February 2020 - Release-announce - lists.openstack.org

puppet-senlin 3.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are chuffed to announce the release of: puppet-senlin 3.1.0: Puppet module for OpenStack senlin This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-senlin Download the package from: https://tarballs.openstack.org/puppet-senlin/ Please report issues through: https://bugs.launchpad.net/puppet-senlin/+bugs For more details, please see below. Changes in puppet-senlin 3.0.0..3.1.0 ------------------------------------- ec93620 Prepare Ussuri M2 0a5a572 Fix stdlib version in metadata Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)

1 0

neutron-lib 1.29.2 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are tickled pink to announce the release of: neutron-lib 1.29.2: Neutron shared routines and utilities This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 1.29.1..1.29.2 ------------------------------------- d53744e install neutron_lib international messages ce78b4e Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 5a477ce Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_lib/__init__.py | 11 +++++++++++ tox.ini | 10 +++++----- 3 files changed, 17 insertions(+), 5 deletions(-)

1 0

puppet-rally 4.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are stoked to announce the release of: puppet-rally 4.1.0: Puppet module for OpenStack Rally This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-rally Download the package from: https://tarballs.openstack.org/puppet-rally/ Please report issues through: https://bugs.launchpad.net/puppet-rally/+bugs For more details, please see below. Changes in puppet-rally 4.0.0..4.1.0 ------------------------------------ c779387 Prepare Ussuri M2 75b4360 Fix stdlib version in metadata Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

tripleo-validations 12.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are satisfied to announce the release of: tripleo-validations 12.1.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.0.0..12.1.0 --------------------------------------------- f1963a4 Remove 'no-op-firewall-nova-driver' validator 20c791f Adds Search Path Override 153001e Better task name and loop control 585d0c1 zuul: all functional jobs now depend on linter job first f325b4a Delete healthcheck-service-status role 42934b9 Make groups documentation part dynamic d8246e9 molecule-xfs_check_ftypefailure (non-voting), remove from gate 878224e Fix role-addition.yaml automation playbook ceb0f75 Replace all references to the old role name 3e30472 Normalize role names when generating roles e89202b Adds basic molecule testing for ceph validations 3928fb6 Remove default ansible option in test runs f9249dc Add pre/post ceph validation groups e50e1a0 Validate the playboooks metadata structure da4f828 Ceph PG validation unit shouldn't depend on dict order eb62c8f Fix ceph-ansible repo check 718a2cc New validation: validate-selinux 9b69f08 Fix upper and lower constraints 7059630 Introduce Ceph placement group validation 32d4108 Remove the useless environment variable. 7fe7860 Add a validation to fail if a Ceph dependency is not installed 329f740 Add an additional validation to check ceph-ansible repository c9c1a54 Add new validation_json callback 2caaeac Removed workaround for ansible-lint issue Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 + .ansible-lint_rules/ValidationHasMetadataRule.py | 138 ++++++++++++ .pre-commit-config.yaml | 10 +- .yamllint | 11 + callback_plugins/validation_json.py | 200 +++++++++++++++++ .../modules/modules-ceph_pools_pg_protection.rst | 15 ++ ...t.rst => role-advanced_format_512e_support.rst} | 4 +- ...meterdb-size.rst => role-ceilometerdb_size.rst} | 4 +- ....rst => role-check_latest_packages_version.rst} | 4 +- ...sk-space.rst => role-check_network_gateway.rst} | 4 +- ...> role-collect_flavors_and_verify_profiles.rst} | 4 +- ...tainer-status.rst => role-container_status.rst} | 4 +- ...st => role-containerized_undercloud_docker.rst} | 4 +- ...troller-token.rst => role-controller_token.rst} | 4 +- ...-node-count.rst => role-controller_ulimits.rst} | 4 +- ...ane-ip-range.rst => role-ctlplane_ip_range.rst} | 4 +- ...ler-ulimits.rst => role-default_node_count.rst} | 4 +- ...p-validations.rst => role-dhcp_validations.rst} | 4 +- ...tus.rst => role-healthcheck_service_status.rst} | 4 +- .../{role-nova-status.rst => role-image_serve.rst} | 4 +- ...tion.rst => role-ironic_boot_configuration.rst} | 4 +- ...s-limit.rst => role-mysql_open_files_limit.rst} | 4 +- ...nvironment.rst => role-network_environment.rst} | 4 +- ...ity-check.rst => role-neutron_sanity_check.rst} | 4 +- .../roles/role-no-op-firewall-nova-driver.rst | 7 - .../roles/{role-no-op.rst => role-no_op.rst} | 4 +- .../{role-node-disks.rst => role-node_disks.rst} | 4 +- .../{role-node-health.rst => role-node_health.rst} | 4 +- ...t-callback.rst => role-nova_event_callback.rst} | 4 +- .../{role-image-serve.rst => role-nova_status.rst} | 4 +- ...enstack.rst => role-openshift_on_openstack.rst} | 4 +- ...-endpoints.rst => role-openstack_endpoints.rst} | 4 +- ...role-ovs-dpdk-pmd.rst => role-ovs_dpdk_pmd.rst} | 4 +- ...ercloud-debug.rst => role-pacemaker_status.rst} | 4 +- ...abbitmq-limits.rst => role-rabbitmq_limits.rst} | 4 +- ...-service-status.rst => role-service_status.rst} | 4 +- ...role-stack-health.rst => role-stack_health.rst} | 4 +- ...-stonith-exists.rst => role-stonith_exists.rst} | 4 +- ...role-switch-vlans.rst => role-switch_vlans.rst} | 4 +- ...-tls-everywhere.rst => role-tls_everywhere.rst} | 4 +- ...-undercloud-cpu.rst => role-undercloud_cpu.rst} | 4 +- ...emaker-status.rst => role-undercloud_debug.rst} | 4 +- ...kenflush.rst => role-undercloud_disk_space.rst} | 4 +- ....rst => role-undercloud_heat_purge_deleted.rst} | 4 +- ...count.rst => role-undercloud_process_count.rst} | 4 +- ...x-mode.rst => role-undercloud_selinux_mode.rst} | 4 +- ...atus.rst => role-undercloud_service_status.rst} | 4 +- ...-gateway.rst => role-undercloud_tokenflush.rst} | 5 +- ...fs-check-ftype.rst => role-xfs_check_ftype.rst} | 4 +- groups.yaml | 8 + library/ceph_pools_pg_protection.py | 249 +++++++++++++++++++++ lower-constraints.txt | 24 +- playbooks/512e.yaml | 2 +- playbooks/ceilometerdb-size.yaml | 2 +- playbooks/ceph-ansible-installed.yaml | 2 + playbooks/ceph-dependencies-installed.yaml | 18 ++ playbooks/ceph-health.yaml | 1 + playbooks/ceph-pg.yaml | 23 ++ playbooks/check-ftype.yaml | 2 +- playbooks/check-latest-packages-version.yaml | 4 +- playbooks/check-network-gateway.yaml | 2 +- playbooks/collect-flavors-and-verify-profiles.yaml | 6 +- playbooks/container-status.yaml | 2 +- playbooks/containerized-undercloud-docker.yaml | 2 +- playbooks/controller-token.yaml | 4 +- playbooks/controller-ulimits.yaml | 4 +- playbooks/ctlplane-ip-range.yaml | 2 +- playbooks/default-node-count.yaml | 4 +- playbooks/dhcp-introspection.yaml | 2 +- playbooks/dhcp-provisioning.yaml | 2 +- playbooks/healthcheck-service-status.yaml | 2 +- playbooks/image-serve.yaml | 2 +- playbooks/ironic-boot-configuration.yaml | 2 +- playbooks/mysql-open-files-limit.yaml | 2 +- playbooks/network-environment.yaml | 2 +- playbooks/neutron-sanity-check.yaml | 14 +- playbooks/no-op-firewall-nova-driver.yaml | 13 -- playbooks/no-op.yaml | 2 +- playbooks/node-disks.yaml | 2 +- playbooks/node-health.yaml | 2 +- playbooks/nova-event-callback.yaml | 2 +- playbooks/nova-status.yaml | 2 +- playbooks/ntp.yaml | 2 +- playbooks/openshift-hw-requirements.yaml | 8 +- playbooks/openshift-nw-requirements.yaml | 4 +- playbooks/openstack-endpoints.yaml | 8 +- playbooks/ovs-dpdk-pmd-cpus-check.yaml | 2 +- playbooks/pacemaker-status.yaml | 2 +- playbooks/rabbitmq-limits.yaml | 2 +- playbooks/repos.yaml | 2 +- playbooks/service-status.yaml | 2 +- playbooks/stack-health.yaml | 2 +- playbooks/stonith-exists.yaml | 5 +- playbooks/switch-vlans.yaml | 2 +- playbooks/tls-everywhere-post-deployment.yaml | 6 +- playbooks/tls-everywhere-pre-deployment.yaml | 6 +- playbooks/tls-everywhere-prep.yaml | 4 +- playbooks/undercloud-cpu.yaml | 4 +- playbooks/undercloud-debug.yaml | 2 +- playbooks/undercloud-disk-space-pre-upgrade.yaml | 8 +- playbooks/undercloud-disk-space.yaml | 12 +- playbooks/undercloud-heat-purge-deleted.yaml | 6 +- playbooks/undercloud-neutron-sanity-check.yaml | 16 +- playbooks/undercloud-process-count.yaml | 2 +- playbooks/undercloud-ram.yaml | 4 +- playbooks/undercloud-selinux-mode.yaml | 4 +- playbooks/undercloud-service-status.yaml | 2 +- playbooks/undercloud-tokenflush.yaml | 4 +- playbooks/validate-selinux.yaml | 21 ++ requirements.txt | 10 +- role-addition.yml | 45 ++-- .../tasks/main.yml | 2 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 0 .../vars/main.yml | 0 roles/ceph/defaults/main.yml | 3 +- .../molecule/ceph-ansible-installed}/Dockerfile.j2 | 0 .../molecule/ceph-ansible-installed/molecule.yml | 48 ++++ .../molecule/ceph-ansible-installed/playbook.yml | 70 ++++++ .../molecule/ceph-ansible-installed/prepare.yml | 29 +++ .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 roles/ceph/molecule/default/playbook.yml | 25 +++ roles/ceph/tasks/ceph-ansible-installed.yaml | 18 +- roles/ceph/tasks/ceph-dependencies-installed.yaml | 26 +++ roles/ceph/tasks/ceph-health.yaml | 101 ++++----- roles/ceph/tasks/ceph-pg.yaml | 145 ++++++++++++ .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 6 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 0 .../vars/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 10 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 8 +- .../vars/main.yml | 0 .../tasks/main.yml | 0 .../vars/main.yml | 4 +- .../tasks/main.yaml | 36 +-- .../defaults/main.yml | 0 .../tasks/main.yml | 4 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 6 +- .../tasks/main.yml | 2 +- .../vars/main.yml | 2 +- .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 4 +- .../tasks/main.yml | 4 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 47 ++++ .../molecule/default/playbook.yml | 6 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 4 +- .../vars/main.yml | 0 .../tasks/main.yml | 0 .../vars/main.yml | 2 +- .../defaults/main.yml | 0 .../files/rogue_dhcp.py | 0 .../tasks/dhcp-introspection.yaml | 6 +- .../tasks/dhcp-provisioning.yaml | 2 +- roles/dns/tasks/main.yml | 2 +- roles/haproxy/molecule/default/playbook.yml | 2 +- .../defaults/main.yml | 0 .../tasks/main.yml | 12 +- .../vars/main.yml | 0 .../defaults/main.yaml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 4 +- .../molecule/default/playbook.yml | 8 +- .../molecule/default/prepare.yml | 2 +- roles/{image-serve => image_serve}/tasks/main.yaml | 2 +- roles/{image-serve => image_serve}/vars/main.yml | 1 + .../defaults/main.yml | 0 .../tasks/main.yml | 0 .../vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 2 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 0 .../vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 34 +-- roles/no-op-firewall-nova-driver/defaults/main.yml | 2 - .../molecule/default/playbook.yml | 70 ------ roles/no-op-firewall-nova-driver/tasks/main.yml | 16 -- roles/no-op-firewall-nova-driver/vars/main.yml | 8 - roles/{no-op => no_op}/tasks/main.yml | 0 roles/{no-op => no_op}/vars/main.yml | 0 roles/{node-disks => node_disks}/defaults/main.yml | 0 roles/{node-disks => node_disks}/tasks/main.yml | 0 roles/{node-disks => node_disks}/vars/main.yml | 0 roles/{node-health => node_health}/tasks/main.yml | 2 +- .../templates/unreachable_nodes.j2 | 0 roles/{node-health => node_health}/vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 14 +- .../vars/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 8 +- .../molecule/default/prepare.yml | 2 +- roles/{nova-status => nova_status}/tasks/main.yml | 2 +- roles/{nova-status => nova_status}/vars/main.yml | 0 roles/ntp/tasks/main.yml | 26 +-- roles/ntp/vars/main.yml | 2 +- .../tasks/openshift-nw-requirements.yaml | 73 ------ .../defaults/main.yml | 4 +- .../tasks/openshift-hw-requirements.yaml | 10 +- .../tasks/openshift-nw-requirements.yaml | 73 ++++++ .../openshift-hw-requirements-warnings.j2 | 0 .../tasks/main.yml | 6 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../{ovs-dpdk-pmd => ovs_dpdk_pmd}/tasks/main.yml | 6 +- roles/{ovs-dpdk-pmd => ovs_dpdk_pmd}/vars/main.yml | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 8 +- .../vars/main.yml | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 8 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 0 .../vars/main.yml | 0 roles/repos/molecule/default/playbook.yml | 4 +- roles/repos/tasks/main.yml | 10 +- roles/service-status/meta/main.yml | 27 --- .../tasks/main.yaml | 2 +- .../{stack-health => stack_health}/tasks/main.yml | 0 roles/{stack-health => stack_health}/vars/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 6 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 4 +- .../vars/main.yml | 3 +- .../defaults/main.yml | 0 .../{switch-vlans => switch_vlans}/tasks/main.yml | 0 roles/{switch-vlans => switch_vlans}/vars/main.yml | 0 .../defaults/main.yml | 0 .../handlers/main.yml | 0 .../tasks/common.yaml | 10 +- .../tasks/overcloud-post-deployment.yaml | 6 +- .../tasks/pre-deployment-containerized.yaml | 16 +- .../tasks/pre-deployment-non-containerized.yaml | 13 +- .../tasks/pre-deployment.yaml | 34 +-- .../tasks/prep.yaml | 16 +- .../vars/main.yml | 0 .../undercloud-debug/molecule/default/molecule.yml | 47 ---- roles/undercloud-disk-space/defaults/main.yml | 9 - roles/{undercloud-cpu => undercloud_cpu}/README.md | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 4 +- .../tasks/main.yml | 0 .../vars/main.yaml | 0 .../README.md | 0 .../defaults/main.yml | 2 +- .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 12 +- .../tasks/main.yml | 4 +- .../vars/main.yaml | 0 .../README.md | 0 roles/undercloud_disk_space/defaults/main.yml | 8 + .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 2 +- .../tasks/main.yml | 8 +- .../vars/main.yaml | 0 .../README.md | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 4 +- .../molecule/default/playbook.yml | 8 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 2 +- .../vars/main.yaml | 4 +- .../README.md | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 34 +-- .../vars/main.yaml | 0 roles/{undercloud-ram => undercloud_ram}/README.md | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 4 +- .../tasks/main.yml | 0 .../vars/main.yaml | 0 .../README.md | 0 .../tasks/main.yml | 4 +- .../vars/main.yml | 0 .../README.md | 0 .../defaults/main.yml | 0 .../tasks/main.yml | 2 +- .../vars/main.yaml | 0 .../README.md | 0 .../defaults/main.yml | 0 .../molecule/default/Dockerfile.j2 | 0 .../molecule/default/molecule.yml | 4 +- .../molecule/default/playbook.yml | 8 +- .../molecule/default/prepare.yml | 2 +- .../tasks/main.yml | 2 +- .../vars/main.yaml | 2 +- roles/validate_selinux/defaults/main.yml | 27 +++ .../handlers/main.yml} | 0 roles/validate_selinux/molecule/default/Dockerfile | 37 +++ .../validate_selinux/molecule/default/molecule.yml | 49 ++++ .../validate_selinux/molecule/default/playbook.yml | 63 ++++++ .../validate_selinux/molecule/default/prepare.yml | 60 +++++ roles/validate_selinux/molecule/default/verify.yml | 15 ++ roles/validate_selinux/tasks/main.yml | 123 ++++++++++ roles/validate_selinux/templates/skip-list.j2 | 3 + roles/validate_selinux/vars/main.yml | 22 ++ .../xfs_check_ftype/molecule/default/Dockerfile.j2 | 37 +++ .../molecule/default/molecule.yml | 0 .../molecule/default/playbook.yml | 2 +- .../molecule/default/prepare.yml | 0 roles/xfs_check_ftype/molecule/default/verify.yml | 15 ++ .../tasks/main.yml | 0 .../vars/main.yml | 0 scripts/run-validations.sh | 2 +- tox.ini | 10 +- zuul.d/layout.yaml | 2 + zuul.d/molecule.yaml | 180 ++++++++------- zuul.d/playbooks/pre.yml | 2 +- zuul.d/playbooks/run.yml | 4 +- 350 files changed, 2443 insertions(+), 980 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d0fadd1..68c7813 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7,2 @@ oslo.config>=5.2.0 # Apache-2.0 -keystoneauth1>=3.4.0 # Apache-2.0 -python-novaclient>=9.1.0 # Apache-2.0 +keystoneauth1>=3.12.0 # Apache-2.0 +python-novaclient>=15.0.0 # Apache-2.0 @@ -11 +11 @@ python-glanceclient>=2.9.1 # Apache-2.0 -python-ironicclient>=2.3.0 # Apache-2.0 +python-ironicclient>=2.7.0 # Apache-2.0 @@ -14,2 +14,2 @@ os-net-config>=7.1.0 # Apache-2.0 -oslo.utils>=3.36.0 # Apache-2.0 -six>=1.10.0 # MIT +oslo.utils>=3.40.2 # Apache-2.0 +six>=1.11.0 # MIT

1 0

tripleo-heat-templates 12.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We eagerly announce the release of: tripleo-heat-templates 12.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Added the configuration option to set reserved_huge_pages. When NovaReservedHugePages is set, "reserved_huge_pages" is set to the value of NovaReservedHugePages. If NovaReservedHugePages is unset and OvsDpdkSocketMemory is set, reserved_huge_pages value is calcuated from KernelArgs and OvsDpdkSocketMemory. KernelArgs helps determine the default huge page size used, the default is set to 2048kb and OvsDpdkSocketMemory helps determine the number of hugepages to reserve. * Adds parameter for configuring heat client_retry_limit config option to increase the number of retries for transient errors. * Added the Octavia anti-affinity parameters. * The new parameter CephExternalMultiConfig may be used to configure OpenStack to use multiple external Ceph clusters. * Introduces two new parameters to configure the archive deleted instances cron job. 1) NovaCronArchiveDeleteAllCells To make sure deleted instances get archived also from the cell0 in a single cell deployment and also in additional cell databases in case of a multi cell deployment. 2) NovaCronArchiveDeleteRowsAge --before is required to prevent the orphaning of libvirt guests if/when nova-compute is down when a db archive cron job fires. This change also modifies 1) the default from 100 to 1000 for NovaCronArchiveDeleteRowsMaxRows to match the default from the nova- manage command instead the default of 100 from the puppet-nova parameter. 2) changes the default for NovaCronPurgeShadowTablesAllCells from false to true also the nova-manage db purge command needs to run for all cells instead of only the default cell. * Added a TripleO service OvsDpdkNetcontrold to enable netcontrold PMD rebalance tool for OvS-DPDK deployments. * HA services use a special container image name derived from the one configured in Heat parameter plus a fixed tag part, i.e. '<registry>/<namespace>/<servicename>:pcmklatest'. To implement rolling update without service disruption, this 'pcmklatest' tag is adjusted automatically during minor update every time a new image is pulled. A new Heat parameter ClusterCommonTag can now control the prefix part of the container image name. When set to true, the container name for HA services will look like 'container-common- tag/<servicename>:pcmklatest'. This allows rolling update of HA services even when the <namespace> changes in Heat. * Enable the new container image naming scheme for HA services. They are now configured in pacemaker to use container image name like 'container-common-tag/<servicename>:pcmklatest'. This allows rolling update of HA services even when the <namespace> changes in Heat. * Add the ability to deploy the glance-api service at DCN/Edge sites. Glance service at the Edge shares the same database as the Glance service in the central control plane, but allows other services such as Cinder and Nova to access a Glance endpoint that is local to the DCN/Edge site. * Enabling additional healtchecks for Swift to monitor account, container and object replicators as well as the rsync process. * The ansible tripleo-hosts-entries is now used for adding individual entries to /etc/hosts for each overcloud node. This role is used instead of the output data from the Heat stack. Deprecation Notes ***************** * NovaEnableNUMALiveMigration was removed and has no effect, becuase the corresponding parameter in nova was deprecated in Train release. * The deployed-server bootstrap environments, templates, and scripts that were previously deprecated are now removed. These removals include deployed-server/deployed-server-bootstrap-centos.sh deployed-server/deployed-server-bootstrap-centos.yaml deployed- server/deployed-server-bootstrap-rhel.sh deployed-server/deployed- server-bootstrap-rhel.yaml environments/deployed-server-bootstrap- environment-centos.yaml environments/deployed-server-bootstrap- environment-rhel.yaml * The environment file at environments/service/neutron-server.yaml has been removed in ussuri as it was previously deprecated in train. * Environment file host-config-and-reboot.yaml has been removed and the required functionality is part of BootParams service. * ExternalPublicUrl, ExternalAdminUrl and ExternalInternalUrl are deprecated. ExternalSwiftPublicUrl, ExternalSwiftAdminUrl and ExternalSwiftInternalUrl should now be used. Bug Fixes ********* * After we switch default neutron driver to ovn also NeutronPluginExtensions should contain dns because "qos,port_security,dns" is default value for ovn * All roles now default to using the net-config-static-bridge.yaml nic config when using deployed-server. Since OVN is the default in TripleO, Compute roles need to have br-ex. Previously when using deployed-server, the default nic config for the non-Controller roles was net-config-static.yaml, which did not create br-ex. * Fixes an issue where filtering of networks for kerberos service principals was too aggressive, causing deployment failure. See bug 1854846 (https://bugs.launchpad.net/tripleo/+bug/1854846). * The WSGI timeout for Heat API is now set to 600 seconds to match the HAProxy timeout and the RPC response timeout. Previously, it was set to 60 seconds, which resulted in API requests timing out. * HA container naming scheme has been updated to look like 'container.common.tag/<servicename>:pcmklatest', in order for podman to not prepend any host suffix in front of this tag, otherwise this confuses the podman resource agent in pacemaker. * Fixes an issue where TripleO fails to set the Barbican key ID for Swift with a permission error if the config files are not relabeled. Other Notes *********** * Not a functionnal change, only cosmetics. For better understanding and readability, changing all the svirt_sandbox_file_t to shorter, nicer container_file_t Changes in tripleo-heat-templates 12.0.0..12.1.0 ------------------------------------------------ ed720b0c8 Add support to run Container Puppet tasks without Paunch 087589555 Replace svirt_sandbox_file_t by container_file_t ee5d5e55e Create /var/lib/config-data if it doesn't exist. 98118b629 Replace '' by [] when a bind mount isn't needed 60f043378 container-puppet.sh: add -r to rm command 1602d68da Dynamically include container-puppet tasks 150935ae1 Remove static reference to InternalApi network c8bc412e4 Dynamically include generate-config tasks c8dcce708 Use action plugin for all_nodes data 80f44a438 Rename roles that we're missed caef56e26 Remove py27 jobs da19fdbcc Add py27 testenv for tox.ini 168958bc5 remove duplicated HAproxy line from scen000 39a7b6754 Introduce CephExternalMultiConfig 45337bdb0 Add missing firewall rule for iscsid in HA deployments 134795a13 Remove unnecessary block/whitespace from step1 tasks bca35e611 Swap tasks to avoid non-existing variable error. b2162a2e4 Enable configuration of notifier publishers 42168c4ac Don't use pacemaker in ironic sa job 573051a72 Fix Placement password hiera is not set for Neutron c6dd5553d Revert "mark scen10 and scen000 update/upgrade non-voting" 9a830255b Remove all the "container_cli rmi -f" from HA containers 1f98e96d3 Revert "Use YAML anchors/aliases to reduce playbook task repetition" c350126be mark scen10 and scen000 update/upgrade non-voting 436ea9666 Fix undefined variable in cinder_backup service. bc0148642 Ignore SR-IOV VFs on dhcp_all_interfaces list 5d8425dda Rename common deploy step 1 tasks 242678060 Remove /run bind-mount from mistral containers bc4df9c5a Use YAML anchors/aliases to reduce playbook task repetition 020ad398d Add ceph_ansible_repo variable on ceph-base 547a510f6 Fix keepalived logging on disk 7bbee2d86 Increase concurrency when starting containers 5dd32cde0 Add CellController to multiple-nics ci template 2092b1303 Update ffwd-upgrade branch names edd10576c Remove stray conditional from aodh-evaluator tasks b8c6154e7 Create qemu user/group on controller 8cc62c5f1 Remove deprecated authtoken::auth_uri 6330d95cb Remove unused admin_password d2db2292e Fix hieradata for Heat API timeout 119769384 Check to make sure compute service is deployed before scale down 719d8329d Drop z flag on /var/run, it prevents redeployment 3230f005c HA: reorder init_bundle and restart_bundle for improved updates 36ea0148e Update ro excludes ba8b99df6 Update inflight validation role name after a rename in ooo-validations 714e1b5d3 Add DeployIdentifier to extra config containers eac636c9e Add network vip mapping into service data 14db20bae Force facts cache refreshing before upgrade. fa52709a8 Fix incorrect parameter to set max delay in cinder db purge cron bc27951ff Drop NovaEnableNumaLiveMigration 2c4802acd split() function expects string not array acf208609 Raise Heat API WSGI timeout to 600s ba487827e roles: Update description of ComputeRealTime role 08ca0a97d Change optparse to argparse a5ffef4a4 Fix generation of TRIPLEO_CONFIG_HASH for services 2b3a5aa1f Default all roles for deployed-server to net-config-static-bridge 9a2a36437 Update all roles to use the new role name 55d400230 Switch from 'podman rm' to tripleo-container-rm role 26305fae9 Set region in authtoken middleware settings 9cd4e6c4f Assign service role for ironic user 643c4028b clustercheck: use fqdn instead of ip for bind address 4e739f7e7 Correct current cinder-backup image var for upgrades 522f3d74a Improve documentation for 'NovaComputeCpuSharedSet' parameter d91a99af3 roles: Remove use of NovaVcpuPinSet from ComputeRealTime a30342f25 Fix deployment on pacemaker remote nodes 1046bf635 container-puppet: remove deprecated directory & json files c0b1055b1 Use ansible to install client packages ee778fc24 Don't disable compute cell in scale down tasks for additional cells 706d9b398 Open ports for Metrics QDRs 1044d0bf3 Add 'scale-up' upgrade steps for cinder-volume a4de1eac9 mysql: refactor upgrade tasks to work without paunch 18e51ca53 Add novajoin to EndpointMap c290ce3f1 Add 'scale-up' upgrade steps for cinder-backup 5bfbcd32e depends_on: add .service to avoid errors in logs 32889f59f Remove references to non-existent services f0aaaed68 Add swiftoperator role on ceph-rgw template a25cb11b3 Add 'scale-up' upgrade steps for manila 2da9cc14b horizon: put plugins toggles in quotes 948fc6bcb nova: Always provide LIBGUESTFS_BACKEND=libvirt:qemu:///system f9dc0dbee nova-compute: add tripleo-container-shutdown service dep c8d53f86c Add missing any_errors_fatal 8d6edac63 Modify import_role to include_role for boot params service 362e92fb8 deployment: document keystone_resources 49c8f9d48 Add 'never' to the tags set for the Ceph systemd units migration task 4c167191d keystone: fix trailing space 77b48f398 Fix permission error if Barbican is enabled for Swift 9f5ba23c8 Adding hourly option to LogrotateRotationInterval parameter f907d061b Bypass openvswitch update logic if expected packages are not present b61f71a74 HA: Fix the cluster common tag behaviour with podman a3dd78130 Revert "Limit concurrency in container-puppet to image pull" 7f40baabc Manage all Keystone resources with Ansible e6d63a90b Remove environments/services/neutron-server.yaml 9d8dcf87b Hyper-converged SR-IOV role for compute nodes. 182f77d91 Introduce CephExtraKeys 4cc2b1196 Run update without yum update to apply hotfixes. 9305d1efe Remove PreNetworkConfig resource 318ec87c3 Fix sshd firewall rule b8923f6af fix a typo daef223cc Fix pacemaker firewall rules 238800d13 Fix ceph-grafana firewall rules 849e07f24 Fix nuage firewall rules c1f7facac Add an experimental test container volume create service f1e1f4ba0 Do not configure Hiera and Hieradata in Ansible check mode d088cf66b Correct invalid jinja set acd176e81 Limit concurrency in container-puppet to image pull 25a2045e6 Deploy /etc/openstack/clouds.yaml with Ansible 122929c21 Create a dedicated log file for healthchecks for collectd 5fdb1a4c5 Update nonha arch env file 30ca49bf6 Add ability to deploy glance at DCN/Edge sites f1b1273f2 Revert "Optional enable undercloud nova-metadata-api" 7c2fa7b8e mysql: move firewall_rules to mysql-container-puppet 609999933 Provide option to set reserved_huge_pages 0bbd78b5b Fix typos in hiera values 32d3676e5 keystone/bootstrap: fix identity service name 744da29ba HA: increase resource default op timeout for podman bundles 67a8357b6 Revert "Ensure /var/log/journal exists as soon as possible" f7a356006 Create /var/log/journal directory during step-0 e47e7db8a Fix Octavia to use correct Puppet class 3056f25bd Make pcsd listen on PacemakerNetwork/PacemakerRemoteNetwork d23dee75b Use paunch to handle container removal. d31b694a2 Remove upload_validations workflow execution 106ce3267 Use async tasks for long running common tasks 2a6336a74 Execute deploy_steps_tasks per step af88862d9 Move some common tasks to step 1 a85d3d706 Delegate and run once debug start-at-task messages 9c5c36632 Mount /boot from the host within the nova-compute container 9cbfdfa14 Ensure /var/log/journal exists as soon as possible 6f8b2db26 Use include_tasks instead of import_tasks fe6b235e5 scale: fixes for compute scale down d8dd715d3 Add CephGrafana resource to the ControllerStorageNFS role c59583577 Set octavia services' stop grace period to 300sec 9f4832fcc Increase rabbitmq tcp backlog 2f8964133 Try deleting container for failures too 71b5d4086 Enable horizon healthcheck 5f1db96f9 Enable healthcheck script in clustercheck service 3ae7fb610 Enable additional Swift healtchecks 61033c5d8 Add keystone_puppet_config eeec9a52e Configure additional info during bootstrap 6f90cd852 Update environment var for keystone bootstrap 04a5937e1 Properly set loopback_users via rabbitmq::loopback_users 76f683f79 Change default value for NeutronPluginExtensions d4c1c8456 HA: enable cluster-common-tag naming scheme by default bcebf3996 Ensure Ceph dependencies are installed in pre-provisioned nodes 3e36f99f9 Remove previously deprecated deployed-server bootstrap files 1a5e1d920 Use "name" argument for include_role 00cd4b0ae Optional enable undercloud nova-metadata-api f6fe74205 Remove ceph backend by default for gnocchi 0419a5b8e Install tmpwatch on the overcloud f4a4b236c New Parameter NovaCronArchiveDeleteAllCells and NovaCronArchiveDeleteRowsAge 7d1cd360d container-puppet: SystemExit with RC 1 to actually error out 415d4de08 swift-external: deprecate External*Url 8db74afe8 Make tripleo-ci-centos-7-containers-undercloud-minion depends on pep 82408e4b8 Ensure rabbitmq deployment container is restarted at every update 0b8378aa9 Add ClientRetryLimit parameter for heat 7f8a565ea Add Octavia anti-affinity parameters a166ec6bc HA: minor update of arbitrary container image name fa9932911 deploy-steps-tasks/containers: set concurrency to 2 d0563f185 overcloud/service_names: merge service_names & enabled_services af79ae34a Relax filtering in krb-service-principals jinja 88d6c029d Fix the Octavia amphora provider driver description 0808454b1 Revert "Disable ceph dashboard to fix upstream ci" b5eff6783 Re-enable "service_names" hieradata 016f7c600 Remove unnecessary slash volume maps a309f03c1 Move the legacy telemetry environment template to correct location 5ea84f71e Enable external public endpoint for MetricsQdr e686a50cd Fix containers-common.yaml path for RsyslogSidecar service cdda44028 Fix rsyslog issues 2a3a69554 Use a smaller,static custom mapping file for Mistral and TripleO 858cc6c54 Fix sed in run-os-net-config to only replace values, not keys ade6c3b37 Use yaml.SafeLoader instead of yaml.FullLoader 531327eec Remove unused post update and upgrade tasks 36a84820e ovn_dbs upgrade-with-os work 3b146b1e4 Ensure we set proper SELinux label on container-puppet.sh f22dce447 Make sure glance_api_tls_proxy logs are persisted on the host b7e28c9a8 Move 'Ensure network service is enabled' after os-net-config has run 0362abcbd Don't set all_nodes data as group_vars in check mode 393e96b5b Use '0' instead of root in container-puppet.py fb8009458 Provide utility to generate NodeDataLookup from Ironic b82725f5e Force redis::ulimit to be an integer 89ecaeb11 Disable pxe_tftp systemd services during upgrade 4d3b5be7e Add netcontrold service for DPDK roles 1ce103186 Revert "Drop the SELinux flags for openvswitch /var/run directory" 42eb7c98b Remove libvirt packaged dependencies 7a6ad9ae9 Add keystone::bootstrap hiera data 189341fde Create the default storage pool before calling create-node.sh 730ae4a78 Add healthcheck for nova-virtlogd container 597cdb679 Use ansible for hosts entries Diffstat (except docs and test files) ------------------------------------- ci/common/ironic_standalone_post.yaml | 6 - ci/common/vbmc_setup.yaml | 16 + ci/environments/multinode-3nodes-registry.yaml | 1 + .../network/multiple-nics/network-environment.yaml | 1 + .../multiple-nics/network-isolation-absolute.yaml | 5 + .../scenario000-multinode-containers.yaml | 2 +- ci/environments/scenario000-standalone.yaml | 1 + .../scenario001-multinode-containers.yaml | 9 + ci/environments/scenario001-standalone.yaml | 41 +- ci/environments/scenario002-standalone.yaml | 19 +- .../scenario004-multinode-containers.yaml | 1 + ci/environments/scenario004-standalone.yaml | 1 + .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 1 + .../scenario010-multinode-containers.yaml | 1 + ci/environments/scenario010-standalone.yaml | 1 + ci/environments/scenario012-standalone.yaml | 13 +- common/container-puppet.py | 73 ++- common/container-puppet.sh | 11 +- common/container_startup_configs_tasks.yaml | 4 +- common/deploy-steps-tasks-step-0.j2.yaml | 21 +- common/deploy-steps-tasks-step-1.yaml | 607 +++++++++++---------- common/deploy-steps-tasks.yaml | 210 ++----- common/deploy-steps.j2 | 240 +++++--- common/generate-config-tasks.yaml | 104 ++++ common/host-container-puppet-tasks.yaml | 81 +++ common/services/role.role.j2.yaml | 13 +- .../nova_wait_for_api_service.py | 20 +- .../nova_wait_for_compute_service.py | 20 +- .../pacemaker_restart_bundle.sh | 87 ++- container_config_scripts/pacemaker_wait_bundle.sh | 320 +++++++++++ .../deployed-server-bootstrap-centos.sh | 38 -- .../deployed-server-bootstrap-centos.yaml | 27 - deployed-server/deployed-server-bootstrap-rhel.sh | 35 -- .../deployed-server-bootstrap-rhel.yaml | 27 - deployment/README.rst | 8 + deployment/aodh/aodh-api-container-puppet.yaml | 57 +- deployment/aodh/aodh-base.yaml | 9 +- .../aodh/aodh-evaluator-container-puppet.yaml | 11 +- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 12 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 2 +- .../barbican/barbican-api-container-puppet.yaml | 32 +- .../liquidio-compute-config-container-puppet.yaml | 2 +- .../ceilometer-agent-central-container-puppet.yaml | 21 +- .../ceilometer-agent-compute-container-puppet.yaml | 8 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 8 +- ...ometer-agent-notification-container-puppet.yaml | 88 ++- .../ceilometer-base-container-puppet.yaml | 56 +- deployment/ceph-ansible/ceph-base.yaml | 209 ++++--- deployment/ceph-ansible/ceph-grafana.yaml | 6 +- deployment/ceph-ansible/ceph-rgw.yaml | 27 +- deployment/cinder/cinder-api-container-puppet.yaml | 111 ++-- .../cinder/cinder-backup-pacemaker-puppet.yaml | 146 +++-- deployment/cinder/cinder-base.yaml | 2 +- .../cinder/cinder-common-container-puppet.yaml | 8 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 4 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 143 +++-- .../openstack-clients-baremetal-ansible.yaml | 40 ++ ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 2 +- deployment/containers-common.yaml | 21 +- deployment/database/mysql-base.yaml | 9 - deployment/database/mysql-container-puppet.yaml | 58 +- deployment/database/mysql-pacemaker-puppet.yaml | 115 ++-- deployment/database/redis-base-puppet.yaml | 2 +- deployment/database/redis-container-puppet.yaml | 12 +- deployment/database/redis-pacemaker-puppet.yaml | 109 ++-- .../openstack-clients-baremetal-puppet.yaml | 0 deployment/etcd/etcd-container-puppet.yaml | 4 +- .../designate/designate-api-container-puppet.yaml | 25 +- .../designate-central-container-puppet.yaml | 12 +- .../designate/designate-mdns-container-puppet.yaml | 6 +- .../designate-producer-container-puppet.yaml | 4 +- .../designate/designate-sink-container-puppet.yaml | 4 +- .../designate-worker-container-puppet.yaml | 8 +- deployment/glance/glance-api-container-puppet.yaml | 44 +- .../glance/glance-api-edge-container-puppet.yaml | 82 +++ .../glance/glance-api-logging-file-container.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 68 +-- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 12 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 14 +- deployment/haproxy/haproxy-container-puppet.yaml | 6 +- .../haproxy/haproxy-edge-container-puppet.yaml | 123 +++++ deployment/haproxy/haproxy-pacemaker-puppet.yaml | 101 ++-- deployment/heat/heat-api-cfn-container-puppet.yaml | 48 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 6 +- deployment/heat/heat-api-container-puppet.yaml | 62 ++- deployment/heat/heat-base-puppet.yaml | 6 - deployment/heat/heat-engine-container-puppet.yaml | 25 +- deployment/horizon/horizon-container-puppet.yaml | 77 ++- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 61 ++- .../ironic/ironic-conductor-container-puppet.yaml | 12 +- .../ironic/ironic-inspector-container-puppet.yaml | 34 +- .../ironic-neutron-agent-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 23 +- deployment/iscsid/iscsid-container-puppet.yaml | 4 +- .../keepalived/keepalived-container-puppet.yaml | 8 +- deployment/kernel/kernel-baremetal-ansible.yaml | 2 +- .../kernel-boot-params-baremetal-ansible.yaml | 6 +- deployment/keystone/keystone-container-puppet.yaml | 166 ++++-- deployment/logging/files/barbican-api.yaml | 4 +- deployment/logging/files/heat-api-cfn.yaml | 4 +- deployment/logging/files/heat-api.yaml | 4 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 4 +- deployment/logging/files/neutron-api.yaml | 4 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 4 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-libvirt.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 4 +- deployment/logging/files/placement-api.yaml | 4 +- deployment/logging/rsyslog-container-puppet.yaml | 11 +- .../logging/rsyslog-sidecar-container-puppet.yaml | 2 +- deployment/logging/stdout/haproxy.yaml | 2 +- deployment/login-defs/login-defs-baremetal.yaml | 2 +- .../logrotate-crond-container-puppet.yaml | 6 +- deployment/logrotate/tmpwatch-install.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 64 ++- .../manila/manila-scheduler-container-puppet.yaml | 10 +- deployment/manila/manila-share-common.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 10 +- .../manila/manila-share-pacemaker-puppet.yaml | 148 +++-- .../memcached/memcached-container-puppet.yaml | 6 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 6 +- deployment/metrics/collectd-container-puppet.yaml | 48 +- deployment/metrics/qdr-container-puppet.yaml | 29 +- deployment/mistral/mapping.json | 373 +++++++++++++ .../mistral/mistral-api-container-puppet.yaml | 44 +- deployment/mistral/mistral-base.yaml | 17 +- .../mistral/mistral-engine-container-puppet.yaml | 5 +- .../mistral-event-engine-container-puppet.yaml | 5 +- .../mistral/mistral-executor-container-puppet.yaml | 15 +- deployment/multipathd/multipathd-container.yaml | 8 +- .../neutron-agents-ib-config-container-puppet.yaml | 7 + .../neutron/neutron-api-container-puppet.yaml | 56 +- .../neutron/neutron-controller-plugin-nuage.yaml | 16 +- .../neutron/neutron-dhcp-container-puppet.yaml | 14 +- .../neutron-l2gw-agent-baremetal-puppet.yaml | 2 +- .../neutron/neutron-l3-container-puppet.yaml | 14 +- .../neutron/neutron-metadata-container-puppet.yaml | 8 +- .../neutron-mlnx-agent-container-puppet.yaml | 13 +- .../neutron-ovs-agent-container-puppet.yaml | 26 +- deployment/neutron/neutron-plugin-ml2.yaml | 2 +- .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 67 ++- deployment/nova/nova-base-puppet.yaml | 20 +- deployment/nova/nova-compute-container-puppet.yaml | 192 +++++-- .../nova/nova-conductor-container-puppet.yaml | 35 +- deployment/nova/nova-ironic-container-puppet.yaml | 12 +- deployment/nova/nova-libvirt-container-puppet.yaml | 25 +- .../nova/nova-libvirt-guests-container-puppet.yaml | 11 +- .../nova/nova-metadata-container-puppet.yaml | 33 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 8 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 27 +- deployment/nova/novajoin-container-puppet.yaml | 29 +- .../octavia/octavia-api-container-puppet.yaml | 58 +- deployment/octavia/octavia-base.yaml | 5 + .../octavia-health-manager-container-puppet.yaml | 17 +- .../octavia-housekeeping-container-puppet.yaml | 17 +- .../octavia/octavia-worker-container-puppet.yaml | 17 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 2 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 81 +++ .../ovn/ovn-controller-container-puppet.yaml | 14 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 4 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 137 +++-- deployment/ovn/ovn-metadata-container-puppet.yaml | 22 +- .../pacemaker/clustercheck-container-puppet.yaml | 16 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 74 ++- .../pacemaker-remote-baremetal-puppet.yaml | 6 + .../placement/placement-api-container-puppet.yaml | 46 +- deployment/podman/podman-baremetal-ansible.yaml | 16 +- deployment/qdr/qdrouterd-container-puppet.yaml | 6 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 18 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 15 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 110 ++-- .../rabbitmq-messaging-pacemaker-puppet.yaml | 108 ++-- .../rabbitmq-messaging-rpc-container-puppet.yaml | 15 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 110 ++-- deployment/sahara/sahara-api-container-puppet.yaml | 36 +- deployment/sahara/sahara-base.yaml | 8 +- .../sahara/sahara-engine-container-puppet.yaml | 10 +- .../securetty/securetty-baremetal-ansible.yaml | 2 +- deployment/sshd/sshd-baremetal-puppet.yaml | 21 +- .../external-swift-proxy-baremetal-puppet.yaml | 72 ++- deployment/swift/swift-proxy-container-puppet.yaml | 50 +- .../swift/swift-storage-container-puppet.yaml | 50 +- deployment/time/ptp-baremetal-ansible.yaml | 4 +- deployment/time/timezone-baremetal-ansible.yaml | 2 +- .../tripleo-packages-baremetal-puppet.yaml | 47 +- .../undercloud/tempest-container-puppet.yaml | 6 +- deployment/undercloud/undercloud-upgrade.yaml | 20 +- .../tripleo-validations-baremetal-ansible.yaml | 2 +- ...tas-hyperscale-controller-baremetal-puppet.yaml | 28 +- deployment/zaqar/zaqar-container-puppet.yaml | 69 ++- environments/compute-real-time-example.yaml | 20 +- environments/dcn-hci.yaml | 10 + environments/dcn.yaml | 10 + ...ployed-server-bootstrap-environment-centos.yaml | 11 - ...deployed-server-bootstrap-environment-rhel.yaml | 11 - environments/deployed-server-environment.j2.yaml | 4 +- environments/docker-ha.yaml | 1 + .../enable-legacy-telemetry.yaml | 5 +- environments/host-config-and-reboot.j2.yaml | 23 - environments/metrics/collectd-write-qdr.yaml | 6 +- environments/metrics/qdr-edge-only.yaml | 8 +- environments/metrics/qdr-form-controller-mesh.yaml | 6 +- environments/nonha-arch.yaml | 2 +- .../services-baremetal/neutron-ml2-cisco-vts.yaml | 1 + environments/services-baremetal/neutron-sriov.yaml | 1 + environments/services/netcontrold.yaml | 2 + environments/services/neutron-ml2-cisco-vts.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 1 + environments/services/neutron-ovs-dpdk.yaml | 1 + environments/services/neutron-ovs-dvr.yaml | 1 + environments/services/neutron-ovs.yaml | 1 + environments/services/neutron-server.yaml | 5 - environments/services/neutron-sriov.yaml | 1 + environments/ssl/no-tls-endpoints-public-ip.yaml | 5 +- environments/ssl/tls-endpoints-public-dns.yaml | 5 +- environments/ssl/tls-endpoints-public-ip.yaml | 5 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 5 +- environments/standalone.yaml | 3 +- environments/standalone/standalone-overcloud.yaml | 2 +- environments/standalone/standalone-tripleo.yaml | 3 +- environments/stdout-logging.yaml | 2 +- environments/storage-environment.yaml | 2 +- environments/storage/glance-nfs.yaml | 4 +- environments/swift-external.yaml | 6 +- environments/undercloud.yaml | 2 +- .../krb-service-principals/role.role.j2.yaml | 2 +- extraconfig/post_deploy/clouds_yaml.py | 54 -- extraconfig/post_deploy/standalone_post.yaml | 73 --- extraconfig/post_deploy/undercloud_post.py | 9 +- extraconfig/post_deploy/undercloud_post.yaml | 43 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 4 +- network/endpoints/build_endpoint_map.py | 45 +- network/endpoints/endpoint_data.yaml | 21 + network/endpoints/endpoint_map.yaml | 527 ++++++++++++++++++ network/scripts/run-os-net-config.sh | 5 +- network/service_net_map.j2.yaml | 18 +- overcloud-resource-registry-puppet.j2.yaml | 6 +- overcloud.j2.yaml | 17 +- puppet/role.role.j2.yaml | 10 +- .../NovaReservedHugePages-35a13e828bfc92e9.yaml | 10 + ...t-retry-limit-heat-config-14239eada092811e.yaml | 4 + ...-anti-affinity-parameters-fe9222f17b16ee1f.yaml | 4 + ...eph_external_multi_config-80d707e5bf75e886.yaml | 5 + ...t_NeutronPluginExtensions-b31ed1c44fec4568.yaml | 5 + ...-net-config-static-bridge-c15bf767d3a28759.yaml | 7 + ...nable-numa-live-migration-5e0601c7d26a8f3c.yaml | 5 + ...ot-filter-on-vip-in-jinja-c8f996ffed94d3cd.yaml | 7 + ...heat-api-wsgi-timeout-600-640058f1ae18232c.yaml | 5 + ...archive_delete_parameters-19288fa689965c58.yaml | 22 + .../ovsdpdk_netcontrold-0a1d4f3e26cea0c6.yaml | 5 + ...emaker-cluster-common-tag-45c4e8a6e7b08735.yaml | 12 + ...cluster-common-tag-podman-f9a71344af5c73d6.yaml | 7 + ...enable-cluster-common-tag-fe03c47bbcbba13c.yaml | 6 + ...-enable-management-plugin-94b27747e4f5e685.yaml | 2 +- ...deployed-server-bootstrap-07590a3cf4688cc9.yaml | 11 + ...ve-neutron-server-mapping-211ca9751dec268d.yaml | 5 + .../notes/remove_pre_network-fb38d9c2095e0597.yaml | 5 + ...pport-glance-at-dcn-sites-6163b8f5333e31a7.yaml | 8 + ...ile_t-to-container_file_t-f4914561f6e9e4c7.yaml | 5 + ...t-additional-healthchecks-c286f7b7116e6543.yaml | 5 + ...swift-barbican-key-id-fix-108f8b58a5092d0a.yaml | 5 + .../notes/swift_external-d9870450f191b89a.yaml | 6 + ...ansible-for-hosts-entries-b4905552515e17ff.yaml | 6 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 65 +++ roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputeRealTime.yaml | 18 +- roles/ControllerStorageDashboard.yaml | 6 +- roles/ControllerStorageNfs.yaml | 5 +- roles/DistributedCompute.yaml | 6 + roles/DistributedComputeHCI.yaml | 6 + sample-env-generator/dcn.yaml | 6 + sample-env-generator/ssl.yaml | 17 +- sample-env-generator/standalone.yaml | 5 +- tools/make_ceph_disk_list.py | 141 +++++ tools/yaml-nic-config-2-script.py | 2 +- tools/yaml-validate.py | 56 +- tox.ini | 7 + zuul.d/layout.yaml | 5 +- 292 files changed, 5985 insertions(+), 2908 deletions(-)

1 0

blazar-nova 2.0.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are pleased to announce the release of: blazar-nova 2.0.0: Nova related filters and extensions for Blazar This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/blazar-nova Download the package from: https://tarballs.openstack.org/blazar-nova/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 2.0.0 ^^^^^ Upgrade Notes * Python 2 is no longer supported. Python 3 is required. Changes in blazar-nova 1.3.0..2.0.0 ----------------------------------- 9f030eb Stop testing with py2 4856c72 Switch to Ussuri jobs 89dc528 Update the constraints url Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 9 +-------- releasenotes/notes/drop-python2-406d4474c1cf9cf9.yaml | 4 ++++ setup.cfg | 2 -- test-requirements.txt | 1 - tox.ini | 12 +++++------- 5 files changed, 10 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b7996e6..023cff6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +9,0 @@ sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD

1 0

tripleo-puppet-elements 12.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We contentedly announce the release of: tripleo-puppet-elements 12.1.0: Puppet building rules for OpenStack images. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.1.0 ^^^^^^ Other Notes * Nova services are now running in the containers but we have still a lot of libvirt packages installed on Overcloud systems. This change remove unnecessary libvirt packages. Changes in tripleo-puppet-elements 12.0.0..12.1.0 ------------------------------------------------- 49e73ee update tox tests for py3 43dbe36 RHEL8: Use podman-docker 359bc74 Remove libvirt package Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/pkg-map | 1 + .../overcloud-compute/install.d/package-installs-overcloud-compute | 1 - elements/overcloud-compute/pkg-map | 1 - .../overcloud-compute/post-install.d/51-remove-libvirt-default-net | 6 ------ .../post-install.d/51-disable-libvirtd-service | 7 ------- releasenotes/notes/remove-libvirt-deps-8994d3d325af0765.yaml | 6 ++++++ zuul.d/layout.yaml | 1 - 7 files changed, 7 insertions(+), 16 deletions(-)

1 0

tripleo-common 12.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are stoked to announce the release of: tripleo-common 12.1.0: A common library for TripleO workflows. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.1.0 ^^^^^^ Bug Fixes * The RootStackName parameter is now added to the plan in plan- environment.yaml on both stack create and update. Previously it was only added on create. Changes in tripleo-common 12.0.0..12.1.0 ---------------------------------------- a05d173f pin ironicclient under 4.0.0 for py27 578776e0 Fixes for CentOS8 containers build d6ea8e02 remove py27 tox job ff3e716b Add tripleo_role_networks to inventory role group vars 813ffef3 tests: Get RoleData correctly ccefe28e Remove heat_capabilities action plugin bc1e1be3 Revert "Make healthchecks more strict" 50df840f Define all api versions in constraints 24b3c935 Remove useless parameters from overcloudrc cdd6fa1d Remove workbook related to plan environment 8ab0901a Tune ansible configuration for better performance 9003b7ac Raise exception on KeyboardInterrupt 07833ad5 Add config_download_args to the deployment workflow. 39f0f369 Force docker format ba02b0a2 Make healthchecks more strict 87d45ac4 Dynamically set the number of Ansible forks. ef77f081 container_update: Retry removing containers. d15d8df6 Improve error messaging around auth failures a6ce2a8f Drop the nuetron-server-ovn and odl images dcf99e71 Image uploader: use HTTPS for "no verify" registries 1b4f32a2 image_uploader (attempt #3): fix images upload with no labels 952be514 Remove unused container images bbca58f2 Enforce 0600 permissions on an existing SSH private key file. 08f5b6d1 Handle stack not found during inventory generation 81e823c6 Derive network config fails 95138e9d Derive new nova compute parameters 101bff00 Remove checking for already running config_download_deploy e366245e workbooks/deployment: ignore uuid to hostname errors with splitstack & nova-less ac478f3c Remove the tripleo.ansible action 6c897972 image_uploader/base handle when an image has null labels 3a47fab6 Update template overrides for rabbitmq faec3e08 image_uploader: handle when an image has null labels 45ab2677 Fix quoting for PYTHONWARNINGS 2ed04a87 More docs for image uploader class methods 95b68c6d image-uploader: allow an image without Labels to be uploaded fd7b5f2e Revert "Added support of overcloud os_cloud" 04abcf6e add and unify the retries when messages are published to swift 428f9965 Bump ceph/daemon container image to v4.0.8 b44fda97 Add container images for DCN/Edge deployments 90584a80 Increase randomness of generated CephFSID 6b4f47dd Change the python interpreter discovery mode. d407c96d Ensure blacklisted nodes are not included in server_names 9e8f79cc actions/ansible: catch errors when cleaning the work directory 0fa8f221 Default to 50 Ansible forks. 33417a43 Remove workdir only if it's a temporary one 4e8e9a49 Make ()'s around step|int optional 03fe9dfc Add deploy_steps_tasks to PER_TASK_STEPS 458d1add Revert "Update hostvars lookup to fix regression" 22257657 Fix ironic-pxe container healthcheck 4ee04749 Add horizon health check c0771bf7 Incorrectly derives NeutronPhysnetNUMANodesMapping 81145138 Using API instead yaql to get manageable nodes d9c82d8c config: refactor how per step tasks are generated 9641cc2c OvS DPDK parameters failing in NIC Partitioning 12ecf6c8 Pass container_config to config actions 5d44457a Quote output values for overcloudrc 7e1f2ce7 Clarify introspection failed attempt log message d8679da6 Update hostvars lookup to fix regression 7adf317b Write ansible log content to a different log file 07444eed Add RootStackName parameter on stack update Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 2 +- container-images/overcloud_containers.yaml | 18 +- container-images/overcloud_containers.yaml.j2 | 94 +----- .../tripleo_kolla_template_overrides.j2 | 18 +- healthcheck/ironic-pxe | 2 +- ...d-rootstackname-on-update-258dbf091fea497e.yaml | 5 + requirements.txt | 3 +- scripts/container-update.py | 23 +- setup.cfg | 6 +- tripleo_common/actions/ansible.py | 208 ++---------- tripleo_common/actions/base.py | 64 ---- tripleo_common/actions/container_images.py | 25 +- tripleo_common/actions/deployment.py | 40 --- tripleo_common/actions/derive_params.py | 6 +- tripleo_common/actions/heat_capabilities.py | 230 ------------- tripleo_common/actions/parameters.py | 52 +-- tripleo_common/actions/templates.py | 5 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 5 +- tripleo_common/image/image_uploader.py | 283 +++++++++++----- tripleo_common/image/kolla_builder.py | 4 +- tripleo_common/inventory.py | 71 ++-- tripleo_common/utils/clouds_yaml.py | 74 ---- tripleo_common/utils/config.py | 19 +- tripleo_common/utils/overcloudrc.py | 18 +- tripleo_common/utils/passwords.py | 2 +- tripleo_common/utils/plan.py | 114 +++++-- workbooks/baremetal.yaml | 16 +- workbooks/deployment.yaml | 71 +--- workbooks/derive_params_formulas.yaml | 4 +- workbooks/heat_environments.yaml | 97 ------ workbooks/messaging.yaml | 15 +- workbooks/package_update.yaml | 8 +- workbooks/plan_management.yaml | 15 +- zuul.d/layout.yaml | 3 - 50 files changed, 1090 insertions(+), 1864 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9e1160bf..626a059f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16,2 @@ python-glanceclient>=2.8.0 # Apache-2.0 -python-ironicclient>=2.3.0 # Apache-2.0 +python-ironicclient!=2.5.2,!=2.7.1,!=3.0.0,>=2.3.0,<4.0.0;python_version=='2.7' # Apache-2.0 +python-ironicclient!=2.5.2,!=2.7.1,!=3.0.0,>=2.3.0;python_version>='3.6' # Apache-2.0

1 0

paunch 6.0.1 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are chuffed to announce the release of: paunch 6.0.1: Utility to launch and manage containers using YAML based configuration data This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 6.0.0..6.0.1 ------------------------------ 3012fe7 Execute healthchecks as root 3813fc7 Do not force remove containers 0560631 load_config: allow the config to be overriden 505dc92 Add SyslogIdenfier to healthcheck systemd unit b5be450 builder: include environment when running an exec 3ab0936 Exit 1 if a container fails and return the error 14fa098 Do not always needlessly pull the images via podman 3e19521 Return an error if tripleo-ansible deployed containers 12ccf36 Fix action Apply ignoring managed-by arg de7e74a Add missing ExecReload in container service unit file Diffstat (except docs and test files) ------------------------------------- paunch/builder/base.py | 22 +++++++++++++- paunch/cmd.py | 2 +- paunch/runner.py | 60 +++++++++++++++++++++++++++++++------- paunch/utils/common.py | 11 ++++++- paunch/utils/systemd.py | 4 ++- 9 files changed, 149 insertions(+), 20 deletions(-)

1 0

puppet-sahara 16.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are ecstatic to announce the release of: puppet-sahara 16.1.0: Puppet module for OpenStack Sahara This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. 16.1.0 ^^^^^^ Upgrade Notes * The deprecated sahara::service::all class is removed. Please use the specific classes to deploy the API and engine services. Changes in puppet-sahara 16.0.0..16.1.0 --------------------------------------- f9d5404 Prepare Ussuri M2 845bfb9 Remove autorequire for sahara-all 11def8c Remove sahara::service::all 1e75020 Fix stdlib version in metadata Diffstat (except docs and test files) ------------------------------------- lib/puppet/type/sahara_cluster_template.rb | 3 +- lib/puppet/type/sahara_node_group_template.rb | 4 +- manifests/params.pp | 5 -- manifests/service/all.pp | 54 -------------- metadata.json | 10 +-- .../notes/remove-sahara-all-6baa65d6baf6b9dc.yaml | 5 ++ spec/classes/sahara_all_spec.rb | 84 ---------------------- 7 files changed, 12 insertions(+), 153 deletions(-)

1 0