April 2021 - Release-announce - lists.openstack.org

puppet-murano 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are gleeful to announce the release of: puppet-murano 18.4.0: Puppet module for OpenStack Murano This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features * The new "murano::policy::enforce_scope" parameter has been added to support the corresponding parameter in oslo.policy library. * The new "murano::policy::enforce_new_defaults" parameter has been added. Changes in puppet-murano 18.3.0..18.4.0 --------------------------------------- 8ceb65b Update sphinx to the latest version b3b7a02 Prepare Wallaby RC1 0139777 Add support for oslo_policy/enforce_new_defaults 051adc9 Update supported Ubuntu version to Focal d5bd4ee Add support for the oslo_policy/enforce_scope parameter Diffstat (except docs and test files) ------------------------------------- manifests/policy.pp | 21 ++++++++++++++++++--- metadata.json | 10 +++++----- .../oslo_policy-enforce_scope-4c3d595d52747dfa.yaml | 5 +++++ ...olicy-enforce_new_defaults-0e7f85bf996ea5c4.yaml | 5 +++++ spec/classes/murano_policy_spec.rb | 17 ++++++++++------- 6 files changed, 44 insertions(+), 16 deletions(-)

1 0

puppet-octavia 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We jubilantly announce the release of: puppet-octavia 18.4.0: Puppet module for OpenStack Octavia This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features * Support for the "[haproxy_amphora] build_rate_limit" parameter has been added. * The new "octavia::api::healthcheck_enabled" parameter has been added. * The new "octavia::healthcheck" class has been added. This class manages parameters of healthcheck middlware in oslo.middleware. * The new "octavia::controller::image_driver" parameter has been added. * The new "octavia::policy::enforce_scope" parameter has been added to support the corresponding parameter in oslo.policy library. * The new "octavia::policy::enforce_new_defaults" parameter has been added. * The new "octavia::cinder" class has been added. This class manages parameters of the "[cinder]" section. * The new "octavia::controller::volume_type" parameter has been added. Changes in puppet-octavia 18.3.0..18.4.0 ---------------------------------------- 0ff9baf Update sphinx to the latest version 793451b Prepare Wallaby RC1 ee4a365 Add support for oslo_policy/enforce_new_defaults ef758a1 Update supported Ubuntu version to Focal e056d8d Add puppetlabs-apache to dependencies 6f8059f Add support for the oslo_policy/enforce_scope parameter 9084b42 Add support for [controller_worker] image_driver ebf7fdc Add support for volume based amphora c0a4917 Do not redefine default drivers fed08d5 Add support for [haproxy_amphora] build_rate_limit 66604db Add support for healthcheck middleware options Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 6 ++ manifests/cinder.pp | 74 ++++++++++++++++++++++ manifests/controller.pp | 31 +++++++-- manifests/healthcheck.pp | 41 ++++++++++++ manifests/policy.pp | 21 +++++- metadata.json | 16 +++-- .../notes/build_rate_limit-7da036d02e5ccea8.yaml | 5 ++ .../notes/healthcheck-50bfeb1b2523b307.yaml | 8 +++ .../notes/image_driver-37560e3159ece607.yaml | 4 ++ ...oslo_policy-enforce_scope-97ad3dc14b829db2.yaml | 5 ++ ...licy-enforce_new_defaults-ca7f1e7e532fad43.yaml | 5 ++ .../volume-based-amphora-62f3429adad36962.yaml | 8 +++ spec/classes/octavia_api_spec.rb | 13 ++++ spec/classes/octavia_cinder_spec.rb | 63 ++++++++++++++++++ spec/classes/octavia_controller_spec.rb | 15 ++++- spec/classes/octavia_healthcheck_spec.rb | 55 ++++++++++++++++ spec/classes/octavia_policy_spec.rb | 17 +++-- 18 files changed, 363 insertions(+), 26 deletions(-)

1 0

puppet-horizon 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are psyched to announce the release of: puppet-horizon 18.4.0: Puppet module for OpenStack Horizon This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. Changes in puppet-horizon 18.3.0..18.4.0 ---------------------------------------- c6969aa Update sphinx to the latest version 5335f70 Prepare Wallaby RC1 481cc4c metadata.json: debian 11 77523c3 Update supported Ubuntu version to Focal 58ed7e9 Update description about policy settings Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- templates/local_settings.py.erb | 26 ++++++++++++++++++++------ 3 files changed, 25 insertions(+), 11 deletions(-)

1 0

puppet-manila 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are psyched to announce the release of: puppet-manila 18.4.0: Puppet module for OpenStack Manila This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features * The new "manila::policy::enforce_scope" parameter has been added to support the corresponding parameter in oslo.policy library. * The new "manila::policy::enforce_new_defaults" parameter has been added. Changes in puppet-manila 18.3.0..18.4.0 --------------------------------------- 588b9db Update sphinx to the latest version 95bee23 Prepare Wallaby RC1 5f25899 Add support for oslo_policy/enforce_new_defaults 3b2ff1e Update supported Ubuntu version to Focal 86d7408 Bump requirement of puppetlabs-apache a763ef2 Add support for the oslo_policy/enforce_scope parameter Diffstat (except docs and test files) ------------------------------------- manifests/policy.pp | 21 ++++++++++++++++++--- metadata.json | 14 +++++++------- .../oslo_policy-enforce_scope-4c21242c59e863ff.yaml | 5 +++++ ...olicy-enforce_new_defaults-533e1cd72745c6cc.yaml | 5 +++++ spec/classes/manila_policy_spec.rb | 17 ++++++++++------- 6 files changed, 46 insertions(+), 18 deletions(-)

1 0

tripleo-validations 13.2.0 (victoria)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are happy to announce the release of: tripleo-validations 13.2.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.2.0 ^^^^^^ New Features * Introducing the overcloud_service_status role. This role will hit the overcloud API for nova and cinder, retrieve the services and will trig a failure if one of these services are either down or deprecated. The original intent was to validate that nova- consoleauth was deleted after an update to RHOSP16. Changes in tripleo-validations 13.1.0..13.2.0 --------------------------------------------- d2904eb Remove linters dependency from content-provider in gate 2896ce0 Optionally fail ceph-health if HEALTH_WARN 655fbf0 Introducing the overcloud-service-status role cc128a6 [autodoc] guessing converge playbook 90b47a4 Fix molecule jobs after release of cryptography3.4 ef8854a Remove six usage in ValidationHasMetadataRule.py 6b181d8 Add validation to verify undercloud.conf content. f4ea045 Get the undercloud.conf file from where it actually is 1a93c3c Generate inventory without any overcloud 3866628 Remove useless __init__.py file in library 671349e Add tripleo-validations role for component testing ca88442 Use the UBI8 image for testing Diffstat (except docs and test files) ------------------------------------- .ansible-lint_rules/ValidationHasMetadataRule.py | 4 +- .zuul.yaml | 23 ++- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 _skeleton_role_/molecule/default/molecule.yml | 34 ++-- ansible-test-env.rc | 7 +- bindep.txt | 3 + ci/playbooks/pre.yml | 85 +++++++++- ci/playbooks/run-local.yml | 5 +- library/__init__.py | 0 playbooks/check-undercloud-conf.yaml | 15 ++ playbooks/overcloud-service-status.yaml | 18 +++ ...-overcloud-service-status-128bf74993d035fa.yaml | 8 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 33 ++-- roles/ceilometerdb_size/tasks/main.yml | 13 +- roles/ceph/defaults/main.yml | 1 + .../molecule/ceph-ansible-installed/molecule.yml | 36 ++--- .../molecule/ceph-ansible-installed/prepare.yml | 2 +- roles/ceph/molecule/default/molecule.yml | 34 ++-- roles/ceph/tasks/ceph-health.yaml | 7 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 21 ++- .../molecule/default/Dockerfile | 2 +- .../molecule/default/converge.yml | 7 +- .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/prepare.yml | 36 ++--- roles/check_network_gateway/tasks/main.yml | 17 +- .../molecule/default/molecule.yml | 26 +++- .../molecule/rhsm_mismatch/molecule.yml | 28 +++- roles/check_undercloud_conf/defaults/main.yml | 41 +++++ .../molecule/config_OK/Dockerfile.j2 | 37 +++++ .../molecule/config_OK/converge.yml | 45 ++++++ .../molecule/config_OK/molecule.yml | 38 +++++ .../molecule/config_OK/prepare.yml | 64 ++++++++ .../molecule/default/Dockerfile.j2 | 37 +++++ .../molecule/default/converge.yml | 55 +++++++ .../molecule/default/molecule.yml | 38 +++++ .../molecule/default/prepare.yml} | 18 +++ .../molecule/deprecated_drivers/Dockerfile.j2 | 37 +++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++ .../molecule/deprecated_drivers/molecule.yml | 38 +++++ .../molecule/deprecated_drivers/prepare.yml | 64 ++++++++ .../molecule/deprecated_params/Dockerfile.j2 | 37 +++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++ .../molecule/deprecated_params/molecule.yml | 38 +++++ .../molecule/deprecated_params/prepare.yml | 50 ++++++ .../molecule/required_missing/Dockerfile.j2 | 37 +++++ .../molecule/required_missing/converge.yml | 71 +++++++++ .../molecule/required_missing/molecule.yml | 38 +++++ .../molecule/required_missing/prepare.yml | 62 ++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++ roles/check_undercloud_conf/tasks/main.yml | 67 ++++++++ .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../container_status/molecule/default/molecule.yml | 34 ++-- roles/container_status/tasks/main.yaml | 13 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../controller_token/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/converge.yml | 34 ++-- .../molecule/default/molecule.yml | 34 ++-- .../ctlplane_ip_range/molecule/default/prepare.yml | 27 +--- roles/ctlplane_ip_range/tasks/main.yml | 15 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../dhcp_validations/molecule/default/molecule.yml | 34 ++-- .../dhcp_validations/tasks/dhcp-provisioning.yaml | 11 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/image_serve/molecule/default/molecule.yml | 39 ++--- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- roles/neutron_sanity_check/tasks/main.yml | 13 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/node_disks/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/node_health/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/nova_status/molecule/default/molecule.yml | 34 ++-- roles/nova_svirt/molecule/default/molecule.yml | 34 ++-- roles/nova_svirt/molecule/default/prepare.yml | 5 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- roles/overcloud_service_status/README.md | 47 ++++++ .../overcloud_service_status/defaults/main.yml | 12 ++ .../molecule/default/Dockerfile | 37 +++++ .../molecule/default/molecule.yml | 54 +++++++ .../molecule/deprecated_services/Dockerfile | 37 +++++ .../molecule/deprecated_services/molecule.yml | 54 +++++++ .../molecule/down_services/Dockerfile | 37 +++++ .../molecule/down_services/molecule.yml | 54 +++++++ roles/overcloud_service_status/resources/README.md | 1 + .../resources/playbooks/converge.yml | 33 ++++ .../resources/playbooks/prepare.yml | 12 ++ .../resources/scripts/http_server.py | 173 +++++++++++++++++++++ roles/overcloud_service_status/tasks/main.yml | 48 ++++++ .../overcloud_service_status/tasks/os_service.yml | 82 ++++++++++ roles/overcloud_service_status/vars/main.yml | 32 ++++ .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../pacemaker_status/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../package_version/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../rabbitmq_limits/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/repos/molecule/default/molecule.yml | 33 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/stack_health/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/stonith_exists/molecule/default/molecule.yml | 33 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/switch_vlans/molecule/default/molecule.yml | 34 ++-- .../system_encoding/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/tls_everywhere/molecule/default/molecule.yml | 34 ++-- roles/tls_everywhere/tasks/pre-deployment.yaml | 15 +- roles/tls_everywhere/tasks/prep.yaml | 18 ++- roles/tripleo_validations/defaults/main.yml | 25 +++ roles/tripleo_validations/tasks/main.yml | 16 ++ roles/tripleo_validations/tasks/run.yml | 42 +++++ roles/tripleo_validations/tasks/test_script.yml | 13 ++ roles/tripleo_validations/vars/main.yml | 18 +++ .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../undercloud_debug/molecule/default/molecule.yml | 34 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 33 ++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/converge.yml | 3 +- .../molecule/default/molecule.yml | 38 ++--- .../molecule/default/prepare.yml | 35 +---- roles/undercloud_heat_purge_deleted/tasks/main.yml | 12 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 34 ++-- roles/undercloud_process_count/tasks/main.yml | 13 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/converge.yml | 3 +- .../molecule/default/molecule.yml | 38 ++--- .../molecule/default/prepare.yml | 18 +-- .../{Dockerfile.j2 => Dockerfile} | 0 .../non-persistent-token-format/molecule.yml | 38 ++--- roles/undercloud_tokenflush/tasks/main.yml | 13 +- scripts/run-local-test | 7 +- scripts/tripleo-ansible-inventory | 47 ++++-- tripleo_validations/constants.py | 18 +++ tripleo_validations/utils.py | 29 +++- 165 files changed, 3312 insertions(+), 934 deletions(-)

1 0

puppet-keystone 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We contentedly announce the release of: puppet-keystone 18.4.0: Puppet module for OpenStack Keystone This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features ************ * The following parameters of the "keystone::ldap" class have been deprecated and have no effect. * "project_tree_dn" * "project_filter" * "project_objectclass" * "project_id_attribute" * "project_member_attribute" * "project_name_attribute" * "project_desc_attribute" * "project_enabled_attribute" * "project_domain_id_attribute" * "project_attribute_ignore" * "project_allow_create" * "project_allow_update" * "project_allow_delete" * "project_enabled_emulation" * "project_enabled_emulation_dn" * "project_additional_attribute_mapping" * "role_tree_dn" * "role_filter" * "role_objectclass" * "role_id_attribute" * "role_name_attribute" * "role_member_attribute" * "role_attribute_ignore" * "role_allow_create" * "role_allow_update" * "role_allow_delete" * "role_additional_attribute_map" * The new "keystone::policy::enforce_new_defaults" parameter has been added. Upgrade Notes ************* * The following deprecated parameters have been completely removed from the "keystone::ldap_backend" resource type. * "project_tree_dn" * "project_filter" * "project_objectclass" * "project_id_attribute" * "project_member_attribute" * "project_name_attribute" * "project_desc_attribute" * "project_enabled_attribute" * "project_domain_id_attribute" * "project_attribute_ignore" * "project_allow_create" * "project_allow_update" * "project_allow_delete" * "project_enabled_emulation" * "project_enabled_emulation_dn" * "project_additional_attribute_mapping" * "role_tree_dn" * "role_filter" * "role_objectclass" * "role_id_attribute" * "role_name_attribute" * "role_member_attribute" * "role_attribute_ignore" * "role_allow_create" * "role_allow_update" * "role_allow_delete" * "role_additional_attribute_map" * "credential_driver" * "assignment_driver" Changes in puppet-keystone 18.3.0..18.4.0 ----------------------------------------- 1fa1148 Update sphinx to the latest version 1b4b92b Prepare Wallaby RC1 8e754b9 Update supported Ubuntu version to Focal a6a78d1 Deprecate parameters for ldap project/role driver 2728fb9 Clean up the deprecated parameters of keystone::ldap_backend b69fbc4 Bump requirement of puppetlabs-apache 0ba0efa Add support for oslo_policy/enforce_new_defaults 8b9cc1f Fix a wrong service name in parameter description Diffstat (except docs and test files) ------------------------------------- manifests/ldap.pp | 364 +++++++++++---------- manifests/ldap_backend.pp | 327 ------------------ manifests/policy.pp | 19 +- metadata.json | 10 +- ...ved-keystone-ldap-options-342a37e2dea214d1.yaml | 35 ++ ...eystone-ldap-options-left-5e4aa4f0df865d22.yaml | 33 ++ ...licy-enforce_new_defaults-0499fab4ab2b5836.yaml | 5 + spec/classes/keystone_ldap_spec.rb | 60 ---- spec/classes/keystone_policy_spec.rb | 12 +- 10 files changed, 287 insertions(+), 580 deletions(-)

1 0

puppet-glance 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are chuffed to announce the release of: puppet-glance 18.4.0: Puppet module for OpenStack Glance This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features ************ * Add 'worker_self_reference_url' parameter to allow other glance workers to contact the worker which has staged the image. * The new "glance::policy::enforce_scope" parameter has been added to support the corresponding parameter in oslo.policy library. * The new "glance::policy::enforce_new_defaults" parameter has been added. Upgrade Notes ************* * The following parameters have been removed from the "glance::api" class. * "enable_v1_api" * "enable_v2_api" * "registry_client_cert_file" * "registry_client_key_file" * "registry_client_ca_file" * The following parameters have been removed from the "glance::config" class. * "registry_config" * "registry_paste_ini_config" * The following resource types have been removed. * "glance_registry_config" * "glance_registry_paste_ini" Changes in puppet-glance 18.3.0..18.4.0 --------------------------------------- 8a6cf5e Update sphinx to the latest version 3292490 Prepare Wallaby RC1 3381c5e Add support for oslo_policy/enforce_new_defaults 718cf77 Update supported Ubuntu version to Focal 2ae1115 Clean up remaining items for glance-registry d05a576 Add new conf parameter required for distribute image import c0a7f7d Add support for the oslo_policy/enforce_scope parameter Diffstat (except docs and test files) ------------------------------------- README.md | 28 --------- .../provider/glance_registry_config/ini_setting.rb | 10 --- .../glance_registry_paste_ini/ini_setting.rb | 10 --- lib/puppet/type/glance_registry_config.rb | 54 ---------------- lib/puppet/type/glance_registry_paste_ini.rb | 53 ---------------- manifests/api.pp | 58 +++-------------- manifests/config.pp | 19 ------ manifests/deps.pp | 2 - manifests/policy.pp | 23 +++++-- metadata.json | 12 ++-- ..._distributed_image_import-09f70f50c8c40def.yaml | 5 ++ ...oslo_policy-enforce_scope-422b5bb6f96a7afe.yaml | 5 ++ ...licy-enforce_new_defaults-239a805a6d0fba80.yaml | 5 ++ .../remove-registry-leftover-28913ae93b9934f8.yaml | 23 +++++++ spec/classes/glance_api_spec.rb | 3 + spec/classes/glance_policy_spec.rb | 17 ++--- .../glance_registry_config/ini_setting_spec.rb | 72 ---------------------- .../glance_registry_paste_ini/ini_setting_spec.rb | 63 ------------------- spec/unit/type/glance_registry_config_spec.rb | 19 ------ spec/unit/type/glance_registry_paste_ini_spec.rb | 19 ------ 21 files changed, 83 insertions(+), 419 deletions(-)

1 0

puppet-ironic 18.4.0 (wallaby)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are glad to announce the release of: puppet-ironic 18.4.0: Puppet module for OpenStack Ironic This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 18.4.0 ^^^^^^ New Features * The new "ironic::healthcheck" class has been added. This class manages parameters of healthcheck middlware in oslo.middleware. * The new "ironic::policy::enforce_scope" parameter has been added to support the corresponding parameter in oslo.policy library. * The new "ironic::policy::enforce_new_defaults" parameter has been added. Changes in puppet-ironic 18.3.0..18.4.0 --------------------------------------- 2f98ab8 Update sphinx to the latest version eb45931 Prepare Wallaby RC1 ff2d297 metadata.json: debian 11 f83af35 Add support for oslo_policy/enforce_new_defaults 8a7d851 Update supported Ubuntu version to Focal d2cbbcd Bump requirement of puppetlabs-apache dfe8cd4 Add support for the oslo_policy/enforce_scope parameter bc8a77c Add support for healthcheck middleware options Diffstat (except docs and test files) ------------------------------------- manifests/healthcheck.pp | 50 ++++++++++++++++++ manifests/policy.pp | 21 ++++++-- metadata.json | 14 ++--- .../notes/healthcheck-dfeb2c1b5c993c71.yaml | 5 ++ ...oslo_policy-enforce_scope-ec5b75a0fd442120.yaml | 5 ++ ...licy-enforce_new_defaults-e1f45e71242055f8.yaml | 5 ++ spec/classes/ironic_healthcheck_spec.rb | 60 ++++++++++++++++++++++ spec/classes/ironic_policy_spec.rb | 17 +++--- 9 files changed, 161 insertions(+), 18 deletions(-)

1 0

python-tripleoclient 14.2.0 (victoria)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are pleased to announce the release of: python-tripleoclient 14.2.0: TripleO client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.2.0 ^^^^^^ New Features ************ * The container image build command now has the ability to inject labels into various images being constructed. To add labels into a container, the argument *--label* can be specified multiple times. The value is always a key=value pair and each key must be unique. * Adds *auth_token_lifetime* to undercloud.conf with a default of 14400. This configuration option exposes the keystone token expirataion as a top level configuration since it may need to be increased to handle larger clouds. Other Notes *********** * The container image build label agument has the ability to do simple string replacements following the python standard. Available options for string replacement are *registry*, *namespace*, *prefix*, *image*, *tag*, and *name*. Example usage *--label component="%(prefix)s-%(name)s-container"*. Changes in python-tripleoclient 14.1.0..14.2.0 ---------------------------------------------- 1b8d90a6 Use MultiKeyActionValue action for extra-[env-]vars arguments 66ec2804 Remove unnecessary zuul layout overrides use templates instead f431149a Revert "Revert "Add environment variables for better var handling"" ace1a5fa Add lint dependencies for content provider 530b3aad Add label argument for the container image build bb64cf44 Add auth_token_lifetime to undercloud.conf c21d24fb Add --disable-container-prepare flag d77b63be Modifying Openstack client for undercloud and overcloud backup 5317f37a [Validator Run] Add return code management c246e80b Fix the get_deployment_status call 71591e51 Get deployment status to check if plan and stack exists on the env 89eaf7a5 Run validation without authentication in particular context 98ffc681 [Validator Show] Properly throwing an exception for unknown validation e4ae6d25 [Validator Run] Don't rely on parameter file extension 21d8e7c2 [Validator Run] Ensure the plan really exists d3085ad4 Make workflow monitoring more resilient f5af50f5 Dumping task key instead of tasks from validation_output 7873e6d8 [Validator Show Run] Display simplified results by default cdaf01d1 [UX] Align to left the table for the validations run results 80a04fe2 Wire up new tripleo upgrades jobs template 95503224 Add Python3 victoria unit tests e6dd17da Update TOX_CONSTRAINTS_FILE for stable/victoria Diffstat (except docs and test files) ------------------------------------- .../notes/image-build-labels-97fda64f693cd8ba.yaml | 12 ++ ...-expiration-configuration-6159d733f09e1b6e.yaml | 6 + tox.ini | 6 +- tripleoclient/config/undercloud.py | 7 + tripleoclient/utils.py | 32 +++-- tripleoclient/v1/overcloud_backup.py | 157 +++++++++++++++++---- tripleoclient/v1/overcloud_deploy.py | 18 ++- tripleoclient/v1/overcloud_plan.py | 20 ++- tripleoclient/v1/tripleo_deploy.py | 13 +- tripleoclient/v1/tripleo_validator.py | 137 ++++++++++++++---- tripleoclient/v1/undercloud.py | 13 +- tripleoclient/v1/undercloud_backup.py | 129 ++++++++++++++--- tripleoclient/v1/undercloud_config.py | 7 +- tripleoclient/v2/tripleo_container_image.py | 32 +++++ tripleoclient/workflows/base.py | 9 +- tripleoclient/workflows/plan_management.py | 38 +++-- zuul.d/layout.yaml | 61 ++------ 22 files changed, 827 insertions(+), 189 deletions(-)

1 0

tripleo-heat-templates 13.2.0 (victoria)
by no-reply＠openstack.org 01 Apr '21

01 Apr '21

We are pumped to announce the release of: tripleo-heat-templates 13.2.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.2.0 ^^^^^^ New Features ************ * The new parameter GlanceCinderMountPointBase has been added which will be used for mounting NFS volumes on glance nodes. When glance uses cinder as store and cinder backend is NFS, this parameter must be set to match cinder's mount point. * Added "MemcachedMaxConnections" setting with a default of 8192 maximum connections in order to allow an operator to override that value in environments where memcached is heavily sollicited. * The logic to configure the connection from barbican to nShield HSMs has been augmented to parse a nshield_hsms parameter, which allows the specification of multiple HSMs. The underlying ansible role (ansible-role-thales-hsm) will configure the HSMs in load sharing mode to provide HA. * New "CinderRpcResponseTimeout" and "CinderApiWsgiTimeout" parameters provide a means for configuring Cinder's RPC response and WSGI connection timeouts, respectively. * Add posibilities to configure ovn dbs monitor interval in tht by OVNDBSPacemakerMonitorInterval (default 30s). Under load, this can create extra stress and since the timeout has already been bumped, it makes sense to bump this interval to a higher value as a trade off between detecting a failure and stressing the service. * When a node has hugepages enabled, we can help with live migrations by enabling *NovaLiveMigrationPermitPostCopy* and *NovaLiveMigrationPermitAutoConverge*. These flags are automatically enabled if hugepages are detected, but operators can override these settings. * Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues in nova.conf of the compute. Default 0 corresponds to not set meaning the legacy limits based on the reported kernel major version will be used. Known Issues ************ * Cell_v2 discovery has been moved from the nova-compute|nova-ironic containers as this requires nova api database credentials which must not be configured for the nova-compute service. As a result scale-up deployments which explicitly omit the Controller nodes will need to make alternative arrangements to run cell_v2 discovery. Either the nova-manage command can be run manually after scale-up, or an additional helper node using the NovaManage role can be deployed that will be used for this task instead of a Controller node. See Bug: 1786961 (https://launchpad.net/bugs/1786961) and Bug: 1871482 (https://launchpad.net/bugs/1871482). Deprecation Notes ***************** * Some parameters within ThalesVars have been deprecated. These are - thales_hsm_ip_address and thales_hsm_config_location. See environments/barbican-backend-pkcs11-thales.yaml for details. Bug Fixes ********* * When deploying a spine-and-leaf (L3 routed architecture) with TLS enabled for internal endpoints the deployment would fail because some roles are not connected to the network mapped to the service in ServiceNetMap. To fix this issue a role specific parameter "{{role.name}}ServiceNetMap" is introduced (defaults to: "{}"). The role specific ServiceNetMap parameter allow the operator to override one or more service network mappings per-role. For example: ComputeLeaf2ServiceNetMap: NovaLibvirtNetwork: internal_api_leaf2 The role specific "{{role.name}}ServiceNetMap" override is merged with the global "ServiceNetMap" when it's passed as a value to the "{{role.name}}ServiceChain" resources, and the "{{role.name}}" resource groups so that the correct network for this role is mapped to the service. Closes bug: 1904482 (https://bugs.launchpad.net/tripleo/+bug/1904482). * Do not relabel Swift files on every container (re-)start. These will be relabeled already in step 3 preventing additional delays. Changes in tripleo-heat-templates 13.1.0..13.2.0 ------------------------------------------------ 6eb406ce1 Updating settings description f3ac958f4 Add TLS support to services using memcached 76c8f9ec5 Add non-tls listener to Memcached 321f10d53 Add legacy fact setting dbad3a079 Make UpgradeInitCommand and UpgradeLeapp{ToRemove,ToInstall,CommandOptions} per-role a6c7ba02a Fix start order for {swift_proxy,glance_api}_tls_proxy 1b5768455 Check Ceph cluster healthy state before starting FS to BS playbook 780b05746 Add posibilities to set ovndbs monitor interval 871f26566 Add delegate_fact_hosts: false on ci scenarios bb7b27b90 Support configuring cinder's RPC and WSGI timeouts 04b9cad83 Remove tripleo_transfer cleanup.yml reference ad6eb8ae7 Allow configuring cinder mount point for glance cinder store f022663d4 Make content provider depend on tox-pep8/tht on check layout 67ad3daa2 Use include task for host prep tasks a57f8af41 Use ansible_facts instead 724d65804 Upgrade mariadb storage during upgrade tasks e6e7019ad Fix redis_tls_proxy bd5e2c80f Don't try creating default admin and member roles 9a1b9393b Drop service facts usage c996c85ca Stop barbican servics in unupgraded controllers 0223e9ab6 Stop non-pcmk services of manila and cinder during upgrade d98fa55bd Add parameters to allow multiple nshield HSMs 58825e473 Always set NetworkDeploymentActions to its default 853f4a15c Enabling 'cinder_use_multipath' if cinder multipath is enabled e3b75f1db Stop ironic services in unupgraded controllers bbf25f937 Stop octavia servics in unupgraded controllers 057f2c849 per_node is not parsing generated json e30001881 Problematic nested quotes in hieradata file list 3ac51218f Add ContainerDefaultPidsLimit to set default pid limits in containers.conf 5e4d71b21 Use Ceph cluster name when setting minimum client version 0efeb96a3 Make DnfStreams support RoleParameters 1dc7be85b Add post delay to reboot fd58e99de Enforces minimum Ceph client version to Mimic d49fe9c60 Add a new role parameter rhsm_enforce. a6b463069 Force json output format for hiera in derive pci whitelist 8e5f1e9ee Split network validation to it's own play ace2eb097 Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues ae7ab696d Revert "Reset sriov_numvfs to 0 before leapp upgrade" 9e271664a Use include_role for conditional inclusion 964a4a4e8 Remove ffwd lifecycle environment files. 8d0638eca Deprecate environments/dcn-hci.yaml for dcn-storage.yaml 95f2c33e3 Remove External{Internal,Public,Admin}Url parameters 7f8b5c4d2 Deleting nova-consoleauth services in post-upgrade 00cd7c170 Live migration optimization with HP 7c2933d3b Use Ceph-NFS for Manila in scenario004 28a26099b Making sure virt-guest-shutdown.target exists bb8343a96 Remove pcs/pacemaker package installation from upgrade tasks 57520232f Fix unreachable handling 8e9798caf Serialize shutdown of pacemaker nodes add0f9003 Do not relabel Swift files on every container start 6b4d841d9 Make it possible to override ServiceNetMap per-role 890c149f5 Fix ownership of octavia_rsyslog log directory 7ecc96232 Configure OVNCMSOptions=enable-chassis-as-gw within neutron-ovn-sriov.yaml 6a37431ce nova: Use LIBGUESTFS_BACKEND=direct efd73e15d Set toplevel nova::dhcp_domain for all nova services 1ec4e5ece Add setting to override max memcached connections 43547f521 Fix swift containers idempotency 76481308b Refresh Swift ring files without restarting containers cff6378fb Adding key_size option on the certificate creation 864e4fdd7 Revert rolling certificate updates for HA services f62b05333 HA: reimplement resource locks with cibadmin 6c45e3e8c Update container-config-scripts/ folder content before update_tasks. a2a6ddab5 Refactor nova db config f75e6d51c Wire up new tripleo upgrades jobs template 3ce0c63b1 Enable tripleo_free strategy for upgrade 03697234f Move cell_v2 discovery off compute hosts 5c5f008df Don't pass empty values for ipaclient_servers to ipaclient role 8e316d7f1 Define a new CinderVolumeEdge service 0f1e78d73 Remove Luna HSM clients on scaledown dd1cba373 Add 'networks_all' ansible group_var fe170a316 Move ipa check to external_deploy_tasks 6a43fce4f Remove vfio-pci.conf module load file b1bda7f47 Ensure cloud-init has finished before puppet run b269eec7b Identify HSMs using labels instead of Slot ID 88fea40ae Fix the value of ssl_verify_client c9221d24a Update TOX_CONSTRAINTS_FILE for stable/victoria Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-containers.yaml | 1 + ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 6 + common/common-container-config-scripts.yaml | 17 +++ common/container-puppet.sh | 6 +- common/deploy-steps-playbooks-common.yaml | 20 +-- common/deploy-steps-tasks-step-0.j2.yaml | 17 +++ common/deploy-steps-tasks-step-1.yaml | 22 +-- common/deploy-steps-tasks.yaml | 6 +- common/deploy-steps.j2 | 29 +++- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 4 +- container_config_scripts/mysql_upgrade_db.sh | 15 +++ .../pacemaker_mutex_shutdown.sh | 120 +++++++++++++++++ .../pacemaker_resource_lock.sh | 134 +++++++++++------- deployment/apache/apache-baremetal-puppet.j2.yaml | 16 +++ .../barbican/barbican-api-container-puppet.yaml | 112 +++++++++------- .../barbican-backend-pkcs11-crypto-puppet.yaml | 14 +- .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/ceph-ansible/ceph-base.yaml | 11 ++ deployment/ceph-ansible/ceph-grafana.yaml | 16 +++ deployment/ceph-ansible/ceph-mgr.yaml | 16 +++ deployment/ceph-ansible/ceph-mon.yaml | 28 ++++ deployment/ceph-ansible/ceph-rgw.yaml | 20 ++- deployment/cinder/cinder-api-container-puppet.yaml | 11 +- .../cinder/cinder-backup-container-puppet.yaml | 15 +++ .../cinder/cinder-backup-pacemaker-puppet.yaml | 2 +- deployment/cinder/cinder-base.yaml | 5 + .../cinder/cinder-volume-container-puppet.yaml | 15 +++ .../cinder/cinder-volume-pacemaker-puppet.yaml | 2 +- deployment/containers-common.yaml | 3 + deployment/database/mysql-base.yaml | 22 +++ deployment/database/mysql-container-puppet.yaml | 51 +++++-- deployment/database/mysql-pacemaker-puppet.yaml | 54 ++++---- deployment/database/redis-container-puppet.yaml | 16 +++ deployment/database/redis-pacemaker-puppet.yaml | 24 +++- .../novajoin/novajoin-container-puppet.yaml | 6 +- deployment/etcd/etcd-container-puppet.yaml | 48 ++++--- deployment/glance/glance-api-container-puppet.yaml | 14 +- .../haproxy-internal-tls-certmonger.j2.yaml | 19 +++ deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 +- .../haproxy/haproxy-public-tls-certmonger.yaml | 19 +++ deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/heat/heat-base-puppet.yaml | 24 +++- deployment/horizon/horizon-container-puppet.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 34 +++-- deployment/ironic/ironic-api-container-puppet.yaml | 14 ++ .../ironic/ironic-conductor-container-puppet.yaml | 15 +++ .../ironic/ironic-inspector-container-puppet.yaml | 16 +++ deployment/ironic/ironic-pxe-container-puppet.yaml | 16 +++ deployment/keystone/keystone-container-puppet.yaml | 28 +++- deployment/manila/manila-api-container-puppet.yaml | 15 +++ .../manila/manila-scheduler-container-puppet.yaml | 15 +++ .../manila/manila-share-container-puppet.yaml | 15 +++ .../manila/manila-share-pacemaker-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 100 +++++++++++++- deployment/metrics/collectd-container-puppet.yaml | 2 +- deployment/metrics/qdr-container-puppet.yaml | 16 +++ .../neutron/derive_pci_passthrough_whitelist.py | 2 +- .../neutron/neutron-api-container-puppet.yaml | 16 +++ .../neutron/neutron-dhcp-container-puppet.yaml | 16 +++ .../neutron-ovs-dpdk-agent-container-puppet.yaml | 24 +++- .../neutron-sriov-agent-container-puppet.yaml | 31 +---- deployment/nova/nova-api-container-puppet.yaml | 38 ++++-- deployment/nova/nova-apidb-client-puppet.yaml | 78 +++++++++++ deployment/nova/nova-base-puppet.yaml | 102 +++----------- .../nova/nova-compute-common-container-puppet.yaml | 22 ++- deployment/nova/nova-compute-container-puppet.yaml | 149 +++++++++++++++++---- .../nova/nova-conductor-container-puppet.yaml | 60 +++++++-- deployment/nova/nova-db-client-puppet.yaml | 80 +++++++++++ deployment/nova/nova-ironic-container-puppet.yaml | 28 ++-- deployment/nova/nova-libvirt-container-puppet.yaml | 61 +++++++-- deployment/nova/nova-manager-container-puppet.yaml | 105 +++++++++++++++ .../nova/nova-metadata-container-puppet.yaml | 45 +++++-- .../nova/nova-scheduler-container-puppet.yaml | 31 ++++- .../nova/nova-vnc-proxy-container-puppet.yaml | 81 ++++++++++- .../octavia/octavia-api-container-puppet.yaml | 15 +++ .../octavia/octavia-deployment-config.j2.yaml | 4 +- .../octavia-health-manager-container-puppet.yaml | 20 ++- .../octavia-housekeeping-container-puppet.yaml | 15 +++ .../octavia/octavia-worker-container-puppet.yaml | 19 ++- .../octavia/providers/ovn-provider-config.yaml | 16 +++ .../ovn/ovn-controller-container-puppet.yaml | 16 +++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 34 ++++- deployment/ovn/ovn-metadata-container-puppet.yaml | 16 +++ .../pacemaker/pacemaker-baremetal-puppet.yaml | 6 + deployment/podman/podman-baremetal-ansible.yaml | 7 + deployment/rabbitmq/rabbitmq-container-puppet.yaml | 16 +++ ...rabbitmq-messaging-notify-container-puppet.yaml | 16 +++ ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 16 +++ .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 2 +- .../external-swift-proxy-baremetal-puppet.yaml | 49 +------ .../swift-refresh-rings-cc327f998490b0df.yaml | 6 + deployment/swift/swift-proxy-container-puppet.yaml | 20 +++ .../swift/swift-ringbuilder-container-puppet.yaml | 10 ++ .../swift/swift-storage-container-puppet.yaml | 48 ++++++- deployment/timesync/chrony-baremetal-ansible.yaml | 11 +- deployment/tls/undercloud-tls.yaml | 6 +- .../tripleo-packages-baremetal-puppet.yaml | 61 ++++++--- deployment/undercloud/undercloud-upgrade.yaml | 4 +- environments/barbican-backend-pkcs11-lunasa.yaml | 24 ++-- environments/barbican-backend-pkcs11-thales.yaml | 22 ++- environments/dcn-hci.yaml | 5 +- environments/dcn-storage.yaml | 53 ++++++++ environments/lifecycle/ffwd-upgrade-converge.yaml | 9 -- environments/lifecycle/ffwd-upgrade-prepare.yaml | 10 -- environments/services/neutron-ovn-dvr-ha.yaml | 2 - environments/services/neutron-ovn-ha.yaml | 4 - environments/services/neutron-ovn-sriov.yaml | 6 +- environments/ssl/enable-memcached-tls.yaml | 10 ++ overcloud-resource-registry-puppet.j2.yaml | 4 + overcloud.j2.yaml | 29 +++- puppet/extraconfig/pre_deploy/per_node.yaml | 12 +- ...ount-point-base-parameter-852554398b9f3a19.yaml | 7 + ...ddmemcachedmaxconnections-b591c0fa39e821f5.yaml | 6 + .../notes/barbican-thales-ha-581fbe9b5ef4dc87.yaml | 11 ++ .../notes/bug-1904482-dbc5162c8245a9b3.yaml | 21 +++ ...v2_discovery_off_computes-2b977c6b9a01cde2.yaml | 13 ++ ...er-add-timeout-parameters-54550a6e1c11c0b9.yaml | 6 + .../dcn-hci-storage-rename-0b1c17dd50f4cc9a.yaml | 8 ++ .../monitor_interval_ovndbs-b14c886737965300.yaml | 9 ++ ...mit-postcopy-autoconverge-ca1719fd2abed45f.yaml | 8 ++ .../nova_libvirt_max_queues-8024fc63105bd25d.yaml | 6 + .../swift-prevent-relabeling-b9721aa5a1abda6e.yaml | 5 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 2 +- roles/NovaManager.yaml | 37 +++++ roles/README.rst | 6 + roles/Standalone.yaml | 3 + roles_data.yaml | 1 + sample-env-generator/dcn.yaml | 13 +- tools/yaml-validate.py | 7 +- tox.ini | 2 +- zuul.d/layout.yaml | 5 + 139 files changed, 2466 insertions(+), 603 deletions(-)

1 0