June 2021 - Release-announce - lists.openstack.org

cinderlib 4.0.0 (wallaby)
by no-reply＠openstack.org 30 Jun '21

30 Jun '21

We enthusiastically announce the release of: cinderlib 4.0.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. 4.0.0 ^^^^^ Bug Fixes * Bug #1933964 (https://bugs.launchpad.net/cinder/+bug/1933964) Fixed date time fields losing subsecond resolution on serialization. * Bug #1883720 (https://bugs.launchpad.net/cinderlib/+bug/1883720) Added privsep support, increasing cinderlib's compatibility with Cinder drivers. Changes in cinderlib 3.0.0..4.0.0 --------------------------------- 51609b6 Fix datetime serialization 42dbc4a Fix test_global_setup unit test cf638c4 Add privsep support 724419f Moving to OFTC e1008c7 Remove reliance on embedded imports cd0ae51 Continue wallaby development 18bb33f Changed minversion in tox to 3.18.0 c770b2a Move cinderlib to new hacking 4.0.0 390f04f Dropping explicit unicode literal 45c7b02 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinderlib/__init__.py | 4 +- cinderlib/cinderlib.py | 79 +++- cinderlib/nos_brick.py | 311 ------------- cinderlib/objects.py | 10 +- cinderlib/persistence/dbms.py | 9 +- cinderlib/serialization.py | 21 +- lower-constraints.txt | 4 +- .../notes/datetime-subsecond-e123e8d2dda707ea.yaml | 5 + .../notes/privsep-support-acbc955b9845a6ef.yaml | 5 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 6 +- test-requirements.txt | 2 +- tools/virtualenv-sudo.sh | 2 +- tox.ini | 38 +- 28 files changed, 461 insertions(+), 912 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 942afcb..4b007a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,5 @@ -cinder>=17.0.0 # Apache-2.0 +# restrict cinder to the wallaby series only +cinder>=18.0.0,<19.0.0 # Apache-2.0 +# specify brick wallaby (upper bound controlled by openstack upper-constraints) +os-brick>=4.3.1 + diff --git a/test-requirements.txt b/test-requirements.txt index ac8ee6e..97d223b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ pbr>=5.4.1 # Apache-2.0 -hacking>=3.0.1,<3.2.0 # Apache-2.0 +hacking>=4.0.0,<4.1.0 # Apache-2.0

1 0

mistral-dashboard 11.0.1 (victoria)
by no-reply＠openstack.org 29 Jun '21

29 Jun '21

We are pleased to announce the release of: mistral-dashboard 11.0.1: Mistral dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/mistral-dashboard Download the package from: https://pypi.org/project/mistral-dashboard Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral-dashboard 11.0.0..11.0.1 ------------------------------------------- e1936e4 Setting DEFAULT to False. 0734ddd Fix gate jobs 66154b7 Update TOX_CONSTRAINTS_FILE for stable/victoria afd0be0 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistraldashboard/action_executions/tables.py | 3 +-- mistraldashboard/default/smart_cell.py | 6 +++--- mistraldashboard/enabled/_50_mistral.py | 2 +- mistraldashboard/executions/tables.py | 3 +-- mistraldashboard/tasks/tables.py | 3 +-- mistraldashboard/test/settings.py | 2 +- test-requirements.txt | 8 ++------ tox.ini | 10 +++++----- 9 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 87fced8..02499b8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,6 +5,2 @@ -# Hacking already pins down pep8, pyflakes and flake8 -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 +# hacking should appear first in case something else depends on pep8 +hacking>=4.0.0,<4.1.0 # Apache-2.0

1 0

mistral-dashboard 12.0.1 (wallaby)
by no-reply＠openstack.org 29 Jun '21

29 Jun '21

We enthusiastically announce the release of: mistral-dashboard 12.0.1: Mistral dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/mistral-dashboard Download the package from: https://pypi.org/project/mistral-dashboard Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral-dashboard 12.0.0..12.0.1 ------------------------------------------- c622cf2 Update .gitreview for stable/wallaby 2ef9a24 Setting DEFAULT to False. 897b07f Fix gate jobs Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistraldashboard/action_executions/tables.py | 3 +-- mistraldashboard/default/smart_cell.py | 6 +++--- mistraldashboard/enabled/_50_mistral.py | 2 +- mistraldashboard/executions/tables.py | 3 +-- mistraldashboard/tasks/tables.py | 3 +-- mistraldashboard/test/settings.py | 2 +- test-requirements.txt | 8 ++------ tox.ini | 10 +++++----- 9 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 87fced8..02499b8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,6 +5,2 @@ -# Hacking already pins down pep8, pyflakes and flake8 -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 +# hacking should appear first in case something else depends on pep8 +hacking>=4.0.0,<4.1.0 # Apache-2.0

1 0

oslo.privsep 2.6.0 (xena)
by no-reply＠openstack.org 28 Jun '21

28 Jun '21

We joyfully announce the release of: oslo.privsep 2.6.0: OpenStack library for privilege separation This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 2.6.0 ^^^^^ New Features * Add "timeout" as parameter to "PrivContext" and add "entrypoint_with_timeout" decorator to cover the issues with commands which take random time to finish. "PrivsepTimeout" is raised if timeout is reached. "Warning": The daemon (the root process) task won't stop when timeout is reached. That means we'll have less available threads if the related thread never finishes. * "PrivContext" accepts a new string parameter called "logger_name" to define the logger we want to use for the daemon logs of this context. By default all contexts use "oslo_privsep.daemon", but in some cases we may need finer grained log levels, for example nova running in debug mode could log its own privsep calls on INFO level regardless, but leave all libraries' privsep calls, such as os-brick's, to be logged in the normal DEBUG level. See bug 1922052. (https://bugs.launchpad.net/nova/+bug/1922052) Changes in oslo.privsep 2.5.0..2.6.0 ------------------------------------ f7f3349 Add timeout to PrivContext and entrypoint_with_timeout decorator 165cdde Upgrade the pre-commit-hooks version bd989a3 setup.cfg: Replace dashes with underscores 71c732c Allow finer grained log levels 22557b4 Add Python3 xena unit tests c4d0534 Update master for stable/wallaby 5f5db61 Fix requirements issues. dc97a45 Use TOX_CONSTRAINTS_FILE 55dd214 Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 ++-- .zuul.yaml | 3 +- lower-constraints.txt | 54 ------------------- oslo_privsep/comm.py | 54 ++++++++++++------- oslo_privsep/daemon.py | 60 ++++++++++------------ oslo_privsep/functional/test_daemon.py | 43 ++++++++++++++++ oslo_privsep/priv_context.py | 31 +++++++++-- ...nt_with_timeout_decorator-9aab5a74153b3632.yaml | 11 ++++ .../notes/context-logger-06b475357bebadc7.yaml | 15 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 8 +-- tox.ini | 12 ++--- 16 files changed, 301 insertions(+), 139 deletions(-)

1 0

kolla 12.0.0 (wallaby)
by no-reply＠openstack.org 23 Jun '21

23 Jun '21

We are ecstatic to announce the release of: kolla 12.0.0: Kolla OpenStack Deployment This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Adds the Monasca datasource plugin to the Grafana image. This allows Monasca users to visualise metrics in Grafana without using the Monasca Grafana fork. * Debian 'bullseye' is now used instead of 'buster'. Bullseye is the next stable release of Debian, and is currently in a 'freeze' state. Several images gained Debian support with the move to bullseye. Upgrade Notes ************* * The "monasca-grafana" image has been dropped because it was using several deprecated components and was not buildable. Support for "Monasca" datasource was added into standard "grafana" instead. * Changed default of "network_mode" to "host" since Kolla-Ansible "bootstrap-servers" is deploying Docker without a bridge by default since Wallaby Deprecation Notes ***************** * Support for building ppc64le container images has been deprecated in Wallaby cycle and will be removed in Xena. * The "tempest" and "rally" images are deprecated and will be removed in the Xena cycle. The reason is that these are not services of an OpenStack cloud but its clients. Security Issues *************** * Fixes security issue in Prometheus as per advisory. Bug Fixes ********* * Fixes location of monitoring_policy in Horizon, so access policy is correctly enforced. Note that by current default, admin doesn't not have Monitoring access. LP#1928408 * Fix support for kolla install in "~/.local". LP#1930544 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.*. LP#1930867 * Fixes issues arising from the lack of Debian updates repo being enabled. LP#1931544 Other Notes *********** * Debian images enable the Debian updates repo now. This is aligned with the base Debian image. Changes in kolla 12.0.0.0rc1..12.0.0 ------------------------------------ d578ac260 horizon: Correct location of monitoring_policy file 24bad11ed Horizon: Install policy files for manila-ui 128a45a2b Horizon: Install required policy files for heat-dashboard 8cd42eccc Fix _get_images_dir when pip-installed with --user a0eb21df3 Revert "libvirt: pin edk2-ovmf" 11d63e07c Pin td-agent to 4.0.* to fix missing logs b5ba6792d [docs] Fix Debian release name 746ae194e Enable Debian updates repo 01f5ce486 Revert "[CI] Add grafana to allowed-to-fail" f9f2f12cc Change network_mode default to host 5e38030b0 [CI] Add grafana to allowed-to-fail 51802de96 Add missing default policy files for ubuntu-binary-horizon cfa9ee486 docs: Update Freenode to OFTC 65a8b37a5 ubuntu: unpin OVS b22089051 libvirt: pin edk2-ovmf cb1457fea Install Monasca datasource plugin for Grafana fe1c8e882 Revert "CI: add monasca-grafana to allowed-to-fail images" 66b5abf67 Drop monasca-grafana image. 3ba3ccd8b [Security] Fix open redirect in Prometheus 227831c58 centos: clean up repo enable/disable/keys 858c27486 gnocchi-base: numpy provides aarch64 binary wheels 7726bbe2d docs: update supported OS distros e7a71f17d CI: drop bashism from template overrides b2e6babf1 [release] Use UCA Wallaby 2e3c2d9b6 base: check for compatible distro using just sh 496c0c006 setup.cfg: Replace dashes with underscores f885c6c1d Deprecate tempest and rally 00bfe8775 [CI] Trust only infra mirrors c01b017e5 Revert "CI: drop ubuntu-aarch64 job" 58503574a CI: move to Debian 'bullseye' nodes 46e81aa56 Revert "CI: temporarily disable CentOS/AArch64 testing" de52c2bfc Install RabbitMQ repo key on Ubuntu and Debian 1e747d7ef [CI] Fix Ubuntu cephadm jobs names 2c51d968c CentOS on AArch64 has only Erlang 22 490dcfcd2 CI: Remove kolla_python_version from Debian/Ubuntu jobs 084dd5e4e Pin erlang 934f5f0d8 Revert "deprecate use of GnuPG ids for APT keys" 53225b2bf centos: switch to RDO final release of Wallaby a1ad81338 neutron: Remove vmware-nsx and networking-mlx from binary 67dc1d3f0 releasenotes: we move to Debian bullseye 1f5014e01 move to Debian 'bullseye' 13abc31c2 Disable trove for Debian/binary b85b63ec9 docs: deprecate ppc64le in Wallaby de9e3cc3b Update TOX_CONSTRAINTS_FILE for stable/wallaby 21f1fd8ee Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/base.yaml | 8 +- .zuul.d/centos.yaml | 6 +- .zuul.d/debian.yaml | 8 +- .zuul.d/ubuntu.yaml | 55 ++++------- README.rst | 4 +- contrib/neutron-plugins/README.rst | 5 +- .../template_override-networking-mlnx.j2 | 4 + .../template_override-vmware-nsx.j2 | 4 + .../mariadb-server/security_reset.expect.debian | 67 +++++++++++++ .../prometheus/prometheus-v2-server/Dockerfile.j2 | 2 +- kolla/common/config.py | 17 ++-- kolla/image/build.py | 22 ++--- kolla/template/repos.yaml | 2 - ...sca-datasource-to-grafana-06dfe0ce329a7b7f.yaml | 6 ++ .../notes/bug-1928408-4a22a85570eee8d6.yaml | 7 ++ .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 + releasenotes/notes/bug-1930867.yaml | 6 ++ .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 ++ .../notes/debian-bullseye-4fedf3b3638783de.yaml | 6 ++ .../notes/deprecate-apt-keys-eff6e68272923b6b.yaml | 7 -- ...deprecate-monasca-grafana-d05af2e96cffd82c.yaml | 5 - .../notes/deprecate-ppc64le-2b7b642e79bddd66.yaml | 5 + ...precate-tempest-and-rally-0647efa7209cf03a.yaml | 7 ++ .../drop-monasca-grafana-df2c45d6826752f6.yaml | 7 ++ .../notes/network-mode-host-2aca256e2a1fbf68.yaml | 6 ++ ...ty-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml | 4 + ...-neutron-plugins-excluded-b72220a2ea8c1a40.yaml | 5 +- setup.cfg | 8 +- tox.ini | 6 +- 62 files changed, 352 insertions(+), 423 deletions(-)

1 0

kayobe 10.0.0 (wallaby)
by no-reply＠openstack.org 23 Jun '21

23 Jun '21

We are stoked to announce the release of: kayobe 10.0.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * Adds support for CentOS Stream 8 as a host Operating System and base container image. This is the only distribution of CentOS supported from the Wallaby release. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Adds a new flag, "docker_registry_network_mode", which defaults to "host". This may be used to set the network mode of the Docker registry container. * Adds support for passing through additional host variables from Kayobe to Kolla Ansible. This is done via the following variables: * "kolla_seed_inventory_pass_through_host_vars_extra" * "kolla_seed_inventory_pass_through_host_vars_map_extra" * "kolla_overcloud_inventory_pass_through_host_vars_extra" * "kolla_overcloud_inventory_pass_through_host_vars_map_extra" See story 2008797 for details. * Adds a new "kayobe overcloud service prechecks" command to run Kolla Ansible prechecks without deploying services. * Adds support for Ubuntu Focal 20.04 as a host and container Operating System for seed, seed hypervisor and overcloud hosts. Upgrade Notes ************* * CentOS Linux 8 is no longer supported as a host Operating System or base container image. CentOS users should migrate to CentOS Stream 8. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Updates the NTP implementation from the chrony container deployed by kolla-ansible to configuring chrony as a host service. Chrony is now installed on all hosts in the "ntp" group, which defaults to include the seed, overcloud, and seed-hypervisor groups. On existing deployments, you should run *kayobe overcloud host configure* to migrate from the kolla-ansible deployed container. This can optionally be scoped to just use the "ntp" tag. You can continue to use the kolla container by setting *kolla_enable_chrony* to "true". Bug Fixes ********* * Fixes an issue with container image builds by using "host" as the default "network_mode" for "kolla-build". See story 2008942 for details. Changes in kayobe 10.0.0.0rc1..10.0.0 ------------------------------------- 51ddc295 docs: Stop setting os_distribution in development all-in-one e010356e CI: test base container image build in seed jobs 30563e52 docs: add variable for current branch 7d56e8fd docs: improve automated seed development info 64bc058f Add kayobe overcloud service prechecks command 2e221681 Fix overcloud post configure Python interpreter issues 36fcec12 Revert "CI: Fix libvirt errors caused by latest edk2-ovmf" 7e6ca694 Fix container image builds 3f9e4c50 Ubuntu: ensure /usr/bin/python is python3 5fe1a7ed chrony: cleanup during overcloud host upgrade 9a374af8 Optimise order of inspector_processing_hooks 4648b90b ntp: check for ntp group in inventory 1d43eda8 docs: Update Freenode to OFTC c5e5d697 CI: Fix libvirt errors caused by latest edk2-ovmf a9a2f382 Replace custom serial loop with throttle 38360a4d Support additional pass through host variables 64e183c4 Make docker registry network mode configurable c01e5f0a Remove default time sources from customisable configuration b79daa16 CentOS Stream: update DNF repo file names 73dfeb29 Fixes for Ansible 2.10 eb90ad21 docs: add reno and upgrade info for CentOS Stream e5a319aa CI: Remove unused Docker images after overcloud upgrade 010a1833 Adds support for configuring chrony 7a56c95a Ubuntu: add documentation & release note f3dffec0 Ubuntu: avoid shadowing of networkd config files c36c78bd Add os_release variable, build CentOS stream images 4e17dcef Ubuntu: install qemu-img on seed-hypervisor a495bbc1 setup.cfg: Replace dashes with underscores 0f0604b8 Revert to binary images for nova 2f736f5c Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + README.rst | 2 +- ansible/group_vars/all/bifrost | 5 +- ansible/group_vars/all/docker-registry | 3 + ansible/group_vars/all/globals | 4 + ansible/group_vars/all/inspector | 2 +- ansible/group_vars/all/ipa | 4 + ansible/group_vars/all/kolla | 70 +++++++- ansible/group_vars/all/time | 29 ++++ ansible/provision-net.yml | 8 +- ansible/roles/dnf/tasks/local-mirror.yml | 10 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 --- .../dnf/templates/CentOS-Stream-AppStream.repo.j2 | 17 ++ .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 ++ .../dnf/templates/CentOS-Stream-Extras.repo.j2 | 17 ++ ansible/roles/docker-registry/defaults/main.yml | 8 +- ansible/roles/ipa-images/tasks/set-driver-info.yml | 6 +- .../kolla-build/templates/kolla-build.conf.j2 | 4 + ansible/roles/network-debian/tasks/main.yml | 5 + ansible/roles/ntp/defaults/main.yml | 6 + ansible/roles/ntp/tasks/deploy.yml | 4 + ansible/roles/ntp/tasks/main.yml | 12 ++ ansible/roles/ntp/tasks/prepare.yml | 27 +++ ansible/roles/ntp/tasks/validate.yml | 11 ++ ansible/roles/ssh-known-host/tasks/main.yml | 8 +- ansible/time.yml | 33 ++++ ansible/timezone.yml | 28 ++- dev/functions | 2 +- dev/tenks-deploy-config-overcloud.yml | 2 + .../configuration/reference/docker-registry.rst | 9 +- .../reference/ironic-python-agent.rst | 5 +- .../configuration/reference/kolla-ansible.rst | 50 +++++- .../configuration/reference/os-distribution.rst | 34 ++++ .../configuration/scenarios/all-in-one/index.rst | 3 +- .../scenarios/all-in-one/overcloud.rst | 15 +- etc/kayobe/bifrost.yml | 3 +- etc/kayobe/docker-registry.yml | 3 + etc/kayobe/globals.yml | 4 + etc/kayobe/inventory/groups | 8 +- etc/kayobe/kolla.yml | 44 +++++ etc/kayobe/time.yml | 23 +++ kayobe/cli/commands.py | 47 ++++- .../overrides.yml.j2 | 8 + .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 - playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/overrides.yml.j2 | 4 +- playbooks/kayobe-seed-base/run.yml | 18 ++ .../notes/centos-stream-cb683a092153b93e.yaml | 13 ++ ...ker-registry-network-mode-3c678295b51d69c1.yaml | 6 + .../notes/extra-host-vars-13c28b790bc54f6b.yaml | 13 ++ ...nstall-chrony-on-the-host-283fa6fdd9cf9b4c.yaml | 11 ++ .../kolla-build-network-mode-ba92e36d52e70d99.yaml | 6 + .../notes/os-distribution-69445eb19a611d43.yaml | 5 +- .../notes/prechecks-command-a9153f667659c315.yaml | 5 + releasenotes/notes/ubuntu-e74f49ea72f69869.yaml | 5 + requirements.yml | 8 +- setup.cfg | 11 +- 78 files changed, 964 insertions(+), 333 deletions(-)

1 0

kolla-ansible 12.0.0 (wallaby)
by no-reply＠openstack.org 23 Jun '21

23 Jun '21

We are psyched to announce the release of: kolla-ansible 12.0.0: Ansible Deployment of Kolla containers This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Adds support for CentOS Stream 8 as a host Operating System and base container image. This is the only distribution of CentOS supported from the Wallaby release. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Supports Debian Bullseye (11) as host distribution. * Adds support in "kolla_docker" module to set "CgroupnsMode" for Docker containers (via "cgroupns_mode" module param). Requires Docker 20.10. Note that pre-20.10 all containers behave as if they were run with mode "host". * OVN deployment will now configure "external_ids:ovn-chassis-mac- mappings" to make DVR work on VLAN tenant networks. * Due to the removal of the Monasca Grafana fork, the Monasca datasource is now configured in vanilla Grafana. Upgrade Notes ************* * Bumps minimum required Docker version to 18.09 and minimum required Docker Python SDK version to 3.4.1. These two are checked in prechecks. * CentOS Linux 8 is no longer supported as a host Operating System or base container image. CentOS users should migrate to CentOS Stream 8. The Victoria release will support both CentOS Linux 8 and CentOS Stream 8 hosts and images, and provides a route for migration. * Adds a new flag, "docker_disable_ip_forward", which defaults to "docker_disable_default_iptables_rules" and is used to disable docker's "ip-forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". By default, "docker_disable_default_iptables_rules" is "true", in which case docker's "ip-forward" option is "disabled". For existing hosts, this configuration change is applied when configuring docker via "kolla-ansible bootstrap-servers". Docker changes the sysctl in a non-persistent manner, so it will revert to the default of "0" after a reboot, if not configured elsewhere. This should not cause a problem, since Kolla Ansible applies the sysctl where necessary. Operators may wish to perform a proactive reboot, or apply the default through other means. * Service containers and configuration for the Monasca Grafana service will be removed automatically. It is up to the operator to remove the related HAProxy configuration, the Monasca Grafana database, and associated Docker volumes. Deprecation Notes ***************** * Support for configuration of NTP daemon (via "enable_host_ntp") is deprecated and will be removed in the next Kolla Ansible release (Xena). Please use other means of configuring NTP. * The Monasca Fork of Grafana is deprecated due to lack of maintenance and will be removed in the Xena release. Instead, support will be provided to allow Monasca users to migrate to the vanilla Grafana service with the Monasca datasource. * Support for deploying "tempest" and "rally" is deprecated and will be removed in the Xena cycle. The reason is that these are not services of an OpenStack cloud but its clients. Bug Fixes ********* * chronyd crash loop if server is rebooted (Debian) LP#1915528 * Fixed an issue when Docker was configured after startup on Debian/Ubuntu, which resulted in iptables rules being created - before they were disabled. LP#1923203 * Fixes an issue with Octavia SSH key copying if user disabled Octavia auto configuration. LP##1927727 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes Swift deploy when TLS enabled. Added the missing handler and corrected the container name. LP#1931097 * Fixes "iscsid" failing in current CentOS 8 based images due to pid file being needlessly set. LP#1933033 * Fixes host bootstrap on Debian not removing the conflicting packages. It now behaves in accordance with the docs. LP#1933122 * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Adds a new flag, "docker_disable_ip_forward", which defaults to "docker_disable_default_iptables_rules" and is used to disable docker's "ip-forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". This is to protect from creating all-forwarding hosts. LP#1931615 * Fixes an issue when generating "/etc/hosts" during "kolla-ansible bootstrap-servers" when one or more hosts has an "api_interface" with dashes ("-") in its name. LP#1927357 * Fixes the container image used by mariabackup. It was using the "mariadb" image, which was deprecated in Victoria and removed in Wallaby. LP#1928129 * Fixes an issue with Octavia deployment when using a custom service auth project. If "octavia_service_auth_project" is set to a project that does not exist, Octavia deployment would fail. The project is now created. LP#1922100 Changes in kolla-ansible 12.0.0.0rc1..12.0.0 -------------------------------------------- bcce291aa Fix host bootstrap pkg removal on Debian ecddf74d7 Do not set pid file for iscsid 2e76e0565 Support editable installation in all cases cf58c0460 tox: Add find command to allowlist_externals list 315d8eec2 baremetal: fix /etc/hosts generation when api_interface has dashes a6a2e5ec1 chronyd crash loop if Debian server is rebooted 252671f8b Stop fluentd deprecation warnings of type vs @type 381e3a40d Fix parsing of infra.mariadb.xinetd logs 189c1c245 Fix neutron-ovn-metadata-agent with policy.yaml cbd474cc4 octavia: Ensure service auth project exists c24a56b7d Merge glance sections for nova.conf.j2 b79d2a4f0 Redis configuration syntax update 13deb4304 Update blazar.conf template 5ba041019 Add the ansible_managed header for admin-openrc.sh e3f43eee5 Reno follow up for docker_disable_ip_forward c272af91c Drop /sys/fs/cgroup mounts eb4815345 Disable docker's ip-forward when iptables disabled f11af96cc Fix RabbitMQ restart ordering 98c29107a Add forgotten 'Restart container' handler for swift 12dc47483 grafana: add bootstrap during upgrade a8982e571 Bump min Docker version 94e115e15 chrony: allow to remove the container 12382be7a [CI] Drop Zuul host groups 0c58f83d6 [CI] Move to Debian Bullseye 7b3190871 Add support for Debian Bullseye (11) as host distro efd51bccb [docker] Add support for setting CgroupnsMode 58f3f3042 Trivial if conditional fix in keystone.json e7c68252f docs: Update Freenode to OFTC 0b971b61d Fix release note markup ee92b33b3 Use mariadb-server image for mariabackup d8b4e81c0 CI: Use PATH to find kolla-ansible script d31ec6609 cinder: fix condition to copy backend TLS certs af7c7cc6b Remove [octavia]/base_url option from neutron.conf b887b1c4c docs: update supported OS distros 924affb65 Mariadb shards documentation af7778e3a CI: Configure IP on a linux bridge instead of OVS br-ex 4e8c1493c CI: add grafana to monasca image list 2bff29328 Remove Monasca Grafana service 7e31c959e [CI] Fix testing in cephadm scenario ee8bd456b baremetal: Install Docker SDK less than 5.0.0 bf351eb97 CI: Fix nfv job with kolla dependency 34349f6ad CI: Wait for NTP synced status in systemd 3a661b7ad baremetal: Don't start Docker after install on Debian/Ubuntu e0fc09cde Disable Alertmanager's peer gossip in non-HA deployments bfdd36ff3 CI: allow Elasticsearch status to be green or yellow a92ce428a Use @type instead of type deafe00dd Do not write octavia_amp_ssh_key if auto_config disabled cb38206dc Fix "Restart mariadb-clustercheck container" during config gen 465a38545 ovn: make DVR work on VLAN tenant networks 71811d947 octavia: Fix duplicate api_settings 1e5709150 ovn: omit unnecessary bridge mappings 381fe0d27 setup.cfg: Replace dashes with underscores d83aad7ee Deprecate tempest and rally 5894894ff Deprecate enable_host_ntp f73c00c83 Bump up python version for Debian Bullseye aaa2bb977 cephadm: Set auth_allow_insecure_global_id_reclaim to true 8ccbdf3c2 Add Monasca Grafana deprecation notice 4f87d9f36 Use wallaby images in wallaby deployments adef109a1 Avoid an Ansible quirk in hacluster role 3f7e02765 docs: Improve policy documentation 6bcbaf235 Update TOX_CONSTRAINTS_FILE for stable/wallaby e80783f1d Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ansible/chrony-cleanup.yml | 14 +++ ansible/group_vars/all.yml | 7 +- ansible/library/kolla_docker.py | 44 +++++++- ansible/roles/baremetal/defaults/main.yml | 2 + ansible/roles/baremetal/tasks/install.yml | 28 ++++- ansible/roles/baremetal/tasks/post-install.yml | 30 +++++- ansible/roles/baremetal/tasks/pre-install.yml | 4 +- ansible/roles/blazar/templates/blazar.conf.j2 | 10 +- ansible/roles/chrony/tasks/cleanup.yml | 12 +++ ansible/roles/chrony/templates/chrony.json.j2 | 4 +- ansible/roles/cinder/tasks/config.yml | 2 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 2 + .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 8 +- ansible/roles/grafana/defaults/main.yml | 9 ++ ansible/roles/grafana/tasks/upgrade.yml | 5 + .../roles/hacluster/tasks/bootstrap_service.yml | 4 +- ansible/roles/haproxy/tasks/precheck.yml | 27 ----- ansible/roles/iscsi/defaults/main.yml | 2 - ansible/roles/iscsi/templates/iscsid.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/handlers/main.yml | 2 + ansible/roles/monasca/defaults/main.yml | 24 +---- ansible/roles/monasca/handlers/main.yml | 53 --------- ansible/roles/monasca/tasks/bootstrap.yml | 3 +- ansible/roles/monasca/tasks/config.yml | 19 ---- ansible/roles/monasca/tasks/deploy.yml | 2 - ansible/roles/monasca/tasks/post_config.yml | 120 --------------------- ansible/roles/monasca/tasks/precheck.yml | 11 -- ansible/roles/monasca/tasks/upgrade.yml | 30 ------ .../templates/monasca-grafana/grafana.ini.j2 | 55 ---------- .../monasca-grafana/monasca-grafana.json.j2 | 23 ---- ansible/roles/multipathd/defaults/main.yml | 1 - .../templates/neutron-ovn-metadata-agent.json.j2 | 13 ++- ansible/roles/neutron/templates/neutron.conf.j2 | 5 - ansible/roles/nova-cell/defaults/main.yml | 2 +- ansible/roles/nova-cell/handlers/main.yml | 1 + ansible/roles/nova-cell/tasks/check-containers.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +- ansible/roles/octavia/defaults/main.yml | 7 ++ ansible/roles/octavia/tasks/config.yml | 4 +- ansible/roles/octavia/tasks/register.yml | 15 --- ansible/roles/octavia/templates/octavia.conf.j2 | 4 +- ansible/roles/ovn/defaults/main.yml | 2 + ansible/roles/ovn/tasks/bootstrap.yml | 6 +- ansible/roles/prechecks/defaults/main.yml | 3 + ansible/roles/prechecks/tasks/timesync_checks.yml | 73 +++++++++++-- ansible/roles/prechecks/vars/main.yml | 5 +- .../templates/prometheus-alertmanager.json.j2 | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 18 +++- ansible/roles/rally/tasks/main.yml | 5 + ansible/roles/redis/templates/redis.conf.j2 | 10 +- ansible/roles/swift/defaults/main.yml | 2 +- ansible/roles/swift/handlers/main.yml | 4 + ansible/roles/tempest/tasks/main.yml | 5 + .../bootstrap-servers.rst | 5 + .../logging-and-monitoring/monasca-guide.rst | 54 +++++----- etc/kolla/globals.yml | 4 +- etc/kolla/passwords.yml | 1 - ...yd-crash-loop-if-server-is-rebooted-debian.yaml | 5 + .../notes/bug-1922721-19163cfb491d0035.yaml | 4 +- .../notes/bug-1923203-f9ff247befc4bd75.yaml | 6 ++ .../notes/bug-1927727-4437103de59e85e5.yaml | 6 ++ .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 ++ .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + .../notes/bug-1931097-c94832ed2ed92c3a.yaml | 6 ++ .../notes/bug-1933033-76746d127285cfe8.yaml | 6 ++ .../notes/bug-1933122-b34311ba73092080.yaml | 6 ++ ...imum-docker-version-18-09-37af3b4c134da67e.yaml | 6 ++ .../notes/centos-stream-686441cc4c0e47d7.yaml | 13 +++ .../debian-bullseye-host-adc7778d7103b84f.yaml | 4 + .../notes/deprecate-chrony-077a8686e79a919e.yaml | 16 ++- ...deprecate-enable-host-ntp-3ad934c097f18b1b.yaml | 7 ++ ...deprecate-monasca-grafana-f5bfc61a5d453a8e.yaml | 7 ++ ...precate-tempest-and-rally-2418cbe2a9f315a4.yaml | 7 ++ ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 ++ .../docker-cgroupns-mode-9e1b32c357a14095.yaml | 7 ++ ...docker-disable-ip-forward-b0490b71f9f07cd6.yaml | 24 +++++ .../notes/etc-hosts-dashes-37d0dc07c8fc881f.yaml | 7 ++ .../notes/mariabackup-image-8b31622f59890e28.yaml | 6 ++ ...eate-service-auth-project-aa38b12ebb601777.yaml | 7 ++ .../notes/ovn_dvr_vlan-f36a6868cfd4776e.yaml | 5 + .../remove-monasca-grafana-43cf1f74b09a6e54.yaml | 11 ++ roles/bridge/tasks/main.yml | 12 +++ roles/cephadm/tasks/main.yml | 11 ++ roles/veth/tasks/main.yml | 12 +++ setup.cfg | 8 +- tools/kolla-ansible | 33 +++++- tox.ini | 17 +-- zuul.d/base.yaml | 6 +- zuul.d/jobs.yaml | 8 +- zuul.d/nodesets.yaml | 62 +++-------- 114 files changed, 878 insertions(+), 635 deletions(-)

1 0

ironic 17.0.3 (wallaby)
by no-reply＠openstack.org 23 Jun '21

23 Jun '21

We eagerly announce the release of: ironic 17.0.3: OpenStack Bare Metal Provisioning This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 17.0.3 ^^^^^^ Security Issues *************** * Fixes an issue with the "/v1/nodes/detail" endpoint where an authenticated user could explicitly ask for an "instance_uuid" lookup and the associated node would be returned to the user with sensitive fields redacted in the result payload if the user did not explicitly have "owner" or "lessee" permissions over the node. This is considered a low-impact low-risk issue as it requires the API consumer to already know the UUID value of the associated instance, and the returned information is mainly metadata in nature. More information can be found in Storyboard story 2008976 (https://storyboard.openstack.org/#!/story/2008976) Bug Fixes ********* * If the agent accepts a command, but is unable to reply to Ironic (which sporadically happens before of the eventlet's TLS implementation), we currently retry the request and fail because the command is already executing. Ironic now detects this situation by checking the list of executing commands after receiving a connection error. If the requested command is the last one, we assume that the command request succeeded. * When local boot is used (e.g. by default), the instance image validation now happens only in the deploy interface, not in the boot interface (as before). This means that the boot interface validation will now pass in many cases where it would previously fail. * Fixes an issue with the "/v1/nodes/detail" endpoint where requests for an explicit "instance_uuid" match would not follow the standard query handling path and thus not be filtered based on policy determined access level and node level "owner" or "lessee" fields appropriately. Additional information can be found in story 2008976 (https://storyboard.openstack.org/#!/story/2008976) * No longer masks configdrive when sending the node's record to in- band deploy steps. * Fixes handling of single-value (non-key-value) parameters in the "[inspector]extra_kernel_params" configuration options. * The behavior when a bootable iso ramdisk is provided behind an http server is to download and serve the image from the conductor; the image is removed only when the node is undeployed. In certain cases, for example on large deployments, this could cause undesired behaviors, like the conductor nodes running out of disk storage. To avoid this event we provide an option "[deploy]ramdisk_image_download_source" to be able to tell the ramdisk interface to directly use the bootable iso url from its original source instead of downloading it and serving it from the conductor node. The default behavior is unchanged. * Fixes sub-optimal Ironic API performance where Secure RBAC related field level policy checks were executing without first checking if there were field results. This helps improve API performance when only specific columns have been requested by the API consumer. Changes in ironic 17.0.2..17.0.3 -------------------------------- adc4f7657 Fix node detail instance_uuid request handling 566cff59a Handle non-key-value params in [inspector]extra_kernel_params 05c838073 dhcp-less: mention how to provide network_data to instance f99d68707 Refactor iDRAC OEM extension manager calls fc8e1652b Improve agent_client logging d3f62f83e Set download stable branch for IPA f9eb7abe8 Secure RBAC - Efficent node santiziation c7af96938 Update project conundrum related docs 0500fe107 Avoid unnecessary validation in boot interfaces 77be4c6c6 Delete unavailable py2 package fce4cc11b Fix deployment when executing a command fails after the command starts 659eef72e Provide an option to not cache bootable iso ramdisks 78e10ce59 Update refarch with information about image_download_source 7b723bcce Do not mask configdrive when executing in-band deploy steps fe2377855 Inherit InvalidImageRef from InvalidParameterValue Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 +- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- ironic/api/controllers/v1/node.py | 143 ++++++++-------- ironic/common/exception.py | 2 +- ironic/common/pxe_utils.py | 5 +- ironic/common/utils.py | 16 ++ ironic/conf/deploy.py | 16 ++ ironic/db/sqlalchemy/api.py | 2 +- ironic/drivers/modules/agent_client.py | 121 +++++++++++--- ironic/drivers/modules/drac/boot.py | 67 +------- ironic/drivers/modules/drac/inspect.py | 46 +---- ironic/drivers/modules/drac/management.py | 185 ++++----------------- ironic/drivers/modules/drac/raid.py | 43 +---- ironic/drivers/modules/drac/utils.py | 121 ++++++++++++++ ironic/drivers/modules/image_utils.py | 14 +- ironic/drivers/modules/inspector.py | 6 +- ironic/drivers/modules/pxe_base.py | 14 +- ironic/drivers/modules/redfish/boot.py | 11 +- ironic/objects/node.py | 10 +- .../unit/drivers/modules/drac/test_inspect.py | 27 --- .../unit/drivers/modules/drac/test_management.py | 124 ++------------ .../unit/drivers/modules/redfish/test_boot.py | 74 ++------- .../unit/drivers/modules/test_agent_client.py | 117 +++++++++++++ .../notes/agent-last-command-4ec6967c995ba84a.yaml | 9 + .../notes/boot-validate-6b4b6b40c8e27273.yaml | 7 + ...ed-instance-info-behavior-1375914a30621eca.yaml | 20 +++ .../deploy-step-configdrive-86ea2bb267211b88.yaml | 5 + .../inspector-kernel-params-6db82c633d7361e2.yaml | 5 + ...ion-no-cache-http-ramdisk-62fc29cdd1d5b152.yaml | 14 ++ ...-sanitization-performance-dc7886952144bb04.yaml | 7 + 54 files changed, 1037 insertions(+), 858 deletions(-)

1 0

tripleo-operator-ansible 0.5.1
by no-reply＠openstack.org 23 Jun '21

23 Jun '21

We are overjoyed to announce the release of: tripleo-operator-ansible 0.5.1: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.5.0..0.5.1 ------------------------------------------------ 574ada8 Revert "Added publish-openstack-python-tarball job to publish the tarballs" d997a4b Added publish-openstack-python-tarball job to publish the tarballs 920f76c Correct the tox option for skipping sdist generation 2278638 Add missing "vip" argument to the CLI 99641cf tripleo_overcloud_node_provision - add --network-config f8c8076 Add role for tripleo_overcloud_network_vip_provision c801580 Add role for tripleo_overcloud_network_provision 17ed0d7 Only trigger provider when consumer child present c1527ca tripleo_repo: add missing >- to remove trailing \n 0f20569 tripleo_repos: add tripleo_repos_repo_branch Diffstat (except docs and test files) ------------------------------------- .../tripleo_overcloud_network_provision/README.md | 57 +++++++++++++++++++++ .../defaults/main.yml | 14 ++++++ .../meta/main.yml | 42 ++++++++++++++++ .../molecule/default/converge.yml | 44 ++++++++++++++++ .../molecule/default/molecule.yml | 19 +++++++ .../molecule/default/prepare.yml | 8 +++ .../tasks/main.yml | 58 ++++++++++++++++++++++ .../README.md | 58 ++++++++++++++++++++++ .../defaults/main.yml | 15 ++++++ .../meta/main.yml | 42 ++++++++++++++++ .../molecule/default/converge.yml | 44 ++++++++++++++++ .../molecule/default/molecule.yml | 19 +++++++ .../molecule/default/prepare.yml | 8 +++ .../tasks/main.yml | 58 ++++++++++++++++++++++ .../defaults/main.yml | 1 + .../molecule/default/converge.yml | 12 +++++ .../tasks/main.yml | 1 + roles/tripleo_repos/README.md | 1 + roles/tripleo_repos/defaults/main.yml | 1 + roles/tripleo_repos/tasks/install.yml | 4 +- tox.ini | 2 +- zuul.d/layout.yaml | 10 +++- 26 files changed, 526 insertions(+), 4 deletions(-)

1 0

kayobe 10.0.0.0rc2 (wallaby)
by no-reply＠openstack.org 22 Jun '21

22 Jun '21

Hello everyone, A new release candidate for kayobe for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/wallaby Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *wallaby-rc-potential* to bring it to the kayobe release crew's attention.

1 0

kolla 12.0.0.0rc2 (wallaby)
by no-reply＠openstack.org 22 Jun '21

22 Jun '21

Hello everyone, A new release candidate for kolla for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kolla/src/branch/stable/wallaby Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *wallaby-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 12.0.0.0rc2 (wallaby)
by no-reply＠openstack.org 22 Jun '21

22 Jun '21

Hello everyone, A new release candidate for kolla-ansible for the end of the Wallaby cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Wallaby release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/wallaby release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/wallaby Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *wallaby-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

puppet-nova 15.8.1 (train)
by no-reply＠openstack.org 21 Jun '21

21 Jun '21

We are gleeful to announce the release of: puppet-nova 15.8.1: Puppet module for OpenStack Nova This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. Changes in puppet-nova 15.8.0..15.8.1 ------------------------------------- 287ce1fe Bump metadata to create the real final train release 2442758b Fixing section ovsdb_connection e2c2ba61 Prepare the final stable/train release 43cd2b49 Introducing default_tls_verify a6adf208 Disable libvirtd.service before starting sockets f939f674 Add TLS options to oslo.cache 2ae766f1 Allow both DEFAULT/dhcp_domain and api/dhcp_domain to be set dbba136c Set dhcp_domain for all nova services 64113fee Revert "Remove parameter nova::compute::pci_passthrough" Diffstat (except docs and test files) ------------------------------------- manifests/cache.pp | 43 +++++++++++++++++ manifests/compute.pp | 15 ++++++ manifests/compute/libvirt/qemu.pp | 12 +++++ manifests/init.pp | 9 +++- manifests/metadata.pp | 16 ++----- manifests/migration/libvirt.pp | 12 ++++- metadata.json | 14 +++--- .../notes/add_tls_options-9f4cd19db6a76a76.yaml | 4 ++ .../qemu-default_tls_verify-57e7afd6670afec2.yaml | 5 ++ spec/classes/nova_cache_spec.rb | 17 +++++++ spec/classes/nova_compute_libvirt_qemu_spec.rb | 55 +++++++++++++++++++++- spec/classes/nova_compute_spec.rb | 55 ++++++++++++++++++++++ spec/classes/nova_init_spec.rb | 8 +++- 13 files changed, 240 insertions(+), 25 deletions(-)

1 0

puppet-murano 15.5.1 (train)
by no-reply＠openstack.org 21 Jun '21

21 Jun '21

We jubilantly announce the release of: puppet-murano 15.5.1: Puppet module for OpenStack Murano This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 15.5.0..15.5.1 --------------------------------------- 6f29cf4 Fix inconsistent version in metadata.json Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

kayobe 7.3.0 (train)
by no-reply＠openstack.org 19 Jun '21

19 Jun '21

We enthusiastically announce the release of: kayobe 7.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. Changes in kayobe 7.2.1..7.3.0 ------------------------------ de5fa9ac Update CentOS 8 docs to use 8.4 image ad86b880 Revert "CI: switch to quay.io for container images" cfad3bed docs: Update Freenode to OFTC 3f95e6c5 CI: Remove unused Docker images after overcloud upgrade c39bdcdd Sync the names and content of the repo-files for CentOS8 67b8e786 Restore upper constraints for docs and releasenotes b26f4c1c CI: switch to quay.io for container images f8b4d2b1 Use released version of mrlesmithjr.mdadm b57f536e Update setuptools before installing kayobe c12192c1 Revert "Performance: skip LVM configuration if no groups configured" 67103fb5 Fix help texts of inventory options 020e9329 Fix installation errors with Python 2 7ecc15fa Update seed VM image to CentOS 8.3 754f5684 Avoid fact gathering for group_by b904559a CI: increase Ansible Galaxy retries & add delay 23a46166 CI: Fix kayobe-tox-molecule job 0ec936aa Document requirements for symlinks used by custom playbooks 130393e3 Update IPA docs and test build with extra-hardware 93ff0175 Fix CentOS 7 IPA build and test in CI 7640af70 Test building seed deployment images in the seed job (CentOS 8 only) 41c4c687 Fix building CentOS 8 IPA images on stable/train a3557353 Quote kolla limit when calling kolla-ansible 38d0904f CI: Fix overcloud and seed VM jobs on vexxhost clouds 8bac90b1 CI: use overlay2 storage driver for overcloud deploy f668d9be Fix copying Swift ring files 63c68e32 Add ipa_build_upper_constraints_file variable 564af0ab CI: overcloud upgrade fixes for Train 15e565fe Performance: avoid set_fact in Kolla Ansible host vars f4a8db8f Fix /tmp/swift-rings/backups/ files deletion b3dd0612 Fix --limit with commas Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/action_plugins/kolla_ansible_host_vars.py | 19 ++ ansible/group_vars/all/ipa | 5 + ansible/group_vars/all/swift | 6 +- ansible/kayobe-ansible-user.yml | 1 + ansible/kolla-ansible.yml | 274 ++++++--------- ansible/kolla-openstack.yml | 3 + ansible/lvm.yml | 15 +- ansible/overcloud-bios-raid.yml | 1 + ansible/overcloud-grafana-configure.yml | 3 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 4 +- ansible/overcloud-introspection-rules.yml | 3 +- ansible/overcloud-ipa-build.yml | 15 +- ansible/overcloud-ipa-images.yml | 3 +- ansible/physical-network.yml | 2 + ansible/provision-net.yml | 3 +- ansible/roles/dnf/tasks/local-mirror.yml | 10 + .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 -- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 -- .../dnf/templates/CentOS-Linux-AppStream.repo.j2 | 17 + .../dnf/templates/CentOS-Linux-BaseOS.repo.j2 | 17 + .../dnf/templates/CentOS-Linux-Extras.repo.j2 | 17 + ansible/roles/kolla-ansible/tasks/install.yml | 3 +- ansible/roles/kolla-openstack/tasks/config.yml | 17 +- ansible/roles/kolla/tasks/install.yml | 3 +- .../roles/swift-rings/files/swift-ring-builder.py | 4 +- ansible/roles/swift-rings/tasks/main.yml | 10 +- ansible/seed-ipa-build.yml | 12 +- dev/functions | 34 +- dev/tenks-deploy-config-compute.yml | 4 + etc/kayobe/ipa.yml | 4 + kayobe/ansible.py | 7 +- kayobe/kolla_ansible.py | 10 +- kayobe/plugins/__init__.py | 0 kayobe/plugins/action/__init__.py | 0 kayobe/plugins/action/kolla_ansible_host_vars.py | 152 +++++++++ .../plugins/action/test_kolla_ansible_host_vars.py | 368 +++++++++++++++++++++ kayobe/utils.py | 27 ++ playbooks/kayobe-overcloud-base/overrides.yml.j2 | 7 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 14 + playbooks/kayobe-overcloud-upgrade-base/pre.yml | 8 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/overrides.yml.j2 | 50 +++ .../fix-limit-with-commas-04a357b0b7ef0371.yaml | 6 + ...a-build-upper-constraints-5686abaa161b0d94.yaml | 7 + .../notes/quote-kolla-limit-042422e69c008109.yaml | 5 + .../notes/seed-vm-centos-8.3-7726c9d0603508eb.yaml | 4 + .../notes/story-2007297-73f498ef6bc89fe9.yaml | 5 + .../notes/story-2008354-0c34e2ad7aeb7d3d.yaml | 6 + .../train-centos7-ipa-fix-cc6db8e25578649c.yaml | 6 + .../notes/train-ipa-dib-fix-c348a7e3ba346ba1.yaml | 8 + requirements.yml | 5 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 + test-requirements.txt | 2 + tools/ansible-galaxy-retried.sh | 6 +- tox.ini | 4 +- 66 files changed, 1072 insertions(+), 313 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 020031c3..516e5932 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19,2 @@ paramiko +# ruamel.yaml 0.17.0 makes the kayobe-tox-molecule job fail. +ruamel.yaml<0.17.0

1 0

kolla 9.4.0 (train)
by no-reply＠openstack.org 19 Jun '21

19 Jun '21

We are tickled pink to announce the release of: kolla 9.4.0: Kolla OpenStack Deployment This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 9.3.1..9.4.0 ----------------------------- fa53a60c1 Fix _get_images_dir when pip-installed with --user c08d80950 Bump final OpenStack versions for Train 7a8fe4221 Enable Debian updates repo 715d799ab Fix build of masakari-monitors image 326201932 CI: drop bashism from template overrides 3b378b0a1 [CI] Trust only infra mirrors and fix APT mirrors c9b0e2ae4 rabbitmq: Move to packagecloud 56a570ddc base: configure curl before first use 3251922dd Bump OpenStack versions for Train 03adc9ddf Fix several issues (Train) 1378abcfa Drop lower-constraints 441382134 Fix Mistral source images to respect upper-constraints Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 1 - .../rabbitmq-3.7.24/rabbitmq_rabbitmq-erlang.repo | 4 +- .../rabbitmq-3.7.24/rabbitmq_rabbitmq-server.repo | 4 +- kolla/common/config.py | 72 ++++++++-------- kolla/image/build.py | 4 +- lower-constraints.txt | 99 ---------------------- .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 ++ .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 ++ .../notes/mistral-respect-uc-77aea99b5c6506ba.yaml | 4 + .../rabbitmq-packagecloud-c009ff6d0d2bd02d.yaml | 6 ++ .../ubuntu-uses-mirrors-now-0858d579944eea48.yaml | 5 ++ tox.ini | 7 -- 25 files changed, 122 insertions(+), 199 deletions(-)

1 0

kolla-ansible 9.3.2 (train)
by no-reply＠openstack.org 19 Jun '21

19 Jun '21

We are amped to announce the release of: kolla-ansible 9.3.2: Ansible Deployment of Kolla containers This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 9.3.2 ^^^^^ Bug Fixes * A bug where sriov_agent.ini wasn't copied due to "Permission denied" error was fixed. LP#1923467 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Fixes some configuration issues around Barbican logging. LP#1891343 * Fixes some configuration issues around Cinder logging. LP#1916752 * Fixes an issue with keepalived which was not recreated during an upgrade if configuration is unchanged. LP#1928362 * Fixes an issue with executing "kolla-ansible" when installed via "pip install --user". LP#1915527 * Removes whitespace around equal signs in "zookeeper.cfg" which were preventing the "zkCleanup.sh" script from running correctly. Changes in kolla-ansible 9.3.1..9.3.2 ------------------------------------- 3a1b94705 Support editable installation in all cases 6966e6fae neutron: Add become for copying sriov_agent.ini ebaa5bb8a Fix RabbitMQ restart ordering 4920980ad CI: Use PATH to find kolla-ansible script c12330f54 [CI] Remove setup_gate.sh symlink 018b997b1 CI: pull images before deploy e46628173 Remove [octavia]/base_url option from neutron.conf 26d310eea Ensure keepalived is upgraded 56eefd8c4 baremetal: Install Docker SDK less than 5.0.0 05b551b73 Disable Alertmanager's peer gossip in non-HA deployments 189a4e54e Use @type instead of type f3268ac5d Negative seqno need to be considered when comparing seqno 26760b639 docs: Improve policy documentation 5e3e2d366 Document setuptools update 82ae334ff Update setuptools inside virtualenvs 437c6a1e3 Fix installation errors with Python 2 147951d0b nova-cell: Stop printing ceph keys in output a0c0d6e90 docs: fix registry mirror example 99ea10b28 CentOS 8: Make it clearer the 7 to 8 migration stays on Train a919fbcc3 CI: fix kolla-ansible installation in stable/train df7b46df8 Remove whitespace around equal signs in zookeeper.cfg 5836fea52 Fix Cinder log parsing 6b9b4a5c2 CI: Add ssh retries 4e446b551 Do not wait for grafana to start when kolla_action=config 53fdc6217 Drop lower-constraints 12247f7a9 Fix installation with pip install --user ef0c1163a Fix monasca-grafana check e8030d0fc Fix Barbican API log config d55c82159 docs: Improve multinode Docker registry setup 4a1032b3b Use internal API for Barbican communication Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 27 +++- .../roles/barbican/templates/barbican-api.ini.j2 | 1 + .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 3 + ansible/roles/baremetal/tasks/install.yml | 3 +- ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 4 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 4 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 4 +- .../common/templates/conf/output/00-local.conf.j2 | 4 +- ansible/roles/glance/templates/glance-api.conf.j2 | 6 + ansible/roles/grafana/handlers/main.yml | 1 + ansible/roles/haproxy/tasks/upgrade.yml | 2 + ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/monasca/handlers/main.yml | 3 +- ansible/roles/neutron/tasks/config.yml | 1 + ansible/roles/neutron/templates/neutron.conf.j2 | 5 - ansible/roles/nova-cell/tasks/external_ceph.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 1 + ansible/roles/nova/templates/nova.conf.j2 | 1 + .../templates/prometheus-alertmanager.json.j2 | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 18 ++- ansible/roles/zookeeper/tasks/config.yml | 1 + lower-constraints.txt | 98 -------------- .../notes/bug-1923467-80973d9fbe1f5287.yaml | 6 + .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 + .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 + .../fix-barbican-logging-42068f47fe1e4e4d.yaml | 5 + .../notes/fix-cinder-logging-22fea4739begd6s.yaml | 5 + .../fix-keepalived-upgrade-a395e39dc946e618.yaml | 6 + .../fix-pip-install-user-5f871f67433e465a.yaml | 6 + .../zookeeper-cfg-syntax-02e93c01d6a24f35.yaml | 5 + tools/kolla-ansible | 28 +++- tools/setup_gate.sh | 136 -------------------- tox.ini | 7 - zuul.d/base.yaml | 1 - 53 files changed, 430 insertions(+), 363 deletions(-)

1 0

validations-libs 1.2.0
by no-reply＠openstack.org 17 Jun '21

17 Jun '21

We are gleeful to announce the release of: validations-libs 1.2.0: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.1.0..1.2.0 ---------------------------------------- 4d1df7b New optional param for log path 48cc737 Fixing the recursive path handling. a70ad12 Constants path formatting unification f2830c5 Improved log path handling 29b147e Override cliff command parser to handle argparser conflict_handler 04e84c8 Update Validations Framework IRC channels 91c1710 Expansion of logging for the list action 7cb048a Remove VALIDATION_GROUPS constant 254d447 Refactoring of the cli lister module c00f96a Deprecated assertEquals replaced e206da0 Refactoring of the cli run module ea125c1 Paths no longer contain double '/' eb439a3 Expansion of logging for the show action. 337288f Refactoring of the cli parseractions module 414687e Refactoring of the cli history module b2e87ca Refactoring of the cli show module 6ce0450 Refactoring of the cli app module 0f00fd7 Use validation_component for Standalone CI jobs ac415ff Reqcheck job for upstream validations-libs 01ab24c Bumping the ansible-runner version to 1.4.4 cacb93d Removing ansible-autodoc 78b3d28 Fix Python 2.7 compatibility for test_ansible.py f2e37b0 Make Python Interpreter option for Ansible Validation Run 658b73d Elevate the verbosity level when running validation(s) 23b15aa Move fetch_validations role from validations-libs-functional to post playbook 3e29d44 Disable quiet mode run when using an Ansible Custom Callback 5815fb3 setup.cfg: Replace dashes with underscores 6bfdb04 Retrieve n latest validation results 7cdeeeb Cover now prints line numbers 57a346c Bump pre-commit repositories efca065 Add support for JUnitXML output (optional) 135478c Version bumps for rhel9 transition 03981db CLI colors refactored c211177 group info test mocks and asserts 6329e3b Raise exception if result is empty 648c2d8 Expanded and increased strictness of the ansible.py tests Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 12 +- .reqcheck_override.yaml | 6 + .zuul.yaml | 21 +- playbooks/post.yaml | 1 + playbooks/reqcheck.yaml | 46 +++ playbooks/validations-libs-functional.yaml | 1 - requirements.txt | 2 +- setup.cfg | 5 +- tox.ini | 6 +- validations_libs/ansible.py | 2 +- validations_libs/cli/app.py | 8 +- validations_libs/cli/base.py | 57 ++++ validations_libs/cli/colors.py | 57 ++++ validations_libs/cli/common.py | 71 +++- validations_libs/cli/history.py | 77 ++++- validations_libs/cli/lister.py | 9 +- validations_libs/cli/parseractions.py | 16 +- validations_libs/cli/run.py | 96 +++--- validations_libs/cli/show.py | 13 +- validations_libs/constants.py | 19 +- validations_libs/utils.py | 121 ++++++- validations_libs/validation_actions.py | 101 ++++-- validations_libs/validation_logs.py | 30 +- 39 files changed, 1398 insertions(+), 731 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c2abb7a..6c0cd81 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -ansible-runner>=1.4.0 # Apache-2.0 +ansible-runner>=1.4.4 # Apache-2.0

1 0

ovsdbapp 1.11.0 (xena)
by no-reply＠openstack.org 17 Jun '21

17 Jun '21

We are psyched to announce the release of: ovsdbapp 1.11.0: A library for creating OVSDB applications This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. 1.11.0 ^^^^^^ New Features * Support the new "allow-stateless" ACL action. It was added in OVN 21.06. Changes in ovsdbapp 1.10.0..1.11.0 ---------------------------------- a7127ff ovn: support allow-stateless ACL verb cde7c1f Actually close the connection in Connection.stop() 6596164 Don't spam retries 100s of times a second ba55cc2 Fix docs job Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 5 ++++- ovsdbapp/backend/ovs_idl/transaction.py | 8 ++++++++ ovsdbapp/schema/ovn_northbound/api.py | 6 ++++-- ovsdbapp/schema/ovn_northbound/commands.py | 6 ++++-- .../notes/ovn-support-allow-stateless-01aed5acdcd1c0d1.yaml | 3 +++ tox.ini | 1 + 6 files changed, 24 insertions(+), 5 deletions(-)

1 0

rally 3.3.0
by no-reply＠openstack.org 17 Jun '21

17 Jun '21

We joyfully announce the release of: rally 3.3.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 3.2.0..3.3.0 ----------------------------- 1d9c1e82f Fix contribute page e67de5770 Prepare for a new release 3.3.0 927980931 Update installation guide 848123595 Update requirements e15d4aa8d Change base image 8414fd260 [community goal] Update contributor documentation 8a1c32613 Keep using bionic for tox jobs except with Python 3.8 eeeb08dfc setup.cfg: Replace dashes with underscores ee09cab54 Get rid of decorator lib a72a6e1ce Let verify command return different return codes depending on results. 412680357 Remove __unicode__() from RallyCliError 68d035d0a Fix different issues to ublock CI Diffstat (except docs and test files) ------------------------------------- .zuul.d/python-jobs.yaml | 3 + CHANGELOG.rst | 17 ++ CONTRIBUTING.rst | 20 +- DOCKER_README.md | 14 +- Dockerfile | 2 +- rally/cli/commands/task.py | 17 +- rally/cli/commands/verify.py | 7 + rally/cli/envutils.py | 32 ++-- rally/plugins/__init__.py | 13 +- rally/ui/utils.py | 3 +- requirements.txt | 6 +- setup.cfg | 6 +- tox.ini | 3 +- upper-constraints.txt | 78 ++++---- 24 files changed, 247 insertions(+), 491 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 540034c26..8fc8ac54e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6 @@ -alembic!=1.2.0 # MIT -decorator # new BSD License +alembic!=1.2.0,!=1.6.3 # MIT @@ -9,0 +9 @@ jsonschema # MIT +markupsafe # BSD-3-Clause @@ -17 +17 @@ pbr!=2.1.0 # Apache Software License -PrettyTable<0.8 # BSD (3 clause) +PrettyTable # BSD (3 clause)

1 0

puppet-tempest 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We enthusiastically announce the release of: puppet-tempest 15.4.1: Puppet module for OpenStack Tempest This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. Changes in puppet-tempest 15.4.0..15.4.1 ---------------------------------------- 1e6a89a Prepare the final stable/train release 8ad7ca5 Use python3-swift-tests package on CentOS8 a9d2d2e Switch to Train e1bf622 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 84e2b4d Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/params.pp | 2 +- metadata.json | 6 +++--- tox.ini | 2 +- 5 files changed, 8 insertions(+), 6 deletions(-)

1 0

puppet-vswitch 11.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are stoked to announce the release of: puppet-vswitch 11.5.0: Puppet module for OpenStack Vswitch This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. 11.5.0 ^^^^^^ New Features * The following two parameters have been added. * "vswitch::ovs::vlan_limit" * "vswitch::dpdk::vlan_limit" Changes in puppet-vswitch 11.4.0..11.5.0 ---------------------------------------- 5d96dab Prepare the final stable/train release d8acf3c Add support for vlan_limit option 2cc977b Add missing openstacklib to dependencies 5b074e7 Switch to Train 58734f4 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train e35c71c Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/dpdk.pp | 13 ++++++++++++ manifests/ovs.pp | 17 ++++++++++++++-- metadata.json | 6 +++++- .../notes/vlan-limit-b40bd9ca223b76ca.yaml | 7 +++++++ spec/classes/vswitch_dpdk_spec.rb | 5 +++++ spec/classes/vswitch_ovs_spec.rb | 23 ++++++++++++++++------ tox.ini | 2 +- 9 files changed, 66 insertions(+), 11 deletions(-)

1 0

puppet-sahara 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are gleeful to announce the release of: puppet-sahara 15.4.1: Puppet module for OpenStack Sahara This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 15.4.0..15.4.1 --------------------------------------- e8c5a9d Prepare the final stable/train release 4918a93 Fix rabbitmq dependency 92a869a Switch to Train 12fc21c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train c09336e Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-trove 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are psyched to announce the release of: puppet-trove 15.4.1: Puppet module for OpenStack Trove This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. Changes in puppet-trove 15.4.0..15.4.1 -------------------------------------- 0eacf4d Prepare the final stable/train release bddf0f9 Fix rabbitmq dependency 4710735 Switch to Train 7baf21c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train d809f8f Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-ovn 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are pumped to announce the release of: puppet-ovn 15.5.0: Puppet module for OVN This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * The new "ovn::controller::ovn_chassis_mac_map" parameter has been added. For distributed vlan in ovn we need to set mac addresses per compute in external_ids:ovn-chassis-mac-mappings Changes in puppet-ovn 15.4.0..15.5.0 ------------------------------------ a6b0f69 Prepare the final stable/train release 9bbc14b Set external_ids:ovn-chassis-mac-mappings dbfcb84 Switch to Train 90c8de5 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 9c4727a Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 6 ++--- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 22 +++++++++++++++ tox.ini | 2 +- 7 files changed, 65 insertions(+), 6 deletions(-)

1 0

puppet-nova 15.8.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We eagerly announce the release of: puppet-nova 15.8.0: Puppet module for OpenStack Nova This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 15.8.0 ^^^^^^ New Features * Added parameter live_migration_timeout_action to nova::migration::libvirt. * The new "nova::migration::libvirt::live_migration_permit_post_copy" parameter has been added to support post copy mode in live migration. * The new "nova::migration::libvirt::live_migration_permit_auto_converge" parameter has been added to support auto converge in live migration. * Add support for managing configuration for persistent memory(pmem) namespaces. * Adds parameter nova::compute::libvirt::max_queues to configure the libvirt max_queues. Changes in puppet-nova 15.6.0..15.8.0 ------------------------------------- 4e737f79 Prepare a new release for Train c8507e92 Fix libvirt version discovery for CentOS Stream 8e2c0a45 Add parameter to configure the libvirt max_queues 32bd0fa3 Cleanup listen option from libvirtd service file ad46ddff Build containers for single consumer job b43e741e Fix duplicated user keys 6060a871 Add live_migration_timeout_action to nova::migration::libvirt 30684e64 Expose nova config option [workaround]/never_download_image_if_on_rbd a59439fb Add support for more migration parameters e126ce81 Fix wrong notification between api service and httpd 53620af2 Fix ignored unit test cases for nova::migration::libvirt 9629db4c Add `pmem_namespaces` parameter 94911988 Fix ignored test cases for nova::compute::libvirt 51a68574 Expose vhost_custom_fragment Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + lib/puppet/type/nova_aggregate.rb | 5 + lib/puppet/type/nova_service.rb | 5 + manifests/api.pp | 2 +- manifests/compute.pp | 1 + manifests/compute/libvirt.pp | 23 ++- manifests/compute/libvirt/version.pp | 2 +- manifests/keystone/auth.pp | 3 +- manifests/migration/libvirt.pp | 154 +++++++++++++-------- manifests/workarounds.pp | 10 ++ manifests/wsgi/apache_api.pp | 7 + manifests/wsgi/apache_metadata.pp | 7 + metadata.json | 2 +- ..._migration_timeout_action-ba86ca0d5b25ba90.yaml | 4 + ...more_migration_parameters-46291332615deb4f.yaml | 8 ++ .../add_pmem_namespaces-7c425a8c65ecd119.yaml | 5 + ...ompute-libvirt-max_queues-97a35922dbacb0b1.yaml | 5 + spec/classes/nova_compute_libvirt_spec.rb | 74 +++------- spec/classes/nova_cron_purge_shadow_tables.rb | 3 - spec/classes/nova_keystone_auth_spec.rb | 15 +- spec/classes/nova_migration_libvirt_spec.rb | 94 ++++++++++--- spec/classes/nova_workarounds_spec.rb | 7 +- spec/classes/nova_wsgi_apache_api_spec.rb | 2 + 23 files changed, 288 insertions(+), 151 deletions(-)

1 0

puppet-openstack_extras 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We contentedly announce the release of: puppet-openstack_extras 15.4.1: Puppet module for OpenStack Openstack_extras This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 15.4.0..15.4.1 ------------------------------------------------- 6ab7806 Prepare the final stable/train release 371931c Require yum-plugin-priorities only in CentOS/RHEL<8 375b92e Replace hardcoded CentOS version with fact ae13f36 Set show_diff to false for auth_file f835298 Switch to Train 51a30bb Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 71157b1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/auth_file.pp | 11 +++---- manifests/repo/redhat/redhat.pp | 34 +++++++++++++++------- metadata.json | 2 +- .../openstack_extras_repo_redhat_redhat_spec.rb | 30 +++++++++++++++++++ tox.ini | 2 +- 7 files changed, 64 insertions(+), 19 deletions(-)

1 0

puppet-panko 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are tickled pink to announce the release of: puppet-panko 15.5.0: Puppet module for OpenStack Panko This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-panko Download the package from: https://tarballs.openstack.org/puppet-panko/ Please report issues through: https://bugs.launchpad.net/puppet-panko/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Added events_delete_batch_size parameter to the expirer class to enable configuration of the parameter with same name. It serves the purpose of limiting number of deleted events in single purge run. Changes in puppet-panko 15.4.0..15.5.0 -------------------------------------- da52267 Prepare the final stable/train release 4ae0c64 Allow configuration of limit of batch size for exirer 49b7b3e Switch to Train 7a4a9a7 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 78f8981 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/expirer.pp | 21 +++++++++++++++------ metadata.json | 8 ++++---- releasenotes/notes/batchsize-9f201b538828370d.yaml | 6 ++++++ spec/classes/panko_expirer_spec.rb | 13 +++++++++++++ tox.ini | 2 +- 7 files changed, 42 insertions(+), 12 deletions(-)

1 0

puppet-watcher 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are amped to announce the release of: puppet-watcher 15.4.1: Puppet module for OpenStack Watcher This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. Changes in puppet-watcher 15.4.0..15.4.1 ---------------------------------------- c5d6aef Prepare the final stable/train release 15bfeb6 Fix rabbitmq dependency e30f835 Switch to Train 48ab2fc Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 4bcfb8b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 8 ++++---- tox.ini | 2 +- 4 files changed, 8 insertions(+), 6 deletions(-)

1 0

puppet-swift 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are delighted to announce the release of: puppet-swift 15.5.0: Puppet module for OpenStack Swift This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Add swift::proxy::domain_remap class to configure domain_remap middleware for swift proxy. * Add swift::proxy::symlink class to configure symlink middleware for swift proxy. * Add TLS options for Memcached TLS connections. * Added new parameter memcache_max_connections to proxy::cache class that can be used to configure the maximum number of connections to each memcached server per worker. Changes in puppet-swift 15.4.0..15.5.0 -------------------------------------- 1fdb986 Prepare the final stable/train release feb9705 Add TLS options for swift memcached client d36c510 Add parameter memcache_max_connections f37bc1a Build containers for single consumer job cc79e4a Add domain_remap middleware support 3bbd1da Add missing openstacklib to dependencies 1795fc0 Add symlink middleware support 654e964 Switch to Train 82e146a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 0334e46 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- manifests/containerreconciler.pp | 52 +++++++++-- manifests/objectexpirer.pp | 34 +++++++ manifests/proxy/cache.pp | 45 ++++++++- manifests/proxy/domain_remap.pp | 104 +++++++++++++++++++++ manifests/proxy/symlink.pp | 42 +++++++++ metadata.json | 8 +- ...-swift-proxy-domain_remap-d3b316fb6e964716.yaml | 4 + .../add-swift-proxy-symlink-4864e7c1755567d4.yaml | 4 + .../notes/add-tls-options-cfc659d2a0ad42bc.yaml | 4 + ...-memcache-max-connections-50876054c14dbdd5.yaml | 6 ++ spec/classes/swift_containerreconciler_spec.rb | 18 ++-- spec/classes/swift_objectexpirer_spec.rb | 4 +- spec/classes/swift_proxy_cache_spec.rb | 67 ++++++++----- spec/classes/swift_proxy_domain_remap_spec.rb | 59 ++++++++++++ spec/classes/swift_proxy_symlink_spec.rb | 33 +++++++ tox.ini | 2 +- 19 files changed, 444 insertions(+), 47 deletions(-)

1 0

puppet-tacker 15.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are jazzed to announce the release of: puppet-tacker 15.4.1: Puppet module for OpenStack Tacker This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tacker Download the package from: https://tarballs.openstack.org/puppet-tacker/ Please report issues through: https://bugs.launchpad.net/puppet-tacker/+bugs For more details, please see below. Changes in puppet-tacker 15.4.0..15.4.1 --------------------------------------- 548f023 Prepare the final stable/train release b1dfac6 Fix rabbitmq dependency dd7c48d Switch to Train 1183276 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train a737586 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-murano 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are amped to announce the release of: puppet-murano 15.5.0: Puppet module for OpenStack Murano This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 15.4.0..15.5.0 --------------------------------------- 7a3a8d7 Prepare the final stable/train release c6580ec Fix rabbitmq dependency 4305e8c Switch to Train 74a92eb Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 7376830 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 4 ++-- tox.ini | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-mistral 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are happy to announce the release of: puppet-mistral 15.5.0: Puppet module for OpenStack Mistral This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. Changes in puppet-mistral 15.4.0..15.5.0 ---------------------------------------- 5dcd237 Prepare the final stable/train release 426952d Expose vhost_custom_fragment c733b8a Switch to Train 3d1d12d Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 01db238 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/wsgi/apache.pp | 7 +++++++ metadata.json | 8 ++++---- spec/classes/mistral_wsgi_apache_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 17 insertions(+), 6 deletions(-)

1 0

puppet-keystone 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are tickled pink to announce the release of: puppet-keystone 15.5.0: Puppet module for OpenStack Keystone This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Add TLS options to oslo.cache * Allow to specify drivername for postgres db * Adds interface parameter to keystone::resource::authtoken allow services to configure the interface to use for the Identity API endpoint. Valid values are "public", "internal" or "admin". * The keystone::endpoint::service_description parameter has been added with the default value of 'OpenStack Identity Service' (moved from hardcoded value to a parameter). This is used when setting the description on the identity service managed by the keystone::endpoint class. Bug Fixes ********* * Workers are raised to 2 x os_workers, so that we have as many workers as the one we had before we merged 2 keystone services(public and admin). * Fixed a bug where the keystone::resource::authtoken resource would not install the proper python memcache bindings when using python3. * The "default/public_endpiint" parameter is no longer set by default because of known issue with different hosts/protocol used for each endpoints (especially for admin endpoint and public endpoint) * In case public_endpoint can't be used and keystone providers are required, the deprecated "keystone::public_bind_host" and "keystone::public_port" can still be used so that all provider implementations can detect endpoint url from these parameters. These parameters are added to keystone.conf if non-default value is set. Changes in puppet-keystone 15.4.0..15.5.0 ----------------------------------------- 1dc5b6e Prepare the final stable/train release 37fd0cd Check length of unique array in roles::admin 247cade Add TLS options to oslo.cache 8ab3db3 Build containers for single consumer job 175b51f Make service desc in keystone::endpoint configurable 1660e2c Fix python package names (ldappool and pysaml2) a34e31d Convert more to rspec-puppet-facts 6d337fc allow to specify drivername for postgres db fe869f2 Revert "Do not set public_bind_host and public_port in eventlet section" 09b61ff Always pass --name when flushing keystone_service 60532ba Update doc to reflect code a58ef36 Install the correct memcache bindings for py3 e59b906 Update ldap-backend options 378efee OIDC : Add support for setting OIDCClaimDelimiter a110c96 Add support for JWKS based OAuth Token validation. 8a3172e Fix performance regression due to reduced number of keystone workers e57542a New keystone::resource::authtoken::interface parameter 124f64d Switch to Train 3181006 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 18ef734 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- lib/puppet/provider/keystone.rb | 35 +- lib/puppet/provider/keystone_service/openstack.rb | 3 + manifests/db.pp | 2 +- manifests/endpoint.pp | 23 +- manifests/federation/identity_provider.pp | 15 +- manifests/federation/openidc.pp | 41 +- manifests/init.pp | 97 ++-- manifests/ldap.pp | 9 +- manifests/ldap_backend.pp | 42 +- manifests/params.pp | 6 +- manifests/resource/authtoken.pp | 7 + manifests/roles/admin.pp | 8 +- manifests/wsgi/apache.pp | 4 +- metadata.json | 6 +- .../notes/add_tls_options-8ed38a82af2f378f.yaml | 4 + ...drivername-for-postgresql-daa276a598844884.yaml | 3 + .../authtoken_interface-2e8ccbd3e961e0fb.yaml | 6 + .../notes/double-workers-b9e340a18a5e9823.yaml | 5 + ...service-desc-configurable-823573c250eaef96.yaml | 7 + .../memcache-package-pyvers-a3db976c1a881dcf.yaml | 5 + .../unset-public_endpoint-be0e6c20416e9762.yaml | 12 + spec/acceptance/keystone_wsgi_apache_spec.rb | 18 - spec/classes/keystone_db_postgresql_spec.rb | 4 +- .../keystone_federation_identity_provider_spec.rb | 191 ++++---- spec/classes/keystone_federation_openidc_spec.rb | 33 +- spec/classes/keystone_init_spec.rb | 74 +-- spec/classes/keystone_ldap_spec.rb | 225 +++++---- spec/classes/keystone_wsgi_apache_spec.rb | 8 +- spec/defines/keystone_ldap_backend_spec.rb | 506 +++++++++++---------- spec/defines/keystone_resource_authtoken_spec.rb | 13 +- spec/unit/provider/keystone_spec.rb | 89 +++- templates/openidc.conf.erb | 7 + tox.ini | 2 +- 36 files changed, 924 insertions(+), 591 deletions(-)

1 0

puppet-placement 2.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are gleeful to announce the release of: puppet-placement 2.5.0: Puppet module for OpenStack placement This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. 2.5.0 ^^^^^ New Features * Adds interface parameter to placement::keystone::authtoken to configure the interface to use for the Identity API endpoint. Valid values are "public", "internal" or "admin"(default). * The new "placement::client" class has been added to manage osc- placement package. Changes in puppet-placement 2.4.0..2.5.0 ---------------------------------------- 8fe110e Prepare the final stable/train release d57a3d9 Add support for management of osc-placement package 85948e4 Expose vhost_custom_fragment 39b9c77 Refactor placement::api 8fef1a3 Fix api.pp "Unknown variable" afddd56 New placement::keystone::authtoken::interface parameter dcf9a58 Switch to Train 5833470 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ec1f3a6 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/api.pp | 71 ++++++++++--------- manifests/client.pp | 24 +++++++ manifests/deps.pp | 11 +++ manifests/keystone/authtoken.pp | 7 ++ manifests/params.pp | 6 +- manifests/wsgi/apache.pp | 17 +++-- metadata.json | 8 +-- ...stone_authtoken_interface-4537941bc250a05d.yaml | 6 ++ .../notes/osc-placement-c9df6c2ce40537d0.yaml | 5 ++ spec/classes/placement_api_spec.rb | 81 ++++++++++++++++++++++ spec/classes/placement_client_spec.rb | 51 ++++++++++++++ spec/classes/placement_keystone_authtoken_spec.rb | 3 + spec/classes/placement_wsgi_apache.rb | 2 + tox.ini | 2 +- 16 files changed, 250 insertions(+), 48 deletions(-)

1 0

puppet-cinder 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are stoked to announce the release of: puppet-cinder 15.5.0: Puppet module for OpenStack Cinder This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added Dell EMC SC backend driver config that supports both iSCSI and FC options. * Added support for VxFlexOS backend driver Upgrade Notes ************* * The default value of cinder::api::keymgr_backend is changed from the invalid value cinder.keymgr.conf_key_mgr.ConfKeyManager to service default. Deprecation Notes ***************** * The cinder::api::os_region_name parameter was deprecated and has no effect. Use cinder::nova::region_name instead. Changes in puppet-cinder 15.4.0..15.5.0 --------------------------------------- d67dac0 Prepare the final stable/train release b8771d9 Build containers for single consumer job ff571a9 Expose vhost_custom_fragment d5721f9 Support for Dell EMC VXFlexOS Backend 4d2a6ea Support for Dell EMC SC Driver Volume Config b55676d Support for Dell EMC XTREMIO Driver Volume Config eb0dd3c Change ceph_init_override param for Debian b2c707d Refer keystone_authtoken to find credentials 54fcada Deprecate cinder::api::os_region_name 24b85a8 Fix rabbitmq dependency 7b2d2e9 Make tempest scope more strict 15afaea Support for PowerMax Volume Config f4aa29e Change default value for keymgr_backend to default cf85ed8 Switch to Train 6f07c74 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 25d61df Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- Gemfile | 3 +- lib/puppet/provider/cinder.rb | 21 +-- manifests/api.pp | 30 ++-- manifests/backend/dellemc_powermax.pp | 110 ++++++++++++++ manifests/backend/dellemc_sc.pp | 163 +++++++++++++++++++++ manifests/backend/dellemc_vxflexos.pp | 151 +++++++++++++++++++ manifests/backend/dellemc_xtremio.pp | 109 ++++++++++++++ manifests/backend/rbd.pp | 4 +- manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 7 + metadata.json | 10 +- ...lue-change-keymgr_backend-4a627bb17e688e18.yaml | 5 + ...cinder-api-os_region_name-812ccb925f867a52.yaml | 5 + .../notes/powermax-driver-d428e372280c44e6.yaml | 4 + releasenotes/notes/sc-driver-ab28e372280c44e6.yaml | 4 + .../notes/vxflexos-driver-abc8e372280c44e6.yaml | 3 + .../notes/xtremio-driver-abc8e372280c44e6.yaml | 4 + spec/classes/cinder_api_spec.rb | 50 ++----- spec/classes/cinder_wsgi_apache_spec.rb | 2 + .../cinder_backend_dellemc_powermax_spec.rb | 101 +++++++++++++ spec/defines/cinder_backend_dellemc_sc.rb | 134 +++++++++++++++++ .../cinder_backend_dellemc_vxflexos_spec.rb | 89 +++++++++++ spec/defines/cinder_backend_rbd_spec.rb | 6 +- spec/defines/cinder_dell_emc_xtremio_spec.rb | 120 +++++++++++++++ tox.ini | 2 +- 27 files changed, 1071 insertions(+), 75 deletions(-)

1 0

puppet-glance 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are stoked to announce the release of: puppet-glance 15.5.0: Puppet module for OpenStack Glance This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Add glance::api::enabled_backends and glance::api::default_backend parameters for configuring glance backends. The parameters implement glance's Multi Store syntax, which supports configuring multiple backends of the same type (e.g. multiple rbd backends). Multiple backends of the same type may be specified using new glance::backend::multistore::* defined resource types. * Added cache_prefetcher_interval in glance-api.conf, using which the periodic job will run as per the set interval and prefetch images into cache. * The new parameters, cinder_enforce_multipath and cinder_use_multipath, are intoroduced into cinder::backend::multistore::cinder class, so that operators can define multipath usage in volume connection. * A new parameter "cinder_mount_point_base" is introduced into "glance::backend::multistore::cinder" class, so that operators can provide the cinder mount point for NFS volumes. Deprecation Notes ***************** * The following parameters are deprecated due to the corresponding parameters being deprecated in glance. They are replaced by the new glance::api::enabled_backends and glance::api::default_backend parameters. * glance::api::stores * glance::api::default_store * glance::api::multi_store The following backend resources are deprecated because they are associated with the deprecated glance::api::stores parameter. They are replaced by corresponding glance::backend::multistore resources, except for the s3 backend which was removed from glance in Newton. * glance::backend::cinder * glance::backend::file * glance::backend::rbd * glance::backend::s3 * glance::backend::swift * glance::backend::vsphere Bug Fixes ********* * The "swift::backend::multistore::swift::swift_store_config_file" is now set to "/etc/glance/glance-swift.conf" by default. Because of this change the parameter is automatically set to use the configuration file generated by puppet-glance. Changes in puppet-glance 15.4.0..15.5.0 --------------------------------------- 8a23345 Prepare the final stable/train release 4b4b990 Add parameters for multipath connection in cinder backend 2936eb2 Add config parameter for cinder mounting needs aa0e036 Use glance-swift.conf by default 8d00da1 Build containers for single consumer job 8ac5b13 Add cache prefetcher interval configuration option 43f3d5e Fix outdated get_glance_crednetials in Puppet::Provider::Glance a9b1a12 Fix rabbitmq dependency 69c10c4 Update the method of configuring glance backends 9439d56 Switch to Train 9baa381 Fix properties in glance_image provider for osc >= 4.0.0 cbc46cd Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 6ee5fb9 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + Gemfile | 3 +- lib/puppet/provider/glance.rb | 106 ++++++----- lib/puppet/provider/glance_image/openstack.rb | 20 +- manifests/api.pp | 199 +++++++++++++------- manifests/backend/cinder.pp | 36 ++-- manifests/backend/file.pp | 11 +- manifests/backend/multistore/cinder.pp | 138 ++++++++++++++ manifests/backend/multistore/file.pp | 49 +++++ manifests/backend/multistore/rbd.pp | 87 +++++++++ manifests/backend/multistore/swift.pp | 125 +++++++++++++ manifests/backend/multistore/vsphere.pp | 109 +++++++++++ manifests/backend/rbd.pp | 26 ++- manifests/backend/s3.pp | 32 +--- manifests/backend/swift.pp | 42 ++--- manifests/backend/vsphere.pp | 23 ++- metadata.json | 10 +- .../add-enabled_backends-b7b2ab71eed5f7c6.yaml | 28 +++ ...cache_prefetcher_interval-e77d98c5235e91bc.yaml | 6 + ...f-swift_store_config_file-e59ff9753f3612a7.yaml | 7 + ...-backend-cinder-multipath-d18f73e3a9c55b05.yaml | 6 + ...d_cinder_mount_point_base-5741d2966cc10c7b.yaml | 6 + spec/acceptance/basic_glance_spec.rb | 2 +- spec/classes/glance_api_spec.rb | 202 ++++++++++++++------- spec/classes/glance_backend_s3_spec.rb | 121 ------------ .../glance_backend_multistore_cinder_spec.rb | 127 +++++++++++++ .../defines/glance_backend_multistore_file_spec.rb | 61 +++++++ spec/defines/glance_backend_multistore_rbd_spec.rb | 124 +++++++++++++ .../glance_backend_multistore_swift_spec.rb | 112 ++++++++++++ .../glance_backend_multistore_vsphere_spec.rb | 88 +++++++++ spec/unit/provider/glance_image_spec.rb | 29 +++ spec/unit/provider/glance_spec.rb | 61 +++++-- tox.ini | 2 +- 34 files changed, 1556 insertions(+), 444 deletions(-)

1 0

puppet-openstacklib 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We exuberantly announce the release of: puppet-openstacklib 15.5.0: Puppet module for OpenStack Openstacklib This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 15.5.0 ^^^^^^ Security Issues *************** * Do not authorize directory listing Bug Fixes ********* * rhbz#1778052 * LP#1854442 Changes in puppet-openstacklib 15.4.0..15.5.0 --------------------------------------------- e3b61ab Prepare the final stable/train release 2846fc8 Fix rabbitmq dependency 8cdb313 Add old ruby support to inet6_prefix 9cc1342 mysql: allow specifying the authentication method ae52363 Have doubled workers for keystone service 6357ffa Ensure no directory listing is active 94b2016 Switch to Train 754ccf7 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train fc50943 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- lib/facter/os_workers.rb | 13 ++++++++ lib/puppet/functions/inet6_prefix.rb | 11 ++++++- manifests/db/mysql.pp | 6 ++++ manifests/db/mysql/host_access.pp | 6 ++++ manifests/wsgi/apache.pp | 1 + metadata.json | 4 +-- .../no-directory-listing-8e6270ed0e1eb1d0.yaml | 6 ++++ .../openstacklib_db_mysql_host_access_spec.rb | 28 +++++++++++++++++ spec/defines/openstacklib_db_mysql_spec.rb | 34 ++++++++++++++++++++ spec/defines/openstacklib_wsgi_apache_spec.rb | 3 +- spec/unit/facter/os_workers_keystone_spec.rb | 36 ++++++++++++++++++++++ tox.ini | 2 +- 14 files changed, 148 insertions(+), 6 deletions(-)

1 0

puppet-designate 15.6.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are glad to announce the release of: puppet-designate 15.6.0: Puppet module for OpenStack Designate This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 15.5.0..15.6.0 ------------------------------------------ 699d285 Fix minimum version of puppet-rabbitmq 2ec2ee3 Prepare the final stable/train release 3e554a1 Add support to specify sqlite database 516c3c2 Fix rabbitmq dependency 4fc5214 Switch to Train Diffstat (except docs and test files) ------------------------------------- Gemfile | 3 ++- manifests/db.pp | 5 ++++- metadata.json | 10 +++++----- 3 files changed, 11 insertions(+), 7 deletions(-)

1 0

puppet-oslo 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are glad to announce the release of: puppet-oslo 15.5.0: Puppet module for Oslo This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Add TLS options to oslo.cache Changes in puppet-oslo 15.4.0..15.5.0 ------------------------------------- 883fa53 Prepare the final stable/train release 7f69fbb Add TLS options to oslo.cache 185dec2 Consolidate python memcache bindings install 00f661d Switch to Train 0e02dd0 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train a29003e Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/cache.pp | 51 ++++++++++++++++++++-- metadata.json | 4 +- .../notes/add_tls_options-9010fc5eab23dfe7.yaml | 4 ++ spec/defines/oslo_cache_spec.rb | 15 +++++++ tox.ini | 2 +- 7 files changed, 72 insertions(+), 8 deletions(-)

1 0

puppet-octavia 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are amped to announce the release of: puppet-octavia 15.5.0: Puppet module for OpenStack Octavia This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added parameters to enable amphora log offloading. * Added octavia::provider::ovn for configuring OVN driver properties. * Added Keepalived VRRP parameters. Deprecation Notes ***************** * octavia::api::ovn_nb_connection is now deprecated and will be removed in the future release. Please use octavia::provider::ovn::ovn_nb_connection instead. Changes in puppet-octavia 15.4.0..15.5.0 ---------------------------------------- 2f54828 Fix minimum version of puppet-nova 0e98582 Prepare the final stable/train release b741773 Expose vhost_custom_fragment e322e9b Fix rabbitmq dependency 6284d53 Add driver agent configuration 7987964 Add Octavia OVN Provider configuration (2 of 2) a3603e6 Add Octavia OVN Provider configuration (1 of 2) 736f286 Revert "Add parameters for amphora anti-affinity" 0eaf414 Add parameters for amphora anti-affinity 8d86546 Add parameters for amphora log offloading b659647 Add keepalivd vrrp parameters b12f610 Switch to Train 152e906 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 7de7d5b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- .../octavia_ovn_provider_config/ini_setting.rb | 10 ++ lib/puppet/type/octavia_ovn_provider_config.rb | 53 +++++++ manifests/api.pp | 12 +- manifests/controller.pp | 161 ++++++++++++++++----- manifests/driver_agent.pp | 92 ++++++++++++ manifests/provider/ovn.pp | 48 ++++++ manifests/wsgi/apache.pp | 7 + metadata.json | 12 +- .../notes/add-driver-agent-71b506e3d81e92fe.yaml | 4 + .../notes/add-log-offloading-1a7836381de33644.yaml | 3 + .../notes/add-ovn-provider-71b506e3d81e92fe.yaml | 8 + ...dd-vrrp-keepalived-params-81f235f8cc411c42.yaml | 3 + spec/classes/octavia_api_spec.rb | 3 - spec/classes/octavia_controller_spec.rb | 63 ++++++-- spec/classes/octavia_driver_agent_spec.rb | 72 +++++++++ spec/classes/octavia_ovn_provider_spec.rb | 47 ++++++ spec/classes/octavia_wsgi_apache_spec.rb | 112 ++++++++++++++ .../ini_setting_spec.rb | 68 +++++++++ spec/unit/type/octavia_ovn_provider_config_spec.rb | 64 ++++++++ tox.ini | 2 +- 22 files changed, 784 insertions(+), 64 deletions(-)

1 0

puppet-horizon 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We jubilantly announce the release of: puppet-horizon 15.5.0: Puppet module for OpenStack Horizon This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Support was added to set the SECURE_PROXY_ADDR_HEADER option. If horizon is behind a proxy server and the proxy is configured, the IP address from request is passed using header variables inside the request. This setting specifies the name of the header with remote IP address. * Added the ssl_verify_client parameter to init class and horizon::wsgi::apache that is passed down to the created apache::vhost resource. Upgrade Notes ************* * The puppetlabs-apache module 2.1.0 introduced a change where ssl_verify_client is required otherwise the SSL CA certificate passed to the horizon module using the horizon_ca parameter is ignored. Changes in puppet-horizon 15.4.0..15.5.0 ---------------------------------------- c300380 Prepare the final stable/train release cc8289a add support for SECURE_PROXY_ADDR_HEADER 6470aea Build containers for single consumer job 2ae5f46 Add ssl_verify_client dd78e01 Consolidate python memcache bindings install e379bb2 at least one test needs to run for tempest to pass 3cadfc2 Reflect openstacklib options for apache::vhost resources 620e8f6 Switch to Train 64f1f61 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 2635fd8 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 ++ Gemfile | 3 ++- manifests/init.pp | 23 ++++++++++++++++--- manifests/wsgi/apache.pp | 8 +++++++ metadata.json | 4 ++-- ...-secure-proxy-addr-header-07c36d89f8bf2ad2.yaml | 7 ++++++ .../add-ssl_verify_client-3e2bc9a7f1d4291a.yaml | 10 +++++++++ spec/classes/horizon_init_spec.rb | 26 +++++++++++++--------- spec/classes/horizon_wsgi_apache_spec.rb | 12 +++++----- templates/local_settings.py.erb | 6 +++++ tox.ini | 2 +- 12 files changed, 81 insertions(+), 23 deletions(-)

1 0

puppet-neutron 15.6.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are psyched to announce the release of: puppet-neutron 15.6.0: Puppet module for OpenStack Neutron This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 15.6.0 ^^^^^^ New Features * Add 'dnsmasq_enable_addr6_list' option support to dhcp agent settings. (See bug: #1861032 (https://bugs.launchpad.net/neutron/+bug/1861032)) * The following two new classes have been added, to set up parameters in ovs_driver and sriov_driver section. * "neutron::plugins::ml2::ovs_driver" * "neutron::plugins::ml2::sriov_driver" * Add a new configuration option called "ovn_emit_need_to_frag" to the "ovn" section of etc/neutron/plugins/ml2_conf.ini. This new option tells ovn whether it should emit "need to frag" packets in case of MTU mismatch. Before enabling this configuration make sure that its supported by the host kernel (version >= 5.2) or by checking the output of the following command: ovs-appctl -t ovs- vswitchd dpif /show-dp-features br-int | grep "Check pkt length action". Defaults to False. * Add new configuration parameter explicitly_egress_direct for ML2 OVS agent When set to True, the accepted egress unicast traffic will not use action NORMAL. The accepted egress packets will be taken care of in the final egress tables direct output flows for unicast traffic so that operators can set customized integration bridge name in l3 agent configuration. This can be enabled on some nodes to prevent flooding on integration bridge. * Add support for resource provider bandwidth. * The following two parameters have been added to define mapping of bridge name and hyper visor name to locate the parent of the resource provider tree. * "neutron::agents::ml2::ovs::resource_provider_hypervisors" * "neutorn::agents::ml2::sriov::resource_provider_hypervisors" Changes in puppet-neutron 15.5.0..15.6.0 ---------------------------------------- 7f36270b Prepare the final stable/train release 9fc89a77 Fix name of networking-ansible/baremetal package 367ba177 Fix L3 agent's extensions list c774dcb8 Add support for the resource_provider_hypervisors parameter 89e5b0d0 Ensure resource_provider_bandwitdhs is unset by default 9d9574d4 Build containers for single consumer job a382db46 Add new classes ovs_driver and sriov_driver 8ea35656 Add agent/explicitly_egress_direct support 7d0406b1 Nuage: remove check on mechanism driver 0a45ec73 Add support for resource provider bandwidth in Neutron config d1099ba1 OVN: Add ovn_emit_need_to_frag configuration option 731a8fd7 Add 'dnsmasq_enable_addr6_list' option 7001e662 Refer keystone_authtoken instead of neutron to detect region Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + lib/puppet/provider/neutron.rb | 14 +-- manifests/agents/dhcp.pp | 31 +++--- manifests/agents/l3.pp | 4 +- manifests/agents/ml2/networking_baremetal.pp | 2 +- manifests/agents/ml2/ovs.pp | 105 ++++++++++++++------- manifests/agents/ml2/sriov.pp | 45 +++++++-- manifests/params.pp | 4 +- manifests/plugins/ml2/mech_driver.pp | 22 +++++ manifests/plugins/ml2/networking_ansible.pp | 3 +- manifests/plugins/ml2/networking_baremetal.pp | 2 +- manifests/plugins/ml2/nuage.pp | 4 - manifests/plugins/ml2/ovn.pp | 12 +++ manifests/plugins/ml2/ovs_driver.pp | 31 ++++++ manifests/plugins/ml2/sriov_driver.pp | 31 ++++++ metadata.json | 12 +-- ...dnsmasq_enable_addr6_list-2ead22fb05f5da5f.yaml | 5 + .../notes/ml2-driver-classes-e9de9a5e58c855fb.yaml | 8 ++ ...eed-to-frag-config-option-89c716cd33592bea.yaml | 11 +++ ..._explicitly_egress_direct-a5989bd33844c0f4.yaml | 9 ++ ...source_provider_bandwidth-e7887d104adb4ae9.yaml | 4 + ...urce_provider_hypervisors-907db47afa6d5d72.yaml | 9 ++ spec/classes/neutron_agents_dhcp_spec.rb | 10 ++ spec/classes/neutron_agents_l3_spec.rb | 20 ++++ ...neutron_agents_ml2_networking_baremetal_spec.rb | 20 +++- spec/classes/neutron_agents_ml2_ovs_spec.rb | 32 +++++++ spec/classes/neutron_agents_ml2_sriov_spec.rb | 21 +++++ .../neutron_plugins_ml2_networking_ansible_spec.rb | 18 +++- ...eutron_plugins_ml2_networking_baremetal_spec.rb | 18 +++- spec/classes/neutron_plugins_ml2_nuage_spec.rb | 18 ---- spec/classes/neutron_plugins_ml2_ovn_spec.rb | 11 +++ spec/classes/neutron_plugins_ml2_ovs_driver.rb | 34 +++++++ spec/classes/neutron_plugins_ml2_sriov_driver.rb | 34 +++++++ 33 files changed, 493 insertions(+), 112 deletions(-)

1 0

puppet-cloudkitty 4.4.1 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are delighted to announce the release of: puppet-cloudkitty 4.4.1: Puppet module for OpenStack cloudkitty This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. Changes in puppet-cloudkitty 4.4.0..4.4.1 ----------------------------------------- baad27b Prepare the final stable/train release 8a54e2c Fix rabbitmq dependency 95be4da Switch to Train bb43b9c Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ddc1a3a Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- metadata.json | 10 +++++----- tox.ini | 2 +- 4 files changed, 9 insertions(+), 7 deletions(-)

1 0

puppet-gnocchi 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are gleeful to announce the release of: puppet-gnocchi 15.5.0: Puppet module for OpenStack Gnocchi This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. Changes in puppet-gnocchi 15.4.0..15.5.0 ---------------------------------------- c830d4b Prepare the final stable/train release 7b0e3c7 Expose vhost_custom_fragment b462302 Configure s3_secret_access_key as secret 68c5773 Switch to Train d28f554 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 87b69c1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 ++- manifests/storage/s3.pp | 2 +- manifests/wsgi/apache.pp | 7 +++++++ metadata.json | 6 +++--- spec/classes/gnocchi_storage_s3_spec.rb | 2 +- spec/classes/gnocchi_wsgi_apache_spec.rb | 4 +++- tox.ini | 2 +- 8 files changed, 19 insertions(+), 8 deletions(-)

1 0

puppet-ceilometer 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are satisfied to announce the release of: puppet-ceilometer 15.5.0: Puppet module for OpenStack Ceilometer This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Added cache_backend and manage_backend_package parameters to ceilometer class that is passed down to the oslo::cache resource. * Add TLS options for oslo.cache Bug Fixes ********* * Now the default meters use disk.device metrics instead of disk metrics, so that disk performance data can be captured by default. * The template file which is used to create pipeline.yaml when manage_pipeline is true was updated, and no longer includes usage of transfomer feature because this feature was already removed from ceilometer. Changes in puppet-ceilometer 15.4.0..15.5.0 ------------------------------------------- 2f62d7f Prepare the final stable/train release 701e6ce Add TLS options for oslo.cache 5901c94 Remove transformers from pipeline.yaml d502884 Replace disk.* meters by disk.device.* meters 1f4f0c6 Add more oslo::cache params to init 60ee76f Fix rabbitmq dependency de7b6a1 Switch to Train f803165 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 5ca905c Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/init.pp | 57 ++++++++++++++- manifests/params.pp | 8 +- metadata.json | 10 +-- ...oslo-cache-params-to-init-70207eea609cf621.yaml | 5 ++ .../notes/add_tls_options-c9970ada14354891.yaml | 4 + .../notes/bug-1911852-283ca913d7c7e818.yaml | 5 ++ .../notes/bug-1912345-cd3db2d4c03bec17.yaml | 6 ++ spec/classes/ceilometer_agent_polling_spec.rb | 8 +- spec/classes/ceilometer_init_spec.rb | 23 +++++- templates/pipeline.yaml.erb | 85 ---------------------- tox.ini | 2 +- 13 files changed, 113 insertions(+), 104 deletions(-)

1 0

puppet-ironic 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are stoked to announce the release of: puppet-ironic 15.5.0: Puppet module for OpenStack Ironic This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Supports configuring "max_command_attempts" and "command_timeout" in "ironic::drivers::agent". * For baremetal operations on DHCPv6-stateful networks multiple IPv6 addresses can now be allocated for neutron ports created for provisioning, cleaning, rescue or inspection. The new parameter "ironic::neutron::dhcpv6_stateful_address_count" controls the number of addresses to allocate. * The parameter ironic::pxe::ipxe_name_base has been added, which allows alternative ipxe files to be copied to /tftpboot/ipxe.efi. For example, setting this to 'ipxe-snponly' on CentOS8 would result in the source file being /usr/share/ipxe/ipxe-snponly-x86_64.efi. * New parameter, ironic::keystone::auth::roles is introduced to configure customized role for ironic user in keystone identity. Bug Fixes ********* * For DHCPv6 PXE boot, the Client Architecture option code (61) as defined in https://tools.ietf.org/html/rfc5970#section-3.3 is different than the one for DHCP. This is used to determine if booting over EFI. This change sets the DHCPv6 bootfile-url when booting PXE over EFI. Changes in puppet-ironic 15.4.0..15.5.0 --------------------------------------- d553541 Prepare the final stable/train release 39f97cc Expose vhost_custom_fragment ee3cb9f agent: support command_timeout and max_command_attempts fc46d2a Allow alternative source files for /tftpboot/ipxe.efi 74f3dce Add ironic::neutron::dhcpv6_stateful_address_count e2a354d Fix rabbitmq dependency 2f91ad1 Customize roles assigned to ironic user 8fe6978 Use client architecture and set bootfile-url for DHCPv6 in inspector 884325d Switch to Train 1136c8b Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 807e6be Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/drivers/agent.pp | 12 ++++++ manifests/keystone/auth.pp | 6 +++ manifests/neutron.pp | 45 ++++++++++++++-------- manifests/pxe.pp | 13 +++++-- manifests/wsgi/apache.pp | 7 ++++ metadata.json | 10 ++--- .../notes/agent-retries-5c55bab92d8d8f9e.yaml | 5 +++ ...cpv6-pxe-boot-client-arch-ba8857e4f1386710.yaml | 8 ++++ ...v6-stateful-address-count-af55208639ad7264.yaml | 8 ++++ .../notes/ipxe_name_base-91f5a571210f171c.yaml | 7 ++++ .../keystone-user-roles-9a21ef5f9a74777e.yaml | 5 +++ spec/classes/ironic_drivers_agent_spec.rb | 8 +++- spec/classes/ironic_keystone_auth_spec.rb | 12 ++++++ spec/classes/ironic_neutron_spec.rb | 19 +++++---- spec/classes/ironic_pxe_spec.rb | 4 +- spec/classes/ironic_wsgi_apache_spec.rb | 2 + templates/inspector_dnsmasq_http.erb | 5 +++ tox.ini | 2 +- 20 files changed, 144 insertions(+), 38 deletions(-)

1 0

puppet-barbican 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are tickled pink to announce the release of: puppet-barbican 15.5.0: Puppet module for Barbican This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * Added support for a couple of new options for the PKCS#11 backend: "[p11_crypto]\token_labels" and "[p11_crypto]\os_locking_ok". * Added support for two new options for Barbican's PKCS#11 backend. The new options are "[p11_crypto]token_serial_number" and "[p11_crypto]token_label". * The "barbican::plugins::p11_crypto::p11_crypto_plugin_slot_id" parameter has become an optional parameter instead of a required one. * Support for the "[p11_crypto_plugin] always_set_cka_sensitive" parameter has been added. Changes in puppet-barbican 15.4.0..15.5.0 ----------------------------------------- 6881351 Prepare the final stable/train release 0da8773 Add support for always_set_cka_sensitive parameter f3ecb1f Add new options to PKCS#11 backend e1acd2d Add p11_crypto_plugin token options da146d5 Expose vhost_custom_fragment aa6afa0 Chain barbican_api_paste_ini to config anchor a2921d3 Fix rabbitmq dependency 00a75aa Switch to Train 8d16720 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 33c7c25 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/deps.pp | 5 ++ manifests/plugins/p11_crypto.pp | 81 +++++++++++++++------- manifests/wsgi/apache.pp | 7 ++ metadata.json | 10 +-- .../notes/add-pkcs11-options-dd38e8f087888595.yaml | 5 ++ ...or-token-label-and-serial-5b6ec6acc7f9d791.yaml | 10 +++ ..._always_set_cka_sensitive-1c9a9b9726c3cf93.yaml | 6 ++ spec/classes/barbican_plugins_p11_crypto_spec.rb | 15 ++++ spec/classes/barbican_wsgi_apache_spec.rb | 2 + tox.ini | 2 +- 12 files changed, 114 insertions(+), 33 deletions(-)

1 0

puppet-heat 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are gleeful to announce the release of: puppet-heat 15.5.0: Puppet module for OpenStack Heat This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. Changes in puppet-heat 15.4.0..15.5.0 ------------------------------------- 31e48ae Prepare the final stable/train release fa3eac0 Add TLS options to oslo.cache d02f3a4 Expose vhost_custom_fragment 47ddad6 Fix rabbitmq dependency efec419 Add server_keystone_endpoint_type param to heat::engine 6a18c96 Add vhost_custom_fragment option to wsgi/apache_api 9c70b14 Switch to Train e739b6a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train ce50e59 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/cache.pp | 43 ++++++++++++++++++++++ manifests/engine.pp | 11 +++++- manifests/wsgi/apache_api.pp | 6 +++ manifests/wsgi/apache_api_cfn.pp | 10 ++++- metadata.json | 10 ++--- .../notes/add_tls_options-e126a2206f028366.yaml | 4 ++ .../heat_api_vhost_fragment-6d69d09e3d4b4482.yaml | 5 +++ ...er_keystone_endpoint_type-82c3f461916653d8.yaml | 4 ++ spec/classes/heat_cache_spec.rb | 15 ++++++++ spec/classes/heat_engine_spec.rb | 3 ++ spec/classes/heat_wsgi_apache_api_cfn_spec.rb | 3 +- spec/classes/heat_wsgi_apache_api_spec.rb | 1 + tox.ini | 2 +- 15 files changed, 109 insertions(+), 12 deletions(-)

1 0

puppet-aodh 15.5.0 (train)
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We are pumped to announce the release of: puppet-aodh 15.5.0: Puppet module for OpenStack Aodh This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 15.5.0 ^^^^^^ New Features * The new "aodh::expirer" class has been added to support a cron job to run aodh-expirer command. * Now the "aodh::expirer" class installs aodh-expire package automatically. The status of package can be defined by the "package_ensure" parameter. Changes in puppet-aodh 15.4.0..15.5.0 ------------------------------------- 09972d8 Prepare the final stable/train release ff9d23e Manage aodh-expirer package by aodh::expirer class b905624 Add support for aodh-expirer cron job ff3603e Expose vhost_custom_fragment ee25acb Fix rabbitmq dependency 8beb87a Switch to Train e0eae19 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train c8f5123 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 3 +- manifests/expirer.pp | 75 +++++++++++++++++++ manifests/params.pp | 1 + manifests/wsgi/apache.pp | 7 ++ metadata.json | 10 +-- releasenotes/notes/expirer-a53e68fe61ff3f17.yaml | 5 ++ .../notes/expirer-package-a318c98f11722956.yaml | 5 ++ spec/classes/aodh_expirer_spec.rb | 87 ++++++++++++++++++++++ spec/classes/aodh_wsgi_apache_spec.rb | 4 +- tox.ini | 2 +- 11 files changed, 192 insertions(+), 8 deletions(-)

1 0

validations-common 1.2.0
by no-reply＠openstack.org 16 Jun '21

16 Jun '21

We eagerly announce the release of: validations-common 1.2.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.1.1..1.2.0 ------------------------------------------ f07c8e7 New location of the default log directory. ecc6795 functools provide reduce instead of the ansible 92f51ea Update Validations Framework IRC channels 2e3e7f3 Renamed variable to something more illuminating. 4b87cf2 Bump molecule to 3.3.1 4ee2789 Trigger molecule jobs when modifying the following files 3a5e0de Rename local variable component to validation_component for Upstream CI dbb069f Remove Jinja2 constraint 8cf7b42 Licences are now listed for all requirements. 1d2149e Unblocking the openstack-tox-docs job. 1167633 Adds dockerignore to the repo 2ae6e68 Reqcheck job for upstream validations-common 48c99bd Temporary fetch logs adjustement to detect log folder f1ce73f File validation extended to callback_plugins, main loop optimized 4fc2ef2 Added the 'CALLBACK_NEEDS_WHITELIST' attribute. 1f3c0d2 Remove workaround for tox-ansible and global molecule config 01842ab Fix callback_type for validation_json.py 4a05320 Add testing for custom callback feature 5de26bd Fix targeting hosts to 'localhost' instead of 'all' 771eacc Sync is no longer loopy 6dfba51 Artifacts directory path is now set in a variable bafce83 Simple tests for validation_json callback. 29575dd Test for callback initiation. e15b080 Bump pre-commit repositories 6243262 Add shared configuration for all molecule test cc8369c Fetch all Validations, json and log files with CI role b41537f Superfluous imports are now mocked d64b830 Remove RoleNames ansible-lint custom rule c37b9cf Update validations role to be used by tripleo CI and devstack tests 97d6863 Update of validate-files script 10361e1 Use new CLI for functionnal tests and remove validation.py script c6508ad Disabling strict mode for ConfigParser in read_ini a38d34d ConfigParser exeption message should be returned cb75103 Version bumps to prepare for rhel9 transition 62eb4c0 Fixed exception handling of the print_tuple_table method. 7e40c9f Adding backup-and-restore validation group 2470d54 Except block now covers specific errors c6503e5 Make check_latest_packages_version roles more generic ba6977f add basic standalone job w/ validate-services true 27174b1 Tests for validation.py module and helper classes d67b2a0 Fallback on PWD for the Validation json log instead of getcwd b50b40c Improved test coverage for library/advanced_format.py 50eea5e Improved test coverage for library/warn.py caeb26b Cover report omits test files ab26d82 [Testing Infra] Apply here the improvements done to tripleo-validations 5b21243 Re-add documentation for http_json callback 8225fdd .gitignore now excludes JSON molecule logs 0249d81 packages var renamed to packages_list 3f80ee6 Introduce tox-ansible to validations-common dbacdea Test class for http_json callback. 7732eb0 Make callback write to default if /var/log/validations does not exist 1dd5941 Branching is now considered, line numbers are printed 97b3a86 Puts DISABLE_PIP_VERSION_CHECK on a separate line d9434d8 Docs are now built in pdf b8ef2c0 Python 2.7 environment, mimicking the one used by RDO bc6b582 Fixes issues caused by dict unpacking in (90e6133) 3b06d88 cli help rework and cleanup 6b11677 Validations now gather only the subset of facts they need fd06efd explanation why plugins don't respect normal naming coventions 7cfd0cb Test infrastructure for library scripts along with few samples. a92c1d2 Add validation-common documentation structure bcc35b8 Restrict execution to localhost only 4c610b3 Make the measuring code coverage test working 8d587ce Simple tests for validation_output callback. 8ad5cf3 Simple tests for validation_stdout callback. 273f41f Simple tests for fail_if_no_hosts callback. 88751f3 Infrastructure for callback unit tests 67a918d Add external http logging callback 32e4898 Fix list index out of range 0a5c58a Update TOX_CONSTRAINTS_FILE 4df9a80 Remove useless python import 775f74b Restrict Ansible dependency ba5db95 Remove workaround for broken dogpile.cache and lower-constraints file 95ca84c Exit with zero status when denials are not found in audit log e943a4e Add default value for validation.py inventory a83cc51 make selinux check only for rhel distribution c5faf55 Add dedicated stdout callback for VF library fe2d98e Correct the validate_selinux working_dir 2660470 Fix validation and group arguments to accept comma lists 51f2738 Exclude non failing gathering facts action in simplified result 844b877 Install CI roles into share/ansible/roles f365a07 Remove ensure-docker role execution a89c63b Use the UBI8 image for testing aac3975 Convert docker molecule usage to podman d633131 Updated/corrected service_status 399f6e5 Add missing exec bit 9d84a07 Add molecule tests runs back in the CI 7f3c565 Fix lower-constraints errors for validations-common 208a585 Revert "Make mock import python 2.7 compatible" Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 13 + .ansible-lint_rules/RoleNames.py | 57 -- .config/molecule/Dockerfile | 35 + .config/molecule/config.yml | 70 ++ .coveragerc | 4 +- .dockerignore | 66 ++ .gitignore | 6 +- .pre-commit-config.yaml | 27 +- .reqcheck_override.yaml | 6 + .stestr.conf | 2 +- .zuul.yaml | 239 ++++++- CONTRIBUTING.rst | 19 + README.rst | 106 ++- ansible-test-env.rc | 1 - bindep.txt | 17 +- .../modules/modules-check_package_update.rst | 14 + .../modules/modules-validations_read_ini.rst | 14 + .../roles/role-advanced_format_512e_support.rst | 6 + .../roles/role-check_latest_packages_version.rst | 6 + lower-constraints.txt | 118 ---- molecule-requirements.txt | 22 +- playbooks/molecule/pre.yml | 91 +++ playbooks/molecule/run-local.yml | 14 + playbooks/molecule/run.yml | 39 ++ playbooks/reqcheck.yaml | 45 ++ requirements.txt | 4 +- roles/fetch_validations/defaults/main.yaml | 1 + roles/fetch_validations/tasks/main.yaml | 40 +- roles/validations/defaults/main.yaml | 45 +- roles/validations/tasks/list.yaml | 6 + roles/validations/tasks/main.yaml | 58 +- roles/validations/tasks/run.yaml | 36 + roles/validations/tasks/show.yaml | 6 + roles/validations/tasks/validations.yaml | 41 +- roles/validations/vars/main.yaml | 29 + scripts/run-local-test | 32 +- setup.cfg | 6 +- test-requirements.txt | 2 +- tools/http_server.py | 54 ++ tools/test-setup.sh | 8 - tools/validate-files.py | 115 ++-- tox.ini | 92 ++- validations_common/__init__.py | 4 + validations_common/callback_plugins/__init__.py | 13 + validations_common/callback_plugins/http_json.py | 94 +++ .../callback_plugins/validation_json.py | 30 +- .../callback_plugins/validation_stdout.py | 99 +++ validations_common/library/check_package_update.py | 294 ++++++-- validations_common/library/validations_read_ini.py | 8 +- validations_common/playbooks/512e.yaml | 2 +- validations_common/playbooks/check-cpu.yaml | 5 +- .../playbooks/check-disk-space-pre-upgrade.yaml | 2 +- validations_common/playbooks/check-disk-space.yaml | 2 +- validations_common/playbooks/check-ftype.yaml | 2 +- .../playbooks/check-latest-packages-version.yaml | 4 +- validations_common/playbooks/check-ram.yaml | 4 +- .../playbooks/check-selinux-mode.yaml | 4 +- validations_common/playbooks/dns.yaml | 2 +- validations_common/playbooks/no-op.yaml | 2 +- validations_common/playbooks/ntp.yaml | 2 +- validations_common/playbooks/service-status.yaml | 1 + validations_common/playbooks/validate-selinux.yaml | 3 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 45 +- .../roles/check_cpu/molecule/default/Dockerfile | 37 - .../roles/check_cpu/molecule/default/molecule.yml | 44 +- validations_common/roles/check_cpu/tasks/main.yml | 7 + .../check_disk_space/molecule/default/Dockerfile | 37 - .../check_disk_space/molecule/default/molecule.yml | 44 +- .../defaults/main.yml | 10 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/converge.yml | 59 +- .../molecule/default/molecule.yml | 45 +- .../molecule/default/prepare.yml | 39 +- ...e-1.0.0-1.20210331045404.4c29590.el8.x86_64.rpm | Bin 0 -> 6992 bytes ...e-1.0.0-2.20210401064344.c8ee186.el8.x86_64.rpm | Bin 0 -> 7060 bytes ...e-1.0.1-1.20210401074356.drh345o.el8.x86_64.rpm | Bin 0 -> 7128 bytes .../check_latest_packages_version/tasks/main.yml | 12 +- .../roles/check_ram/molecule/default/Dockerfile | 37 - .../roles/check_ram/molecule/default/molecule.yml | 44 +- validations_common/roles/check_ram/tasks/main.yml | 7 + .../check_selinux_mode/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 44 +- .../roles/check_selinux_mode/tasks/main.yml | 37 +- .../roles/dns/molecule/default/Dockerfile | 37 - .../roles/dns/molecule/default/molecule.yml | 44 +- .../roles/haproxy/molecule/default/Dockerfile | 37 - .../roles/haproxy/molecule/default/molecule.yml | 45 +- .../roles/ntp/molecule/default/Dockerfile | 37 - .../roles/ntp/molecule/default/molecule.yml | 45 +- .../service_status/molecule/default/Dockerfile | 37 - .../service_status/molecule/default/molecule.yml | 51 +- .../service_status/molecule/docker/Dockerfile | 37 - .../molecule/docker/{playbook.yml => converge.yml} | 0 .../service_status/molecule/docker/molecule.yml | 53 +- .../service_status/molecule/podman/Dockerfile | 37 - .../molecule/podman/{playbook.yml => converge.yml} | 0 .../service_status/molecule/podman/molecule.yml | 45 +- .../service_status/molecule/systemd/Dockerfile | 37 - .../service_status/molecule/systemd/converge.yml | 44 ++ .../service_status/molecule/systemd/molecule.yml | 51 +- .../validate_selinux/molecule/default/Dockerfile | 37 - .../validate_selinux/molecule/default/molecule.yml | 45 +- .../roles/validate_selinux/tasks/main.yml | 4 +- .../xfs_check_ftype/molecule/default/Dockerfile | 37 - .../xfs_check_ftype/molecule/default/molecule.yml | 46 +- .../callback_plugins/test_fail_if_no_hosts.py | 94 +++ .../callback_plugins/test_validation_output.py | 743 +++++++++++++++++++++ .../callback_plugins/test_validation_stdout.py | 201 ++++++ validations_common/validation.py | 187 ------ 150 files changed, 4940 insertions(+), 1922 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index c55af13..e631256 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -2,11 +2,10 @@ -ansible -ansi2html -docker -# https://github.com/sqlalchemy/dogpile.cache/issues/178 -dogpile.cache>=0.6.5,<0.9.1 # MIT -pytest -pytest-cov -pytest-html -pytest-xdist -mock -molecule>=3.0,<3.1 +ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansi2html # LGPLv3+ +jinja2>=2.8.0 # BSD-3-Clause +mock # BSD +molecule>=3.3.1,<4 # MIT +molecule-podman # MIT +pytest # MIT +pytest-cov # MIT +pytest-html # Mozilla Public License 2.0 +pytest-xdist # MIT @@ -14 +12,0 @@ selinux # MIT -jinja2>=2.8.0,<3 diff --git a/requirements.txt b/requirements.txt index 56b58c8..6dd5b47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6,2 @@ pbr>=3.1.1 # Apache-2.0 -PyYAML>=3.12 # MIT -PrettyTable>=0.7.2 +PyYAML>=3.13 # MIT +PrettyTable>=0.7.2 # BSD-3-Clause diff --git a/test-requirements.txt b/test-requirements.txt index 0b513ef..b4c85b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +5,0 @@ openstackdocstheme>=1.20.0 # Apache-2.0 -hacking>=3.0,<3.1.0 # Apache-2.0 @@ -15,0 +15 @@ pre-commit # MIT +validations-libs>=1.0.4 # Apache-2.0

1 0

python-glanceclient 3.4.0 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We are excited to announce the release of: python-glanceclient 3.4.0: OpenStack Image API Client Library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. Changes in python-glanceclient 3.3.0..3.4.0 ------------------------------------------- de0e9d9 Uncap PrettyTable 13bae28 Add Python3 xena unit tests 2517e01 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ requirements.txt | 2 +- 4 files changed, 9 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ca8abaf..e2a92e4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.1 # BSD +PrettyTable>=0.7.1 # BSD

1 0

oslo.service 2.6.0 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We are tickled pink to announce the release of: oslo.service 2.6.0: oslo.service library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. Changes in oslo.service 2.5.0..2.6.0 ------------------------------------ 19f369a setup.cfg: Replace dashes with underscores aea7627 Remove references to 'sys.version_info' 9006927 Move flake8 as a pre-commit local target. 08f929b Add Python3 xena unit tests dbcdc22 Update master for stable/wallaby 304ab7f Remove lower-constraints remnants e37c5d2 remove unicode from code 7e72bbf Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 ++++-- .zuul.yaml | 2 +- lower-constraints.txt | 63 -------------------------------------- oslo_service/service.py | 7 ++--- releasenotes/source/conf.py | 16 +++++----- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++ setup.cfg | 8 ++--- tox.ini | 5 --- 11 files changed, 34 insertions(+), 94 deletions(-)

1 0

oslo.cache 2.8.1 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We are delighted to announce the release of: oslo.cache 2.8.1: Cache storage for OpenStack projects. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 2.8.0..2.8.1 ---------------------------------- 40946a9 Don't import module "etcd3gw" if etcd3gw backend is not used. Diffstat (except docs and test files) ------------------------------------- oslo_cache/backends/etcd3gw.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

oslo.policy 3.8.1 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We joyfully announce the release of: oslo.policy 3.8.1: Oslo Policy library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 3.8.0..3.8.1 ----------------------------------- 5713170 setup.cfg: Replace dashes with underscores a339e5d Replace getargspec with getfullargspec 4eb58a8 Ussuri+ is python3 only and update python to python3 Diffstat (except docs and test files) ------------------------------------- oslo_policy/_checks.py | 7 +------ oslo_policy/shell.py | 2 +- setup.cfg | 8 ++++---- 3 files changed, 6 insertions(+), 11 deletions(-)

1 0

oslo.utils 4.9.1 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We contentedly announce the release of: oslo.utils 4.9.1: Oslo Utility library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.9.1 ^^^^^ Deprecation Notes * Oslo.utils's "fnmatch" module is deprecated, please use the stdlib "fnmatch" module which is thread safe for python 3+. * Support for parsing the "human" format has been deprecated and will be removed in a future release. Changes in oslo.utils 4.9.0..4.9.1 ---------------------------------- 25e3d58 Remove references to 'sys.version_info' 4c893c9 Deprecate the fnmatch module. 73eb067 Deprecate the human format on QemuImgInfo ca5be35 Ussuri+ is python3 only and update python to python3 d902a67 Dropping lower constraints testing Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 39 ------------- oslo_utils/fnmatch.py | 66 ++++------------------ oslo_utils/imageutils.py | 10 ++++ .../notes/deprecate-fnmatch-057a092d434a0c53.yaml | 5 ++ ...tils-human-format-support-a89101a36c4dd3cb.yaml | 5 ++ tools/perf_test_mask_password.py | 2 +- 8 files changed, 54 insertions(+), 151 deletions(-)

1 0

oslo.db 9.1.0 (xena)
by no-reply＠openstack.org 15 Jun '21

15 Jun '21

We enthusiastically announce the release of: oslo.db 9.1.0: Oslo Database library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. 9.1.0 ^^^^^ Bug Fixes * In mysql 8.0.19, duplicate key error information is extended to include the table name of the key. Previously, duplicate key error information included only the key value and key name. This extends capabilities to handle changes in duplicate key error information with newer mysql version since 8.0.19. Changes in oslo.db 9.0.0..9.1.0 ------------------------------- be2cc6a Followup of "Added handler for mysql 8.0.19 duplicate key error update" 2c2e6d4 Added handler for mysql 8.0.19 duplicate key error update e26d400 update the pre-commit-hooks version 61a1b87 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- oslo_db/sqlalchemy/exc_filters.py | 9 ++++++++ ...-error-information-update-548888bc44b8dbd7.yaml | 8 +++++++ setup.cfg | 8 +++---- 5 files changed, 48 insertions(+), 5 deletions(-)

1 0

tooz 2.7.2 (victoria)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We enthusiastically announce the release of: tooz 2.7.2: Coordination library for distributed systems. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 2.7.1..2.7.2 ---------------------------- 1ddddbb Retry on redis connection errors c8d77ee Blacklist etcd3gw 0.2.6 affcbda Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 2 +- setup.cfg | 2 +- tooz/drivers/redis.py | 132 ++++++++++++++++++++++++++++++-------------------- 4 files changed, 82 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a448b67..43ec87f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ fasteners>=0.7 # Apache-2.0 -tenacity>=3.2.1 # Apache-2.0 +tenacity>=3.2.1,<7.0.0 # Apache-2.0

1 0

sushy 3.2.2 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are pumped to announce the release of: sushy 3.2.2: Sushy is a small Python library to communicate with Redfish based systems This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.2.1..3.2.2 ----------------------------- 2556747 Don't log ERROR if GET of /redfish/v1/SessionService fails c304442 Remove auth token header completely when error occurs Diffstat (except docs and test files) ------------------------------------- sushy/auth.py | 10 ++++++++ sushy/connector.py | 29 ++++++++++++++++++---- sushy/resources/sessionservice/sessionservice.py | 5 ++-- .../sessionservice/test_sessionservice.py | 4 +-- 6 files changed, 74 insertions(+), 11 deletions(-)

1 0

sushy 3.9.1 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We eagerly announce the release of: sushy 3.9.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the xena release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.9.0..3.9.1 ----------------------------- 5b38ec5 Fix incorrect formatting and a Python 3.10 failure 9490de8 Use TOX_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- sushy/resources/registry/message_registry.py | 4 ++-- tox.ini | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-)

1 0

sushy 3.7.2 (wallaby)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We joyfully announce the release of: sushy 3.7.2: Sushy is a small Python library to communicate with Redfish based systems This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. Changes in sushy 3.7.1..3.7.2 ----------------------------- 1b299c6 Fix incorrect formatting and a Python 3.10 failure Diffstat (except docs and test files) ------------------------------------- sushy/resources/registry/message_registry.py | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-)

1 0

sushy 3.4.4 (victoria)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We high-spiritedly announce the release of: sushy 3.4.4: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.4.4 ^^^^^ Bug Fixes * Adds a fallback for inserting and ejecting virtual media using the PATCH HTTP request instead of the explicit action URIs. The fallback is required for Lenovo ThinkSystem machines (i.e. SD530, ..) that only implement the PATCH method. Changes in sushy 3.4.3..3.4.4 ----------------------------- 3a60bf8 Don't log ERROR if GET of /redfish/v1/SessionService fails d7da81d Implement fallback method for virtual media Diffstat (except docs and test files) ------------------------------------- ...ix-virtual-media-fallback-15a559414a65c014.yaml | 7 ++ sushy/connector.py | 9 ++- sushy/resources/base.py | 30 ++++++++ sushy/resources/manager/virtual_media.py | 63 ++++++++++++----- .../unit/resources/manager/test_virtual_media.py | 81 ++++++++++++++++++++++ 6 files changed, 190 insertions(+), 18 deletions(-)

1 0

tripleo-image-elements 14.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are jazzed to announce the release of: tripleo-image-elements 14.0.0: Disk image builder elements for deploying OpenStack. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 13.1.0..14.0.0 ------------------------------------------------ f90a830f Clean up ifcfg-eth0 a038c080 Use python3 for map-services-tripleo Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 6 +++--- elements/os-svc-install/bin/map-services-tripleo | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-)

1 0

python-tripleoclient 17.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are chuffed to announce the release of: python-tripleoclient 17.0.0: TripleO client This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 17.0.0 ^^^^^^ New Features * New configuration options for enable_neutron and enable_heat are added to the standalone and undercloud installers. These options default to true, and can be used to selectively disable these services. * A new cli argument, --heat-type is added to openstack overcloud deploy. Available options are "installed", "pod", "container", and "native". The default is "installed". The argument specifies the type of Heat process to use for the deployment. * Added options for "overcloud delete" command to unprovision nodes and network ports provisioned with "overcloud deploy". * The "openstack tripleo deploy" and "openstack undercloud install" commands now save their generated artifacts from the deployment under a single consistent directory, which by default is located at ~/tripleo-deploy/<stack>. For the undercloud, this location is ~/tripleo-deploy/undercloud. The directory can be overridden with the --output-dir option. Changes in python-tripleoclient 16.0.0..17.0.0 ---------------------------------------------- 78190843 Move get_ctlplane_attrs to utils 0f0352a5 Remove iscsi from IronicEnabledDeployInterfaces 05d3a9c9 Add dosfstools to bindep 05500120 Use explicit order for ironic enabled interfaces a4070345 Minor tests covering unreached exec branches. 2b2e52c8 overcloud deploy - provision networks 6ce51389 Use enable-legacy-telemetry.yaml when enabling telemetry 059dff4d Remove unused method _format_endpoint_name 6b5ebca3 Use podman interactive mode when restoring db 899f8628 Fix backup/restore file name for ephemeral heat 3c66b09c Changed minversion in tox to 3.18.0 1d2547cc Baremetal deploy - user playbook interface 2b8d55e3 Remove references to tripleo-validations legacy directory 835c7fc2 Fix check_service_vips_migrated_to_service() 4243df7d Don't download configs twice for --setup-only 8800f06c Don't allow --config-download-only with --baremetal-deployment f737dfcc BnR added error msg in case there is no inventory 629945fd Don't write <stack_name>-passwords.conf 76c95906 Ephemeral Heat: Add a --refresh option to external update run 04323f12 Ephemeral Heat unit tests 2bc7e8d1 Coverage report now lists lines without coverage ab90fcdb gitignore includes cover, mocks and vscode related dirs 4ab09cb8 Remove usage of tripleo_common.actions.ansible 1f316538 Handle KeyboardInterrupt with overcloud deploy 10a08737 Use Validations libs Client for main validation entry point 352211d8 Add node, port unprovision to overcloud delete e10261c9 Don't run containers in interactive mode 7058c3ee Fix undercloud validate password file a1aadd37 Too broad exceptions replaced with altenatives. a35f7983 Wait for Heat message queues 2fabd773 Fix error message for vip provision c5795adc Fix validations listing when filtering by group(s) 2f5ad594 Auto OVN bridge mac mappings for standalone 9ecb8758 setup.cfg: Replace dashes with underscores 0b9e9a43 Allow user environments override generated ones a7f17786 BnR Typo missing some spaces between words on the command help cbf1231a Increased strictness of the doc build 3f12c218 Extra space was causing indentation errors e36e9562 Use environment files when building image params c78ab588 Check if both swift and rgw are enabled during Upgrade Prepare 0a27ad6d Simplify undercloud upgrade 865167d2 Bump reqirements to tripleo-common>=16.0.0 1541eaaf Quote -e arg in ansible-playbook-command.sh 6568a795 Use consistent working dir for ansible-runner 252c15bf Handle nodes with no ctlplane IP's during deny list handling 61b6e873 Handle exceptions in finally clause 7483b623 Automatically run overcloud export when using ephemeral heat f4920c49 Add enable_neutron and enable_heat fc8feccc Add heat launcher db backup/restore e8f53ae7 Support using ephemeral Heat b02acaa6 Remove leftover for undercloud keepalived service 930abb12 Fix network environment validation 26f8de16 Make Python Interpreter option for Ansible Validation Run e52ccb1f Update master for stable/wallaby 7570bdf5 overcloud node extract add network info 6795028e Removing todo from undercloud_preflight since 753845 is merged a05d2f59 Remove deploy_args for podman.yaml as its default ecafbae4 Use a consistent working directory for tripleo deploy 1e690136 Use ceph_mon_network to find Ceph monitor IPs for export 715e82e0 Base for improvement of validator test coverage 1d72cfb0 Pass ansible ssh_user variable to the run action 32bf3bed Don't allow Redis/OvnDBs VIP in resource_registry d24b41c6 Add commands to extract|provision net vips Diffstat (except docs and test files) ------------------------------------- .coveragerc | 1 + .gitignore | 6 + bindep.txt | 1 + .../add-enable_neutron_heat-8d799d8ffc76f6da.yaml | 5 + .../add-heat-type-cli-arg-2fa4f47a835aafea.yaml | 7 + ...rovision-overcloud-delete-c7dd063912d4ebca.yaml | 5 + ...ripleo-deploy-working-dir-e0cdf80a82ac256d.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 4 +- setup.cfg | 10 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tox.ini | 6 +- tripleoclient/config/base.py | 6 +- tripleoclient/config/minion.py | 5 +- tripleoclient/config/standalone.py | 11 +- tripleoclient/config/undercloud.py | 2 + tripleoclient/constants.py | 17 +- tripleoclient/exceptions.py | 12 + tripleoclient/export.py | 28 +- tripleoclient/heat_launcher.py | 286 +++++++--- .../v1/overcloud_deploy/test_overcloud_deploy.py | 366 ++++++------- .../test_overcloud_external_update.py | 36 ++ .../test_overcloud_netenv_validate.py | 8 +- .../v1/overcloud_update/test_overcloud_update.py | 56 +- .../v2/overcloud_delete/test_overcloud_delete.py | 40 +- tripleoclient/utils.py | 208 ++++--- tripleoclient/v1/minion_config.py | 23 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 552 ++++++++++++------- tripleoclient/v1/overcloud_export.py | 21 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/overcloud_netenv_validate.py | 14 +- tripleoclient/v1/overcloud_node.py | 154 +++++- tripleoclient/v1/tripleo_config.py | 2 +- tripleoclient/v1/tripleo_deploy.py | 67 ++- tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 498 ++--------------- tripleoclient/v1/undercloud.py | 54 +- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/v1/undercloud_config.py | 121 ++--- tripleoclient/v1/undercloud_preflight.py | 20 +- tripleoclient/v2/overcloud_delete.py | 28 + tripleoclient/v2/overcloud_network.py | 119 ++++ tripleoclient/v2/overcloud_node.py | 88 ++- tripleoclient/workflows/deployment.py | 148 ++--- tripleoclient/workflows/scale.py | 2 +- 65 files changed, 3422 insertions(+), 1942 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ca97e077..0176d8ce 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ osc-lib>=2.3.0 # Apache-2.0 -tripleo-common>=12.7.0 # Apache-2.0 +tripleo-common>=16.0.0 # Apache-2.0 @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.0.4 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file

1 0

tripleo-heat-templates 15.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We contentedly announce the release of: tripleo-heat-templates 15.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * New config option "OVNEncapType" was added to the ovn-controller- container-puppet.yaml module. It can be used to define what encapsulation type will be used in the deployment. * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. * The "glance_api_cron" container has been introduced, which executes db purge job for Glance service. Use GlanceCronDbPurge* parameters to override cron parameters. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New parameter *RbdDiskCachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * A new service, OS::TripleO::Services::UndercloudUpgradeEphemeralHeat is added to the Undercloud role. The service is mapped to OS::Heat::None by default, but when environments/lifecycle /undercloud-upgrade- prepare.yaml is included, the service will be enabled and will migrate any already deployed stacks in the undercloud's Heat instance to be able to be used with the ephemeral Heat deployment option from tripleoclient. * This changes the ServiceNetMap and VipSubnetMap interfaces to allow for server side env merging. This would, for example, allow for adding network for a new services without having to specify complete ServiceNetMap in parameter_defaults section of an environment file. Upgrade Notes ************* * With the change to ServiceNetMap/VipSubnetMap interface, existing environments where they are overridden have to specify 'merge' strategy for the parameters in a new 'parameter_merge_strategies' section. Other Notes *********** * In Wallaby, dcn-hci.yaml has been renamed to dcn-storage.yaml though a copy of dcn-hci.yaml was kept in place for backwards compatability until Xena. With the Xena release dcn-hci.yaml has been removed. Changes in tripleo-heat-templates 14.1.0..15.0.0 ------------------------------------------------ 1662600e6 HA minor update: fix bad pcs invocation 6e67e7377 Fix typo that breaks Octavia db sync step 36e680fee Remove iscsi deploy interface from minion node 289cfd7a5 Fix typo in ceilometer-write-qdr environment file 0f5246410 Add alertmanager port parameter 00f930049 Set ganesha idmap.conf file path and overrides 02e50c163 Nova: Remove unused EnableSQLAlchemyCollectd from base template b7fe78758 Update rhsm repo examples for RHEL8 deployments 7150a747b Pass custom CephConfigPath parameter to ceph-nfs role b252d4573 Add OS::TripleO::UndercloudUpgradeEphemeralHeat 4ea2a6eb7 Allow customizing podman's [engine]/events_logger ed8bdde21 Set default for network.ip_subnet 45fca9e02 Ignore puppet_config is an empty dict 2b9b8eed9 Switch barbican actions to use kolla_config f1cd8006f Fix cinder's cephx keyring file permissions dbb4f619a Disable tunnelled migration 8e052715c Use kolla_config for other actions 3ecad17ed Map RedisVipPort and OVNDBsVipPort to OS::Heat::None 5ca2702b1 Temporarily remove the unbound resolver from scenario 003 49c49d3c0 Include the standalone ganesha tasks when ceph is external 9a42686dc set ganesha idmap.conf file path and overrides f38d6cef0 Fix VLAN placement d297c822c Add environment for external network VIP 8a3cf6aa8 Add param for RBD disk cache modes e40a346d7 Use collection FQCN for podman modules 83668920e Fix octavia_nodes rendering in octavia-deployment-config.j2.yaml 859f31303 Breakdown the deploy-steps playbook 181505145 Fix network_cidrs when ManageNetworks: false c761ebeca Simplify rest of the service templates 4c9b1ba81 Simplify swift service templates b356d3d1e Simplify rabbitmq service templates 464bc1e7f Simplify sshd, timemaster and timesync service templates 85bc69916 Simplify qdrouterd and snmp service templates 7a9cc5c83 Simplify placement and podman service templates 9642f034b Skip cephadm playbook when there is no mon or nfs group 5541696d4 Simplify jinja for primary_role_name 65ddeed5f libvirt: fix formatting of the log_outputs parameter 127a8945f Fix artifact module usage 2aa1f6364 Cleanup optional flag for conf.modules.d 66c964bf9 Pass scripts list for download for sensubility ad95ac04e Make clustercheck service accessible over socat aeaaa90b3 Remove deprecated dcn-hci.yaml 866645db1 Add OVNCMSOptions to Controller and Networker roles b253d564f Use server side env merging for ServiceNetMap/VipSubnetMap 807d5a6e5 Support additional IP so bind and unbound can collocate f606968dd Simplify pacemaker service templates e172a7ff4 Simplify openvswitch and ovn service templtes 094918d85 Simplify octavia service templates 0a4904aff Simplify nova service templates 9fb6b36f1 Move ceph_admin_extra_vars logic to tripleo-ansible 36648cf7f Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 3a472cbbe Disable tunneled mode when use_tls_for_live_migration 96a2c3742 Remove unused cvol_active_active_tls_enabled condition 659cc5527 Add neutron port tag hint for role name 5369ff9bd Expose the monitoring_stack network to cephadm 86daa77b3 Added the posibility of skipping the NFS ping test on the rear installation f14bfb14c Introduce CephHciOsdCount and CephHciOsdType c65058889 Do not log amphora ssh keys e270d5329 Add openstack-tox-tht to the gate 89f596012 Fix container security_opts type 7fd0dd5d4 Don't add external tasks for roles with zero count 4af0c6cca Don't assume every role has default_route_networks 742dc894f Stop handler flush 4872e36c0 Add option for enabling rsyslog reopenOnTruncate 6e236a4e1 Fix RoleParameters in tuned-baremetal-ansible.yaml da7bcec27 Add base Neutron service plugins to BGPVPN 92f722a05 Do not ask for cephdashboard certificates when it is disabled a120ada72 Refactor OVN bridge MAC addresses a8f527d8d Fix hiera variable used to set cinder's backend_host dad101720 Simplify neutron service templates 1b1960e4c Add release note for the OVNEncapType 49415d04b Introduce nova virtlogd wrapper c5c558229 Simplify metrics and messaging service templates 37bb2ecce Add glance db purge job dc083686d Remove heat::heat_keystone_clients_url definition e5a5fc97e Enable configuration of omamqp1 plugin 1f0f6f332 Remove Ceph cluster replica and PG num from low-memory-usage.yaml 1925e85fd CI - Add vip_data file Diffstat (except docs and test files) ------------------------------------- ci/environments/disable-unbound.yaml | 4 +- ci/environments/multinode-core.yaml | 4 +- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 1 - ci/vip_data.yaml | 6 + common/deploy-steps-playbooks-common.yaml | 7 +- common/deploy-steps.j2 | 139 +++++-- common/services/role.role.j2.yaml | 4 +- .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-neutron-port.yaml | 5 + deployment/README.rst | 6 +- deployment/aide/aide-baremetal-ansible.yaml | 4 +- deployment/aodh/aodh-api-container-puppet.yaml | 26 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 4 +- .../aodh/aodh-listener-container-puppet.yaml | 4 +- .../aodh/aodh-notifier-container-puppet.yaml | 4 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 4 +- deployment/auditd/auditd-baremetal-puppet.yaml | 4 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 11 +- .../barbican/barbican-api-container-puppet.yaml | 207 +++++---- .../barbican/barbican-backend-dogtag-puppet.yaml | 4 +- .../barbican/barbican-backend-kmip-puppet.yaml | 4 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 4 +- .../barbican-backend-simple-crypto-puppet.yaml | 4 +- deployment/barbican/barbican-client-puppet.yaml | 4 +- .../ceilometer-agent-central-container-puppet.yaml | 18 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-base.yaml | 9 +- deployment/ceph-ansible/ceph-client.yaml | 9 +- deployment/ceph-ansible/ceph-external.yaml | 9 +- deployment/ceph-ansible/ceph-grafana.yaml | 9 +- deployment/ceph-ansible/ceph-mds.yaml | 9 +- deployment/ceph-ansible/ceph-mgr.yaml | 9 +- deployment/ceph-ansible/ceph-mon.yaml | 9 +- deployment/ceph-ansible/ceph-nfs.yaml | 18 +- deployment/ceph-ansible/ceph-osd.yaml | 9 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 9 +- deployment/ceph-ansible/ceph-rgw.yaml | 9 +- deployment/cephadm/ceph-base.yaml | 33 +- deployment/cephadm/ceph-client.yaml | 21 +- deployment/cephadm/ceph-external.yaml | 9 +- deployment/cephadm/ceph-grafana.yaml | 15 +- deployment/cephadm/ceph-mds.yaml | 9 +- deployment/cephadm/ceph-mgr.yaml | 76 ++-- deployment/cephadm/ceph-mon.yaml | 9 +- deployment/cephadm/ceph-nfs.yaml | 24 +- deployment/cephadm/ceph-osd.yaml | 41 +- deployment/cephadm/ceph-rbdmirror.yaml | 9 +- deployment/cephadm/ceph-rgw.yaml | 9 +- deployment/certs/ca-certs-baremetal-puppet.yaml | 4 +- deployment/cinder/cinder-api-container-puppet.yaml | 39 +- .../cinder-backend-dellemc-powerflex-puppet.yaml | 4 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 4 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 4 +- .../cinder-backend-dellemc-unity-puppet.yaml | 4 +- .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 4 +- .../cinder-backend-dellemc-xtremio-puppet.yaml | 4 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 4 +- .../cinder/cinder-backend-netapp-puppet.yaml | 4 +- .../cinder/cinder-backend-nvmeof-puppet.yaml | 4 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 4 +- .../cinder/cinder-common-container-puppet.yaml | 54 ++- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 4 +- .../cinder/cinder-volume-container-puppet.yaml | 11 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- .../openstack-clients-baremetal-ansible.yaml | 4 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 4 +- deployment/containers-common.yaml | 21 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 4 +- deployment/database/mysql-container-puppet.yaml | 6 +- deployment/database/mysql-pacemaker-puppet.yaml | 4 +- deployment/database/redis-base-puppet.yaml | 4 +- deployment/database/redis-container-puppet.yaml | 4 +- deployment/database/redis-pacemaker-puppet.yaml | 4 +- .../liquidio-compute-config-container-puppet.yaml | 4 +- .../cinder-backend-dellemc-vxflexos-puppet.yaml | 4 +- .../cinder/cinder-backend-scaleio-puppet.yaml | 4 +- .../mistral/mistral-api-container-puppet.yaml | 34 +- deployment/deprecated/mistral/mistral-base.yaml | 4 +- .../mistral/mistral-engine-container-puppet.yaml | 4 +- .../mistral-event-engine-container-puppet.yaml | 4 +- .../mistral/mistral-executor-container-puppet.yaml | 4 +- deployment/deprecated/multipathd-container.yaml | 4 +- .../novajoin/ipaclient-baremetal-ansible.yaml | 4 +- .../novajoin/novajoin-container-puppet.yaml | 4 +- .../deprecated/zaqar/zaqar-container-puppet.yaml | 18 +- deployment/etcd/etcd-container-puppet.yaml | 7 +- .../designate/designate-api-container-puppet.yaml | 4 +- .../experimental/designate/designate-base.yaml | 4 +- .../designate/designate-bind-container.yaml | 4 +- .../designate-central-container-puppet.yaml | 30 +- .../designate/designate-mdns-container-puppet.yaml | 4 +- .../designate-producer-container-puppet.yaml | 4 +- .../designate/designate-sink-container-puppet.yaml | 4 +- .../designate-worker-container-puppet.yaml | 4 +- deployment/frr/frr-container-ansible.yaml | 4 +- deployment/glance/glance-api-container-puppet.yaml | 97 ++++- .../glance/glance-api-edge-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 7 +- deployment/gnocchi/gnocchi-base.yaml | 4 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 4 +- deployment/haproxy/haproxy-container-puppet.yaml | 7 +- .../haproxy/haproxy-edge-container-puppet.yaml | 4 +- .../haproxy-internal-tls-certmonger.j2.yaml | 4 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 +- .../haproxy/haproxy-public-tls-certmonger.yaml | 4 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 4 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 7 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 4 +- deployment/heat/heat-api-container-puppet.yaml | 7 +- deployment/heat/heat-base-puppet.yaml | 5 +- deployment/heat/heat-engine-container-puppet.yaml | 23 +- deployment/horizon/horizon-container-puppet.yaml | 7 +- .../image-serve/image-serve-baremetal-ansible.yaml | 4 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 4 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 4 +- deployment/ironic/ironic-api-container-puppet.yaml | 22 +- deployment/ironic/ironic-base-puppet.yaml | 4 +- .../ironic/ironic-conductor-container-puppet.yaml | 4 +- .../ironic/ironic-inspector-container-puppet.yaml | 18 +- .../ironic-neutron-agent-container-puppet.yaml | 4 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 10 +- deployment/iscsid/iscsid-container-puppet.yaml | 4 +- deployment/kernel/kernel-baremetal-ansible.yaml | 4 +- .../kernel-boot-params-baremetal-ansible.yaml | 4 +- deployment/keystone/keystone-container-puppet.yaml | 9 +- deployment/logging/files/nova-libvirt.yaml | 34 +- deployment/logging/rsyslog-baremetal-ansible.yaml | 9 +- deployment/logging/rsyslog-container-puppet.yaml | 53 ++- .../logging/rsyslog-sidecar-container-puppet.yaml | 4 +- deployment/logging/stdout/nova-libvirt.yaml | 34 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/logrotate/tmpwatch-install.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 23 +- deployment/manila/manila-backend-cephfs.yaml | 4 +- deployment/manila/manila-backend-isilon.yaml | 4 +- deployment/manila/manila-backend-netapp.yaml | 4 +- deployment/manila/manila-backend-unity.yaml | 4 +- deployment/manila/manila-backend-vmax.yaml | 4 +- deployment/manila/manila-backend-vnx.yaml | 4 +- deployment/manila/manila-base.yaml | 4 +- .../manila/manila-scheduler-container-puppet.yaml | 4 +- deployment/manila/manila-share-common.yaml | 4 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- .../masquerade-networks-baremetal-puppet.yaml | 4 +- .../memcached/memcached-container-puppet.yaml | 4 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 +- deployment/metrics/collectd-container-ansible.yaml | 11 +- deployment/metrics/collectd-container-puppet.yaml | 103 ++--- deployment/metrics/qdr-container-ansible.yaml | 29 +- deployment/metrics/qdr-container-puppet.yaml | 45 +- .../multipathd/multipathd-container-ansible.yaml | 7 +- .../neutron-agents-ib-config-container-puppet.yaml | 12 +- .../neutron/neutron-api-container-puppet.yaml | 147 +++---- deployment/neutron/neutron-base.yaml | 17 +- .../neutron-bgpvpn-api-container-puppet.yaml | 5 +- .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 4 +- .../neutron-bigswitch-agent-baremetal-puppet.yaml | 5 +- .../neutron/neutron-compute-plugin-nuage.yaml | 4 +- .../neutron/neutron-controller-plugin-nuage.yaml | 10 +- .../neutron/neutron-dhcp-container-puppet.yaml | 67 ++- .../neutron-l2gw-agent-baremetal-puppet.yaml | 10 +- .../neutron/neutron-l2gw-api-container-puppet.yaml | 9 +- .../neutron/neutron-l3-container-puppet.yaml | 60 +-- ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 14 +- .../neutron/neutron-metadata-container-puppet.yaml | 35 +- .../neutron-mlnx-agent-container-puppet.yaml | 18 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 5 +- .../neutron-ovs-agent-container-puppet.yaml | 63 ++- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 8 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 5 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 5 +- .../neutron-plugin-ml2-container-puppet.yaml | 5 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 15 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 5 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 28 +- deployment/neutron/neutron-plugin-ml2.yaml | 14 +- .../neutron-plugin-nsx-container-puppet.yaml | 4 +- deployment/neutron/neutron-plugin-nuage.yaml | 5 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 17 +- .../neutron-vpp-agent-baremetal-puppet.yaml | 8 +- deployment/nova/nova-api-container-puppet.yaml | 148 +++---- deployment/nova/nova-apidb-client-puppet.yaml | 25 +- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 34 +- .../nova/nova-compute-common-container-puppet.yaml | 5 +- deployment/nova/nova-compute-container-puppet.yaml | 250 +++++------ .../nova/nova-conductor-container-puppet.yaml | 55 ++- deployment/nova/nova-db-client-puppet.yaml | 27 +- deployment/nova/nova-ironic-container-puppet.yaml | 50 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 462 +++++++++++---------- .../nova/nova-libvirt-guests-container-puppet.yaml | 4 +- deployment/nova/nova-manager-container-puppet.yaml | 8 +- .../nova/nova-metadata-container-puppet.yaml | 52 +-- .../nova-migration-target-container-puppet.yaml | 10 +- .../nova/nova-scheduler-container-puppet.yaml | 23 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 77 ++-- .../octavia/octavia-api-container-puppet.yaml | 56 +-- deployment/octavia/octavia-base.yaml | 171 ++++---- .../octavia/octavia-deployment-config.j2.yaml | 101 +++-- .../octavia-health-manager-container-puppet.yaml | 15 +- .../octavia-housekeeping-container-puppet.yaml | 17 +- .../octavia/octavia-worker-container-puppet.yaml | 8 +- .../octavia/providers/ovn-provider-config.yaml | 50 +-- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 10 +- .../ovn/ovn-controller-container-puppet.yaml | 109 +++-- deployment/ovn/ovn-dbs-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 57 ++- deployment/ovn/ovn-metadata-container-puppet.yaml | 68 ++- .../pacemaker/clustercheck-container-puppet.yaml | 27 +- .../compute-instanceha-baremetal-puppet.yaml | 4 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 5 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 78 ++-- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 80 ++-- deployment/podman/podman-baremetal-ansible.yaml | 27 +- deployment/qdr/qdrouterd-container-puppet.yaml | 8 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 67 ++- ...rabbitmq-messaging-notify-container-puppet.yaml | 56 +-- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-notify-shared-puppet.yaml | 5 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 50 +-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 18 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 4 +- .../securetty/securetty-baremetal-ansible.yaml | 4 +- deployment/snmp/snmp-baremetal-puppet.yaml | 17 +- deployment/sshd/sshd-baremetal-ansible.yaml | 17 +- deployment/sshd/sshd-baremetal-puppet.yaml | 9 +- .../external-swift-proxy-baremetal-puppet.yaml | 4 +- deployment/swift/swift-base.yaml | 4 +- .../swift/swift-dispersion-baremetal-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 87 ++-- .../swift/swift-ringbuilder-container-puppet.yaml | 17 +- .../swift/swift-storage-container-puppet.yaml | 72 ++-- deployment/time/ptp-baremetal-ansible.yaml | 4 +- deployment/time/timezone-baremetal-ansible.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 23 +- deployment/timesync/chrony-baremetal-ansible.yaml | 25 +- deployment/tls/undercloud-remove-novajoin.yaml | 4 +- deployment/tls/undercloud-tls.yaml | 5 +- .../tripleo-firewall-baremetal-ansible.yaml | 23 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/tuned/tuned-baremetal-ansible.yaml | 23 +- deployment/unbound/unbound-container-ansible.yaml | 55 ++- deployment/undercloud/minion-rabbitmq-puppet.yaml | 4 +- .../undercloud-upgrade-ephemeral-heat.yaml | 54 +++ deployment/undercloud/undercloud-upgrade.yaml | 9 +- .../tripleo-validations-baremetal-ansible.yaml | 4 +- deployment/vpp/vpp-baremetal-puppet.yaml | 4 +- environments/dcn-hci.yaml | 53 --- environments/external-network-vip.yaml | 5 + .../lifecycle/undercloud-upgrade-prepare.yaml | 4 +- environments/low-memory-usage.yaml | 4 - environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/neutron-bgpvpn-bagpipe.yaml | 2 +- environments/neutron-bgpvpn.yaml | 2 +- environments/rhsm.yaml | 35 +- environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/undercloud.yaml | 4 - environments/undercloud/undercloud-minion.yaml | 4 +- .../default-network-isolation-ipv6.yaml | 14 +- .../default-network-isolation.yaml | 14 +- network-data-samples/ganesha-ipv6.yaml | 2 +- network-data-samples/ganesha.yaml | 3 +- .../legacy-routed-networks-ipv6.yaml | 20 +- network-data-samples/legacy-routed-networks.yaml | 20 +- network-data-samples/management-ipv6.yaml | 4 +- network-data-samples/management.yaml | 2 +- network-data-samples/routed-networks-ipv6.yaml | 18 +- network-data-samples/routed-networks.yaml | 14 +- network/network.j2 | 47 +-- network/ports/deployed_port.j2 | 5 + network/ports/noop.yaml | 5 + network/ports/port.j2 | 9 + network/ports/port_from_pool.j2 | 10 +- network/service_net_map.j2.yaml | 154 +------ overcloud-resource-registry-puppet.j2.yaml | 110 ++++- overcloud.j2.yaml | 25 +- puppet/role.role.j2.yaml | 32 +- ...OVNEncapType-option-added-85296d2fe1d94f35.yaml | 6 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 + .../notes/glance-db-purge-bb185353a45880c7.yaml | 6 + .../nova_virtlogd_wrapper-120fcfcfa0787b2b.yaml | 17 + .../rbd-disk-cache-modes-284a73271741ea62.yaml | 5 + ...remove-deprecated-dcn-hci-1aca499135c31e17.yaml | 5 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 8 + ...e-merging-service-net-map-0c65b5e421ce05bd.yaml | 12 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles/Undercloud.yaml | 1 + roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/standalone.yaml | 7 - sample-env-generator/undercloud-minion.yaml | 6 +- scripts/undercloud-upgrade-ephemeral-heat.py | 256 ++++++++++++ tools/yaml-validate.py | 3 +- zuul.d/layout.yaml | 1 + 325 files changed, 3359 insertions(+), 3134 deletions(-)

1 0

tripleo-validations 15.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are amped to announce the release of: tripleo-validations 15.0.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features * RHEL-8.3 kernel disabled the Intel “TSX” (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process. This also impacts upstream CentOS systems. Changes in tripleo-validations 14.1.0..15.0.0 --------------------------------------------- 9f7dbbf Remove the post-update groups. ee6e666 Use OS_CLOUD environment variable ede25c3 Compute TSX validation 443f8d3 Add Validation Development Workflow Documentation 83ba5e3 Introduce new Ansible validation_init role. 089eaf9 Update Validations Framework IRC channels 6956d74 Use and ownership info for the ceph_pools_pg_protection module 81bd49d Use and ownership info for the check_flavors module 201f545 Use and ownership info for the ovs_dpdk_pmd_cpus_check module. 11cdcb1 Use and ownership info for the icmp_ping module. ba98421 Use and ownership info for the node_disk module. 0dad256 Use and ownership info for the pacemaker module e7c06ec Use and ownership info for the ip_range module. 55066de Use and ownership info for the verify_profiles module 746cd0d Use and ownership info for the switch_vlans module 897ab27 Use and ownership info for the network_environment module 6313bd0 requirements-check enabled d2ff511 Removing python-tripleoclient aac0c5f Use validation_component for Standalone CI jobs ad226f9 Basic tests for check_flavors module 5db00af Basic tests for pacemaker module d61e645 Bump molecule to 3.3.1 e6bece7 Add py39 jobs f4399e7 [overcloud-service-status] Removing pre-upgrade ea4b8c3 Trigger molecule jobs when modifying molecule-requirements.txt file c551910 Remove workaround for tox-ansible and global molecule config ba689ae Increasing number of files triggering build of docs 66193a6 Add shared configuration for all molecule test a129551 Check for dangling images ec3b1ab Tests of lookup plugin initiation for glance_images.py 30fc688 Test classes for lookup plugins a0e3182 Update master for stable/wallaby cdad3a0 Bump pre-commit repositories 7577bd9 Refactoring of ovs_dpdk_pmd_cpus_check tests. 06ce5bf Quick documentation content reorganization 5b2aa89 Remove tripleo-validations CI roles 2a875fd Add validation to check DockerInsecureRegistryAddress matches the UC hostname eeb6d71 Mocking superfluous imports fdd309f New utils.py tests be9d283 stestr dir is now intentionally untracked Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 35 ++ .config/molecule/config.yml | 70 ++++ .pre-commit-config.yaml | 13 +- CONTRIBUTING.rst | 61 +++- README.rst | 10 +- _skeleton_role_/molecule/default/Dockerfile | 37 --- _skeleton_role_/molecule/default/molecule.yml | 49 --- ci/playbooks/pre.yml | 19 -- ci/playbooks/run.yml | 2 +- .../developer_guide.rst} | 365 ++++++++++++++------- .../roles/role-check_for_dangling_images.rst | 8 + library/ceph_pools_pg_protection.py | 38 ++- library/check_flavors.py | 6 +- library/icmp_ping.py | 6 +- library/ip_range.py | 6 +- library/network_environment.py | 11 +- library/node_disks.py | 5 +- library/ovs_dpdk_pmd_cpus_check.py | 6 +- library/pacemaker.py | 6 +- library/switch_vlans.py | 6 +- library/verify_profiles.py | 6 +- molecule-requirements.txt | 5 +- playbooks/check-for-dangling-images.yaml | 13 + playbooks/check-uc-hostname.yaml | 14 + playbooks/compute-tsx.yaml | 31 ++ playbooks/overcloud-service-status.yaml | 1 - .../compute-tsx-validation-5d976a3fc5166536.yaml | 13 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + requirements.txt | 1 - role-addition.yml | 141 +------- .../molecule/ceph-ansible-installed/Dockerfile | 37 --- .../molecule/ceph-ansible-installed/molecule.yml | 53 +-- roles/ceph/molecule/default/Dockerfile | 37 --- roles/ceph/molecule/default/molecule.yml | 50 +-- roles/check_for_dangling_images/README.md | 37 +++ roles/check_for_dangling_images/defaults/main.yml | 21 ++ .../molecule/default/converge.yml | 60 ++++ .../molecule/default/molecule.yml | 3 + roles/check_for_dangling_images/tasks/main.yml | 28 ++ .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 35 +- .../check_rhsm_version/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 51 +-- .../molecule/rhsm_mismatch/Dockerfile | 37 --- .../molecule/rhsm_mismatch/molecule.yml | 53 +-- roles/check_uc_hostname/README.md | 39 +++ roles/check_uc_hostname/defaults/main.yml | 23 ++ .../molecule/default/converge.yml | 58 ++++ .../molecule/default/molecule.yml | 3 + .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++ .../molecule/config_OK/Dockerfile | 37 --- .../molecule/config_OK/molecule.yml | 53 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 53 +-- .../molecule/deprecated_drivers/Dockerfile | 37 --- .../molecule/deprecated_drivers/molecule.yml | 53 +-- .../molecule/deprecated_params/Dockerfile | 37 --- .../molecule/deprecated_params/molecule.yml | 53 +-- .../molecule/required_missing/Dockerfile | 37 --- .../molecule/required_missing/molecule.yml | 53 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/compute_tsx/README.md | 64 ++++ roles/compute_tsx/defaults/main.yml | 26 ++ roles/compute_tsx/molecule/default/converge.yml | 79 +++++ roles/compute_tsx/molecule/default/molecule.yml | 3 + roles/compute_tsx/tasks/main.yml | 82 +++++ roles/compute_tsx/vars/main.yml | 23 ++ roles/container_status/molecule/default/Dockerfile | 37 --- .../container_status/molecule/default/molecule.yml | 50 +-- roles/controller_token/molecule/default/Dockerfile | 37 --- .../controller_token/molecule/default/molecule.yml | 50 +-- .../controller_ulimits/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../ctlplane_ip_range/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/dhcp_validations/molecule/default/Dockerfile | 37 --- .../dhcp_validations/molecule/default/molecule.yml | 50 +-- roles/frr_status/molecule/default/Dockerfile | 37 --- roles/frr_status/molecule/default/molecule.yml | 50 +-- roles/frr_status/molecule/faulty/Dockerfile | 37 --- roles/frr_status/molecule/faulty/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/image_serve/molecule/default/Dockerfile | 37 --- roles/image_serve/molecule/default/molecule.yml | 38 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/node_disks/molecule/default/Dockerfile | 37 --- roles/node_disks/molecule/default/molecule.yml | 50 +-- roles/node_health/molecule/default/Dockerfile | 37 --- roles/node_health/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/nova_status/molecule/default/Dockerfile | 37 --- roles/nova_status/molecule/default/molecule.yml | 50 +-- roles/nova_svirt/molecule/default/Dockerfile | 37 --- roles/nova_svirt/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 38 +-- .../molecule/deprecated_services/Dockerfile | 37 --- .../molecule/deprecated_services/molecule.yml | 38 +-- .../molecule/down_services/Dockerfile | 37 --- .../molecule/down_services/molecule.yml | 38 +-- roles/overcloud_service_status/vars/main.yml | 1 - roles/ovs_dpdk_pmd/molecule/default/Dockerfile | 37 --- roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 50 +-- roles/pacemaker_status/molecule/default/Dockerfile | 37 --- .../pacemaker_status/molecule/default/molecule.yml | 50 +-- roles/package_version/molecule/default/Dockerfile | 37 --- .../package_version/molecule/default/molecule.yml | 50 +-- roles/rabbitmq_limits/molecule/default/Dockerfile | 37 --- .../rabbitmq_limits/molecule/default/molecule.yml | 50 +-- roles/repos/molecule/default/Dockerfile | 37 --- roles/repos/molecule/default/molecule.yml | 50 +-- roles/stack_health/molecule/default/Dockerfile | 37 --- roles/stack_health/molecule/default/molecule.yml | 50 +-- roles/stonith_exists/molecule/default/Dockerfile | 37 --- roles/stonith_exists/molecule/default/molecule.yml | 50 +-- roles/switch_vlans/molecule/default/Dockerfile | 37 --- roles/switch_vlans/molecule/default/molecule.yml | 50 +-- roles/system_encoding/molecule/default/Dockerfile | 37 --- .../system_encoding/molecule/default/molecule.yml | 50 +-- roles/tls_everywhere/molecule/default/Dockerfile | 37 --- roles/tls_everywhere/molecule/default/molecule.yml | 35 +- roles/tripleo_validations/defaults/main.yml | 26 -- roles/tripleo_validations/tasks/main.yml | 16 - roles/tripleo_validations/tasks/run.yml | 42 --- roles/tripleo_validations/tasks/test_script.yml | 13 - roles/tripleo_validations/vars/main.yml | 16 - roles/undercloud_debug/molecule/default/Dockerfile | 37 --- .../undercloud_debug/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../non-persistent-token-format/Dockerfile | 37 --- .../non-persistent-token-format/molecule.yml | 50 +-- roles/validation_init/README.md | 47 +++ roles/validation_init/defaults/main.yml | 28 ++ .../files/_skeleton_role_}/defaults/main.yml.j2 | 2 +- .../files/_skeleton_role_}/handlers/main.yml | 2 +- .../molecule/default/converge.yml.j2 | 2 +- .../_skeleton_role_/molecule/default/molecule.yml | 3 + .../_skeleton_role_/molecule/default/prepare.yml | 25 ++ .../_skeleton_role_/molecule/default/verify.yml | 24 ++ .../files/_skeleton_role_}/tasks/main.yml.j2 | 2 +- .../files/_skeleton_role_}/vars/main.yml.j2 | 2 +- .../validation_init/molecule/default/converge.yml | 62 ++++ .../validation_init/molecule/default/molecule.yml | 3 + roles/validation_init/molecule/default/prepare.yml | 96 ++++++ roles/validation_init/molecule/default/verify.yml | 137 ++++++++ roles/validation_init/tasks/main.yml | 180 ++++++++++ roles/validation_init/templates/README.md.j2 | 39 +++ scripts/tripleo-ansible-inventory | 4 +- test-requirements.txt | 1 - tox.ini | 9 +- .../lookup_plugins/test_introspection_data.py | 36 ++ .../test_nova_hypervisor_statistics.py | 37 +++ zuul.d/base.yaml | 2 +- zuul.d/layout.yaml | 7 + zuul.d/molecule.yaml | 94 +++++- 214 files changed, 3033 insertions(+), 5040 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index ebd0bdd..c5a69f4 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -4,2 +4,3 @@ ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 +jinja2>=2.8.0 +molecule>=3.3.1,<4 # MIT +molecule-podman # MIT diff --git a/requirements.txt b/requirements.txt index 7c0b81b..4acdf4e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +12,0 @@ python-ironic-inspector-client>=3.1.1 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fa524d1..fbb1c7e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -20 +19,0 @@ requests-mock>=1.8.0 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0

1 0

tripleo-puppet-elements 15.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: tripleo-puppet-elements 15.0.0: Puppet building rules for OpenStack images. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 14.1.0..15.0.0 ------------------------------------------------- 0d0067a Remove pankoclient 71f7e94 Add Python3 xena unit tests 3bc1835 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .../install.d/package-installs-overcloud-openstack-clients | 1 - releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/layout.yaml | 2 +- 4 files changed, 8 insertions(+), 2 deletions(-)

1 0

os-net-config 15.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are overjoyed to announce the release of: os-net-config 15.0.0: OpenStack network configuration This release is part of the xena release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 14.1.0..15.0.0 --------------------------------------- 352227b Add Python3 xena unit tests f4e599a Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 1 deletion(-)

1 0

puppet-tripleo 15.0.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: puppet-tripleo 15.0.0: Puppet module for OpenStack TripleO This release is part of the xena release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New hiera setting *rbd_disk_cachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * Added "scripts" parameters for class tripleo::profile::base::metrics::collectd::sensubility enabling download of various scripts for usage within sensubility check definitions. Supported transfer method is HTTP only currently. Changes in puppet-tripleo 14.1.0..15.0.0 ---------------------------------------- afd848ae Bump major for metadata.json to mark the X cycle dee8091c Add support for ovn clustered databases fad7e3fb Revert "Allow ovn_db_host to be of type array" 6392cc66 Adding nova::network::neutron to nova-conductor 1aa0caa3 Restore the spec file which was deleted unexpectedly c204077a Add posibility to download scripts for sensubility f12a143f Allow overriding RBD disk cache modes 8ae1f90f Stop using removed parameters 5c11340b Add socat listen backend to clustercheck service 5af44ea6 Glance: Include new puppet classes for castellan options f08d83de Fix lint errors with the latest lint packages ee2f2501 Fix where long_description_content_type is placed 38f00b71 Add option to set rsyslog reopenOnTruncate parameter for all services 22c329eb Update master for stable/wallaby f09aa48d Introduce nova virtlogd wrapper ff7636d3 Replace deprecated ceilometer::agent::auth 6691c97e nova: include nova::cinder in more common place 5b043791 Do not include client classes Diffstat (except docs and test files) ------------------------------------- manifests/host/liquidio/compute.pp | 4 -- manifests/profile/base/aodh.pp | 1 - manifests/profile/base/barbican.pp | 1 - .../profile/base/ceilometer/agent/notification.pp | 2 +- manifests/profile/base/ceilometer/agent/polling.pp | 2 +- manifests/profile/base/database/mysql.pp | 2 +- manifests/profile/base/database/redis.pp | 6 +- manifests/profile/base/glance/api.pp | 6 +- manifests/profile/base/gnocchi.pp | 1 - manifests/profile/base/haproxy.pp | 2 +- manifests/profile/base/logging/rsyslog.pp | 10 +++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++- .../profile/base/metrics/collectd/sensubility.pp | 63 ++++++++++++++++++--- .../base/metrics/collectd/sensubility_script.pp | 64 ++++++++++++++++++++++ manifests/profile/base/mistral.pp | 1 - manifests/profile/base/neutron/agents/ovn.pp | 29 ++++++---- manifests/profile/base/neutron/ovn_metadata.pp | 27 ++++++--- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 34 ++++++++---- manifests/profile/base/nova.pp | 1 + manifests/profile/base/nova/compute.pp | 1 - .../profile/base/nova/compute_libvirt_shared.pp | 7 ++- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/nova/virtlogd_wrapper.pp | 55 +++++++++++++++++++ manifests/profile/base/nova/wrappers/virtlogd.pp | 43 +++++++++++++++ manifests/profile/pacemaker/clustercheck.pp | 13 ++++- manifests/profile/pacemaker/database/mysql.pp | 2 +- .../profile/pacemaker/database/mysql_bundle.pp | 2 +- manifests/profile/pacemaker/database/redis.pp | 10 ++-- .../profile/pacemaker/database/redis_bundle.pp | 8 +-- manifests/profile/pacemaker/rabbitmq.pp | 4 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 4 +- metadata.json | 2 +- .../nova_virtlogd_wrapper-43c6c319db2a36ef.yaml | 16 ++++++ .../rbd-disk-cache-modes-b6b75fa2e52b8915.yaml | 5 ++ .../sensubility-scripts-994014edfcc2da88.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 2 +- spec/classes/tripleo_profile_base_aodh_spec.rb | 4 -- spec/classes/tripleo_profile_base_barbican_spec.rb | 2 - ...file_base_ceilometer_agent_notification_spec.rb | 9 +-- ...o_profile_base_ceilometer_agent_polling_spec.rb | 7 +-- .../tripleo_profile_base_glance_api_spec.rb | 8 +++ spec/classes/tripleo_profile_base_gnocchi_spec.rb | 4 -- ...ofile_base_metrics_collectd_sensubility_spec.rb | 33 +++++++++++ .../tripleo_profile_base_metrics_collectd_spec.rb | 1 + spec/classes/tripleo_profile_base_mistral_spec.rb | 4 -- .../tripleo_profile_base_nova_compute_spec.rb | 4 -- .../tripleo_profile_base_nova_conductor_spec.rb | 63 +++++++++++++++++++++ spec/classes/tripleo_profile_base_nova_spec.rb | 4 ++ ...ase_metrics_collectd_sensubility_script_spec.rb | 45 +++++++++++++++ spec/fixtures/hieradata/default.yaml | 1 + templates/nova/virtlogd.epp | 52 ++++++++++++++++++ 53 files changed, 599 insertions(+), 107 deletions(-)

1 0

tripleo-common 16.1.0 (xena)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are glad to announce the release of: tripleo-common 16.1.0: A common library for TripleO workflows. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 16.1.0 ^^^^^^ Deprecation Notes * The DeployArtifactURL(s) server is no longer makes any use of Swift when using built-in scripts to upload artifacts. The old *upload- swift-artifacts* file is now a symlink pointed to the updated *upload-artifacts* script. While the file has changed, the API remains the same. The symlink will ensure that legacy automation remains functional while moving over to the new script. The symlink will be removed in a future release. Changes in tripleo-common 16.0.0..16.1.0 ---------------------------------------- aaa981c9 Move rabbitmq healthcheck to something more modern fbc188dd Remove xinetd from the mariadb container 64b6bd6c Do not fail if initiatorname.iscsi does not exist 9532e28e Changed minversion in tox to 3.18.0 755cc609 Remove references to tripleo-validations legacy directory 5e469e42 Remove libcgroup-tools from libvirt container 37369ca4 Make the clustercheck healthcheck work with socat 3f84495b Fix config parsing in memcached healthcheck 5d6649fc Disable neutron inventory src if no ctlplane ports 6c8fbd33 Fix site-packages in horizon's extend_start.sh 0a35f945 Ignore non host ports by tag filtering bac04330 Strip final dot of the fqdn hostname and dnsname 40198b1d Remove the leftover module in tripleo_common.actions d3286377 Partial-Revert:Skip port if missing mandatory tag 14441478 Skip port if missing mandatory tag 8877d0f8 Ignore OVN Bridge MAC net for inventory generation 31e87d8a setup.cfg: Replace dashes with underscores 5ab78473 Removed mentions of mistral from the doc f7cfed9e Add rhosp-release rpm in rhel images 4bf4158e Delete python2 based images 9793ddde Remove Keepalived service 9a37599c Add Python3 xena unit tests 902855b2 Update master for stable/wallaby 4a2e95d1 Add interface-names to overcloud-hardened-images-uefi-rhel8 a8d92436 Update artifact tooling for swiftless underclouds Diffstat (except docs and test files) ------------------------------------- README.rst | 86 ---------- container-images/kolla/horizon/extend_start.sh | 3 +- .../tcib/base/keepalived/keepalived.yaml | 6 - container-images/tcib/base/mariadb/mariadb.yaml | 2 +- container-images/tcib/base/os/iscsid/iscsid.yaml | 2 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 - container-images/tripleo_containers.yaml | 2 - container-images/tripleo_containers.yaml.j2 | 9 -- healthcheck/mariadb | 19 ++- healthcheck/memcached | 18 ++- healthcheck/rabbitmq | 2 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + .../overcloud-hardened-images-uefi-rhel8.yaml | 5 +- image-yaml/overcloud-hardened-images-uefi.yaml | 45 ------ image-yaml/overcloud-hardened-images.yaml | 44 ------ image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + image-yaml/overcloud-images.yaml | 58 ------- image-yaml/overcloud-realtime-compute.yaml | 37 ----- ...oyArtifactURLs-Simplified-e3993493022653ab.yaml | 9 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + scripts/upload-artifacts | 133 ++++++++++++++++ scripts/upload-puppet-modules | 16 +- scripts/upload-swift-artifacts | 174 +-------------------- setup.cfg | 8 +- tox.ini | 6 +- tripleo_common/actions/__init__.py | 4 - tripleo_common/actions/ansible.py | 31 ---- tripleo_common/constants.py | 5 +- tripleo_common/inventory.py | 39 +++++ tripleo_common/utils/ansible.py | 30 +--- zuul.d/layout.yaml | 2 +- 45 files changed, 286 insertions(+), 736 deletions(-)

1 0

os-refresh-config 11.0.1 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: os-refresh-config 11.0.1: Refresh system configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 11.0.0..11.0.1 ------------------------------------------- 2790bcc Update TOX_CONSTRAINTS_FILE for stable/ussuri d82627a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

tripleo-image-elements 12.0.2 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are jazzed to announce the release of: tripleo-image-elements 12.0.2: Disk image builder elements for deploying OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.0.1..12.0.2 ------------------------------------------------ 8ff41f23 additionally remove eth* devices off the overcloud-full image 49c16a36 ensure any ens3 interface is nuked during image build 2b5e3aae Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 7 +++++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- 9 files changed, 13 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index 3687e2d8..31f422cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0

1 0

tripleo-heat-templates 12.4.4 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are stoked to announce the release of: tripleo-heat-templates 12.4.4: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.4 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * The "OS::TripleO::{{role.name}}::PreNetworkConfig" resource has been restored. This resource can be used to implement any configuration steps executed before network configurations are applied. * The MariaDB tuning parameter for Innodb_buffer_pool_size can now be set via a new TripleO Heat Template parameter 'MysqlInnodbBufferPoolSize'. By default this is undefined. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * The nova-ironic setting for 'max_concurrent_builds' can now be set via the use of a new TripleO Heat templates parameter 'IronicMaxConcurrentBuilds'. It is set to the service default of 10 by default in TripleO Heat templates. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * Now "ExtraConfigPre" resource and "NodeExtraConfig" resource are executed after network configurations are applied in nodes. This is consitent with the previous version with heat software deployment mechanism instead of config-download. * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 12.4.3..12.4.4 ------------------------------------------------ 8e31cbf17 Allow customizing podman's [engine]/events_logger a4e6c8e3c Add dependency on OVNMacAddressNetwork for role ResourceGroup 95835538c Unify cinder's volume and backup kolla_config settings 76059627b Disable tunnelled migration c06ccdffc Add new options for Barbican PKCS#11 backend ad5ab191e Correct metrics_qdr logging path and regex parsing e5d189443 Fix network_cidrs when ManageNetworks: false 3d48d87ed Set tags on all OS::Neutron::Port resources 752498922 Add tags to THT network resources 8014ae223 Add OVNEncapType option to the ovn controller template 976a5e905 Run update tasks with become 0e8be5508 Disable tunneled mode when use_tls_for_live_migration e5cba2899 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml ef575f87f Restore PreNetworkConfig resources c5e24795f Fix RoleParameters in tuned-baremetal-ansible.yaml 9bbd4fe55 Don't assume role has default_route_networks/tags 0a16f3a30 Stop handler flush eafdee6ae HA: fix race when moving VIP during minor update dbfc51597 Switch Octavia external tasks to 'post deploy' 4abeffe64 Stop using (and breaking) /var/tmp for horizon temporary things 010febfbd Moving nova-consoleauth to step4 dfb282b50 Missing client certificate for live-migration with TLS 35b9949dd Add RootStackName to group_vars d81c5544d Add systemd dependency to openvswitch to ovn-controller 10d541806 Disabling LM PostCopy and AutoConverge for RT roles 6342deafc Mount /etc/openldap inside the keystone container 1325566ba Ensure ansible_fqdn is set 124419ca7 Use single NovaLibvirtNetwork to configure instance console components 85e89060b Limit access to sshd used for nova migration 59fcd220f Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" 96d50af58 Expose Innodb_buffer_pool_size 1265a63ed Add OVN chassis macs to hieradata dd496f06c Refactor OVNMacAddressNetwork cab6bbd6c Config parameters for timemaster service c2ba66915 [OVN] Remove check for OVN + Availability Zones b17267791 Expose mistral::rpc_response_timeout as a Heat parameter dd24b3133 Expose max_concurrent_builds as a Heat parameter 8bc099057 ovn: Add neutron-cleanup Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 37 ++++- common/hiera-steps-tasks.yaml | 1 + deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 ++ deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 20 ++- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- .../cinder/cinder-backup-container-puppet.yaml | 51 +----- .../cinder/cinder-backup-pacemaker-puppet.yaml | 31 +--- .../cinder/cinder-common-container-puppet.yaml | 52 +++++++ .../cinder/cinder-volume-container-puppet.yaml | 36 +---- .../cinder/cinder-volume-pacemaker-puppet.yaml | 23 +-- deployment/database/mysql-base.yaml | 11 ++ deployment/horizon/horizon-container-puppet.yaml | 23 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 ++ deployment/keystone/keystone-container-puppet.yaml | 1 + deployment/metrics/qdr-container-puppet.yaml | 4 +- deployment/mistral/mistral-base.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- deployment/nova/nova-compute-container-puppet.yaml | 49 +++--- deployment/nova/nova-ironic-container-puppet.yaml | 9 ++ deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova-migration-target-container-puppet.yaml | 38 +++-- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 ++-- .../octavia/octavia-deployment-config.j2.yaml | 5 +- .../ovn/ovn-controller-container-puppet.yaml | 27 +++- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- deployment/podman/podman-baremetal-ansible.yaml | 9 ++ .../timemaster/timemaster-baremetal-ansible.yaml | 171 +++++++++++++++++++++ deployment/timesync/chrony-baremetal-ansible.yaml | 2 - deployment/tls/undercloud-tls.yaml | 3 + deployment/tuned/tuned-baremetal-ansible.yaml | 19 ++- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- environments/network-isolation-v6-all.j2.yaml | 2 +- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 8 +- network/config/bond-with-vlans/role.role.j2.yaml | 6 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 14 +- network/config/multiple-nics/role.role.j2.yaml | 12 +- .../role.role.j2.yaml | 4 +- network/config/single-nic-vlans/role.role.j2.yaml | 4 +- network/network.j2 | 46 +++--- network/networks.j2.yaml | 3 - network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 16 ++ network/ports/port.j2 | 39 +++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 4 +- overcloud.j2.yaml | 21 ++- puppet/role.role.j2.yaml | 15 +- ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 ++ .../notes/bug-1907214-df2f07cbacbe8a24.yaml | 13 ++ .../innodb-tuning-param-e71d2fd727c450ec.yaml | 6 + ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 ++ ...ova-max_concurrent_builds-f900d84f35704452.yaml | 6 + ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 ++ ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + tools/process-templates.py | 5 + 66 files changed, 821 insertions(+), 282 deletions(-)

1 0

python-tripleoclient 13.4.4 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are gleeful to announce the release of: python-tripleoclient 13.4.4: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 13.4.3..13.4.4 ---------------------------------------------- 09722158 Partial Revert "Don't pass the DNSServers param in undercloud env" 90addcf9 BnR Typo missing some spaces between words on the command help 7cda9f18 BnR added error msg in case there is no inventory e8a0124a Remove --extra-env-vars from the mutually exclusive arg group a2d91833 Fix validations listing when filtering by group(s) 61390cc4 Declare is_failed_validation variable before if statement 65ac1e1d Overcloud image has missing kernel_id and ramdisk_id properties 2b79ac27 Make Python Interpreter option for Ansible Validation Run eabef0b8 Removing todo from undercloud_preflight since 753845 is merged b8661e9e Copy the inventory for standalone deploy in output_dir 226a9078 Use ceph_mon_network to find Ceph monitor IPs for export 0debcde2 Replace exception with LOG.info Diffstat (except docs and test files) ------------------------------------- tripleoclient/constants.py | 5 +- tripleoclient/export.py | 19 +++- tripleoclient/v1/overcloud_backup.py | 12 ++- tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 4 + tripleoclient/v1/tripleo_validator.py | 21 ++-- tripleoclient/v1/undercloud_backup.py | 20 ++-- tripleoclient/v1/undercloud_config.py | 1 + tripleoclient/v1/undercloud_preflight.py | 4 - 14 files changed, 295 insertions(+), 58 deletions(-)

1 0

tripleo-validations 12.3.5 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We jubilantly announce the release of: tripleo-validations 12.3.5: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.4..12.3.5 --------------------------------------------- 56faf91 Use validation_component for Standalone CI jobs ee7208b [overcloud-service-status] Removing pre-upgrade e8c2f87 Check for dangling images 83cd453 Add validation to check DockerInsecureRegistryAddress matches the UC hostname ff820e4 Exposing default variables in playbook 55dad79 Validation should use the public endpoint 62b33cb Make tls_everywhere validations compatible with ansible_facts a6a067a More detail in arg validation e6a1bbb Use a more targeted job for tripleo-validations e85c110 Use static inventory for component CI role and clean component list 25e3240 check-ram is not compat w/ upstream 9b2d173 Fix set by merging two list without duplicate b032b76 Add validation to verify undercloud.conf content. 1795aa0 Add system encoding to pre-update stage. ca830a7 Add update roles on several validations. a6ed71e Add new Update validation groups. 812c052 Add new tripleo-latest-packages-version playbook Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 +++++ playbooks/check-undercloud-conf.yaml | 15 +++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/package-version.yaml | 6 ++ playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 15 +++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 6 ++ roles/check_for_dangling_images/README.md | 37 +++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 +++++++ .../molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++++ .../molecule/default/molecule.yml | 47 ++++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 +++++++++ roles/check_uc_hostname/README.md | 39 ++++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 58 +++++++++++++++++ .../molecule/default/molecule.yml | 49 +++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++++ roles/check_undercloud_conf/defaults/main.yml | 41 ++++++++++++ .../molecule/config_OK/Dockerfile | 37 +++++++++++ .../molecule/config_OK/converge.yml | 45 ++++++++++++++ .../molecule/config_OK/molecule.yml | 52 ++++++++++++++++ .../molecule/config_OK/prepare.yml | 65 +++++++++++++++++++ .../molecule/default/Dockerfile | 37 +++++++++++ .../molecule/default/converge.yml | 55 +++++++++++++++++ .../molecule/default/molecule.yml | 52 ++++++++++++++++ .../molecule/default/prepare.yml | 34 ++++++++++ .../molecule/deprecated_drivers/Dockerfile | 37 +++++++++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++++++++++++++ .../molecule/deprecated_drivers/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_drivers/prepare.yml | 65 +++++++++++++++++++ .../molecule/deprecated_params/Dockerfile | 37 +++++++++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++++++++++++ .../molecule/deprecated_params/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_params/prepare.yml | 51 +++++++++++++++ .../molecule/required_missing/Dockerfile | 37 +++++++++++ .../molecule/required_missing/converge.yml | 71 +++++++++++++++++++++ .../molecule/required_missing/molecule.yml | 52 ++++++++++++++++ .../molecule/required_missing/prepare.yml | 63 +++++++++++++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++++++++++ roles/check_undercloud_conf/tasks/main.yml | 69 +++++++++++++++++++++ .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++--- tripleo_validations/utils.py | 2 +- zuul.d/base.yaml | 9 +++ zuul.d/layout.yaml | 56 +++++++++-------- zuul.d/molecule.yaml | 39 +++++++++++- 68 files changed, 2037 insertions(+), 65 deletions(-)

1 0

puppet-tripleo 12.6.1 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are satisfied to announce the release of: puppet-tripleo 12.6.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.6.0..12.6.1 ---------------------------------------- d3d1a63c Bump metadata for tripleo ussuri release e525aa15 Add option to set rsyslog reopenOnTruncate parameter for all services 33bfb4a0 Adding nova::network::neutron to nova-conductor e09d2a19 HA: inject public certificates without blocking container c04b6b52 Use puppet-openstack-module-unit-jobs to define unit test jobs 86d357cd Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard d9857e6f Move stonith resource creation to step2 379895e7 stable-only: Pin puppetlabs-haproxy e3c3b7cf Set ovn_chassis_mac_map in ovn::controller Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++++++++---- files/certmonger-rabbitmq-refresh.sh | 23 ++++++++++++++-- manifests/haproxy.pp | 32 ++++++++++++++++++++++ manifests/profile/base/logging/rsyslog.pp | 11 +++++++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++++++++-- manifests/profile/base/neutron/agents/ovn.pp | 22 +++++++++++---- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +++++- metadata.json | 2 +- .../tripleo_profile_base_nova_conductor_spec.rb | 2 ++ zuul.d/layout.yaml | 16 +---------- 12 files changed, 126 insertions(+), 33 deletions(-)

1 0

tripleo-common 12.4.5 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are stoked to announce the release of: tripleo-common 12.4.5: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.4..12.4.5 ---------------------------------------- 833ef486 Fix config parsing in memcached healthcheck 9e22f65e Fix site-packages in horizon's extend_start.sh 83e63e44 Add an internal index to network_data 813a7382 Don't install dhcp-all-interfaces for redhat 8 onwards 8a3a3194 Add host_vars to define tasks executed before network configurations 314487b9 Fix neutron driver detection for containers params 654dc085 healthcheck_port: drop lsof in favor of awk/find Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- healthcheck/common.sh | 40 ++++++++++++++++------ healthcheck/memcached | 18 ++++++++-- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/image/kolla_builder.py | 12 ++++--- tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ tripleo_common/utils/template.py | 4 +++ 28 files changed, 93 insertions(+), 28 deletions(-)

1 0

os-collect-config 11.0.4 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: os-collect-config 11.0.4: Collect and cache metadata, run hooks on changes. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.3..11.0.4 ------------------------------------------- 1bdb361 Update TOX_CONSTRAINTS_FILE for stable/ussuri 385ad80 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

tripleo-heat-templates 14.1.2 (wallaby)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We eagerly announce the release of: tripleo-heat-templates 14.1.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.1.2 ^^^^^^ New Features * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. Changes in tripleo-heat-templates 14.1.1..14.1.2 ------------------------------------------------ 3ed600963 Pass custom CephConfigPath parameter to ceph-nfs role b2a8641a5 set ganesha idmap.conf file path and overrides 74e3884b4 Fix cinder's cephx keyring file permissions aaf57f21d Allow customizing podman's [engine]/events_logger ef96bfd19 Include the standalone ganesha tasks when ceph is external 0efd6f067 Disable tunnelled migration f006d0156 Added the posibility of skipping the NFS ping test on the rear installation 218f5f31a Add environment for external network VIP e15bfa6d8 Add OVNCMSOptions to Controller and Networker roles 3030fce6f Remove Ceph cluster replica and PG num from low-memory-usage.yaml 0b26b18e0 Skip cephadm playbook when there is no mon or nfs group 42f59769f Expose the monitoring_stack network to cephadm 1f7de63e5 Use collection FQCN for podman modules 0592cb32b Fix network_cidrs when ManageNetworks: false 8775a8bbe Move ceph_admin_extra_vars logic to tripleo-ansible d6c2740a8 Make clustercheck service accessible over socat acd41a608 Add neutron port tag hint for role name e86165354 Introduce CephHciOsdCount and CephHciOsdType 326452e58 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 36c16a189 Don't add external tasks for roles with zero count f17db7153 Add openstack-tox-tht to the gate bc232904a Fix RoleParameters in tuned-baremetal-ansible.yaml d172a7b58 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ci/environments/scenario001-standalone.yaml | 1 + common/deploy-steps.j2 | 25 ++++++++--- deployed-server/deployed-neutron-port.yaml | 5 +++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 +++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++++ deployment/cephadm/ceph-base.yaml | 24 ++++------- deployment/cephadm/ceph-client.yaml | 12 ++++++ deployment/cephadm/ceph-grafana.yaml | 5 +++ deployment/cephadm/ceph-nfs.yaml | 13 ++++++ deployment/cephadm/ceph-osd.yaml | 32 ++++++++++++++ deployment/cinder/cinder-api-container-puppet.yaml | 2 +- .../cinder/cinder-common-container-puppet.yaml | 50 +++++++++++++--------- deployment/database/mysql-container-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 30 ++----------- .../nova/nova-conductor-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-container-puppet.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 2 +- .../pacemaker/clustercheck-container-puppet.yaml | 19 +++++++- deployment/podman/podman-baremetal-ansible.yaml | 11 ++++- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +++++++- environments/external-network-vip.yaml | 5 +++ environments/low-memory-usage.yaml | 4 -- environments/manila-cephfsganesha-config.yaml | 4 ++ network/network.j2 | 24 +++-------- network/ports/deployed_port.j2 | 5 +++ network/ports/noop.yaml | 5 +++ network/ports/port.j2 | 9 ++++ network/ports/port_from_pool.j2 | 5 +++ network/service_net_map.j2.yaml | 1 + puppet/role.role.j2.yaml | 1 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 +++ roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + zuul.d/layout.yaml | 1 + 49 files changed, 270 insertions(+), 105 deletions(-)

1 0

puppet-ovn 17.5.0 (victoria)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We are jazzed to announce the release of: puppet-ovn 17.5.0: Puppet module for OVN This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 17.4.0..17.5.0 ------------------------------------ 406ecb3 Prepare a new release for victoria 490f7e5 Set external_ids:ovn-chassis-mac-mappings 854e7a6 Update TOX_CONSTRAINTS_FILE for stable/victoria d54e95e Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 2 +- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 21 +++++++++++++++ tox.ini | 2 +- 6 files changed, 60 insertions(+), 3 deletions(-)

1 0

oslo.limit 1.4.0 (xena)
by no-reply＠openstack.org 10 Jun '21

10 Jun '21

We are chuffed to announce the release of: oslo.limit 1.4.0: Limit enforcement library to assist with quota calculation. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 1.3.0..1.4.0 ---------------------------------- caa75c1 Add a test fixture 1175b0f Add Enforcer.calculate_usage() efc26ae Upgrade the pre-commit-hooks version 52a7eaa Add Python3 xena unit tests 9ebe3c6 Update master for stable/wallaby 7f16772 Fix requirements issues fc270af Use TOX_CONSTRAINTS_FILE 6115a3e remove unicode from code e4583b6 add py38 matedata Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++-- .zuul.yaml | 3 +- lower-constraints.txt | 8 ---- oslo_limit/fixture.py | 75 ++++++++++++++++++++++++++++++++ oslo_limit/limit.py | 64 ++++++++++++++++++++++++++-- releasenotes/source/conf.py | 16 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 8 +--- 18 files changed, 365 insertions(+), 33 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ecb5e3a..b9fffd4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5 @@ +fixtures>=3.0.0 # Apache-2.0/BSD

1 0

osprofiler 3.4.1
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are pleased to announce the release of: osprofiler 3.4.1: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. Changes in osprofiler 3.4.0..3.4.1 ---------------------------------- 951efdc Uncap PrettyTable d153b99 Move flake8 as a pre-commit local target. bcca5bd Dropping lower constraints testing 42d5819 Use py3 as the default runtime for tox 2794b98 Adding pre-commit 22d6bff ignore reno generated artifacts d0d65fd Add Python3 wallaby unit tests ba16314 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .pre-commit-config.yaml | 39 +++++++ .zuul.yaml | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 2 +- test-requirements.txt | 2 + tools/lint.py | 4 +- tools/patch_tox_venv.py | 3 +- tox.ini | 5 +- 12 files changed, 96 insertions(+), 168 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7719bc4..de2d919 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.utils>=3.33.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.2 # BSD +PrettyTable>=0.7.2 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index a227fe4..a2ca153 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27,0 +28,2 @@ jaeger-client>=3.8.0 # Apache-2.0 + +pre-commit>=2.6.0 # MIT

1 0

python-neutronclient 7.5.0 (xena)
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are thrilled to announce the release of: python-neutronclient 7.5.0: CLI and Client Library for OpenStack Networking This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.5.0 ^^^^^ Deprecation Notes * "neutron" CLI will be removed in 'Z' release. While it has been marked as deprecated for removal for long, all features in "neutron" CLI have been supported in "openstack" CLI (OpenStackClient) as of Xena release and the neutron team plans to remove it in 'Z' release. Consider using "openstack" CLI and Mapping Guide in the OSC documentation would help you. Changes in python-neutronclient 7.4.0..7.5.0 -------------------------------------------- ae39756 Add a release note on deprecation for removal of neutron CLI 76dd26f Set when deprecated neutron client CLI will be removed 439e290 Skip metering functional tests when metering extension is not enabled Diffstat (except docs and test files) ------------------------------------- neutronclient/shell.py | 2 +- .../notes/neutron-cli-deprecation-398823c87270a296.yaml | 10 ++++++++++ 4 files changed, 18 insertions(+), 4 deletions(-)

1 0

tripleo-common 15.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are psyched to announce the release of: tripleo-common 15.2.1: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.0..15.2.1 ---------------------------------------- acead380 Remove xinetd from the mariadb container 10ea6944 Fix config parsing in memcached healthcheck 41976688 Make the clustercheck healthcheck work with socat 5c5b08b4 Ignore OVN Bridge MAC net for inventory generation 983377ba Disable neutron inventory src if no ctlplane ports e25e523d Ignore non host ports by tag filtering b81b1ea1 Fix site-packages in horizon's extend_start.sh 99ec07c5 Strip final dot of the fqdn hostname and dnsname 0a7cfe39 Skip port if it's on the OVN MAC Net Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/mariadb/mariadb.yaml | 2 +- healthcheck/mariadb | 19 ++++++++--- healthcheck/memcached | 18 ++++++++-- tripleo_common/constants.py | 4 +++ tripleo_common/inventory.py | 39 ++++++++++++++++++++++ 8 files changed, 100 insertions(+), 31 deletions(-)

1 0

python-tripleoclient 16.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are glad to announce the release of: python-tripleoclient 16.2.1: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 16.2.0..16.2.1 ---------------------------------------------- 2663a5f2 BnR Typo missing some spaces between words on the command help 0886ecd1 Use Validations libs Client for main validation entry point 234a41b7 Ephemeral Heat: Add a --refresh option to external update run 4ed3d8b4 Ephemeral Heat unit tests b90a7196 Don't run containers in interactive mode fea5819c BnR added error msg in case there is no inventory 2006c0ff Auto OVN bridge mac mappings for standalone 516b39d6 Wait for Heat message queues Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tripleoclient/exceptions.py | 4 + tripleoclient/heat_launcher.py | 233 +++++--- .../test_overcloud_external_update.py | 36 ++ tripleoclient/utils.py | 5 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/tripleo_deploy.py | 15 + tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 508 ++--------------- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/workflows/deployment.py | 14 +- 20 files changed, 1193 insertions(+), 635 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4cb0a298..9c80b5a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file

1 0

keystone 16.0.2 (train)
by no-reply＠openstack.org 07 Jun '21

07 Jun '21

We contentedly announce the release of: keystone 16.0.2: OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 16.0.2 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207) Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137) Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938) Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753) Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1889936 (https://bugs.launchpad.net/keystone/+bug/1889936) Properly decode octet strings, or byte arrays, returned from LDAP. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125) Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654) Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 16.0.1..16.0.2 ---------------------------------- 1b573ae7d Hide AccountLocked exception from end users 328cf33aa Retry update_user when sqlalchemy raises StaleDataErrors f10ff1c9a Support bytes type in generate_public_ID() 9c879d46b Use app cred user ID in policy enforcement b49a465ed Drop lower-constraints job 9beb3a580 Properly handle octet (byte) strings when converting LDAP responses 105f95795 Implement more robust connection handling for asynchronous LDAP calls e8b477847 Delete system role assignments from system_assignment table 28d2dd19e Make opensuse jobs nonvoting fb7d54543 Fix lower-constraint for PyMySQL 13f965e1f fix link in release note of bug/1794527 247227f3f Change time faking for totp test 7eeb144b7 Stop explicitly requiring pycodestyle 184bb8289 Revert "Temporarily disable k2k tests on train and stein" 93f548a72 Refactor some ldap code to implement TODOs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - keystone/api/users.py | 47 +++++- keystone/assignment/backends/sql.py | 5 + keystone/identity/backends/ldap/common.py | 161 +++++++++++++-------- keystone/identity/backends/sql.py | 8 + keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++ .../unit/identity/backends/test_ldap_common.py | 14 ++ lower-constraints.txt | 8 +- .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 + .../notes/bug-1794527-866b1caff67977f3.yaml | 2 +- .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 + .../notes/bug-1889936-78d6853b5212b8f1.yaml | 5 + .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 + .../notes/bug-1901207-13762f85b8a04481.yaml | 7 + .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ setup.cfg | 3 +- test-requirements.txt | 1 - 27 files changed, 397 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a86a1fa44..6cdc34d31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ pep257==0.7.0 # MIT License -pycodestyle>=2.0.0 # MIT License

1 0

keystoneauth1 3.17.4 (train)
by no-reply＠openstack.org 07 Jun '21

07 Jun '21

We eagerly announce the release of: keystoneauth1 3.17.4: Authentication Library for OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.17.4 ^^^^^^ Bug Fixes * [bug 1838704 (https://bugs.launchpad.net/keystone/+bug/1838704) When consuming keystoneauth1.session.Session, if a requests session is not provided one is created. The Session used for requests may result in a ResourceWarning being generated if it is not properly closed. The code has been updated to close the session correctly when the Session object is deleted. Changes in keystoneauth1 3.17.3..3.17.4 --------------------------------------- 8dc7366 Cleanup session on delete Diffstat (except docs and test files) ------------------------------------- keystoneauth1/session.py | 18 ++++++++++++++++++ .../cleanup-session-on-delete-1ed6177d4c5c1f83.yaml | 9 +++++++++ 3 files changed, 35 insertions(+)

1 0

tripleo-heat-templates 11.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are excited to announce the release of: tripleo-heat-templates 11.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.6.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * New "CinderRpcResponseTimeout" and "CinderApiWsgiTimeout" parameters provide a means for configuring Cinder's RPC response and WSGI connection timeouts, respectively. * The new "EnableCache" parameter is added to enable/disable chacing using memcached services. The parameter is true by default, but should be false when memcached service is disabled in the deployment. * The MariaDB tuning parameter for Innodb_buffer_pool_size can now be set via a new TripleO Heat Template parameter 'MysqlInnodbBufferPoolSize'. By default this is undefined. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Add posibilities to configure ovn dbs monitor interval in tht by OVNDBSPacemakerMonitorInterval (default 30s). Under load, this can create extra stress and since the timeout has already been bumped, it makes sense to bump this interval to a higher value as a trade off between detecting a failure and stressing the service. * The nova-ironic setting for 'max_concurrent_builds' can now be set via the use of a new TripleO Heat templates parameter 'IronicMaxConcurrentBuilds'. It is set to the service default of 10 by default in TripleO Heat templates. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. The *ForceNoTsx* flag will disable this validation on a per-role basis. More information here: https://access.redhat.com/solutions/6036141 * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 11.5.0..11.6.0 ------------------------------------------------ 42a5f7f1b [ffwd] Add legacy cinderv3 volume cleanup to postupgrade fee55d5dc Fix network_cidrs when ManageNetworks: false 7840da001 [train-only] Adding ForceNoTsx flag d0ba2d100 Add dependency on OVNMacAddressNetwork for role ResourceGroup 45b4de27c Set tags on all OS::Neutron::Port resources 88ef493cd Add tags to THT network resources d2d044e02 Add OVNEncapType option to the ovn controller template af8576222 Disable tunneled mode when use_tls_for_live_migration ea9ebddf6 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml c1ee7ccdd [ffwd][train-only] Rebuild clouds.yaml before running keystone endpoint configuration. 8090c8a18 Fix RoleParameters in tuned-baremetal-ansible.yaml ab5d866cb HA: inject public certificates without blocking container 8a7725f42 Add new options for Barbican PKCS#11 backend d7e888ac9 Switch Octavia external tasks to 'post deploy' e8a224f9a [ffwd] Rework checks for hybrid state containers 7768e7608 Run update tasks with become 20561e86c Sync full /etc/leapp/files directory. 373838ffb [train-only] QemuDefaultTLSVerify should be false ff730282a Stop using (and breaking) /var/tmp for horizon temporary things 002445bea Add RootStackName to group_vars bcc5f03ab Moving nova-consoleauth to step4 ac1584a44 Missing client certificate for live-migration with TLS c9fa94dd5 Add systemd dependency to openvswitch to ovn-controller 69e24661b Disabling LM PostCopy and AutoConverge for RT roles 70f6c7804 Mount /etc/openldap inside the keystone container 3bbc8af5b Removing duplicate mount point in metrics_qdr a6e524477 Limit access to sshd used for nova migration 3d8acef64 [train-only] Introduce hybrid state for iscsi 0de9ea84f [Train Only] Ensure novajoin code is setting ansible_fqdn f24840a56 Ensure ansible_fqdn is set 860a68a4a Use single NovaLibvirtNetwork to configure instance console components 3b763ab2e [ffwd] Rework WA#1925078 2445de761 Add OVN chassis macs to hieradata 6c62cf789 Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" 489aab582 Expose Innodb_buffer_pool_size 18d40d805 Refactor OVNMacAddressNetwork 7951870db [Train-only] Fix the tripleo-container-stop role in train cbd025a3f [ffwd][train-only] Run keystone endpoint configuration on FFWD a22239e27 Add service ordering to cleanup service to avoid conflicts with agent startup b7ed86c3b [update][upgrade] Use container-tools:3.0 cb2cb5303 Support configuring cinder's RPC and WSGI timeouts e3413901c Add TLS support to services using memcached b277ccf6b Add EnableCache option to enable/disable usage of memcache 2851c49d0 Move tmpwatch from cron.daily to actual root crontab 3f59a3aa9 Config parameters for timemaster service 7fe8f4175 OVNChassisMacPorts for distributed VLAN 7203afb39 [OVN] Remove check for OVN + Availability Zones 53bf067fb [ffwd][train-only] Copy /boot/grub2/grubenv to /boot/efi/EFI/redhat/grubenv 2416eb3b1 HA: fix race when moving VIP during minor update 9f50fad9a Add non-tls listener to Memcached 546d994d0 Make memcache also listen to localhost 5319872d9 live_migration setting should be under libvirt namespace c69b33e92 Create OVNMacAddrNet network on Undercloud 38bcdfa32 Add posibilities to set ovndbs monitor interval 8ecc24fcc Add TLS capabilities to Memcached service 5ecafca64 Expose mistral::rpc_response_timeout as Heat parameter 37263ee17 Expose max_concurrent_builds as a Heat parameter Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 1 + common/hiera-steps-tasks.yaml | 1 + deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 + deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 23 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/cinder/cinder-api-container-puppet.yaml | 11 +- .../cinder/cinder-backup-container-puppet.yaml | 2 +- deployment/cinder/cinder-base.yaml | 5 + .../cinder/cinder-volume-container-puppet.yaml | 2 +- deployment/database/mysql-base.yaml | 11 + deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/heat/heat-base-puppet.yaml | 24 ++ deployment/horizon/horizon-container-puppet.yaml | 23 +- deployment/ipa/ipaclient-baremetal-ansible.yaml | 1 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 + deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 95 +++++++- .../kernel-boot-params-baremetal-ansible.yaml | 10 + deployment/keystone/keystone-container-puppet.yaml | 107 ++++++--- .../logrotate-crond-container-puppet.yaml | 45 ++-- deployment/manila/manila-api-container-puppet.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 248 ++++++++++++++++----- deployment/metrics/qdr-container-puppet.yaml | 5 - deployment/mistral/mistral-base.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 24 +- deployment/nova/nova-base-puppet.yaml | 24 +- deployment/nova/nova-compute-container-puppet.yaml | 75 +++++-- deployment/nova/nova-ironic-container-puppet.yaml | 11 +- deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova-migration-target-container-puppet.yaml | 38 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 +-- .../octavia/octavia-api-container-puppet.yaml | 2 +- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../ovn/ovn-controller-container-puppet.yaml | 21 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 10 + .../pacemaker/pacemaker-baremetal-puppet.yaml | 2 +- deployment/swift/swift-proxy-container-puppet.yaml | 9 + .../swift/swift-storage-container-puppet.yaml | 9 + .../timemaster/timemaster-baremetal-ansible.yaml | 171 ++++++++++++++ deployment/tls/undercloud-tls.yaml | 3 + .../tripleo-packages-baremetal-puppet.yaml | 59 ++--- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/ssl/enable-memcached-tls.yaml | 10 + environments/standalone/standalone-overcloud.yaml | 2 + environments/standalone/standalone-tripleo.yaml | 2 + environments/undercloud.yaml | 4 + environments/undercloud/undercloud-minion.yaml | 2 + network/network.j2 | 46 ++-- network/ovn_mac_addr_net.yaml | 37 +++ network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 43 ++++ network/ports/port.j2 | 39 ++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 5 + overcloud.j2.yaml | 20 +- puppet/role.role.j2.yaml | 38 ++++ .../notes/add-forcenotsx-36fc6dce46518f5b.yaml | 20 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 + ...er-add-timeout-parameters-54550a6e1c11c0b9.yaml | 6 + .../notes/enable-cache-293c39b3b6f55c80.yaml | 6 + .../innodb-tuning-param-e71d2fd727c450ec.yaml | 6 + ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 + .../monitor_interval_ovndbs-b14c886737965300.yaml | 9 + ...ova-max_concurrent_builds-f900d84f35704452.yaml | 6 + ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 + ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + sample-env-generator/standalone.yaml | 7 + sample-env-generator/undercloud-minion.yaml | 6 +- tools/process-templates.py | 5 + 95 files changed, 1448 insertions(+), 265 deletions(-)

1 0

paunch 5.5.1 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are stoked to announce the release of: paunch 5.5.1: Utility to launch and manage containers using YAML based configuration data This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.5.0..5.5.1 ------------------------------ 9b6bef4 Accept 142 as an exit code Diffstat (except docs and test files) ------------------------------------- paunch/utils/systemd.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

tripleo-image-elements 10.6.3 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are happy to announce the release of: tripleo-image-elements 10.6.3: Disk image builder elements for deploying OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.6.2..10.6.3 ------------------------------------------------ 9b50a3ce additionally remove eth* devices off the overcloud-full image c6d24542 ensure any ens3 interface is nuked during image build 44c79f62 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 7 +++++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- 9 files changed, 13 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index 208e7da0..a11ec8b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0

1 0

tripleo-common 11.7.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are happy to announce the release of: tripleo-common 11.7.0: A common library for TripleO workflows. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 11.6.0..11.7.0 ---------------------------------------- a9863faf Fix site-packages in horizon's extend_start.sh b2024794 Add an internal index to network_data 7599a385 Don't install dhcp-all-interfaces for redhat 8 onwards 32e2249e [Victoria and bellow] Ensure rights on the ansible.log file f8695846 Add host_vars to define tasks executed before network configurations e28d539d Fix neutron driver detection for containers params dbdaa05d Revert "Revert "Fix a couple of Swift healthchecks"" 04dab053 healthcheck_port: drop lsof in favor of awk/find 818695e1 container-images: fix Cinder when running at Edge afc036b2 Add ceph-ansible to tripleoclient container 3158d18a exclude redhat-release from yum update in openstack-base 003ff038 Create a container for Unbound DNS resolver Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/base.yaml | 2 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + container-images/tcib/base/unbound/unbound.yaml | 5 +++ container-images/tripleo_containers.yaml | 2 ++ container-images/tripleo_containers.yaml.j2 | 10 ++++++ healthcheck/common.sh | 42 +++++++++++++++------- .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 ++++ healthcheck/swift-account-replicator | 8 ----- healthcheck/swift-account-server | 4 ++- healthcheck/swift-container-replicator | 8 ----- healthcheck/swift-container-server | 4 ++- healthcheck/swift-object-replicator | 8 ----- healthcheck/swift-object-server | 15 +++++++- healthcheck/swift-proxy | 2 +- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/actions/ansible.py | 5 +++ tripleo_common/actions/templates.py | 4 +++ tripleo_common/image/kolla_builder.py | 2 ++ tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ 41 files changed, 124 insertions(+), 51 deletions(-)

1 0

tripleo-validations 11.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We enthusiastically announce the release of: tripleo-validations 11.6.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 11.5.0..11.6.0 --------------------------------------------- 4dd513c [train-only] Set oc_container_cli for checks during ffu 386f41d [train-only] Inventory doesn't contain admin password 1121883 [train-only] Set container_client for checks during ffu df505cc [overcloud-service-status] Removing pre-upgrade 3e0e274 Check for dangling images b1ee6a4 Add validation to check DockerInsecureRegistryAddress matches the UC hostname fd9a540 Exposing default variables in playbook 07ffeb1 Validation should use the public endpoint 6ee98fb Make tls_everywhere validations compatible with ansible_facts 588b67b More detail in arg validation 74b064c Use a more targeted job for tripleo-validations 8c28b3c Use static inventory for component CI role and clean component list 56859ce check-ram is not compat w/ upstream 31577df Fix set by merging two list without duplicate 5df68a4 Add validation to verify undercloud.conf content. 34a8596 Add system encoding to pre-update stage. f1364e9 Add update roles on several validations. 711337e Add new Update validation groups. f65ec44 Add new tripleo-latest-packages-version playbook Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 +++++ playbooks/check-undercloud-conf.yaml | 15 +++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 21 +++++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 6 ++ roles/check_for_dangling_images/README.md | 37 +++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 +++++++ .../molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++++ .../molecule/default/molecule.yml | 47 ++++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 +++++++++ roles/check_uc_hostname/README.md | 39 ++++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 58 +++++++++++++++++ .../molecule/default/molecule.yml | 49 +++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++++ roles/check_undercloud_conf/defaults/main.yml | 41 ++++++++++++ .../molecule/config_OK/Dockerfile | 37 +++++++++++ .../molecule/config_OK/converge.yml | 45 ++++++++++++++ .../molecule/config_OK/molecule.yml | 52 ++++++++++++++++ .../molecule/config_OK/prepare.yml | 65 +++++++++++++++++++ .../molecule/default/Dockerfile | 37 +++++++++++ .../molecule/default/converge.yml | 55 +++++++++++++++++ .../molecule/default/molecule.yml | 52 ++++++++++++++++ .../molecule/default/prepare.yml | 34 ++++++++++ .../molecule/deprecated_drivers/Dockerfile | 37 +++++++++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++++++++++++++ .../molecule/deprecated_drivers/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_drivers/prepare.yml | 65 +++++++++++++++++++ .../molecule/deprecated_params/Dockerfile | 37 +++++++++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++++++++++++ .../molecule/deprecated_params/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_params/prepare.yml | 51 +++++++++++++++ .../molecule/required_missing/Dockerfile | 37 +++++++++++ .../molecule/required_missing/converge.yml | 71 +++++++++++++++++++++ .../molecule/required_missing/molecule.yml | 52 ++++++++++++++++ .../molecule/required_missing/prepare.yml | 63 +++++++++++++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++++++++++ roles/check_undercloud_conf/tasks/main.yml | 69 +++++++++++++++++++++ roles/container_status/tasks/main.yaml | 22 +++++-- roles/nova_status/molecule/default/converge.yml | 2 +- roles/nova_status/tasks/main.yml | 18 ++++-- .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++--- tripleo_validations/utils.py | 16 +++-- zuul.d/base.yaml | 9 +++ zuul.d/layout.yaml | 57 +++++++++-------- zuul.d/molecule.yaml | 38 +++++++++++- 70 files changed, 2077 insertions(+), 81 deletions(-)

1 0

tripleo-puppet-elements 11.3.1 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We contentedly announce the release of: tripleo-puppet-elements 11.3.1: Puppet building rules for OpenStack images. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.3.0..11.3.1 ------------------------------------------------- 9d10d8e overcloud-compute: add linuxptp package for timemaster service Diffstat (except docs and test files) ------------------------------------- .../overcloud-compute/install.d/package-installs-overcloud-compute | 3 ++- elements/overcloud-compute/pkg-map | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-)

1 0

python-tripleoclient 12.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are pumped to announce the release of: python-tripleoclient 12.6.0: TripleO client This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.6.0 ^^^^^^ Bug Fixes * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. More information here: https://access.redhat.com/solutions/6036141 Changes in python-tripleoclient 12.5.0..12.6.0 ---------------------------------------------- 95feb7c2 BnR Typo missing some spaces between words on the command help b0fa4257 Remove --extra-env-vars from the mutually exclusive arg group 050c9aa9 [train-only] post stack creation tsx validation 53c763d6 Fix validations listing when filtering by group(s) ebb8d56b Declare is_failed_validation variable before if statement e2cba545 [only-train] BnR overwrite the json output 48e4ed8e Overcloud image has missing kernel_id and ramdisk_id properties 83b24933 Replace exception with LOG.info 73d1ee27 [train-only] Trap empty role data 5c7ae38d Copy the inventory for standalone deploy in output_dir 10e5640f Use ceph_mon_network to find Ceph monitor IPs for export 429169bd Use validation framework for running undercloud checkdisk 1a64962d Move static-inventory option into parser group Diffstat (except docs and test files) ------------------------------------- .../notes/tsx-validation-f663a9f14b2aff3d.yaml | 17 +++++++ tripleoclient/constants.py | 4 +- tripleoclient/exceptions.py | 4 ++ tripleoclient/export.py | 19 +++++++- tripleoclient/v1/overcloud_backup.py | 7 +-- tripleoclient/v1/overcloud_deploy.py | 56 ++++++++++++++++++---- tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/overcloud_update.py | 8 ++++ tripleoclient/v1/overcloud_upgrade.py | 7 +++ tripleoclient/v1/tripleo_deploy.py | 4 ++ tripleoclient/v1/tripleo_validator.py | 39 ++++++++------- tripleoclient/v1/undercloud_backup.py | 15 +++--- tripleoclient/v1/undercloud_preflight.py | 22 +++++---- 17 files changed, 201 insertions(+), 54 deletions(-)

1 0

puppet-tripleo 11.7.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are amped to announce the release of: puppet-tripleo 11.7.0: Puppet module for OpenStack TripleO This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.7.0 ^^^^^^ New Features ************ * Add parameter for setting monitor interval for ovndbs (default is 30s) Deprecation Notes ***************** * The "enable_cache" and "cache_backend" in "tripleo::profile::base::nova" class were removed because now these parameters are defined in tripleo-heat-templates. Changes in puppet-tripleo 11.6.1..11.7.0 ---------------------------------------- d200d552 Bump last train release 11.7.0 before train extended maintenance ac24e085 [train-only] Fix Automatically set memcache_servers for keystone cache 9f2b7feb Define nova::cache parameters in tht 8d3ea85a Use dogpile.cache.memcached in nova caching 0e38a628 Adding nova::network::neutron to nova-conductor 49728d24 HA: inject public certificates without blocking container e8f473f5 Automatically set memcache_servers for keystone cache 16f1acb9 stable-only: Pin puppetlabs-haproxy 9c298733 Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard 9cabed9d Set ovn_chassis_mac_map in ovn::controller bd1807c4 Move stonith resource creation to step2 53007c0b Always update the local certmonger ca cert 623f4483 Add Memcached certificate generation 5ceab69b Set memcache_servers for heat::cache automatically f11ed7de Add missing unit tests for heat manifests caac40ed Add monitor interval for ovn dbs Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++- files/certmonger-memcached-refresh.sh | 20 +++ files/certmonger-rabbitmq-refresh.sh | 23 ++- manifests/certmonger/ca/local.pp | 1 - manifests/certmonger/memcached.pp | 79 ++++++++++ manifests/haproxy.pp | 32 ++++ manifests/profile/base/certmonger_user.pp | 9 ++ manifests/profile/base/heat.pp | 18 ++- manifests/profile/base/keystone.pp | 5 +- manifests/profile/base/memcached.pp | 35 ++++- manifests/profile/base/neutron/agents/ovn.pp | 22 ++- manifests/profile/base/nova.pp | 10 +- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 19 ++- metadata.json | 2 +- .../monitor_interval_ovndbs-6af18ba7f4a17cc5.yaml | 4 + .../notes/nova-cache-in-tht-533e048fd6ccc65f.yaml | 6 + spec/classes/tripleo_certmonger_ca_local_spec.rb | 4 +- spec/classes/tripleo_certmonger_memcached_spec.rb | 60 ++++++++ .../tripleo_profile_base_heat_api_cfn_spec.rb | 105 +++++++++++++ spec/classes/tripleo_profile_base_heat_api_spec.rb | 105 +++++++++++++ .../tripleo_profile_base_heat_engine_spec.rb | 97 ++++++++++++ spec/classes/tripleo_profile_base_heat_spec.rb | 166 +++++++++++++++++++++ spec/classes/tripleo_profile_base_keystone_spec.rb | 10 +- .../classes/tripleo_profile_base_memcached_spec.rb | 76 ++++++++++ .../tripleo_profile_base_nova_conductor_spec.rb | 2 + spec/classes/tripleo_profile_base_nova_spec.rb | 2 - spec/fixtures/hieradata/default.yaml | 5 + 30 files changed, 905 insertions(+), 42 deletions(-)

1 0

swift 2.23.3 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are overjoyed to announce the release of: swift 2.23.3: OpenStack Object Storage This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.23.3 ^^^^^^ Bug Fixes * Sharding improvements: * Prevent object updates from auto-creating shard containers. This ensures more consistent listings for sharded containers during rebalances. * Deleted shard containers are no longer considered root containers. This prevents unnecessary sharding audit failures and allows the deleted shard database to actually be unlinked. * The sharder daemon has been enhanced to better support the shrinking of shards that are no longer required. Shard containers will now discover from their root container if they should be shrinking. They will also discover the shards into which they should shrink, which may include the root container itself. * Improved performance of sharded container listings when performing prefix listings. * Improved container-sharder stat reporting to reduce load on root container databases. * The container sharder can now handle containers with special characters in their names. * "swift-container-info" now summarizes shard range information. Pass "-v"/"--verbose" if you want to see all of them. * Don't inject shard ranges when user quits. * Various other minor bug fixes and improvements. * Python 3 bug fixes: * Fixed a potential server error when uploading data via a tempurl. * Fixed a potential server error when getting symlink details. * Added the ability to connect to memcached over TLS. See the "tls_*" options in etc/memcache.conf-sample Changes in swift 2.23.2..2.23.3 ------------------------------- 81d845f34 Authors/ChangeLog for 2.23.3 fa6edcc7e symlink: Ensure headers are returned as a list on py3 b2601fe3e tempurl: Fix PUT upload to temp url on py3 96e24bb1d Avoid loops when gathering container listings from shards 80b789226 Populate shrinking shards with shard ranges learnt from root 1f8c16fca Use swiftclient Connections in sharding probe tests 3d8c9e8a3 Refactor audit shard tests 71921f861 container-sharding: Stable overlap order 87c1aa0e0 Address a sharder/replicator race 98da7b093 Identify deleted shards as shards f8f50ca60 swift-container-info: Show shard ranges summary 7ee5fc197 Don't auto-create shard containers 7ed79e3b2 Latch shard-stat reporting 7159cb73d py27: Suppress UnicodeWarnings in ShardRange setters f96f24117 sharding: Add probe test that exercises swift-manage-shard-ranges ac6b89d12 sharding: Don't inject shard ranges when user says quit 086fce5ee sharding: filter shards based on prefix param when listing 4439c0d38 sharding: Better-handle newlines in container names 66b5960ac Give probe tests a second chance to pass 41204a74e Bump up probe test timeout 131093831 Bump up timeouts for DSVM and probe test jobs 0ef0064f0 Bump up ceph tests timeout c1e15d15a Give unit tests a second chance to pass bc03a32e7 s3-tests: Use my s3compat fork instead ab0464a8b s3-tests: Only try to copy outputs when there *are* outputs fc742d602 Prevent upgrading to pip 21+ e828b37ca sharding: Let swift-manage-shard-ranges accept a relative path 2a6ffd33f sharder: quote() more Swift paths when logging c9ca078e7 sharding: Tolerate blank limits when listing 89d22f0c9 Memcached client TLS support d63b7013a [stable-only] Cap bandit to 1.6.2 Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .zuul.yaml | 6 +- AUTHORS | 3 + CHANGELOG | 44 ++ bin/swift-container-info | 4 + bin/swift-container-sharder | 4 + etc/memcache.conf-sample | 22 + etc/proxy-server.conf-sample | 4 + .../notes/2_23_3_release-ee6b4fd785ec377e.yaml | 45 ++ swift/cli/info.py | 46 +- swift/cli/manage_shard_ranges.py | 9 +- swift/common/db.py | 14 +- swift/common/memcached.py | 16 +- swift/common/middleware/memcache.py | 16 +- swift/common/middleware/symlink.py | 2 +- swift/common/middleware/tempurl.py | 2 +- swift/common/utils.py | 58 +- swift/common/wsgi.py | 3 +- swift/container/backend.py | 112 ++- swift/container/server.py | 60 +- swift/container/sharder.py | 255 ++++--- swift/obj/server.py | 8 +- swift/obj/updater.py | 1 + swift/proxy/controllers/container.py | 33 +- swift/proxy/controllers/obj.py | 12 +- test-requirements.txt | 2 +- test/probe/test_sharder.py | 361 +++++++++- test/unit/cli/test_info.py | 88 ++- test/unit/cli/test_manage_shard_ranges.py | 21 +- test/unit/common/middleware/test_memcache.py | 21 + test/unit/common/middleware/test_symlink.py | 1 + test/unit/common/middleware/test_tempurl.py | 36 + test/unit/common/test_db.py | 7 +- test/unit/common/test_memcached.py | 14 + test/unit/common/test_utils.py | 37 +- test/unit/container/test_backend.py | 439 +++++++++++- test/unit/container/test_replicator.py | 87 ++- test/unit/container/test_server.py | 110 ++- test/unit/container/test_sharder.py | 797 +++++++++++++++++++-- test/unit/container/test_updater.py | 91 ++- test/unit/obj/test_server.py | 106 ++- test/unit/obj/test_updater.py | 18 +- test/unit/proxy/controllers/test_container.py | 196 ++++- test/unit/proxy/test_server.py | 6 +- tools/playbooks/common/install_dependencies.yaml | 6 +- tox.ini | 14 +- 49 files changed, 2852 insertions(+), 395 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ff86a01dd..397e6bb89 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -25 +25 @@ keystonemiddleware>=4.17.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<=1.6.2 # Apache-2.0

1 0

tripleo-image-elements 12.2.1 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are overjoyed to announce the release of: tripleo-image-elements 12.2.1: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.0..12.2.1 ------------------------------------------------ 375b4e87 ensure any ens3 interface is nuked during image build cf87fd9e fix python version conflict 3f7f9eed Update .gitreview for stable/victoria b73f4154 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/interface-names/install.d/71-clean-stale-interface | 4 ++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../install.d/os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../install.d/os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 3 +-- 11 files changed, 12 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index f924f319..41ab0c18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0

1 0

tripleo-validations 13.3.0 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are excited to announce the release of: tripleo-validations 13.3.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 13.2.0..13.3.0 --------------------------------------------- 8dcc4a4 [overcloud-service-status] Removing pre-upgrade d996a43 Check for dangling images dad3e9f Add validation to check DockerInsecureRegistryAddress matches the UC hostname 8110e42 Exposing default variables in playbook d7b344b Validation should use the public endpoint 7382be2 Make tls_everywhere validations compatible with ansible_facts 1b62805 More detail in arg validation fe94df5 Use a more targeted job for tripleo-validations 610a038 Use static inventory for component CI role and clean component list 3825c31 check-ram is not compat w/ upstream 37035d5 Standardize zuul configurations files 065e13b Fix set by merging two list without duplicate 042a145 Add update roles on several validations. 3b12012 Use the UBI8 image for testing 1a6b6b5 Add system encoding to pre-update stage. bd8d9ed Add new Update validation groups. 66dfe59 Add new tripleo-latest-packages-version playbook 07c1e0f Introduce tox-ansible to tripleo-validations Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 ++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/package-version.yaml | 1 + playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 15 ++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-ipa-server-check.yaml | 5 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 5 ++ roles/check_for_dangling_images/README.md | 37 ++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 ++++++ .../molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++ .../molecule/default/molecule.yml | 47 +++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 ++++++++ roles/check_uc_hostname/README.md | 39 +++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 58 ++++++++++++++++ .../molecule/default/molecule.yml | 49 ++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++ .../config_OK/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/config_OK/molecule.yml | 22 ++++-- .../molecule/config_OK/prepare.yml | 1 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 22 ++++-- .../molecule/default/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_drivers/molecule.yml | 22 ++++-- .../molecule/deprecated_drivers/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_params/molecule.yml | 22 ++++-- .../molecule/deprecated_params/prepare.yml | 1 + .../required_missing/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/required_missing/molecule.yml | 22 ++++-- .../molecule/required_missing/prepare.yml | 1 + roles/check_undercloud_conf/tasks/main.yml | 2 + .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++-- tox.ini | 7 ++ tripleo_validations/utils.py | 2 +- zuul.d/base.yaml | 24 +++++++ zuul.d/layout.yaml | 40 +++++++++++ .zuul.yaml => zuul.d/molecule.yaml | 79 +++++++--------------- 61 files changed, 949 insertions(+), 112 deletions(-)

1 0

os-apply-config 12.0.1 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We high-spiritedly announce the release of: os-apply-config 12.0.1: Config files from cloud metadata This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 13.0.0..12.0.1 ----------------------------------------- ee9ed5c Remove tripleo-multinode-container-minimal from zuul layout 8ebbbe9 Update TOX_CONSTRAINTS_FILE for stable/victoria 4f79e1f Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_apply_config/apply_config.py | 2 ++ os_apply_config/renderers.py | 2 +- os_apply_config/value_types.py | 2 +- test-requirements.txt | 4 +--- tox.ini | 2 +- zuul.d/layout.yaml | 2 -- 7 files changed, 7 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index de9adfe..8b130d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +11,0 @@ testtools>=2.2.0 # MIT -pyflakes>=2.2.0

1 0

tripleo-heat-templates 13.3.0 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are jazzed to announce the release of: tripleo-heat-templates 13.3.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * The "OS::TripleO::{{role.name}}::PreNetworkConfig" resource has been restored. This resource can be used to implement any configuration steps executed before network configurations are applied. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * Now "ExtraConfigPre" resource and "NodeExtraConfig" resource are executed after network configurations are applied in nodes. This is consitent with the previous version with heat software deployment mechanism instead of config-download. * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 13.2.0..13.3.0 ------------------------------------------------ 4890946ec Fix network_cidrs when ManageNetworks: false 0eaa748bb Add dependency on OVNMacAddressNetwork for role ResourceGroup f35479563 Set tags on all OS::Neutron::Port resources 007eaecf0 Stop handler flush cf17ac91e Add tags to THT network resources d39526de1 Fix "ManageNetworks" use-case 9b67d6420 Add new options for Barbican PKCS#11 backend b4cec5b72 Add OVNEncapType option to the ovn controller template b6d85231a Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 86de3c350 Disable tunneled mode when use_tls_for_live_migration 0fba0ce39 Add openstack-tox-tht to the gate 9536a5f31 Fix RoleParameters in tuned-baremetal-ansible.yaml 1311f8a52 Don't assume every role has default_route_networks 1785dabb8 Correct metrics_qdr logging path and regex parsing 521eae135 Run update tasks with become c71b72b29 Stop using (and breaking) /var/tmp for horizon temporary things f8485c9db Moving nova-consoleauth to step4 6ba1d84a4 Missing client certificate for live-migration with TLS 50c089a1f Add RootStackName to group_vars 48c444796 Add systemd dependency to openvswitch to ovn-controller b542452cc Disabling LM PostCopy and AutoConverge for RT roles ce9ae8666 Mount /etc/openldap inside the keystone container 9befbde21 Limit access to sshd used for nova migration b276cb24b Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" e1998a8e5 Ensure ansible_fqdn is set 5171cd3d7 Fix NovaVncProxyNetwork removal df04e9518 Remove no longer used NovaNfsEnabled parameter and condtion de98fdb20 HA: fix race when moving VIP during minor update 1e137876a [update][upgrade] Use container-tools:3.0 63001263a HA: inject public certificates without blocking container 5325ac311 Move tmpwatch from cron.daily to actual root crontab 4260d30ea Set vlan-limit value depending on vlan_transparent setting c2e62032b Correct spelling mistake 4be137395 Config parameters for timemaster service 721a8d414 [OVN] Remove check for OVN + Availability Zones 87fc83d7b Restore PreNetworkConfig resources 9ba03482c live_migration setting should be under libvirt namespace 05b191d3e Use single NovaLibvirtNetwork to configure instance console components 178018d90 Switch Octavia external tasks to 'post deploy' Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 31 +++- deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 ++ deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 20 ++- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/horizon/horizon-container-puppet.yaml | 23 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 ++ deployment/keystone/keystone-container-puppet.yaml | 1 + .../logrotate-crond-container-puppet.yaml | 45 ++++-- deployment/metrics/qdr-container-puppet.yaml | 4 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- deployment/nova/nova-compute-container-puppet.yaml | 58 ++++--- deployment/nova/nova-ironic-container-puppet.yaml | 12 -- deployment/nova/nova-libvirt-container-puppet.yaml | 25 ++- .../nova-migration-target-container-puppet.yaml | 52 ++++--- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 ++-- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../ovn/ovn-controller-container-puppet.yaml | 24 ++- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 171 +++++++++++++++++++++ deployment/timesync/chrony-baremetal-ansible.yaml | 2 - deployment/tls/undercloud-tls.yaml | 3 + deployment/tuned/tuned-baremetal-ansible.yaml | 19 ++- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 2 +- network/config/bond-with-vlans/role.role.j2.yaml | 2 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 2 +- network/config/multiple-nics/role.role.j2.yaml | 2 +- .../role.role.j2.yaml | 2 +- network/config/single-nic-vlans/role.role.j2.yaml | 2 +- network/network.j2 | 63 +++++--- network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 16 ++ network/ports/port.j2 | 39 +++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 2 + overcloud.j2.yaml | 24 ++- puppet/role.role.j2.yaml | 13 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 ++ .../notes/bug-1907214-df2f07cbacbe8a24.yaml | 13 ++ ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 ++ ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 ++ ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + tools/process-templates.py | 5 + zuul.d/layout.yaml | 1 + 60 files changed, 751 insertions(+), 181 deletions(-)

1 0