October 2021 - Release-announce - lists.openstack.org

tripleo-common 15.4.0 (wallaby)
by no-reply＠openstack.org 29 Oct '21

29 Oct '21

We are psyched to announce the release of: tripleo-common 15.4.0: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features * The scripts *tripleo-mount-image* and *tripleo-unmount-image* will mount the contents of an overcloud image file using qemu-nbd, making it available for chroot, or other read/write image operations. The scripts handle partition image (overcloud-full.qcow2) as well as the whole-disk image (overcloud-hardened-uefi-full.qcow2) with its multiple LVM volume mount points. Changes in tripleo-common 15.3.0..15.4.0 ---------------------------------------- ef6f7dad Add scripts tripleo-mount-image, tripleo-unmount-image 3a90026e Remove unused constants for Mistral workflows/actions 774be153 Remove unused DEFAULT_DEPLOY_*_NAME a07e59e1 Remove unused TRIPLEO_NETWORK_CONFIG_RESOURCE 1825c64c Remove unused DEPLOYMENT_STATUS_FILE fc6ec2fa Remove unused constants for TripleO UI 9163d0e7 [c9] replacing genisoimage with xorriso f1cce947 inventory.py: all_get_neutron_data to handle 404 93bd4e1d Revert "Revert "Allow for OCI manifests"" 3e692ed1 Remove tftp-server package from ironic-pxe container febd29b4 Fix awk expression a82862af Remove zaqar 339b10d4 Removal mistral 681c1301 Shrink whole disk image from 40G to 6G 323cfa6d Align swtpm packages for nova-libvirt/compute eff7e4f0 Add missing ipa images to overcloud-hardened-images-uefi 6109c05f Remove /etc/rabbitmq/rabbitmq.conf f124c395 Add security_reset.expect.10.5 from kolla for mariadb>10.5 189ca8cc Re-add tripleoclient and tempest container 7a51e010 Install Neutron BGPVPN in neutron-server eade5652 Add dnsmasq to ironic-pxe container b6a546df Fix upload-artifacts and its installation adb0323a Bump Ceph container daemons to v6.0.4 69e5827e Remove now useless sudo call for port check d4ae46be Replace upgrades template when providers run again 963c55bd Remove redhat-release package from UBI8 image Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 4 +- container-images/kolla/base/uid_gid_manage.sh | 4 +- .../kolla/mariadb/security_reset.expect.10.5 | 67 +++++++ container-images/tcib/base/base.yaml | 5 + .../ironic-conductor/ironic-conductor.yaml | 2 +- .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 2 +- .../os/mistral-base/mistral-api/mistral-api.yaml | 11 -- .../tcib/base/os/mistral-base/mistral-base.yaml | 9 - .../mistral-engine/mistral-engine.yaml | 7 - .../mistral-event-engine/mistral-event-engine.yaml | 7 - .../mistral-executor/mistral-executor.yaml | 13 -- .../neutron-server/neutron-server.yaml | 1 + .../nova-compute-ironic/nova-compute-ironic.yaml | 2 +- .../os/nova-base/nova-compute/nova-compute.yaml | 5 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 + container-images/tcib/base/os/os.yaml | 1 - container-images/tcib/base/os/tempest/tempest.yaml | 8 + .../tcib/base/os/zaqar-wsgi/zaqar-wsgi.yaml | 10 - container-images/tcib/base/rabbitmq/rabbitmq.yaml | 2 +- container-images/tripleo_containers.yaml | 16 +- container-images/tripleo_containers.yaml.j2 | 54 ++---- healthcheck/common.sh | 5 +- healthcheck/mistral-api | 6 - healthcheck/mistral-engine | 14 -- healthcheck/mistral-event-engine | 14 -- healthcheck/mistral-executor | 14 -- healthcheck/zaqar-api | 6 - healthcheck/zaqar-socket | 15 -- .../overcloud-hardened-images-uefi-centos8.yaml | 11 +- .../overcloud-hardened-images-uefi-python3.yaml | 23 ++- .../overcloud-hardened-images-uefi-rhel8.yaml | 11 +- .../tripleo-mount-image-e038a7d9d51c4828.yaml | 9 + requirements.txt | 1 - scripts/tripleo-mount-image | 207 +++++++++++++++++++++ scripts/tripleo-unmount-image | 1 + scripts/upload-artifacts | 3 +- setup.cfg | 3 + tripleo_common/constants.py | 76 -------- tripleo_common/image/image_uploader.py | 54 +++++- tripleo_common/inventory.py | 1 + 43 files changed, 442 insertions(+), 301 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 09a5b48c..90d8fd06 100644 --- a/requirements.txt +++ b/requirements.txt @@ -24 +23,0 @@ netaddr>=0.7.18 # BSD -python-zaqarclient>=1.0.0 # Apache-2.0

1 0

oslo.context 3.1.2 (victoria)
by no-reply＠openstack.org 29 Oct '21

29 Oct '21

We are jazzed to announce the release of: oslo.context 3.1.2: Oslo Context library This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 3.1.2 ^^^^^ Bug Fixes * Fixes context from_dict() to properly handle system_scope. Changes in oslo.context 3.1.1..3.1.2 ------------------------------------ eff2f2f Fix context from_dict() for system_scope 5835e5d Dropping lower constraints testing a5f73f6 Update TOX_CONSTRAINTS_FILE for stable/victoria e49f76d Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 30 ---------------------- oslo_context/context.py | 1 + ...ix-system-scope-from_dict-29615af90723ba4d.yaml | 4 +++ tox.ini | 9 ++----- 7 files changed, 11 insertions(+), 39 deletions(-)

1 0

oslo.messaging 12.11.0 (yoga)
by no-reply＠openstack.org 28 Oct '21

28 Oct '21

We joyfully announce the release of: oslo.messaging 12.11.0: Oslo Messaging API This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 12.11.0 ^^^^^^^ Upgrade Notes * We undeprecated the "heartbeat_in_pthread" option. This option will remain available to allow customers to run the rabbitmq heartbeat in python thread or not. Changes in oslo.messaging 12.10.0..12.11.0 ------------------------------------------ d24edef1 Remove deprecation of heartbeat_in_pthread Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 2 +- .../notes/undeprecate_heartbeat_in_pthread-48e2c1fc008cf208.yaml | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-)

1 0

oslo.policy 3.8.3 (xena)
by no-reply＠openstack.org 28 Oct '21

28 Oct '21

We eagerly announce the release of: oslo.policy 3.8.3: Oslo Policy library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.8.3 ^^^^^ Bug Fixes * Fixes the mapping of 'system_scope' to 'system' when enforce is called with a 'creds' dictionary instead of a RequestContext. Changes in oslo.policy 3.8.2..3.8.3 ----------------------------------- ff2a39f Map system_scope in creds dictionary f3d6914 Update TOX_CONSTRAINTS_FILE for stable/xena 430cc90 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_policy/policy.py | 22 +++++++-------- ...stem-scope-for-creds-dict-e4cbec2f7495f22e.yaml | 5 ++++ tox.ini | 2 +- 5 files changed, 32 insertions(+), 29 deletions(-)

1 0

oslo.policy 3.10.0 (yoga)
by no-reply＠openstack.org 28 Oct '21

28 Oct '21

We are overjoyed to announce the release of: oslo.policy 3.10.0: Oslo Policy library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.10.0 ^^^^^^ Bug Fixes * [bug 1943584 (https://bugs.launchpad.net/oslo.policy/+bug/1943584) If file in policy directory was emptied, rules were not re- calculated. The only workaround was to restart an application. Now rules are re- calculated "on the fly", without app restart. Changes in oslo.policy 3.9.0..3.10.0 ------------------------------------ 302643b Don't reset rules without overwriting 949289e Rules in policy directory files can be deleted. 0aa03fd Refactor scope enforcement in the Enforcer class fb51982 Add scope_types attribute to the BaseCheck class Diffstat (except docs and test files) ------------------------------------- oslo_policy/_checks.py | 2 + oslo_policy/policy.py | 113 +++++++++++++-------- .../notes/bug-1943584-fc74f9205039883c.yaml | 7 ++ 4 files changed, 113 insertions(+), 94 deletions(-)

1 0

os-api-ref 2.3.0
by no-reply＠openstack.org 28 Oct '21

28 Oct '21

We are glad to announce the release of: os-api-ref 2.3.0: Sphinx Extensions to support API reference sites in OpenStack The source is available from: https://opendev.org/openstack/os-api-ref Download the package from: https://tarballs.openstack.org/os-api-ref/ For more details, please see below. Changes in os-api-ref 2.2.0..2.3.0 ---------------------------------- 3d4f056 Fix exception logging 8aa8e71 tox: Don't use distutils entrypoint for coverage fcf44fc Remove six 42053b1 Drop support for Sphinx < 4.x Diffstat (except docs and test files) ------------------------------------- MANIFEST.in | 6 -- os_api_ref/__init__.py | 6 +- os_api_ref/http_codes.py | 3 +- requirements.txt | 3 +- tox.ini | 28 ++++++--- 8 files changed, 35 insertions(+), 172 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 063a0b5..4555b93 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7 @@ PyYAML>=3.12 # MIT -six>=1.10.0 # MIT -sphinx>=2.0.0,!=2.1.0 # BSD +sphinx>=4.0.0 # BSD

1 0

horizon 20.2.0 (yoga)
by no-reply＠openstack.org 27 Oct '21

27 Oct '21

We are happy to announce the release of: horizon 20.2.0: OpenStack Dashboard This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 20.1.0..20.2.0 --------------------------------- 9d1bb3626 Allow both Django 2.2 and 3.2 for smooth transition 7bfb56010 Bump Django version to Current LTS Version 4ef292b0c Skip or make horizon failed gate job to non-voting to merge Django 3.2 7192f4ae9 [cleanup] Remove "Update flavors" from documentation 5e405d719 Imported Translations from Zanata ae9ae79fd Imported Translations from Zanata 66091d7b2 Add Python3 yoga unit tests c8dc5cf70 Update master for stable/xena 1821ae5d2 Clean up extra spaces 3e1a93f1c Sync default policy rules Diffstat (except docs and test files) ------------------------------------- .zuul.d/django-jobs.yaml | 8 +- .zuul.d/project.yaml | 2 +- horizon/locale/ja/LC_MESSAGES/django.po | 13 +- .../horizon/lib/jquery/jquery.bootstrap.wizard.js | 2 +- lower-constraints.txt | 6 +- .../conf/default_policies/glance.yaml | 82 ++++-- .../conf/default_policies/keystone.yaml | 64 +---- .../conf/default_policies/neutron.yaml | 43 +++- .../conf/default_policies/nova.yaml | 6 +- openstack_dashboard/conf/glance_policy.yaml | 93 ++++--- openstack_dashboard/conf/keystone_policy.yaml | 40 +-- openstack_dashboard/conf/neutron_policy.yaml | 49 ++-- openstack_dashboard/conf/nova_policy.yaml | 6 +- .../locale/ja/LC_MESSAGES/django.po | 12 +- .../locale/ja/LC_MESSAGES/djangojs.po | 19 +- releasenotes/source/index.rst | 1 + .../source/locale/fr/LC_MESSAGES/releasenotes.po | 280 +++++++++++++++++++++ releasenotes/source/xena.rst | 6 + requirements.txt | 4 +- 20 files changed, 551 insertions(+), 201 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fe857c6a7..b04b6011d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,2 +15,2 @@ debtcollector>=1.2.0 # Apache-2.0 -Django>=2.2,<3.0 # BSD -django-compressor>=2.0 # MIT +Django>=2.2,<3.3 # BSD +django-compressor>=2.4.1 # MIT

1 0

rally-openstack 2.2.0
by no-reply＠openstack.org 26 Oct '21

26 Oct '21

We are glad to announce the release of: rally-openstack 2.2.0: Rally plugins for OpenStack platform The source is available from: https://opendev.org/openstack/rally-openstack Download the package from: https://pypi.org/project/rally-openstack For more details, please see below. Changes in rally-openstack 2.1.0..2.2.0 --------------------------------------- ed26057e [docker] Update ca-certs 0ec255aa Avoid poll_interval to be the same as HTTP Keep-Alive timeout 20590f30 Update requirements and release 2.2.0 d52e1653 Clean up extra spaces eba9341b Stop using removed option [scenario]/img_dir df83efbf Moving IRC network reference to OFTC 8951fed6 Use Block Storage API v3 ee4964e1 Fix neutron job 36a2bd37 [community goal] Update contributor documentation 0667c24e setup.cfg: Replace dashes with underscores 29c368f9 [ci] Unblock CI 934b2a59 Remove __unicode__() from RallyCliError Diffstat (except docs and test files) ------------------------------------- .zuul.d/rally-task-neutron.yaml | 31 +- .zuul.d/rally-tox-functional.yaml | 1 - .zuul.d/zuul.yaml | 4 +- CHANGELOG.rst | 23 + CONTRIBUTING.rst | 19 +- DOCKER_README.md | 12 +- Dockerfile | 8 +- etc/motd | 2 +- rally-jobs/cinder.yaml | 6 +- rally_openstack/common/cfg/nova.py | 2 +- rally_openstack/common/osclients.py | 18 - .../task/contexts/ceilometer/__init__.py | 0 .../task/contexts/ceilometer/samples.py | 176 -------- .../task/contexts/murano/murano_packages.py | 5 +- .../task/scenarios/ceilometer/__init__.py | 0 .../task/scenarios/ceilometer/alarms.py | 197 --------- .../task/scenarios/ceilometer/events.py | 98 ----- .../task/scenarios/ceilometer/meters.py | 72 ---- .../task/scenarios/ceilometer/queries.py | 113 ----- .../task/scenarios/ceilometer/resources.py | 108 ----- .../task/scenarios/ceilometer/samples.py | 72 ---- rally_openstack/task/scenarios/ceilometer/stats.py | 77 ---- .../task/scenarios/ceilometer/traits.py | 75 ---- rally_openstack/task/scenarios/ceilometer/utils.py | 466 --------------------- rally_openstack/verification/tempest/config.ini | 1 - rally_openstack/verification/tempest/context.py | 18 +- requirements.txt | 1 - samples/tasks/contexts/ceilometer.json | 38 -- samples/tasks/contexts/ceilometer.yaml | 31 -- samples/tasks/contexts/manila-share-networks.json | 2 +- .../scenarios/ceilometer/all-list-meters.json | 43 -- .../scenarios/ceilometer/all-list-meters.yaml | 35 -- .../scenarios/ceilometer/all-list-resources.json | 42 -- .../scenarios/ceilometer/all-list-resources.yaml | 35 -- .../ceilometer/create-alarm-and-get-history.json | 32 -- .../ceilometer/create-alarm-and-get-history.yaml | 23 - .../tasks/scenarios/ceilometer/create-alarm.json | 31 -- .../tasks/scenarios/ceilometer/create-alarm.yaml | 22 - .../ceilometer/create-and-delete-alarm.json | 31 -- .../ceilometer/create-and-delete-alarm.yaml | 22 - .../scenarios/ceilometer/create-and-get-alarm.json | 31 -- .../scenarios/ceilometer/create-and-get-alarm.yaml | 22 - .../ceilometer/create-and-list-alarm.json | 31 -- .../ceilometer/create-and-list-alarm.yaml | 22 - .../ceilometer/create-and-query-alarm-history.json | 33 -- .../ceilometer/create-and-query-alarm-history.yaml | 24 -- .../ceilometer/create-and-query-alarms.json | 34 -- .../ceilometer/create-and-query-alarms.yaml | 25 -- .../ceilometer/create-and-query-samples.json | 32 -- .../ceilometer/create-and-query-samples.yaml | 23 - .../ceilometer/create-and-update-alarm.json | 31 -- .../ceilometer/create-and-update-alarm.yaml | 22 - .../ceilometer/create-meter-and-get-stats.json | 29 -- .../ceilometer/create-meter-and-get-stats.yaml | 20 - .../ceilometer/create-user-and-get-event.json | 22 - .../ceilometer/create-user-and-get-event.yaml | 14 - .../create-user-and-list-event-types.json | 22 - .../create-user-and-list-event-types.yaml | 14 - .../ceilometer/create-user-and-list-events.json | 22 - .../ceilometer/create-user-and-list-events.yaml | 14 - .../create-user-and-list-trait-descriptions.json | 22 - .../create-user-and-list-trait-descriptions.yaml | 14 - .../ceilometer/create-user-and-list-traits.json | 22 - .../ceilometer/create-user-and-list-traits.yaml | 14 - samples/tasks/scenarios/ceilometer/get-stats.json | 47 --- samples/tasks/scenarios/ceilometer/get-stats.yaml | 40 -- .../scenarios/ceilometer/get-tenant-resources.json | 28 -- .../scenarios/ceilometer/get-tenant-resources.yaml | 19 - .../tasks/scenarios/ceilometer/list-alarms.json | 23 - .../tasks/scenarios/ceilometer/list-alarms.yaml | 14 - .../scenarios/ceilometer/list-matched-samples.json | 46 -- .../scenarios/ceilometer/list-matched-samples.yaml | 38 -- .../tasks/scenarios/ceilometer/list-meters.json | 46 -- .../tasks/scenarios/ceilometer/list-meters.yaml | 38 -- .../tasks/scenarios/ceilometer/list-resources.json | 44 -- .../tasks/scenarios/ceilometer/list-resources.yaml | 37 -- .../tasks/scenarios/ceilometer/list-samples.json | 44 -- .../tasks/scenarios/ceilometer/list-samples.yaml | 36 -- setup.cfg | 8 +- .../roles/list-os-resources/library/osresources.py | 3 - .../ci/playbooks/roles/tox-install/tasks/main.yaml | 58 +++ .../unit/task/contexts/ceilometer/test_samples.py | 177 -------- .../unit/task/scenarios/ceilometer/test_alarms.py | 102 ----- .../unit/task/scenarios/ceilometer/test_events.py | 103 ----- .../unit/task/scenarios/ceilometer/test_meters.py | 75 ---- .../unit/task/scenarios/ceilometer/test_queries.py | 102 ----- .../task/scenarios/ceilometer/test_resources.py | 107 ----- .../unit/task/scenarios/ceilometer/test_samples.py | 72 ---- .../unit/task/scenarios/ceilometer/test_traits.py | 69 --- tox.ini | 7 +- upper-constraints.txt | 228 +++++----- 102 files changed, 327 insertions(+), 4549 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b7787bf8..20400efc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +14,0 @@ python-barbicanclient # Apache Software License -python-ceilometerclient # Apache Software License

1 0

oslo.context 3.2.1 (wallaby)
by no-reply＠openstack.org 25 Oct '21

25 Oct '21

We are amped to announce the release of: oslo.context 3.2.1: Oslo Context library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * Fixes context from_dict() to properly handle system_scope. Changes in oslo.context 3.2.0..3.2.1 ------------------------------------ b124eb7 Fix context from_dict() for system_scope be0e41e Update TOX_CONSTRAINTS_FILE for stable/wallaby 6ba0f47 Update .gitreview for stable/wallaby 2af794b Remove lower-constraints remnants 3629eff Move flake8 as a pre-commit local target. Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pre-commit-config.yaml | 10 +++++--- lower-constraints.txt | 30 ---------------------- oslo_context/context.py | 1 + ...ix-system-scope-from_dict-29615af90723ba4d.yaml | 4 +++ tox.ini | 9 ++----- 7 files changed, 18 insertions(+), 41 deletions(-)

1 0

oslo.context 3.3.2 (xena)
by no-reply＠openstack.org 25 Oct '21

25 Oct '21

We are tickled pink to announce the release of: oslo.context 3.3.2: Oslo Context library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 3.3.2 ^^^^^ Bug Fixes * Fixes context from_dict() to properly handle system_scope. Changes in oslo.context 3.3.1..3.3.2 ------------------------------------ 7187c67 Fix context from_dict() for system_scope b45a435 Update TOX_CONSTRAINTS_FILE for stable/xena 4950fe9 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_context/context.py | 1 + releasenotes/notes/Fix-system-scope-from_dict-29615af90723ba4d.yaml | 4 ++++ tox.ini | 4 ++-- 5 files changed, 11 insertions(+), 3 deletions(-)

1 0

kayobe 11.0.0.0rc1 (xena)
by no-reply＠openstack.org 25 Oct '21

25 Oct '21

Hello everyone, A new release candidate for kayobe for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/xena Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *xena-rc-potential* to bring it to the kayobe release crew's attention.

1 0

oslo.concurrency 4.5.0
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are excited to announce the release of: oslo.concurrency 4.5.0: Oslo Concurrency library The source is available from: https://opendev.org/openstack/oslo.concurrency Download the package from: https://pypi.org/project/oslo.concurrency For more details, please see below. Changes in oslo.concurrency 4.4.1..4.5.0 ---------------------------------------- a9ccf0a Add support for non-blocking locks Diffstat (except docs and test files) ------------------------------------- oslo_concurrency/lockutils.py | 54 +++++++++++++--- 2 files changed, 136 insertions(+), 10 deletions(-)

1 0

oslo.log 4.6.1
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We jubilantly announce the release of: oslo.log 4.6.1: oslo.log library The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log For more details, please see below. Changes in oslo.log 4.6.0..4.6.1 -------------------------------- 96a08b8 Replace deprecated arguments of RequestContext Diffstat (except docs and test files) ------------------------------------- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

oslo.policy 3.9.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are happy to announce the release of: oslo.policy 3.9.0: Oslo Policy library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.9.0 ^^^^^ Bug Fixes * Fixes the mapping of 'system_scope' to 'system' when enforce is called with a 'creds' dictionary instead of a RequestContext. Changes in oslo.policy 3.8.2..3.9.0 ----------------------------------- 4f5bec0 Add Python3 yoga unit tests d26995a Update master for stable/xena a0e407e Clarify enforce_new_defaults help text 9774108 Map system_scope in creds dictionary Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_policy/opts.py | 6 ++++- oslo_policy/policy.py | 22 +++++++-------- ...stem-scope-for-creds-dict-e4cbec2f7495f22e.yaml | 5 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 +++++ 7 files changed, 43 insertions(+), 30 deletions(-)

1 0

oslo.utils 4.11.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are stoked to announce the release of: oslo.utils 4.11.0: Oslo Utility library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.11.0 ^^^^^^ Bug Fixes * bug #1942682 (https://bugs.launchpad.net/oslo.utils/+bug/1942682) Fix inconsistent value of *QemuImgInfo.encrypted*. Now the attribute is always *'yes'* or *None* regardless of the format(*human* or *json*) used. Changes in oslo.utils 4.10.0..4.11.0 ------------------------------------ cfb29cc Add Python3 yoga unit tests 5586872 Update master for stable/xena 2922a34 QemuImgInfo: Fix inconsistent value format of encrypted cf45c2c setup.cfg: Replace dashes with underscores e52d7b8 Changed minversion in tox to 3.18.0 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_utils/imageutils.py | 2 +- releasenotes/notes/bug-1942682-ea95d54b2587b32f.yaml | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 8 ++++---- tox.ini | 6 +++--- 8 files changed, 26 insertions(+), 10 deletions(-)

1 0

castellan 3.10.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We contentedly announce the release of: castellan 3.10.0: Generic Key Manager interface for OpenStack This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 3.10.0 ^^^^^^ New Features * Added support for Vault Namespaces, which is a feature of Vault Enterprise (https://www.vaultproject.io/docs/enterprise/namespaces) A new config option "namespace" is added to the configuration of Vault key manager to support this feature. Changes in castellan 3.9.1..3.10.0 ---------------------------------- 4b6f73a Support setting Vault kv version config ecf625b Add support for Vault Namespaces aa3a760 Add Python3 yoga unit tests d9e2af2 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- castellan/key_manager/vault_key_manager.py | 21 ++++++- castellan/options.py | 12 +++- .../unit/key_manager/test_vault_key_manager.py | 66 ++++++++++++++++++++++ .../notes/vault-namespaces-7d334e7407396df9.yaml | 7 +++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++ test-requirements.txt | 1 + 8 files changed, 111 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index eedc2f8..9d949b0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ python-barbicanclient>=4.5.2 # Apache-2.0 +requests-mock>=1.2.0 # Apache-2.0

1 0

oslo.messaging 12.10.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are tickled pink to announce the release of: oslo.messaging 12.10.0: Oslo Messaging API This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 12.9.1..12.10.0 ----------------------------------------- ca939fc0 rabbit: move stdlib_threading bits into _utils 23040424 Add Python3 yoga unit tests 2a052499 Update master for stable/xena 129c2233 use message id cache for RPC listener bdcf915e limit maximum timeout in the poll loop Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_messaging/_drivers/amqpdriver.py | 14 ++++- oslo_messaging/_drivers/impl_rabbit.py | 15 +---- oslo_messaging/_utils.py | 14 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++ 7 files changed, 113 insertions(+), 18 deletions(-)

1 0

oslo.metrics 0.4.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are stoked to announce the release of: oslo.metrics 0.4.0: Oslo Metrics API This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. 0.4.0 ^^^^^ New Features * Port number to expose metrics in Prometheus format is now configurable. Changes in oslo.metrics 0.3.0..0.4.0 ------------------------------------ b23fb97 Limit metrics_socket_file permissions e9086be Update master for stable/xena cb39a35 Changed minversion in tox to 3.18.0 b5328ae setup.cfg: Replace dashes with underscores 6ad0f5d Make Expose Port Configurable Diffstat (except docs and test files) ------------------------------------- oslo_metrics/__main__.py | 9 +++++---- releasenotes/notes/port-config-ac5d9ee247a8ff9b.yaml | 4 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 8 ++++---- tox.ini | 8 ++++---- 6 files changed, 24 insertions(+), 12 deletions(-)

1 0

oslo.service 2.7.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are jazzed to announce the release of: oslo.service 2.7.0: oslo.service library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 2.7.0 ^^^^^ Bug Fixes * Fix the backdoor helper method fo() to also work when there are objects present in the current python instance that do not have a __class__ attribute. Changes in oslo.service 2.6.0..2.7.0 ------------------------------------ eb19154 Fix fo() backdoor command for non-class objects d3ee8ef Fix BackOffLoopingCall error so it is not misleading fcdeb4a Add Python3 yoga unit tests a88a695 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_service/eventlet_backdoor.py | 3 ++- oslo_service/loopingcall.py | 2 +- .../notes/fix-find-object-in-backdoor-487bf78c4c502594.yaml | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ 6 files changed, 17 insertions(+), 3 deletions(-)

1 0

oslo.context 3.4.0 (yoga)
by no-reply＠openstack.org 21 Oct '21

21 Oct '21

We are excited to announce the release of: oslo.context 3.4.0: Oslo Context library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 3.4.0 ^^^^^ Bug Fixes * Fixes context from_dict() to properly handle system_scope. Changes in oslo.context 3.3.1..3.4.0 ------------------------------------ 1022a51 Add Python3 yoga unit tests d2634fd Update master for stable/xena 8290621 Fix context from_dict() for system_scope Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_context/context.py | 1 + releasenotes/notes/Fix-system-scope-from_dict-29615af90723ba4d.yaml | 4 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ 6 files changed, 16 insertions(+), 2 deletions(-)

1 0

python-muranoclient 2.4.0 (yoga)
by no-reply＠openstack.org 20 Oct '21

20 Oct '21

We are overjoyed to announce the release of: python-muranoclient 2.4.0: python-muranoclient This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/python-muranoclient Download the package from: https://pypi.org/project/python-muranoclient Please report issues through: https://bugs.launchpad.net/python-muranoclient/+bugs For more details, please see below. Changes in python-muranoclient 2.3.0..2.4.0 ------------------------------------------- 3b44adc requirements: Uncap prettytable, remove l-c 01e0fbf Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - lower-constraints.txt | 86 ------------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 +++ requirements.txt | 2 +- tox.ini | 6 --- 6 files changed, 8 insertions(+), 94 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 78df37c..a0422fa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.2 # BSD +PrettyTable>=0.7.2 # BSD

1 0

tripleo-common 16.2.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We joyfully announce the release of: tripleo-common 16.2.0: A common library for TripleO workflows. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * The scripts *tripleo-mount-image* and *tripleo-unmount-image* will mount the contents of an overcloud image file using qemu-nbd, making it available for chroot, or other read/write image operations. The scripts handle partition image (overcloud-full.qcow2) as well as the whole-disk image (overcloud-hardened-uefi-full.qcow2) with its multiple LVM volume mount points. Other Notes *********** * The compatibility wrapper for the deprecated field: "mac" in nodes JSON *(instackenv.json)* has been removed. The "mac" field is no longer supported as it was replaced by "ports" in the Stein release. Changes in tripleo-common 16.1.0..16.2.0 ---------------------------------------- 3f2853b9 Revert "Revert "Allow for OCI manifests"" b2f76f85 Revert "Allow for OCI manifests" 2ebe8f0b Remove unused constants for TripleO UI 87cf9153 Remove tftp-server package from ironic-pxe container 8cbdb71d Align swtpm packages for nova-libvirt/compute a4689f76 Drop ansible-playbook-3 workarounds e252328b Allow for OCI manifests db7280e6 Detect image format for qemu-nbd --format 0845bd1f Remove mistral sudoers 0c8a5294 Remove zaqar e9dca738 Removal mistral 049f9a96 Remove /etc/rabbitmq/rabbitmq.conf 3d1d8c5b Revert "Switch to mariadb:10.5 module" 60a2c347 Remove unused input parameters for upload-artifacts 03abc41c Switch to mariadb:10.5 module 5f55ee2b Add scripts tripleo-mount-image, tripleo-unmount-image e08affe8 Add security_reset.expect.10.5 from kolla for mariadb>10.5 4177b18a Add configs for CentOS 9 image 64cf73a3 Fix awk expression 1debbea5 Install Neutron BGPVPN in neutron-server 1eef7a5d Setting language for the python3.6 tox environment 7428219d Fix upload-artifacts and its installation 36a7a4d0 Remove now useless sudo call for port check 1a6d0d80 Replace upgrades template when providers run again 906265c4 Remove rehdat-release package from UBI8 image ce71a5a1 inventory.py: all_get_neutron_data to handle 404 ede41284 Re-add tripleoclient and tempest container 6d6a2fd6 Remove paramiko for FIPS 13614295 Bump Ceph container daemons to v6.0.4 d3a5fdb6 Add dnsmasq to ironic-pxe container 58cd30d0 Drop python3-networking-vmware-nsx from base neutron image 8d94cf43 Add neutron-rpc-server to the base neutron image 2984f464 Add apache to the designate api container 5892ce10 Do not generate password for unsupported services 5c18f0d7 Add python3-mod-wsgi to neutron-server image d8052fe8 Shrink whole disk image from 40G to 6G fcdbcf1f Fix field validation typo s/macs/mac 4ea75f40 Add missing IPv6 support for healthcheck_port db1d1644 Rename AdminToken to KeystonePassword a3be1574 Remove ironic-inspector dnsmasq healthcheck 55b49951 directly use files instread of tcib_gather_files 1f7b1a96 Check for no neutron network in inventory 8e184443 Drop deprecated "macs" field in nodes_json 21189982 Rename hieradata_files result var ead1f468 Build out runner dir structure bc50c254 tcib: clean up cinder packages 1a96493a Add missing ipa images to overcloud-hardened-images-uefi 85767853 Remove undercloud auth details from inventory fc4e256b Make sure Heat Ephemeral has images prepared 21710a41 Refactor enabled_services for roles eaeb230f Add TypeError exception when parsing addresses 1fa09903 Merge ansible_group_vars in THT 1371815d Cleanup OS_CLOUD env var for ephemeral heat 99974ab8 Update image build dependencies Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 4 +- container-images/kolla/base/uid_gid_manage.sh | 4 +- .../kolla/mariadb/security_reset.expect.10.5 | 67 +++++++ container-images/tcib/base/base.yaml | 18 +- container-images/tcib/base/mariadb/mariadb.yaml | 5 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 3 +- .../cinder-base/cinder-backup/cinder-backup.yaml | 3 - .../tcib/base/os/cinder-base/cinder-base.yaml | 4 - .../cinder-base/cinder-volume/cinder-volume.yaml | 12 +- .../designate-api/designate-api.yaml | 3 + .../tcib/base/os/glance-api/glance-api.yaml | 3 +- container-images/tcib/base/os/horizon/horizon.yaml | 3 +- .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 2 +- container-images/tcib/base/os/iscsid/iscsid.yaml | 3 +- .../tcib/base/os/keystone/keystone.yaml | 3 +- .../os/mistral-base/mistral-api/mistral-api.yaml | 11 -- .../tcib/base/os/mistral-base/mistral-base.yaml | 9 - .../mistral-engine/mistral-engine.yaml | 7 - .../mistral-event-engine/mistral-event-engine.yaml | 7 - .../mistral-executor/mistral-executor.yaml | 13 -- .../tcib/base/os/neutron-base/neutron-base.yaml | 5 +- .../neutron-server/neutron-server.yaml | 2 + .../os/nova-base/nova-compute/nova-compute.yaml | 3 + .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 + container-images/tcib/base/os/os.yaml | 1 - .../tcib/base/os/swift-base/swift-base.yaml | 5 +- container-images/tcib/base/os/tempest/tempest.yaml | 8 + .../tcib/base/os/zaqar-wsgi/zaqar-wsgi.yaml | 10 - .../ovn-nb-db-server/ovn-nb-db-server.yaml | 3 +- .../ovn-sb-db-server/ovn-sb-db-server.yaml | 3 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 5 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 5 +- container-images/tripleo_containers.yaml | 16 +- container-images/tripleo_containers.yaml.j2 | 60 ++---- healthcheck/common.sh | 7 +- healthcheck/ironic-inspector | 13 +- healthcheck/mistral-api | 6 - healthcheck/mistral-engine | 14 -- healthcheck/mistral-event-engine | 14 -- healthcheck/mistral-executor | 14 -- healthcheck/zaqar-api | 6 - healthcheck/zaqar-socket | 15 -- .../overcloud-hardened-images-uefi-centos8.yaml | 11 +- .../overcloud-hardened-images-uefi-centos9.yaml | 17 ++ .../overcloud-hardened-images-uefi-python3.yaml | 23 ++- .../overcloud-hardened-images-uefi-rhel8.yaml | 11 +- image-yaml/overcloud-images-centos9.yaml | 21 +++ image-yaml/overcloud-images-ceph-centos9.yaml | 9 + ...mac-field-no-longer-valid-6ed035c442c4fc68.yaml | 7 + .../tripleo-mount-image-e038a7d9d51c4828.yaml | 9 + requirements.txt | 3 +- scripts/tripleo-mount-image | 207 +++++++++++++++++++++ scripts/tripleo-unmount-image | 1 + scripts/upload-artifacts | 11 +- scripts/upload-puppet-modules | 9 +- setup.cfg | 4 +- sudoers | 4 - tox.ini | 2 +- tripleo_common/constants.py | 13 +- tripleo_common/image/image_uploader.py | 54 +++++- tripleo_common/image/kolla_builder.py | 46 +++-- tripleo_common/inventory.py | 71 +++---- tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/ansible.py | 4 +- tripleo_common/utils/common.py | 2 +- tripleo_common/utils/config.py | 20 +- tripleo_common/utils/heat.py | 3 +- tripleo_common/utils/nodes.py | 18 +- tripleo_common/utils/overcloudrc.py | 7 +- tripleo_common/utils/passwords.py | 24 ++- tripleo_common/utils/stack_parameters.py | 2 - zuul.d/layout.yaml | 2 + 79 files changed, 740 insertions(+), 481 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 09a5b48c..40902f04 100644 --- a/requirements.txt +++ b/requirements.txt @@ -22 +22 @@ netifaces>=0.10.4 # MIT -paramiko>=2.7.1 # LGPLv2.1+ +cryptography>=3.4.7 # BSD/Apache-2.0 @@ -24 +23,0 @@ netaddr>=0.7.18 # BSD -python-zaqarclient>=1.0.0 # Apache-2.0

1 0

ansible-role-container-registry 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are ecstatic to announce the release of: ansible-role-container-registry 1.4.0: ansible-container-registry - Ansible role to deploy a container registry The source is available from: https://opendev.org/openstack/ansible-role-container-registry Download the package from: https://tarballs.openstack.org/ansible-role-container-registry/ For more details, please see below. Changes in ansible-role-container-registry 1.3.0..1.4.0 ------------------------------------------------------- e745554 Use ansible-core 2.11 for tests a784f1a Correct the tox option for skipping sdist generation 91f652a Fixing ci 5e435a4 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 ++ ansible-requirements.txt | 2 +- molecule-requirements.txt | 9 +++++++++ molecule/default/playbook.yml | 3 ++- molecule/login/playbook.yml | 9 ++++++--- molecule/login/prepare.yml | 3 ++- requirements.txt | 2 +- setup.cfg | 8 ++++---- tasks/cleanup-engine.yml | 3 ++- tasks/registry-login.yml | 3 ++- tox.ini | 2 +- zuul.d/playbooks/pre.yml | 26 +++++++++++++------------- 12 files changed, 45 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index b18ac42..f5398ac 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -5 +5 @@ -ansible>=2.8,<2.10 +ansible-core<2.12 diff --git a/molecule-requirements.txt b/molecule-requirements.txt new file mode 100644 index 0000000..3414a74 --- /dev/null +++ b/molecule-requirements.txt @@ -0,0 +1,9 @@ +ansible +ansi2html +docker +pytest +pytest-cov +pytest-html +pytest-xdist +mock +molecule>=3.0,<3.1 diff --git a/requirements.txt b/requirements.txt index 68972eb..d155c5c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr>=1.6 -ansible>=2.8,<2.10 +ansible-core<2.12

1 0

tripleo-operator-ansible 0.7.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are satisfied to announce the release of: tripleo-operator-ansible 0.7.0: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.6.0..0.7.0 ------------------------------------------------ b0afe02 Drop minion job f4f1a3b Use ansible-core 2.11 for operators tests 3e07830 Added support for tcib_extras in container build 052f8f2 Limit the usage of upper-constraints d02a391 Add '--vip-file' to overcloud deploy 570c886 Bump molecule[test] to 3.5.x 37612c5 Add tripleo_overcloud_deploy_skip_nodes_and_networks 95c0c40 Add auto releasing job for tripleo-operators collection Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- ansible-requirements.txt | 2 +- ci/playbooks/publish_collection.yml | 76 ++++++++++++++++++++++ molecule-requirements.txt | 4 +- roles/test_molecule_prep/meta/main.yml | 2 + .../tripleo_config_generate_ansible/meta/main.yml | 2 + roles/tripleo_container_image_build/README.md | 1 + .../defaults/main.yml | 1 + roles/tripleo_container_image_build/meta/main.yml | 2 + .../molecule/default/converge.yml | 14 ++++ roles/tripleo_container_image_build/tasks/main.yml | 1 + roles/tripleo_container_image_delete/meta/main.yml | 2 + roles/tripleo_container_image_list/meta/main.yml | 2 + .../tripleo_container_image_prepare/meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_container_image_push/meta/main.yml | 2 + roles/tripleo_container_image_show/meta/main.yml | 2 + roles/tripleo_deploy/meta/main.yml | 4 +- .../meta/main.yml | 2 + roles/tripleo_overcloud_backup/meta/main.yml | 2 + roles/tripleo_overcloud_cell_export/meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_overcloud_credentials/meta/main.yml | 2 + roles/tripleo_overcloud_delete/meta/main.yml | 2 + roles/tripleo_overcloud_deploy/README.md | 2 + roles/tripleo_overcloud_deploy/defaults/main.yml | 2 + roles/tripleo_overcloud_deploy/meta/main.yml | 2 + .../molecule/default/converge.yml | 28 ++++++++ roles/tripleo_overcloud_deploy/tasks/main.yml | 3 + roles/tripleo_overcloud_export/meta/main.yml | 2 + .../meta/main.yml | 4 +- .../meta/main.yml | 4 +- roles/tripleo_overcloud_failures/meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_overcloud_image_build/meta/main.yml | 2 + roles/tripleo_overcloud_image_upload/meta/main.yml | 4 +- .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_overcloud_node_clean/meta/main.yml | 2 + .../tripleo_overcloud_node_configure/meta/main.yml | 2 + roles/tripleo_overcloud_node_delete/meta/main.yml | 2 + .../tripleo_overcloud_node_discover/meta/main.yml | 2 + .../molecule/default/converge.yml | 6 ++ .../meta/main.yml | 2 + roles/tripleo_overcloud_node_import/meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_overcloud_node_provide/meta/main.yml | 2 + .../tripleo_overcloud_node_provision/meta/main.yml | 2 + .../meta/main.yml | 2 + .../tripleo_overcloud_profiles_list/meta/main.yml | 2 + .../tripleo_overcloud_profiles_match/meta/main.yml | 2 + roles/tripleo_overcloud_raid_create/meta/main.yml | 2 + .../tripleo_overcloud_roles_generate/meta/main.yml | 2 + roles/tripleo_overcloud_roles_list/meta/main.yml | 2 + roles/tripleo_overcloud_roles_show/meta/main.yml | 2 + roles/tripleo_overcloud_status/meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + .../tripleo_overcloud_update_prepare/meta/main.yml | 2 + roles/tripleo_overcloud_update_run/meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 2 + roles/tripleo_overcloud_upgrade_run/meta/main.yml | 2 + roles/tripleo_repos/meta/main.yml | 2 + roles/tripleo_undercloud_backup/meta/main.yml | 2 + roles/tripleo_undercloud_install/meta/main.yml | 2 + .../meta/main.yml | 2 + .../meta/main.yml | 4 +- roles/tripleo_undercloud_upgrade/meta/main.yml | 2 + roles/tripleo_validator_group_info/meta/main.yml | 2 + roles/tripleo_validator_list/meta/main.yml | 2 + roles/tripleo_validator_run/meta/main.yml | 2 + roles/tripleo_validator_show/meta/main.yml | 2 + .../tripleo_validator_show_parameter/meta/main.yml | 2 + test-requirements.txt | 2 +- tox.ini | 7 +- zuul.d/layout.yaml | 43 +++++++----- 88 files changed, 320 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index 0f84c0d..9ec95af 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -1 +1 @@ -ansible>=2.8,<2.10 +ansible-core<2.12 diff --git a/molecule-requirements.txt b/molecule-requirements.txt index cf40cd0..07c2ceb 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -1 +1 @@ -ansible>=2.9,<2.10 +ansible-core<2.12 @@ -3 +3 @@ ansible>=2.9,<2.10 -molecule[test]>=3.2.0a1,<3.3 # MIT +molecule[test]>=3.5.0,<3.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 9c9d84c..8e5a8dd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ pre-commit # MIT -ansible>=2.8,<2.10 +ansible-core<2.12

1 0

tripleo-image-elements 14.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are delighted to announce the release of: tripleo-image-elements 14.1.0: Disk image builder elements for deploying OpenStack. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 14.0.0..14.1.0 ------------------------------------------------ 998936c7 Add small /srv volume for optional swift data 7b7458b3 Migrate from testr to stestr 0203c0aa Shrink whole disk image from 40G to 6G e996653b Depend on growvols element 1635ba8a Unmask and enable tmp.mount for overcloud-partition fe5cc75a Don't depend on block-device elements 188f5685 setup.cfg: Replace dashes with underscores e23ba31d Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitignore | 19 +++++++++++---- .stestr.conf | 3 +++ .testr.conf | 5 ---- .../block-device-default.yaml | 28 +++++++++++++++------- elements/overcloud-partition-uefi/element-deps | 2 +- elements/overcloud-partition-uefi/element-provides | 1 + .../environment.d/15-block-device.bash | 10 ++++++++ .../post-install.d/98-enable-tmp-mount | 8 +++++++ .../overcloud-partition/block-device-default.yaml | 4 ++-- elements/overcloud-partition/element-deps | 2 +- elements/overcloud-partition/element-provides | 1 + .../environment.d/15-block-device.bash | 10 ++++++++ .../post-install.d/99-enable-tmp-mount | 8 +++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 +++++ setup.cfg | 8 +++---- test-requirements.txt | 2 +- tox.ini | 3 +-- 18 files changed, 92 insertions(+), 29 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d6511798..380ffd34 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ oslotest -testrepository>=0.0.18 +stestr>=2.0.0 # Apache-2.0

1 0

validations-libs 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are happy to announce the release of: validations-libs 1.4.0: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.3.0..1.4.0 ---------------------------------------- b37015e Expose skip list mechanism via the CLI 11488cd Add validation config file mechanism c8480cb Setting language for the python3.6 tox environment f1cd8ee Validations show group filtering Diffstat (except docs and test files) ------------------------------------- README.rst | 27 +++ setup.cfg | 4 + skiplist-example.yaml | 11 + tox.ini | 2 +- validation.cfg | 63 ++++++ validations_libs/ansible.py | 61 ++++-- validations_libs/cli/app.py | 1 - validations_libs/cli/base.py | 77 +++++++ validations_libs/cli/common.py | 14 +- validations_libs/cli/history.py | 30 ++- validations_libs/cli/lister.py | 9 +- validations_libs/cli/run.py | 33 ++- validations_libs/cli/show.py | 24 ++- validations_libs/constants.py | 4 + validations_libs/utils.py | 95 +++++++++ validations_libs/validation_actions.py | 52 +++-- 29 files changed, 1099 insertions(+), 118 deletions(-)

1 0

tripleo-validations 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are amped to announce the release of: tripleo-validations 15.1.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ For more details, please see below. 15.1.0 ^^^^^^ Changes in tripleo-validations 15.0.0..15.1.0 --------------------------------------------- 63f881b oslo-config-validator: Removing merged patches 9c62de3 oslo-config-validator: invalidating configs only when necessary 4828fca oslo-config-validator: container plugin is replaced with collections 93d34a2 Use collections in validations for Ansible 2.11 96bdba4 Adds .dockerignore file to limit size of podman image context 06151c2 Tests for the 'icmp_ping' module. 129ce2d Dependency reorganization 2a7c43d Fail validation if pacemaker service is not active d00a7f9 Setting language for the python3.6 tox environment 5a8cfac Fix Inventory Generation without Overcloud deployed c61d894 oslo_config_validator: Setting container network to none 84c91cf Ansible lint custom rule expansion 23992a3 Moving setting validation from nova_event_callback 8492bf8 remove using containers-prepare-parameter.yaml 07fa866 EndpointNotFound is now handled gracefully b6f3800 yaml.load: Set Loader to avoid deprecation warning 39a846c Add new metadata keys to the validation playbooks 8f43cce [validation_init] Add ability to create new validation w/o molecule test 9196b98 Replace deprecated import of ABCs from collections 7136337 NVF OvS DPDK instance emulatorpin validation fix 46d9b75 NFV OvS DPDK zero packet loss validations bb51a0c molecule-requirements constraints 7dae6b1 fix var name in logging statement ae59abe Sort jobs in molecule.yaml file when adding new role 41dcda8 Add zuul.d/molecule.yaml file back in the yamllint ignore list e610926 Corrected the task 'Get file_descriptors total_limit' to get the 'fs.file-max' value. 5c951d9 Removing import conditional for 'collections.abc' 9ae4bd6 Coverage change job 16704fe Remove content-provider to decrease CI time 523c24f Remove from master the ceph-ansible references 9dd662a Migrate back haproxy validation to tripleo-validations 56adfba Correct the tox option for skipping sdist generation d691f30 [validation_init] add new metadata keys in the playbook template 4aaca32 Introducing the oslo_config_validator role 2fed329 Filling in license info for dependencies. 72b7105 [compute_tsx] Remove README.md file c1277a5 Enabling indentation rule for yamllint. 9581a94 [overcloud_service_status] Remove README.md file e871121 [check_for_dangling_images] Remove README.md file 0a37793 [validation_init] Remove the creation of a README.md file for a new validation 933d984 Allow comments in variable files to be rendered in docs 7fe77b4 Moved 'six' import to the top. ead951f Removes deprecated 'overcloudrc' module 0edcc45 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 +- .ansible-lint_rules/ValidationHasMetadataRule.py | 187 +++++++---- .dockerignore | 55 +++ .pre-commit-config.yaml | 2 +- .yamllint | 7 +- ansible-collections-requirements.yml | 5 + ci/playbooks/coverchange.yaml | 106 ++++++ ci/playbooks/pre.yml | 3 + .../modules-check_cpus_aligned_with_dpdk_nics.rst | 15 + .../modules-check_other_processes_pmd_usage.rst | 15 + .../modules-convert_range_to_numbers_list.rst | 15 + .../modules/modules-get_dpdk_nics_numa_info.rst | 15 + .../modules/modules-pmd_threads_siblings_check.rst | 15 + .../modules/modules-tripleo_haproxy_conf.rst | 14 + .../roles/role-check_for_dangling_images.rst | 39 ++- .../role-check_nfv_ovsdpdk_zero_packet_loss.rst | 39 +++ library/ceph_pools_pg_protection.py | 4 +- library/check_cpus_aligned_with_dpdk_nics.py | 140 ++++++++ library/check_other_processes_pmd_usage.py | 162 +++++++++ library/convert_range_to_numbers_list.py | 97 ++++++ library/get_dpdk_nics_numa_info.py | 143 ++++++++ library/network_environment.py | 45 +-- library/overcloudrc.py | 80 ----- library/pmd_threads_siblings_check.py | 187 +++++++++++ library/switch_vlans.py | 7 +- library/tripleo_haproxy_conf.py | 108 ++++++ molecule-requirements.txt | 20 +- playbooks/ceph-ansible-installed.yaml | 16 - playbooks/ceph-dependencies-installed.yaml | 5 + playbooks/ceph-health.yaml | 5 + playbooks/ceph-pg.yaml | 5 + playbooks/check-for-dangling-images.yaml | 4 + playbooks/check-kernel-version.yaml | 6 + playbooks/check-network-gateway.yaml | 5 + playbooks/check-rhsm-version.yaml | 8 + playbooks/check-uc-hostname.yaml | 5 + playbooks/check-undercloud-conf.yaml | 6 +- playbooks/collect-flavors-and-verify-profiles.yaml | 7 + playbooks/compute-tsx.yaml | 10 + playbooks/container-status.yaml | 7 + playbooks/controller-token.yaml | 7 + playbooks/controller-ulimits.yaml | 8 + playbooks/ctlplane-ip-range.yaml | 6 + playbooks/default-node-count.yaml | 7 + playbooks/dhcp-introspection.yaml | 8 + playbooks/dhcp-provisioning.yaml | 7 + playbooks/frr-status.yaml | 8 + playbooks/healthcheck-service-status.yaml | 10 + playbooks/image-serve.yaml | 7 + playbooks/ironic-boot-configuration.yaml | 6 + playbooks/mysql-open-files-limit.yaml | 8 + playbooks/network-environment.yaml | 7 + playbooks/neutron-sanity-check.yaml | 11 +- playbooks/nfv-ovsdpdk-zero-packet-loss-check.yaml | 19 ++ playbooks/node-disks.yaml | 8 + playbooks/node-health.yaml | 8 + playbooks/nova-event-callback.yaml | 27 +- playbooks/nova-status.yaml | 4 + playbooks/nova-svirt.yaml | 6 + playbooks/openshift-hw-requirements.yaml | 7 + playbooks/openshift-nw-requirements.yaml | 4 + playbooks/openstack-endpoints.yaml | 6 + playbooks/oslo-config-validator.yaml | 72 ++++ playbooks/overcloud-service-status.yaml | 8 + playbooks/ovs-dpdk-pmd-cpus-check.yaml | 6 + playbooks/pacemaker-status.yaml | 10 + playbooks/package-version.yaml | 7 + playbooks/rabbitmq-limits.yaml | 7 + playbooks/repos.yaml | 8 + playbooks/stack-health.yaml | 6 + playbooks/stonith-exists.yaml | 8 + playbooks/switch-vlans.yaml | 9 + playbooks/system-encoding.yaml | 6 + playbooks/tls-everywhere-post-deployment.yaml | 9 + playbooks/tls-everywhere-pre-deployment.yaml | 9 + playbooks/tls-everywhere-prep.yaml | 9 + playbooks/tripleo-haproxy.yaml | 26 ++ playbooks/tripleo-latest-packages-version.yaml | 7 + playbooks/undercloud-debug.yaml | 7 + playbooks/undercloud-disk-space-pre-upgrade.yaml | 7 + playbooks/undercloud-disk-space.yaml | 7 + playbooks/undercloud-heat-purge-deleted.yaml | 7 + playbooks/undercloud-ipa-server-check.yaml | 9 + playbooks/undercloud-neutron-sanity-check.yaml | 9 + playbooks/undercloud-process-count.yaml | 5 + playbooks/undercloud-service-status.yaml | 7 + playbooks/undercloud-tokenflush.yaml | 7 + .../notes/remove-overcloudrc-a6c28a4a34dad951.yaml | 6 + requirements.txt | 2 +- roles/ceph/defaults/main.yml | 2 - .../molecule/ceph-ansible-installed/converge.yml | 70 ---- roles/ceph/tasks/ceph-ansible-installed.yaml | 37 -- roles/check_for_dangling_images/README.md | 37 -- roles/check_for_dangling_images/defaults/main.yml | 2 + .../tasks/check_nfv_instances.yml | 37 ++ .../tasks/check_nfv_pci_address.yml | 26 ++ .../tasks/main.yml | 217 ++++++++++++ .../tasks/validate_dpdk_port_bandwidth.yml | 21 ++ .../tasks/validate_instance.yml | 91 +++++ roles/check_uc_hostname/README.md | 39 --- roles/check_uc_hostname/defaults/main.yml | 8 +- .../molecule/default/converge.yml | 208 +++++++++++- .../molecule/default/molecule.yml | 19 ++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ---- roles/check_uc_hostname/tasks/main.yml | 82 +++-- roles/compute_tsx/README.md | 64 ---- roles/compute_tsx/defaults/main.yml | 8 + roles/compute_tsx/vars/main.yml | 2 + roles/nova_event_callback/defaults/main.yml | 8 +- roles/nova_event_callback/tasks/main.yml | 65 +--- roles/nova_event_callback/vars/main.yml | 14 +- roles/nova_svirt/tasks/validate.yml | 2 +- roles/oslo_config_validator/defaults/main.yml | 372 +++++++++++++++++++++ roles/oslo_config_validator/meta/main.yml | 42 +++ .../molecule/default/molecule.yml | 45 +++ .../molecule/mocked_failure/molecule.yml | 24 ++ .../resources/library/generator.yml | 74 ++++ .../oslo_config_validator/resources/library/podman | 304 +++++++++++++++++ .../resources/playbooks/converge.yml | 37 ++ .../resources/playbooks/prepare.yml | 43 +++ .../tasks/build_validation_config.yml | 166 +++++++++ .../oslo_config_validator/tasks/container_run.yml | 56 ++++ .../tasks/invalidate_config.yml | 76 +++++ roles/oslo_config_validator/tasks/main.yml | 73 ++++ .../tasks/opt_data_format.yml | 74 ++++ .../tasks/report_generation.yml | 90 +++++ .../tasks/validate_config.yml | 68 ++++ .../tasks/validation_command.yml | 102 ++++++ roles/oslo_config_validator/vars/main.yml | 44 +++ roles/overcloud_service_status/README.md | 47 --- roles/overcloud_service_status/defaults/main.yml | 11 + roles/pacemaker_status/tasks/main.yml | 5 + roles/pacemaker_status/vars/main.yml | 2 + roles/rabbitmq_limits/tasks/main.yml | 2 +- roles/tripleo_haproxy/defaults/main.yml | 21 ++ .../tripleo_haproxy/molecule/default/converge.yml | 71 ++++ .../molecule/default}/molecule.yml | 0 roles/tripleo_haproxy/tasks/main.yml | 56 ++++ roles/validation_init/README.md | 47 --- roles/validation_init/defaults/main.yml | 25 ++ .../files/_skeleton_role_/defaults/main.yml.j2 | 7 + .../files/_skeleton_role_/handlers/main.yml | 15 - .../files/_skeleton_role_/vars/main.yml.j2 | 5 + .../validation_init/molecule/default/molecule.yml | 18 + .../molecule/no_molecule_test/converge.yml} | 25 +- .../molecule/no_molecule_test/molecule.yml | 21 ++ .../molecule/no_molecule_test/verify.yml | 72 ++++ .../default => resources/playbooks}/prepare.yml | 0 roles/validation_init/tasks/main.yml | 77 ++++- roles/validation_init/templates/README.md.j2 | 39 --- scripts/tripleo-ansible-inventory | 2 +- setup.cfg | 8 +- test-requirements.txt | 5 +- tox.ini | 7 +- .../test_check_cpus_aligned_with_dpdk_nics.py | 67 ++++ .../test_check_other_processes_pmd_usage.py | 116 +++++++ .../library/test_convert_range_to_numbers_list.py | 45 +++ .../library/test_pmd_threads_siblings_check.py | 120 +++++++ tripleo_validations/utils.py | 13 +- zuul.d/base.yaml | 15 + zuul.d/layout.yaml | 14 +- zuul.d/molecule.yaml | 314 +++++++++-------- 177 files changed, 5992 insertions(+), 1111 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index c5a69f4..fad7d7a 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -2,3 +2,3 @@ -ansi2html -ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -jinja2>=2.8.0 +ansi2html>=1.6.0 # LGPLv3+ +ansible-core<2.12 # GPLv3+ +jinja2>=2.8.0 # BSD-3-Clause @@ -6,7 +6,7 @@ molecule>=3.3.1,<4 # MIT -molecule-podman # MIT -pytest -pytest-cov -pytest-html -pytest-xdist -selinux # MIT -lxml # BSD +molecule-podman>=0.3.0 # MIT +pytest>=6.2.4 # MIT +pytest-cov>=2.12.1 # MIT +pytest-html>=3.1.1 # MPL 2.0 +pytest-xdist>=2.3.0 # MIT +selinux>=0.2.1 # MIT +lxml>=4.6.3 # BSD diff --git a/requirements.txt b/requirements.txt index 4acdf4e..a015e68 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17 +17 @@ tripleo-common>=7.1.0 # Apache-2.0 -setuptools>=50.3.0 +setuptools>=50.3.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index fbb1c7e..77fda49 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +5 @@ -openstackdocstheme>=2.2.1 # Apache-2.0 - +ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ @@ -16 +15 @@ netaddr>=0.7.18 # BSD -pre-commit # MIT +pre-commit>=2.3.0 # MIT

1 0

puppet-tripleo 16.0.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are jazzed to announce the release of: puppet-tripleo 16.0.0: Puppet module for OpenStack TripleO The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Add the ability to override the "backend_availability_zone" parameter in every Manila share backend. * Add support to configure Pure Storage FlashBlade Manila backend. * Haproxy configuration file can now use the frontend and backend keywords to describe a service, rather than using the listen keyword. The new format can be enabled via hiera parameter *haproxy_backend_syntax*. When enabled, any frontend or backend configuration can be overriden on a per service-basis via new hiera keys *tripleo::haproxy::<service>::frontend_options* and *tripleo::haproxy::<service>::frontend_options*. The original hiera key *tripleo::haproxy::<service>::options* has no effect on the frontend and backend sections. * This change adds functionality to enable modular libvirt daemons support. Also all the daemons runs in separate containers, so the configuration is done for all the daemon containers. Here is the list of daemons added in this change. - virtnodedevd - virtproxyd - virtqemud - virtsecretd - virtstoraged More information regarding modular libvirt daemons is available here. *Libvirt Daemons <https://libvirt.org/daemons.html>* _. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New hiera setting *rbd_disk_cachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * Added "scripts" parameters for class tripleo::profile::base::metrics::collectd::sensubility enabling download of various scripts for usage within sensubility check definitions. Supported transfer method is HTTP only currently. * Adds a new option "audit_enabled" to add the pycadf audit middleware to the Swift proxy server pipeline. * Introduces the tripleo::profile::pacemaker::rabbitmq_bundle::use_ma sterslave_rabbitmqra class parameter to be able to use the resource agent from the rabbitmq upstream repository (as opposed to the resource-agent maintained under the clusterlabs umbrella). Upgrade Notes ************* * Services managed by Pacemaker will be restarted when this change is applied as an Update or Upgrade process. Changes in puppet-tripleo 15.0.0..16.0.0 ---------------------------------------- f9790932 Bump metadata for release 42bcb193 Fix typo in SSL file resource 1a42b83b Modernize rabbitmq's TLS support fdca31a2 Bind mount the IPA crt when internal_tls is enabled 12f14d95 haproxy: Add missing default_backend option 830ae9e5 Revert Horizon's Memecached config to use IP addresses 8e6e49d2 Add ability to noop a service 98af2c58 Add a new bind-mount for vTPM logs 1b7d23e3 Remove unused modules from testing 9771593f Do not bind-mount qemu logs into another host path 705e9888 Add missing haproxy listen options 65e7e338 Add support for share backend availability zones 24f137df Remove zaqar b59135d9 Remove mistral 4e89b1cc Fix front/back-end options bbdad5c2 Enable support for Libvirt modular daemons e91aac28 Add missing "z" flag for specific mounts 5a9b957a Replace rsprep directive with http-response replace-header e5e2a455 Revert "Pin puppet-redis to 8.0.0" a67a36b1 Redis: Remove unused implementations for clustering 89bd8abe Manila: Remove usage of deprecated driver_handles_share_servers 90005dd8 Extend fencing to hosts using fence_kubevirt agent. 2384b77a Make sure there is a space after debug in virtlogd_wrapper 4931d2cc Pin puppet-redis to 8.0.0 7a6c5281 haproxy: frontend/backend syntax in config 414ff9b0 Glance: Add support for cinder_os_region_name 1ccc83a3 Remove unused variables in tripleo::profile::base::gnocchi 38162e4a Remove duplicate spec file 3841151a Add /dev/log to ovn-dbs-bundle 423046a6 qdr: Add SSL support feed67dc Allow tuning of Galera gcache size a6432b98 Nova: Include new puppet classes for castellan options e9d96dce Replace deprecated ip functions 212f47ca Replace deprecated is_integer 8a2dd483 Revert "Deprecate warnings for Ceilometer and Gnocchi" 3ed78ec0 Unpin puppet-rsyslog 27d9510b Replace rsyslog::server by rsyslog::config 1d1ab8ec Replace deprecated is_string/is_array/is_hash method 3d53beb6 Octavia: Add optional inclusion of driver_agent class 8966029a Horizon: Enable manila-dashboard configurations 8a00edfa Horizon: Enable octavia-dashboard configurations a194d727 Horizon: Enable heat-dashboard configurations ae8e9c49 Allow to use the upstream rabbitmq-server-ha OCF resource agent 8a847689 Configure json_rpc/authtoken sections for ironic 4b0410a3 [c9] wrappers should start containers with host's cgroupns 7b3a8cd8 Include db classes explicitly 03edf2ab Enable configuration of swift-recon-cron job 35dbf4e6 nova_virtlogd_wrapper: Simplify string matching b55ffb5b Drop all non bundle implementations fb9ba4b8 Don't generate 10-neutron_wsgi.conf with internal tls 4c3b1ef2 nova_virtlogd_wrapper: trap "created" containers c039e212 Add Pure Storage FlashBlade Manila backend 256d677d Trim line breaks from pacemaker bundle function 49921d57 Set memcached server list from memcached_node_names 93d102ea Add puppet support to deploy neutron-api with httpd 24de78a1 PowerStore: Remove usage of deprecated powerstore_appliances 504c35c2 Manila: Remove usage of cephfs_enable_snapshots 150b3259 Telemetry: Use new coordination classes de1b69e0 Remove side-car containers in Create status 0278c925 Remove support for Cavium LiquidIO cbda8fe6 Designate: Use designate::coordination bf889579 Revert "Aodh deprecation" 9fa3836f Manila: Use defaults defined in puppet-manila 33ac8dcc Cinder: Use defaults defined in puppet-cinder a4ea71d3 Cinder: Dell EMC PowerMax: Fix typo in hash key b714aa37 Glance: Use defaults defined in puppet-glance 5f7af6b7 Cinder: Remove implementation for HPE Lefthand driver a4803b26 Add audit middleware to Swift proxy pipeline 6fd83b96 Create SSL certificates from sslProfiles df456427 Clear last dependency on puppet-ceph from Manila manifest 5413116c Allow tuning timeouts for mysql pacemaker resource 519f8fbc Remove puppet-ceph prameters from unit test hieradata 26ee01a0 Allow tuning timeouts for rabbitmq pacemaker resource eae3b158 haproxy: Use healthcheck API for Ironic and Octavia 46024cd5 haproxy: Use healthcheck middleware to monitor service availability 1a0b5134 haproxy: Enable httplog for all http endpoints 06f663d6 haproxy: Use httpchk instead of tcpchk for heat endpoints 98a0af7c Remove bind and bind pool generation for designate from puppet 44d5d172 Cinder: Include new puppet classes for castellan options e0993e50 setup.cfg: Replace dashes with underscores 634cc266 Manila: Use manila::backend::ganesha to set up ganesha options 781d197a Add pcmk_host_list stonith-fence_compute-fence-nova 41853690 Deprecate the swift_store_config_file parameter f3737649 Replace the deprecated aodh::auth class Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 24 +- lib/puppet/functions/is_ip_addresses.rb | 29 - lib/puppet/functions/merge_hash_values.rb | 30 + lib/puppet/functions/noop_resource.rb | 11 + lib/puppet/functions/pacemaker_bundle_replicas.rb | 3 +- lib/puppet/functions/qdr_ssl_certificate.rb | 39 + lib/puppet/provider/liquidio_config/ini_setting.rb | 10 - lib/puppet/type/liquidio_config.rb | 49 -- manifests/fencing.pp | 15 +- manifests/haproxy.pp | 858 +++++++++++++-------- manifests/haproxy/endpoint.pp | 75 +- manifests/haproxy/horizon_endpoint.pp | 61 +- manifests/haproxy/stats.pp | 38 +- manifests/host/liquidio/compute.pp | 86 --- manifests/host/liquidio/config.pp | 31 - manifests/pacemaker/haproxy_with_vip.pp | 10 +- manifests/profile/base/aodh.pp | 3 +- manifests/profile/base/aodh/api.pp | 2 +- manifests/profile/base/aodh/authtoken.pp | 25 +- manifests/profile/base/aodh/evaluator.pp | 14 +- manifests/profile/base/aodh/listener.pp | 1 - manifests/profile/base/aodh/notifier.pp | 1 - manifests/profile/base/barbican.pp | 1 + manifests/profile/base/barbican/api.pp | 1 + manifests/profile/base/barbican/authtoken.pp | 27 +- manifests/profile/base/ceilometer.pp | 3 +- manifests/profile/base/ceilometer/agent/polling.pp | 4 +- manifests/profile/base/cinder.pp | 3 + manifests/profile/base/cinder/api.pp | 14 +- manifests/profile/base/cinder/authtoken.pp | 25 +- manifests/profile/base/cinder/volume.pp | 13 - .../base/cinder/volume/dellemc_powerflex.pp | 40 +- .../profile/base/cinder/volume/dellemc_powermax.pp | 20 +- .../base/cinder/volume/dellemc_powerstore.pp | 18 +- manifests/profile/base/cinder/volume/dellemc_sc.pp | 38 +- .../profile/base/cinder/volume/dellemc_unity.pp | 18 +- .../base/cinder/volume/dellemc_vmax_iscsi.pp | 8 +- .../profile/base/cinder/volume/dellemc_vnx.pp | 28 +- .../profile/base/cinder/volume/dellemc_vxflexos.pp | 34 +- .../profile/base/cinder/volume/dellemc_xtremio.pp | 24 +- manifests/profile/base/cinder/volume/dellsc.pp | 36 +- .../profile/base/cinder/volume/hpelefthand.pp | 77 -- manifests/profile/base/cinder/volume/iscsi.pp | 12 +- manifests/profile/base/cinder/volume/netapp.pp | 50 +- manifests/profile/base/cinder/volume/nfs.pp | 20 +- manifests/profile/base/cinder/volume/nvmeof.pp | 24 +- manifests/profile/base/cinder/volume/pure.pp | 18 +- manifests/profile/base/cinder/volume/rbd.pp | 36 +- manifests/profile/base/cinder/volume/scaleio.pp | 36 +- manifests/profile/base/database/mysql.pp | 7 - manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/database/redis.pp | 27 +- manifests/profile/base/designate.pp | 25 +- manifests/profile/base/designate/api.pp | 1 + manifests/profile/base/designate/authtoken.pp | 25 +- manifests/profile/base/designate/backend.pp | 6 +- manifests/profile/base/designate/central.pp | 17 +- manifests/profile/base/designate/producer.pp | 17 +- manifests/profile/base/designate/worker.pp | 8 +- manifests/profile/base/glance/api.pp | 2 + manifests/profile/base/glance/authtoken.pp | 25 +- manifests/profile/base/glance/backend/cinder.pp | 38 +- manifests/profile/base/glance/backend/file.pp | 10 +- manifests/profile/base/glance/backend/rbd.pp | 18 +- manifests/profile/base/glance/backend/swift.pp | 50 +- manifests/profile/base/gnocchi.pp | 16 +- manifests/profile/base/gnocchi/authtoken.pp | 25 +- manifests/profile/base/heat.pp | 24 +- manifests/profile/base/heat/api.pp | 1 + manifests/profile/base/heat/api_cfn.pp | 2 +- manifests/profile/base/heat/authtoken.pp | 25 +- manifests/profile/base/horizon.pp | 36 +- manifests/profile/base/ironic.pp | 2 + manifests/profile/base/ironic/api.pp | 1 + manifests/profile/base/ironic/authtoken.pp | 25 +- manifests/profile/base/ironic/conductor.pp | 1 + manifests/profile/base/ironic_inspector.pp | 9 +- .../profile/base/ironic_inspector/authtoken.pp | 25 +- manifests/profile/base/keystone.pp | 22 +- manifests/profile/base/logging/rsyslog.pp | 3 +- manifests/profile/base/manila.pp | 1 + manifests/profile/base/manila/api.pp | 37 +- manifests/profile/base/manila/authtoken.pp | 25 +- manifests/profile/base/manila/share.pp | 228 +++--- manifests/profile/base/metrics/qdr.pp | 26 +- manifests/profile/base/mistral.pp | 126 --- manifests/profile/base/mistral/api.pp | 97 --- manifests/profile/base/mistral/authtoken.pp | 68 -- manifests/profile/base/mistral/engine.pp | 46 -- manifests/profile/base/mistral/event_engine.pp | 46 -- manifests/profile/base/mistral/executor.pp | 63 -- manifests/profile/base/neutron/authtoken.pp | 25 +- manifests/profile/base/neutron/server.pp | 9 +- manifests/profile/base/nova.pp | 23 +- manifests/profile/base/nova/authtoken.pp | 25 +- manifests/profile/base/nova/compute.pp | 22 +- manifests/profile/base/nova/libvirt.pp | 70 +- manifests/profile/base/novajoin/authtoken.pp | 25 +- manifests/profile/base/octavia.pp | 12 +- manifests/profile/base/octavia/api.pp | 1 + manifests/profile/base/octavia/authtoken.pp | 25 +- manifests/profile/base/pacemaker/instance_ha.pp | 5 +- manifests/profile/base/placement.pp | 2 +- manifests/profile/base/placement/authtoken.pp | 25 +- manifests/profile/base/qdr.pp | 59 +- manifests/profile/base/rabbitmq.pp | 54 +- manifests/profile/base/swift.pp | 4 +- manifests/profile/base/swift/add_devices.pp | 2 +- manifests/profile/base/swift/proxy.pp | 12 +- manifests/profile/base/swift/storage.pp | 1 + manifests/profile/base/zaqar.pp | 134 ---- manifests/profile/base/zaqar/authtoken.pp | 68 -- manifests/profile/pacemaker/ceph_nfs.pp | 2 +- manifests/profile/pacemaker/cinder/backup.pp | 81 -- .../profile/pacemaker/cinder/backup_bundle.pp | 6 +- manifests/profile/pacemaker/cinder/volume.pp | 81 -- .../profile/pacemaker/cinder/volume_bundle.pp | 6 +- manifests/profile/pacemaker/clustercheck.pp | 2 +- manifests/profile/pacemaker/database/mysql.pp | 376 --------- .../profile/pacemaker/database/mysql_bundle.pp | 75 +- manifests/profile/pacemaker/database/redis.pp | 249 ------ .../profile/pacemaker/database/redis_bundle.pp | 4 +- manifests/profile/pacemaker/haproxy.pp | 157 ---- manifests/profile/pacemaker/haproxy_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 6 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 17 +- manifests/profile/pacemaker/rabbitmq.pp | 167 ---- manifests/profile/pacemaker/rabbitmq_bundle.pp | 188 ++++- metadata.json | 2 +- ...ila-backend-az-parameters-de4d7e84fc65a3ed.yaml | 5 + .../notes/flashblade_driver-bd6df03b7f140071.yaml | 4 + .../haproxy-frontend-backend-e3719b323e84fd2c.yaml | 12 + .../notes/modular-libvirt-c19ccf0f0118c88c.yaml | 15 + .../notes/pacemaker-selinux-8dc0344afd5d64bd.yaml | 5 + ...roxy-add-audit-middleware-290db6db952d690f.yaml | 5 + ...ver-ha-ocf-resource-agent-0db89eb7c55e64ca.yaml | 6 + setup.cfg | 6 +- spec/classes/tripleo_host_liquidio_compute_spec.rb | 22 - spec/classes/tripleo_host_liquidio_config_spec.rb | 20 - spec/classes/tripleo_profile_base_aodh_api_spec.rb | 6 + .../tripleo_profile_base_aodh_authtoken_spec.rb | 4 +- .../tripleo_profile_base_aodh_evaluator_spec.rb | 11 +- spec/classes/tripleo_profile_base_aodh_spec.rb | 12 +- .../tripleo_profile_base_barbican_api_spec.rb | 4 + ...tripleo_profile_base_barbican_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_barbican_spec.rb | 2 + ...o_profile_base_ceilometer_agent_polling_spec.rb | 5 +- .../tripleo_profile_base_ceilometer_spec.rb | 2 + .../tripleo_profile_base_cinder_api_spec.rb | 5 + .../tripleo_profile_base_cinder_authtoken_spec.rb | 4 +- .../tripleo_profile_base_cinder_powermax_spec.rb | 4 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 18 + .../tripleo_profile_base_database_redis_spec.rb | 57 +- .../tripleo_profile_base_designate_api_spec.rb | 2 + ...ripleo_profile_base_designate_authtoken_spec.rb | 4 +- .../tripleo_profile_base_designate_central_spec.rb | 34 - ...tripleo_profile_base_designate_producer_spec.rb | 19 + .../classes/tripleo_profile_base_designate_spec.rb | 2 - .../tripleo_profile_base_glance_api_spec.rb | 8 + .../tripleo_profile_base_glance_authtoken_spec.rb | 4 +- ...pleo_profile_base_glance_backend_cinder_spec.rb | 2 + ...ipleo_profile_base_glance_backend_swift_spec.rb | 1 - .../tripleo_profile_base_gnocchi_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_gnocchi_spec.rb | 8 +- .../tripleo_profile_base_heat_api_cfn_spec.rb | 4 + spec/classes/tripleo_profile_base_heat_api_spec.rb | 4 + .../tripleo_profile_base_heat_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_heat_spec.rb | 10 +- spec/classes/tripleo_profile_base_horizon_spec.rb | 63 ++ .../tripleo_profile_base_ironic_api_spec.rb | 4 + .../tripleo_profile_base_ironic_authtoken_spec.rb | 4 +- ...profile_base_ironic_inspector_authtoken_spec.rb | 4 +- .../tripleo_profile_base_ironic_inspector_spec.rb | 4 + spec/classes/tripleo_profile_base_ironic_spec.rb | 4 + spec/classes/tripleo_profile_base_keystone_spec.rb | 12 +- .../tripleo_profile_base_manila_api_spec.rb | 8 + .../tripleo_profile_base_manila_authtoken_spec.rb | 4 +- .../tripleo_profile_base_manila_share_spec.rb | 8 + .../tripleo_profile_base_metrics_qdr_spec.rb | 33 + .../tripleo_profile_base_mistral_api_spec.rb | 103 --- .../tripleo_profile_base_mistral_authtoken_spec.rb | 70 -- .../tripleo_profile_base_mistral_engine_spec.rb | 88 --- ...ipleo_profile_base_mistral_event_engine_spec.rb | 88 --- .../tripleo_profile_base_mistral_executor_spec.rb | 92 --- spec/classes/tripleo_profile_base_mistral_spec.rb | 112 --- .../tripleo_profile_base_neutron_authtoken_spec.rb | 4 +- .../tripleo_profile_base_neutron_server_spec.rb | 12 + .../tripleo_profile_base_nova_authtoken_spec.rb | 4 +- .../tripleo_profile_base_nova_compute_spec.rb | 25 +- .../tripleo_profile_base_nova_libvirt_spec.rb | 115 ++- spec/classes/tripleo_profile_base_nova_spec.rb | 2 +- ...tripleo_profile_base_novajoin_authtoken_spec.rb | 4 +- .../tripleo_profile_base_octavia_api_spec.rb | 8 + .../tripleo_profile_base_octavia_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_octavia_spec.rb | 61 +- ...ripleo_profile_base_placement_authtoken_spec.rb | 4 +- .../classes/tripleo_profile_base_placement_spec.rb | 8 +- spec/classes/tripleo_profile_base_qdr_spec.rb | 39 + .../tripleo_profile_base_zaqar_authtoken_spec.rb | 70 -- spec/classes/tripleo_profile_base_zaqar_spec.rb | 174 ----- .../tripleo_profile_zaqar_authtoken_spec.rb | 70 -- spec/defines/tripleo_haproxy_endpoint_spec.rb | 25 + ...profile_base_logging_rsyslog_file_input_spec.rb | 5 +- spec/fixtures/hieradata/default.yaml | 70 +- spec/functions/is_ip_addresses_spec.rb | 12 - .../provider/liquidio_config/ini_setting_spec.rb | 75 -- spec/unit/type/liquidio_config_spec.rb | 52 -- templates/designate/pools.yaml.erb | 43 -- templates/neutron/dibbler-client.epp | 4 +- templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 4 +- templates/neutron/keepalived.epp | 4 +- templates/neutron/radvd.epp | 4 +- templates/nova/virtlogd.epp | 15 +- templates/rabbitmq/ssl-dist.conf.erb | 21 + 215 files changed, 2741 insertions(+), 4572 deletions(-)

1 0

tripleo-upgrade 8.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are pumped to announce the release of: tripleo-upgrade 8.1.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 8.0.0..8.1.0 --------------------------------------- edb205f Remove update converge 1fcbed5 Bump the default RHCS 3 tag to the newest (3-51) 0d64c81 Use stack name during upgrade converge Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 3 +-- tasks/update/main.yml | 4 ---- tasks/update/overcloud_update_converge.yml | 26 -------------------------- 3 files changed, 1 insertion(+), 32 deletions(-)

1 0

validations-common 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We high-spiritedly announce the release of: validations-common 1.4.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.3.0..1.4.0 ------------------------------------------ e68c7f3 Add new metadata keys to the validation playbooks 2a763c3 Update validations for Ansible 2.11 c33d395 Dependency reorganization 3f65cc0 validations_read_ini refactoring 746450a Fix ntp validation to check chronyd service status on all nodes 26ea5ef callback adjustment for no hosts matched 8dd3620 Setting language for the python3.6 tox environment 9d756e8 Test validations for false positives f282209 Removing validations-libs from test-requirements f12c025 reqcheck job is now voting 339eb1c Removing lookup_plugins data file directive 93c15fd Enabling indentation rule for yamllint. Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 1 + .pre-commit-config.yaml | 2 +- .yamllint | 5 +- .zuul.yaml | 2 +- ansible-collections-requirements.yml | 5 ++ molecule-requirements.txt | 2 +- playbooks/molecule/pre.yml | 3 + roles/validations/tasks/main.yaml | 12 ++-- roles/validations/tasks/run.yaml | 52 +++++++++++++-- roles/validations/tasks/show.yaml | 2 +- roles/validations/tasks/validations.yaml | 36 +++++++++- roles/validations/vars/main.yaml | 4 ++ setup.cfg | 1 - test-requirements.txt | 5 +- tox.ini | 35 +++++----- .../callback_plugins/validation_json.py | 35 ++++++++++ validations_common/library/validations_read_ini.py | 60 ++++++++++------- validations_common/playbooks/512e.yaml | 6 ++ validations_common/playbooks/check-cpu.yaml | 7 ++ .../playbooks/check-disk-space-pre-upgrade.yaml | 6 ++ validations_common/playbooks/check-disk-space.yaml | 6 ++ validations_common/playbooks/check-ftype.yaml | 6 ++ .../playbooks/check-latest-packages-version.yaml | 6 ++ validations_common/playbooks/check-ram.yaml | 7 ++ .../playbooks/check-selinux-mode.yaml | 5 ++ validations_common/playbooks/dns.yaml | 5 ++ validations_common/playbooks/no-op.yaml | 6 ++ validations_common/playbooks/ntp.yaml | 8 ++- validations_common/playbooks/service-status.yaml | 7 ++ validations_common/playbooks/validate-selinux.yaml | 6 ++ .../xfs_check_ftype/molecule/default/prepare.yml | 4 +- 34 files changed, 369 insertions(+), 82 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index e631256..8f0fd0c 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -2 +2 @@ -ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansible-core<2.12 # GPLv3+ diff --git a/test-requirements.txt b/test-requirements.txt index b4c85b4..4826c4d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -openstackdocstheme>=1.20.0 # Apache-2.0 - @@ -14,2 +12 @@ netaddr>=0.7.18 # BSD -pre-commit # MIT -validations-libs>=1.0.4 # Apache-2.0 +pre-commit>=2.3.0 # MIT

1 0

tripleo-heat-templates 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We eagerly announce the release of: tripleo-heat-templates 15.1.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. 15.1.0 ^^^^^^ Prelude ******* Environment file collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash. Enablement of data collection and transportation to an STF instance is now handled via existing templates. New Features ************ * Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package. * Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions * Adds two new parameters 'IronicAuthStrategy' and 'NeutronAuthStrategy' that defaults to 'keystone'. This would allow deploying standalone ironic and neutron services without keystone using different 'auth_strategies' like 'http_basic' and 'noauth'. * The libvirt driver has added support for hardware-offloaded OVS with vDPA (vhost Data Path Acceleration) type interfaces. vDPA allows virtio net interfaces to be presented to the guest while the datapath can be offloaded to a software or hardware implementation. This enables high performance networking with the portablity of standard virtio interfaces. Nova added support for vhost-vdpa devices in Wallaby. * Added OVN DBs clustering support. In this service model, a clustered database runs across multiple hosts in multi-active mode. * To help operators protect their workload, they can now enable the KernelArgsDeferReboot role parameter. This will prevent the tripleo- kernel ansible module from automatically rebooting nodes even if KernelArgs were changed unexpectedly. * To support Glance Distributed Image Import, adding configuration of "worker_self_reference_url" by providing the internal API URL for each node where glance api will run with glance-direct method of image-import is enabled. * Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron * The new "ApacheTimeout" parameter has been added, which determines the timeout used for IO operations in Apache. * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * A new "CinderPolicyEnforceNewDefaults" parameter adds the ability to disable Cinder's deprecated authorization policies. The default value is False, which means Cinder's deprecated policies are enabled. Setting the parameter to True disables the deprecated policies, which causes Cinder to enforce the project-admin, project- member, and project-reader RBAC personas. Support for system personas is planned for a future release. * Enable image copy for multiple RBD Glance stores Previously when using multiple RBD glance stores the operator was responsible for copying the image to all stores. Nova-compute now has the ability to automatically copy an image to the local glance store when required. This change enables the feature and adds the following role specific parameters to control the behaviour. * "NovaGlanceRbdCopyPollInterval" * "NovaGlanceRbdCopyTimeout" * A new Heat parameter HAProxyConfigBackendSyntax news drives the generation of HAproxy configuration. Prior to that, every service was mapped to a 'listen' section in the configuration. Now a service definition is split in two sections 'frontend' and 'backend', which allow for more complex proxying configurations. * New configuration "IronicDefaultBootMode" allows to change the default boot mode to use for bare metal instances. The default for now remains "bios" for legacy BIOS boot but may switch to "uefi" in the future. * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * This change adds functionality to enable modular libvirt daemons. All these daemons runs in its respective container. Also the default configuration is to use modular libvirt daemons instead of monolithic libvirt daemon. Here is the list of libvirt daemon which are added in this change. - virtnodedevd - virtproxyd - virtqemud - virtsecretd - virtstoraged It's possible to define the individual log filters for each one of these daemon using the following new parameters: - "LibvirtVirtlogdLogFilters" - "LibvirtVirtsecretdLogFilters" - "LibvirtVirtnodedevdLogFilters" - "LibvirtVirtstoragedLogFilters" - "LibvirtVirtqemudLogFilters" - "LibvirtVirtproxydLogFilters" More information regarding modular libvirt daemons is available here. *Libvirt Daemons <https://libvirt.org/daemons.html>* _. * Introduce new parameters {{role.name}}NetworkConfigUpdate. This will be a bool. When {{role.name}}NetworkConfigUpdate is True existing network configurations will be updated. By default, this is False and only new deployments will have the networks configured. This parameter is role based only, with no global option. * New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase". * Adds NovaRestrictLiveMigration boolean parmeter to enable an api policy to allow live migration only for a specific role which can be customized using NovaRestrictLiveMigrationRole. This feature is to prevent the default admin role users to be able to use live migration on coincidence. Additional policies specified using NovaApiPolicies get merged with this policy. * Adds new NovaCronArchiveDeleteRowsTaskLog parameter which controls to also archive task_log records while archiving the database. Defaults to true. * OctaviaLogOffload is now enabled by default, it creates a rsyslog container of the controllers that collects logs from the Octavia amphorae. * *OctaviaWorkers* and *HorizonWorkers* allow to configure the process workers count for the Octavia API and Horizon WSGI applications. * With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK * Users can now override or add individual entries to EndpointMap without having to specify complete EndpointMap in parameter_defaults section of an environment file. * The new "PlacementPolicies" parameter has been added. * Add support for the Pure Storage FlashBlade Manila driver * The following parmaeters have been added so that users can change timeout for communication over rpc call. * "AodhRpcResponseTimeout" * "CeilometerRpcResponseTimeout" * "DesignateRpcResponseTimeout" * "HeatRpcResponseTimeout" * "IronicRpcResponseTimeout" * "ManilaRpcResponseTimeout" * "NeutronRpcResponseTimeout" * "NovaRpcResponseTimeout" * "OctaviaRpcResponseTimeout" * The new "swift_recon_cron" container has been added to the SwiftStorage service, to reflect metrics related to async pendings to recon middleware in swift. Upgrade Notes ************* * Upgrades from OVN non-HA and OVN DBs pacemaker to OVN DBs clustered are currently not supported. * Changes the ironic PXE container TFTP service from "in.tftpd" to use the "dnsmasq" TFTP service. This is because the "in.tftpd" service is not anticipated to be carried by Linux distributions moving forward, and "dnsmasq" is actively maintained. * When upgrading an environment that uses collectd-write-qdr.yaml the CollectdAmqpInstances defaults previously specified need to be added to an administrator provided environment file and used during the overcloud deploy process. * When upgrading a deployment with the use of enable-stf.yaml, add the following files to your overcloud deployment command in order to maintain the existing services defined in enable-stf.yaml. * environments/metrics/collectd-write-qdr.yaml * environments/metrics/ceilometer-write-qdr.yaml * environments/metrics/qdr-edge-only.yaml * Mistral has been removed as it was Deprecated in Wallaby and is no longer in use. * With the change to EndpointMap interface, existing environments where it has been overridden have to specify 'merge' strategy in a new 'parameter_merge_strategies' section. * Support for Cavium/Liquidio has been removed. * "`OS::TripleO::Services::LiquidioCompute`" has been removed and should be removed from role data during upgrade. * The "`ComputeLiquidio`" role has been removed. * The "CinderPowerStoreAppliances" parameter has been removed because it has had no effect since the actual parameter was deprecated in cinder. * Support for the HPE Lefthand cinder driver has been removed. * The "OS::TripleO::Services::CinderHPELeftHandISCSI" service was removed, so it should be removed from role data during upgrade. * The "OctaviaPostWorkflowName" parameter has been removed. * Zaqar has been removed as it was deprecated in Wallaby and is no longer in use on the undercloud. Additionally it hasn't been supproted in the overcloud. Deprecation Notes ***************** * The parameter IronicIPXEEnabled has been deprecated since Ironic uses per-node boot interfaces since Ussuri. * The environment environments/deployed-server-deployed-neutron- ports.yaml, the deployed-neutron-port.yaml template, and DeployedServerPortMap parameter are deprecated in favor of NodePortMap, ControlPlaneVipData, and VipPortMap, which can be used with the generated environments/deployed-ports.yaml. * The following parameters have been deprecated and have no effect. * ManilaIsilonDriverHandlesShareServers * ManilaVNXDriverHandlesShareServers * ManilaVMAXDriverHandlesShareServers * The "ManilaCephFSCephFSEnableSnapshots" parameter has been deprecated, and has no effect now. Manila always enables snapshot support in Ceph FS backend since Wallaby. * VPP service and Neutron ML2/VPP plugin are deprecated in Xena release. VPP service relies on puppet project which isn't maintained for a while. Neutron ML2/VPP plugin is not actively supported in TripleO. Both services would be disabled in future releases. * This change deprecates the nova-libvirt-container-puppet.yaml heat- template which configures monolithic modular libvirt daemon. The newly added heat-template for modular libvirt daemons will be used to configure libvirt services in different containers. * This change removes NetworkDeploymentActions and {{role.name}}NetworkDeploymentActions. Since we can no longer rely on the Heat stack action when using Ephemeral Heat in tripleo. * The "Neutron(OVS|Vnic)VnicTypeBlackList" parameters are deprecated in favor of the new "Neutron(OVS|Sriov)VnicTypeProhibitList" parameters. * The "NovaSchedulerQueryPlacementForAvailabilityZone" parameter has been deprecated. The parameter has no effect now. * The "AdminToken" parameter has been deprecated. Use the new "KeystonePassword" parameter instead. Security Issues *************** * The OVN database servers in an OVN DBs clustering and TLS- everywhere deployment will listen on all IP addresses (0.0.0.0). This is a caveat that can only be addressed once RHBZ 1952038 is fixed. Bug Fixes ********* * The collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash. When specified, it was not possible to override the parameter, resulting in a combined hash of the default values and the administrators custom values which could lead to unexpected issues. * Default of the "NovaSyncPowerStateInterval" parameter has been changed from 0 to 600, to use the default value consistent with the one defined in nova. * Fixes issues with PPC64le hardware utilization where documented steps require a "/tftpboot/ppc64le" folder to exist for artifacts to be placed as it is required path for the firmware loader in order to boot the kernel and ramdisk. The folder is now automatically created for the container. * The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838) * NFSv4.2 is now there for long time and default in RHEL/CentOS 8. This changes the default for NovaNfsVersion to be v4.2 instead of v4 to have this the new default. * On the compute nodes, right now ssl certificates got created for libvirt, qemu-default, qemu-vnc and qemu-nbd. This is not required because the all services use the same NovaLibvirtNetwork network and therefore multiple certificates for the same hostname get created. Also from qemu point of view, if default_tls_x509_cert_dir and default_tls_x509_verify parameters get set for all certificates, there is no need to specify any of the other **_tls** config options. From Secure live migration with QEMU-native TLS (https://docs.openstack.org/nova/latest/admin/secure-live-migration- with-qemu-native-tls.html) The intention (of libvirt) is that you can just use the default_tls_x509_* config attributes so that you don’t need to set any other **_tls** parameters, unless you need different certificates for some services. The rationale for that is that some services (e.g. migration / NBD) are only exposed to internal infrastructure; while some sevices (VNC, Spice) might be exposed publically, so might need different certificates. For OpenStack this does not matter, though, we will stick with the defaults. Therefore with this change InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile get removed (which defaulted to /etc/ipa/ca.crt anyways) and just use InternalTLSCAFile. Also all cerfificates get created when EnableInternalTLS is true to and mount all SSL certificates from the host. This is to prevent certificate information is not available in a qemu's process container environment if features get switched later, which has shown to be problematic. * Add the missing **Workers* parameters into the low-memory footprint environment and set it to 1. Other Notes *********** * Using enable-stf.yaml now defines the expected configuration in OpenStack for use with Service Telemetry Framework. Removal of the defined resource_registry now requires passing additional environment files to enable the preferred data collectors and transport architecture, providing better flexibility to support additional architectures in the future. * The "iscsi_tcp" module is no longer loaded to support the operation of the "ironic-conductor" container as the "iscsi" Deployment interface has been removed from Ironic. * Parameter "DhcpAgentNotification" is set to "False" by default now. It should be set to "True" in case when Neutron DHCP agent is going to be deployed. It shouldn't be enabled with ML2/OVN backend. * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 15.0.0..15.1.0 ------------------------------------------------ b5ae7f846 Switch to rabbitmq fqdn hostnames and pass proper CA info 3cf046cce Add InternalApiNetwork entry in ServiceNetMap 28161b586 Default CephDashboardNetwork to storage_dashboard bf6f11824 Add a note about how glance currently supports project personas 512ba5ed4 Fix swift "Could not enable rsyncd" error c25eec5bf Limit collectds memory usage in the ansible part 768b66f88 Enable support for Libvirt modular daemons c354d2113 Use frontend/backend sections in HAProxy config 68db3d3be Allow configuring secure RBAC in nova 8ad58943d Allow configuring secure RBAC in placement 1e2d02d9e Option to select the required DDP package d0ee7e09e Nova: Remove usage of AvailabilityZoneFilter bdbd440cb Implement project personas in custom designate policy file 43a685e4b Implement project personas in custom octavia policy file 4e307cfd6 Implement project personas in custom ironic policy file 88494c90d Implement project personas in custom nova policy file c9635bf92 Implement a tool for converting policy.yaml files to heat templates e7f90201b Add parameters for manila storage availability zones 56a58f88e Fix libvirt/qemu logs location 8d51d6d3f Fix swift log redirection 012121109 Manila: Hide password strings 16e59efb3 Refactor usage of the NovaSchedulerEnabledFilters parameter b0de138b4 Explicitly point undercloud instead of localhost 33c1d9d34 Changing default tuned profile for ComputeVdpa ec5d0afa1 Add missing *Workers into low-memory footprint env d346aa94b Fix delegate_to to use group rather then undercloud 7fc781083 Only delete heat data in the DB if it exists 79dc2b994 Revert "Ensure startup files exist before containers might be started" 57a8efd40 Add a global configuration option for secure RBAC 60d77b37e Set cgroupns=host for neutron_dhcp and ovn-metadata 1a1fb2727 Update network-data v2 samples for ipv6 246d174f8 Add ipv6 network_data/vip_data for CI jobs ea5dff48c Support project personas in cinder 66492002c Don't use *-dist.conf files in commands 978f29d8c Add parameter IronicDefaultBootMode 3cb006d53 Changed minversion in tox to 3.18.0 c9f0a5af0 Added support for Neutron loggings service plugin configuration 5bcf76da0 Fix kill-script for cgroups v2 and podman e1a605833 Add environment to enable keystone in undercloud c293dfc7b Deploy standalone ironic and neutron in undercloud 6a8fb43ed Revert "Configure ironic to do UEFI boot by default" 0c167aede Remove zaqar cb630d03b Remove mistral 67bd75c8b Allow to set pacemaker cluster properties f2015da4b Simplify mysql users creation 84e1a591d Swap xinetd/tftp-server for dnsmasq to support ironic-pxe operations efd4ca085 Remove old ovndbs update workaround 5edb21ee3 Remove and replace NetworkDeploymentActions c463d2068 Install python3-openstackclient after the leapp upgrade ff3173bdc Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up 523acec27 Fix typo in vip-data-default-network-isolation.yaml 9edbde38d Fix typo in sample network data e8beaaf88 Add logging source for collectd 33d9d19a4 Configure api_base_uri to DesignateEndpoint URI 3f9191131 Add oidc options a52294169 Remove setting ACLs during Upgrade fcfa8ac23 Add CephRbdTrashPurgeInterval parameter a0f308324 Allow configuration of the managed resource email address 27adf3bc7 Ensure startup files exist before containers might be started 46027a8f2 Allow configuring distributed image import ae139dec6 Fix the CephDashboardNetwork default dcb33e8c5 Adding json output to yaml-diff f7121a846 Do not create mysql user if it already exists 128c2bcc2 CentOS 9: support restart of HA resources e9f0a32e7 GnocchiArchivePolicy has been removed db3996369 Revert "tripleo-podman: Enable podman.socket" 8a7201cd0 Manila: Deprecate ineffctive *DriverHandlesShareServers a235b70b2 Fix the failure condition for HAproxy chgrp script 835c6a04b Revert "Adjust HAProxy script to allow for ID change" ad2a13ab4 Check whether an HA resource already exists explicitly 5539bd8c1 NovaLiveMigrationPermitAutoConverge should default to True 151ca15e8 Consider GlanceMultistoreConfig when setting glance_pool 07fa9b17f Remove unused valid_exit_codes arg 6db0f74e2 Parameter to set api policy to limit live migration to role c69733bb6 Enable Ceph RGW public port into firewall when using SSL 79e24494b Set DhcpAgentNotification to be "false" by default 4e77e1474 Revert "Disable postcopy for ovn/ovs-dpdk" 65ff578a7 Apache: increase the base timeout 733d1bad4 Disable cephadm when ceph is deployed 474182927 Explicitly set ironic::json_rpc::project_name 1ce490716 Environment for switching to using IPs for memcached 9574cd4d0 Add IronicNeutronAgentReportInterval parameter 236f14fe8 Stop rotating rabbitmq crash.log files via erlang's lager 91627638d Prefill host configuration for rsyslog-omamqp1 3100829b9 Configure ironic to do UEFI boot by default 823e4e867 Add http basic auth support for neutron api a22ef3a0b Adjust HAProxy script to allow for ID change 47e348767 Glance: Replace deprecated os_region_name 7fe0d28ad Enable CephDashboard for scenario001 2e4361c87 container-puppet.sh idempotency on restart 99f04ef90 Create the tftpboot ppc64le folder f11b5edc2 Add BGP EVPN support to the FRR service 580139d2f Setting language for the python3.6 tox environment 5ff274113 Make default of NovaSyncPowerStateInterval consistent with nova 06cc21a44 Manila: Drop tenant_id templating from v2 endpoint e737e3f3a Remove deprecated ipv6 corosync parameters 72a12aa83 cinder_api needs etcd certs inside the container 073e581e6 Enable debug of memcached when Debug is enabled 8f6d13b7e Compute HA: Remove version discovery of keystone API 5771d9318 Remove StackAction from Octavia deployment c73ecb196 cinder_api: Export /var/log/httpd on the host ad942efe7 Fix missing ssh key in scenario010 job 61f67eff1 nova_libvirt_init_secret Give a proper error if ceph is not configured properly c4bdaea3d Support both frr 7.x and frr-8.0 concurrently b921b185f qdr: Add SSL support for oslo.messaging RPC f0010f606 Add OctaviaAmphoraSshKeyDir for ssh key creation for Octavia 6d2901345 Add <service>_api_paste_ini in puppet_tags bd7c489dc Ironic: Do not override bootfile_name 198786df2 Nova: Update puppet parameters to set castellan options bec1ffeeb Change tests to run on ansible-core 2.11 b2b1915a3 Fix NovaNfsVersion parameter comment ddb8acf32 Disable postcopy for ovn/ovs-dpdk 1896b10e2 Include octavia::driver_agent via puppet-tripleo b0caee475 Revert change to use community pacemaker_cluster module 41380b510 Replace deprecated database_connection of puppet base classes 169e4e983 Replace deprecated glance::api::database_connection feb93b26b Add DeployedCeph boolean parameter be04d6fa9 Stop using tripleo_container_manage_systemd_order f684a93aa Tidy up lingering todo's 8e0bd79c6 Enabling vhost-postcopy-support when live_migration_permit_post_copy e104c6e62 Default ganesha-internal service endpoint to external network dadb112a5 Add /run/frr volume mount 5ab70af5a Add param to configure neutron agent_down_time and report_interval bd20c5958 Fix support for json-rpc in ironic c4097a028 Make indentation consistent in pacemaker config_settings 30ddf4242 Add a role to run independent designate bind backends 74ae03602 Fix condition for pacemaker resource_op_defaults a94ff466c Example configurable cap add 68d7d51e4 Remove iscsi_tcp module load 9b34719ed [c9] nova_libvirt with host's cgroupns ad28f5da4 Wire up renamed upgrade periodic template 2d92ebf07 Add Pure Storage FlashBlade Manila driver b6148410b Add support for setting min TTL limit in designate e5ba54102 Set stop grace periods for designate services 2fb783508 Remove all docker related tasks from upgrades 810b81991 Do not fail if haproxy container UUID changes ac5b3829b Enable archive task_log records while archiving the database 02b157ab2 Remove unused BarbicanPkcs11Crypto* parameters 119812b91 Remove usage of deprecated GnocchiArchivePolicy 35e701c61 Enable swift-recon-cron job 65b1f4290 Replace the deprecated nova::scheduler::filter::scheduler_max_attempts ce660af8b nova: replace deprecated nova::cinder_catalog_info 53040573a Use yaml.safe_load to load YAML files 1115698c1 Fix typo in ovn-dbs-cluster northd kolla config file d2298873f Role parameter for tripleo_kernel_defer_reboot fd893918c Only reference _bundle manifests in cinder-{backup,volume}-pacemaker-puppet.yaml bc934d18a Enable ovn-monitor-all option to ovn-controller 8d568bdb6 Change default for NovaNfsVersion to NFSv4.2 cf0b6a161 Add CephAdmDebug parameter e0cb3c627 Deprecate ineffective ManilaCephFSCephFSEnableSnapshots 2b33594c1 Add OS version to check reboot happened 51fdc9c6b Add environments/deployed-networks.yaml e04f4a618 Compute HA: Remove workaround for Newton and older e5b1ae3c3 Add sample baremetal_deployment.yaml 7ade37b9f Default network configs to Train values 04cd218c8 tripleo-podman: Enable podman.socket 2001b48ca vncproxy: removal of tags and steps change from post_upgrade_tasks 712c6025d Remove unused OctaviaPostWorkflowName 2341c892f Skip yaml validation for releasenotes and zuul.d a9ed08335 Enable enable_proxy_headers_parsing in Ironic API f5f8f4fa7 Enable enable_proxy_headers_parsing in Barbican API 726ccc1bd Remove leftover of hieradata cleanup 30574f183 Test override of CephClusterName in 004 standalone a191377b3 Add tool to convert net-data from v1 to v2 ead5443cb Replace LEAPP_DEVEL_SKIP_RHSM with LEAPP_NO_RHSM 62b17c21b Keystone: Keep default auth methods in OpenIDC Federation c769343d8 Remove ineffective CinderPowerStoreAppliances parameter cbd2842db Allow customizing policy rules for Placement Api 61ffbe989 Fix manila-cephfsganesha-config environment for cephadm abed6abbe fix typo in readme 591f2aa2d Drop CollectdAmqpInstances from collectd-write-qdr.yaml d98d6d1f5 Fix playbook_dir Ansible Warning 1aa0af059 Remove network/ports/vip[_v6].yaml dce6bee2f Moves undercloud upgrade introspection data migration to step 1 f276e7a4a Make default of NeutronDefaultAvailabilityZones empty array 02c15818f Add heat-api environment 7010a2741 Introducing the ComputeVdpa role 1738ccfd2 Remove support for Cavium LiquidIO feef0cc1e Add a cloud profile for system-admins 5ef7f9330 FFU: change transfer parameters for database resync 95ddd09c8 Remove unused definition of PythonInterpreter cc0f113a6 Remove unused disable-unbound.yaml 6f0b375f7 Remove hieratada for ceilometer::agent::auth ec1f6102e yaml-diff.py: Making it a bit better 514f6df76 placement: Adding Debug parameter 681fa9a22 Rename AdminToken to KeystonePassword a2619ba57 Neutron: Rename VnicTypeBlacklist parameters af351b783 Update puppet parameters for networking-baremetal 4dca2a483 Allow tuning rpc_response_timeout ab4c114d5 Adjust enable-stf.yaml for latest recommendations 4aeb3f354 Enable image copy for multiple RBD Glance stores f065bb96b Add parameters to specify auth_strategy df4c7c8ce Use role var names from tripleo_podman bc2a0339e Preface tasks path with {{playbook_dir}} 5460ec844 Fix ordering of Swift pipeline values ad1ba1bc3 Add comment for libvirt/vnc network sync 978c058ef Enable LogOffload by default in Octavia dd5a5fc24 Remove from master the ceph-ansible references b1e992a73 Neutron: Use the pids subsystem to look up container id 26be31799 Deprecate DeployedServerPortMap 9da8a4059 Remove NovaVncProxyNetwork from ServiceNetMap 48918ea6d Enable healthcheck API in Octavia and Ironic 4da03adef Move ephemeral heat upgrade to the service ef7254edd Cinder: Remove support for HPE Lefthand driver 3da428352 Designate: Clean up deprecated Rabbit* parameters a96f333fa Neutron: Use placement user to talk with Placement service 5d5419a1f Octavia: Remove unused cleanup tasks of tls_proxy container e0adac953 Enable octavia driver agent puppet c904c7555 Explicit set qemu certificate group ownership ff48f2ac1 Get roles data from stack output on UC upgrade 0b5b914e3 Add THT Jinja2 data sources as stack output 28105815c Extend UC ephemeral heat to export network afc0d39dc Add Ephemeral Heat service a6118661f Fix NetworkDeploymentActionValue format 18651160a Deprecate VPP service and Neutron ML2/VPP agent fb67c2da9 Move scenario004 to cephadm 574cf2769 Drop mistral configuration from post deploy 8fb3a0b88 Use module for container puppet tasks d9b6ed3fb Include tripleo container service management once 3b043e495 Always run network config for undercloud ec444622d Add support for OVS DPDK pmd auto balance parameters. 91f06efb3 Do not run Swift rsync container in single replica mode 48fd886a0 Distribute iscsid.conf to all containers using iscsi 10e065219 Drop archive policy from enable-legacy-telemetry f94c38476 Remove PciPassthroughFilter from NovaSchedulerAvailableFilters d96a9c615 Neutron: Explicitly set the default hepervisor name 33f7868d5 Set tripleo_cephadm rbd mirror vars 94e31ab75 Enable DPDK OVS PMD Auto Load Balance e85da3e9e Add post_upgrade_task and remove puppet-ceph pkg d20f295f3 Simplify libvirt/qemu ssl certificates baf4a1614 OVN DBs clustering a263da138 Use merge strategy for EndpointMap 1ddef85c9 Add OVNAvailabilityZone to improve UX b991086fe Move designate from experimental feb63aba4 Add extra Ansible Variable perameter dcddeb3b9 Make UpgradeLeappDevelSkip per-role 1eea4ca2e Add map merge strategy for {{role.name}}Parameters a3814c08d Add service defined ansible_group_vars to RoleGroupVars 2f702f7bb Limit collectds memory usage d2bbc3fbb Deprecate IronicIPXEEnabled 454b45c7d Set OS_CLOUD instead in stackrc 019419463 Use community.general ansible collection instead of modules 6837633ea Fix broken restart of ovndb_server during minor update ed320d8a7 nova-compute: Adding failed_when to nova-compute stop task c214e99b2 Bump ovs and ovn versions to 2.15 for FFWD. ca732da9c nova-compute: Replacing yes/no with boolean values a26b064bd Add missing monitoring_subscription to Placement f86a22d33 Clean up DefaultPasswors 7b87fc691 Placement: Remove unused PlacementAPIInterface d2132dd81 Honor the Debug parameter in Zaqar template 5b34e66a7 Honor the BackupAndRestoreHieraConfigFile parameter 82de22a43 Mark NeutronFirewallDriver deprecated properly 7dbcb4157 Neutron: Remove unused NeutronMechanismDrivers from dhcp-agent template 86d3f64b0 Nova: Remove unused password parameters 90ace4f68 Don't create ExtraConfig resources per role 857807247 Add support for designate standalone jobs 06e12a1b0 Placement: Remove the unused NovaPassword parameter 09bcacd25 Add support for keystone_authtoken/memcache_use_advanced_pool be0b91ef5 Add network-v2 default files + vip data examples 035299cdc Remove all telemetry related redundant environments fcac503da Nova: Remove useless authtoken hieradata from computes 7d0320ad9 Drop usage of removed tripleo::haproxy parameters 0bb24e11e Remove ENABLE_* environment about puglins not installed c42ba433a Introducing the nova-cell environments 2225f9666 Support cinder image conversion on an NFS share 78e870712 Replace unused var 'net' with _ ab9f26b30 Remove or fix outdated/incorrect tripleo hieradata definitions 05dbd4761 Glance: Update puppet parameters to set castellan options 6dd006fc0 Add Python3 xena unit tests e9901a7fb Update master for stable/wallaby a7d238643 Make memcached port parameters globally available 4f2884ff6 Clean up usage of the deprecated aodh::auth class 2e9900e81 Set hieradata for the aodh::service_credentials class a314ad3ae Enable proxy header parsing in Octavia API 67d188f51 Clean up leftovers of Midonet support 02bb4b8aa Remove or fix outdated/incorrect neutron hieradata definitions d975e560a [VxFlex OS] Fix resource name typo in template Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + README.rst | 4 - baremetal-samples/baremetal_deployment.yaml | 79 + ci/environments/disable-unbound.yaml | 57 - ci/environments/scenario000-standalone.yaml | 8 +- .../scenario001-multinode-containers.yaml | 41 +- ci/environments/scenario001-standalone.yaml | 8 +- ci/environments/scenario002-standalone.yaml | 6 +- ci/environments/scenario003-standalone.yaml | 18 +- ci/environments/scenario004-standalone.yaml | 61 +- .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 1 + .../scenario010-multinode-containers.yaml | 38 +- ci/environments/scenario010-standalone.yaml | 39 +- ci/environments/scenario012-standalone.yaml | 1 + ci/network_data_v6.yaml | 54 + ci/vip_data_v6.yaml | 6 + common/common-container-config-scripts.yaml | 2 +- common/container-puppet.sh | 1 + common/deploy-steps-tasks-step-0.j2.yaml | 2 +- common/deploy-steps-tasks.yaml | 2 - common/deploy-steps.j2 | 35 +- common/generate-config-tasks.yaml | 21 +- common/host-container-puppet-tasks.yaml | 22 +- .../nova_libvirt_init_secret.sh | 10 + .../pacemaker_mutex_restart_bundle.sh | 15 +- .../pacemaker_restart_bundle.sh | 30 +- container_config_scripts/pacemaker_wait_bundle.sh | 29 +- deployed-server/README.rst | 2 +- deployed-server/deployed-neutron-port.yaml | 18 + deployed-server/deployed-server.yaml | 37 +- deployment/aodh/aodh-api-container-puppet.yaml | 6 + deployment/aodh/aodh-base.yaml | 20 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 6 + .../backup-and-restore/rear-baremetal-ansible.yaml | 1 + .../barbican/barbican-api-container-puppet.yaml | 34 +- deployment/barbican/barbican-client-puppet.yaml | 20 +- ...ometer-agent-notification-container-puppet.yaml | 2 - .../ceilometer-base-container-puppet.yaml | 26 +- deployment/ceph-ansible/ceph-base.yaml | 760 ---- deployment/ceph-ansible/ceph-client.yaml | 71 - deployment/ceph-ansible/ceph-external.yaml | 73 - deployment/ceph-ansible/ceph-grafana.yaml | 186 - deployment/ceph-ansible/ceph-mds.yaml | 81 - deployment/ceph-ansible/ceph-mgr.yaml | 179 - deployment/ceph-ansible/ceph-mon.yaml | 122 - deployment/ceph-ansible/ceph-nfs.yaml | 137 - deployment/ceph-ansible/ceph-osd.yaml | 137 - deployment/ceph-ansible/ceph-rbdmirror.yaml | 99 - deployment/ceph-ansible/ceph-rgw.yaml | 200 - deployment/cephadm/ceph-base.yaml | 118 +- deployment/cephadm/ceph-client.yaml | 4 - deployment/cephadm/ceph-external.yaml | 4 - deployment/cephadm/ceph-grafana.yaml | 4 - deployment/cephadm/ceph-mds.yaml | 3 - deployment/cephadm/ceph-mgr.yaml | 4 - deployment/cephadm/ceph-mon.yaml | 4 - deployment/cephadm/ceph-nfs.yaml | 4 - deployment/cephadm/ceph-osd.yaml | 4 - deployment/cephadm/ceph-rbdmirror.yaml | 28 +- deployment/cephadm/ceph-rgw.yaml | 5 +- deployment/cinder/cinder-api-container-puppet.yaml | 18 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 3 - .../cinder/cinder-backup-container-puppet.yaml | 2 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 11 +- .../cinder/cinder-common-container-puppet.yaml | 68 +- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 73 - .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 5 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- deployment/database/mysql-base.yaml | 6 - deployment/database/mysql-container-puppet.yaml | 4 +- deployment/database/mysql-pacemaker-puppet.yaml | 16 + deployment/database/redis-container-puppet.yaml | 2 +- deployment/database/redis-pacemaker-puppet.yaml | 2 +- .../liquidio-compute-config-container-puppet.yaml | 124 - deployment/deprecated/mistral/mapping.json | 373 -- .../mistral/mistral-api-container-puppet.yaml | 270 -- deployment/deprecated/mistral/mistral-base.yaml | 118 - .../mistral/mistral-engine-container-puppet.yaml | 141 - .../mistral-event-engine-container-puppet.yaml | 116 - .../mistral/mistral-executor-container-puppet.yaml | 252 -- .../neutron-vpp-agent-baremetal-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 222 +- .../novajoin/novajoin-container-puppet.yaml | 6 + .../{ => deprecated}/vpp/vpp-baremetal-puppet.yaml | 0 .../deprecated/zaqar/zaqar-container-puppet.yaml | 395 -- .../designate/designate-api-container-puppet.yaml | 12 +- .../designate/designate-base.yaml | 36 +- .../designate/designate-bind-container.yaml | 3 +- .../designate-central-container-puppet.yaml | 44 +- .../designate/designate-mdns-container-puppet.yaml | 10 +- .../designate-producer-container-puppet.yaml | 3 +- .../designate/designate-sink-container-puppet.yaml | 3 +- .../designate-worker-container-puppet.yaml | 3 +- deployment/frr/frr-container-ansible.yaml | 39 +- deployment/glance/glance-api-container-puppet.yaml | 30 +- .../glance/glance-api-edge-container-puppet.yaml | 12 + .../gnocchi/gnocchi-api-container-puppet.yaml | 11 +- deployment/haproxy/haproxy-container-puppet.yaml | 11 +- .../haproxy/haproxy-edge-container-puppet.yaml | 6 - deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-api-container-puppet.yaml | 2 +- deployment/heat/heat-base-puppet.yaml | 12 +- deployment/heat/heat-engine-container-puppet.yaml | 9 +- .../heat/heat-ephemeral-container-ansible.yaml | 124 + deployment/horizon/horizon-container-puppet.yaml | 30 +- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 6 +- deployment/ironic/ironic-api-container-puppet.yaml | 83 +- deployment/ironic/ironic-base-puppet.yaml | 18 +- .../ironic/ironic-conductor-container-puppet.yaml | 147 +- .../ironic/ironic-inspector-container-puppet.yaml | 75 +- .../ironic-neutron-agent-container-puppet.yaml | 44 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 6 +- deployment/iscsid/iscsid-container-puppet.yaml | 2 +- .../kernel-boot-params-baremetal-ansible.yaml | 16 + deployment/keystone/keystone-container-puppet.yaml | 106 +- deployment/logging/files/nova-libvirt.yaml | 67 +- deployment/logging/rsyslog-container-puppet.yaml | 26 + deployment/manila/manila-api-container-puppet.yaml | 6 + deployment/manila/manila-backend-cephfs.yaml | 65 +- .../manila/manila-backend-flashblade-puppet.yaml | 77 + deployment/manila/manila-backend-isilon.yaml | 37 +- deployment/manila/manila-backend-netapp.yaml | 52 +- deployment/manila/manila-backend-unity.yaml | 36 +- deployment/manila/manila-backend-vmax.yaml | 39 +- deployment/manila/manila-backend-vnx.yaml | 45 +- deployment/manila/manila-base.yaml | 15 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 26 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 100 +- deployment/metrics/collectd-container-ansible.yaml | 14 +- deployment/metrics/collectd-container-puppet.yaml | 21 +- deployment/metrics/qdr-container-ansible.yaml | 3 - deployment/neutron/kill-script | 11 +- .../neutron/neutron-api-container-puppet.yaml | 91 +- deployment/neutron/neutron-base.yaml | 21 +- .../neutron/neutron-dhcp-container-puppet.yaml | 43 +- .../neutron/neutron-l3-container-puppet.yaml | 56 +- .../neutron/neutron-metadata-container-puppet.yaml | 42 +- .../neutron-ovs-agent-container-puppet.yaml | 26 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 29 +- deployment/neutron/neutron-plugin-ml2.yaml | 37 +- .../neutron-sriov-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 57 +- deployment/nova/nova-apidb-client-puppet.yaml | 7 +- deployment/nova/nova-base-puppet.yaml | 12 +- deployment/nova/nova-compute-container-puppet.yaml | 131 +- .../nova/nova-conductor-container-puppet.yaml | 4 - deployment/nova/nova-db-client-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 4 +- .../nova/nova-metadata-container-puppet.yaml | 8 +- .../nova-modular-libvirt-container-puppet.yaml | 979 +++++ .../nova/nova-scheduler-container-puppet.yaml | 19 +- deployment/nova/nova-virt-common.yaml | 158 + .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- .../octavia/octavia-api-container-puppet.yaml | 72 +- deployment/octavia/octavia-base.yaml | 5 + .../octavia/octavia-deployment-config.j2.yaml | 36 +- .../octavia-health-manager-container-puppet.yaml | 4 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../octavia/providers/ovn-provider-config.yaml | 3 + .../openvswitch-dpdk-baremetal-ansible.yaml | 103 +- .../ovn/ovn-controller-container-puppet.yaml | 19 +- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 307 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 8 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 66 +- .../placement/placement-api-container-puppet.yaml | 50 +- deployment/podman/podman-baremetal-ansible.yaml | 69 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 19 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 2 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 47 +- .../swift/swift-storage-container-puppet.yaml | 119 +- .../timemaster/timemaster-baremetal-ansible.yaml | 3 - .../tripleo-packages-baremetal-puppet.yaml | 22 +- deployment/unbound/unbound-container-ansible.yaml | 29 + .../undercloud-upgrade-ephemeral-heat.yaml | 54 - deployment/undercloud/undercloud-upgrade.yaml | 24 +- environments/cavium-liquidio.yaml | 31 - .../ceph-ansible/ceph-ansible-external.yaml | 31 - .../ceph-ansible/ceph-ansible-per-role.yaml | 19 - environments/ceph-ansible/ceph-ansible.yaml | 25 - environments/ceph-ansible/ceph-dashboard.yaml | 5 - environments/ceph-ansible/ceph-mds.yaml | 2 - environments/ceph-ansible/ceph-rbdmirror.yaml | 2 - environments/ceph-ansible/ceph-rgw.yaml | 6 - environments/cinder-dellemc-powerstore-config.yaml | 1 - environments/cinder-dellemc-vxflexos-config.yaml | 2 +- environments/cinder-hpelefthand-config.yaml | 13 - environments/dcn-storage.yaml | 2 +- environments/deployed-networks.yaml | 2 + environments/deployed-ports.j2.yaml | 24 + .../deployed-server-deployed-neutron-ports.yaml | 8 +- environments/disable-telemetry.yaml | 21 - environments/enable-designate.yaml | 19 +- environments/enable-federation-openidc.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 5 +- environments/enable-secure-rbac.yaml | 4126 ++++++++++++++++++++ environments/enable-stf.yaml | 99 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 1 - environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/low-memory-usage.yaml | 15 +- environments/manila-cephfsganesha-config.yaml | 5 +- environments/manila-cephfsnative-config.yaml | 1 - environments/manila-flashblade-config.yaml | 15 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 8 - environments/neutron-ml2-vpp.yaml | 4 +- environments/neutron-ovs-dvr.yaml | 1 + environments/nova-cell.yaml | 23 + environments/ovs-hw-offload.yaml | 11 +- environments/services-baremetal/mistral.yaml | 6 - .../services-baremetal/neutron-ovn-dvr-ha.yaml | 1 - .../services-baremetal/neutron-ovn-ha.yaml | 1 - environments/services-baremetal/neutron-sriov.yaml | 10 +- environments/services/heat-api.yaml | 2 + environments/services/ironic-overcloud.yaml | 3 +- environments/services/mistral.yaml | 6 - environments/services/neutron-mlnx-agent.yaml | 11 +- environments/services/neutron-ovn-dvr-ha.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 - environments/services/neutron-ovn-sriov.yaml | 10 +- environments/services/neutron-ovn-standalone.yaml | 1 - environments/services/neutron-ovs-dpdk.yaml | 6 +- environments/services/neutron-ovs-dvr.yaml | 1 + environments/services/neutron-ovs.yaml | 1 + environments/services/neutron-sriov.yaml | 10 +- environments/services/undercloud-aodh.yaml | 7 - environments/services/undercloud-ceilometer.yaml | 9 - environments/services/undercloud-gnocchi.yaml | 7 - environments/services/vpp.yaml | 2 +- environments/services/zaqar-swift-backend.yaml | 4 - environments/services/zaqar.yaml | 3 - environments/ssl/enable-memcached-tls.yaml | 3 - environments/ssl/no-tls-endpoints-public-ip.yaml | 82 - environments/ssl/tls-endpoints-public-dns.yaml | 54 +- environments/ssl/tls-endpoints-public-ip.yaml | 54 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 11 +- environments/standalone/standalone-overcloud.yaml | 8 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/nova-nfs.yaml | 2 +- environments/undercloud-enable-keystone.yaml | 12 + environments/undercloud-enable-nova.yaml | 10 +- environments/undercloud.yaml | 14 +- environments/undercloud/undercloud-minion.yaml | 14 +- .../updates/update-from-ml2-ovs-from-rocky.yaml | 1 - extraconfig/post_deploy/undercloud_post.py | 85 +- extraconfig/post_deploy/undercloud_post.sh | 24 +- extraconfig/post_deploy/undercloud_post.yaml | 27 +- .../default-network-isolation-ipv6.yaml | 5 + network-data-samples/ganesha-ipv6.yaml | 1 + .../legacy-routed-networks-ipv6.yaml | 9 + network-data-samples/management-ipv6.yaml | 1 + network-data-samples/routed-networks-ipv6.yaml | 5 + network-data-samples/routed-networks.yaml | 2 +- .../vip-data-default-network-isolation.yaml | 39 + network-data-samples/vip-data-fixed-ip.yaml | 35 + network-data-samples/vip-data-routed-networks.yaml | 40 + network/endpoints/build_endpoint_map.py | 308 -- network/endpoints/endpoint_data.yaml | 353 -- network/endpoints/endpoint_map.yaml | 2709 +++---------- network/ports/vip.yaml | 122 - network/ports/vip_v6.yaml | 112 - network/service_net_map.j2.yaml | 14 +- network_data_default.yaml | 7 + overcloud-resource-registry-puppet.j2.yaml | 99 +- overcloud.j2.yaml | 53 +- puppet/role.role.j2.yaml | 2 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + ...parameters-neutron-ironic-3d7330a7dc82f43d.yaml | 7 + .../add-computevdpa-role-1f7c5df94d9900b6.yaml | 11 + ...d-ovn-dbs-cluster-support-6193cba5be432865.yaml | 14 + ...ter-kernelargsdeferreboot-5b8e8b2f64c64a91.yaml | 7 + ..._distributed_image_import-97458c56a1ad95d9.yaml | 7 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + .../notes/apache-timeout-d61a3910ce7dc162.yaml | 5 + ...hange-ironic-tftp-service-21cc25629b15992f.yaml | 7 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 + ...keystone-project-personas-b71c35c4c1a8bbd8.yaml | 9 + .../notes/collectd-write-qdr-f790703e3f0c3245.yaml | 16 + ...precate-IronicIPXEEnabled-6cb68b0bfee5ac4d.yaml | 5 + ...-deployed-server-port-map-99d4d6a01f630d04.yaml | 7 + ...ver_handles_share_servers-d6af4e7c25c34c6e.yaml | 8 + ...la-cephfs-enable-snapshot-7857604802378720.yaml | 6 + .../notes/deprecate-vpp-2911807152cd4b62.yaml | 7 + ...-stf-no-resource-registry-db6ee6319964ab7f.yaml | 20 + ...sync-power-state-interval-90778dbcb0104130.yaml | 6 + ...64le-tftp-folder-creation-36e73d187334dbbe.yaml | 7 + .../notes/glance_image_copy-34a3e62c48eaee0e.yaml | 13 + .../haproxy-frontend-backend-b253d26eeadbfb6b.yaml | 8 + .../notes/ironic-boot-mode-07df530490bead50.yaml | 6 + ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + .../notes/mistral-removal-df87b8dd8bf6bd4e.yaml | 5 + .../modular-libvirt-daemons-b5ad6043d6510077.yaml | 31 + .../notes/network-update-var-355dbbb4daee7f46.yaml | 14 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + ...on-vnic_type_prohibitlist-21e23e511ca0e922.yaml | 5 + ...api_live_migration_policy-04fe402b554085b9.yaml | 10 + ..._compute_nfs_default_vers-e61d0bf78794be28.yaml | 6 + ...ive_deleted_rows-task_log-efbf0aac77aab128.yaml | 6 + ...t_ssl_cert_simplification-dbee541be9f55ce5.yaml | 30 + ...le-log-offload-by-default-53faec2d64688109.yaml | 6 + .../octavia_service_workers-70887b5882ce0bb0.yaml | 9 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + ...rge-strategy-endpoint-map-83b8321c72421fd6.yaml | 11 + .../notes/placement-policies-db2704ea63d0bdad.yaml | 4 + .../purestorage_flashblade-75cbbdae48f233e0.yaml | 4 + ...-availability-zone-filter-24a0f480bb2a345b.yaml | 5 + .../notes/remove-cavium-2d8cbe8a5085517a.yaml | 11 + ...der-powerstore_appliances-0a4905808b2b66f1.yaml | 5 + .../remove-hpe-lefthand-23c6beaa777e3dfb.yaml | 8 + ...nductor-iscsi-module-load-1e7d3c72a222196a.yaml | 6 + ...ctavia_post_workflow_name-84083c092cf79c8d.yaml | 4 + .../notes/rename-admin-token-ae1b694f063035c8.yaml | 5 + .../rpc_reponse_timeout-6feb5f62819b2eaf.yaml | 15 + ...on-to-be-false-by-default-4fe7acaa60d2a95f.yaml | 6 + .../notes/swift-recon-cron-8a3023ab693486bd.yaml | 6 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 9 +- .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + .../notes/zaqar-removal-6cdb31276d5a26dc.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + roles/{ComputeLiquidio.yaml => ComputeVdpa.yaml} | 22 +- roles/Controller.yaml | 7 +- roles/ControllerAllNovaStandalone.yaml | 7 +- roles/ControllerNoCeph.yaml | 7 +- roles/ControllerNovaStandalone.yaml | 7 +- roles/ControllerOpenstack.yaml | 7 +- roles/ControllerSriov.yaml | 7 +- roles/ControllerStorageDashboard.yaml | 7 +- roles/ControllerStorageNfs.yaml | 7 +- roles/DesignateBind.yaml | 42 + roles/Standalone.yaml | 7 +- roles/Undercloud.yaml | 7 +- roles_data.yaml | 7 +- roles_data_undercloud.yaml | 7 +- sample-env-generator/dcn.yaml | 2 +- sample-env-generator/enable-services.yaml | 12 +- sample-env-generator/nova-cell.yaml | 20 + sample-env-generator/openidc.yaml | 2 +- sample-env-generator/ssl.yaml | 221 +- sample-env-generator/standalone.yaml | 16 +- sample-env-generator/undercloud-minion.yaml | 17 +- scripts/check-run-nova-compute | 56 +- scripts/undercloud-upgrade-ephemeral-heat.py | 168 +- test-ansible-requirements.txt | 2 +- tools/convert_policy_yaml_to_heat_template.py | 73 + tools/convert_v1_net_data.py | 74 + tools/merge-new-params-nic-config-script.py | 2 - tools/process-templates.py | 2 +- tools/render-ansible-tasks.py | 11 +- tools/yaml-diff.py | 127 +- tools/yaml-validate.py | 154 +- tox.ini | 15 +- tripleo_heat_templates/environment_generator.py | 4 + vip_data_default.yaml | 8 + zuul.d/layout.yaml | 3 +- 372 files changed, 10682 insertions(+), 9560 deletions(-) Requirements updates -------------------- diff --git a/test-ansible-requirements.txt b/test-ansible-requirements.txt index 3e87cc19c..28fed0367 100644 --- a/test-ansible-requirements.txt +++ b/test-ansible-requirements.txt @@ -5 +5 @@ yaql>=1.1.3 # Apache 2.0 License -ansible>=2.8.6 # GPL +ansible-core<2.12 # GPL

1 0

tripleo-puppet-elements 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are tickled pink to announce the release of: tripleo-puppet-elements 15.1.0: Puppet building rules for OpenStack images. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 15.0.0..15.1.0 ------------------------------------------------- 8fb012a Remove zaqar c5645dd Remove mistral 1120718 Add octavia client to the installed packages for the overcloud-image 4d183e9 Add config for CentOS 9 in yum_plugin_priorities 67b6e40 Install yum plugin priorities only on centos7 and fedora 7d28c85 Install puppet-placement d08388a Remove unused puppet-timezone cb2011c Remove leftover of Sahara support 07ab035 Remove puppet modules for Sensu/Uchiwa support f7ba4bf Remove fluentd module 92fb7d0 Remove puppet-opendaylight 83a27ba Remove puppet-veritas_hypercale 4bde235 Remove puppetlabs-ntp c8b65cf Remove puppet-ec2 27864d5 Remove leftover of pankoclient 980bfd4 setup.cfg: Replace dashes with underscores ca01d75 Clear tox ini Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/pkg-map | 4 ++++ .../pre-install.d/01-install-yum-priorities | 2 +- .../package-installs-overcloud-openstack-clients | 4 +--- elements/overcloud-openstack-clients/pkg-map | 21 ++++++--------------- .../environment.d/01-puppet-module-pins.sh | 5 ++--- .../02-puppet-modules-install-types.sh | 12 +----------- .../puppet-modules/source-repository-puppet-modules | 12 +----------- setup.cfg | 8 ++++---- tox.ini | 2 +- 9 files changed, 21 insertions(+), 49 deletions(-)

1 0

ansible-role-collect-logs 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are delighted to announce the release of: ansible-role-collect-logs 1.4.0: ansible-role-collect-logs - An Ansible role for aggregating logs from different nodes. The source is available from: https://opendev.org/openstack/ansible-role-collect-logs Download the package from: https://tarballs.openstack.org/ansible-role-collect-logs/ For more details, please see below. Changes in ansible-role-collect-logs 1.3.0..1.4.0 ------------------------------------------------- 0f2adf2 Update url for sova query source bfef65d Upgrade ansible-lint/molecule runs c9358e2 Handling long file names in sova ed5c048 Add errors.txt in artcl_logstash_files cc6ff6f Refactor zuul jobs 4b54d97 Correct the tox option for skipping sdist generation 2f4efe8 add tempest_run.log to logstash 79f16c5 Add container update rpms info to collect logs c3483e8 Avoid using openstack constraints Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 ++ .pre-commit-config.yaml | 16 ++++---- .yamllint | 7 ---- MANIFEST.in | 10 ++++- galaxy.yml | 34 ++++++++++++---- plugins/modules/sova.py | 5 ++- requirements.yml | 2 + roles/collect_logs/defaults/main.yml | 1 + roles/collect_logs/files/collect-container-logs.sh | 11 +++++ roles/collect_logs/molecule/default/converge.yml | 4 +- roles/collect_logs/molecule/default/prepare.yml | 1 + roles/collect_logs/molecule/default/verify.yml | 2 +- roles/collect_logs/molecule/infrared/converge.yml | 2 + roles/collect_logs/molecule/infrared/molecule.yml | 2 + roles/collect_logs/molecule/infrared/verify.yml | 2 +- roles/collect_logs/molecule/sova/prepare.yml | 2 + roles/collect_logs/molecule/sova/verify.yml | 13 +++++- roles/collect_logs/tasks/collect.yml | 8 +++- roles/collect_logs/tasks/collect/container.yml | 8 +++- roles/collect_logs/tasks/collect/system.yml | 2 +- roles/collect_logs/tasks/create-docs.yml | 8 ++-- roles/collect_logs/tasks/publish.yml | 13 +++--- roles/collect_logs/tasks/publish_ara.yml | 4 +- roles/collect_logs/tasks/publish_ara_influxdb.yml | 3 ++ roles/collect_logs/tasks/sova.yml | 2 +- tox.ini | 27 ++++++++----- zuul.d/layout.yaml | 47 +++++++++------------- 29 files changed, 157 insertions(+), 84 deletions(-)

1 0

os-collect-config 13.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We contentedly announce the release of: os-collect-config 13.1.0: Collect and cache metadata, run hooks on changes. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 13.0.1..13.1.0 ------------------------------------------- 3a7d05a Drop six d1add68 Drop unused requirements a309852 Use py3 as the default runtime for tox 537440c setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- os_collect_config/cfn.py | 2 +- os_collect_config/zaqar.py | 3 +-- requirements.txt | 4 ---- setup.cfg | 6 +++--- tox.ini | 2 +- 7 files changed, 8 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c497bab..1ddb7c4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -anyjson>=0.3.3 # BSD -eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT @@ -12 +9,0 @@ requests>=2.14.2 # Apache-2.0 -iso8601>=0.1.11 # MIT @@ -16 +12,0 @@ oslo.log>=3.36.0 # Apache-2.0 -six>=1.10.0 # MIT

1 0

ansible-role-tripleo-modify-image 1.3.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We joyfully announce the release of: ansible-role-tripleo-modify-image 1.3.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.2.2..1.3.0 --------------------------------------------------------- 0b9fdcc Remove config of container_build_tool 81ca6b4 Remove docker modules from the role e4c84ad Extract updated rpms from buildah images b304c89 Only mount /etc/{{ pkg_mgr_suffix }}/vars if it exists Diffstat (except docs and test files) ------------------------------------- README.rst | 19 ------------ defaults/main.yml | 1 - meta/main.yml | 1 - tasks/get_original_user.yml | 57 ++++++++-------------------------- tasks/modify_image.yml | 11 ++++--- tasks/precheck.yml | 5 --- tasks/yum_install.yml | 4 --- tasks/yum_install_buildah.yml | 9 ++++++ tasks/yum_install_docker.yml | 57 ---------------------------------- tasks/yum_update.yml | 4 --- tasks/yum_update_buildah.yml | 28 +++++++++++++++++ tasks/yum_update_docker.yml | 71 ------------------------------------------- templates/yum_update.sh.j2 | 4 --- vars/main.yml | 6 ---- 14 files changed, 56 insertions(+), 221 deletions(-)

1 0

puppet-pacemaker 1.3.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are glad to announce the release of: puppet-pacemaker 1.3.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. 1.3.0 ^^^^^ New Features * Adds support for fence_kubevirt fencing agent. Changes in puppet-pacemaker 1.2.0..1.3.0 ---------------------------------------- fff6e02 Bump tag for release 99ac026 Make sure we test for Promoted when looking for constraints bc4cc78 Support fence_kubevirt apiversion parameter 744f3b7 Add support for fence_kubevirt fencing agent 4399c3a Fix up cluster_setup_extras usage 606d58c Remove old workarounds for broken crm_diff d513c63 Increase the scaleup/startup tries 531283e Fix spec tests using the deprecated pacemaker_restart_resource? function b0ea31a Update metadata to match released tag 8edbd64 setup.cfg: Replace dashes with underscores dc2ae86 Fix where long_description_content_type is placed Diffstat (except docs and test files) ------------------------------------- agent_generator/src_xml/fence_kubevirt.xml | 134 ++++++++++ agent_generator/variables.sh | 5 + lib/puppet/provider/pcmk_common.rb | 101 +------- lib/puppet/provider/pcmk_constraint/default.rb | 4 +- manifests/corosync.pp | 6 +- manifests/stonith/fence_kubevirt.pp | 274 +++++++++++++++++++++ metadata.json | 2 +- .../notes/fence_kubevirt-435249b87ac6c4a1.yaml | 4 + setup.cfg | 8 +- spec/unit/puppet/provider/pcmk_common_spec.rb | 55 ++--- 10 files changed, 448 insertions(+), 145 deletions(-)

1 0

python-tripleoclient 17.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are psyched to announce the release of: python-tripleoclient 17.1.0: TripleO client The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 17.1.0 ^^^^^^ Prelude ******* During a minor update of the overcloud. It was previously necessary to execute 3 steps. - Update Prepare - Update Run - Update Converge Starting in W, it is no longer necessary to perform a Stack update during the converge. This change removes the stack update from the converge step. Now, we will just run the deploy_steps_playbook instead. New Features ************ * Added options for "overcloud delete" command to unprovision networks provisioned with "overcloud deploy" or with "overcloud network provision". * The commands *openstack overcloud node import* and *openstack overcloud node configure* now have a --boot-mode arguement which allows the boot mode for all affected nodes to be set to UEFI boot (uefi) or legacy BIOS boot (bios). This allows some nodes to have a different boot mode to the default (uefi). * The "enable_mistral" parameter and the "enable_zaqar" parameter in undercloud/standalone deployment have been deprecated and will be removed in a future release. * Neutron resources for overcloud deployments on the undercloud is now managed with tooling external to the Heat stack. Networks and subnet resources as well as Virtual IPs for an overcloud can either be manged using separate commands or the all- in-one "overcloud deploy" by using the new network data YAML definition as "--networks-file" and the "--vip-file" arguments with this command. Overcloud node network ports are now managed by the baremetal node provisioning workflow. Baremeteal nodes, and the network resources, can be provisioned using the separate "overcloud node provision" command. Alternatively the all-in-one "overcloud deploy" command will run the baremetal node provisioning steps if the "--baremetal- deployment" argument is used. Please refer to the Networking Version 2 (Two) (https://docs.openstack.org/project-deploy-guide/tripleo- docs/latest/deployment/network_v2.html). documentation page for more details. * Undercloud is now deployed without keystone and deploys standalone openstack services with http_basic authentication. A new option 'enable_keystone' has been added to enable keystone in the undercloud if required. * An ephemeral Heat process is now used by default for overcloud deployment. On each overcloud management operation (deploy/update/upgrade), a containerized Heat process will be started, the stack will be created new, and then the Heat process will be stopped. The enable_heat option is undercloud.conf is now defaulted to False. * A new command "openstack overcloud ceph deploy" is added. The command is used to deploy Ceph after the hardware has been provisioned with networking and before the overcloud is deployed. The command takes the output of "openstack overcloud node provision" as input and returns a Heat enviornment file, e.g. deployed_ceph.yaml, as output. The deployed_ceph.yaml file may then be passed to the "openstack overcloud deploy" command as input. During overcloud deployment the Ceph cluster is then configured to host OpenStack. E.g. cephx keys and pools are still created on the Ceph cluster by "openstack overcloud deploy". Upgrade Notes ************* * The following two options have been removed. * "docker_registry_mirror" * "docker_insecure_registries" * The "container_cli" parameter no longer accepts "docker". Now only "podman" is accepted as a valid value. * The network data defintion used with the overcloud deployement must be updated to version 2. The undercloud upgrade will execute the command ("openstack overcloud network extract") to generate the network data definition for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud- deploy/<STACK_NAME>/tripleo-<STACK_NAME>-network-data.yaml". * A new YAML definition file for overcloud stack virtual IPs must be used. The undercloud upgrade will execute the command ("overcloud network vip extract") to generate this file for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud-deploy/< STACK_NAME>/tripleo-<STACK_NAME>-virtual-ips.yaml". * The baremetal node defintion has been extended to support neutron port resource managment, this requires additional input in the YAML definition used for baremetal node provisioning. The undercloud upgrade will execute the command ("overcloud node extract provisioned") to generate this file for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud- deploy/<STACK_NAME>/tripleo-<STACK_NAME>-baremetal- deployment.yaml.yaml". * keystone service would not be deployed by default in the undercloud. Deprecation Notes ***************** * The "--local" argument to the "openstack overcloud image upload" command has been deprecated and a "--no-local" argument has been added. Earlier we used to fallback to upload locally when glance was not available. As glance is not installed in the undercloud by default, we would upload images locally unless "--no-local" is used. * The "enable_novajoin" parameter in undercloud/standalone deployment has been deprecated. * To enable management of neutron resources external to Heat the network data YAML definition schema has been updated. The previous schema version has been deprecated, using the deprecated v1 schema is only possible when the deprecated non-ephemeral Heat on the Undercloud. * Managing netron resources for composable networks is now enabled by default when provisioning baremetal nodes. The option "--network- ports" has been deprecated, and is a NOOP until it is fully removed. * Setting enable_heat=True in undercloud.conf is deprecated. * Using --heat-type=installed is deprecated with the openstack overcloud commands. Other Notes *********** * Removed --standalone from *openstack tripleo deploy* command. Changes in python-tripleoclient 17.0.0..17.1.0 ---------------------------------------------- 06d55449 Deprecate and ignore --skip-nodes-and-networks 3d28153e Check for passwords at old path during tripleo deploy 4dbb4531 Drop minion 9ec11521 Drop python2 logic for upgrades 4d511679 Drop six d5457bfb Use real tmpdir for ansible runner tests f9e5d79f Remove ipxe_enabled ppc64le validation d66861b2 Remove --no-workflow option 5719f37e Release note for network-v2 51753617 Donot install policycoreutils-python for cs9 17fd85ab bnr enabled ramdisk as deploy interfaces on the ironic/undercloud e8d1da4b Update deployment status after upgrade converge 13a9ced0 Deprecate network data v1 definition 40d1be0a Remove zaqar 081922a6 Remove mistral b6a1b081 Return "overcloud status" output without debug 1d2c6981 Add `--heat-type` in overcloud delete 99d4ac50 Update overcloud deploy help for default heat type 5020a8a6 Fix update run for Ephemeral Heat 81cd1056 Dynamic defaults for roles, networks, vips and bm fb6daace Allow to pass arbitrary parameters to TCIB image config ae6958a8 Add --boot-mode to import and configure 3652fb41 Update default images for "tripleo launch heat" 0a4f9c7a Add network unprovision to overcloud delete 5cbc2b8e Remove --standalone option 9c2e909c Ensure directories exist before copying fdd98894 Eliminating a race condition in the export_stack function 2939ed85 New test case and documentation for the export_stack function. bc95bc6c Changing MD5 hash to SHA512 61e4f4c7 Introduce "openstack overcloud ceph deploy" 24ee6925 Enabling cover job in the zuul 812681dc Overriding the log path argument for tripleoclient cli 86381b4b Enable py38 test d3e63bc3 Remove reference to --network-ports 377c081f Workaround py36 encoding pip bug 7dd1f6e2 Fetch stack after updating it a3c726c2 Restore kernel and ramdisk arguments to node configure e6e90bd9 Check for neutron resources with ephemeral Heat b7b934b6 Update playbooks to use consistent working dir 12d9efbd Fix 'cell export' no attribute exception 6780cd74 Make the "success" message more "success"-like 98839093 Tidy up lingering todo's f1084284 Remove name parameter from cell export 0adc5bb9 Fix --stack-only to download ansible playbooks 253bd6e7 make net_config_override of undercloud.conf work with yaml d7e8bfb0 Enabling pylint no-else-return c455a414 Fail the overcloud deploy is ceph-ansible.yaml is included 1016c8c2 Tests for tripleo_config bdc976e4 Add --reproduce-command option for tripleo deploy efdefd92 Passes playbook to the validation action as a list 26213f3a Use 'all' for ANSIBLE_VARS_PLUGIN_STAGE 6a0adcbb Unmount heat-all tmpfs dir when done 0cde1bff Fix get_deployment_status() for ephemeral heat c5347fba Allow for cron programming of backups 3f6f67c1 Remove cyclic import between export and utils 817c8e33 Always write ansible-playbook-command.sh f0f1d271 Remove deprecation warnings for the role command 078f67ec Correct exception b7879044 Add option to enable keystone in undercloud b3bcf63f Deprecate --network-ports, enable it by default ee1990ef Remove redundant defaults e7a42695 Remove deprecated docker_* options 4ac60f88 Validate the container_cli option 86522255 Implement protected resource types 9c997ff0 Add '--templates' arg to node and net provision a586cb77 Honor role and networks file constants 56e3ca0d Update description of the templates option 8e861fa2 Move FakeFlavor class to fakes.py 92d11b96 Switch inventory to directory 5595057d Fix copying of deployment archive a9d4d523 Deprecate enable_novajoin 4de40a06 Deprecate enable_mistral and enable_zaqar 5f8bd778 Standalone: Remove undercloud from parameter descriptions 429055ef Use same config download method as overcloud for tripleo deploy e7680909 Unprovision composable networks command 952eb85a Option to disable Node, Net and VIP provisioning 2400624b Moving the 'export_data' dict into constants 915ddcb6 Image upload: handle whole-disk image as default 3f303b90 Always run growvols playbook after provision 268f638f Default Heat images to container image prepare defaults 761b791b Drop noauth_policy and use the default cc2ac4a8 Restoration of the 'export_passwords' exclusion 4cf79c5c Copy the deployment archive to /var/lib/tripleo 10722b5f Deprecate overcloud image upload to glance e895c326 Use {{role.name}}Services parameters 9facf538 Drop deprecated "macs" field in nodes_json 654331cc Trigger Validation on standalone job with tripleo CLI command 8df2e97d Use upper constraints with install command 05b47bc0 overcloud deploy - net ports with baremetal deploy c3a8abfd Make 'ansible_playbooks' pre-network config only ef077696 overcloud deploy - provision virtual ips 28722a7b Drop mistralclient from requirements 030e9f0b Use ephemeral Heat by default 8de4d4a3 Fix overcloud node provide 91fa0eeb Only use undercloud.conf ipxe_enabled for inspection 299276e7 Check for the service queue with ephemeral heat dc8b39ad Refactor _validate_args and _update_args_from_answers_file bf03fe4a Simplify validate_args_environment_dir f44c7e25 Move copy_env_files to utils 83328357 Move build_image_params to utils 8ba7a7a8 Move get_undercloud_host_entry to utils 864eae15 Adding EndpointNotFound exception during scale_down a792bbd8 Add --db-only option in undercloud_backup. Diffstat (except docs and test files) ------------------------------------- .pylintrc | 1 - bindep.txt | 2 +- ...rovision-overcloud-delete-5c36ff706ab809ea.yaml | 5 + releasenotes/notes/boot_mode-ef25d1a032dcae56.yaml | 7 + .../cleanup-docker_opts-65aa01111417cadb.yaml | 7 + .../notes/container_cli-803238248de9c60a.yaml | 5 + ...ecate-glance-image-upload-ef23d3078f430ccf.yaml | 9 + ...precate-mistral-and-zaqar-aee14846fe3662d7.yaml | 6 + .../notes/deprecate-novajoin-6493fa10ee3e09cf.yaml | 5 + ...eprecated-network-data-v1-f1490ba769f6aa7a.yaml | 54 ++ ...sable-keystone-by-default-ee9cb13ee2e37f9f.yaml | 8 + ...ephemeral-heat-by-default-4ed05e8b82f41c4b.yaml | 10 + ...hemeral-heat-minor-update-db24c2f190c1c8a7.yaml | 10 + .../overcloud_ceph_deploy-485f59b64eb93c70.yaml | 11 + .../notes/remove-no-workflow-b3ad07729d3768d1.yaml | 8 + ...emove-standalone-paramter-e7f4d978c7f6261c.yaml | 4 + requirements.txt | 4 +- setup.cfg | 5 +- templates/ephemeral-heat/heat-pod.yaml.j2 | 11 +- templates/ephemeral-heat/heat.conf.j2 | 3 - tox.ini | 33 +- tripleoclient/command.py | 34 +- tripleoclient/config/minion.py | 158 ----- tripleoclient/config/standalone.py | 81 ++- tripleoclient/config/undercloud.py | 15 +- tripleoclient/constants.py | 86 ++- tripleoclient/export.py | 118 ++-- tripleoclient/heat_launcher.py | 116 ++-- tripleoclient/noauth_policy.json | 93 --- tripleoclient/plugin.py | 73 --- .../v1/overcloud_deploy/test_overcloud_deploy.py | 463 ++++++++++----- .../test_overcloud_external_update.py | 4 +- .../test_overcloud_external_upgrade.py | 4 +- .../v1/overcloud_image/test_overcloud_image.py | 244 ++++++-- .../v1/overcloud_update/test_overcloud_update.py | 51 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 12 +- .../test_tripleo_container_image.py | 4 +- .../minion => v2/overcloud_ceph}/__init__.py | 0 .../v2/overcloud_delete/test_overcloud_delete.py | 37 +- .../v2/overcloud_network/test_overcloud_network.py | 48 +- tripleoclient/utils.py | 652 +++++++++++++++++---- tripleoclient/v1/container_image.py | 6 +- tripleoclient/v1/minion_config.py | 421 ------------- tripleoclient/v1/overcloud_admin.py | 15 + tripleoclient/v1/overcloud_backup.py | 24 +- tripleoclient/v1/overcloud_cell.py | 15 +- tripleoclient/v1/overcloud_deploy.py | 633 +++++++++++--------- tripleoclient/v1/overcloud_export.py | 4 +- tripleoclient/v1/overcloud_external_update.py | 6 - tripleoclient/v1/overcloud_external_upgrade.py | 6 - tripleoclient/v1/overcloud_image.py | 89 ++- tripleoclient/v1/overcloud_netenv_validate.py | 11 +- tripleoclient/v1/overcloud_node.py | 34 +- tripleoclient/v1/overcloud_roles.py | 13 +- tripleoclient/v1/overcloud_update.py | 125 ++-- tripleoclient/v1/overcloud_upgrade.py | 29 +- tripleoclient/v1/tripleo_deploy.py | 115 ++-- tripleoclient/v1/tripleo_launch_heat.py | 21 +- tripleoclient/v1/tripleo_validator.py | 7 + tripleoclient/v1/undercloud.py | 12 +- tripleoclient/v1/undercloud_backup.py | 90 ++- tripleoclient/v1/undercloud_config.py | 83 ++- tripleoclient/v1/undercloud_minion.py | 162 ----- tripleoclient/v1/undercloud_preflight.py | 9 +- tripleoclient/v2/overcloud_ceph.py | 272 +++++++++ tripleoclient/v2/overcloud_delete.py | 44 +- tripleoclient/v2/overcloud_network.py | 106 +++- tripleoclient/v2/overcloud_node.py | 120 ++-- tripleoclient/v2/tripleo_container_image.py | 28 +- tripleoclient/workflows/baremetal.py | 57 +- tripleoclient/workflows/deployment.py | 82 +-- tripleoclient/workflows/parameters.py | 42 +- tripleoclient/workflows/roles.py | 12 +- tripleoclient/workflows/scale.py | 3 +- zuul.d/layout.yaml | 21 +- 102 files changed, 3997 insertions(+), 3010 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0176d8ce..7299c5bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +10,0 @@ python-ironicclient!=2.5.2,!=2.7.1,!=3.0.0,>=2.3.0 # Apache-2.0 -python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0 @@ -14 +12,0 @@ simplejson>=3.5.1 # MIT -six>=1.10.0 # MIT @@ -19 +17 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.4 # Apache-2.0 +validations-libs>=1.2.0 # Apache-2.0

1 0

os-net-config 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We exuberantly announce the release of: os-net-config 15.1.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.0.0..15.1.0 --------------------------------------- 6dc407b Drop six 3c8d3d6 Drop unused requirements 70ed002 Updating sriov_config.service to run before driverctl.slice and network-pre fcf3d9c Update sriov config service to handle nic partitioned PF 1ae0254 Allow linux tap to use routes 178564d allow vhost0 to pass list of members 5f27e09 Replace deprecated import of ABCs from collections baab05e vdpa: Introducing the vdpa PF flag 380254e sriov_config: light refactoring 8a053a2 Avoid creating multiple entries of udev rules 4d351d4 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + etc/os-net-config/samples/vdpa.json | 28 +++ etc/os-net-config/samples/vdpa.yaml | 31 +++ os_net_config/impl_ifcfg.py | 15 +- os_net_config/objects.py | 18 +- os_net_config/schema.yaml | 3 +- os_net_config/sriov_config.py | 354 ++++++++++++++++----------- os_net_config/utils.py | 38 ++- os_net_config/validator.py | 7 +- requirements.txt | 4 - setup.cfg | 8 +- 16 files changed, 855 insertions(+), 240 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index abf39eb..856c111 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ pbr>=2.0.0 # Apache-2.0 -anyjson>=0.3.3 # BSD -six>=1.9.0 # MIT -eventlet!=0.18.3,>=0.18.2 # MIT -iso8601>=0.1.11 # MIT

1 0

os-apply-config 13.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We jubilantly announce the release of: os-apply-config 13.1.0: Config files from cloud metadata The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 13.0.1..13.1.0 ----------------------------------------- 474068e Drop six 52fab1e Drop anyjson c1165f2 Use py3 as the default runtime for tox 671b7d6 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- os_apply_config/oac_file.py | 8 +++----- requirements.txt | 2 -- setup.cfg | 6 +++--- tox.ini | 2 +- 4 files changed, 7 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4e573f1..185a539 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -anyjson>=0.3.3 # BSD @@ -9 +7,0 @@ PyYAML>=3.12 # MIT -six>=1.10.0 # MIT

1 0

python-ironicclient 4.9.0 (yoga)
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are thrilled to announce the release of: python-ironicclient 4.9.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironicclient For more details, please see below. 4.9.0 ^^^^^ New Features ************ * Adds support for fields selector in driver cli. See story 1674775 (https://storyboard.openstack.org/#!/story/1674775) * "openstack baremetal driver list --fields <field> [<field> ...]" * "openstack baremetal driver show <driver_name> --fields <field> [<field> ...]" Bug Fixes ********* * Embedded configuration drive generation support has been updated to support "mkisofs" and "xorrisofs" in adition to the previously supported "genisoimage" utility. This is as distributions such as Debian and OpenSUSE do not ship "genisoimage". Changes in python-ironicclient 4.8.0..4.9.0 ------------------------------------------- 0555b6b Fix distribution compatability for configdrive build bc642cc Add Python3 yoga unit tests dadc6c4 Update master for stable/xena 920f510 Add support for fields in drivers CLI Diffstat (except docs and test files) ------------------------------------- ironicclient/common/http.py | 2 +- ironicclient/common/utils.py | 34 +++--- ironicclient/osc/v1/baremetal_driver.py | 38 ++++++- ironicclient/v1/driver.py | 15 ++- ...river-cli-fields-selector-b0f527eb5f6fb2a9.yaml | 9 ++ ...ss-cross-distro-iso-tools-006711c9f150037a.yaml | 7 ++ releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++ zuul.d/project.yaml | 2 +- 12 files changed, 280 insertions(+), 25 deletions(-)

1 0

python-ironicclient 4.8.1 (xena)
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We joyfully announce the release of: python-ironicclient 4.8.1: OpenStack Bare Metal Provisioning API Client Library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironicclient For more details, please see below. 4.8.1 ^^^^^ Bug Fixes * Embedded configuration drive generation support has been updated to support "mkisofs" and "xorrisofs" in adition to the previously supported "genisoimage" utility. This is as distributions such as Debian and OpenSUSE do not ship "genisoimage". Changes in python-ironicclient 4.8.0..4.8.1 ------------------------------------------- f6a0c96 Fix distribution compatability for configdrive build 3db05b7 Update TOX_CONSTRAINTS_FILE for stable/xena 0cd0f2a Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironicclient/common/utils.py | 34 +++++++++++------ ...ss-cross-distro-iso-tools-006711c9f150037a.yaml | 7 ++++ tox.ini | 8 ++-- 5 files changed, 74 insertions(+), 19 deletions(-)

1 0

stevedore 3.5.0 (yoga)
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are ecstatic to announce the release of: stevedore 3.5.0: Manage dynamic plugins for Python applications This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. Changes in stevedore 3.4.0..3.5.0 --------------------------------- 442f157 Add Python3 yoga unit tests ba9469f Update master for stable/xena 11da137 Rely on member access, the preferred access since importlib_metadata 4.8. Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ stevedore/_cache.py | 2 +- 4 files changed, 9 insertions(+), 2 deletions(-)

1 0

oslo.vmware 3.10.0 (yoga)
by no-reply＠openstack.org 15 Oct '21

15 Oct '21

We are pleased to announce the release of: oslo.vmware 3.10.0: Oslo VMware library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. Changes in oslo.vmware 3.9.1..3.10.0 ------------------------------------ 7bc3431 Replace suds-jurko with suds-community e991194 Don't use 'requests.PreparedRequest' a34a95b Add Python3 yoga unit tests a2e76d6 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ requirements.txt | 2 +- 5 files changed, 11 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b4ef5f4..924e1d6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17 +17 @@ lxml>=4.5.0 # BSD -suds-jurko>=0.6 # LGPLv3+ +suds-community>=0.6 # LGPLv3+

1 0

kolla 13.0.0.0rc1 (xena)
by no-reply＠openstack.org 14 Oct '21

14 Oct '21

Hello everyone, A new release candidate for kolla for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla/src/branch/stable/xena Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *xena-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 13.0.0.0rc1 (xena)
by no-reply＠openstack.org 14 Oct '21

14 Oct '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Xena cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Xena release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/xena release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/xena Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *xena-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

tripleo-upgrade 8.0.0
by no-reply＠openstack.org 13 Oct '21

13 Oct '21

We are ecstatic to announce the release of: tripleo-upgrade 8.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 7.0.0..8.0.0 --------------------------------------- fefc4b8 Fix update tasks for Ephemeral Heat b4926fc Add extra_args to update prepare and converge 1d274dd Add different migration actions based on guest fddb8f2 Move pre overcloud upgrade task 0ee1f0d Move build_extra_template before upgrade prepare 5d1bf94 Allow applying workaround patches in containers. 53861a4 Improve node_upgrade_pre.sh 15f4fc5 Make the gerrit_url of patches configurable f5621f6 Run Ceph upgrade only once. df68e50 Replace LEAPP_DEVEL_SKIP_RHSM with LEAPP_NO_RHSM ef5bfc5 Move the upgrade prepare script generation in the build script playbook. 3c5a3f0 [FFWD upgrade] Adding support in compute name pattern 0894867 Fix ansible-lint E206 issues 2a3cbb7 Refactor workload script 7c1df13 [FFWD upgrade pre] Add support in cold evacuate da2dd1e Do not run job on .pre-commit-config.yaml changes 90ef262 Remove unicode prefix 523d09a Remove additional dependency from pre-commit dd671ed Remove xinetd when leapp upgrading the Undercloud. 0bb8f85 Bump dogpile to >=0.9.2 842265a Skip evacuations for non-compute nodes d8443e2 Bump test-requirements.txt 1f6fcc8 Correct the tox option for skipping sdist generation 8c50d3e Set config_heat_extra_yaml before building converge script. 1fe2499 Make --config-heat available for FFWD automation. bcdd006 Add validations_result when running validations. 0b06700 Switch off evacute for 1 compute topology f5bd463 Publish validations-extra-args parameter in infrared plugin. be2a296 Add mechanism to skip certain validations. d108e1d Support using ephemeral Heat 656e123 Take into account the validations return code. 32e3a9d Add STACK_NAME in OSP13 validations script. 6fb29a0 Move FFU validations to right playbook. 4458ab6 [ffwd] Allow users to replace environment files 0648346 Bump Cirros to 0.5.2 c945f00 Add logic to execute validation groups in updates/upgrades. 4791bde Add setuptools in requirements file. 6f451e6 [update] Fix validation command line option for infrared. aac7c99 Add validations to updates. 4d62092 Add failsafe to l3_agent_stop_ping.sh.j2 when only one packet is lost e69df3d Improve curl download 0e1398a Remove master undercloud and scen0 overcloud upgrade from layout b9882be [live-migration] Count all hosts from all tenants for migration timeout 7505e31 Revert "Add wait_for_connection check after system_upgrade" 9ab549d Handle errors on system upgrade 95cec68 Add doc/requirements 87c31a9 [ffwd] Don't run healthcheck on redis if it's not present c4193ad [ffwd] Disable scheduling on computes before upgrade 5ddecd4 Host evacuate dynamic limit 972faa2 Update zuul layout with content provider jobs + improve coverage 2766cfa Fix merge-new-params-nic-config-script.py: error: argument -n/--network-data: expected one argument a87fcb7 Improve ping test coverage during update. 19e5086 Add the -n flag in the run parameters conversion script b8d3218 [FFWD] Propose a fix for node_upgrade_pre.sh.j2 81ac511 Add wait_for_connection check after system_upgrade 64047dd Update master for stable/victoria 1d460e5 Cleanup leftovers. e9fcfeb FFWD2: cleanup converge fd02f28 Rename containers prepare parameters tag for ffu. 20df115 Remove _stein _ceph3 parameters before converge. Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 - README.rst | 7 +- defaults/main.yml | 50 ++++++++- infrared_plugin/main.yml | 37 ++++++- infrared_plugin/plugin.spec | 42 +++++++- molecule/molecule-requirements.txt | 3 +- releasenotes/source/conf.py | 16 +-- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++ requirements.txt | 3 +- tasks/common/auxilary-facts.yaml | 19 +++- tasks/common/convert_nic_template.yaml | 1 + .../create_l3_agent_connectivity_check_script.yml | 10 +- .../l3_agent_connectivity_check_start_script.yml | 6 ++ tasks/common/replace_environment_file.yaml | 19 ++++ tasks/common/replace_environment_files.yaml | 4 + tasks/common/undercloud_os_upgrade.yaml | 3 +- tasks/common/undercloud_validate_upgrade.yaml | 4 +- tasks/common/validation_group_run.yaml | 53 ++++++++++ .../create-overcloud-ffu-hosts-scripts.yaml | 8 +- .../create-overcloud-ffu-scripts.yaml | 14 +++ .../create-undercloud-ffu-scripts.yaml | 7 ++ .../ffu_update_stack_outputs.yaml | 28 ----- tasks/fast-forward-upgrade/ffu_upgrade_ceph.yaml | 11 +- .../fast-forward-upgrade/ffu_upgrade_converge.yaml | 8 +- tasks/fast-forward-upgrade/main.yml | 86 +++++++++++++--- .../overcloud_upgrade_hosts.yaml | 24 ++++- .../undercloud_os_upgrade.yaml | 29 ------ tasks/fast-forward-upgrade/undercloud_upgrade.yaml | 31 ------ tasks/update/create-overcloud-update-scripts.yaml | 11 -- tasks/update/main.yml | 60 +++++++---- tasks/update/overcloud_update_converge.yml | 24 ++--- tasks/update/overcloud_update_prepare.yml | 10 +- tasks/update/overcloud_update_run.yml | 9 -- tasks/update/overcloud_update_run_role.yml | 8 ++ tasks/upgrade/controller_node_upgrade.yml | 6 ++ .../upgrade/create-overcloud-upgrade-scripts.yaml | 15 +++ tasks/upgrade/main.yml | 31 ++++-- tasks/upgrade/node_upgrade_script.yml | 6 +- tasks/upgrade/overcloud_upgrade_converge.yml | 26 ++++- tasks/upgrade/overcloud_upgrade_prepare.yml | 52 +++------- .../overcloud_system_upgrade.sh.j2 | 16 ++- templates/l3_agent_start_ping.sh.j2 | 11 -- templates/l3_agent_stop_ping.sh.j2 | 10 +- templates/l3_agent_wait_ping.sh.j2 | 26 +++++ templates/node_upgrade_pre.sh.j2 | 113 +++++++++++++++++++-- templates/overcloud_update_converge.sh.j2 | 54 ---------- templates/overcloud_update_prepare.sh.j2 | 4 + templates/overcloud_upgrade_converge.sh.j2 | 9 +- templates/overcloud_upgrade_prepare.sh.j2 | 6 ++ templates/pre-upgrade-osp13-validation.sh.j2 | 30 ++++++ templates/workarounds.sh.j2 | 53 ++++++++-- templates/workload_launch.sh.j2 | 66 ++++++++---- test-requirements.txt | 9 +- tox.ini | 4 +- zuul.d/layout.yaml | 45 +++++++- 59 files changed, 945 insertions(+), 396 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ac56c37..5601f82 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,2 @@ -pbr>=1.6 +pbr>=1.6 # Apache-2.0 +setuptools>=50.3.0 # MIT License diff --git a/test-requirements.txt b/test-requirements.txt index 1f4b542..95359da 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,6 +4,3 @@ -sphinx>=2.0.0,!=2.1.0 # BSD -pre-commit==1.13.0 # MIT License -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -bashate>=0.5.1 # Apache-2.0 -openstackdocstheme>=2.2.1 # Apache-2.0 -reno>=3.1.0 # Apache-2.0 +pre-commit>=2.0.0 # MIT License +hacking>=4.0.0 # Apache-2.0 +bashate>=2.0.0 # Apache-2.0

1 0

neutron-lib 2.16.0 (yoga)
by no-reply＠openstack.org 13 Oct '21

13 Oct '21

We are jazzed to announce the release of: neutron-lib 2.16.0: Neutron shared routines and utilities This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.16.0 ^^^^^^ New Features ************ * Add an API extension "local-ip" that enables users to create Local IP resource which is a shared virtual IP address that could be assigned to multiple ports and is guaranteed to only be reachable within the same physical server/node boundaries. * Add API extension "quota-check-limit". This is a shim extension that indicates if Neutron supports checking the resource usage before applying a new quota limit. A new API parameter "check_limit" is introduced; it can be used in the "quota" update request to enable this check. * Added "QuotaDriverAPI" abstract class. This class is the API to create any Neutron Quota engine driver. Other Notes *********** * The deprecated method neutron_lib.callbacks.registry.notify()`` and "neutron_lib.callbacks.manager.CallbacksManager.notify()" has been removed in favor of their "publish()" counterparts Changes in neutron-lib 2.15.0..2.16.0 ------------------------------------- 2ebb6d4 Rehome ``QuotaDriverAPI`` class e686f3d Add default values in port forwarding port ranges definitions c266a3e Bump requirements and disable f-string check ecb6313 Remove deprecated method registry.notify 06a685d Add Python3 yoga unit tests 0867e90 Update master for stable/xena 14df805 Add API shim extension "quota-check-limit" cb2dd61 Set "cache_ok=True" in all "TypeDecorator" derived classes 64e4dc2 Improve "get_collection_count" method 670f83b Fix some api-ref typos 5e9ced2 Add Local IP constants and exceptions 07e3de1 Add Local IP API def Diffstat (except docs and test files) ------------------------------------- .pylintrc | 1 + .zuul.yaml | 2 +- api-ref/source/v2/bfd_monitors.inc | 5 +- api-ref/source/v2/bgp_peer.inc | 2 +- api-ref/source/v2/bgp_speaker.inc | 2 +- api-ref/source/v2/firewall_log.inc | 4 +- api-ref/source/v2/local-ips.inc | 425 +++++++++++++++++++++ api-ref/source/v2/logging_resource.inc | 4 +- api-ref/source/v2/parameters.yaml | 211 ++++++++++ api-ref/source/v2/qos.inc | 30 +- api-ref/source/v2/quotas.inc | 1 + .../local-ip-list-associations-response.json | 18 + .../samples/local_ips/local-ips-list-response.json | 30 ++ .../samples/local_ips/local_ip-create-request.json | 9 + .../local_ips/local_ip-create-response.json | 15 + .../samples/local_ips/local_ip-show-response.json | 15 + .../samples/local_ips/local_ip-update-request.json | 6 + .../local_ips/local_ip-update-response.json | 15 + .../local_ip_association-create-request.json | 6 + .../local_ip_association-create-response.json | 9 + .../v2/samples/quotas/quotas-update-request.json | 3 +- lower-constraints.txt | 2 +- neutron_lib/api/definitions/__init__.py | 4 + neutron_lib/api/definitions/base.py | 1 + neutron_lib/api/definitions/fip_pf_port_range.py | 12 +- neutron_lib/api/definitions/local_ip.py | 156 ++++++++ neutron_lib/api/definitions/quota_check_limit.py | 27 ++ neutron_lib/callbacks/manager.py | 29 +- neutron_lib/callbacks/registry.py | 6 - neutron_lib/callbacks/resources.py | 1 + neutron_lib/constants.py | 1 + neutron_lib/db/model_query.py | 8 +- neutron_lib/db/quota_api.py | 169 ++++++++ neutron_lib/db/sqlalchemytypes.py | 8 +- neutron_lib/exceptions/local_ip.py | 49 +++ neutron_lib/objects/common_types.py | 65 ++++ .../unit/api/definitions/test_quota_check_limit.py | 20 + neutron_lib/worker.py | 2 +- .../add-local-ip-extension-fb4a18f5a6525f1f.yaml | 7 + ...check-limit-api-extension-8e39299644d41f74.yaml | 7 + ..._QuotaDriverAPI_abc_class-1d02d0823a8886a1.yaml | 5 + .../remove-registry-notify-76a2f6eb6bbf41bf.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + 50 files changed, 1437 insertions(+), 121 deletions(-)

1 0

os-ken 2.2.0 (yoga)
by no-reply＠openstack.org 12 Oct '21

12 Oct '21

We are psyched to announce the release of: os-ken 2.2.0: A component-based software defined networking framework for OpenStack. This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 2.1.0..2.2.0 ------------------------------ 2e8cf5be app/ofctl: fix possible deadlock f4e5e04a app/ofctl: fix possible deadlock when the datapath disconnects 1a66f17d Add Python3 yoga unit tests c88f3d80 Update master for stable/xena Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- os_ken/app/ofctl/service.py | 36 ++++++++++++++++++++++++++++++++---- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ 4 files changed, 40 insertions(+), 5 deletions(-)

1 0

nova 21.2.3 (ussuri)
by no-reply＠openstack.org 07 Oct '21

07 Oct '21

We high-spiritedly announce the release of: nova 21.2.3: Cloud computing fabric controller This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 21.2.3 ^^^^^^ Security Issues *************** * A vulnerability in the console proxies (novnc, serial, spice) that allowed open redirection has been patched. The novnc, serial, and spice console proxies are implemented as websockify servers and the request handler inherits from the python standard SimpleHTTPRequestHandler. There is a known issue in the SimpleHTTPRequestHandler which allows open redirects by way of URLs in the following format: http://vncproxy.my.domain.com//example.com/%2F.. which if visited, will redirect a user to example.com. The novnc, serial, and spice console proxies will now reject requests that pass a redirection URL beginning with "//" with a 400 Bad Request. (https://bugs.launchpad.net/nova/+bug/1927677) (https://bugs.python.org/issue32084) Bug Fixes ********* * Addressed an issue that prevented instances with 1 vcpu using multiqueue feature from being created successfully when their vif_type is TAP. Changes in nova 21.2.2..21.2.3 ------------------------------ 5ded5d8050 [stable-only] Set lower-constraints job as non-voting 0997043f45 address open redirect with 3 forward slashes fa0ad18619 Fix 1vcpu error with multiqueue and vif_type=tap d43b88a334 Reduce mocking in test_reject_open_redirect for compat 719e651e6b Reject open redirection in the console proxy 59249697bf Initialize global data separately and run_once in WSGI app init 91314f7fbb Move 'check-cherry-picks' test to gate, n-v check b96f93ed86 Honor [neutron]http_retries in the manual client 637402eec7 guestfs: With libguestfs >= v1.41.1 decode returned bytes to string 8a858eca55 Dynamically archive FK related records in archive_deleted_rows 37cff3c74d Add functional test for bug 1837995 a8624cdaa2 Centralize sqlite FK constraint enforcement Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 19 +- nova/api/openstack/wsgi_app.py | 24 ++- nova/console/websocketproxy.py | 18 ++ nova/db/sqlalchemy/api.py | 221 ++++++++++++++------- nova/network/neutron.py | 1 + nova/test.py | 23 +++ nova/utils.py | 46 +++++ nova/virt/disk/api.py | 4 +- nova/virt/disk/vfs/guestfs.py | 9 +- nova/virt/libvirt/vif.py | 3 +- .../notes/bug-1939604-547c729b7741831b.yaml | 5 + ...roxy-reject-open-redirect-4ac0a7895acca7eb.yaml | 19 ++ tools/check-cherry-picks.sh | 5 - tox.ini | 12 +- 23 files changed, 676 insertions(+), 146 deletions(-)

1 0

reno 3.5.0
by no-reply＠openstack.org 07 Oct '21

07 Oct '21

We are jazzed to announce the release of: reno 3.5.0: RElease NOtes manager The source is available from: https://opendev.org/openstack/reno Download the package from: https://pypi.org/project/reno For more details, please see below. 3.5.0 ^^^^^ New Features ************ * The "reno.scanner.Scanner" and "reno.loader.Loader" classes can now be used as context managers. For example: import reno.scannner with reno.scanner.Scanner(...) as scanner: pass This will ensure any open files pertaining to the scanned Git repo are correctly closed, avoiding "ResourceWarning" instances otherwise seen. A "close()" method is also provided for both, allowing use outside of context managers. For example: import reno.loader loader = reno.loader.Loader(...) try: pass finally: loader.close() Bug Fixes ********* * Instances of "reno.scanner.Scanner" and "reno.loader.Loader" will now corectly close all open files related to the scanned Git repo when the "close()" method is called. Alternatively, these classes may be used as a context manager. Previously, Python would attempt to close these files itself, resulting in a "ResourceWarning" warning being emitted. Changes in reno 3.4.0..3.5.0 ---------------------------- cd31b90 Close files opened by Scanner, Loader Diffstat (except docs and test files) ------------------------------------- ...r-loader-context-managers-5d80d95dc3d33fe0.yaml | 31 ++ reno/cache.py | 86 +++-- reno/linter.py | 26 +- reno/lister.py | 24 +- reno/loader.py | 38 ++- reno/report.py | 28 +- reno/scanner.py | 10 + reno/semver.py | 131 ++++---- reno/setup_command.py | 16 +- reno/sphinxext.py | 33 +- 13 files changed, 435 insertions(+), 360 deletions(-)

1 0