January 2021 - Release-announce - lists.openstack.org

tripleo-puppet-elements 12.3.3 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are gleeful to announce the release of: tripleo-puppet-elements 12.3.3: Puppet building rules for OpenStack images. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 12.3.2..12.3.3 ------------------------------------------------- 92f99b5 Add sysstat package to collect sar data by default Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/install.d/package-installs-overcloud-base | 1 + elements/overcloud-base/pkg-map | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

tripleo-validations 12.3.3 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are overjoyed to announce the release of: tripleo-validations 12.3.3: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.3.3 ^^^^^^ Bug Fixes * Existing resources "DISK_GB", "MEMORY_MB", "VCPU" were not considered to be available in case of custom_resource_class_val == False, also use correct types for resource comparison and required_count calculation. Changes in tripleo-validations 12.3.2..12.3.3 --------------------------------------------- 14bbbbc Remove useless __init__.py file in library 2a3c64c Add tripleo-validations role for component testing aee0b3a Remove workaround for broken dogpile.cache and lower-constraints file 34d064a replace max_fds with sysctl call 484557f Fix conditionals/types in check_flavors and verify_profiles e180734 Add a validation to check the local. e8f1810 Add validation to verify the RHSM version. b300bd2 Use the default flavor name when flavor parameter is not defined c03ccd5 Remove ceph-pg from openstack tripleo validator run groups e6a4f12 [USSURI-ONLY] Remove undercloud_cpu molecule job from zuul jobs bd800b9 Optimize container_cli usage by mysql-open-files-limit validation bbc99b7 Refactor vif plugging validations ccc6167 [ussuri] Migrate to content provider jobs/templates 459aa4e Correct how the image_serve validation works d078017 Change path for validation Ansible files c17d51e Ensures script is executable c472b46 Add tripleo-validation.py as script in setup.cfg 27b4c19 Add TripleO validation CLI script Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 +- ansible-role-requirements.yml | 21 +++ library/check_flavors.py | 7 +- library/verify_profiles.py | 2 +- lookup_plugins/roles_info.py | 2 +- lower-constraints.txt | 116 ---------------- molecule-requirements.txt | 2 - playbooks/ceph-pg.yaml | 26 ++-- playbooks/check-rhsm-version.yaml | 16 +++ playbooks/system_encoding.yaml | 13 ++ ...nsider_existing_resources-addc5b2527d9db1b.yaml | 6 + roles/check_rhsm_version/defaults/main.yml | 29 ++++ .../check_rhsm_version/molecule/default/Dockerfile | 37 +++++ .../molecule/default/converge.yml | 24 ++++ .../molecule/default/molecule.yml | 38 ++++++ .../molecule/rhsm_mismatch/Dockerfile | 37 +++++ .../molecule/rhsm_mismatch/converge.yml | 43 ++++++ .../molecule/rhsm_mismatch/molecule.yml | 38 ++++++ roles/check_rhsm_version/tasks/main.yml | 27 ++++ roles/image_serve/defaults/main.yaml | 1 + roles/image_serve/molecule/default/converge.yml | 20 +++ roles/image_serve/molecule/default/molecule.yml | 13 +- roles/image_serve/molecule/default/prepare.yml | 39 +----- roles/image_serve/tasks/main.yaml | 32 ++--- roles/mysql_open_files_limit/tasks/main.yml | 6 +- roles/nova_event_callback/tasks/main.yml | 33 +++-- roles/rabbitmq_limits/tasks/main.yml | 2 +- library/__init__.py => roles/roles.galaxy/.gitkeep | 0 roles/system_encoding/defaults/main.yml | 24 ++++ roles/system_encoding/molecule/default/Dockerfile | 37 +++++ .../system_encoding/molecule/default/converge.yml | 47 +++++++ .../system_encoding/molecule/default/molecule.yml | 48 +++++++ roles/system_encoding/tasks/main.yml | 36 +++++ roles/tripleo_validations/defaults/main.yml | 25 ++++ roles/tripleo_validations/tasks/main.yml | 16 +++ roles/tripleo_validations/tasks/run.yml | 42 ++++++ roles/tripleo_validations/tasks/test_script.yml | 13 ++ roles/tripleo_validations/vars/main.yml | 18 +++ scripts/tripleo-validation.py | 48 +++++++ setup.cfg | 15 ++- test-requirements.txt | 2 - tox.ini | 7 - zuul.d/layout.yaml | 19 +-- zuul.d/molecule.yaml | 20 ++- zuul.d/playbooks/pre.yml | 10 ++ zuul.d/playbooks/run.yml | 23 +++- 49 files changed, 1004 insertions(+), 240 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 7c55a28..7418e62 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -5,2 +4,0 @@ docker -# https://github.com/sqlalchemy/dogpile.cache/issues/178 -dogpile.cache>=0.6.5,<0.9.1 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index cfbc20e..90f8f83 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,2 +5,0 @@ openstackdocstheme>=1.31.2 # Apache-2.0 -hacking>=3.0,<3.1.0 # Apache-2.0 -

1 0

puppet-tripleo 12.5.0 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are excited to announce the release of: puppet-tripleo 12.5.0: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 12.5.0 ^^^^^^ New Features ************ * This change introduces two hiera keys that allow an operator to specify which NIC (or NICs) the VIPs will be bound to. One hiera key has global effect (tripleo::pacemaker::force_nic) and forces all VIPs to listen to that NIC. There is also the possibility to override that for specific VIPs with the force_vip_nic_overrides hiera hash. This change is only useful for deployments where BGP is used to advertise IP addresses from the host across multiple L3 networks. Bug Fixes ********* * It is now possible to override the "enabled_share_protocols" configuration for the Shared File Systems service (manila) with the hiera parameter "manila_enabled_share_protocols". Changes in puppet-tripleo 12.4.1..12.5.0 ---------------------------------------- 06eb2782 Bump metadata for stable/ussuri release 6d335056 Fix manila-share with ceph-nfs backend 963b4733 Adding key_size option on the certmonger_certificate function e7c52e69 Wire up new tripleo upgrades jobs template d6328473 Allow to specify a nic for the VIPs + Fix nic selection when no nic is specified 05dc0716 Defauts mariadb's innodb_strict_mode to OFF b27d7940 [ussuri] Migrate to content provider jobs/template 54aa86dd Revert "Cleanup old workaround for ipv6 VIPs" 593650ce Filter haproxy_certificate_specs if hostname is empty 7396843c Force MySQL / MariaDB log_warnings to 1 7e7aa969 galera: expose 2-node mode for the galera resource 78ebc473 Fixing incorrect parameter names in Dell EMC Storage Templates b922c6da Make sure qemu CA has correct permissions ccb419ce Generic cluster properties support 201c12bd Cleanup old workaround for ipv6 VIPs 0ed0f2a2 Puppet config options for AMQP1 sensubility transport bc4dc67c Include ovs_driver and sriov_driver classes in base neutron profile 5d2174dc Allow overriding share protocols with manila 572740bc Add changes for collectd libpod stats plugin d707001f Add fence_cisco_ucs support in tripleo fencing manifests 9868aa63 Make ceph_dashboard haproxy config parametric Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- manifests/certmonger/ceph_dashboard.pp | 6 ++ manifests/certmonger/ceph_grafana.pp | 6 ++ manifests/certmonger/ceph_rgw.pp | 6 ++ manifests/certmonger/etcd.pp | 6 ++ manifests/certmonger/haproxy.pp | 6 ++ manifests/certmonger/httpd.pp | 6 ++ manifests/certmonger/libvirt.pp | 6 ++ manifests/certmonger/libvirt_vnc.pp | 6 ++ manifests/certmonger/metrics_qdr.pp | 6 ++ manifests/certmonger/mysql.pp | 6 ++ manifests/certmonger/neutron.pp | 6 ++ manifests/certmonger/neutron_ovn.pp | 6 ++ manifests/certmonger/novnc_proxy.pp | 5 ++ manifests/certmonger/openvswitch.pp | 6 ++ manifests/certmonger/ovn_controller.pp | 6 ++ manifests/certmonger/ovn_dbs.pp | 6 ++ manifests/certmonger/ovn_metadata.pp | 6 ++ manifests/certmonger/ovn_octavia.pp | 6 ++ manifests/certmonger/qemu.pp | 26 ++++++++ manifests/certmonger/rabbitmq.pp | 6 ++ manifests/certmonger/redis.pp | 6 ++ manifests/fencing.pp | 6 +- manifests/haproxy.pp | 9 ++- manifests/pacemaker/haproxy_with_vip.pp | 18 ++++-- manifests/profile/base/certmonger_user.pp | 10 +++- .../profile/base/cinder/volume/dellemc_powermax.pp | 2 +- manifests/profile/base/cinder/volume/dellemc_sc.pp | 2 +- .../profile/base/cinder/volume/dellemc_xtremio.pp | 4 +- manifests/profile/base/database/mysql.pp | 44 ++++++++------ manifests/profile/base/manila/api.pp | 39 ++++++++---- manifests/profile/base/metrics/collectd.pp | 19 +++++- .../profile/base/metrics/collectd/libpodstats.pp | 70 ++++++++++++++++++++++ .../profile/base/metrics/collectd/sensubility.pp | 23 ++++++- manifests/profile/base/neutron/plugins/ml2.pp | 8 +++ manifests/profile/base/pacemaker.pp | 7 +++ manifests/profile/pacemaker/ceph_nfs.pp | 5 +- manifests/profile/pacemaker/database/mysql.pp | 1 + .../profile/pacemaker/database/mysql_bundle.pp | 14 ++++- manifests/profile/pacemaker/haproxy_bundle.pp | 33 ++++++++++ manifests/profile/pacemaker/ovn_dbs_bundle.pp | 29 ++++++++- metadata.json | 2 +- ...-enabled-protocols-manila-86b6662a8b617866.yaml | 6 ++ .../notes/vip-bind-nic-11e80207fcb78a20.yaml | 10 ++++ .../tripleo_profile_base_manila_api_spec.rb | 23 +++++++ .../tripleo_profile_base_metrics_collectd_spec.rb | 50 ++++++++++++++++ templates/metrics/collectd-sensubility.conf.epp | 27 +++++---- templates/metrics/libpodstats.conf.epp | 4 ++ zuul.d/layout.yaml | 7 ++- 49 files changed, 551 insertions(+), 68 deletions(-)

1 0

python-tripleoclient 13.4.2 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are jazzed to announce the release of: python-tripleoclient 13.4.2: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.2 ^^^^^^ New Features * A new *--ansible-forks* argument has been added to the TripleO and Overcloud commands. The default value for forks has also been adjusted to no longer exceed 100 forks. Changes in python-tripleoclient 13.4.1..13.4.2 ---------------------------------------------- 44571fb5 Make workflow monitoring more resilient de500612 [UX] Align to left the table for the validations run results 1233ce37 [Validator Show] Properly throwing an exception for unknown validation d6148543 Wire up new tripleo upgrades jobs template a60ec726 Raise if no validation has been executed f4f5c7f0 Lower ansible poll interval time 93e4fbde Map build host repos to distro.repos.d instead of yum.repos.d fd41d6bf [ussuri] Migrate to content provider jobs/template 364d3940 Add config-download-dir flag to cell export command 7331b280 [Container build] raise Exception post logging error 8c7942ed Use validation framework for running undercloud checkdisk 8d62e7a1 Removed ubi-8 based jobs b209a75b Do not require authentication for the validator CLI d57af5e7 Handle root as a deployment user better 77abd0ac Remove detection of package manager for undercloud upgrade 2545e7dc Use user's home dir for fact cache 6005878b [Validator Run] Don't rely on parameter file extension cd789148 [Validator Run] Ensure the plan really exists 9a0498a5 Remove --quiet argument from the validator run CLI command. 8ee1e2cc Check CephClusterFSID against proposed env files 571e48ca Add tripleo_states to default callback whitelist 637496d0 Expose --ansible-forks Diffstat (except docs and test files) ------------------------------------- .../notes/ansible-forks-arg-9f7b439e4b6980dd.yaml | 6 + tripleoclient/constants.py | 2 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 37 ++++-- .../test_tripleo_container_image.py | 2 +- tripleoclient/utils.py | 51 +++++++-- tripleoclient/v1/overcloud_cell.py | 14 ++- tripleoclient/v1/overcloud_deploy.py | 21 +++- tripleoclient/v1/overcloud_external_update.py | 11 +- tripleoclient/v1/overcloud_external_upgrade.py | 11 +- tripleoclient/v1/overcloud_update.py | 11 +- tripleoclient/v1/overcloud_upgrade.py | 11 +- tripleoclient/v1/tripleo_deploy.py | 15 +++ tripleoclient/v1/tripleo_validator.py | 124 +++++++++++++-------- tripleoclient/v1/undercloud.py | 6 +- tripleoclient/v1/undercloud_preflight.py | 23 ++-- tripleoclient/v2/tripleo_container_image.py | 3 +- tripleoclient/workflows/base.py | 9 +- tripleoclient/workflows/deployment.py | 3 +- zuul.d/layout.yaml | 26 +---- 22 files changed, 316 insertions(+), 137 deletions(-)

1 0

tripleo-common 12.4.3 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are overjoyed to announce the release of: tripleo-common 12.4.3: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.4.3 ^^^^^^ Bug Fixes * The qemu user on the host gets created using uid/gid 107. Certificates on the host, but also the vhost-user sockets created by ovs use this uid/gid. With the move to TCIB images the default kolla ids were reverted and the previous overwrite dropped. This make e.g. the qemu processes to fail to use the libvirt-vnc bind mounted certificates. This change brings back the previous overwrite of the qemu user uid/gid. Changes in tripleo-common 12.4.2..12.4.3 ---------------------------------------- b7e584e4 TCIB: Add cinder-volume extend_start.sh script d950e7d0 Move daxio package to be arch specific 088d5787 Enable pylint 508d1f82 Wire up new tripleo upgrades jobs template dd2d6fac Fix ImportWarning during importing a module 4fd72262 Changed retry logic on buildah build a0fdafc8 Add daxio package for nvdimm scenario 0701428e Fix localization for horizon container fbab6ed4 The lower constraint file has been removed 6fb38abf TCIB: Pick not best when building on centos/ubi ce20aa6f [ussuri] Migrate to content provider jobs/template 0dc90c97 [stable] Raise proper error for None network config 98dc3fe6 Change qemu user id to match previous releases 2c6f574c Re-add ndctl to nova-compute image d7d1b198 Add better exception logging for builds cdf9b2b0 Fix wait condition for retry 10833625 Add retry to build 71d26d69 Add both validations path for inflight validation 4fa8c87a Improve bearer auth handling d5a54beb Adjust Ansible forks caculations 20544e67 Add collectd-libpod-stats to image Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 8 +- .pylintrc | 65 +++++++++++ container-images/kolla/base/uid_gid_manage.sh | 2 +- .../kolla/cinder-volume/cinder-volume-sudoers | 1 + .../kolla/cinder-volume/extend_start.sh | 5 + container-images/tcib/base/base.yaml | 1 + container-images/tcib/base/collectd/collectd.yaml | 1 + .../cinder-base/cinder-volume/cinder-volume.yaml | 5 +- container-images/tcib/base/os/horizon/horizon.yaml | 7 +- .../os/nova-base/nova-compute/nova-compute.yaml | 4 + lower-constraints.txt | 110 ------------------ .../notes/qemu_user_id-32d8f17099a6f002.yaml | 10 ++ tox.ini | 6 - tripleo_common/actions/ansible.py | 40 +++++-- tripleo_common/constants.py | 6 +- tripleo_common/exception.py | 1 + tripleo_common/image/builder/buildah.py | 33 ++++-- tripleo_common/image/image_uploader.py | 128 +++++++++++++++++---- tripleo_common/utils/config.py | 10 +- tripleo_common/utils/locks/base.py | 6 + tripleo_common/utils/locks/processlock.py | 3 + tripleo_common/utils/locks/threadinglock.py | 1 + zuul.d/layout.yaml | 58 +++++----- 28 files changed, 326 insertions(+), 209 deletions(-)

1 0

sushy 3.4.2 (victoria)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are stoked to announce the release of: sushy 3.4.2: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.4.2 ^^^^^ Bug Fixes * Fixes an issue in performing action "#Bios.ResetBios" when no body in POST request provided and BMC responds with HTTP 400 Bad request, for example, Dell R630 having iDRAC 2.75.75.75. See story 2008198 for details. * Fixes "AttributeError: 'str' object has no attribute 'get'" during error handling. This occurs when BMC does not return a list of messages inside "@Message.ExtendedInfo", but a single item. This has been observed with iDRAC. * Fixes an issue in the "Connector" class where an exception is not raised when an asynchronous operations fails. * Reduce the logging from sushy by logging only attributes and values set in the redfish response, not the entire json. Changes in sushy 3.4.1..3.4.2 ----------------------------- aeeb416 Raise exception when async operation fails dfe6b33 Fix ExtendedInfo error handling for non-list item 3f0d1b2 Remove lower-constraints job ada6b8a Log only fields set in redfish response, not entire json 6bb07a4 Fix #Bios.ResetBios for HTTP 400 Bad request error Diffstat (except docs and test files) ------------------------------------- ...ory-reset-400-bad-request-3f4a7a2aada0835b.yaml | 7 +++ ...ended-info-error-handling-73fecb6bf5c852ff.yaml | 7 +++ ...ror-on-async-task-failure-b67c7bc189a4d6ca.yaml | 5 ++ .../redfish-response-log-294f3f10b770e356.yaml | 5 ++ sushy/connector.py | 1 + sushy/exceptions.py | 14 +++--- sushy/resources/base.py | 42 ++++++++++++++++- sushy/resources/system/bios.py | 3 +- .../unit/json_samples/error_single_ext_info.json | 13 ++++++ .../unit/resources/manager/test_virtual_media.py | 14 +++++- .../resources/registry/test_message_registry.py | 33 ++++++++++++++ .../registry/test_message_registry_file.py | 9 ++++ .../updateservice/test_softwareinventory.py | 11 +++++ zuul.d/project.yaml | 1 - 20 files changed, 369 insertions(+), 12 deletions(-)

1 0

os-apply-config 11.2.2 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are satisfied to announce the release of: os-apply-config 11.2.2: Config files from cloud metadata This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 11.2.1..11.2.2 ----------------------------------------- 6622f84 [ussuri] Migrate to content provider jobs/templates Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

octavia 7.1.0 (victoria)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We exuberantly announce the release of: octavia 7.1.0: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 7.1.0 ^^^^^ Bug Fixes * Fixed an issue that could cause load balancers, with multiple amphora in a failed state, to be unable to complete a failover. * Fix an incorrect "operating_status" with empty UDP pools. A UDP pool without any member is now "ONLINE" instead of "OFFLINE". * Add missing cloud-utils-growpart RPM to Red Hat based amphora images. * Add missing cronie RPM to Red Hat based amphora images. Changes in octavia 7.0.0..7.1.0 ------------------------------- 67c2db3a Use 'bash' in the keepalived check script 47a58ee2 Fix amphorav2 bytes error 64e31323 Fix operating status for empty UDP pools 100bfd07 Fix missing cronie package in RHEL-based image builds b0b30866 Handle listener not found during loadbalancer status update e5c8aeff Fix lower-constraints 89523823 Map cloud-guest-utils to cloud-utils-growpart for Red Hat distros. b17a5247 Fix load balancers with failed amphora failover fc058c3a Fix pep8 failures in gate a5fd413d Remove unnecessary joinedload c308f860 Fix pool delete race on load balancer cascade delete a865c03c Fix load balancers with failed amphora failover ab0246b8 Update TOX_CONSTRAINTS_FILE for stable/victoria 98bbd914 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/amphora-agent/pkg-map | 4 +- .../amphora-agent/source-repository-amphora-agent | 4 +- elements/octavia-lib/source-repository-octavia-lib | 2 +- lower-constraints.txt | 31 ++++++++------- .../backends/agent/api_server/keepalivedlvs.py | 8 ++-- .../amphorae/backends/agent/api_server/server.py | 4 +- .../templates/keepalived_check_script.conf.j2 | 2 +- .../backends/health_daemon/health_daemon.py | 5 ++- .../amphorae/backends/utils/keepalivedlvs_query.py | 2 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 10 ++--- octavia/amphorae/drivers/health/heartbeat_udp.py | 8 ++-- octavia/api/drivers/amphora_driver/v2/driver.py | 23 ++++++++--- octavia/api/drivers/driver_factory.py | 2 +- octavia/api/drivers/utils.py | 6 ++- octavia/certificates/manager/barbican.py | 2 +- octavia/certificates/manager/barbican_legacy.py | 4 +- octavia/cmd/health_manager.py | 2 +- octavia/cmd/house_keeping.py | 6 +-- octavia/common/data_models.py | 12 +++++- octavia/common/jinja/lvs/templates/macros.j2 | 12 +++--- octavia/compute/drivers/nova_driver.py | 7 ++-- octavia/controller/worker/task_utils.py | 30 ++++++++------- octavia/controller/worker/v1/controller_worker.py | 8 ++-- .../worker/v1/tasks/amphora_driver_tasks.py | 10 ++++- .../controller/worker/v1/tasks/compute_tasks.py | 2 +- .../controller/worker/v1/tasks/database_tasks.py | 37 +++++++++--------- .../controller/worker/v1/tasks/network_tasks.py | 10 +++-- octavia/controller/worker/v2/controller_worker.py | 8 ++-- .../controller/worker/v2/tasks/compute_tasks.py | 2 +- .../controller/worker/v2/tasks/database_tasks.py | 33 ++++++++-------- .../controller/worker/v2/tasks/network_tasks.py | 8 ++-- octavia/db/repositories.py | 9 ++--- .../drivers/neutron/allowed_address_pairs.py | 11 +++--- .../functional/api/v2/test_availability_zones.py | 2 +- .../backends/utils/test_keepalivedlvs_query.py | 4 +- .../amphora_driver/v2/test_amphora_driver.py | 24 ++++++------ .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 44 ++++++++++++++++++++++ .../sample_configs/sample_configs_combined.py | 32 ++++++++++++---- .../worker/v1/tasks/test_amphora_driver_tasks.py | 22 ++++++++--- ...x-dual-error-amp-failover-69e323892bad8254.yaml | 5 +++ ...fix-empty-udp-pool-status-3171950628898468.yaml | 5 +++ ...sing-cloud-guest-utils-rh-eb39a53502dc1e91.yaml | 4 ++ .../fix-missing-cronie-rh-bd31001338ddbb1e.yaml | 4 ++ requirements.txt | 6 +-- test-requirements.txt | 2 +- tox.ini | 8 ++-- zuul.d/jobs.yaml | 1 + 50 files changed, 318 insertions(+), 186 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2f4f194f..8a298ffd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -alembic>=0.8.10 # MIT +alembic>=0.9.6 # MIT @@ -27 +27 @@ oslo.reports>=1.18.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.serialization>=2.28.1 # Apache-2.0 @@ -29 +29 @@ oslo.upgradecheck>=0.1.0 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 +oslo.utils>=3.37.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 9231bb60..6028e6e6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18 +18 @@ bandit!=1.6.0,>=1.1.0 # Apache-2.0 -tempest>=17.1.0 # Apache-2.0 +tempest>=21.0.0 # Apache-2.0

1 0

os-net-config 12.3.3 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are glad to announce the release of: os-net-config 12.3.3: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.2..12.3.3 --------------------------------------- e1353bd basic support for Linux tap devices 754c7fe Wire up new tripleo upgrades jobs template c3a0744 Support binding VFs after moving to switchdev 06f62ad Fixing the dependency for sriov_config service 24eb8be [ussuri] Migrate to content provider jobs/templates 3215514 Enable smfs software steering when switchdev is enabled Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/linux_tap.json | 8 ++ etc/os-net-config/samples/linux_tap.yaml | 6 ++ os_net_config/__init__.py | 11 +++ os_net_config/impl_ifcfg.py | 12 +++ os_net_config/objects.py | 36 +++++++ os_net_config/schema.yaml | 38 +++++++ os_net_config/sriov_bind_config.py | 137 ++++++++++++++++++++++++++ os_net_config/sriov_config.py | 27 ++++- os_net_config/utils.py | 2 +- setup.cfg | 1 + zuul.d/layout.yaml | 3 +- 14 files changed, 362 insertions(+), 3 deletions(-)

1 0

tripleo-heat-templates 12.4.2 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are pumped to announce the release of: tripleo-heat-templates 12.4.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.2 ^^^^^^ New Features ************ * Added "MemcachedMaxConnections" setting with a default of 8192 maximum connections in order to allow an operator to override that value in environments where memcached is heavily sollicited. * Add parameter "NovaAllowResizeToSameHost" to allow instances to resize to the host they are currently on. Normally the source host is excluded. * To isolate LVM volumes created by compute guests, within Cinder volumes, from the LVM volumes created/managed by the host itself, a new task has been introduced to create an allowlist and denylist of devices which should be accessible (or not) to the host, configured in lvm.conf using the global_filter key. The allowlist is generated gathering the list of existing in-use physical disks (or partitions) and appending to it any user provided device passed via *LVMFilterAllowlist* parameter. The denylist is configured via *LVMFilterDenylist* and defaults to ['.*'], which means it blocks any device not explicitly allowed. Both the list parameters can be specified per-role. The feature is, by default, disabled and can be enabled passing *LVMFilterEnabled: true*; when disabled the existing lvm.conf won't be touched and a version of it which includes the global_filter will be left, for debugging, in */tmp/tripleo_lvmfilter.conf*. * A new multipathd-container-ansible.yaml heat template replaces the multipathd-container.yaml template. The new template adds support for the following new parameters. * MultipathdSkipKpartx * MultipathdCustomConfigFile * Add parameters *NovaLibvirtCPUMode*, *NovaLibvirtCPUModels* and *NovaLibvirtCPUModelExtraFlags* to allow configuration of CPU related parameters *libvirt/cpu_mode*, *libvirt/cpu_model* and *libvirt/cpu_model_extra_flags* respectively. * This change updates the multiple-nics and multiple-nics-vlans templates so that an external bridge is created if either the role uses the External network or the "external_bridge" tag is set in the role definition. This is done instead of checking if the role name is "Controller". This change also assigns the "external_bridge" tag to the Controller as well as the Compute roles so that both roles can access the Neutron external bridge for floating IPs or SNAT by default so that OVN can use DVR. * The NovaApiMaxLimit parameter allows the operator to set Nova API max_limit using a Heat parameter in their templates. * Add parameter *NovaVGPUTypesDeviceAddressesMapping* provide mapping for multiple vgpu types and corresponding device addresses. Upgrade Notes ************* * Cinder's legacy "volume" service and its associated endpoints are automatically removed from the keystone catalog. The "volume" service is associated with Cinder's v1 API, which was removed in Queens. * When upgrading from the multipathd-container.yaml template to the new multipathd-container-ansible.yaml template, bear in mind the new MultipathdSkipKpartx parameter will configure the corresponding skip_kpartx setting in /etc/multipath.conf. * Now NotificationDriver is set to noop by default, as legacy telemetry services are disabled by default. Explicitly set NotificationDriver parameter to notifications from each services. * The "external_bridge" tag is now used for the Compute node. An external network bridge is required on the compute nodes in order to host floating IPs when using DVR. OVN deploys with DVR by default. Deprecation Notes ***************** * The multipathd-container.yaml template is deprecated in favor of a new multipathd-container-ansible.yaml template. The new template is backward compatible with the old template, but see the features and upgrade notes for additional details. Bug Fixes ********* * As per launchpad bug 1855704, the lvmfilter task aims at hiding to the host the LVM2 volumes created by compute guests in Cinder volumes or Glance images. * When using the Shared File Systems service (manila), you may now use the Heat template parameter "ManilaEnabledShareProtocols" to configure the NAS protocols that users may use. If not set, the value is inferred per the storage backends that have been enabled. * The keystone catalog is automatically updated to remove any entries associated with Cinder's v1 API "volume" service. This fixes bug 1897761 (https://bugs.launchpad.net/tripleo/+bug/1897761) * Fixed the Octavia OctaviaTenantLogFacility setting default to 0 to align it with the project default. * Certificates get merged into the containers using kolla_config mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd gets disabled and enabled at a later point the containers running the qemu process miss the required certificates and live migration fails. This change moves to use bind mount for the certificates and in case of UseTLSTransportForNbd ans creates the required certificates even if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd can be enabled/disabled as the required bind mounts/certificates are already present. * https://review.opendev.org/q/I8df21d5d171976cbb8670dc5aef744b5fae65 7b2 introduced THT parameters to set libvirt/cpu_mode. The patch sets the NovaLibvirtCPUMode wrong to 'none' string which results in puppet-nova not to handle the default cases correct and sets libvirt/cpu_mode to none which results in 'qemu64' CPU model, which is highly buggy and undesirable for production usage. This changes the default to the recommended CPU mode 'host-model', for various benefits documented elsewhere. * When using RHSM Service (deployment/rhsm/rhsm-baremetal- ansible.yaml) based registration of the overcloud nodes and enabling the KSM using NovaComputeEnableKsm=True the overcloud deployment will fail because the RHSM registration and the ksm task run as host_prep task. The handling of enable/disable ksm is now handled in deploy step 1. * In case of cellv2 multicell environment nova-metadata is the only httpd managed service on the cell controller role. In case of tls- everywhere it is required that the cell controller host has ther needed metadata to be able to request the HTTP certificates. Otherwise the getcert request fails with "Insufficient 'add' privilege to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'" Changes in tripleo-heat-templates 12.4.1..12.4.2 ------------------------------------------------ 0f3cc2653 [USSURI ONLY] Remove duplicate /var/run/openvswitch bind mount d3ef7c0fa Set up right DNF module stream for Upgrades and Updates. b3521d542 Ensure LANG env is properly set when puppet runs. bc23f0e31 Add setting to override max memcached connections a7b1c81a0 Fix swift containers idempotency de5fcf0d3 Refresh Swift ring files without restarting containers 8968c7efd Rolling certificate update for HA services 977fc27fa Adding key_size option on the certificate creation 54b080903 Wire up new tripleo upgrades jobs template dcab52658 Don't pass empty values for ipaclient_servers to ipaclient role 3b9e1dad6 Define a new CinderVolumeEdge service 57e689834 Rely on the HOSTNAME var to resolve the mon container name 833e812ba Ensure cinder LVM volumes work after system restart 3846879d4 Skip Trilio dirs when setting ownership in /var/lib/nova f6b05380b Set setgid mode bit for /var/lib/ironic b51683ceb Remove Luna HSM clients on scaledown 60b2ac482 The lower constraint file has been removed 176889bec Run os-net-config on step 3 8ffad6e84 Move ipa check to external_deploy_tasks b8ec72926 [Ussuri/Train] Check mode doesn't work for async tasks de1b88ca5 Run online migration tasks from external_update_tasks too. 2d478acc3 Enable tripleo_free strategy for upgrade 319515719 Remove vfio-pci.conf module load file ff4bbbf94 Fix barbican settings missing from glance Edge nodes d35ed9771 node_exporter_container_image is needed in 'all' group ec495e9a0 Adding Ceph Dashboard to the Edge roles 6cc86ee96 Add qemu metadata to compute node when tls for live migration 79b528061 Add NovaApiMaxLimit configure max_limit for nova 2de50cc3c Identify HSMs using labels instead of Slot ID 47d31250e Switch novajoin to use RpcUserName d5a87a297 Use ansible for nodes validation e51143134 Set correct default NovaLibvirtCPUMode 77de9ff3e Use bind mounts for tls certificates fa6700449 Add file which enables QoS related L3 agent extensions 5b553b611 [ussuri] Migrate to content provider jobs/templates 243055beb Make sure apache metadata is set for nova-metadata service 23718b21c Refresh ceph-ansible group_vars values 365397323 Move enable ksm on compute node to deploy step 1 a1058dbe7 Add CinderBackupOptVolumes parameter f15758abb Properly compute hostname when looking for the ceph-mon container 15a196e79 Filter computes with nova_host defined 8d186938d Fix MetricsQdrUseSSL value bf5883f10 Fix ceilometer_agent_compute healthcheck 013d15f48 [stable/ussuri,train] Add cidr to outputs of port_from_pool.j2 230a0ad90 Always set dashboard_protocol when Ceph Dashboard is enabled 29b8a69a8 Fix memcached logging a19a3c6ae Deploy multipathd using tripleo_multipathd ansible role 815af694a Add NovaDisableImageDownloadToRbd parameter 0b58b547b Config options for AMQP1 transport in collectd sensubility bf50c743a Add package install for openssl-perl 805fe6e41 Don't manage bridge mappings in scenario file f41f220cb Add CephClientConfigOverrides resource 4747cc41c Run tripleo_lvmfilter role to restrict block devices visible to LVM2 aaecbcc2e Don't use POLL_SERVER_CFN transport for DeployedServer f9df16fc8 Expose new THT params for cpu model flags acc6fe01e Fix names of the puppet parameters used to set min bw limits in Neutron 256f92d25 Add possibility to set logging source for Horizon 9203e6998 Return details in output of container health check 01714bd31 Fix Octavia OctaviaTenantLogFacility default 3e4745e92 Change permissions on /run/octavia to octavia 6f7027346 Force CephAnsiblePlaybook to its default value on FFU prepare bb866621a [manila] Add "ManilaEnabledShareProtocols" param 7ab640cfa Disable notification from services by default 15faa808a Add config option for collectd libpodstats 514ac5b08 Use `undercloud` instead of `Undercloud` when delegating tasks a7f4a1566 Retry container pull 3 times 99220e0ca [FFU] Remove cinder's v1 keystone service d91a8c121 Also configure Ironic for UC minions d00312805 Expose new parameter `NovaVGPUTypesDeviceAddressesMapping` 76e3a6880 Make NovaLibvirtOptVolumes role specific 98d889fd7 Remove dashboard_frontend_vip from the ceph mgr template e83c47f11 firewall: make ExtraFirewallRules role specific 513321b3b Squashed backport for 'NovaAllowResizeToSameHost' parameter fa830587d Add ability to manage irqbalance on compute per role 1674d3a34 Create external bridge on Compute nodes by default for OVN with DVR e821f91b6 Centralized logging minor fixes e1b4dca17 Add more metadata to logs 74977e585 Enable Ceilometer data transfer for STF Diffstat (except docs and test files) ------------------------------------- all-nodes-validation.yaml | 45 ---- ci/common/all-nodes-validation-disabled.yaml | 37 ---- ci/environments/multinode-containers.yaml | 4 - ci/environments/neutron_l3_qos.yaml | 2 + .../scenario000-multinode-containers.yaml | 3 - ci/environments/scenario000-standalone.yaml | 3 - .../scenario001-multinode-containers.yaml | 5 +- ci/environments/scenario001-standalone.yaml | 16 +- ci/environments/scenario002-standalone.yaml | 8 +- ci/environments/scenario003-standalone.yaml | 10 +- ci/environments/scenario004-standalone.yaml | 3 - .../scenario007-multinode-containers.yaml | 3 - ci/environments/scenario007-standalone.yaml | 3 - .../scenario010-multinode-containers.yaml | 1 - ci/environments/scenario010-standalone.yaml | 3 - ci/environments/scenario012-standalone.yaml | 4 - common/container-puppet.py | 2 + common/container-puppet.sh | 22 +- common/deploy-steps-tasks.yaml | 3 + common/deploy-steps.j2 | 21 +- config-download-software.yaml | 1 + config-download-structured.yaml | 1 + .../monitoring/collectd_check_health.py | 45 ++-- .../nova_statedir_ownership.py | 21 +- .../pacemaker_mutex_restart_bundle.sh | 90 ++++++++ .../pacemaker_resource_lock.sh | 237 +++++++++++++++++++++ deployment/aodh/aodh-base.yaml | 2 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 16 ++ .../barbican/barbican-api-container-puppet.yaml | 86 ++++---- .../barbican-backend-pkcs11-crypto-puppet.yaml | 14 +- deployment/barbican/barbican-client-puppet.yaml | 3 +- .../ceilometer-agent-compute-container-puppet.yaml | 3 +- .../ceilometer-base-container-puppet.yaml | 2 +- deployment/ceph-ansible/ceph-base.yaml | 9 + deployment/ceph-ansible/ceph-client.yaml | 10 + deployment/ceph-ansible/ceph-grafana.yaml | 20 +- deployment/ceph-ansible/ceph-mgr.yaml | 23 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- deployment/ceph-ansible/ceph-rgw.yaml | 20 +- .../certs/certmonger-user-baremetal-puppet.yaml | 9 + deployment/cinder/cinder-api-container-puppet.yaml | 16 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 + .../cinder/cinder-common-container-puppet.yaml | 17 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 4 + deployment/containers-common.yaml | 6 + deployment/database/mysql-base.yaml | 16 ++ deployment/database/mysql-pacemaker-puppet.yaml | 4 + deployment/database/redis-container-puppet.yaml | 16 ++ deployment/database/redis-pacemaker-puppet.yaml | 4 + .../multipathd-container.yaml | 0 deployment/deprecated/sahara/sahara-base.yaml | 2 +- deployment/etcd/etcd-container-puppet.yaml | 48 +++-- .../experimental/designate/designate-base.yaml | 2 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- .../haproxy-internal-tls-certmonger.j2.yaml | 19 ++ deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 + .../haproxy/haproxy-public-tls-certmonger.yaml | 19 ++ deployment/heat/heat-base-puppet.yaml | 2 +- deployment/horizon/horizon-container-puppet.yaml | 13 ++ deployment/ipa/ipaservices-baremetal-ansible.yaml | 38 ++-- deployment/ironic/ironic-api-container-puppet.yaml | 5 +- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 67 +++++- deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/logging/rsyslog-container-puppet.yaml | 24 ++- deployment/manila/manila-api-container-puppet.yaml | 7 + deployment/manila/manila-base.yaml | 2 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 + .../memcached/memcached-container-puppet.yaml | 9 +- deployment/metrics/collectd-container-puppet.yaml | 27 ++- deployment/metrics/qdr-container-puppet.yaml | 24 ++- deployment/mistral/mistral-base.yaml | 2 +- .../multipathd/multipathd-container-ansible.yaml | 128 +++++++++++ .../neutron/neutron-api-container-puppet.yaml | 16 ++ deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 16 ++ .../neutron-ovs-agent-container-puppet.yaml | 5 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 24 ++- .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 10 + deployment/nova/nova-az-config.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 144 ++++++++++--- .../nova/nova-conductor-container-puppet.yaml | 5 +- deployment/nova/nova-libvirt-container-puppet.yaml | 225 +++++++++---------- .../nova/nova-metadata-container-puppet.yaml | 2 + .../nova/nova-vnc-proxy-container-puppet.yaml | 28 +++ deployment/nova/novajoin-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 6 + deployment/octavia/octavia-base.yaml | 4 +- .../octavia/providers/ovn-provider-config.yaml | 16 ++ .../ovn/ovn-controller-container-puppet.yaml | 16 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 20 ++ deployment/ovn/ovn-metadata-container-puppet.yaml | 16 ++ .../pacemaker/pacemaker-baremetal-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 16 ++ ...rabbitmq-messaging-notify-container-puppet.yaml | 16 ++ ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 4 + .../rabbitmq-messaging-pacemaker-puppet.yaml | 4 + .../rabbitmq-messaging-rpc-container-puppet.yaml | 16 ++ .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 4 + .../swift-refresh-rings-cc327f998490b0df.yaml | 6 + deployment/swift/swift-proxy-container-puppet.yaml | 10 + .../swift/swift-ringbuilder-container-puppet.yaml | 10 + .../swift/swift-storage-container-puppet.yaml | 32 +++ .../tripleo-firewall-baremetal-ansible.yaml | 19 +- .../tripleo-packages-baremetal-puppet.yaml | 32 ++- deployment/undercloud/undercloud-upgrade.yaml | 34 +++ environments/barbican-backend-pkcs11-lunasa.yaml | 24 ++- environments/dcn-hci.yaml | 6 +- environments/dcn.yaml | 4 + environments/enable-legacy-telemetry.yaml | 1 + environments/enable-stf.yaml | 12 +- environments/firewall.yaml | 23 ++ .../lifecycle/undercloud-upgrade-prepare.yaml | 1 + environments/lifecycle/update-prepare.yaml | 4 + environments/lifecycle/upgrade-prepare.yaml | 2 + environments/metrics/ceilometer-write-qdr.yaml | 4 +- environments/multipathd.yaml | 2 +- .../services-baremetal/undercloud-ceilometer.yaml | 3 + environments/services/undercloud-ceilometer.yaml | 3 + environments/undercloud/undercloud-minion.yaml | 76 +++++++ lower-constraints.txt | 166 --------------- .../config/multiple-nics-vlans/role.role.j2.yaml | 4 +- network/config/multiple-nics/role.role.j2.yaml | 6 +- network/ports/port_from_pool.j2 | 4 + overcloud-resource-registry-puppet.j2.yaml | 13 +- ...ddmemcachedmaxconnections-b591c0fa39e821f5.yaml | 6 + ...allow-resize-to-same-host-62f05a5370993425.yaml | 5 + .../automated-lvmfilter-3bee670c0108585a.yaml | 23 ++ ...ng-manila-share-protocols-6ea6bcbbe21b25ee.yaml | 7 + .../notes/cinder-v1-cleanup-7154ca07652804cf.yaml | 11 + ...e-multipathd-with-ansible-f32f3ea627815191.yaml | 20 ++ releasenotes/notes/cpu-flags-5b027db3eb2b86c2.yaml | 7 + ...sable-notification-driver-a888d4e9b8eed1dc.yaml | 6 + ...dge-by-default-on-compute-f3ff6bf46ab80640.yaml | 15 ++ ...nant-log-facility-default-7b6d0670a51fe845.yaml | 5 + ...use_bind_mounts_for_certs-64cb88f78538a64b.yaml | 13 ++ ...ova_api_max_limit-support-43fe9792eca63599.yaml | 5 + ..._compute_default_cpu_mode-cda2bb3e56463b3a.yaml | 11 + .../notes/nova_compute_ksm-444f1cc51ceafb66.yaml | 8 + ...tadata_http_cert_metadata-274e7e8a66727983.yaml | 9 + .../vgpu-devices-mapping-63dd870f3a00a98a.yaml | 5 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 3 + roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 3 +- roles/DistributedComputeHCIDashboard.yaml | 80 +++++++ roles_data.yaml | 3 + sample-env-generator/dcn.yaml | 6 +- sample-env-generator/undercloud-minion.yaml | 43 ++++ tox.ini | 6 - zuul.d/layout.yaml | 122 +---------- 158 files changed, 2169 insertions(+), 774 deletions(-)

1 0

paunch 7.0.3 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are thrilled to announce the release of: paunch 7.0.3: Utility to launch and manage containers using YAML based configuration data This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 7.0.2..7.0.3 ------------------------------ 03be584 Fix the wrong method name 523465f Actually fail if a stop or remove call fails 5dcc4df Fix option to not cleanup containers not in config 78e49e2 Fix inspect images calls to not use the index format keyword 5d17118 [ussuri] Migrate to content provider jobs/templates c19a95d Instruct systemd to accept 137 and 143 exit code Diffstat (except docs and test files) ------------------------------------- paunch/builder/base.py | 2 +- paunch/cmd.py | 4 ++-- paunch/runner.py | 28 ++++++++++++++++++++---- paunch/utils/systemd.py | 1 + zuul.d/layout.yaml | 11 ++++++++++ 7 files changed, 86 insertions(+), 9 deletions(-)

1 0

octavia 5.1.0 (train)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are tickled pink to announce the release of: octavia 5.1.0: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 5.1.0 ^^^^^ New Features ************ * Add a new configuration option to define the default connection_limit for new listeners that use the Amphora provider. The option is [haproxy_amphora].default_connection_limit and its default value is 50,000. This value is used when creating or setting a listener with -1 as connection_limit parameter, or when unsetting connection_limit parameter. Security Issues *************** * If you are using the admin_or_owner-policy.yaml policy override file you should upgrade your API processes to include the unscoped token fix. The default policies are not affected by this issue. Bug Fixes ********* * Fixed an issue where members added to TLS-enabled pools would go to ERROR provisioning status. * Fixed an issue with failing over an amphora if the pair amphora in an active/standby pair had a missing VRRP port in neutron. * Fix operational status for disabled UDP listeners. The operating status of disabled UDP listeners is now OFFLINE instead of ONLINE, the behavior is now similary to the behavior of HTTP/HTTPS/TCP/... listeners. * Fixed an issue that could cause load balancers, with multiple amphora in a failed state, to be unable to complete a failover. * Fix an incorrect "operating_status" with empty UDP pools. A UDP pool without any member is now "ONLINE" instead of "OFFLINE". * Add missing cloud-utils-growpart RPM to Red Hat based amphora images. * Add missing cronie RPM to Red Hat based amphora images. * Fix a potential AttributeError exception at init time in the housekeeping service when using python2 because of an issue with thread safety when calling strptime for the first time. * Fixed an issue where TLS-enabled pools would fail to provision. * Fixed an issue where UDP only load balancers would not bring up the VIP address. * Fix a potential invalid DOWN operating status for members of a UDP pool. A race condition could have occured when building the first heartbeat message after adding a new member in a pool, this recently added member could have been seen as DOWN. * Fixes an issue when using the admin_or_owner-policy.yaml policy override file and unscoped tokens. * With haproxy 1.8.x releases, haproxy consumes much more memory in the amphorae because of pre-allocated data structures. This amount of memory depends on the maxconn parameters in its configuration file (which is related to the connection_limit parameter in the Octavia API). In the Amphora provider, the default connection_limit value -1 is now converted to a maxconn of 50,000. It was previously 1,000,000 but that value triggered some memory allocation issues when quickly performing multiple configuration updates in a load balancer. Changes in octavia 5.0.3..5.1.0 ------------------------------- 564eec76 Fix invalid DOWN status when updating a UDP pool ea7351ef Fix amphora failover when VRRP port is missing a69562e4 Fix operating status for empty UDP pools 293ffe0f Fix lower-constraints & requirements a455eacf Fix load balancers with failed amphora failover 1c8adf80 Fix operational status for disabled UDP listeners 9c03dcf7 Fixes API list handling of unscoped tokens 6ba8dc62 Fix memory consumption issues with default connection_limit 011f1b05 Map cloud-guest-utils to cloud-utils-growpart for Red Hat distros. c8a999fe Fix missing cronie package in RHEL-based image builds a957fbc2 Fix load balancers with failed amphora failover 3ce6d3b3 Ignore DELETED amphorae when performing certificate rotation 811a6c83 Enable octavia-tempest-plugin for grenade job 11f96944 Fix pool delete race on load balancer cascade delete f0dab4ce Temporarily set octavia-v2-dsvm-py2-scenario non-voting 533de249 Remove unnecessary joinedload 0499e0c5 Followup Remove haproxy_check_script for UDP-only 5a69da39 Fix python2 AttributeError with strptime 539d14c5 Fix backend certificate file paths 06fb4412 Fix AttributeError on TLS-enabled pool provisioning 2cad144e Add some details on enable_anti_affinity option 4aa56332 Add missing log line for finishing amp operations e21028d6 Update devstack plugin 4ccbeadc Set Grub timeout to 0 for fast boot times 53b64b66 Remove haproxy_check_script for UDP-only LBs Diffstat (except docs and test files) ------------------------------------- api-ref/source/parameters.yaml | 6 +- devstack/README.md | 2 +- devstack/plugin.sh | 6 - devstack/settings | 2 +- diskimage-create/diskimage-create.sh | 3 + elements/amphora-agent/pkg-map | 4 +- etc/octavia.conf | 4 + lower-constraints.txt | 16 +-- .../backends/agent/api_server/keepalivedlvs.py | 1 + octavia/amphorae/backends/agent/api_server/util.py | 7 ++ .../amphorae/backends/utils/keepalivedlvs_query.py | 45 +++++++- .../amphorae/drivers/haproxy/rest_api_driver.py | 22 ++-- octavia/api/v2/controllers/base.py | 4 + octavia/common/base_taskflow.py | 3 + octavia/common/config.py | 8 +- octavia/common/constants.py | 5 + octavia/common/data_models.py | 9 +- .../jinja/haproxy/combined_listeners/jinja_cfg.py | 7 +- octavia/common/jinja/lvs/templates/base.j2 | 4 + octavia/common/jinja/lvs/templates/macros.j2 | 12 +- .../healthmanager/health_drivers/update_db.py | 8 ++ octavia/controller/worker/v1/controller_worker.py | 7 +- .../worker/v1/tasks/amphora_driver_tasks.py | 44 ++++--- octavia/controller/worker/v2/controller_worker.py | 7 +- octavia/db/repositories.py | 16 +-- .../drivers/neutron/allowed_address_pairs.py | 9 +- .../backend/agent/api_server/test_keepalivedlvs.py | 10 +- .../agent/api_server/test_haproxy_compatibility.py | 6 +- .../backends/utils/test_keepalivedlvs_query.py | 78 ++++++++++++- .../drivers/haproxy/test_rest_api_driver_0_5.py | 40 ++++--- .../drivers/haproxy/test_rest_api_driver_1_0.py | 25 ++-- .../haproxy/combined_listeners/test_jinja_cfg.py | 127 ++++++++++++++------- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 59 ++++++++++ .../sample_configs/sample_configs_combined.py | 51 ++++++--- .../worker/v1/tasks/test_amphora_driver_tasks.py | 54 ++++++--- .../drivers/neutron/test_allowed_address_pairs.py | 39 ++++++- playbooks/legacy/grenade-devstack-octavia/run.yaml | 1 + ...d-member-tls-enabled-pool-cc77bfa320aaf659.yaml | 5 + ...ailover-missing-vrrp-port-9b5f13b9951b7edb.yaml | 5 + ...sable-udp-listener-status-3d34a5596e62da1c.yaml | 6 + ...x-dual-error-amp-failover-69e323892bad8254.yaml | 5 + ...fix-empty-udp-pool-status-3171950628898468.yaml | 5 + ...sing-cloud-guest-utils-rh-eb39a53502dc1e91.yaml | 4 + .../fix-missing-cronie-rh-bd31001338ddbb1e.yaml | 4 + ...2-attributeerror-strptime-89a7350c55ac8818.yaml | 6 + ...enabled-pool-provisioning-e3adb987244a025a.yaml | 4 + .../notes/fix-udp-only-lbs-c4ca42106fc1e2bb.yaml | 5 + ...nstable-UDP-health-status-ba32690b83a9641b.yaml | 7 ++ .../get-all-unscoped-token-61da95856bc662e0.yaml | 10 ++ ...ction_limit-config-option-3ed9f0ed6ec2b514.yaml | 18 +++ requirements.txt | 4 +- test-requirements.txt | 2 +- tox.ini | 4 +- zuul.d/projects.yaml | 4 +- 63 files changed, 965 insertions(+), 199 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6f803550..4de3dd41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -28 +28 @@ oslo.reports>=1.18.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.serialization>=2.28.1 # Apache-2.0 @@ -43 +43 @@ diskimage-builder>=1.1.2,!=1.6.0,!=1.7.0,!=1.7.1,<3.0.0;python_version=='2.7' # -diskimage-builder>=1.26.0;python_version>='3.0' # Apache-2.0 +diskimage-builder>=2.27.0;python_version>='3.0' # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index de3ebd66..de4a2ee5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ doc8>=0.6.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0

telemetry_tempest_plugin 1.2.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are pumped to announce the release of: telemetry_tempest_plugin 1.2.0: Tempest plugin for Telemetry Projects This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/telemetry_tempest_plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ For more details, please see below. Changes in telemetry_tempest_plugin 1.1.0..1.2.0 ------------------------------------------------ 959fc69 Allow to disable SSL validation in gabbi tests Diffstat (except docs and test files) ------------------------------------- telemetry_tempest_plugin/config.py | 4 ++++ telemetry_tempest_plugin/scenario/utils.py | 7 +++++++ 2 files changed, 11 insertions(+)

1 0

neutron 17.1.0 (victoria)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are chuffed to announce the release of: neutron 17.1.0: OpenStack Networking This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 17.1.0 ^^^^^^ Known Issues ************ * Even with the "igmp_snooping_enable" configuration option stating that traffic would not be flooded to unregistered VMs when this option was enabled, the ML2/OVN driver didn't follow that behavior. This has now been fixed and ML2/OVN will no longer flood traffic to unregistered VMs when this configuration option is set to True. Bug Fixes ********* * Stop sending agent heartbeat from ovs agent when it detects OVS is dead. This helps to alarm cloud operators that there is something wrong on the given node. * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637) Changes in neutron 17.0.0..17.1.0 --------------------------------- 06cbfe0e1d Use consistent filter API syntax dd46044fce Add process name to AsyncProcess 80f4b8f9c6 Add missing "process_name" argument on Windows 411fbdd205 ovn: Support live migration to DPDK nodes 7756940d8a Do not report ovs agent state if ovs is dead 5ee2ca5a7b [FT] Add the datapath binding wait event to the watched list d1f5b6ff72 Ensure "keepalived" is correcly disabled 9cea31e49f Disable dns-integration API extension if it's not enabled in ML2 286e73d5a9 Add WaitForPortCreateEvent in BaseOVSTestCase d5e12dacc9 Randomize port name in "BaseOVSTestCase" ad0a77946c Dropping lower constraints testing (stable Victoria) ee4ff352be Improve the CIDRs overlap check method for router add interface 59d7e36255 Don't fail if FIP is not in port forwarding cache during cleaning 031924ad60 Ensure ovsdb_probe_interval set before connect() 6fe4286f9b Flush ebtables arp protect chains before deleting them ab4206560f Neutron ovs agent: set mtu of smartnic port dffe4eb3b2 Fix imports order in neutron.services.ovn_l3_plugin module c426f7336c [GRE] Add possibility to create GRE tunnels over IPv6 3801fe6104 Fix OVS conjunctive IP flows cleanup bc3ea9dd05 Fix removal of dvr-src mac flows when non-gateway port on router is deleted f6a3971cc2 Upgrade RPC version of SecurityGroup*Rpc ab25c89834 Update requirements for recent pip failures 2a61574f81 fix dhcp bulk reload exceptions d3df5a8715 Add locks for methods which sets nat rules in router 175f7c9064 Fix calling of add_tunnel_port method from sanity checks module cf13776a73 [OVN] Fix inconsistent IGMP configuration 311071f567 Fix migration from the HA to non-HA routers baf54722e4 Make test_agent_show only look for its own agents 3ca5b3a5de Do not update agents "alive" state in TestAgentApi 36797faf44 Fix ovs agent, avoiding import error f077319ebc Fix formatting error in agent/linux/external_process.py 4e4ff921dc Switch tripleo standalone job to content provider d4e98b11bd Switch to neutron-tempest-plugin-jobs-victoria template 88bbb58c80 Local mac direct flow for non-openflow firewall 092b341779 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled f0849bb0d2 "scope" conversion only just before pyroute2 method call fd54a7cf80 Rehome api tests for propagate_uplink_status 5a3d2adce3 [Stable only] Drop *-master jobs 1ea241d101 Convert neutron-grenade-ovn job to be zuulv3 1da19b3c9e Default dnsmasq --conf-file to /dev/null 24dd977c22 Filter out port with invalid ofport in OVS firewall 2458509c17 Use ebtables-legacy also in ovn multinode jobs 2668ae348b Change reference to OvnDbNotifyHandler._watched_events Diffstat (except docs and test files) ------------------------------------- TESTING.rst | 6 +- .../contributor/testing/ci_scenario_jobs.rst | 3 + lower-constraints.txt | 141 ------------- neutron/agent/common/async_process.py | 9 +- neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/dhcp/agent.py | 11 +- neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/extensions/port_forwarding.py | 12 +- neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 22 +- neutron/agent/linux/utils.py | 13 +- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/agent/windows/utils.py | 2 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 38 +++- neutron/cmd/sanity/checks.py | 22 +- neutron/db/agents_db.py | 1 + neutron/db/db_base_plugin_v2.py | 14 +- neutron/db/l3_db.py | 15 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/openvswitch/agent/common/constants.py | 4 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 80 ++++++-- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 200 +++++++++++++------ .../ml2/drivers/ovn/mech_driver/mech_driver.py | 4 +- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 - .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 11 +- neutron/plugins/ml2/plugin.py | 2 +- neutron/services/logapi/common/db_api.py | 2 +- neutron/services/metering/metering_plugin.py | 5 +- neutron/services/ovn_l3/plugin.py | 31 ++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 1 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 38 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 19 +- .../linux/openvswitch_firewall/test_firewall.py | 18 ++ .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 222 +++++++++++++++++++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 76 ------- .../ovn/mech_driver/ovsdb/test_maintenance.py | 6 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 7 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 2 +- playbooks/legacy/neutron-ovn-grenade/post.yaml | 15 -- playbooks/legacy/neutron-ovn-grenade/run.yaml | 84 -------- playbooks/prepare-ovn-multinode.yaml | 7 + releasenotes/notes/bug-7dc8245da8e0e571.yaml | 6 + ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + ...n-igmp-flood-unregistered-82aeb640f5dded84.yaml | 8 + requirements.txt | 12 +- test-requirements.txt | 6 +- tox.ini | 10 +- zuul.d/grenade.yaml | 118 ++++++++++- zuul.d/project.yaml | 31 ++- zuul.d/tempest-multinode.yaml | 48 +---- zuul.d/tempest-singlenode.yaml | 44 ---- 78 files changed, 1320 insertions(+), 689 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2d59616b67..7628d093df 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ decorator>=3.4.0 # BSD -eventlet>=0.21.0 # MIT +eventlet>=0.22.1 # MIT @@ -25 +25 @@ keystoneauth1>=3.14.0 # Apache-2.0 -alembic>=0.8.10 # MIT +alembic>=0.9.6 # MIT @@ -29,2 +29,2 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.config>=5.2.0 # Apache-2.0 -oslo.context>=2.20.0 # Apache-2.0 +oslo.config>=6.0.0 # Apache-2.0 +oslo.context>=2.22.0 # Apache-2.0 @@ -41 +41 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.service>=1.31.0 # Apache-2.0 @@ -56 +56 @@ python-designateclient>=2.7.0 # Apache-2.0 -os-xenapi>=0.3.1 # Apache-2.0 +os-xenapi>=0.3.4 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b3ae967883..1a0b5ddb89 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ fixtures>=3.0.0 # Apache-2.0/BSD -flake8-import-order==0.12 # LGPLv3 +flake8-import-order==0.18.1 # LGPLv3 @@ -18,2 +18,2 @@ ddt>=1.0.1 # MIT -astroid==2.3.3 # LGPLv2.1 -pylint==2.4.4 # GPLv2 +astroid==2.4.0 # LGPLv2.1 +pylint==2.5.3 # GPLv2

1 0

tripleo-ipsec 11.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are overjoyed to announce the release of: tripleo-ipsec 11.0.0: Ansible role for managing TripleO's IPSEC tunnels This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-ipsec Download the package from: https://tarballs.openstack.org/tripleo-ipsec/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-ipsec 9.3.0..11.0.0 -------------------------------------- 3e445d6 Replace deprecated UPPER_CONSTRAINTS_FILE variable e5f5da7 Skip ansible-lint 106 Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

python-tripleoclient 15.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are happy to announce the release of: python-tripleoclient 15.0.0: TripleO client This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * A dnf installation of tripleo-common, tripleo-ironic-python-agent- builder, openstack-tripleo-image-elements, openstack-tripleo-puppet- elements, and xfsprogs has been included as part of the *openstack overcloud image build* command. This allows us to drop these as always required dependencies for tripleoclient. Upgrade Notes ************* * *docker_bip* has been removed from the undercloud.conf * The "--*-flavor" options and the "--*-count" options were removed from the "overcloud deploy" command. * Remove *undercloud_update_packages* option in undercloud.conf. * *upgrade_cleanup* has been removed from the undercloud.conf as it hasn't had any effect after the initial containerized undercloud back in Rocky or FFU upgrade in Train. Other Notes *********** * Removed experimental designation from tripleo deploy since we've used it for several releases now and we're unlikely to change how it works. Changes in python-tripleoclient 14.0.0..15.0.0 ---------------------------------------------- f7fd2ed9 Correct a noisy DeprecationWarning 7c066dec We don't have to disable validations anymore for pre-deployed OC 7c40575d Update client to create archive and use tripleo-common 9014c68e Add lint dependencies for content provider b90f16d1 Add routes and MTU to ctlplane attrs for standalone 04c1466c Enable pylint 276bacfb Run flake8 using pre-commit 8429eaa4 Drop settings for python2 4b1440bd Remove tripleo_validator from tripleoclient 344fa18a Use same code path for UpdatePrepare be3f43ff [Validator Run] Add return code management 6546970a Overcloud image has missing kernel_id and ramdisk_id properties 48bedd76 Wire up new tripleo upgrades jobs template e11dcaea Set DeployIndentifier early in tripleoclient-parameters.yaml c6f22c1f [UX] Align to left the table for the validations run results 01fb0efd Make workflow monitoring more resilient 136e7440 The lower constraint file has been removed f554729a Add '--network-ports' option to node (un)provision c9a13bed Get deployment status to check if plan and stack exists on the env a6ceb26f Drop experimental for tripleo deploy c8137f8f Dumping task key instead of tasks from validation_output 501fea0d Honor --debug for buildah builder 2c7f7d6e [Container build] raise Exception post logging error a5314b1e Provision composable networks command ff4f4a95 Run validation without authentication in particular context a4fdf46d Map build host repos to distro.repos.d instead of yum.repos.d 8cc029b9 Remove count/flavor options from overcloud deploy 02593d0b Removed ubi-8 based jobs 4e0465fe Add config-download-dir flag to cell export command 006b1256 Extract provisioned networks from stack da2da07e Replace deprecated UPPER_CONSTRAINTS_FILE variable b139da39 Logging refactor 1362b900 Fix preflight validation 4a07e16a Remove detection of package manager for undercloud upgrade 0d84ac92 Add --disable-container-prepare flag aafd9819 Do not require authentication for the validator CLI fddf1510 Use user's home dir for fact cache ff56863b Handle root as a deployment user better b942e8db Ensure build packages installed at runtime 94963cf5 Remove undercloud_update_packages 37996551 Allow playbooks to come from a venv version 0e304cbe Switch deployed-server if nova unavailable 1e6339fa Update master for stable/victoria 61786b4d Remove upgrade_cleanup eba9a5e4 Remove docker_bip option 4229bee9 [Validator Show Run] Display simplified results by default 8afc8de2 Improve the error message about image tags ae332fa9 Fix heat container mounts 2df4b327 Handle container launch 5f06f693 Update heat container location eb6839a7 [Validator Show] Properly throwing an exception for unknown validation cd0e24bb [Validator Run] Don't rely on parameter file extension da8a3e59 [Validator Run] Ensure the plan really exists a139d436 Add new toggle to disable Swift Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 13 + .pylintrc | 79 ++++ lower-constraints.txt | 162 -------- ...ages-for-overcloud-images-e3eacb9e0ec53b5b.yaml | 8 + .../notes/remove-docker_bip-20d0249b45078dc2.yaml | 4 + ...ion-from-overcloud-deploy-c5f0d0a40b013ec4.yaml | 5 + ...ndercloud_update_packages-1fa2b7a1afda3258.yaml | 4 + .../remove-upgrade_cleanup-5b341a8a71394389.yaml | 6 + ...o-deploy-not-experimental-be5bc0df8adecb07.yaml | 5 + releasenotes/source/conf.py | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 3 +- setup.cfg | 22 +- test-requirements.txt | 2 - tox.ini | 21 +- tripleoclient/config/standalone.py | 22 +- tripleoclient/config/undercloud.py | 20 +- tripleoclient/constants.py | 44 ++- tripleoclient/exceptions.py | 4 - tripleoclient/export.py | 14 +- tripleoclient/heat_launcher.py | 58 +-- tripleoclient/plugin.py | 122 ------ .../v1/overcloud_deploy/test_overcloud_deploy.py | 207 ++-------- .../v1/overcloud_image/test_overcloud_image.py | 6 + .../v1/overcloud_update/test_overcloud_update.py | 36 +- .../test_tripleo_container_image.py | 12 +- .../v2/overcloud_network/test_overcloud_network.py | 121 ++++++ tripleoclient/utils.py | 107 ++--- tripleoclient/v1/container_image.py | 3 +- tripleoclient/v1/overcloud_admin.py | 1 - tripleoclient/v1/overcloud_cell.py | 14 +- tripleoclient/v1/overcloud_deploy.py | 107 +++-- tripleoclient/v1/overcloud_image.py | 36 +- tripleoclient/v1/overcloud_plan.py | 20 +- tripleoclient/v1/overcloud_update.py | 15 +- tripleoclient/v1/tripleo_deploy.py | 60 ++- tripleoclient/v1/tripleo_launch_heat.py | 6 +- tripleoclient/v1/tripleo_validator.py | 436 --------------------- tripleoclient/v1/undercloud.py | 19 +- tripleoclient/v1/undercloud_config.py | 15 +- tripleoclient/v1/undercloud_preflight.py | 3 +- tripleoclient/v2/overcloud_network.py | 137 +++++++ tripleoclient/v2/overcloud_node.py | 15 +- tripleoclient/v2/tripleo_container_image.py | 36 +- tripleoclient/workflows/base.py | 111 ------ tripleoclient/workflows/deployment.py | 7 +- tripleoclient/workflows/package_update.py | 65 --- tripleoclient/workflows/parameters.py | 97 ++--- tripleoclient/workflows/plan_management.py | 151 ++++--- tripleoclient/workflows/roles.py | 3 + zuul.d/layout.yaml | 31 +- 70 files changed, 1053 insertions(+), 2377 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8360fed..6e7279e5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,2 +16 @@ osc-lib>=1.8.0 # Apache-2.0 -websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=12.6.0 # Apache-2.0 +tripleo-common>=12.7.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 74bc779b..0506d342 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +3,0 @@ -hacking>=3.0.1,<3.1.0 # Apache-2.0 -

1 0

tripleo-image-elements 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are pumped to announce the release of: tripleo-image-elements 13.0.0: Disk image builder elements for deploying OpenStack. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.0..13.0.0 ------------------------------------------------ d072a79a ensure any ens3 interface is nuked during image build 3ce55b50 Add doc/requirements Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 4 ++-- requirements.txt | 1 - test-requirements.txt | 5 +---- tox.ini | 2 ++ 6 files changed, 9 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..e69de29b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +0,0 @@ -pbr>=0.11,<2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f924f319..d6511798 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 -openstackdocstheme>=2.2.1 # Apache-2.0 +hacking>=2.0.0 @@ -5 +3,0 @@ oslotest -sphinx>=2.0.0,!=2.1.0 # BSD @@ -7 +4,0 @@ testrepository>=0.0.18 -reno>=3.1.0 # Apache-2.0

1 0

tripleo-heat-templates 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are amped to announce the release of: tripleo-heat-templates 14.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Added "MemcachedMaxConnections" setting with a default of 8192 maximum connections in order to allow an operator to override that value in environments where memcached is heavily sollicited. * The "aodh_api_cron" container has been added to run aodh-expirer command periodically, to remove expired alarms from Aodh database. Use AodhExpire* parameters to override cron parameters. * The new "AodhAlarmHistoryTTL" parameter has been added, which defines TTL of alarm histories in aodh. This parameter is set as 86400 by default. * Support deploying multiple Cinder Netapp Storage backends. CinderNetappBackendName is enhanced to support a list of backend names, and a new CinderNetappMultiConfig parameter provides a way to specify parameter values for each backend. * Introducing the new "NovaSchedulerEnabledFilters" based on the new nova parameter "filter_scheduler.enabled_filters". * The parameter "NovaComputeStartupDelay" allows the operator to delay the startup of "nova-compute" after a compute node reboot. When all the overcloud nodes are rebooted at the same time, it can take a few minutes to the Ceph cluster to get in a healthy state. This delay will prevent the instances from booting before the Ceph cluster is healthy. * The NovaApiMaxLimit parameter allows the operator to set Nova API max_limit using a Heat parameter in their templates. * New Heat parameter ClusterFullTag controls how we configure pacemaker container image names for the HA services. Compared to the previous parameter ClusterCommonTag, this new naming convention allows any part of the container image name to change during a minor update, without service disruption. e.g., registryA/namespaceA/imgA:tagA to registryB/namespaceB/imgB:tagB This new paramter ClusterFullTag is enabled by default. * Refresh Swift ring files without restarting containers. This makes it possible to update rings without service restarts, lowering the overhead for updates. * The SwiftHashPrefix parameter allows the operator to set Swift swift_hash_path_prefix using a Heat parameter in their Templates. * OVN now supports VXLAN network type for tenant networks. Known Issues ************ * Cell_v2 discovery has been moved from the nova-compute|nova-ironic containers as this requires nova api database credentials which must not be configured for the nova-compute service. As a result scale-up deployments which explicitly omit the Controller nodes will need to make alternative arrangements to run cell_v2 discovery. Either the nova-manage command can be run manually after scale-up, or an additional helper node using the NovaManage role can be deployed that will be used for this task instead of a Controller node. See Bug: 1786961 (https://launchpad.net/bugs/1786961) and Bug: 1871482 (https://launchpad.net/bugs/1871482) Upgrade Notes ************* * The following parameters have been removed since they have had no effect. * "NovaDbSyncTimeout" * "ExtractedPlacementEnabled" * The *EnableEtcdInternalTLS* parameter's default value changes from false to true. The change is related to the fact that novajoin is deprecated, and the functionality associated with the *EnableEtcdInternalTLS* parameter is not required when TLS is deployed using the tripleo-ansible ansible module. * The AdminEmail parameter has been removed because it has had no effect since TripleO had bootstrap support implemented. * Support for Sahara service has been removed. Deprecation Notes ***************** * The *EnableEtcdInternalTLS* parameter is deprecated. It was added to support a workaround that is necessary when novajoin is used to deploy TLS, but novajoin itself is deprecated. The workaround is not necessary when TLS is deployed using the tripleo-ansible ansible module. * Deprecating "NovaSchedulerDefaultFilters", it's replaced with the new setting, "NovaSchedulerEnabledFilters". * Zaqar services are deprecated for removal. Bug Fixes ********* * When deploying a spine-and-leaf (L3 routed architecture) with TLS enabled for internal endpoints the deployment would fail because some roles are not connected to the network mapped to the service in ServiceNetMap. To fix this issue a role specific parameter "{{role.name}}ServiceNetMap" is introduced (defaults to: "{}"). The role specific ServiceNetMap parameter allow the operator to override one or more service network mappings per-role. For example: ComputeLeaf2ServiceNetMap: NovaLibvirtNetwork: internal_api_leaf2 The role specific "{{role.name}}ServiceNetMap" override is merged with the global "ServiceNetMap" when it's passed as a value to the "{{role.name}}ServiceChain" resources, and the "{{role.name}}" resource groups so that the correct network for this role is mapped to the service. Closes bug: 1904482 (https://bugs.launchpad.net/tripleo/+bug/1904482) * Certificates get merged into the containers using kolla_config mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd gets disabled and enabled at a later point the containers running the qemu process miss the required certificates and live migration fails. This change moves to use bind mount for the certificates and in case of UseTLSTransportForNbd ans creates the required certificates even if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd can be enabled/disabled as the required bind mounts/certificates are already present. * https://review.opendev.org/q/I8df21d5d171976cbb8670dc5aef744b5fae65 7b2 introduced THT parameters to set libvirt/cpu_mode. The patch sets the NovaLibvirtCPUMode wrong to 'none' string which results in puppet-nova not to handle the default cases correct and sets libvirt/cpu_mode to none which results in 'qemu64' CPU model, which is highly buggy and undesirable for production usage. This changes the default to the recommended CPU mode 'host-model', for various benefits documented elsewhere. * When using RHSM Service (deployment/rhsm/rhsm-baremetal- ansible.yaml) based registration of the overcloud nodes and enabling the KSM using NovaComputeEnableKsm=True the overcloud deployment will fail because the RHSM registration and the ksm task run as host_prep task. The handling of enable/disable ksm is now handled in deploy step 1. * In case of cellv2 multicell environment nova-metadata is the only httpd managed service on the cell controller role. In case of tls- everywhere it is required that the cell controller host has ther needed metadata to be able to request the HTTP certificates. Otherwise the getcert request fails with "Insufficient 'add' privilege to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'" * Do not relabel Swift files on every container (re-)start. These will be relabeled already in step 3 preventing additional delays. Other Notes *********** * A new parameter called "RabbitTCPBacklog" that specifies the maximum tcp backlog for RabbitMQ as been added. The value defaults to 4096 to match previous behavior and can be modified for the needs of larger scale deployments by operators. Changes in tripleo-heat-templates 13.0.0..14.0.0 ------------------------------------------------ 48dc38f32 Fix swift bare variable warning dc070b44a Do not loop on ceph_external_multi_config unless it is defined 4a599e372 Remove pcs/pacemaker package installation from upgrade tasks fc61731b8 Add deployed_port template 93b5c3a20 Making sure virt-guest-shutdown.target exists 967339a1f Drop python_cmd set_Fact ae1f4c1fb Add NovaImageTypeExcludeList parameter 831f5d65f Configure OVNCMSOptions=enable-chassis-as-gw within neutron-ovn-sriov.yaml 9949a8efe Turn off the etcd TLS workaround used with novajoin fea7fa2d9 Add doc/requirements 79686663e Configure Ceph clients via tripleo-ceph-client (not ceph-ansible) 38c3cdb81 Wire up new tripleo upgrades jobs template e7a84a2c1 Move the misplaced release note file 14c517916 Rename the template for LoginDefs service 49cebbb56 Remove duplicated tasks to create persisitent directries for haproxy 1c46f0a6c Glance: use the puppet parameter to enable image cache feature ab1599765 Revert "Move CA cert injection to host_prep_tasks" 799a270e3 Remove ineffective parameters of puppet-rabbitmq cb55cc8ce Serialize shutdown of pacemaker nodes 971438dd8 Simplify composition of swift-proxy-server pipelines d0c9b6d0c Remove cinder v2 API keystone service and endpoints f89140402 Fix logic to honor HorizonDebug 969693e66 Fix unreachable handling 6eb72aa76 Adding an optional startup delay to nova-compute bb8cb15d2 Update container-config-scripts/ folder content before update_tasks. 48d0e4d9b Notification drivers need to be a list be6a844a7 Make it possible to override ServiceNetMap per-role 976097752 Adding key_size option on the certificate creation 3e2371f71 Rely on the HOSTNAME var to resolve the mon container name 191d16090 Do not relabel Swift files on every container start 4c2d5927e Set up right DNF module stream for Upgrades and Updates. 144eb67ca Remove Luna HSM clients on scaledown b11835307 Use stat module instead of "test -s" faab7e785 Removing scheduler_default_filters for Nova 6d39c90a2 Use RootStackName parameter instead for consistency 81087b49c Move ipa check to external_deploy_tasks 4aa2bcd6d Ensure images folder is created for ironic-conductor d582c097c Set setgid mode bit for /var/lib/ironic 4ebc9ac8f Disable SwiftDisperion when deploying Ceph RGW c8f5fdfc3 HA: reimplement resource locks with cibadmin ffd86b3f2 Fix ownership of octavia_rsyslog log directory efd197551 The lower constraint file has been removed 5b60ef1ee Don't try and clean non-existing nic config dir 2d60799c4 Define a new CinderVolumeEdge service 3663790bc Remove /etc/ceph dependency and add tripleo_ceph_client role bf7ef6b4d Set toplevel nova::dhcp_domain for all nova services a487e16c5 Remove vfio-pci.conf module load file 0e1c9618b Add SwiftHashPrefix parameter 8b16911cc Revert rolling certificate updates for HA services ca6cf97d9 [PowerFlex] Fix resource name typo in template bbed1ef73 Add setting to override max memcached connections eace71f0e Add setting to override rabbitmq tcp connection backlog 1879441b3 Ensure cloud-init has finished before puppet run 83e6f9a6c Add qemu metadata to compute node when tls for live migration 04b4ec386 Identify HSMs using labels instead of Slot ID 1e7015081 Pre-fix neutron resource tags with 'tripleo_' 06a6fffc1 Add deleton_policy to network port resources fe275dd91 Add 'networks_all' ansible group_var a4ed8120f Run os-net-config on step 3 63b2a989b Ensure cinder LVM volumes work after system restart c290a5e3a Set correct default NovaLibvirtCPUMode 89fcfa5fa Fix barbican settings missing from glance Edge nodes 841ffc0ad Fix typo in bond options group var name (2/2) 70818dc68 fix nova_statedir_ownership e77a59b41 Revert "Create post-deploy.conf on update/upgrade for octavia" 39d0330b2 Remove 'role_networks_lower' group_var 3108c052b Add {{ network.name }}_mtu for all networks to group_vars 39ee7e23d Don't pass empty values for ipaclient_servers to ipaclient role b1204893e Allow to configure vxlan network type for OVN 1fafca733 Refresh ceph-ansible group_vars values c8c985567 Make sure networks_skip_config defaults to [] 079d50547 Network data v2 YAML definition for CI caa9d7de0 Deployed networks template 8e5d5283c Move CA cert injection to host_prep_tasks 89d605103 Make sure apache metadata is set for nova-metadata service d476a31a0 Fix the value of ssl_verify_client 9d82364de Refactor nova db config 629485dde Move cell_v2 discovery off compute hosts ddec6c8b6 Fix convert_nic_config.py script d3826e9ec Create post-deploy.conf on update/upgrade for octavia d910b9486 Add file which enables QoS related L3 agent extensions 28f2a7091 Add hostname and stack_name tags to ports c329204de Move enable ksm on compute node to deploy step 1 603530c71 Add NovaApiMaxLimit configure max_limit for nova fce83f534 Support deploying multiple Cinder Netapp Storage backends 0b4175178 Adding Ceph Dashboard to the Edge roles 735faf047 Enable tripleo_free strategy for upgrade 4e0f61d9e Properly compute hostname when looking for the ceph-mon container 633707d41 Fix typo in bond options group var name (1/2) efdfa252c Add Python3 victoria unit tests 51ebe2f65 node_exporter_container_image is needed in 'all' group 5d9c6edb3 Always set dashboard_protocol when Ceph Dashboard is enabled a9da212d7 Fix memcached logging 97ddb9496 Replace deprecated UPPER_CONSTRAINTS_FILE variable 00a22232f Filter computes with nova_host defined f456eb57d Drop duplicate paramter NeutronPublicInterface eb41d8bf6 Remove mistral parameters from undercloud.yaml e07e571ba Use bind mounts for tls certificates 4933d6f3e cinder/iscsi backend: remove lvm2-lvmetad.service dependency fedc81d82 Update master for stable/victoria dfc3322b6 Fix MetricsQdrUseSSL value 566feed07 Remove the ineffective AdminEmail parameter ef1b03455 Make sure octavia user belongs to octavia project 9bc664090 Fix swift containers idempotency cb982440d Refresh Swift ring files without restarting containers d00943a58 Deprecate zaqar services 50f062da7 HA: ClusterFullTag naming convention by default 62e7beb38 Switch c8-standalone to content provider 3f8decf17 Add CinderBackupOptVolumes parameter 3c246d15d Remove old nic config templates a2324ccac Cleanup unused parameters from nova templates c15653401 Skip Trilio dirs when setting ownership in /var/lib/nova d63d2c63a Fix ceilometer_agent_compute healthcheck 4a7d56947 Remove Sahara support 91cc43e01 Add SendQueueLimit to collectd-amqp1 cb92bb73a Re-enable driver agent for scenario 13 46113c545 Add aodh-expirer cron job Diffstat (except docs and test files) ------------------------------------- README.rst | 2 - ci/environments/multinode-containers.yaml | 1 + ci/environments/neutron_l3_qos.yaml | 2 + ci/environments/scenario000-standalone.yaml | 2 - ci/environments/scenario001-standalone.yaml | 3 + ci/environments/scenario002-standalone.yaml | 2 +- ci/environments/scenario004-standalone.yaml | 2 +- ci/environments/scenario013-standalone.yaml | 3 - ci/network_data.yaml | 50 +++ common/common-container-config-scripts.yaml | 17 + common/container-puppet.sh | 6 +- common/deploy-steps-playbooks-common.yaml | 12 +- common/deploy-steps-tasks-step-0.j2.yaml | 14 + common/deploy-steps-tasks-step-1.yaml | 33 +- common/deploy-steps.j2 | 5 + .../nova_statedir_ownership.py | 21 +- .../pacemaker_mutex_shutdown.sh | 120 +++++++ .../pacemaker_resource_lock.sh | 134 ++++--- deployment/aodh/aodh-api-container-puppet.yaml | 74 ++++ deployment/aodh/aodh-base.yaml | 2 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 16 + .../barbican/barbican-api-container-puppet.yaml | 86 ++--- .../barbican-backend-pkcs11-crypto-puppet.yaml | 14 +- deployment/barbican/barbican-client-puppet.yaml | 3 +- .../ceilometer-agent-compute-container-puppet.yaml | 3 +- .../ceilometer-base-container-puppet.yaml | 2 +- deployment/ceph-ansible/ceph-base.yaml | 60 +++- deployment/ceph-ansible/ceph-grafana.yaml | 20 +- deployment/ceph-ansible/ceph-mgr.yaml | 22 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- deployment/ceph-ansible/ceph-rgw.yaml | 20 +- deployment/cinder/cinder-api-container-puppet.yaml | 27 +- .../cinder/cinder-backend-netapp-puppet.yaml | 28 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 6 + .../cinder/cinder-common-container-puppet.yaml | 38 +- .../cinder/cinder-volume-container-puppet.yaml | 8 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 + deployment/containers-common.yaml | 3 + deployment/database/mysql-base.yaml | 16 + deployment/database/mysql-pacemaker-puppet.yaml | 2 - deployment/database/redis-container-puppet.yaml | 16 + deployment/deprecated/mistral/mistral-base.yaml | 2 +- .../sahara/sahara-api-container-puppet.yaml | 215 ----------- deployment/deprecated/sahara/sahara-base.yaml | 120 ------- .../sahara/sahara-engine-container-puppet.yaml | 137 ------- .../zaqar/zaqar-container-puppet.yaml | 6 +- deployment/etcd/etcd-container-puppet.yaml | 60 +++- .../experimental/designate/designate-base.yaml | 2 +- deployment/glance/glance-api-container-puppet.yaml | 25 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 20 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 13 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-container-puppet.yaml | 21 +- .../haproxy/haproxy-edge-container-puppet.yaml | 1 - .../haproxy-internal-tls-certmonger.j2.yaml | 19 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 53 ++- .../haproxy/haproxy-public-tls-certmonger.yaml | 19 + deployment/heat/heat-base-puppet.yaml | 2 +- deployment/horizon/horizon-container-puppet.yaml | 28 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 30 +- .../ironic/ironic-conductor-container-puppet.yaml | 3 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 16 +- deployment/keystone/keystone-container-puppet.yaml | 7 +- ...etal.yaml => login-defs-baremetal-ansible.yaml} | 0 deployment/manila/manila-backend-cephfs.yaml | 6 + deployment/manila/manila-base.yaml | 2 +- deployment/manila/manila-share-common.yaml | 11 +- .../manila/manila-share-container-puppet.yaml | 7 +- .../manila/manila-share-pacemaker-puppet.yaml | 8 +- .../memcached/memcached-container-puppet.yaml | 25 +- deployment/metrics/collectd-container-puppet.yaml | 13 + deployment/metrics/qdr-container-puppet.yaml | 23 +- .../neutron/neutron-api-container-puppet.yaml | 16 + deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 16 + .../neutron-ovs-dpdk-agent-container-puppet.yaml | 24 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 11 - deployment/neutron/neutron-plugin-ml2.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 47 ++- deployment/nova/nova-apidb-client-puppet.yaml | 78 ++++ deployment/nova/nova-az-config.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 80 +---- .../nova/nova-compute-common-container-puppet.yaml | 22 +- deployment/nova/nova-compute-container-puppet.yaml | 169 ++++++--- .../nova/nova-conductor-container-puppet.yaml | 60 +++- deployment/nova/nova-db-client-puppet.yaml | 80 +++++ deployment/nova/nova-ironic-container-puppet.yaml | 13 +- deployment/nova/nova-libvirt-container-puppet.yaml | 250 ++++++------- deployment/nova/nova-manager-container-puppet.yaml | 106 ++++++ .../nova/nova-metadata-container-puppet.yaml | 47 ++- .../nova/nova-scheduler-container-puppet.yaml | 64 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 47 ++- .../octavia/octavia-api-container-puppet.yaml | 1 + deployment/octavia/octavia-base.yaml | 2 +- .../octavia-health-manager-container-puppet.yaml | 5 +- .../octavia/providers/ovn-provider-config.yaml | 16 + .../ovn/ovn-controller-container-puppet.yaml | 16 + deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 18 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 16 + .../pacemaker/pacemaker-baremetal-puppet.yaml | 6 + deployment/rabbitmq/rabbitmq-container-puppet.yaml | 24 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 16 + .../rabbitmq-messaging-rpc-container-puppet.yaml | 16 + deployment/swift/swift-base.yaml | 7 + deployment/swift/swift-proxy-container-puppet.yaml | 39 +- .../swift/swift-ringbuilder-container-puppet.yaml | 10 + .../swift/swift-storage-container-puppet.yaml | 42 ++- .../tripleo-packages-baremetal-puppet.yaml | 45 ++- deployment/undercloud/undercloud-upgrade.yaml | 34 ++ environments/barbican-backend-pkcs11-lunasa.yaml | 24 +- environments/cavium-liquidio.yaml | 2 +- environments/ceph-ansible/ceph-rgw.yaml | 1 + environments/cinder-dellemc-powerflex-config.yaml | 2 +- environments/cinder-netapp-config.yaml | 20 +- environments/dcn-hci.yaml | 2 +- environments/docker-ha.yaml | 2 +- environments/enable-stf.yaml | 1 + .../lifecycle/undercloud-upgrade-prepare.yaml | 1 + environments/lifecycle/update-prepare.yaml | 1 + environments/lifecycle/upgrade-prepare.yaml | 1 + environments/login-defs.yaml | 2 +- environments/low-memory-usage.yaml | 1 - environments/metrics/collectd-write-qdr.yaml | 1 + environments/ovs-hw-offload.yaml | 2 +- environments/podman.yaml | 1 - .../services-baremetal/neutron-ovn-dvr-ha.yaml | 2 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services/neutron-mlnx-agent.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 6 +- environments/services/neutron-ovn-ha.yaml | 8 +- environments/services/neutron-ovn-sriov.yaml | 8 +- environments/services/neutron-ovn-standalone.yaml | 4 +- environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/sahara.yaml | 3 - environments/services/zaqar-swift-backend.yaml | 2 +- environments/services/zaqar.yaml | 2 +- environments/ssl/no-tls-endpoints-public-ip.yaml | 3 - environments/ssl/tls-endpoints-public-dns.yaml | 3 - environments/ssl/tls-endpoints-public-ip.yaml | 3 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 - environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/storage/cinder-netapp-config.yaml | 8 +- environments/swift-external.yaml | 1 + environments/undercloud-enable-nova.yaml | 2 +- environments/undercloud.yaml | 5 - environments/undercloud/undercloud-minion.yaml | 2 - lower-constraints.txt | 164 --------- net-config-bond.j2.yaml | 108 ------ net-config-bridge.j2.yaml | 105 ------ net-config-linux-bridge.j2.yaml | 113 ------ net-config-noop.j2.yaml | 82 ----- net-config-standalone.j2.yaml | 161 --------- ...config-static-bridge-with-external-dhcp.j2.yaml | 117 ------ net-config-static-bridge.j2.yaml | 116 ------ net-config-static.j2.yaml | 105 ------ net-config-undercloud.j2.yaml | 155 -------- network/config/2-linux-bonds-vlans/README.md | 38 -- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 266 -------------- network/config/bond-with-vlans/README.md | 64 ---- .../bond-with-vlans/controller-no-external.j2.yaml | 175 --------- network/config/bond-with-vlans/role.role.j2.yaml | 239 ------------- network/config/multiple-nics-vlans/README.md | 46 --- .../config/multiple-nics-vlans/compute-dvr.j2.yaml | 192 ---------- .../config/multiple-nics-vlans/role.role.j2.yaml | 212 ----------- network/config/multiple-nics/README.md | 54 --- network/config/multiple-nics/compute-dvr.j2.yaml | 180 ---------- network/config/multiple-nics/role.role.j2.yaml | 201 ----------- .../config/single-nic-linux-bridge-vlans/README.md | 27 -- .../role.role.j2.yaml | 168 --------- network/config/single-nic-vlans/README.md | 63 ---- .../controller-no-external.j2.yaml | 123 ------- network/config/single-nic-vlans/role.role.j2.yaml | 159 --------- network/deployed_networks.yaml | 59 ++++ network/endpoints/endpoint_data.yaml | 9 - network/endpoints/endpoint_map.yaml | 393 --------------------- network/ports/deployed_port.j2 | 74 ++++ network/ports/deployed_port.network.j2.yaml | 1 + network/ports/ovn_mac_addr_port.yaml | 9 + network/ports/port.j2 | 21 ++ network/ports/vip.yaml | 9 + network/service_net_map.j2.yaml | 1 - overcloud-resource-registry-puppet.j2.yaml | 4 +- overcloud.j2.yaml | 42 ++- ...ddmemcachedmaxconnections-b591c0fa39e821f5.yaml | 6 + .../notes/aodh-expirer-6631733d237a872e.yaml | 10 + .../notes/bug-1904482-dbc5162c8245a9b3.yaml | 21 ++ ...v2_discovery_off_computes-2b977c6b9a01cde2.yaml | 13 + ...-multiple-netapp-backends-71ed7fef3008e654.yaml | 7 + .../cleanup-nova-params-cc7c501dcb9879d0.yaml | 7 + ...ecate-etcd-tls-workaround-de5dd1fc19dae5b2.yaml | 14 + ...scheduler_default_filters-122a7448d808dd82.yaml | 9 + .../notes/deprecate-zaqar-622f409474813783.yaml | 4 + ...use_bind_mounts_for_certs-64cb88f78538a64b.yaml | 13 + ...ova-compute-startup-delay-fdb1f229840bd0e6.yaml | 8 + ...ova_api_max_limit-support-43fe9792eca63599.yaml | 5 + ..._compute_default_cpu_mode-cda2bb3e56463b3a.yaml | 11 + .../notes/nova_compute_ksm-444f1cc51ceafb66.yaml | 8 + ...tadata_http_cert_metadata-274e7e8a66727983.yaml | 9 + ...r-enable-cluster-full-tag-f868a6f0b1f16018.yaml | 10 + ...onfigure_rabbitmq_backlog-68da3a07ef506f57.yaml | 7 + .../notes/remove-AdminEmail-70cf5b218f916734.yaml | 5 + .../notes/remove-sahara-ffec9acf94d72905.yaml | 4 + .../swift-prevent-relabeling-b9721aa5a1abda6e.yaml | 5 + .../swift-refresh-rings-cc327f998490b0df.yaml | 6 + .../swift_hash_path_prefix-5ecc32ed5d78158b.yaml | 6 + .../vxlan-support-for-ovn-1320be8046aca9c6.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/Controller.yaml | 3 +- roles/ControllerAllNovaStandalone.yaml | 3 +- roles/ControllerNoCeph.yaml | 2 - roles/ControllerNovaStandalone.yaml | 3 +- roles/ControllerOpenstack.yaml | 3 +- roles/ControllerSriov.yaml | 3 +- roles/ControllerStorageDashboard.yaml | 3 +- roles/ControllerStorageNfs.yaml | 3 +- roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 3 +- roles/DistributedComputeHCIDashboard.yaml | 80 +++++ roles/NovaManager.yaml | 37 ++ roles/Standalone.yaml | 2 - roles_data.yaml | 3 +- sample-env-generator/dcn.yaml | 2 +- sample-env-generator/ssl.yaml | 12 - sample-env-generator/standalone.yaml | 6 - sample-env-generator/undercloud-minion.yaml | 2 - scripts/delay-nova-compute | 45 +++ test-requirements.txt | 3 - tools/convert_nic_config.py | 3 +- tools/process-templates.py | 10 - tools/yaml-validate.py | 18 +- tox.ini | 10 +- zuul.d/layout.yaml | 104 +----- 242 files changed, 2788 insertions(+), 5273 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e11f7e2c1..36bb9c41f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +4,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -openstackdocstheme>=1.18.1 # Apache-2.0 @@ -9,2 +7,0 @@ six>=1.10.0 # MIT -sphinx>=1.8.0,!=2.1.0 # BSD -reno>=2.5.0 # Apache-2.0

1 0

os-refresh-config 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We eagerly announce the release of: os-refresh-config 13.0.0: Refresh system configuration This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 10.4.0..13.0.0 ------------------------------------------- 754bb75 Replace deprecated UPPER_CONSTRAINTS_FILE variable 8a74797 Bump pyflakes 2d6a974 Cleanup py27 support b324bce Use unittest.mock instead of third party mock cc543ed Stop testing python2.7 84d8464 Switch to Ussuri jobs Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/drop-py2-76af844b0b952a91.yaml | 6 ++++++ setup.cfg | 18 ++++++++---------- setup.py | 9 --------- test-requirements.txt | 5 ++--- tox.ini | 14 ++++++++------ zuul.d/layout.yaml | 3 +-- 7 files changed, 27 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a498fff..28342a5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -10,2 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD @@ -14,0 +13 @@ testtools>=2.2.0 # MIT +pyflakes>=2.2.0

1 0

os-collect-config 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are thrilled to announce the release of: os-collect-config 13.0.0: Collect and cache metadata, run hooks on changes. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.1..13.0.0 ------------------------------------------- cc519a7 Replace deprecated UPPER_CONSTRAINTS_FILE variable 271a543 Bump pyflakes Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1cb1476..28342a5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12,0 +13 @@ testtools>=2.2.0 # MIT +pyflakes>=2.2.0

1 0

tripleo-puppet-elements 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We high-spiritedly announce the release of: tripleo-puppet-elements 14.0.0: Puppet building rules for OpenStack images. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 13.0.0..14.0.0 ------------------------------------------------- ad31a40 Add doc/requirements ed38c43 Include cephadm in the overcloud image fe05e91 Add Python3 wallaby unit tests f6eff30 Update master for stable/victoria 9b38313 Remove puppet-panko Diffstat (except docs and test files) ------------------------------------- elements/overcloud-controller/package-installs.yaml | 1 + elements/overcloud-controller/pkg-map | 3 ++- .../puppet-modules/environment.d/02-puppet-modules-install-types.sh | 1 - elements/puppet-modules/source-repository-puppet-modules | 1 - releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++++++ test-requirements.txt | 5 ----- tox.ini | 2 ++ zuul.d/layout.yaml | 2 +- 10 files changed, 18 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fd1dd17..abd86cf 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,2 +7,0 @@ oslotest -sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.2.1 # Apache-2.0 @@ -11,3 +8,0 @@ testrepository>=0.0.18 - -# This is required for the releasenotes build jobs -reno>=3.1.0 # Apache-2.0

1 0

neutron 15.3.1 (train)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We eagerly announce the release of: neutron 15.3.1: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.3.1 ^^^^^^ New Features ************ * "DVR" routers now support "flat" networks. Bug Fixes ********* * Fixed bug 1876092 (https://bugs.launchpad.net/neutron/+bug/1876092) which caused DUP ICMP replies on the "flat" networks used with "DVR" routers. * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637) Changes in neutron 15.3.0..15.3.1 --------------------------------- cce4120e5d Revert "[Security] fix allowed-address-pair 0.0.0.0/0 issue" bf8fc2db0c Fix removal of dvr-src mac flows when non-gateway port on router is deleted f65bea4943 Ensure "keepalived" is correcly disabled 3b6cf23aa3 Neutron ovs agent: set mtu of smartnic port 9c1f940d82 Don't fail if FIP is not in port forwarding cache during cleaning c121b1caa9 Add WaitForPortCreateEvent in BaseOVSTestCase 4f06660447 Randomize port name in "BaseOVSTestCase" ef37b3a39a Dropping lower constraints testing (stable Train) 80abfca487 [GRE] Add possibility to create GRE tunnels over IPv6 cf4d045ac5 Improve the CIDRs overlap check method for router add interface 03f0a832a8 Fix OVS conjunctive IP flows cleanup c9416b1013 [train] Fix tests with new pip resolver a5d8623a2a Flush ebtables arp protect chains before deleting them 0f77298775 Fix calling of add_tunnel_port method from sanity checks module 4de2221853 Fix migration from the HA to non-HA routers 0e6a429158 Rehome api tests for propagate_uplink_status dea24403a7 Fix ovs agent, avoiding import error 9c08212576 Fix formatting error in agent/linux/external_process.py fd22aad5c2 Switch tripleo standalone job to content provider c06895e8e7 Local mac direct flow for non-openflow firewall cbb949379c ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 4ef6566b6d "scope" conversion only just before pyroute2 method call ae74b483c3 Make NeutronOvsdbIdl singleton 86463bd822 [Functional] Add logging to the check test file function 35eddd53f9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec a9af91846a Import "oslo_config.cfg" before "eventlet" bcc21b306d windows: fix terminating processes bfa14f7f29 Support gateway which is not in subnet CIDR in ha_router 8654eb2d18 Default dnsmasq --conf-file to /dev/null 84d38f342b Ensure fip ip rules deleted when fip removed 468bc1989a Make DVR router support FLAT network for ovs-agent Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +- TESTING.rst | 6 +- lower-constraints.txt | 154 ------------ neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/dvr_fip_ns.py | 3 + neutron/agent/l3/dvr_local_router.py | 27 ++- neutron/agent/l3/extensions/port_forwarding.py | 6 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 71 ++++-- neutron/agent/linux/openvswitch_firewall/rules.py | 6 - neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 6 +- neutron/cmd/sanity/checks.py | 22 +- neutron/common/utils.py | 12 + neutron/db/l3_db.py | 15 +- neutron/db/securitygroups_rpc_base.py | 23 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/linuxbridge/agent/common/constants.py | 3 - .../drivers/openvswitch/agent/common/constants.py | 25 +- .../openvswitch/agent/openflow/native/br_int.py | 37 +-- .../openvswitch/agent/openflow/native/br_phys.py | 8 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 121 ++++++---- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 206 ++++++++++------ .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../linux/openvswitch_firewall/test_firewall.py | 97 +++++--- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_iptables_firewall.py | 22 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 +- .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 115 +++++++-- .../agent/openflow/native/test_br_phys.py | 6 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 260 ++++++++++++++++++--- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ ...port-flat-network-for-ovs-fdf8c3eb461426ec.yaml | 9 + ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + requirements.txt | 6 +- test-requirements.txt | 2 +- tox.ini | 8 - 68 files changed, 1430 insertions(+), 566 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4ba3f71160..d86abeb51a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ Routes>=2.3.1 # MIT -debtcollector>=1.2.0 # Apache-2.0 +debtcollector>=1.19.0 # Apache-2.0 @@ -24 +24 @@ WebOb>=1.8.2 # MIT -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 @@ -49 +49 @@ ovs>=2.8.0 # Apache-2.0 -ovsdbapp>=0.9.1 # Apache-2.0 +ovsdbapp>=0.12.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5f4a05d6b1..a1ec3b6e20 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0

1 0

neutron 16.3.0 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are ecstatic to announce the release of: neutron 16.3.0: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.3.0 ^^^^^^ Known Issues ************ * Even with the "igmp_snooping_enable" configuration option stating that traffic would not be flooded to unregistered VMs when this option was enabled, the ML2/OVN driver didn't follow that behavior. This has now been fixed and ML2/OVN will no longer flood traffic to unregistered VMs when this configuration option is set to True. Bug Fixes ********* * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637) Changes in neutron 16.2.0..16.3.0 --------------------------------- 16befa0385 Use consistent filter API syntax 72189fff4a [FT] Add the datapath binding wait event to the watched list 3fd93470c0 Ensure "keepalived" is correcly disabled 37a65b1d27 Disable dns-integration API extension if it's not enabled in ML2 dfeac37371 Randomize port name in "BaseOVSTestCase" 97d404c8c5 Dropping lower constraints testing (stable Ussuri) 1780962bed Limit usage of resources in the fullstack tests job 1096001fa3 Improve the CIDRs overlap check method for router add interface 31c6b28c6d Don't fail if FIP is not in port forwarding cache during cleaning 9f72ba5707 Upgrade RPC version of SecurityGroup*Rpc 2a481aa0ab [GRE] Add possibility to create GRE tunnels over IPv6 d5ea5d305f Fix calling of add_tunnel_port method from sanity checks module e252634c78 Fix imports order in neutron.services.ovn_l3_plugin module b82e2f735e Neutron ovs agent: set mtu of smartnic port c720f26b6a Fix OVS conjunctive IP flows cleanup 9b82a20891 ovn: Always use UTC for Hash ring timestamps a34783be3b [OVN] Fix inconsistent IGMP configuration 2a88356230 Flush ebtables arp protect chains before deleting them 0f41ad641a Fix removal of dvr-src mac flows when non-gateway port on router is deleted 0d00c4e17e [ussuri] Fix tests with new pip resolver 598dcec812 fix dhcp bulk reload exceptions 65d3f79ce6 Ensure ovsdb_probe_interval set before connect() 941aae1b56 Add locks for methods which sets nat rules in router 144d921947 Fix migration from the HA to non-HA routers 5ac50b220e Rehome api tests for propagate_uplink_status 3ba5da849e Fix ovs agent, avoiding import error b9c2dd48fa Fix formatting error in agent/linux/external_process.py 7d8853c6af Switch tripleo standalone job to content provider 9fd5102408 [OVN] Fix get/update/delete of non-OVN agents ef14d258ee Local mac direct flow for non-openflow firewall d865165cc8 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled cd0526dce8 "scope" conversion only just before pyroute2 method call b0892ec3f7 [Functional] Add logging to the check test file function 010d8f74a9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec 389bae74ae Import "oslo_config.cfg" before "eventlet" 29b8d567fc windows: fix terminating processes 2bedb02a80 Support gateway which is not in subnet CIDR in ha_router 3447613efa Default dnsmasq --conf-file to /dev/null c874c44cdc Make NeutronOvsdbIdl singleton 58e2def05f [OVN] update_port should not remove values from external_ids Diffstat (except docs and test files) ------------------------------------- TESTING.rst | 6 +- lower-constraints.txt | 155 --------------- neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/dhcp/agent.py | 11 +- neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/extensions/port_forwarding.py | 12 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 +- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 38 +++- neutron/cmd/sanity/checks.py | 22 ++- neutron/common/ovn/hash_ring_manager.py | 6 +- neutron/common/utils.py | 12 ++ neutron/db/l3_db.py | 15 +- neutron/db/models/ovn.py | 5 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/openvswitch/agent/common/constants.py | 4 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 80 ++++++-- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 186 ++++++++++++------ .../ml2/drivers/ovn/mech_driver/mech_driver.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 - .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 7 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 11 +- neutron/services/ovn_l3/plugin.py | 29 ++- .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 65 +++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 39 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 21 ++ .../linux/openvswitch_firewall/test_firewall.py | 10 + .../unit/common/ovn/test_hash_ring_manager.py | 2 + .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 214 +++++++++++++++++++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 66 ------- .../ovn/mech_driver/ovsdb/test_maintenance.py | 6 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 2 +- ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + ...n-igmp-flood-unregistered-82aeb640f5dded84.yaml | 8 + tox.ini | 9 +- zuul.d/base.yaml | 1 + zuul.d/project.yaml | 18 +- 72 files changed, 1289 insertions(+), 449 deletions(-)

1 0

os-net-config 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are gleeful to announce the release of: os-net-config 14.0.0: OpenStack network configuration This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.0.0..14.0.0 --------------------------------------- ba93c36 Check to ensure active DPDK NICs only mapped once da7614b basic support for Linux tap devices 4f2ebfd Exclude DPDK mapped VF device even if not present 1a1b1b7 Wire up new tripleo upgrades jobs template 3144a8f Support binding VFs after moving to switchdev 87702f3 Fixing the dependency for sriov_config service f19c75c Replace deprecated UPPER_CONSTRAINTS_FILE variable bfb4e17 Add Python3 wallaby unit tests 87daba4 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/linux_tap.json | 8 ++ etc/os-net-config/samples/linux_tap.yaml | 6 ++ os_net_config/__init__.py | 11 +++ os_net_config/impl_ifcfg.py | 12 +++ os_net_config/objects.py | 36 +++++++ os_net_config/schema.yaml | 38 +++++++ os_net_config/sriov_bind_config.py | 137 ++++++++++++++++++++++++++ os_net_config/sriov_config.py | 14 ++- os_net_config/utils.py | 18 +++- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++ setup.cfg | 1 + tox.ini | 2 +- zuul.d/layout.yaml | 3 +- 18 files changed, 394 insertions(+), 7 deletions(-)

1 0

tripleo-common 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We exuberantly announce the release of: tripleo-common 14.0.0: A common library for TripleO workflows. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 14.0.0 ^^^^^^ Bug Fixes * The qemu user on the host gets created using uid/gid 107. Certificates on the host, but also the vhost-user sockets created by ovs use this uid/gid. With the move to TCIB images the default kolla ids were reverted and the previous overwrite dropped. This make e.g. the qemu processes to fail to use the libvirt-vnc bind mounted certificates. This change brings back the previous overwrite of the qemu user uid/gid. Changes in tripleo-common 13.0.0..14.0.0 ---------------------------------------- 2185d9a8 Conditionally use python instead of cURL e0477494 Check existence of expires_in for auth 131ff2b4 Re-factor inventory.py use setdefault pervasively acf9eb95 Fix W1201 - logging-not-lazy 212fe2eb Add missing parentheses 77ba2532 Drop stack_update function 64d4af47 Move daxio package to be arch specific 96d3c1fa Create a container for Unbound DNS resolver 57a8d9b7 Drop parameter caching 4db1e726 pylint: fixed conditions 1b45bb88 TCIB: Add cinder-volume extend_start.sh script d1049724 pylint: fixed logging 8e57c59e Add doc/requirements ad83b39e Wire up new tripleo upgrades jobs template e05e6bdf TCIB: Fix debug mode for oslo process execute b3167873 Revert "Removed ubi-8 based jobs" 750b5625 Revert "Fix a couple of Swift healthchecks" 4cd3bd8f Fix a couple of Swift healthchecks 13ac87ba Enable pylint c296d83e Fix ImportWarning during importing a module 20c7c911 Change retry logic on buildah build e7817290 Switch gnocchi-statsd HC to healthcheck_port 3c0966f6 Raise error when old network config templates are used 5efea51f Add daxio package for nvdimm scenario 05f42ec3 The lower constraint file has been removed 43fa36d3 Cleanup and add test coverage for inventory without overcloud 956c0a2e Fix localization for horizon container b4275c7b Fix handling of default_tag 817bff10 Add extra debug/profiling in buildah debug mode 38392c00 Switch defaults to quay.io 257cee80 TCIB: Pick not best when building on centos/ubi 8f50effd Fix --log-level=debug for buildah 222c67e1 Change qemu user id to match previous releases 5a7c14fc Re-add ndctl to nova-compute image dbfa2399 Add better exception logging for builds 52112d42 Fix wait condition for retry d2a5d985 Add missing ComputeNeutronMetadataAgent service into tripleo_containers.yaml.j2. 4274d92e Removed ubi-8 based jobs 76856521 Drop --layers from buildah 52047ed4 Add heat-engine healthcheck 6d640012 Refactor buildah logging f8523dbe Add retry to build 23d63eaf Replace deprecated UPPER_CONSTRAINTS_FILE variable 372e3b97 Add Python3 wallaby unit tests 9de014c7 Update master for stable/victoria 0fde614e config-download: allow get_overcloud_config() to run without Swift Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 8 +- .pylintrc | 59 ++++ .../container_image_prepare_defaults.yaml | 3 +- container-images/kolla/base/set_configs.py | 16 +- container-images/kolla/base/uid_gid_manage.sh | 2 +- .../kolla/cinder-volume/cinder-volume-sudoers | 1 + .../kolla/cinder-volume/extend_start.sh | 5 + container-images/tcib/base/base.yaml | 1 + .../cinder-base/cinder-volume/cinder-volume.yaml | 5 +- .../base/os/heat-base/heat-engine/heat-engine.yaml | 1 + container-images/tcib/base/os/horizon/horizon.yaml | 7 +- .../os/nova-base/nova-compute/nova-compute.yaml | 4 + container-images/tcib/base/unbound/unbound.yaml | 5 + container-images/tripleo_containers.yaml | 180 ++++++------ container-images/tripleo_containers.yaml.j2 | 9 + healthcheck/common.sh | 11 +- healthcheck/gnocchi-statsd | 2 +- healthcheck/http-healthcheck.py | 44 +++ lower-constraints.txt | 109 ------- .../notes/qemu_user_id-32d8f17099a6f002.yaml | 10 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + test-requirements.txt | 5 - tox.ini | 11 +- tripleo_common/actions/ansible.py | 9 +- tripleo_common/actions/baremetal.py | 3 +- tripleo_common/exception.py | 1 + tripleo_common/filters/capabilities_filter.py | 7 +- tripleo_common/image/base.py | 8 +- tripleo_common/image/build.py | 8 +- tripleo_common/image/builder/buildah.py | 77 +++-- tripleo_common/image/image_builder.py | 4 +- tripleo_common/image/image_uploader.py | 69 +++-- tripleo_common/image/kolla_builder.py | 16 +- tripleo_common/inventories.py | 5 +- tripleo_common/inventory.py | 312 +++++++++++---------- .../inventory_data/undercloud_dynamic_merged.json | 33 +++ .../inventory_data/undercloud_static_merged.yaml | 18 ++ tripleo_common/update.py | 7 +- tripleo_common/utils/config.py | 92 +++--- tripleo_common/utils/glance.py | 5 +- tripleo_common/utils/keystone.py | 52 ++-- tripleo_common/utils/locks/base.py | 3 + tripleo_common/utils/locks/processlock.py | 2 + tripleo_common/utils/nodes.py | 20 +- tripleo_common/utils/overcloudrc.py | 3 +- tripleo_common/utils/parameters.py | 12 +- tripleo_common/utils/passwords.py | 8 +- tripleo_common/utils/plan.py | 72 +---- tripleo_common/utils/process.py | 9 +- tripleo_common/utils/stack.py | 63 ----- tripleo_common/utils/stack_parameters.py | 12 - tripleo_common/utils/swift.py | 11 +- tripleo_common/utils/tarball.py | 12 +- tripleo_common/utils/template.py | 71 +++-- workbooks/derive_params.yaml | 2 +- zuul.d/layout.yaml | 11 +- 73 files changed, 1059 insertions(+), 1120 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cc5fc015..58a87542 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -openstackdocstheme>=2.2.1 # Apache-2.0 - @@ -8 +5,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -docutils>=0.11 # OSI-Approved Open Source, Public Domain @@ -10 +6,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=2.0.0,!=2.1.0 # BSD @@ -16 +11,0 @@ PyYAML>=3.12 # MIT -reno>=3.1.0 # Apache-2.0

1 0