April 2021 - Release-announce - lists.openstack.org

openstack-ansible 22.1.2 (victoria)
by no-reply＠openstack.org 19 Apr '21

19 Apr '21

We are thrilled to announce the release of: openstack-ansible 22.1.2: Ansible playbooks for deploying OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 22.1.2 ^^^^^^ New Features ************ * Implemented "openstack_hosts_package_manager_extra_conf" variable. It allows to add extra content into package manager's configuration (works with apt,yum and dnf). * In deployments where a separate host is used to manage the OpenStack Ansible configuration, the '/etc/hosts' file on that host will now include a section adding hostname to IP resolution for all hosts in the inventory. This can be enabled/disabled via 'openstack_host_manage_deploy_hosts_file'. Known Issues ************ * Where a single OSA deploy host is used to manage multiple deployments, some delegated Ansible tasks are performed using hostnames rather than IP addresses due to Ansible issue 72776. Hostnames such as 'infra1' will be ambiguous, so use of separate hosts for each deployment is recommended. Deprecation Notes ***************** * Remove "octavia_amp_image_id" option as the corresponding configuration option in Octavia "amp_image_id" is deprected and image tags should be used instead. Changes in openstack-ansible 22.1.1..22.1.2 ------------------------------------------- f9eb0af8a Return PyMySQL installation for distro installs 2d5f183ef Bump SHAs for stable/victoria Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +- inventory/group_vars/utility_all.yml | 1 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 106 ++++++++++----------- playbooks/utility-install.yml | 4 +- ...age-manager-configuration-815b7959870479e7.yaml | 6 ++ .../notes/deploy-hosts-file-657a385568f3df9c.yaml | 13 +++ .../remove_amp_image_id-433eefffba7d6a96.yaml | 6 ++ 9 files changed, 89 insertions(+), 63 deletions(-)

1 0

puppet-glance 16.4.0 (ussuri)
by no-reply＠openstack.org 19 Apr '21

19 Apr '21

We are pleased to announce the release of: puppet-glance 16.4.0: Puppet module for OpenStack Glance This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 16.4.0 ^^^^^^ New Features ************ * Added cache_prefetcher_interval in glance-api.conf, using which the periodic job will run as per the set interval and prefetch images into cache. * A new parameter "cinder_mount_point_base" is introduced into "glance::backend::multistore::cinder" class, so that operators can provide the cinder mount point for NFS volumes. * The following new parameters have been added, which can be used to set the interface parameter in authtoken middleware. * "glance::api::authtoken::interface" * "glance::registry::authtoken::interface" Bug Fixes ********* * The "swift::backend::multistore::swift::swift_store_config_file" is now set to "/etc/glance/glance-swift.conf" by default. Because of this change the parameter is automatically set to use the configuration file generated by puppet-glance. Changes in puppet-glance 16.3.0..16.4.0 --------------------------------------- 8582831 Prepare a new release for ussuri 12abd1f Revert "Update supported Ubuntu version to Focal" 89d8dc7 Update supported Ubuntu version to Focal a419a59 cinder backend: password should be secret 1bd1615 Add config parameter for cinder mounting needs b259372 Use glance-swift.conf by default a150224 Add support for the interface parameter in authtoken middleware 38ce19b [Ussuri Only] Ignore read-only "self" propery of images 23d8122 Build containers for single consumer job 1622ed1 Ignore onwer_specifed.* properties in images a5282ed Use common class to manage apache service in beaker job 6d91c6f Add CentOS8 to nodesets 311cb2a Add cache prefetcher interval configuration option 2cc8a4b Remove remaining os_region_name a265ac1 Switch to Ussuri 5eb9045 Update TOX_CONSTRAINTS_FILE for stable/ussuri ff89537 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 1 + lib/puppet/provider/glance_image/openstack.rb | 12 +- manifests/api.pp | 43 ++++--- manifests/api/authtoken.pp | 7 ++ manifests/backend/multistore/cinder.pp | 12 +- manifests/backend/multistore/swift.pp | 4 +- manifests/registry/authtoken.pp | 7 ++ metadata.json | 2 +- ...cache_prefetcher_interval-e77d98c5235e91bc.yaml | 6 + ...f-swift_store_config_file-e59ff9753f3612a7.yaml | 7 ++ ...d_cinder_mount_point_base-5741d2966cc10c7b.yaml | 6 + ...stone-authtoken-interface-f8d92000874248fd.yaml | 8 ++ spec/acceptance/basic_glance_spec.rb | 1 + spec/acceptance/nodesets/nodepool-centos8.yml | 10 ++ spec/classes/glance_api_authtoken_spec.rb | 3 + spec/classes/glance_api_spec.rb | 127 +++++++++++---------- spec/classes/glance_registry_authtoken_spec.rb | 3 + .../glance_backend_multistore_cinder_spec.rb | 13 ++- .../glance_backend_multistore_swift_spec.rb | 6 +- tox.ini | 2 +- 22 files changed, 186 insertions(+), 96 deletions(-)

1 0

sushy 3.4.3 (victoria)
by no-reply＠openstack.org 16 Apr '21

16 Apr '21

We are thrilled to announce the release of: sushy 3.4.3: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.4.3 ^^^^^ Bug Fixes * Fixes TaskMonitor for hardware(ilo) that doesn't contain content- length in the response. This fix also uses task_uri instead of task_monitor uri to monitor redfish firmware update since using task_monitor uri doesn't provide appropriate response. * Automatically retries internal server errors from GET requests. Changes in sushy 3.4.2..3.4.3 ----------------------------- af4d7fb Ensure Content-Type header is set when required 8e28a4a Fix deprecation on collections.MutableMapping 76e7b04 Automatically retry HTTP 5xx on GET requests 4bca706 Fixes issue of redfish firmware update Diffstat (except docs and test files) ------------------------------------- ...ish-firmware-update-issue-273862b2a11e3536.yaml | 8 ++++++ releasenotes/notes/get-retry-9ca311caf8a0b7bb.yaml | 4 +++ sushy/connector.py | 24 ++++++++++++++++-- sushy/main.py | 2 +- sushy/resources/base.py | 2 +- sushy/resources/taskservice/taskmonitor.py | 9 +++---- sushy/resources/updateservice/updateservice.py | 6 +++++ .../unit/resources/taskservice/test_taskmonitor.py | 5 +++- .../resources/updateservice/test_updateservice.py | 29 ++++++++++++++++++++-- 11 files changed, 111 insertions(+), 14 deletions(-)

1 0

magnum 10.1.0 (ussuri)
by no-reply＠openstack.org 16 Apr '21

16 Apr '21

We are ecstatic to announce the release of: magnum 10.1.0: Container Management project for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Users can enable or disable master_lb_enabled when creating a cluster. * The default 10 seconds health polling interval is too frequent for most of the cases. Now it has been changed to 60s. A new config *health_polling_interval* is supported to make the interval configurable. Cloud admin can totally disable the health polling by set a negative value for the config. * Expose autoscaler prometheus metrics on pod port metrics (8085). * Add a new label named *master_lb_allowed_cidrs* to control the IP ranges which can access the k8s API and etcd load balancers of master. To get this feature, the minimum version of Heat is stable/ussuri and minimum version of Octavia is stable/train. * A new boolean flag is introduced in the CLuster and Nodegroup create API calls. Using this flag, users can override label values when clusters or nodegroups are created without having to specify all the inherited values. To do that, users have to specify the labels with their new values and use the flag --merge-labels. At the same time, three new fields are added in the cluster and nodegroup show outputs, showing the differences between the actual and the iherited labels. * Magnum now cascade deletes all the load balancers before deleting the cluster, not only including load balancers for the cluster services and ingresses, but also those for Kubernetes API/etcd endpoints. * Support Helm v3 client to install helm charts. To use this feature, users will need to use helm_client_tag>=v3.0.0 (default helm_client_tag=v3.2.1). All the existing chart used to depend on Helm v2, e.g. nginx ingress controller, metrics server, prometheus operator and prometheus adapter are now also installable using v3 client. Also introduce helm_client_sha256 and helm_client_url that users can specify to install non-default helm client version (https://github.com/helm/helm/releases). * Cloud admin user now can do rolling upgrade on behalf of end user so as to do urgent security patching when it's necessary. * Add to prometheus federation exported metrics the cluster_uuid label. Upgrade Notes ************* * If it's still preferred to have 10s health polling interval for Kubernetes cluster. It can be set by config *health_polling_interval* under *kubernetes* section. * Now the default admission controller list is updated by as "NodeRestriction, PodSecurityPolicy, NamespaceLifecycle, LimitRanger, ServiceAccount, ResourceQuota, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, RuntimeClass" * Default tiller_tag is set to v2.16.7. The charts remain compatible but helm_client_tag will also need to be set to the same value as tiller_tag, i.e. v2.16.7. In this case, the user will also need to provide helm_client_sha256 for the helm client binary intended for use. * Bumped prometheus-operator chart tag to 8.12.13. Added container_infra_prefix to missing prometheusOperator images. Deprecation Notes ***************** * Support for Helm v2 client will be removed in X release. Bug Fixes ********* * Deploy traefik from the heat-agent Use kubectl from the heat agent to apply the traefik deployment. Current behaviour was to create a systemd unit to send the manifests to the API. This way we will have only one way for applying manifests to the API. This change is triggered to adddress the kubectl change [0] that is not using 127.0.0.1:8080 as the default kubernetes API. [0] https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/ CHANGELOG-1.18.md#kubectl * Fixes an edge case where when a cluster with additional nodegroups is patched with health_status and health_status_reason, it was leading to the default-worker nodegroup being resized. * Fixes a regression which left behind trustee user accounts and certificates when a cluster is deleted. * Now the label *fixed_network_cidr* have been renamed with *fixed_subnet_cidr*. And it can be passed in and set correctly. * Fix an issue with private clusters getting stuck in CREATE_IN_PROGRESS status where floating_ip_enabled=True in the cluster template but this is disabled when the cluster is created. * Fixes database migrations with SQLAlchemy 1.3.20. * Prometheus server now scrape metrics from traefik proxy. Prometheus server now scrape metrics from cluster autoscaler. * Scrape metrics from kube-{controller-manager,scheduler}. Disable PrometheusRule for etcd. * Fixes an issue with cluster deletion if load balancers do not exist. See *story 2008548 <https://storyboard.openstack.org/#!/story/2008548>* for details. Changes in magnum 10.0.0..10.1.0 -------------------------------- ffbdbbc0 Revert "Update containerd version and tarball URL" a4923254 Fix debug logging during cluster upgrade 850b94aa Do not create constraints for boolean fields 2f217810 Lower log level of missing output 8301a180 Re-use transport for rpc server 1055bf2d Deploy traefik from the heat-agent 5c47db10 Remove shebang from scripts 2b353f58 [k8s] Fix default admission controller 2473f226 Re-use transport for rpc calls 92f518df k8s-fcos: Source bashrc for clusterconfig 92260bf0 [k8s-fcos] Fix insecure registry caedd838 k8s: Do not use insecure api port 9a21fe75 Fix cluster deletion when load balancers don't exist d3f7445e Make kubelet and kube-proxy use the secure port 344f5059 Fix validation for master_lb_enabled 6696b057 Update containerd version and tarball URL 09d1fefb Update helm charts origin repository 4393147b Add image prefix for grafana images 63ab64ba Use kube_master_ip for monitoring when no floating ip is used 33e96f50 Fix Cinder CSI 15b5f970 Fix misquoted comment 93a47e76 Fix database migrations 0c95ef1a Update default k8s admission controller list 54b36190 Drop KUBE_API_PORT for kube-apiserver 5ce4ca05 Remove cloud-config from k8s worker node 8744130e Fix syntax error in default rolesync configmap 74b67698 Stop using delete_on_termination for BFV instances 06635a3f Remove duplicated etcd_volume_size param in coreos template a9bdf93d Configure placeholder role-mapping Sync 9faa4b3d Remove warning for scale_manager 2e6ebc0a Drop lower constraints testing fe35af8e Drop dockerhub password from stable/ussuri 5bd16d9d [fix] Sync nodegroup status before delete_complete c0fabb92 Update default values for docker nofile and vm.max_map_count 3e4cac2b [k8s-atomic] Support master_lb_allowed_cidrs in template 34468cf0 [fix] Append v3/v1 to auth_url/magnum_url if discovery fails e68f1d85 Fix proxy issue for etcd and k8s 53f6de60 Add master_lb_enabled to cluster b699e0c9 [k8s] Use helm upgrade --install in deployment loop bb580533 Fix ServerAddressOutputMapping for private clusters 1e99f41d [k8s] Fix PreDeletionFailed if Heat stack is missing 3b428881 Fix label fixed_network_cidr e0fecc1d [ci] Fix gate by installing python3-docker bcffb630 [K8S] Delete all related load balancers before deleting cluster 7794e3f8 resize: Send only nodes_to_remove and node_count 57aab5a0 [k8s] Add label 'master_lb_allowed_cidrs' 709c448f [fix] Use default_ng_worker.node_count for patches 09acf980 More verbose logs for cluster ops 9b8859be [hca] Use ussuri-stable-1 as default for stable/ussuri 6f6e3a83 Use full name for hyperkube image inspect b90dff5b Support proxy for helm install a3942670 Support upgrade on behalf of user by admin 49e2468e Fix small issues rolling upgrade be786650 api: Do not guess based on name extension ca058f89 [k8s] Use Helm v3 by default 5ae48c26 Scrape internal kubernetes components 08202e80 Update prometheus monitoring chart and images 6191c93e Scrape traefik and autoscaler metrics 1309a829 [k8s] Expose autoscaler prometheus metrics 13944e9c k8s: Add admin.conf kubeconfig a94d672e k8s: Use the same kubectl version as API 4430329c atomic: Do not install control-plane on minions b782325d [k8s] Update Cluster Autoscaler ClusterRole 56ed41ea Monkey patch original current_thread _active f8a89b1b Add newline to fix E004 bashate error dbe461c1 [k8s] Support configurable health polling interval b5ec9545 Labels override dc33089f Update nginx-ingress to v1.36.3 and 0.32.0 tag Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 27 -- .../dcos_centos_v1/templates/dcoscluster.yaml | 4 +- contrib/drivers/heat/dcos_centos_template_def.py | 8 +- contrib/drivers/k8s_opensuse_v1/template_def.py | 6 +- .../k8s_opensuse_v1/templates/kubecluster.yaml | 4 +- magnum/api/app.py | 1 + magnum/api/attr_validator.py | 2 +- magnum/api/controllers/v1/bay.py | 5 + magnum/api/controllers/v1/cluster.py | 61 +++- magnum/api/controllers/v1/cluster_actions.py | 5 + magnum/api/controllers/v1/nodegroup.py | 33 ++ magnum/api/utils.py | 21 ++ magnum/cmd/__init__.py | 6 + magnum/common/neutron.py | 4 +- magnum/common/octavia.py | 103 ++++-- magnum/common/policies/cluster.py | 12 + magnum/common/rpc.py | 10 - magnum/common/rpc_service.py | 22 +- magnum/conductor/api.py | 5 +- magnum/conductor/scale_manager.py | 8 +- magnum/conf/kubernetes.py | 5 + .../1d045384b966_add_insecure_baymodel_attr.py | 9 +- ...304554e2_adding_magnum_service_functionality.py | 8 +- ...3c9c6191_add_public_column_to_baymodel_table.py | 4 +- ...98132c7_change_cluster_to_support_nodegroups.py | 2 +- ...380964133d_add_network_subnet_fip_to_cluster.py | 2 +- .../versions/4e263f236334_add_registry_enabled.py | 2 +- .../versions/5ad410481b88_rename_insecure.py | 2 +- ...d_master_lb_enabled_column_to_baymodel_table.py | 4 +- .../87e62e3c7abc_add_hidden_to_cluster_template.py | 6 +- ...5096e2334ee_add_master_lb_enabled_to_cluster.py | 43 +++ .../versions/ac92cbae311c_add_nodegoup_table.py | 4 +- ...612248cab_add_floating_ip_enabled_column_to_.py | 2 +- magnum/db/sqlalchemy/models.py | 1 + magnum/drivers/common/k8s_monitor.py | 2 +- .../fragments/configure-docker-registry.sh | 2 +- ...onfigure_docker_storage_driver_fedora_coreos.sh | 3 + .../templates/kubernetes/fragments/add-proxy.sh | 2 - .../kubernetes/fragments/calico-service-v3-3-x.sh | 4 +- .../kubernetes/fragments/calico-service.sh | 7 +- .../kubernetes/fragments/configure-etcd.sh | 3 +- .../fragments/configure-kubernetes-master.sh | 106 +++--- .../fragments/configure-kubernetes-minion.sh | 17 +- .../kubernetes/fragments/core-dns-service.sh | 4 +- .../kubernetes/fragments/disable-selinux.sh | 1 - .../kubernetes/fragments/enable-auto-healing.sh | 4 +- .../kubernetes/fragments/enable-auto-scaling.sh | 72 ++-- .../fragments/enable-cert-api-manager.sh | 2 - .../kubernetes/fragments/enable-cinder-csi.sh | 13 +- .../kubernetes/fragments/enable-helm-tiller.sh | 4 +- .../fragments/enable-ingress-controller.sh | 2 - .../kubernetes/fragments/enable-ingress-octavia.sh | 2 +- .../kubernetes/fragments/enable-ingress-traefik.sh | 48 +-- .../kubernetes/fragments/enable-keystone-auth.sh | 17 +- .../fragments/enable-prometheus-monitoring.sh | 6 +- .../kubernetes/fragments/enable-services-master.sh | 6 +- .../kubernetes/fragments/enable-services-minion.sh | 2 - .../kubernetes/fragments/flannel-service.sh | 4 +- .../kubernetes/fragments/install-clients.sh | 37 ++ .../templates/kubernetes/fragments/install-cri.sh | 4 +- .../kubernetes/fragments/install-helm-modules.sh | 97 +++++- .../fragments/kube-apiserver-to-kubelet-role.sh | 4 +- .../kubernetes/fragments/kube-dashboard-service.sh | 4 +- .../kubernetes/fragments/make-cert-client.sh | 2 - .../templates/kubernetes/fragments/make-cert.sh | 20 +- .../kubernetes/fragments/start-container-agent.sh | 2 - .../kubernetes/fragments/upgrade-kubernetes.sh | 49 ++- .../kubernetes/fragments/wc-notify-master.sh | 4 +- .../fragments/write-heat-params-master.sh | 4 +- .../kubernetes/fragments/write-heat-params.sh | 2 - .../kubernetes/fragments/write-kube-os-config.sh | 3 - .../templates/kubernetes/helm/ingress-nginx.sh | 369 ++++++++------------ .../templates/kubernetes/helm/metrics-server.sh | 104 +----- .../kubernetes/helm/prometheus-adapter.sh | 141 ++------ .../kubernetes/helm/prometheus-operator.sh | 384 ++++++++++++--------- magnum/drivers/common/templates/lb_api.yaml | 28 +- magnum/drivers/common/templates/lb_etcd.yaml | 28 +- magnum/drivers/heat/driver.py | 83 +++-- magnum/drivers/heat/k8s_coreos_template_def.py | 4 +- magnum/drivers/heat/k8s_fedora_template_def.py | 5 +- magnum/drivers/heat/k8s_template_def.py | 52 ++- magnum/drivers/heat/swarm_fedora_template_def.py | 10 +- magnum/drivers/heat/swarm_mode_template_def.py | 27 +- magnum/drivers/heat/template_def.py | 38 +- .../k8s_coreos_v1/templates/kubecluster.yaml | 10 +- .../templates/kubecluster.yaml | 48 ++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 32 +- .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 9 +- .../templates/fcct-config.yaml | 22 +- .../templates/kubecluster.yaml | 53 ++- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 40 ++- .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 18 +- .../k8s_fedora_coreos_v1/templates/user_data.json | 45 ++- magnum/drivers/mesos_ubuntu_v1/template_def.py | 7 +- .../mesos_ubuntu_v1/templates/mesoscluster.yaml | 4 +- .../swarm_fedora_atomic_v1/templates/cluster.yaml | 6 +- .../templates/swarmcluster.yaml | 6 +- magnum/objects/cluster.py | 4 +- magnum/service/periodic.py | 4 +- .../api/controllers/v1/test_cluster_actions.py | 39 ++- .../unit/api/controllers/v1/test_nodegroup.py | 78 +++++ .../handlers/test_k8s_cluster_conductor.py | 81 ++++- .../handlers/test_mesos_cluster_conductor.py | 4 + .../handlers/test_swarm_cluster_conductor.py | 4 + playbooks/container-builder-setup-gate.yaml | 6 +- ...aefik-from-the-heat-agent-0bb32f0f2c97405d.yaml | 18 + ...ter_lb_enabled-to-cluster-c773fac9086b2531.yaml | 5 + ...s-health-polling-interval-75bb83b4701d48c5.yaml | 13 + ...ault-admission-controller-04398548cf63597c.yaml | 5 + ...ault-ng-worker-node-count-a88911a0b7a760a7.yaml | 6 + .../ensure-delete-complete-2f9bb53616e1e02b.yaml | 5 + ...expose_autoscaler_metrics-0ea9c61660409efe.yaml | 4 + ...-label-fixed_network_cidr-95d6a2571b58a8fc.yaml | 6 + ...ping-for-private-clusters-73a874bb4827d568.yaml | 6 + .../master-lb-allowed-cidrs-cc599da4eb96e983.yaml | 7 + .../notes/merge-labels-9ba7deffc5bb3c7f.yaml | 10 + .../notes/migrations-1.3.20-60e5f990422f2ca5.yaml | 4 + ...ing_scrape_ca_and_traefik-5544d8dd5ab7c234.yaml | 5 + ...onitoring_scrape_internal-6697e50f091b0c9c.yaml | 5 + ...-delete-all-loadbalancers-350a69ec787e11ea.yaml | 5 + .../notes/story-2008548-65a571ad15451937.yaml | 6 + .../notes/support-helm-v3-5c68eca89fc9446b.yaml | 19 + ...upgrade-on-behalf-of-user-c04994831360f8c1.yaml | 5 + ...ate_prometheus_monitoring-342a86f826be6579.yaml | 8 + 135 files changed, 2240 insertions(+), 1385 deletions(-)

1 0

sushy 2.0.5 (train)
by no-reply＠openstack.org 16 Apr '21

16 Apr '21

We are happy to announce the release of: sushy 2.0.5: Sushy is a small Python library to communicate with Redfish based systems This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 2.0.5 ^^^^^ Bug Fixes * Fixes "AttributeError: 'str' object has no attribute 'get'" during error handling. This occurs when BMC does not return a list of messages inside "@Message.ExtendedInfo", but a single item. This has been observed with iDRAC. Changes in sushy 2.0.4..2.0.5 ----------------------------- 40df70a Fix ExtendedInfo error handling for non-list item 74efff4 Ensure Content-Type header is set when required Diffstat (except docs and test files) ------------------------------------- ...ix-extended-info-error-handling-73fecb6bf5c852ff.yaml | 7 +++++++ sushy/connector.py | 5 ++++- sushy/exceptions.py | 13 +++++++------ 5 files changed, 47 insertions(+), 7 deletions(-)

1 0

sushy 3.2.1 (ussuri)
by no-reply＠openstack.org 16 Apr '21

16 Apr '21

We are chuffed to announce the release of: sushy 3.2.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.2.1 ^^^^^ Security Issues *************** * No longer logs passwords and auth tokens in DEBUG mode when using SessionService for authentication. Bug Fixes ********* * Fixes an issue in performing action "#Bios.ResetBios" when no body in POST request provided and BMC responds with HTTP 400 Bad request, for example, Dell R630 having iDRAC 2.75.75.75. See story 2008198 for details. * Fixes "AttributeError: 'str' object has no attribute 'get'" during error handling. This occurs when BMC does not return a list of messages inside "@Message.ExtendedInfo", but a single item. This has been observed with iDRAC. * Fixes Sushy OEM extension loading when using multiple servers that caused loaded extensions to point to server for which the extension was loaded first. * Instead of trying to GET /redfish/v1/SessionService, which is usually reachable via authentication, fail, and then guess /redfish/v1/SessionService/Sessions as Sessions URL, we try first to use directly the Sessions URL provided by the root service, if available. Changes in sushy 3.2.0..3.2.1 ----------------------------- 79d9420 Fix ExtendedInfo error handling for non-list item c808743 Ensure Content-Type header is set when required 95b3a32 Remove lower-constraints job 77ca137 Fix #Bios.ResetBios for HTTP 400 Bad request error ed88363 Use Sessions URL from root service if it's provided dc1b613 Less scary warning when GET /redfish/v1/SessionService fails 3aa78dd Do not log passwords and auth tokens when using SessionService 40864e1 Fix OEM extension loading for different servers d513ff7 Restore default netboot boot option 6ef4765 Fix pep8 test b97750f Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri c77846a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...ory-reset-400-bad-request-3f4a7a2aada0835b.yaml | 7 +++ ...ended-info-error-handling-73fecb6bf5c852ff.yaml | 7 +++ .../notes/fix-oem-loading-52da045252b6c33e.yaml | 6 +++ .../notes/no-passwords-295207ac891d27ab.yaml | 5 ++ ...se-sessions-url-from-root-8b8eca57dc450705.yaml | 8 ++++ sushy/auth.py | 10 +++- sushy/connector.py | 12 +++-- sushy/exceptions.py | 13 +++--- sushy/main.py | 10 ++++ sushy/resources/oem/common.py | 27 ++--------- sushy/resources/sessionservice/sessionservice.py | 25 ++++++---- sushy/resources/system/bios.py | 3 +- .../unit/json_samples/error_single_ext_info.json | 13 ++++++ .../sessionservice/test_sessionservice.py | 2 +- .../unit/resources/system/storage/test_storage.py | 2 +- sushy/utils.py | 12 +++++ tox.ini | 8 ++-- zuul.d/project.yaml | 1 - zuul.d/sushy-jobs.yaml | 1 + 25 files changed, 195 insertions(+), 78 deletions(-)

1 0

tripleo-common 15.0.0 (wallaby)
by no-reply＠openstack.org 15 Apr '21

15 Apr '21

We are glad to announce the release of: tripleo-common 15.0.0: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 15.0.0 ^^^^^^ Changes in tripleo-common 14.0.0..15.0.0 ---------------------------------------- 286aaac7 Bump Ceph containers to Pacific a072a7f0 healthcheck_port: drop lsof in favor of awk/find 6c536bf0 Update defaults for rhel modules in container base 568e4083 exclude redhat-release from yum update in openstack-base 6a5277b4 Add ceph-ansible to tripleoclient container 8dc6dfe4 container-images: fix Cinder when running at Edge 08addb94 Don't use tripleo_hostname tag 72c7d4ac Use quay.ceph.io to pull the Ceph Dashboard related images af932959 Don't install dhcp-all-interfaces for redhat 8 onwards e0b0d859 Switch to tripleo namespace grafana images 08902597 Addressed more pylint issues 5db2ab20 Don't allow rotation of HeatAuthEncryptionKey 138e7f31 Add passwords_env parameter to generate_passwords 34aa73b0 Extend ansible inventory from network config file 26f33ce8 Extend network info in generated inventory 6491e5aa Don't allow rotating keys if stack not found 1ca15643 Add support for py39 3496457e Removing tempest container build bcc74f59 Remove glance related utility methods cf12307b Ensure ansible.log accesses are locked e1b91448 Cleanup utils 2/2 5a422e4f Cleanup utils 1/2 816582da Drop swift cruft from config-download 22e5366d Removes unneeded zuul layout overrides - templates for consistency cd751b6f Don't require heat client for generate_passwords 35c50960 Remove all mistral actions from tripleo-common ca603f39 Remove layout override and wire up buildimage template instead 50a24d52 Convert AnsiblePlaybookAction to utility 16bc0232 Drop inject_facts_as_vars 6af709a6 Fix fact definition for deployments 83f311e7 Bring back custom nova filters for undercloud 0e81eb42 Reduce fact gathering 00b4f06e Remove mistral arg from generate_passwords 0b8717e0 Cleanup dead mistral actions and workbooks 24c311aa Add cloud-admin user to tripleoclient container 8daeeef0 Add SITE_PACKAGES variable to horizon extend_start ab387b6a Add python3-pymemcache to tcib fcbda76d Add healthcheck to the frr image 4556479d Do not use ironic/nova for generate_fencing cb6d1cc0 Add 'session' to generate inventory method 98dcadff Inventory from neutron resources 380a12c8 Frr image support bc9529cf Removed broken mocked params 7e797317 Handle containers without a namespace b79b0fc6 Fix uc install, Undercloud role must overwrite fd6df939 Don't use swift plan for existing passwords ff52ddb3 Add an internal index to network_data 86d0e65a Fix placement endpoint check when endpoints are not set f19f451f Add host_vars to define tasks executed before network configurations 97bb49e9 Bump Ceph containers to octopus f938e6ee Use the new IPA-builder element for installing python-hardware aa226d4d Document healthcheck and container build issues 21fd04f0 Revert "Revert "Fix a couple of Swift healthchecks"" Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 4 +- .pylintrc | 4 - bindep.txt | 10 +- .../container_image_prepare_defaults.yaml | 12 +- container-images/kolla/base/uid_gid_manage.sh | 4 +- container-images/kolla/horizon/extend_start.sh | 1 + .../kolla/tripleoclient/tripleoclient_sudoers | 1 + container-images/tcib/base/base.yaml | 6 +- container-images/tcib/base/frr/frr.yaml | 9 + container-images/tcib/base/os/os.yaml | 1 + container-images/tcib/base/os/tempest/tempest.yaml | 8 - .../tcib/base/tripleoclient/tripleoclient.yaml | 8 + container-images/tripleo_containers.yaml | 14 +- container-images/tripleo_containers.yaml.j2 | 16 +- healthcheck/README.md | 9 + healthcheck/common.sh | 42 +- healthcheck/frr | 10 + .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 + healthcheck/swift-account-replicator | 8 - healthcheck/swift-account-server | 4 +- healthcheck/swift-container-replicator | 8 - healthcheck/swift-container-server | 4 +- healthcheck/swift-object-replicator | 8 - healthcheck/swift-object-server | 15 +- healthcheck/swift-proxy | 2 +- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + ...vercloud-hardened-images-python3-rt-kernel.yaml | 1 - image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 + .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 + image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 7 +- image-yaml/overcloud-images-rhel7.yaml | 2 + image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 + image-yaml/overcloud-realtime-compute.yaml | 1 - ...tempest-container-support-596426994bbb5c9d.yaml | 8 + requirements.txt | 2 - setup.cfg | 39 - tox.ini | 2 +- tripleo_common/actions/ansible.py | 514 +------- tripleo_common/actions/baremetal.py | 514 -------- tripleo_common/actions/base.py | 182 --- tripleo_common/actions/derive_params.py | 465 ------- tripleo_common/actions/parameters.py | 163 --- tripleo_common/actions/plan.py | 304 ----- tripleo_common/actions/scale.py | 176 --- tripleo_common/actions/validations.py | 77 -- tripleo_common/constants.py | 13 +- tripleo_common/exception.py | 4 + tripleo_common/image/base.py | 2 +- tripleo_common/image/builder/buildah.py | 48 +- tripleo_common/image/image_export.py | 7 +- tripleo_common/image/image_uploader.py | 10 +- tripleo_common/inventory.py | 357 +++++- tripleo_common/templates/deployments.yaml | 8 +- tripleo_common/templates/host_var_server.j2 | 6 + .../utils/data/host_vars/overcloud-controller-0 | 2 + .../utils/data/host_vars/overcloud-novacompute-0 | 2 + .../utils/data/host_vars/overcloud-novacompute-1 | 2 + .../utils/data/host_vars/overcloud-novacompute-2 | 2 + tripleo_common/update.py | 21 +- tripleo_common/utils/ansible.py | 386 ++++++ tripleo_common/utils/config.py | 65 +- tripleo_common/utils/glance.py | 69 - tripleo_common/utils/nodes.py | 11 - tripleo_common/utils/overcloudrc.py | 43 - tripleo_common/utils/passwords.py | 14 +- tripleo_common/utils/plan.py | 411 +----- tripleo_common/utils/roles.py | 59 - tripleo_common/utils/stack.py | 163 +-- tripleo_common/utils/stack_parameters.py | 125 +- tripleo_common/utils/swift.py | 214 ---- tripleo_common/utils/tarball.py | 59 - tripleo_common/utils/template.py | 474 ------- workbooks/baremetal.yaml | 1349 -------------------- workbooks/derive_params.yaml | 512 -------- workbooks/derive_params_formulas.yaml | 836 ------------ workbooks/messaging.yaml | 155 --- workbooks/swift.yaml | 79 -- workbooks/validations.yaml | 78 -- zuul.d/layout.yaml | 113 +- 116 files changed, 2239 insertions(+), 11933 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 88f5bbb8..09a5b48c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +15,0 @@ six>=1.10.0 # MIT -mistral-lib>=0.3.0 # Apache-2.0 @@ -19 +17,0 @@ python-ironic-inspector-client>=1.5.0 # Apache-2.0 -python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0

1 0

python-tripleoclient 16.0.0 (wallaby)
by no-reply＠openstack.org 15 Apr '21

15 Apr '21

We joyfully announce the release of: python-tripleoclient 16.0.0: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Added option "enable_frr" to enable the TripleO FRR service in standalone and undercloud deployments. * The --setup-only option has been added to facilitate the generation of ansible content and ensure the environment is accessible via the current stack. * A consistent working directory is now used by the openstack overcloud deploy command. The directory contains input files, generated files, and log files, among others. The directory defaults to ~/overcloud-deploy/<stack>. The old default config-download directory at ~/config-download/<stack> is now a symlink to the new location at ~/overcloud-deploy/<stack>/config-download/<stack> for backwards compatibility. * The container image build command now has the ability to inject labels into various images being constructed. To add labels into a container, the argument *--label* can be specified multiple times. The value is always a key=value pair and each key must be unique. * Adds *auth_token_lifetime* to undercloud.conf with a default of 14400. This configuration option exposes the keystone token expirataion as a top level configuration since it may need to be increased to handle larger clouds. Upgrade Notes ************* * "openstack overcloud parameters set" command has been removed. It was used to update the plan parameters. Now that we use sever side parameter merging and no plan, this is not relevant anymore. * "openstack overcloud plan *" commands have been removed. These commands are irrelevant as overcloud deploy/update/upgrade does not create/update swift plan anymore. Also, some of the "openstack overcloud role" commands that use swift plan have been removed. Deprecation Notes ***************** * With the move to Nova-less provisioning and Neutron network management being removed from being managed via Heat, the undercloud minion functionality is now deprecated. * The --plan-environment-file option of openstack tripleo deploy command is now deprecated and not used. Bug Fixes ********* * Removing the deprecated "-e" and "--templates" switches to *overcloud node delete*. This is causing confusion to the operators. Other Notes *********** * The container image build label agument has the ability to do simple string replacements following the python standard. Available options for string replacement are *registry*, *namespace*, *prefix*, *image*, *tag*, and *name*. Example usage *--label component="%(prefix)s-%(name)s-container"*. Changes in python-tripleoclient 15.0.0..16.0.0 ---------------------------------------------- 50afcda1 Set config_download_dir for each stack when exporting Ceph 8edaf4eb Declare is_failed_validation variable before if statement 8b4d3268 Update overcloud export for new working directory 986f9261 Move static-inventory option into parser group a5471a4a [Validator Run] Add return code management 4e556da8 [UX] Align to left the table for the validations run results 2aeef0ee Use MultiKeyActionValue action for extra-[env-]vars arguments 49c5c31b Standalone set %service%VirtualFixedIPs abfedf30 Wire up --disable-container-prepare a7b0b5e4 Restore old config-download symlink to new location eb6d660e Revert the move of tripleo_validator in tripleo-validation 05168008 BM Provisioning - Apply node network config 3fc20a82 Refactor BM deployment to use '--work-dir' - [2/2] 7c927208 Bump up the version for osc-lib as ooo-validations need it. dc07649e Absolutize path for CIP output env b503d589 Don't initialize deploy_message again 8d760881 Fix make_config_download_dir() add3c406 Fix overcloud status command 9f9a7e9f Refactor BM deployment to use '--work-dir' [1/2] d8e4878e Update tripleo launch heat for HeatPodLauncher bb9ba5db Drop deprecation warning for OpenDaylight support 2d26e819 Add parameter to specify ca_cert 74c42829 Remove unnecessary zuul layout overrides use templates instead fe39c4c9 Do not use ironic/nova for generate_fencing 0f9fbfa5 Add HeatPodLauncher 40cca25a Remove unnecessary mocks in tests 733083dc Remove enable_tempest flag from tripleoclient 590df663 UX improvement when no nodes are found c6380a60 Revert "Revert "Add environment variables for better var handling"" 6aa5a92e Revert "Add environment variables for better var handling" d4d8d875 Fix AttributeError 0736e447 Copy the inventory for standalone deploy in output_dir 5dad0c35 Add environment variables for better var handling 600c7df8 Don't use mistral actions for baremetal workflow 051e80d0 Predictable dir for heat launcher 54d7271c Add faultwrap filter to paste pipeline for heat-all 336808ba Use a consistent working dir for deployment 2c5927a5 Add label argument for the container image build 4a8ab942 Remove default plan-environment.yaml references 0fa80989 Update default container registry to quay.io 49dc0836 parameter was covering covering `type` built in 4b0b290e Fix node delete to not use overcloud plan 9fce6e1c Remove overcloud set parameter command 3f6bfbaa Allow writing byte strings with safe_write 945882fe Modifying Openstack client for undercloud and overcloud backup 132c4d3d Track leftover files in config-download 1feed0e5 Remove keep_env_on_update logic 7d35e85e Bring back check_deprecated_parameters 3739872b Allow enabling swift on undercloud ea363cbf Fix image parameter update 9d5dd3bd Use extra_vars_file for json stack_data 1b527d0a node provision, Set vars for generating inventory 16789038 Add user-environment files to archive 668ac122 Fix get_deployment_status() 5e5b4fa2 Use full path of networks_file for minion 876b24b5 Disable swift on undercloud d2b81152 Don't use swift plan when exporting passwords 1603ed45 Remove plan/plan-role management commands 6e802d23 Locally keep deployment_status 2bd39e61 Archive overcloud deploy artifacts 438e53ad Add auth_token_lifetime to undercloud.conf be580c66 Add new option for `setup-only` 8b3fa1bf Write ansible-playbook-command.sh to workdir not playbook_dir 0b872060 Quote $@ in ansible-playbook-command.sh b2b765a8 Ignore stack-vstate-dropin.yaml for minion and uc e93244a2 Refactor jinja rendering of templates 5027962d Don't create/update plan for overcloud deploy 258ecb54 Use heat server side env merging d76a3ab9 Drop --update-plan-only e0eea8c5 Create overcloudrc using stack environment 261f4685 Deprecate minion commands 3e053974 Get gid and uid methods are now members of HeatBaseLauncher e3c11875 Dedup host entries in the exported data for stacks fd1d6649 Add enable_frr option e366699b Removing deprecated arguments for node delete cbfe5284 Remove orchestration section from tempest-deployer-input.conf b8c319d9 Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- .../add-frr-service-option-71c20b6512f435dc.yaml | 5 + ...onfig-download-setup-only-1423abc46b294939.yaml | 5 + .../consistent-deploy-dir-b16c43c4f94c03ca.yaml | 9 + .../notes/deprecate-minion-83d87a36a2e74ecc.yaml | 6 + ...loy-plan-environment-file-baeebec064bfd44a.yaml | 5 + .../notes/image-build-labels-97fda64f693cd8ba.yaml | 12 + ...elete-deprecated-switches-299df71bf6dfe450.yaml | 5 + ...-overcloud-parameters-set-346ef5321475deea.yaml | 6 + ...e-overcloud-plan-commands-69e89097fc9351fa.yaml | 8 + ...tempest-container-support-f25054588ad1a860.yaml | 8 + ...-expiration-configuration-6159d733f09e1b6e.yaml | 6 + requirements.txt | 2 +- setup.cfg | 18 +- templates/ephemeral-heat/heat-pod.yaml.j2 | 105 +++ templates/ephemeral-heat/heat.conf.j2 | 43 ++ tripleoclient/config/standalone.py | 12 +- tripleoclient/config/undercloud.py | 10 +- tripleoclient/constants.py | 29 +- tripleoclient/exceptions.py | 4 + tripleoclient/export.py | 31 +- tripleoclient/heat_launcher.py | 385 ++++++++-- .../v1/overcloud_deploy/test_overcloud_deploy.py | 788 +++++++++------------ .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 2 +- tripleoclient/utils.py | 385 ++++++++-- tripleoclient/v1/container_image.py | 3 +- tripleoclient/v1/minion_config.py | 3 +- tripleoclient/v1/overcloud_backup.py | 157 +++- tripleoclient/v1/overcloud_cell.py | 6 +- tripleoclient/v1/overcloud_credentials.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 636 ++++++++--------- tripleoclient/v1/overcloud_export.py | 16 +- tripleoclient/v1/overcloud_export_ceph.py | 17 +- tripleoclient/v1/overcloud_node.py | 18 - tripleoclient/v1/overcloud_parameters.py | 50 -- tripleoclient/v1/overcloud_plan.py | 227 ------ tripleoclient/v1/overcloud_plan_roles.py | 158 ----- tripleoclient/v1/tripleo_deploy.py | 111 +-- tripleoclient/v1/tripleo_launch_heat.py | 156 +++- tripleoclient/v1/tripleo_validator.py | 526 ++++++++++++++ tripleoclient/v1/undercloud_backup.py | 129 +++- tripleoclient/v1/undercloud_config.py | 21 +- tripleoclient/v1/undercloud_minion.py | 6 + tripleoclient/v2/overcloud_node.py | 40 +- tripleoclient/v2/tripleo_container_image.py | 32 + tripleoclient/workflows/baremetal.py | 341 +++++++-- tripleoclient/workflows/deployment.py | 280 ++++---- tripleoclient/workflows/parameters.py | 91 ++- tripleoclient/workflows/plan_management.py | 412 ----------- tripleoclient/workflows/roles.py | 76 +- tripleoclient/workflows/scale.py | 158 ++++- zuul.d/layout.yaml | 51 +- 74 files changed, 4441 insertions(+), 3842 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6e7279e5..ca97e077 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ six>=1.10.0 # MIT -osc-lib>=1.8.0 # Apache-2.0 +osc-lib>=2.3.0 # Apache-2.0

1 0

tripleo-common 12.4.4 (ussuri)
by no-reply＠openstack.org 14 Apr '21

14 Apr '21

We are glad to announce the release of: tripleo-common 12.4.4: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.3..12.4.4 ---------------------------------------- 22ecc9c6 Revert "Revert "Fix a couple of Swift healthchecks"" 9187e2e1 Don't allow rotation of HeatAuthEncryptionKey e4e0609a container-images: fix Cinder when running at Edge ee9ee7fe Add ceph-ansible to tripleoclient container 0f38abcc exclude redhat-release from yum update in openstack-base 89f98e2e Use quay.ceph.io to pull the Ceph Dashboard related images b5222348 Switch to tripleo namespace grafana images 38f5f14c Create a container for Unbound DNS resolver fdd5c0c0 [Victoria and bellow] Ensure rights on the ansible.log file 118af263 [stable-only] Fix legacy password handling 0fc8ce13 Removes unneeded zuul layout overrides - templates for consistency 88f5c890 Remove layout override and wire up buildimage template instead a6d2607f Add python3-pymemcache to tcib 778f3586 Drop inject_facts_as_vars 4865b5d2 Fix fact definition for deployments a69f4191 Reduce fact gathering 090ff9b8 Add cloud-admin user to tripleoclient container 785532d5 Add SITE_PACKAGES variable to horizon extend_start 0193f556 Handle containers without a namespace 3de751d9 Fix placement endpoint check when endpoints are not set 2e2f741e Use the new IPA-builder element for installing python-hardware 022b528f Use the new IPA-builder element for installing python-hardware eba3f421 Add ComputeNeutronl3Agent link to neutron-l3-agent container image cefc6250 Check existence of expires_in for auth 120a1192 Conditionally use python instead of cURL 6617fb6e Switch gnocchi-statsd HC to healthcheck_port c413005b Add missing ComputeNeutronMetadataAgent service into tripleo_containers.yaml.j2. 23bd48f0 Switch defaults to quay.io 6be18f31 Cleanup and add test coverage for inventory without overcloud 9ea8cafb Add heat-engine healthcheck Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 10 +- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/kolla/horizon/extend_start.sh | 1 + .../kolla/tripleoclient/tripleoclient_sudoers | 1 + container-images/tcib/base/base.yaml | 2 +- .../base/os/heat-base/heat-engine/heat-engine.yaml | 1 + container-images/tcib/base/os/os.yaml | 1 + .../tcib/base/tripleoclient/tripleoclient.yaml | 8 + container-images/tcib/base/unbound/unbound.yaml | 5 + container-images/tripleo_containers.yaml | 188 +++++++++++---------- container-images/tripleo_containers.yaml.j2 | 12 ++ healthcheck/common.sh | 13 +- healthcheck/gnocchi-statsd | 2 +- healthcheck/http-healthcheck.py | 44 +++++ .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 + healthcheck/swift-account-replicator | 8 - healthcheck/swift-account-server | 4 +- healthcheck/swift-container-replicator | 8 - healthcheck/swift-container-server | 4 +- healthcheck/swift-object-replicator | 8 - healthcheck/swift-object-server | 15 +- healthcheck/swift-proxy | 2 +- image-yaml/overcloud-images-python3.yaml | 6 +- image-yaml/overcloud-images.yaml | 4 +- tripleo_common/actions/ansible.py | 10 ++ tripleo_common/constants.py | 1 + tripleo_common/image/image_export.py | 7 +- tripleo_common/image/image_uploader.py | 3 +- tripleo_common/inventories.py | 3 +- tripleo_common/inventory.py | 18 +- tripleo_common/templates/deployments.yaml | 8 +- .../inventory_data/undercloud_dynamic_merged.json | 33 ++++ .../inventory_data/undercloud_static_merged.yaml | 18 ++ tripleo_common/utils/plan.py | 12 +- zuul.d/layout.yaml | 76 +-------- 40 files changed, 438 insertions(+), 230 deletions(-)

1 0

tripleo-heat-templates 12.4.3 (ussuri)
by no-reply＠openstack.org 14 Apr '21

14 Apr '21

We are satisfied to announce the release of: tripleo-heat-templates 12.4.3: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.3 ^^^^^^ New Features ************ * The new parameter GlanceCinderMountPointBase has been added which will be used for mounting NFS volumes on glance nodes. When glance uses cinder as store and cinder backend is NFS, this parameter must be set to match cinder's mount point. * The logic to configure the connection from barbican to nShield HSMs has been augmented to parse a nshield_hsms parameter, which allows the specification of multiple HSMs. The underlying ansible role (ansible-role-thales-hsm) will configure the HSMs in load sharing mode to provide HA. * New "CinderRpcResponseTimeout" and "CinderApiWsgiTimeout" parameters provide a means for configuring Cinder's RPC response and WSGI connection timeouts, respectively. * Add posibilities to configure ovn dbs monitor interval in tht by OVNDBSPacemakerMonitorInterval (default 30s). Under load, this can create extra stress and since the timeout has already been bumped, it makes sense to bump this interval to a higher value as a trade off between detecting a failure and stressing the service. * When a node has hugepages enabled, we can help with live migrations by enabling *NovaLiveMigrationPermitPostCopy* and *NovaLiveMigrationPermitAutoConverge*. These flags are automatically enabled if hugepages are detected, but operators can override these settings. * Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues in nova.conf of the compute. Default 0 corresponds to not set meaning the legacy limits based on the reported kernel major version will be used. * The new "SshServerOptionsOverrides" parameter has been added. This parameter can be used to override a part of sshd_config, which is defined by the "SshServerOptions". Known Issues ************ * Cell_v2 discovery has been moved from the nova-compute|nova-ironic containers as this requires nova api database credentials which must not be configured for the nova-compute service. As a result scale-up deployments which explicitly omit the Controller nodes will need to make alternative arrangements to run cell_v2 discovery. Either the nova-manage command can be run manually after scale-up, or an additional helper node using the NovaManage role can be deployed that will be used for this task instead of a Controller node. See Bug: 1786961 (https://launchpad.net/bugs/1786961) and Bug: 1871482 (https://launchpad.net/bugs/1871482). Deprecation Notes ***************** * Some parameters within ThalesVars have been deprecated. These are - thales_hsm_ip_address and thales_hsm_config_location. See environments/barbican-backend-pkcs11-thales.yaml for details. Bug Fixes ********* * When deploying a spine-and-leaf (L3 routed architecture) with TLS enabled for internal endpoints the deployment would fail because some roles are not connected to the network mapped to the service in ServiceNetMap. To fix this issue a role specific parameter "{{role.name}}ServiceNetMap" is introduced (defaults to: "{}"). The role specific ServiceNetMap parameter allow the operator to override one or more service network mappings per-role. For example: ComputeLeaf2ServiceNetMap: NovaLibvirtNetwork: internal_api_leaf2 The role specific "{{role.name}}ServiceNetMap" override is merged with the global "ServiceNetMap" when it's passed as a value to the "{{role.name}}ServiceChain" resources, and the "{{role.name}}" resource groups so that the correct network for this role is mapped to the service. Closes bug: 1904482 (https://bugs.launchpad.net/tripleo/+bug/1904482). * Previously, HorizonDebug and Debug parameters change the value of horizon::django_debug. However, those parameters didn't set DEBUG log level to horizon logger components. By this change, if those are true, horizon::log_level is set to 'DEBUG'. * Do not relabel Swift files on every container (re-)start. These will be relabeled already in step 3 preventing additional delays. Changes in tripleo-heat-templates 12.4.2..12.4.3 ------------------------------------------------ 560d98396 [update][upgrade] Use container-tools:3.0 83210e340 Move tmpwatch from cron.daily to actual root crontab 2a97154ef OVNChassisMacPorts for distributed VLAN a900a8055 Updating settings description 7e4bb3623 live_migration setting should be under libvirt namespace d690b41ef Create OVNMacAddrNet network on Undercloud 5d62f6642 Set toplevel nova::dhcp_domain for all nova services d96f77930 Support configuring cinder's RPC and WSGI timeouts b561d3a9f Add legacy fact setting 82e4cccce Allow configuring cinder mount point for glance cinder store 36e28d2d3 Check Ceph cluster healthy state before starting FS to BS playbook 284629a87 Make UpgradeInitCommand and UpgradeLeapp{ToRemove,ToInstall,CommandOptions} per-role 33b47f479 Fix start order for {swift_proxy,glance_api}_tls_proxy 9db6db69a Stop ironic services in unupgraded controllers 34c96db0e Stop barbican servics in unupgraded controllers 7281bb019 Add posibilities to set ovndbs monitor interval 698cfa661 Upgrade mariadb storage during upgrade tasks d5899589d Add delegate_fact_hosts: false on ci scenarios 1f8d90c29 Remove tripleo_transfer cleanup.yml reference e140e22e1 Add TLS capabilities to Memcached service f54ca2506 Make content provider depend on tox-pep8/tht on check layout c6e9974ba Change play name 6997676b1 Use include task for host prep tasks 603beaa02 Use ansible_facts instead 0d88e0e20 Enabling 'cinder_use_multipath' if cinder multipath is enabled cc9a390b5 Drop service facts usage bc1fd4741 Fix redis_tls_proxy 6de73eca7 Don't try creating default admin and member roles ac11fc15c Stop non-pcmk services of manila and cinder during upgrade 4e2e984b9 Add parameters to allow multiple nshield HSMs 7f8e32bef Fix logic to honor HorizonDebug 0502fb1aa Set 'DEBUG' to horizon::log_level if HorizonDebug or Debug is true cde398d9b Add a new role parameter rhsm_enforce. 341fbc46e Always set NetworkDeploymentActions to its default 9740d89f1 Stop octavia servics in unupgraded controllers c77472ec3 Add ContainerDefaultPidsLimit to set default pid limits in containers.conf f2602657a per_node is not parsing generated json 633ad7781 Problematic nested quotes in hieradata file list b188630e8 Use Ceph cluster name when setting minimum client version 2be083bf2 Make DnfStreams support RoleParameters 9a8c007da Move cell_v2 discovery off compute hosts ace7eb7d6 Refactor nova db config d38c3df91 Make NovaComputeOptVolumes and NovaComputeOptEnvVars role aware 43c02ebc9 Add post delay to reboot 4b8a18069 Enforces minimum Ceph client version to Mimic cbc5d0e6e Deprecate environments/dcn-hci.yaml for dcn-storage.yaml 2c298e231 Split network validation to it's own play cb8e846ea Force json output format for hiera in derive pci whitelist 59b2d7618 Remove External{Internal,Public,Admin}Url parameters e21b9f8dd Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues 81a184033 Revert "Reset sriov_numvfs to 0 before leapp upgrade" 3bd9c10e8 Use include_role for conditional inclusion d9414af71 Use Ceph-NFS for Manila in scenario004 83ba65e3a Serialize shutdown of pacemaker nodes 4dac4701f Deleting nova-consoleauth services in post-upgrade 38d6c5932 Live migration optimization with HP 9998bfc5d Making sure virt-guest-shutdown.target exists 114ba5dd4 Remove ffwd lifecycle environment files. c04572dbb Remove pcs/pacemaker package installation from upgrade tasks c9ffe726f Fix unreachable handling 3f93e3a15 Update container-config-scripts/ folder content before update_tasks. 826221eb4 Do not relabel Swift files on every container start 7c01d809d Make it possible to override ServiceNetMap per-role 94236c757 Fix ownership of octavia_rsyslog log directory 220bf13a2 Configure OVNCMSOptions=enable-chassis-as-gw within neutron-ovn-sriov.yaml 1484c4560 nova: Use LIBGUESTFS_BACKEND=direct 1a085631c [Ussuri and older] Set python_cmd where we need it ef0675dc0 Ensure cloud-init has finished before puppet run 26298a65c Allow partial override about SshServerOptions 5e9a03d91 Switch host sshd configuration to ansible Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-containers.yaml | 1 + ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 6 + common/common-container-config-scripts.yaml | 17 +++ common/deploy-steps-playbooks-common.yaml | 20 ++- common/deploy-steps-tasks-step-0.j2.yaml | 17 +++ common/deploy-steps-tasks-step-1.yaml | 33 +---- common/deploy-steps-tasks.yaml | 6 +- common/deploy-steps.j2 | 24 ++- common/generate-config-tasks.yaml | 19 ++- common/host-container-puppet-tasks.yaml | 21 ++- container_config_scripts/mysql_upgrade_db.sh | 15 ++ .../pacemaker_mutex_shutdown.sh | 120 +++++++++++++++ .../pacemaker_resource_lock.sh | 34 ++++- .../barbican/barbican-api-container-puppet.yaml | 28 +++- deployment/ceph-ansible/ceph-base.yaml | 11 ++ deployment/ceph-ansible/ceph-mon.yaml | 28 ++++ deployment/ceph-ansible/ceph-rgw.yaml | 4 - deployment/cinder/cinder-api-container-puppet.yaml | 11 +- .../cinder/cinder-backup-container-puppet.yaml | 15 ++ .../cinder/cinder-backup-pacemaker-puppet.yaml | 2 +- deployment/cinder/cinder-base.yaml | 5 + .../cinder/cinder-volume-container-puppet.yaml | 15 ++ .../cinder/cinder-volume-pacemaker-puppet.yaml | 2 +- deployment/containers-common.yaml | 3 + deployment/database/mysql-base.yaml | 6 + deployment/database/mysql-container-puppet.yaml | 51 +++++-- deployment/database/mysql-pacemaker-puppet.yaml | 52 +++---- deployment/database/redis-pacemaker-puppet.yaml | 24 ++- deployment/glance/glance-api-container-puppet.yaml | 14 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/horizon/horizon-container-puppet.yaml | 24 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 4 +- deployment/ironic/ironic-api-container-puppet.yaml | 14 ++ .../ironic/ironic-conductor-container-puppet.yaml | 15 ++ .../ironic/ironic-inspector-container-puppet.yaml | 16 ++ deployment/ironic/ironic-pxe-container-puppet.yaml | 16 ++ .../logrotate-crond-container-puppet.yaml | 45 ++++-- deployment/manila/manila-api-container-puppet.yaml | 15 ++ .../manila/manila-scheduler-container-puppet.yaml | 15 ++ .../manila/manila-share-container-puppet.yaml | 15 ++ .../manila/manila-share-pacemaker-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 115 +++++++++++---- deployment/metrics/collectd-container-puppet.yaml | 2 +- .../neutron/derive_pci_passthrough_whitelist.py | 2 +- .../neutron-sriov-agent-container-puppet.yaml | 31 +--- deployment/nova/nova-api-container-puppet.yaml | 38 +++-- deployment/nova/nova-apidb-client-puppet.yaml | 78 ++++++++++ deployment/nova/nova-base-puppet.yaml | 74 +--------- .../nova/nova-compute-common-container-puppet.yaml | 22 ++- deployment/nova/nova-compute-container-puppet.yaml | 163 +++++++++++++++++---- .../nova/nova-conductor-container-puppet.yaml | 60 ++++++-- deployment/nova/nova-db-client-puppet.yaml | 80 ++++++++++ deployment/nova/nova-ironic-container-puppet.yaml | 28 ++-- deployment/nova/nova-libvirt-container-puppet.yaml | 11 +- deployment/nova/nova-manager-container-puppet.yaml | 105 +++++++++++++ .../nova/nova-metadata-container-puppet.yaml | 45 ++++-- .../nova/nova-scheduler-container-puppet.yaml | 31 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 53 ++++++- deployment/nova/novajoin-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 15 ++ .../octavia/octavia-deployment-config.j2.yaml | 4 +- .../octavia-health-manager-container-puppet.yaml | 20 ++- .../octavia-housekeeping-container-puppet.yaml | 15 ++ .../octavia/octavia-worker-container-puppet.yaml | 19 ++- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 16 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 6 + deployment/podman/podman-baremetal-ansible.yaml | 7 + ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 2 +- deployment/sshd/sshd-baremetal-ansible.yaml | 105 +++++++++++++ deployment/sshd/sshd-baremetal-puppet.yaml | 10 +- .../external-swift-proxy-baremetal-puppet.yaml | 49 +------ deployment/swift/swift-proxy-container-puppet.yaml | 1 + .../swift/swift-storage-container-puppet.yaml | 7 +- deployment/timesync/chrony-baremetal-ansible.yaml | 11 +- deployment/tls/undercloud-tls.yaml | 6 +- .../tripleo-packages-baremetal-puppet.yaml | 57 +++++-- deployment/undercloud/undercloud-upgrade.yaml | 4 +- environments/barbican-backend-pkcs11-thales.yaml | 22 ++- environments/dcn-hci.yaml | 3 + environments/dcn-storage.yaml | 57 +++++++ environments/lifecycle/ffwd-upgrade-converge.yaml | 9 -- environments/lifecycle/ffwd-upgrade-prepare.yaml | 10 -- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 - environments/services/neutron-ovn-ha.yaml | 4 - environments/services/neutron-ovn-sriov.yaml | 6 +- environments/standalone/standalone-overcloud.yaml | 2 + environments/standalone/standalone-tripleo.yaml | 2 + environments/undercloud.yaml | 4 + environments/undercloud/undercloud-minion.yaml | 2 + network/networks.j2.yaml | 3 + network/ovn_mac_addr_net.yaml | 37 +++++ network/ports/ovn_mac_addr_port.yaml | 27 ++++ overcloud-resource-registry-puppet.j2.yaml | 9 +- overcloud.j2.yaml | 26 +++- puppet/extraconfig/pre_deploy/per_node.yaml | 12 +- puppet/role.role.j2.yaml | 34 +++++ ...ount-point-base-parameter-852554398b9f3a19.yaml | 7 + .../notes/barbican-thales-ha-581fbe9b5ef4dc87.yaml | 11 ++ .../notes/bug-1904482-dbc5162c8245a9b3.yaml | 21 +++ ...v2_discovery_off_computes-2b977c6b9a01cde2.yaml | 13 ++ ...er-add-timeout-parameters-54550a6e1c11c0b9.yaml | 6 + .../dcn-hci-storage-rename-0b1c17dd50f4cc9a.yaml | 8 + .../horizon_logger_debug-cd70c45c1b695e4b.yaml | 8 + .../monitor_interval_ovndbs-b14c886737965300.yaml | 9 ++ ...mit-postcopy-autoconverge-ca1719fd2abed45f.yaml | 8 + .../nova_libvirt_max_queues-8024fc63105bd25d.yaml | 6 + ...-server-options-overrides-f677913bfd65efe1.yaml | 6 + .../swift-prevent-relabeling-b9721aa5a1abda6e.yaml | 5 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/NovaManager.yaml | 37 +++++ roles/README.rst | 6 + roles/Standalone.yaml | 3 + roles_data.yaml | 1 + sample-env-generator/dcn.yaml | 11 +- sample-env-generator/standalone.yaml | 9 +- sample-env-generator/undercloud-minion.yaml | 8 +- tools/yaml-validate.py | 7 +- zuul.d/layout.yaml | 5 + 127 files changed, 2073 insertions(+), 496 deletions(-)

1 0