuri)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are stoked to announce the release of: blazar-dashboard 3.0.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 3.0.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 3.0.0..3.0.1 ---------------------------------------- 168b4ae Use json.loads instead of eval for JSON parsing 1c2fc55 Update TOX_CONSTRAINTS_FILE for stable/ussuri 70c77cc Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 8 ++++---- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 4.0.0.0rc2 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

Hello everyone, A new release candidate for blazar-dashboard for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/blazar-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/blazar-dashboard/src/branch/stable/victoria Release notes for blazar-dashboard can be found at: https://docs.openstack.org/releasenotes/blazar-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/blazar/+bugs and tag it *victoria-rc-potential* to bring it to the blazar-dashboard release crew's attention.

1 0

os-collect-config 11.0.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We high-spiritedly announce the release of: os-collect-config 11.0.1: Collect and cache metadata, run hooks on changes. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. 11.0.1 ^^^^^^ Upgrade Notes * Python 2.7 support has been dropped. Last release os-collect- config support py2.7 is OpenStack Train. The minimum version of Python now supported by os-collect-config is Python 3.6. Changes in os-collect-config 11.0.0..11.0.1 ------------------------------------------- 24245ce Use unittest.mock instead of mock ab98550 Drop python version constraints for sphinx d1607f9 Add tls proxy support for Zaqar 6dd0e53 Stop testing python2.7 Diffstat (except docs and test files) ------------------------------------- os_collect_config/zaqar.py | 14 +++++++++++++- .../notes/drop-python2.7-support-f133b716812d39f0.yaml | 6 ++++++ setup.cfg | 2 -- test-requirements.txt | 4 +--- tox.ini | 6 ++---- zuul.d/layout.yaml | 3 --- 10 files changed, 38 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a498fff..1cb1476 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -10,2 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD

1 0

os-net-config 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are satisfied to announce the release of: os-net-config 12.3.2: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.1..12.3.2 --------------------------------------- 6238283 Add NIC Partitioning support for Mellanox VFs edad325 Avoid openvswitch restarts during re-run Diffstat (except docs and test files) ------------------------------------- os_net_config/cli.py | 8 +++++++- os_net_config/utils.py | 26 +++++++++++++++++++------- 3 files changed, 47 insertions(+), 8 deletions(-)

1 0

puppet-tripleo 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We eagerly announce the release of: puppet-tripleo 12.4.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.4.0..12.4.1 ---------------------------------------- 49ca4208 Bump metadata for ussuri 12.4.1 release 3ffaf2d7 Replace union to create tcp-check list for redis a365e541 Change branch name for selinux_core puppet module e8dfd034 Fix tls - zaqar wss default port e75842e5 HA: ensure scaling up galera does not cause promotion errors d8fa754a Fix typos, extreamio and xtreamio to xtremio c3e86ea6 Make sure python3-novaclient is installed before creating fence_compute 16bb6f5d Use pcs 0.9 style authkey/remotes when doing an upgrade 37b8666f Add certmonger-etcd-refresh.sh script ef7818ec Fix up cluster_setup_extras usage Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-etcd-refresh.sh | 25 ++++++++++++ lib/puppet/functions/pacemaker_bundle_replicas.rb | 23 +++++++++++ manifests/certmonger/etcd.pp | 8 +++- manifests/haproxy.pp | 23 ++++++----- manifests/profile/base/cinder/volume.pp | 4 +- manifests/profile/base/pacemaker.pp | 44 +++++++++++++++++----- manifests/profile/base/pacemaker_remote.pp | 8 ++++ .../profile/pacemaker/database/mysql_bundle.pp | 19 +++++++++- metadata.json | 2 +- ...ipleo_profile_base_cinder_xtremio_iscsi_spec.rb | 2 +- 11 files changed, 132 insertions(+), 28 deletions(-)

1 0

tripleo-heat-templates 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We jubilantly announce the release of: tripleo-heat-templates 12.4.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.1 ^^^^^^ New Features ************ * Adds a new ContainerNovaLibvirtPidsLimit parameter in order to set the PIDs limit for nova_libvirt container. Defaults to 65536, set to 0 for unlimited. * The following parameters were added to support configuration of gnocchi nfs backend. * GnocchiNfsEnabled * GnocchiNfsShare * GnocchiNfsOptions * Add the NovaImageCacheTTL to the nova compute service. This exposes the remove_unused_original_minimum_age_seconds from nova.conf which controls the time (in seconds) that nova compute should continue caching an image once it is no longer used by and instances on the host. Defaults to 86400 (24hrs) * When SwiftRawDisks is set, try to mount the disks using uuids instead of paths. This makes mounts more stable, eg. if a kernel gets updates and device orders are changed. * A new Heat parameter 'ZaqarWsTimeout' exposes the Puppet variable 'tripleo::haproxy::zaqar_ws_timeout_tunnel'. This allows operators to configure the Mistral API timeout. It currently defaults to four hours. Upgrade Notes ************* * The CIDR for the StorageNFS network in the sample network_data_ganesha.yaml file has been modified to provide more usable IPs for the corresponding Neutron overcloud StorageNFS provider network. Since the CIDR of an existing network cannot be modified, deployments with existing StorageNFS networks should be sure to customize the StorageNFS network definition to use the same CIDR as that in their existing deployment in order to avoid a heat resource failure when updating or upgrading the overcloud. Deprecation Notes ***************** * As the fast forward upgrade workflow to skip multiple releases now relies on the very same upgrade_tasks, there is no need to mantain the fast_forward_upgrade_tasks, as well as any of its references. Bug Fixes ********* * Ansible GroupVars incorrectly keept a single subnet prefix per- network. This caused a problem when multiple subnets using different subnet prefixes where defined. Resulting in the wrong subnet prefix being referenced in the NetworkConfig for roles. AnsibleHostVars stores networks subnet prefixes instead. See bug: 1895899 (https://bugs.launchpad.net/tripleo/+bug/1895899) * Fixed issue in the sample network_data_ganesha.yaml file where the IPv4 allocation range for the StorageNFS network occupies almost the whole of its CIDR. If network_data_ganesha.yaml is used without modification in a customer deployment then there are too few IPs left over in its CIDR for use by the corresponding overcloud Neutron StorageNFS provider network for its overcloud DHCP service. (See bug: #1889682 (https://bugs.launchpad.net/tripleo/+bug/1889682)) * Fix Swift ring synchronization to ensure every node on the overcloud has the same copy to start with. This is especially required when replacing nodes or using manually modifed rings. Changes in tripleo-heat-templates 12.4.0..12.4.1 ------------------------------------------------ b2b553f4f Implement a Minimal role 1f5218100 Default cinder_volume_node_names to [] cd0448f01 Force container fetch 164a28d5d Adapt container health check for built-in podman health checks 9b6b665bd Assume Grafana and Ceph Dashboard to be on the storage or ctlplane nets 95e8fbd49 Set NeutronEnableDVR to False for OVN-HA 94a301c01 Create container-puppet-tasks files per step in check mode 7bfe3701a Gather more extra stats with the collectd virt plugin af26d0ff3 Configure rsyncd without pid file for Swift 1e4ce7537 Allow optional volumes for nova_libvirt container fdb9a3954 enable-ssh-admin: allow to override plan name b09c769a7 Clear cached facts based on the tag as well 3752f15cd Get the CIDR of the neutron port for NetworkConfig 92b7d4950 Use UUID for mounted SwiftRawDisks 011a2d867 Add dashboard_tls_external ceph-ansible parameter 47d18baf3 Revert "Disable Designate service for scenario 03" 0f0e7fa11 Remove race during mysql database creation ca8d98cf3 Complete missing description 76b5ae081 Memcached collectd plugin uses host URI instead of IP address. 0ad235806 pcs commands on host: rabbitmq 0eb998930 pcs commands on host: redis bundle ec70716ad pcs commands on host: ovn dbs 4f56371f9 pcs commands on host: cinder backup/volume 06209fa28 pcs commands on host: manila-share be1fee4af pcs commands on host: mysql 3f8c22b56 pcs commands on host: haproxy bundle 3a803c618 Mount libpod container volume into collectd container aeeacb507 Bind mount /var/lib/container-config-scripts inside the restart bundles 1cde17b81 Make sure IPA has the right ACI c4ce02707 Add parameter and CI config to enable Ceph OTW encryption b42881eae Add the NovaImageCacheTTL to the nova compute service 8d3a89dbf Fix Swift ring file synchronization issue 451c83f1b Fix nCipher (aka thales) ansible role name 9471eb030 DCN: use FQDN in glance endpoint with internal TLS ee90c5d60 Remove Etcd from DCN roles that don't need it 2406ffc4c Use container_file_t for Cinder*NfsMountOptions by default 6efb29dcc Use appropriate allocation pools for StorageNFS 472deb921 Remove remaining Skydive references 4907bf8fb Default to storage_dashboard, when set, for the CephDashboard service daff4688f Set a higher PIDs limit for nova_libvirt container 991395882 Re-enable driver agent for scenario 10 eddbc4b2c Avoid failing on deleted file cc17467c5 minor update: only migrate HA VIP away when needed 3e7c6b9a3 Use tripleo_network_config 05470b62e Create container config scripts with a new module b54a4be78 Create Container configs with a new module 10be0c53b Modify how libvirt related containers use SELinux bc8e2f9b9 [FFWD Ceph] Fix ceph post_upgrade_tasks for osd options 91c17d54e Fix endpoint map tls - zaqar wss port 3ce68de0f Fix up ovn-dbs update tasks 7dcd5eb87 Add new Luna HSM parameter for Barbican 9ee9b945f Fix pcs restart in composable HA 701841df5 Do not hard-code vars_from 2c1db9ed0 Update, avoid task skipping by directly importing step file. aaad2cd70 undercloud_upgrade: tear-down keepalived 838741633 pcmk_remote FFU support for Instance HA 3e2a8d91c Add PermitRootLogin option in sshd_config before leapp. 26e532449 Run external_deploy_tasks per step for each role 00850a30a Reset sriov_numvfs to 0 before leapp upgrade b245565d7 Fix delegation with FreeIPA cleanup 3631ee2ff Add support for Gnocchi NFS Backend 70a099159 Fix permissions for paunch 28ed5c0b8 Align kernel args for system upgrade using leapp 7f8770b6e Stop using a conditional for role tasks 7f3eb2371 Fix HA resource restart when no replicas are running 978c4e05d Revamp how etcd's cert and key are handled in containers e4192e033 Add CephAnsibleRepo warning to make this validation more flexible 94f62d874 Prevent skip package fact to run on all steps. 5f336195f Update octavia playbooks parameters c59f31ea4 Remove redundant file management for /run/redis fdd0547c4 Expose the zaqar_ws_timeout_tunnel variable. c2b828fbb Add openvswitch special treatment to update too. 8c6ada0d1 Do not manage healthcheck for nova-compute anymore ebea6f33e Add dashboard_protocol variable when internal_tls is enabled aeaeff3a3 Remove /var/lib/config-data context task b66f39550 Generated passthrough_whitelist shall use all the user_configs fields 729bb5259 Remove ffwd-upgrade leftovers from THT. 09f524e70 Unset keystone::public_endpoint bad56a5fd Add missing config_files kolla directives be1184b06 Use a single task for fact gathering a1443bb82 Relax facts gathering plays on the overcloud 7e3315110 Prevent ovn dbs related facts to run on each step. 2971c4fbb Attempt to remove octavia tls proxy service only present 4ac41b46d Improve documentations for NovaLibvirtFileBackedMemory Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 17 +- ci/environments/scenario010-standalone.yaml | 1 - common/deploy-steps-playbooks-common.yaml | 52 ++-- common/deploy-steps-tasks-step-1.yaml | 29 +-- common/deploy-steps-tasks.yaml | 1 + common/deploy-steps.j2 | 242 +++--------------- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 3 +- common/services/role.role.j2.yaml | 20 -- .../monitoring/collectd_check_health.py | 92 +++++++ .../nova_statedir_ownership.py | 68 +++-- .../pacemaker_restart_bundle.sh | 13 +- deployed-server/scripts/enable-ssh-admin.sh | 3 +- deployment/README.rst | 30 --- deployment/aodh/aodh-api-container-puppet.yaml | 46 ---- .../aodh/aodh-evaluator-container-puppet.yaml | 18 -- .../aodh/aodh-listener-container-puppet.yaml | 18 -- .../aodh/aodh-notifier-container-puppet.yaml | 18 -- .../barbican/barbican-api-container-puppet.yaml | 31 ++- .../ceilometer-agent-central-container-puppet.yaml | 18 -- .../ceilometer-agent-compute-container-puppet.yaml | 18 -- .../ceilometer-agent-ipmi-container-puppet.yaml | 18 -- ...ometer-agent-notification-container-puppet.yaml | 18 -- deployment/ceph-ansible/ceph-base.yaml | 50 +++- deployment/ceph-ansible/ceph-mds.yaml | 3 +- deployment/ceph-ansible/ceph-mgr.yaml | 1 + deployment/ceph-ansible/ceph-mon.yaml | 3 +- deployment/ceph-ansible/ceph-osd.yaml | 52 +++- deployment/ceph-ansible/ceph-rgw.yaml | 3 +- deployment/cinder/cinder-api-container-puppet.yaml | 55 +--- .../cinder/cinder-backend-netapp-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 11 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 107 +++----- .../cinder/cinder-common-container-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 27 +- .../cinder/cinder-volume-container-puppet.yaml | 46 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 103 ++------ deployment/containers-common.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 24 +- deployment/database/mysql-pacemaker-puppet.yaml | 70 ++--- deployment/database/redis-container-puppet.yaml | 3 - deployment/database/redis-pacemaker-puppet.yaml | 120 ++------- .../sahara/sahara-api-container-puppet.yaml | 30 --- .../sahara/sahara-engine-container-puppet.yaml | 18 -- deployment/etcd/etcd-container-puppet.yaml | 55 ++-- deployment/glance/glance-api-container-puppet.yaml | 28 -- .../glance/glance-api-edge-container-puppet.yaml | 22 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 128 +++++----- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 34 ++- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 36 ++- deployment/haproxy/haproxy-container-puppet.yaml | 5 + .../haproxy/haproxy-edge-container-puppet.yaml | 22 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 71 ++---- deployment/heat/heat-api-cfn-container-puppet.yaml | 18 -- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 24 -- deployment/heat/heat-api-container-puppet.yaml | 30 --- deployment/heat/heat-engine-container-puppet.yaml | 18 -- deployment/ipa/ipaservices-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 36 --- .../ironic/ironic-conductor-container-puppet.yaml | 25 -- .../kernel-boot-params-baremetal-ansible.yaml | 20 ++ deployment/keystone/keystone-container-puppet.yaml | 44 ---- deployment/manila/manila-api-container-puppet.yaml | 32 --- .../manila/manila-scheduler-container-puppet.yaml | 20 -- .../manila/manila-share-container-puppet.yaml | 20 -- .../manila/manila-share-pacemaker-puppet.yaml | 101 ++------ .../memcached/memcached-container-puppet.yaml | 21 +- deployment/metrics/collectd-container-puppet.yaml | 58 ++--- .../neutron/derive_pci_passthrough_whitelist.py | 11 +- .../neutron/neutron-api-container-puppet.yaml | 37 --- .../neutron/neutron-dhcp-container-puppet.yaml | 18 -- .../neutron/neutron-l3-container-puppet.yaml | 18 -- .../neutron/neutron-metadata-container-puppet.yaml | 18 -- .../neutron-ovs-agent-container-puppet.yaml | 18 -- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 2 - .../neutron-sriov-agent-container-puppet.yaml | 31 ++- deployment/nova/nova-api-container-puppet.yaml | 149 ----------- deployment/nova/nova-compute-container-puppet.yaml | 50 ++-- .../nova/nova-conductor-container-puppet.yaml | 18 -- deployment/nova/nova-ironic-container-puppet.yaml | 24 -- deployment/nova/nova-libvirt-container-puppet.yaml | 43 ++-- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 18 -- .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- deployment/nova/novajoin-container-puppet.yaml | 10 + .../octavia/octavia-api-container-puppet.yaml | 36 +-- .../octavia/octavia-deployment-config.j2.yaml | 10 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 65 +++-- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../pacemaker-remote-baremetal-puppet.yaml | 60 +++++ deployment/podman/podman-baremetal-ansible.yaml | 3 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 79 ++---- deployment/swift/swift-proxy-container-puppet.yaml | 22 -- .../swift/swift-ringbuilder-container-puppet.yaml | 2 +- .../swift/swift-storage-container-puppet.yaml | 56 +--- .../tripleo-packages-baremetal-puppet.yaml | 282 +++------------------ deployment/undercloud/undercloud-upgrade.yaml | 163 ++---------- environments/barbican-backend-pkcs11-lunasa.yaml | 29 ++- environments/ceph-ansible/ceph-ansible.yaml | 7 + environments/cinder-netapp-config.yaml | 2 +- environments/lifecycle/ffwd-upgrade-prepare.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 + environments/ssl/no-tls-endpoints-public-ip.yaml | 1 + environments/ssl/tls-endpoints-public-dns.yaml | 3 +- environments/ssl/tls-endpoints-public-ip.yaml | 3 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 +- environments/storage-environment.yaml | 2 +- environments/storage/cinder-netapp-config.yaml | 2 +- environments/storage/cinder-nfs.yaml | 2 +- network/service_net_map.j2.yaml | 2 +- network_data_ganesha.yaml | 50 +++- overcloud.j2.yaml | 25 -- puppet/role.role.j2.yaml | 14 + ...ainerNovaLibvirtPidsLimit-cdad2166b6c0195f.yaml | 6 + .../notes/bug-1895899-8d675670a0d05c15.yaml | 12 + ...e-for-StorageNFS-net.yaml-bd77be924e8b7056.yaml | 20 ++ .../gnocchi-nfs-backend-90febc9f87e7df08.yaml | 9 + .../nova_image_cache_ttl-824f241363b9dd4e.yaml | 8 + .../notes/remove_ffwd_tasks-d1ab630d96a66a59.yaml | 6 + .../swift-fix-ring-sync-7bf3ddbb1ea1e342.yaml | 6 + .../swift-mount-by-uuid-7744fe7696db4b85.yaml | 6 + .../zaqar_ws_timeout_tunnel-d5d1e900dce79b34.yaml | 7 + roles/ControllerSriov.yaml | 2 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 2 +- roles/DistributedComputeHCIScaleOut.yaml | 3 +- roles/DistributedComputeScaleOut.yaml | 3 +- roles/Minimal.yaml | 30 +++ roles/NetworkerSriov.yaml | 1 - roles/README.rst | 1 + sample-env-generator/ssl.yaml | 6 +- sample-env-generator/storage.yaml | 1 + tools/yaml-validate.py | 24 -- 138 files changed, 1383 insertions(+), 2814 deletions(-)

1 0

tripleo-common 12.4.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are tickled pink to announce the release of: tripleo-common 12.4.2: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.4.2 ^^^^^^ New Features ************ * Added *modify_only_with_source* to the ContainerImagePrepare set that can be used to limit modify container images to a specific image_source as defined in the services to container images mapping. Bug Fixes ********* * When using specifying ContainerImagePrepare if a tag is explicitly provided in a set, the tag_from_label functionality will not be run as we use the defined tag for the containers. Previously we would still attempt tag lookups even if we wanted a specific tag. Other Notes *********** * *container-images/tripleo_containers.yaml.j2* is now used to determine what containers are used for which services when running the container image prepare process runs. Changes in tripleo-common 12.4.1..12.4.2 ---------------------------------------- 84411ff9 Lower default verbosity for ansible bb7a2548 Consume ceph, prom, grafana containers from quay.io 9da62e66 Remove the base layers 10e5e6cc Update container build to better reign in threads 6b115444 Run tripleo-build-containers-ubi-8 on BuildahBuilder code cc67c4ee Include virt-admin in the nova_libvirt container f438b4d7 Add neutron-mlnx-agent container image 66cdee5a Fix handling of default_tag 93c508e2 Support basic auth for image registry cb219766 Add interface-names to Rhel8 images 427e600b Remove sahara-* from list in tripleo_containers.yaml 50d235ba Switch to tripleo_containers.yaml 968dd034 Restore default log path for image prepare 0f67579c Add modify_only_with_source 0a9da42e Fix config parser warning 1b1f0229 TCIB: move RHEL modules into base image a0361597 Ensure atomic inventory file rename runs on the same mountpoint ee720ed1 tcib: rename kolla_version to tcib_managed 70b1ca4b (backward compatibility) create kolla UIDs/GIDs for TCIB 26bd7c22 Remove check for ./puppet/services when filtering services bc01f1c4 Ensure image files are readable to apache 50f86d05 Don't build image upload tasks when dry_run=True 8c46cbb0 Correct the inventory generation 62f40845 Ensure tripleo ansible inventory file update is atomic be81e6ee Add exponential backoff to ratelimited requests d3c11cd5 Stop doing tag_from_label lookup with tag 84fc9430 Reduce workers for label lookups aa4825cb Handle redirects for blobs better f38f6bdf Switch 55-heat-config to async 8a09eb94 container-images: add librados2 to gnocchi-base 4c4ba312 Properly collect tasks with or conditional in step file. 4396f91b Add update and post update tasks to step generated file. e56cdbff Add a strict option to per role tasks file generation. e073112c Generate a play per step for external_deploy_tasks d31c419d config-download remove role arg from _write_tasks_per_step() 8e544693 First pass at script cleanup 42aea5f3 Revert "Add kolla template override to remove python3-networking-mlnx" Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 15 +- container-images/kolla/barbican-base/sudoers | 1 + container-images/kolla/base/httpd_setup.sh | 2 +- container-images/kolla/base/sudoers | 2 +- container-images/kolla/base/uid_gid_manage.sh | 124 ++++ container-images/kolla/horizon/extend_start.sh | 2 +- .../kolla/neutron-base/neutron_sudoers | 2 - container-images/tcib/base/base.yaml | 14 +- container-images/tcib/base/collectd/collectd.yaml | 11 +- container-images/tcib/base/etcd/etcd.yaml | 2 +- container-images/tcib/base/mariadb/mariadb.yaml | 6 +- .../tcib/base/memcached/memcached.yaml | 3 +- .../tcib/base/os/aodh-base/aodh-base.yaml | 2 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 6 +- .../base/os/ceilometer-base/ceilometer-base.yaml | 2 +- .../ceilometer-central/ceilometer-central.yaml | 4 - .../ceilometer-compute/ceilometer-compute.yaml | 4 - .../ceilometer-ipmi/ceilometer-ipmi.yaml | 4 - .../tcib/base/os/cinder-base/cinder-base.yaml | 6 +- .../base/os/designate-base/designate-base.yaml | 2 +- .../tcib/base/os/glance-api/glance-api.yaml | 6 +- .../tcib/base/os/gnocchi-base/gnocchi-base.yaml | 3 +- .../tcib/base/os/heat-base/heat-base.yaml | 2 +- .../tcib/base/os/ironic-base/ironic-base.yaml | 2 +- .../ironic-conductor/ironic-conductor.yaml | 4 - .../ironic-inspector/ironic-inspector.yaml | 2 +- .../tcib/base/os/keystone/keystone.yaml | 2 +- .../tcib/base/os/manila-base/manila-base.yaml | 2 +- .../tcib/base/os/mistral-base/mistral-base.yaml | 2 +- .../mistral-executor/mistral-executor.yaml | 6 - .../neutron-agent-base/neutron-agent-base.yaml | 4 - .../tcib/base/os/neutron-base/neutron-base.yaml | 2 +- .../neutron-mlnx-agent/neutron-mlnx-agent.yaml | 8 + .../tcib/base/os/nova-base/nova-base.yaml | 2 +- .../nova-compute-ironic/nova-compute-ironic.yaml | 6 +- .../os/nova-base/nova-compute/nova-compute.yaml | 6 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 7 +- .../nova-base/nova-scheduler/nova-scheduler.yaml | 4 - .../tcib/base/os/novajoin-base/novajoin-base.yaml | 2 +- .../tcib/base/os/octavia-base/octavia-base.yaml | 2 +- .../tcib/base/os/swift-base/swift-base.yaml | 2 +- container-images/tcib/base/os/tempest/tempest.yaml | 3 +- .../tcib/base/qdrouterd/qdrouterd.yaml | 2 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 2 +- container-images/tcib/base/redis/redis.yaml | 5 +- container-images/tripleo_containers.yaml | 406 +++++------ container-images/tripleo_containers.yaml.j2 | 806 +++++++++++++++++++++ .../tripleo_kolla_template_overrides.j2 | 7 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + ...e-modify_only_with_source-d9be8cc7236e7c94.yaml | 6 + ...g-lookup-if-tag-specified-2284c45dc0f87693.yaml | 7 + ...e-tripleo-containers-file-0590a59f56fb3907.yaml | 6 + tripleo_common/actions/ansible.py | 6 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 203 ++++-- tripleo_common/image/exception.py | 4 + tripleo_common/image/image_export.py | 4 +- tripleo_common/image/image_uploader.py | 169 ++++- tripleo_common/image/kolla_builder.py | 63 +- tripleo_common/inventories.py | 13 +- tripleo_common/inventory.py | 10 +- tripleo_common/templates/deployments.yaml | 32 +- tripleo_common/utils/config.py | 70 +- tripleo_common/utils/plan.py | 2 +- zuul.d/layout.yaml | 5 + 81 files changed, 3489 insertions(+), 1005 deletions(-)

1 0

python-tripleoclient 13.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are delighted to announce the release of: python-tripleoclient 13.4.1: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.1 ^^^^^^ New Features ************ * A new command "openstack overcloud export ceph" is added. The command is used to export the Ceph deployment data from one stack for use in another stack with storage services which use that Ceph cluster when using the multi-stack deployment feature. Bug Fixes ********* * openstack overcloud export now exports user defined password values instead of just always exporting the generated password values. Changes in python-tripleoclient 13.4.0..13.4.1 ---------------------------------------------- 92654c55 Fix tcib build d25d7d98 Add openstack overcloud export ceph 69896778 Fix if conditions in constants.py 9a7411cb Ensure the ansible log file always has a correct UID 98e45893 Allow to pass a static inventory to the validator CLI 0b437456 Inject both paths for validations roles location 53fa8ad7 Add --temp-dir to overcloud image build 7d598f85 Combined cherry-pick to allow TCIB to run config-less 1de68cbb Update tripleo-validations path to /usr/share/ansible 27873c91 Remove playbook param from tripleo_validator.py b0494327 Fix extra_env_files option and type in format string c2a77064 Allow usage of duplicated IPs for undercloud config d154d50c (UX) Improve logging if the ephemeral heat stack wasn't created 96196522 Implement validations-libs framework for ALL validator commands e2e5fd96 TCIB: add --rhel-modules argument 1ffc56ed overcloud_deploy: move horizon url/rc files before config-download 018ef121 overcloud_cell: fix location of config-download 7fcc694d Limit ip_version when resolving public_host and admin_host 31aeb48e Use user set password values in overcloud export a06c7194 Cleanup UndercloudHostsEntries b0fbe6dc Don't build image upload tasks when dry_run is True e3525066 Simplify error handling in tripleo_deploy 3d5bd5a0 Close session objects in container_image.py 87aa47ca [ussuri] TCIB: change default namespace to tripleou ac50ee66 Rename UpgradeConvergeOvercloud into UpgradeConverge. 5e1475b5 Set portmap cidr fields to extracted CIDR Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + ...ack-overcloud-export-ceph-f36421e1685db302.yaml | 6 + ...vercloud-export-passwords-bfa698491601a734.yaml | 4 + requirements.txt | 1 + setup.cfg | 3 +- tripleoclient/constants.py | 18 +- tripleoclient/export.py | 99 +++- .../v1/overcloud_deploy/test_overcloud_deploy.py | 20 +- .../test_tripleo_container_image.py | 31 +- tripleoclient/utils.py | 253 ++-------- tripleoclient/v1/container_image.py | 51 +- tripleoclient/v1/overcloud_cell.py | 8 +- tripleoclient/v1/overcloud_deploy.py | 52 +- tripleoclient/v1/overcloud_export_ceph.py | 115 +++++ tripleoclient/v1/overcloud_image.py | 8 + tripleoclient/v1/overcloud_upgrade.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 50 +- tripleoclient/v1/tripleo_validator.py | 523 ++++++--------------- tripleoclient/v1/undercloud_config.py | 25 +- tripleoclient/v2/tripleo_container_image.py | 151 +++++- 27 files changed, 1042 insertions(+), 840 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d450d571..1e8e61ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20,0 +21 @@ ansible-runner>=1.4.4 # Apache 2.0 +validations-libs>=1.0.0

1 0

tripleo-validations 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are happy to announce the release of: tripleo-validations 12.3.2: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.1..12.3.2 --------------------------------------------- f7b2ea2 Remove callback plugin from tripleo-validation e1af4c9 Remove objects migrated to validations-common a947d7e New validation: ensure we have access to the right package version cebe0b4 New validation: Ensure sVirt is active ffe221f Add validation to check status of ipa server d1f7935 Add new Upgrades validation groups. c6a59a1 Add os-cloud support for tripleo-ansible-inventory script 70b766c Corrected work directory for validate-selinux 088c4a1 Allows to use custom role name for validations b7d679d Updated "overcloud" to "allovercloud" group 7c01af7 Fix neutron_sanity_check for ML2/OVS overcloud 791502c Fix ceph-ansible permissions when checking the repo name 1de1854 Make Get OSD stat percentage compatible with jq < 1.5 f97940e Make Get OSD stat percentage compatible with both Luminous and Nautilus c3edb5d Ensure virtualenv is installed. 1ae0e2c Remove mock as test requirement Diffstat (except docs and test files) ------------------------------------- callback_plugins/.keep | 0 callback_plugins/fail_if_no_hosts.py | 31 --- callback_plugins/validation_json.py | 202 -------------------- callback_plugins/validation_output.py | 207 --------------------- .../modules/modules-check_package_update.rst | 15 -- .../modules/modules-validations_read_ini.rst | 15 -- .../roles/role-advanced_format_512e_support.rst | 7 - .../roles/role-check_latest_packages_version.rst | 6 - groups.yaml | 40 ++++ library/advanced_format.py | 97 ---------- library/check_package_update.py | 145 --------------- library/haproxy_conf.py | 89 --------- library/hiera.py | 64 ------- library/reportentry.py | 89 --------- library/validations_read_ini.py | 166 ----------------- library/warn.py | 55 ------ playbooks/512e.yaml | 13 -- playbooks/ceph-dependencies-installed.yaml | 4 +- playbooks/check-ftype.yaml | 12 -- playbooks/check-latest-packages-version.yaml | 13 -- playbooks/container-status.yaml | 2 +- playbooks/controller-token.yaml | 4 +- playbooks/controller-ulimits.yaml | 2 +- playbooks/dns.yaml | 12 -- playbooks/haproxy.yaml | 17 -- playbooks/healthcheck-service-status.yaml | 2 +- playbooks/mysql-open-files-limit.yaml | 4 +- playbooks/neutron-sanity-check.yaml | 13 +- playbooks/no-op.yaml | 12 -- playbooks/nova-event-callback.yaml | 2 +- playbooks/nova-svirt.yaml | 13 ++ playbooks/ntp.yaml | 14 -- playbooks/ovs-dpdk-pmd-cpus-check.yaml | 2 +- playbooks/pacemaker-status.yaml | 2 +- playbooks/package-version.yaml | 18 ++ playbooks/rabbitmq-limits.yaml | 2 +- playbooks/repos.yaml | 2 +- playbooks/service-status.yaml | 16 -- playbooks/stonith-exists.yaml | 2 +- playbooks/tls-everywhere-post-deployment.yaml | 2 +- playbooks/undercloud-cpu.yaml | 16 -- playbooks/undercloud-ram.yaml | 17 -- playbooks/undercloud-selinux-mode.yaml | 13 -- playbooks/validate-selinux.yaml | 21 --- role-addition.yml | 10 + .../molecule/default/converge.yml | 26 --- roles/advanced_format_512e_support/tasks/main.yml | 10 - roles/advanced_format_512e_support/vars/main.yml | 9 - roles/ceph/tasks/ceph-ansible-installed.yaml | 1 + roles/ceph/tasks/ceph-health.yaml | 4 +- .../defaults/main.yml | 10 - .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 51 ----- .../molecule/default/molecule.yml | 46 ----- roles/check_latest_packages_version/tasks/main.yml | 16 -- roles/check_latest_packages_version/vars/main.yml | 8 - roles/dns/defaults/main.yml | 2 - roles/dns/molecule/default/Dockerfile.j2 | 37 ---- roles/dns/molecule/default/molecule.yml | 45 ----- roles/dns/tasks/main.yml | 4 - roles/dns/vars/main.yml | 7 - roles/haproxy/README.md | 42 ----- roles/haproxy/defaults/main.yml | 8 - roles/haproxy/molecule/default/Dockerfile | 37 ---- roles/haproxy/molecule/default/converge.yml | 71 ------- roles/haproxy/molecule/default/molecule.yml | 48 ----- roles/haproxy/tasks/main.yml | 51 ----- roles/haproxy/vars/main.yml | 6 - roles/neutron_sanity_check/defaults/main.yml | 3 + roles/neutron_sanity_check/tasks/main.yml | 69 ++++--- roles/no_op/tasks/main.yml | 4 - roles/no_op/vars/main.yml | 8 - roles/node_health/tasks/main.yml | 4 +- .../prepare.yml => nova_svirt/defaults/main.yml} | 12 +- .../molecule/default/Dockerfile | 4 +- .../molecule/default/converge.yml | 32 ++-- .../molecule/default/molecule.yml | 8 +- roles/nova_svirt/molecule/default/prepare.yml | 60 ++++++ roles/nova_svirt/tasks/main.yml | 14 ++ roles/nova_svirt/tasks/validate.yml | 28 +++ roles/ntp/molecule/default/Dockerfile.j2 | 37 ---- roles/ntp/molecule/default/converge.yml | 26 --- roles/ntp/molecule/default/molecule.yml | 46 ----- roles/ntp/tasks/main.yml | 26 --- roles/ntp/vars/main.yml | 10 - .../tasks/openshift-nw-requirements.yaml | 2 +- roles/openstack_endpoints/tasks/main.yml | 2 +- roles/package_version/defaults/main.yaml | 2 + .../molecule/default/Dockerfile.j2 | 0 .../molecule/default}/converge.yml | 34 ++-- .../molecule/default/molecule.yml | 0 roles/package_version/tasks/compare.yaml | 16 ++ roles/package_version/tasks/main.yaml | 67 +++++++ roles/package_version/vars/centos.yml | 2 + roles/package_version/vars/redhat-8.yml | 6 + roles/service_status/defaults/main.yaml | 2 - .../service_status/molecule/default/Dockerfile.j2 | 37 ---- roles/service_status/molecule/default/converge.yml | 25 --- roles/service_status/molecule/default/molecule.yml | 48 ----- roles/service_status/molecule/docker/Dockerfile.j2 | 37 ---- roles/service_status/molecule/docker/converge.yml | 59 ------ roles/service_status/molecule/docker/molecule.yml | 56 ------ roles/service_status/molecule/docker/prepare.yml | 65 ------- roles/service_status/molecule/podman/Dockerfile.j2 | 37 ---- roles/service_status/molecule/podman/bolt_state.db | Bin 131072 -> 0 bytes roles/service_status/molecule/podman/molecule.yml | 48 ----- roles/service_status/molecule/podman/prepare.yml | 39 ---- .../service_status/molecule/systemd/Dockerfile.j2 | 37 ---- roles/service_status/molecule/systemd/converge.yml | 44 ----- roles/service_status/molecule/systemd/molecule.yml | 48 ----- roles/service_status/molecule/systemd/prepare.yml | 39 ---- roles/service_status/tasks/containers.yaml | 59 ------ roles/service_status/tasks/main.yaml | 3 - roles/service_status/tasks/systemd.yaml | 13 -- roles/tls_everywhere/defaults/main.yml | 3 + roles/tls_everywhere/molecule/default/converge.yml | 36 +++- roles/tls_everywhere/molecule/default/prepare.yml | 21 +++ roles/tls_everywhere/tasks/ipa-server-check.yaml | 107 +++++++++++ roles/tls_everywhere/vars/main.yml | 1 - roles/undercloud_cpu/README.md | 36 ---- roles/undercloud_cpu/defaults/main.yml | 3 - .../undercloud_cpu/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_cpu/molecule/default/converge.yml | 42 ----- roles/undercloud_cpu/molecule/default/molecule.yml | 45 ----- roles/undercloud_cpu/tasks/main.yml | 7 - roles/undercloud_cpu/vars/main.yaml | 10 - roles/undercloud_ram/README.md | 36 ---- roles/undercloud_ram/defaults/main.yml | 3 - .../undercloud_ram/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_ram/molecule/default/converge.yml | 42 ----- roles/undercloud_ram/molecule/default/molecule.yml | 45 ----- roles/undercloud_ram/tasks/main.yml | 9 - roles/undercloud_ram/vars/main.yaml | 11 -- roles/undercloud_selinux_mode/README.md | 37 ---- .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 26 --- .../molecule/default/molecule.yml | 46 ----- roles/undercloud_selinux_mode/tasks/main.yml | 24 --- roles/undercloud_selinux_mode/vars/main.yml | 8 - roles/validate_selinux/defaults/main.yml | 27 --- roles/validate_selinux/handlers/main.yml | 15 -- .../validate_selinux/molecule/default/converge.yml | 63 ------- .../validate_selinux/molecule/default/prepare.yml | 60 ------ roles/validate_selinux/molecule/default/verify.yml | 15 -- roles/validate_selinux/tasks/main.yml | 123 ------------ roles/validate_selinux/templates/skip-list.j2 | 3 - roles/validate_selinux/vars/main.yml | 22 --- .../xfs_check_ftype/molecule/default/Dockerfile.j2 | 37 ---- .../xfs_check_ftype/molecule/default/converge.yml | 21 --- .../xfs_check_ftype/molecule/default/molecule.yml | 47 ----- roles/xfs_check_ftype/molecule/default/prepare.yml | 60 ------ roles/xfs_check_ftype/molecule/default/verify.yml | 15 -- roles/xfs_check_ftype/tasks/main.yml | 25 --- roles/xfs_check_ftype/vars/main.yml | 8 - scripts/tripleo-ansible-inventory | 60 ++++-- zuul.d/molecule.yaml | 113 ++--------- zuul.d/playbooks/pre.yml | 4 + 180 files changed, 654 insertions(+), 4482 deletions(-)

1 0

tripleo-puppet-elements 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are satisfied to announce the release of: tripleo-puppet-elements 12.3.2: Puppet building rules for OpenStack images. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.3.2 ^^^^^^ Other Notes * Element overcloud-opstools has been removed. The puropose of this element was to install osops-tools-monitoring-oschecks package in overcloud images. This package is not supported in CentOS 8. Changes in tripleo-puppet-elements 12.3.1..12.3.2 ------------------------------------------------- db14e58 Remove overcloud-opstools element 405c8d4 Drop podman-docker from CentOS/RHEL8 Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/pkg-map | 8 ++------ elements/overcloud-ceph-storage/element-deps | 1 - elements/overcloud-compute/element-deps | 1 - elements/overcloud-contrail-controller/element-deps | 1 - elements/overcloud-controller/element-deps | 1 - elements/overcloud-network-midonet/element-deps | 1 - elements/overcloud-opstools/README.md | 1 - elements/overcloud-opstools/element-deps | 2 -- .../install.d/package-installs-overcloud-opstools | 1 - elements/overcloud-opstools/pkg-map | 12 ------------ .../remove-overcloud-opstools-element-5846bee068294751.yaml | 6 ++++++ 11 files changed, 8 insertions(+), 27 deletions(-)

1 0

paunch 7.0.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are ecstatic to announce the release of: paunch 7.0.2: Utility to launch and manage containers using YAML based configuration data This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 7.0.1..7.0.2 ------------------------------ 4ae7d88 Trigger container update on image id update 6ad9b29 Use unittest.mock instead of third party mock 368827e [USSURI-ONLY] Add new parameter: pids_limit 861ed06 [USSURY-Only] Log benign command errors as warns b995b0a [USSURI-ONLY] Do not manage masked service units 5c4a55c Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + paunch/builder/base.py | 71 +++++++---- paunch/builder/podman.py | 1 + paunch/runner.py | 32 +++-- paunch/utils/systemctl.py | 30 ++++- paunch/utils/systemd.py | 6 +- 14 files changed, 458 insertions(+), 115 deletions(-)

1 0

puppet-pacemaker 1.1.0
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We jubilantly announce the release of: puppet-pacemaker 1.1.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.0.0..1.1.0 ---------------------------------------- af9f15a Update metadata for a release 441e0c4 Fix pcs 0.10 detection for 8-stream b3596d1 Add disable-http-filter option b501c08 Convert all class usage to relative names a53120f Add tripleo-standalone sc4 job a385603 Revert "Make sure we pass cluster_setup_extras when using pcs 0.10" 034102e Fix up upgrade coordination around authkey b7af3b6 Retry calling backup_cib() 7a82bae Do not create stonith location constraint when there is a single node 1bb2fe7 Fix typo in CRMDIFF_BIN 3cbc4da Make sure we pass cluster_setup_extras when using pcs 0.10 bb6709c Add support for promoted-max meta attribute 5ab1505 Switch to newer openstackdocstheme and reno versions 9f3f5c7 Update Puppet requirement to >= 6.0.0 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 ++++ Gemfile | 2 +- Rakefile | 1 - agent_generator/src_xml/fence_rhevm.xml | 5 +++ examples/pacemaker/host.pp | 4 +- examples/pacemaker/setup.pp | 4 +- examples/service/start.pp | 2 +- examples/service/stop.pp | 2 +- lib/puppet/provider/pcmk_bundle/default.rb | 14 +++++++ lib/puppet/provider/pcmk_common.rb | 59 +++++++++++++++++++---------- lib/puppet/provider/pcmk_stonith/default.rb | 3 +- lib/puppet/type/pcmk_bundle.rb | 15 ++++++++ manifests/contain.pp | 2 - manifests/corosync.pp | 33 +++++++++++----- manifests/init.pp | 8 ++-- manifests/install.pp | 2 +- manifests/new.pp | 22 +++++------ manifests/new/firewall.pp | 2 +- manifests/new/install.pp | 2 +- manifests/new/service.pp | 2 +- manifests/new/setup.pp | 10 ++--- manifests/new/setup/auth_key.pp | 4 +- manifests/new/setup/config.pp | 2 +- manifests/new/setup/debian.pp | 4 +- manifests/new/setup/pcsd.pp | 2 +- manifests/params.pp | 5 ++- manifests/remote.pp | 40 ++++++++++++++----- manifests/resource/bundle.pp | 29 +++++++++++++- manifests/resource/remote.pp | 5 ++- manifests/resource/service.pp | 2 +- manifests/service.pp | 8 ++-- manifests/stonith/fence_rhevm.pp | 9 +++++ metadata.json | 4 +- releasenotes/source/conf.py | 13 +++---- 35 files changed, 232 insertions(+), 102 deletions(-)

1 0

glance 21.0.0.0rc2 (victoria)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

Hello everyone, A new release candidate for glance for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/glance/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/glance/src/branch/stable/victoria Release notes for glance can be found at: https://docs.openstack.org/releasenotes/glance/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/glance/+bugs and tag it *victoria-rc-potential* to bring it to the glance release crew's attention.

1 0

oslo.privsep 1.33.4 (train)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are amped to announce the release of: oslo.privsep 1.33.4: OpenStack library for privilege separation This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 1.33.4 ^^^^^^ Other Notes * The "oslo.privsep" client can be called from a program using eventlet. If "eventlet.monkey_patch", some libraries will be patched, for example "threading" or "os". When the root daemon is forked from the client process, those libraries remain patched. Now, when the daemon is forked from the client process, those libraries and methods are restored to the original values. The goal is to prevent some timeouts when using eventlet threads (user threads); system threads are preemptive and the code does not need to care about the executor token. Changes in oslo.privsep 1.33.3..1.33.4 -------------------------------------- 00e69d4 Undo the eventlet monkey patch for the privileged daemon 6db45ef Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 9c798d3 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_privsep/daemon.py | 36 ++++++++++++++++++++++ ...y-patch-privileged-daemon-160e00296549df3d.yaml | 11 +++++++ tox.ini | 2 +- 5 files changed, 79 insertions(+), 1 deletion(-)

1 0

tacker 4.0.0.0rc2 (victoria)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

Hello everyone, A new release candidate for tacker for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/tacker/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/tacker/src/branch/stable/victoria Release notes for tacker can be found at: https://docs.openstack.org/releasenotes/tacker/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/tacker/+bugs and tag it *victoria-rc-potential* to bring it to the tacker release crew's attention.

1 0

neutron-lib 2.6.1 (victoria)
by no-reply＠openstack.org 03 Oct '20

03 Oct '20

We are ecstatic to announce the release of: neutron-lib 2.6.1: Neutron shared routines and utilities This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 2.6.0..2.6.1 ----------------------------------- 73d868b remove rc from allocation dict if value is 0 dbd369e Update TOX_CONSTRAINTS_FILE for stable/victoria 2439128 Update .gitreview for stable/victoria a175451 Fix lower-constraints job for focal Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 14 +++---- neutron_lib/placement/client.py | 11 ++++- requirements.txt | 4 +- tox.ini | 10 ++--- 6 files changed, 64 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0e6244b..17b8abf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.37.0 # Apache-2.0 +oslo.db>=4.44.0 # Apache-2.0 @@ -19 +19 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.messaging>=5.29.0 # Apache-2.0 +oslo.messaging>=7.0.0 # Apache-2.0

1 0

python-openstackclient 5.4.0 (victoria)
by no-reply＠openstack.org 03 Oct '20

03 Oct '20

We are pumped to announce the release of: python-openstackclient 5.4.0: OpenStack Command-line Client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.4.0 ^^^^^ New Features ************ * Add NUMA affinity policy to "port create", "port set" and "port unset" commands. * Support for image search via properties of image. Currently "openstack server create --image-property" only takes image property. Now it can also search image via properties (user defined) too. Story https://storyboard.openstack.org/#!/story/2007860. Bug Fixes ********* * You can now remove role assignments from keystone that reference non-existent users or groups. [Bug 2006635 (https://storyboard.openstack.org/#!/story/2006635) * The "openstack server show -f json" command was not outputting json for security groups, volumes and properties properly. Changes in python-openstackclient 5.3.1..5.4.0 ---------------------------------------------- 4b709a2c Remove install unnecessary packages cbc1fb08 bump py37 to py38 in tox.ini bae89b30 Output correct json for security groups in 'openstack server show' 5aeec307 Remove install unnecessary packages 99b5adf9 Fix gate due to switch to focal fbd2c00b Fix --image-property option in 'create server' f0642bc0 Update developing.rst 67700e6d Support tagging Neutron ports on creation 4a3c5207 Show words indicating booted from volume for server image 51a1ea65 Add API check for server_groups.create ed6d8d94 Add API check for server_groups.list e2467326 Bypass user and group verification in RemoveRole 454b2195 Add NUMA affinity policy parameter to "port" 4e2aefb5 Delete the testcases that arent needed anymore 0a8753dc Fix reverted osc-lib interface change a8aad9fe Add system role assignment tests for users and groups 176907f7 Allow openstack flavor set to update flavor description using name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + bindep.txt | 1 - lower-constraints.txt | 4 +- openstackclient/compute/v2/flavor.py | 2 +- openstackclient/compute/v2/server.py | 47 ++- openstackclient/compute/v2/server_group.py | 17 +- openstackclient/identity/common.py | 2 +- openstackclient/identity/v3/role.py | 68 ++-- openstackclient/network/v2/port.py | 48 ++- ...port-numa-affinity-policy-4706b0f9485a5d4d.yaml | 5 + .../notes/bug-2006635-3110f7a87a186e62.yaml | 7 + ...image-property-field.yaml-c51bf37c3106d6ff.yaml | 6 + ...ecurity-grp-json-fix.yaml-2af1f48a48034d64.yaml | 4 + tox.ini | 3 +- 26 files changed, 976 insertions(+), 125 deletions(-)

1 0

telemetry_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are satisfied to announce the release of: telemetry_tempest_plugin 1.1.0: Tempest plugin for Telemetry Projects This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/telemetry_tempest_plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ For more details, please see below. Changes in telemetry_tempest_plugin 1.0.0..1.1.0 ------------------------------------------------ e720b9e [goal] Migrate telemetry-tempest-plugin jobs to focal c0b4506 Use image_create() from tempest scenario manager ece24e0 Stop to use the __future__ module. c78c6c7 Switch to newer openstackdocstheme and reno versions 8bef48e Fix hacking min version to 3.0.1 e81cb44 Fix the endpoint url trailing slash issue 5d5366a Add stable branch jobs on the plugins master gate 7716ce0 Further py27 cleanup support Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +++++++++++++++++ releasenotes/source/conf.py | 12 ++++-------- setup.cfg | 14 -------------- telemetry_tempest_plugin/exceptions.py | 4 ++-- telemetry_tempest_plugin/scenario/test_gnocchi.py | 2 -- .../scenario/test_telemetry_integration.py | 6 +++--- telemetry_tempest_plugin/scenario/utils.py | 6 ++---- test-requirements.txt | 9 ++++----- tox.ini | 7 ++++--- 10 files changed, 40 insertions(+), 45 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b2555d0..f8e7e3a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -7,3 +7,2 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -11 +10 @@ openstackdocstheme>=1.11.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

monasca-tempest-plugin 2.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are glad to announce the release of: monasca-tempest-plugin 2.1.0: Tempest plugin for Monasca project This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/monasca-tempest-plugin Download the package from: https://tarballs.openstack.org/monasca-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-tempest-plugin 2.0.0..2.1.0 ---------------------------------------------- 7752b4c Switch to newer openstackdocstheme and reno versions bdd3a1e Add py38 package metadata 08e45ac Fix hacking min version to 3.0.1 47f2042 Set tempest tests for logs as voting again Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 ++-- releasenotes/source/conf.py | 8 ++++---- setup.cfg | 1 + test-requirements.txt | 6 +++--- 5 files changed, 15 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ef101de..ae03f19 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0;python_version>='3.5' # Apache-2.0 +hacking>=3.0.1,<3.1.0;python_version>='3.5' # Apache-2.0 @@ -8 +8 @@ sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.0.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -10 +10 @@ openstackdocstheme>=2.0.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

heat-tempest-plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are chuffed to announce the release of: heat-tempest-plugin 1.1.0: OpenStack Orchestration Tempest Plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/heat-tempest-plugin Download the package from: https://tarballs.openstack.org/heat-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/heat/+bugs For more details, please see below. Changes in heat-tempest-plugin 1.0.0..1.1.0 ------------------------------------------- fa9f6cc [goal] Migrate tox based testing to Focal 9f622d8 Fixing typo for cert_validate eb16aa8 Add stable ussuri job on master gate b210ea2 Remove Extended maintainance stable branch job from master gate b4624c8 Use Bionic node for stable stein or train jobs 87030db Add tls support for tests 4e56c72 Allow empty list of tags instead of None Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 53 +++++----------------- test-requirements.txt | 5 +- 6 files changed, 23 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c699d8c..3cd55cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7,4 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1

1 0

barbican_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are ecstatic to announce the release of: barbican_tempest_plugin 1.1.0: OpenStack barbican tempest tests. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/barbican_tempest_plugin Download the package from: https://tarballs.openstack.org/barbican-tempest-plugin/ For more details, please see below. Changes in barbican_tempest_plugin 1.0.0..1.1.0 ----------------------------------------------- 826e26f Fix setup.cfg keywords 3f35bff Deprecate scenario.img_dir option da01199 Ceph Multibackend changes a0d3e45 [goal] Migrate testing to ubuntu focal 73a0d09 zuul: migrate and clean the tempest native jobs 0a13a38 Use the encryption provider constants f36d46b Add certificate validation scenario tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 82 +++++++++- .../scenario/test_ephemeral_disk_encryption.py | 10 ++ setup.cfg | 9 +- test-requirements.txt | 4 + tools/pre_test_hook.sh | 1 + 10 files changed, 356 insertions(+), 23 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c2d595b..b99db27 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,0 +6,4 @@ hacking<0.13,>=0.12.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1

1 0