April 2021 - Release-announce - lists.openstack.org

barbican 12.0.0.0rc2 (wallaby)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

Hello everyone, A new release candidate for barbican for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/barbican/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/barbican/src/branch/stable/wallaby Release notes for barbican can be found at: https://docs.openstack.org/releasenotes/barbican/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/barbican/+bugs and tag it *wallaby-rc-potential* to bring it to the barbican release crew's attention.

1 0

tripleo-puppet-elements 11.3.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are delighted to announce the release of: tripleo-puppet-elements 11.3.0: Puppet building rules for OpenStack images. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.2.2..11.3.0 ------------------------------------------------- 41cb7c9 Check that etc/resolv.conf.ORIG exists before edit 511f065 Up pbr requirements - failing openstack-tox Diffstat (except docs and test files) ------------------------------------- elements/remove-resolvconf/cleanup.d/90-remove-resolvconf | 4 +++- requirements.txt | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4e46b89..7deef88 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.5.21,<1.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0

1 0

os-apply-config 10.6.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are ecstatic to announce the release of: os-apply-config 10.6.0: Config files from cloud metadata This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 10.5.2..10.6.0 ----------------------------------------- 41d86e3 Remove tripleo-multinode-container-minimal from zuul layout Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 1 - 1 file changed, 1 deletion(-)

1 0

puppet-tripleo 11.6.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are amped to announce the release of: puppet-tripleo 11.6.0: Puppet module for OpenStack TripleO This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.6.0 ^^^^^^ New Features ************ * Add ability to specify the memcache_security_strategy and memcache_secret_key for keystone authtoken middleware. The keys used by individual services are hashed with a salt (the service name), to isolate them. * Add ability to specify memcached port for all services. The port defaults to hiera('memcached_authtoken_port', 11211) for authtoken middleware and hiera('memcached_port', 11211) for other uses. Bug Fixes ********* * libvirt 6.8.0 introduces virt-ssh-helper which prepends the libvirt ssh command with a "which virt-ssh-helper". libvirt used to first check for *nc* (netcat). But these two libvirt commits[1][2] have now changed it to first look for *virt-ssh-helper*, if it not available, then fall back to *nc*. This trips up the 'nova- migration-wrapper' as it does not support virt-ssh-helper atm. Until this is implemented, this change force to use "netcat" (*nc*) by appending to the migration URI: "&proxy=netcat" [1] https://libvirt.org/git/?p=libvirt.git;a=commit;h=f8ec7c842d (rpc: use new virt-ssh-helper binary for remote tunnelling, 2020-07-08) [2] https://libvirt.org/git/?p=libvirt.git;a=commit;h=7d959c302d (rpc: Fix virt-ssh-helper detection, 2020-10-27) Changes in puppet-tripleo 11.5.0..11.6.0 ---------------------------------------- 1bdc2863 Handle cinder_mount_point_base for cinder mounting needs 0108687c Add parameters for multipath connection in cinder store d0c88554 Fix novavnc haproxy network c765a81e Fix live-migration with libvirt >= 6.8.0 8d5bb4b8 Add ability to specify memcached port e54d6040 Add check for bootstrap_node for downcase 112f3799 Stop including nova::metadata on computes cb960b93 Allow OCF resources to be created with --force 817e6a36 Fix manila-share with ceph-nfs backend cff548bb Add authtoken security options Diffstat (except docs and test files) ------------------------------------- manifests/haproxy.pp | 4 +-- manifests/profile/base/aodh.pp | 2 +- manifests/profile/base/aodh/api.pp | 2 +- manifests/profile/base/aodh/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/barbican/api.pp | 2 +- manifests/profile/base/barbican/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/ceilometer/upgrade.pp | 2 +- manifests/profile/base/cinder.pp | 2 +- manifests/profile/base/cinder/api.pp | 2 +- manifests/profile/base/cinder/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/database/mysql.pp | 2 +- manifests/profile/base/designate/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/designate/central.pp | 2 +- manifests/profile/base/glance/api.pp | 2 +- manifests/profile/base/glance/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/glance/backend/cinder.pp | 18 ++++++++++++ manifests/profile/base/gnocchi/api.pp | 2 +- manifests/profile/base/gnocchi/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/heat/api.pp | 2 +- manifests/profile/base/heat/api_cfn.pp | 2 +- manifests/profile/base/heat/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/heat/engine.pp | 2 +- manifests/profile/base/horizon.pp | 2 +- manifests/profile/base/ironic.pp | 2 +- manifests/profile/base/ironic/api.pp | 2 +- manifests/profile/base/ironic/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/ironic/conductor.pp | 2 +- manifests/profile/base/ironic_inspector.pp | 2 +- .../profile/base/ironic_inspector/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/keystone.pp | 8 +++++- manifests/profile/base/manila.pp | 2 +- manifests/profile/base/manila/api.pp | 2 +- manifests/profile/base/manila/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/mistral.pp | 2 +- manifests/profile/base/mistral/api.pp | 2 +- manifests/profile/base/mistral/engine.pp | 2 +- manifests/profile/base/mistral/event_engine.pp | 2 +- manifests/profile/base/mistral/executor.pp | 2 +- manifests/profile/base/neutron/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/neutron/ovn_northd.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 2 +- manifests/profile/base/neutron/plugins/nsx.pp | 2 +- manifests/profile/base/neutron/plugins/nuage.pp | 2 +- .../profile/base/neutron/plugins/opencontrail.pp | 2 +- manifests/profile/base/neutron/plugins/plumgrid.pp | 2 +- manifests/profile/base/neutron/server.pp | 2 +- manifests/profile/base/nova.pp | 13 ++++++--- manifests/profile/base/nova/api.pp | 2 +- manifests/profile/base/nova/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/nova/compute.pp | 5 ---- manifests/profile/base/nova/conductor.pp | 2 +- manifests/profile/base/nova/ec2api.pp | 2 +- manifests/profile/base/nova/metadata.pp | 2 +- manifests/profile/base/nova/migration/client.pp | 5 +++- manifests/profile/base/octavia/api.pp | 2 +- manifests/profile/base/octavia/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/panko/api.pp | 2 +- manifests/profile/base/panko/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/placement.pp | 2 +- manifests/profile/base/placement/api.pp | 2 +- manifests/profile/base/placement/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/rabbitmq.pp | 2 +- manifests/profile/base/sahara.pp | 2 +- manifests/profile/base/sahara/engine.pp | 2 +- manifests/profile/base/swift/proxy.pp | 10 +++---- manifests/profile/base/trove/api.pp | 2 +- manifests/profile/base/zaqar.pp | 2 +- manifests/profile/pacemaker/ceph_nfs.pp | 7 +++-- manifests/profile/pacemaker/cinder/backup.pp | 2 +- .../profile/pacemaker/cinder/backup_bundle.pp | 2 +- manifests/profile/pacemaker/cinder/volume.pp | 2 +- .../profile/pacemaker/cinder/volume_bundle.pp | 2 +- manifests/profile/pacemaker/database/mysql.pp | 2 +- .../profile/pacemaker/database/mysql_bundle.pp | 7 ++++- manifests/profile/pacemaker/database/redis.pp | 2 +- .../profile/pacemaker/database/redis_bundle.pp | 7 ++++- manifests/profile/pacemaker/haproxy.pp | 2 +- manifests/profile/pacemaker/haproxy_bundle.pp | 2 +- manifests/profile/pacemaker/manila.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 2 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 7 ++++- manifests/profile/pacemaker/rabbitmq.pp | 2 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 7 ++++- .../add-memcache-security-92060c4fe540774c.yaml | 7 +++++ .../notes/add-memcached-port-048959c2f58f0a57.yaml | 6 ++++ ...e_live_migration_force_nc-f903a09955164ad9.yaml | 15 ++++++++++ ...pleo_profile_base_glance_backend_cinder_spec.rb | 6 ++++ 87 files changed, 584 insertions(+), 140 deletions(-)

1 0

tripleo-common 11.6.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are gleeful to announce the release of: tripleo-common 11.6.0: A common library for TripleO workflows. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 11.5.0..11.6.0 ---------------------------------------- e5388f3a Use quay.ceph.io to pull the Ceph Dashboard related images b9a16458 Drop inject_facts_as_vars e19f2ca1 Switch to tripleo namespace grafana images c45c836b Don't allow rotation of HeatAuthEncryptionKey c1cef817 Remove copy_ssh_key task from validation workbook 0630a00e [stable-only] Fix legacy password handling 4e89e4bb Add missing ComputeNeutronMetadataAgent service into tripleo_containers.yaml.j2. 7d93ae6f Removes unneeded zuul layout overrides - templates for consistency d6da694b Remove layout override and wire up buildimage template instead a8f62c54 Add python3-pymemcache to tcib 066e8613 Fix fact definition for deployments 9cc6007e Reduce fact gathering 65e76043 Switch defaults to quay.io db8ff0ae Add cloud-admin user to tripleoclient container c24347cb Add SITE_PACKAGES variable to horizon extend_start 7d7a983c Handle containers without a namespace b8e671fe Fix placement endpoint check when endpoints are not set 0cab033b [Train Only] Remove python-pip from base image 74c85faa Conditionally use python instead of cURL eb1b8d63 Add ComputeNeutronl3Agent link to neutron-l3-agent container image 2ec51ff8 Use the new IPA-builder element for installing python-hardware 4ae163f0 Use the new IPA-builder element for installing python-hardware 2effe2ff Check existence of expires_in for auth dfb625e9 Switch gnocchi-statsd HC to healthcheck_port 8b37b05e Cleanup and add test coverage for inventory without overcloud Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 12 +- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/kolla/horizon/extend_start.sh | 1 + .../kolla/tripleoclient/tripleoclient_sudoers | 1 + container-images/overcloud_containers.yaml | 208 ++++++++++----------- container-images/tcib/base/os/os.yaml | 1 + .../tcib/base/tripleoclient/tripleoclient.yaml | 7 + container-images/tripleo_containers.yaml | 208 ++++++++++----------- container-images/tripleo_containers.yaml.j2 | 2 + .../tripleo_kolla_template_overrides.j2 | 4 + healthcheck/common.sh | 11 +- healthcheck/gnocchi-statsd | 2 +- healthcheck/http-healthcheck.py | 44 +++++ image-yaml/overcloud-images-python3.yaml | 6 +- image-yaml/overcloud-images.yaml | 4 +- tripleo_common/actions/ansible.py | 5 + tripleo_common/actions/parameters.py | 12 +- tripleo_common/constants.py | 1 + tripleo_common/image/image_export.py | 7 +- tripleo_common/image/image_uploader.py | 3 +- tripleo_common/image/kolla_builder.py | 3 +- tripleo_common/inventories.py | 3 +- tripleo_common/inventory.py | 18 +- tripleo_common/templates/deployments.yaml | 8 +- .../inventory_data/undercloud_dynamic_merged.json | 36 ++++ .../inventory_data/undercloud_static_merged.yaml | 21 +++ workbooks/validations.yaml | 37 ---- zuul.d/layout.yaml | 101 +--------- 34 files changed, 552 insertions(+), 418 deletions(-)

1 0

tripleo-validations 11.5.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We enthusiastically announce the release of: tripleo-validations 11.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.5.0 ^^^^^^ New Features * Introducing the overcloud_service_status role. This role will hit the overcloud API for nova and cinder, retrieve the services and will trig a failure if one of these services are either down or deprecated. The original intent was to validate that nova- consoleauth was deleted after an update to RHOSP16. Changes in tripleo-validations 11.4.0..11.5.0 --------------------------------------------- 1a73733 Introduce tox-ansible to tripleo-validations c21e1df Remove linters dependency from content-provider in gate 24de593 Use the UBI8 image for testing 0e39ac0 Fix molecule jobs after release of cryptography3.4 46cee61 Optionally fail ceph-health if HEALTH_WARN 3eec83e Introducing the overcloud-service-status role 4d847f6 [autodoc] guessing converge playbook e96b939 [train-only]Tox now checks proper upper constraints file f79d6f7 Generate inventory without any overcloud 2467f84 Restore layout.yaml file 8274f9c Remove useless __init__.py file in library Diffstat (except docs and test files) ------------------------------------- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 _skeleton_role_/molecule/default/molecule.yml | 37 ++--- ansible-test-env.rc | 7 +- bindep.txt | 11 ++ library/__init__.py | 0 molecule-requirements.txt | 1 - playbooks/overcloud-service-status.yaml | 18 +++ ...-overcloud-service-status-128bf74993d035fa.yaml | 8 + role-addition.yml | 4 +- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 36 +++-- roles/ceph/defaults/main.yml | 1 + .../molecule/ceph-ansible-installed/molecule.yml | 39 ++--- .../molecule/ceph-ansible-installed/prepare.yml | 2 +- roles/ceph/molecule/default/molecule.yml | 37 +++-- roles/ceph/tasks/ceph-health.yaml | 7 + .../molecule/default/Dockerfile | 2 +- .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/molecule.yml | 28 +++- .../molecule/rhsm_mismatch/molecule.yml | 30 +++- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../container_status/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../controller_token/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/converge.yml | 24 ++- .../molecule/default/molecule.yml | 41 ++--- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../ctlplane_ip_range/molecule/default/prepare.yml | 5 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../dhcp_validations/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/image_serve/molecule/default/molecule.yml | 43 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 38 ++--- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/node_disks/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/node_health/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/nova_status/molecule/default/molecule.yml | 37 +++-- roles/nova_svirt/molecule/default/molecule.yml | 37 ++--- roles/nova_svirt/molecule/default/prepare.yml | 5 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- roles/overcloud_service_status/README.md | 47 ++++++ .../overcloud_service_status/defaults/main.yml | 12 ++ .../molecule/default/Dockerfile | 37 +++++ .../molecule/default/molecule.yml | 54 +++++++ .../molecule/deprecated_services/Dockerfile | 37 +++++ .../molecule/deprecated_services/molecule.yml | 54 +++++++ .../molecule/down_services/Dockerfile | 37 +++++ .../molecule/down_services/molecule.yml | 54 +++++++ roles/overcloud_service_status/resources/README.md | 1 + .../resources/playbooks/converge.yml} | 20 ++- .../resources/playbooks/prepare.yml | 12 ++ .../resources/scripts/http_server.py | 175 +++++++++++++++++++++ roles/overcloud_service_status/tasks/main.yml | 48 ++++++ .../overcloud_service_status/tasks/os_service.yml | 82 ++++++++++ roles/overcloud_service_status/vars/main.yml | 32 ++++ .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../pacemaker_status/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../rabbitmq_limits/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/repos/molecule/default/molecule.yml | 36 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/stack_health/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/stonith_exists/molecule/default/molecule.yml | 36 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/switch_vlans/molecule/default/molecule.yml | 37 +++-- .../system_encoding/molecule/default/molecule.yml | 37 ++--- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 roles/tls_everywhere/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../undercloud_debug/molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 36 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 41 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 37 +++-- .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 41 +++-- .../{Dockerfile.j2 => Dockerfile} | 0 .../non-persistent-token-format/molecule.yml | 41 +++-- scripts/run-local-test | 11 +- scripts/tripleo-ansible-inventory | 47 ++++-- tools/test-setup.sh | 8 - tox.ini | 9 +- tripleo_validations/constants.py | 18 +++ tripleo_validations/utils.py | 29 +++- zuul.d/layout.yaml | 16 +- zuul.d/layout.yaml.bak | 36 ----- zuul.d/molecule.yaml | 8 + zuul.d/playbooks/pre.yml | 102 ++++++++++-- zuul.d/playbooks/run-local.yml | 5 +- 120 files changed, 1954 insertions(+), 813 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 06f6ca8..8f2ec10 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -4 +3,0 @@ ansible -docker

1 0

tripleo-heat-templates 11.5.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are pleased to announce the release of: tripleo-heat-templates 11.5.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.5.0 ^^^^^^ New Features ************ * The new parameter GlanceCinderMountPointBase has been added which will be used for mounting NFS volumes on glance nodes. When glance uses cinder as store and cinder backend is NFS, this parameter must be set to match cinder's mount point. * The logic to configure the connection from barbican to nShield HSMs has been augmented to parse a nshield_hsms parameter, which allows the specification of multiple HSMs. The underlying ansible role (ansible-role-thales-hsm) will configure the HSMs in load sharing mode to provide HA. * A new multipathd-container-ansible.yaml heat template replaces the multipathd-container.yaml template. The new template adds support for the following new parameters. * MultipathdSkipKpartx * MultipathdCustomConfigFile * When a node has hugepages enabled, we can help with live migrations by enabling *NovaLiveMigrationPermitPostCopy* and *NovaLiveMigrationPermitAutoConverge*. These flags are automatically enabled if hugepages are detected, but operators can override these settings. * Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues in nova.conf of the compute. Default 0 corresponds to not set meaning the legacy limits based on the reported kernel major version will be used. Known Issues ************ * Cell_v2 discovery has been moved from the nova-compute|nova-ironic containers as this requires nova api database credentials which must not be configured for the nova-compute service. As a result scale-up deployments which explicitly omit the Controller nodes will need to make alternative arrangements to run cell_v2 discovery. Either the nova-manage command can be run manually after scale-up, or an additional helper node using the NovaManage role can be deployed that will be used for this task instead of a Controller node. See Bug: 1786961 (https://launchpad.net/bugs/1786961) and Bug: 1871482 (https://launchpad.net/bugs/1871482) Upgrade Notes ************* * When upgrading from the multipathd-container.yaml template to the new multipathd-container-ansible.yaml template, bear in mind the new MultipathdSkipKpartx parameter will configure the corresponding skip_kpartx setting in /etc/multipath.conf. Deprecation Notes ***************** * Some parameters within ThalesVars have been deprecated. These are - thales_hsm_ip_address and thales_hsm_config_location. See environments/barbican-backend-pkcs11-thales.yaml for details. * The multipathd-container.yaml template is deprecated in favor of a new multipathd-container-ansible.yaml template. The new template is backward compatible with the old template, but see the features and upgrade notes for additional details. Bug Fixes ********* * When deploying a spine-and-leaf (L3 routed architecture) with TLS enabled for internal endpoints the deployment would fail because some roles are not connected to the network mapped to the service in ServiceNetMap. To fix this issue a role specific parameter "{{role.name}}ServiceNetMap" is introduced (defaults to: "{}"). The role specific ServiceNetMap parameter allow the operator to override one or more service network mappings per-role. For example: ComputeLeaf2ServiceNetMap: NovaLibvirtNetwork: internal_api_leaf2 The role specific "{{role.name}}ServiceNetMap" override is merged with the global "ServiceNetMap" when it's passed as a value to the "{{role.name}}ServiceChain" resources, and the "{{role.name}}" resource groups so that the correct network for this role is mapped to the service. Closes bug: 1904482 (https://bugs.launchpad.net/tripleo/+bug/1904482) * Fixed the Octavia OctaviaTenantLogFacility setting default to 0 to align it with the project default. * Previously, HorizonDebug and Debug parameters change the value of horizon::django_debug. However, those parameters didn't set DEBUG log level to horizon logger components. By this change, if those are true, horizon::log_level is set to 'DEBUG'. * Do not relabel Swift files on every container (re-)start. These will be relabeled already in step 3 preventing additional delays. Changes in tripleo-heat-templates 11.4.0..11.5.0 ------------------------------------------------ 0ebdf0c58 Updating settings description d5949fe86 Set toplevel nova::dhcp_domain for all nova services f1d91a9e0 [TRAIN-Only] Update ansible python fact bc6840c6e Enabling 'cinder_use_multipath' if cinder multipath is enabled b9dd8ccd6 Allow configuring cinder mount point for glance cinder store 90a04d94e Add legacy fact setting f9e51cf46 Stop ironic services in unupgraded controllers 25493bcb1 Make UpgradeInitCommand and UpgradeLeapp{ToRemove,ToInstall,CommandOptions} per-role 02743e1ab Check Ceph cluster healthy state before starting FS to BS playbook eb61c8054 Fix start order for {swift_proxy,glance_api}_tls_proxy 5be4f8f31 Stop barbican servics in unupgraded controllers 8fc59c12c Stop octavia servics in unupgraded controllers deee084ed Validation are not run via mistral anymore in Train 9bdf4b168 Upgrade mariadb storage during upgrade tasks aaf9e860e [Ussuri and older] Set python_cmd where we need it 54414a14b Remove scenario007-multinode and scenario010-standalone from layout ffae4ae76 Add delegate_fact_hosts: false on ci scenarios 526791d6c Remove tripleo_transfer cleanup.yml reference cc0752392 Use include task for host prep tasks 4e79336d6 Use ansible_facts instead 6902fcea0 Drop service facts usage badc6bc1e Fix redis_tls_proxy 7d56985fa Don't try creating default admin and member roles e1aee7c3e Stop non-pcmk services of manila and cinder during upgrade 785706f4a Refactor nova db config 9d7a5a5c6 Adding placement client package to clients 656a6f50d pcs commands on host: ovn dbs 4db546260 pcs commands on host: manila-share 60cd610f9 pcs commands on host: rabbitmq 327f0e503 pcs commands on host: cinder backup/volume 07d8f2082 pcs commands on host: mysql 67e5d621e pcs commands on host: redis bundle a7cceb0f9 pcs commands on host: haproxy bundle c8f1976fa Add parameters to allow multiple nshield HSMs 2dc7ceeac Add a new role parameter rhsm_enforce. d3c837e81 Fix logic to honor HorizonDebug 79aec182b Set 'DEBUG' to horizon::log_level if HorizonDebug or Debug is true 19bb2152f [train-only] Add FFWD workaround for UEFI systems 1a1744316 Add ContainerDefaultPidsLimit to set default pid limits in containers.conf b894347cb Always set NetworkDeploymentActions to its default 679258281 per_node is not parsing generated json eaf59f4b2 Problematic nested quotes in hieradata file list 988d5dc89 [train-only] Ensure we stop ovn-controller with cleanup 91b780d3d Use Ceph cluster name when setting minimum client version bd36a306a Make DnfStreams support RoleParameters c9541b477 Move cell_v2 discovery off compute hosts 28cb354c3 Make NovaComputeOptVolumes and NovaComputeOptEnvVars role aware 43b7188ef Live migration optimization with HP 678186027 Add post delay to reboot 43b352e9a Enforces minimum Ceph client version to Mimic 6733d14f1 Serialize shutdown of pacemaker nodes cf605138f Make ExternalSwift*Url parameters optional 230147720 Deprecate environments/dcn-hci.yaml for dcn-storage.yaml c5a2a9ce5 Use include_role for conditional inclusion e69b06ae2 [Train-Only] Remove python-2 packages in the overcloud nodes after leapp upgrade. f55af442d Deploy multipathd using tripleo_multipathd ansible role 861af8d81 Force json output format for hiera in derive pci whitelist 431cfb979 Add NovaLibvirtMaxQueues role parameter to set [libvirt]/max_queues 0c68c4428 Revert "Reset sriov_numvfs to 0 before leapp upgrade" e038ecd2e Use Ceph-NFS for Manila in scenario004 05c859273 Split network validation to it's own play 916b9385c Rolling certificate update for HA services 76577b3ae Update container-config-scripts/ folder content before update_tasks. 75f3d22fe Remove ffwd lifecycle environment files. 38fcff865 Deleting nova-consoleauth services in post-upgrade 75c287232 Remove pcs/pacemaker package installation from upgrade tasks 6c038ca3a [Train only] Retry distro-sync until success 5472332d6 Do not relabel Swift files on every container start 6fb47e4af Make it possible to override ServiceNetMap per-role 4dd0f9dab Fix ownership of octavia_rsyslog log directory e26e6a1fb nova: Use LIBGUESTFS_BACKEND=direct 953a8ef96 Configure OVNCMSOptions=enable-chassis-as-gw within neutron-ovn-sriov.yaml 8372d5e6d ovn: Add neutron-cleanup 83cce19f6 Fix Octavia OctaviaTenantLogFacility default Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-containers.yaml | 1 + ci/environments/scenario001-standalone.yaml | 4 + ci/environments/scenario004-standalone.yaml | 6 + common/common-container-config-scripts.yaml | 17 ++ common/deploy-steps-playbooks-common.yaml | 17 ++ common/deploy-steps-tasks-step-0.j2.yaml | 13 +- common/deploy-steps-tasks-step-1.yaml | 33 +-- common/deploy-steps-tasks.yaml | 6 +- common/deploy-steps.j2 | 24 +- common/generate-config-tasks.yaml | 19 +- common/host-container-puppet-tasks.yaml | 21 +- container_config_scripts/mysql_upgrade_db.sh | 15 ++ .../pacemaker_mutex_restart_bundle.sh | 90 +++++++ .../pacemaker_mutex_shutdown.sh | 120 +++++++++ .../pacemaker_resource_lock.sh | 267 +++++++++++++++++++++ .../barbican/barbican-api-container-puppet.yaml | 28 ++- deployment/ceph-ansible/ceph-base.yaml | 13 +- deployment/ceph-ansible/ceph-mon.yaml | 28 +++ deployment/ceph-ansible/ceph-rgw.yaml | 4 - .../certs/certmonger-user-baremetal-puppet.yaml | 9 + .../cinder/cinder-backup-container-puppet.yaml | 15 ++ .../cinder/cinder-backup-pacemaker-puppet.yaml | 70 ++---- .../cinder/cinder-volume-container-puppet.yaml | 15 ++ .../cinder/cinder-volume-pacemaker-puppet.yaml | 69 ++---- .../openstack-clients-baremetal-puppet.yaml | 1 + deployment/containers-common.yaml | 9 + deployment/database/mysql-base.yaml | 6 + deployment/database/mysql-container-puppet.yaml | 46 ++-- deployment/database/mysql-pacemaker-puppet.yaml | 97 ++++---- deployment/database/redis-pacemaker-puppet.yaml | 102 +++----- .../kubernetes-master-baremetal-ansible.yaml | 4 +- .../multipathd-container.yaml | 0 deployment/glance/glance-api-container-puppet.yaml | 14 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 75 ++---- deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/horizon/horizon-container-puppet.yaml | 24 +- deployment/ipa/ipaclient-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 4 +- deployment/ironic/ironic-api-container-puppet.yaml | 14 ++ .../ironic/ironic-conductor-container-puppet.yaml | 15 ++ .../ironic/ironic-inspector-container-puppet.yaml | 16 ++ deployment/ironic/ironic-pxe-container-puppet.yaml | 16 ++ deployment/manila/manila-api-container-puppet.yaml | 15 ++ .../manila/manila-scheduler-container-puppet.yaml | 15 ++ .../manila/manila-share-container-puppet.yaml | 15 ++ .../manila/manila-share-pacemaker-puppet.yaml | 69 ++---- deployment/metrics/collectd-container-puppet.yaml | 2 +- .../multipathd/multipathd-container-ansible.yaml | 128 ++++++++++ .../neutron/derive_pci_passthrough_whitelist.py | 2 +- .../neutron-sriov-agent-container-puppet.yaml | 30 --- deployment/nova/nova-api-container-puppet.yaml | 38 ++- deployment/nova/nova-apidb-client-puppet.yaml | 78 ++++++ deployment/nova/nova-base-puppet.yaml | 45 +--- .../nova/nova-compute-common-container-puppet.yaml | 22 +- deployment/nova/nova-compute-container-puppet.yaml | 148 +++++++++--- .../nova/nova-conductor-container-puppet.yaml | 52 +++- deployment/nova/nova-db-client-puppet.yaml | 80 ++++++ deployment/nova/nova-ironic-container-puppet.yaml | 28 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 11 +- deployment/nova/nova-manager-container-puppet.yaml | 105 ++++++++ .../nova/nova-metadata-container-puppet.yaml | 45 +++- .../nova/nova-scheduler-container-puppet.yaml | 31 ++- .../nova/nova-vnc-proxy-container-puppet.yaml | 52 +++- deployment/nova/novajoin-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 15 ++ deployment/octavia/octavia-base.yaml | 2 +- .../octavia/octavia-deployment-config.j2.yaml | 4 +- .../octavia-health-manager-container-puppet.yaml | 20 +- .../octavia-housekeeping-container-puppet.yaml | 15 ++ .../octavia/octavia-worker-container-puppet.yaml | 19 +- .../ovn/ovn-controller-container-puppet.yaml | 37 +++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 58 +++-- .../pacemaker/pacemaker-baremetal-puppet.yaml | 6 + deployment/podman/podman-baremetal-ansible.yaml | 7 + ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 47 ++-- .../rabbitmq-messaging-pacemaker-puppet.yaml | 47 ++-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 47 ++-- .../external-swift-proxy-baremetal-puppet.yaml | 3 + deployment/swift/swift-proxy-container-puppet.yaml | 1 + .../swift/swift-storage-container-puppet.yaml | 7 +- deployment/time/timezone-baremetal-ansible.yaml | 4 +- deployment/timesync/chrony-baremetal-ansible.yaml | 11 +- deployment/tls/undercloud-tls.yaml | 6 +- .../tripleo-packages-baremetal-puppet.yaml | 133 ++++++++-- deployment/undercloud/undercloud-upgrade.yaml | 4 +- environments/barbican-backend-pkcs11-thales.yaml | 22 +- environments/dcn-hci.yaml | 3 + environments/dcn-storage.yaml | 57 +++++ environments/lifecycle/ffwd-upgrade-converge.yaml | 10 - environments/lifecycle/ffwd-upgrade-prepare.yaml | 12 - environments/multipathd.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 2 - environments/services/neutron-ovn-ha.yaml | 4 - environments/services/neutron-ovn-sriov.yaml | 6 +- extraconfig/post_deploy/undercloud_post.py | 8 - overcloud-resource-registry-puppet.j2.yaml | 3 + overcloud.j2.yaml | 25 +- puppet/extraconfig/pre_deploy/per_node.yaml | 12 +- ...ount-point-base-parameter-852554398b9f3a19.yaml | 7 + .../notes/barbican-thales-ha-581fbe9b5ef4dc87.yaml | 11 + .../notes/bug-1904482-dbc5162c8245a9b3.yaml | 21 ++ ...v2_discovery_off_computes-2b977c6b9a01cde2.yaml | 13 + ...e-multipathd-with-ansible-f32f3ea627815191.yaml | 20 ++ .../dcn-hci-storage-rename-0b1c17dd50f4cc9a.yaml | 8 + ...nant-log-facility-default-7b6d0670a51fe845.yaml | 5 + .../horizon_logger_debug-cd70c45c1b695e4b.yaml | 8 + ...mit-postcopy-autoconverge-ca1719fd2abed45f.yaml | 8 + .../nova_libvirt_max_queues-8024fc63105bd25d.yaml | 6 + .../swift-prevent-relabeling-b9721aa5a1abda6e.yaml | 5 + roles/CephFile.yaml | 1 + roles/CephObject.yaml | 1 + roles/CephStorage.yaml | 1 + roles/NovaManager.yaml | 37 +++ roles/README.rst | 6 + roles/Standalone.yaml | 3 + roles_data.yaml | 1 + sample-env-generator/dcn.yaml | 11 +- tools/yaml-validate.py | 7 +- zuul.d/layout.yaml | 32 --- 119 files changed, 2483 insertions(+), 756 deletions(-)

1 0

paunch 5.5.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are jazzed to announce the release of: paunch 5.5.0: Utility to launch and manage containers using YAML based configuration data This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.4.0..5.5.0 ------------------------------ 68e5206 Do not call --detach when using podman create Diffstat (except docs and test files) ------------------------------------- paunch/builder/podman.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

os-collect-config 10.6.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We are chuffed to announce the release of: os-collect-config 10.6.0: Collect and cache metadata, run hooks on changes. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 10.5.1..10.6.0 ------------------------------------------- 5b8355d remove tripleo jobs from os-collect-config train Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 2 -- 1 file changed, 2 deletions(-)

1 0

os-net-config 11.5.0 (train)
by no-reply＠openstack.org 05 Apr '21

05 Apr '21

We exuberantly announce the release of: os-net-config 11.5.0: OpenStack network configuration This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 11.4.0..11.5.0 --------------------------------------- 48c6710 Updating sriov_config service to run after openibd service 3c73327 Exclude DPDK mapped VF device even if not present eb3bb40 Check to ensure active DPDK NICs only mapped once Diffstat (except docs and test files) ------------------------------------- os_net_config/utils.py | 18 ++++++++++++++---- 2 files changed, 38 insertions(+), 4 deletions(-)

1 0