June 2021 - Release-announce - lists.openstack.org

puppet-tripleo 12.6.1 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are satisfied to announce the release of: puppet-tripleo 12.6.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.6.0..12.6.1 ---------------------------------------- d3d1a63c Bump metadata for tripleo ussuri release e525aa15 Add option to set rsyslog reopenOnTruncate parameter for all services 33bfb4a0 Adding nova::network::neutron to nova-conductor e09d2a19 HA: inject public certificates without blocking container c04b6b52 Use puppet-openstack-module-unit-jobs to define unit test jobs 86d357cd Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard d9857e6f Move stonith resource creation to step2 379895e7 stable-only: Pin puppetlabs-haproxy e3c3b7cf Set ovn_chassis_mac_map in ovn::controller Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++++++++---- files/certmonger-rabbitmq-refresh.sh | 23 ++++++++++++++-- manifests/haproxy.pp | 32 ++++++++++++++++++++++ manifests/profile/base/logging/rsyslog.pp | 11 +++++++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++++++++-- manifests/profile/base/neutron/agents/ovn.pp | 22 +++++++++++---- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +++++- metadata.json | 2 +- .../tripleo_profile_base_nova_conductor_spec.rb | 2 ++ zuul.d/layout.yaml | 16 +---------- 12 files changed, 126 insertions(+), 33 deletions(-)

1 0

tripleo-common 12.4.5 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are stoked to announce the release of: tripleo-common 12.4.5: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.4..12.4.5 ---------------------------------------- 833ef486 Fix config parsing in memcached healthcheck 9e22f65e Fix site-packages in horizon's extend_start.sh 83e63e44 Add an internal index to network_data 813a7382 Don't install dhcp-all-interfaces for redhat 8 onwards 8a3a3194 Add host_vars to define tasks executed before network configurations 314487b9 Fix neutron driver detection for containers params 654dc085 healthcheck_port: drop lsof in favor of awk/find Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- healthcheck/common.sh | 40 ++++++++++++++++------ healthcheck/memcached | 18 ++++++++-- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/image/kolla_builder.py | 12 ++++--- tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ tripleo_common/utils/template.py | 4 +++ 28 files changed, 93 insertions(+), 28 deletions(-)

1 0

os-collect-config 11.0.4 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: os-collect-config 11.0.4: Collect and cache metadata, run hooks on changes. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.3..11.0.4 ------------------------------------------- 1bdb361 Update TOX_CONSTRAINTS_FILE for stable/ussuri 385ad80 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

tripleo-heat-templates 14.1.2 (wallaby)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We eagerly announce the release of: tripleo-heat-templates 14.1.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.1.2 ^^^^^^ New Features * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. Changes in tripleo-heat-templates 14.1.1..14.1.2 ------------------------------------------------ 3ed600963 Pass custom CephConfigPath parameter to ceph-nfs role b2a8641a5 set ganesha idmap.conf file path and overrides 74e3884b4 Fix cinder's cephx keyring file permissions aaf57f21d Allow customizing podman's [engine]/events_logger ef96bfd19 Include the standalone ganesha tasks when ceph is external 0efd6f067 Disable tunnelled migration f006d0156 Added the posibility of skipping the NFS ping test on the rear installation 218f5f31a Add environment for external network VIP e15bfa6d8 Add OVNCMSOptions to Controller and Networker roles 3030fce6f Remove Ceph cluster replica and PG num from low-memory-usage.yaml 0b26b18e0 Skip cephadm playbook when there is no mon or nfs group 42f59769f Expose the monitoring_stack network to cephadm 1f7de63e5 Use collection FQCN for podman modules 0592cb32b Fix network_cidrs when ManageNetworks: false 8775a8bbe Move ceph_admin_extra_vars logic to tripleo-ansible d6c2740a8 Make clustercheck service accessible over socat acd41a608 Add neutron port tag hint for role name e86165354 Introduce CephHciOsdCount and CephHciOsdType 326452e58 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 36c16a189 Don't add external tasks for roles with zero count f17db7153 Add openstack-tox-tht to the gate bc232904a Fix RoleParameters in tuned-baremetal-ansible.yaml d172a7b58 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ci/environments/scenario001-standalone.yaml | 1 + common/deploy-steps.j2 | 25 ++++++++--- deployed-server/deployed-neutron-port.yaml | 5 +++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 +++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++++ deployment/cephadm/ceph-base.yaml | 24 ++++------- deployment/cephadm/ceph-client.yaml | 12 ++++++ deployment/cephadm/ceph-grafana.yaml | 5 +++ deployment/cephadm/ceph-nfs.yaml | 13 ++++++ deployment/cephadm/ceph-osd.yaml | 32 ++++++++++++++ deployment/cinder/cinder-api-container-puppet.yaml | 2 +- .../cinder/cinder-common-container-puppet.yaml | 50 +++++++++++++--------- deployment/database/mysql-container-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 30 ++----------- .../nova/nova-conductor-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-container-puppet.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 2 +- .../pacemaker/clustercheck-container-puppet.yaml | 19 +++++++- deployment/podman/podman-baremetal-ansible.yaml | 11 ++++- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +++++++- environments/external-network-vip.yaml | 5 +++ environments/low-memory-usage.yaml | 4 -- environments/manila-cephfsganesha-config.yaml | 4 ++ network/network.j2 | 24 +++-------- network/ports/deployed_port.j2 | 5 +++ network/ports/noop.yaml | 5 +++ network/ports/port.j2 | 9 ++++ network/ports/port_from_pool.j2 | 5 +++ network/service_net_map.j2.yaml | 1 + puppet/role.role.j2.yaml | 1 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 +++ roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + zuul.d/layout.yaml | 1 + 49 files changed, 270 insertions(+), 105 deletions(-)

1 0

puppet-ovn 17.5.0 (victoria)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We are jazzed to announce the release of: puppet-ovn 17.5.0: Puppet module for OVN This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 17.4.0..17.5.0 ------------------------------------ 406ecb3 Prepare a new release for victoria 490f7e5 Set external_ids:ovn-chassis-mac-mappings 854e7a6 Update TOX_CONSTRAINTS_FILE for stable/victoria d54e95e Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 2 +- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 21 +++++++++++++++ tox.ini | 2 +- 6 files changed, 60 insertions(+), 3 deletions(-)

1 0

oslo.limit 1.4.0 (xena)
by no-reply＠openstack.org 10 Jun '21

10 Jun '21

We are chuffed to announce the release of: oslo.limit 1.4.0: Limit enforcement library to assist with quota calculation. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 1.3.0..1.4.0 ---------------------------------- caa75c1 Add a test fixture 1175b0f Add Enforcer.calculate_usage() efc26ae Upgrade the pre-commit-hooks version 52a7eaa Add Python3 xena unit tests 9ebe3c6 Update master for stable/wallaby 7f16772 Fix requirements issues fc270af Use TOX_CONSTRAINTS_FILE 6115a3e remove unicode from code e4583b6 add py38 matedata Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++-- .zuul.yaml | 3 +- lower-constraints.txt | 8 ---- oslo_limit/fixture.py | 75 ++++++++++++++++++++++++++++++++ oslo_limit/limit.py | 64 ++++++++++++++++++++++++++-- releasenotes/source/conf.py | 16 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 8 +--- 18 files changed, 365 insertions(+), 33 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ecb5e3a..b9fffd4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5 @@ +fixtures>=3.0.0 # Apache-2.0/BSD

1 0

osprofiler 3.4.1
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are pleased to announce the release of: osprofiler 3.4.1: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. Changes in osprofiler 3.4.0..3.4.1 ---------------------------------- 951efdc Uncap PrettyTable d153b99 Move flake8 as a pre-commit local target. bcca5bd Dropping lower constraints testing 42d5819 Use py3 as the default runtime for tox 2794b98 Adding pre-commit 22d6bff ignore reno generated artifacts d0d65fd Add Python3 wallaby unit tests ba16314 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .pre-commit-config.yaml | 39 +++++++ .zuul.yaml | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 2 +- test-requirements.txt | 2 + tools/lint.py | 4 +- tools/patch_tox_venv.py | 3 +- tox.ini | 5 +- 12 files changed, 96 insertions(+), 168 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7719bc4..de2d919 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.utils>=3.33.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.2 # BSD +PrettyTable>=0.7.2 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index a227fe4..a2ca153 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27,0 +28,2 @@ jaeger-client>=3.8.0 # Apache-2.0 + +pre-commit>=2.6.0 # MIT

1 0

python-neutronclient 7.5.0 (xena)
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are thrilled to announce the release of: python-neutronclient 7.5.0: CLI and Client Library for OpenStack Networking This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.5.0 ^^^^^ Deprecation Notes * "neutron" CLI will be removed in 'Z' release. While it has been marked as deprecated for removal for long, all features in "neutron" CLI have been supported in "openstack" CLI (OpenStackClient) as of Xena release and the neutron team plans to remove it in 'Z' release. Consider using "openstack" CLI and Mapping Guide in the OSC documentation would help you. Changes in python-neutronclient 7.4.0..7.5.0 -------------------------------------------- ae39756 Add a release note on deprecation for removal of neutron CLI 76dd26f Set when deprecated neutron client CLI will be removed 439e290 Skip metering functional tests when metering extension is not enabled Diffstat (except docs and test files) ------------------------------------- neutronclient/shell.py | 2 +- .../notes/neutron-cli-deprecation-398823c87270a296.yaml | 10 ++++++++++ 4 files changed, 18 insertions(+), 4 deletions(-)

1 0

tripleo-common 15.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are psyched to announce the release of: tripleo-common 15.2.1: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.0..15.2.1 ---------------------------------------- acead380 Remove xinetd from the mariadb container 10ea6944 Fix config parsing in memcached healthcheck 41976688 Make the clustercheck healthcheck work with socat 5c5b08b4 Ignore OVN Bridge MAC net for inventory generation 983377ba Disable neutron inventory src if no ctlplane ports e25e523d Ignore non host ports by tag filtering b81b1ea1 Fix site-packages in horizon's extend_start.sh 99ec07c5 Strip final dot of the fqdn hostname and dnsname 0a7cfe39 Skip port if it's on the OVN MAC Net Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/mariadb/mariadb.yaml | 2 +- healthcheck/mariadb | 19 ++++++++--- healthcheck/memcached | 18 ++++++++-- tripleo_common/constants.py | 4 +++ tripleo_common/inventory.py | 39 ++++++++++++++++++++++ 8 files changed, 100 insertions(+), 31 deletions(-)

1 0

python-tripleoclient 16.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are glad to announce the release of: python-tripleoclient 16.2.1: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 16.2.0..16.2.1 ---------------------------------------------- 2663a5f2 BnR Typo missing some spaces between words on the command help 0886ecd1 Use Validations libs Client for main validation entry point 234a41b7 Ephemeral Heat: Add a --refresh option to external update run 4ed3d8b4 Ephemeral Heat unit tests b90a7196 Don't run containers in interactive mode fea5819c BnR added error msg in case there is no inventory 2006c0ff Auto OVN bridge mac mappings for standalone 516b39d6 Wait for Heat message queues Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tripleoclient/exceptions.py | 4 + tripleoclient/heat_launcher.py | 233 +++++--- .../test_overcloud_external_update.py | 36 ++ tripleoclient/utils.py | 5 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/tripleo_deploy.py | 15 + tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 508 ++--------------- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/workflows/deployment.py | 14 +- 20 files changed, 1193 insertions(+), 635 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4cb0a298..9c80b5a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file

1 0

keystone 16.0.2 (train)
by no-reply＠openstack.org 07 Jun '21

07 Jun '21

We contentedly announce the release of: keystone 16.0.2: OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 16.0.2 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207) Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137) Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938) Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753) Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1889936 (https://bugs.launchpad.net/keystone/+bug/1889936) Properly decode octet strings, or byte arrays, returned from LDAP. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125) Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654) Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 16.0.1..16.0.2 ---------------------------------- 1b573ae7d Hide AccountLocked exception from end users 328cf33aa Retry update_user when sqlalchemy raises StaleDataErrors f10ff1c9a Support bytes type in generate_public_ID() 9c879d46b Use app cred user ID in policy enforcement b49a465ed Drop lower-constraints job 9beb3a580 Properly handle octet (byte) strings when converting LDAP responses 105f95795 Implement more robust connection handling for asynchronous LDAP calls e8b477847 Delete system role assignments from system_assignment table 28d2dd19e Make opensuse jobs nonvoting fb7d54543 Fix lower-constraint for PyMySQL 13f965e1f fix link in release note of bug/1794527 247227f3f Change time faking for totp test 7eeb144b7 Stop explicitly requiring pycodestyle 184bb8289 Revert "Temporarily disable k2k tests on train and stein" 93f548a72 Refactor some ldap code to implement TODOs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - keystone/api/users.py | 47 +++++- keystone/assignment/backends/sql.py | 5 + keystone/identity/backends/ldap/common.py | 161 +++++++++++++-------- keystone/identity/backends/sql.py | 8 + keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++ .../unit/identity/backends/test_ldap_common.py | 14 ++ lower-constraints.txt | 8 +- .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 + .../notes/bug-1794527-866b1caff67977f3.yaml | 2 +- .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 + .../notes/bug-1889936-78d6853b5212b8f1.yaml | 5 + .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 + .../notes/bug-1901207-13762f85b8a04481.yaml | 7 + .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ setup.cfg | 3 +- test-requirements.txt | 1 - 27 files changed, 397 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a86a1fa44..6cdc34d31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ pep257==0.7.0 # MIT License -pycodestyle>=2.0.0 # MIT License

1 0

keystoneauth1 3.17.4 (train)
by no-reply＠openstack.org 07 Jun '21

07 Jun '21

We eagerly announce the release of: keystoneauth1 3.17.4: Authentication Library for OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.17.4 ^^^^^^ Bug Fixes * [bug 1838704 (https://bugs.launchpad.net/keystone/+bug/1838704) When consuming keystoneauth1.session.Session, if a requests session is not provided one is created. The Session used for requests may result in a ResourceWarning being generated if it is not properly closed. The code has been updated to close the session correctly when the Session object is deleted. Changes in keystoneauth1 3.17.3..3.17.4 --------------------------------------- 8dc7366 Cleanup session on delete Diffstat (except docs and test files) ------------------------------------- keystoneauth1/session.py | 18 ++++++++++++++++++ .../cleanup-session-on-delete-1ed6177d4c5c1f83.yaml | 9 +++++++++ 3 files changed, 35 insertions(+)

1 0

tripleo-heat-templates 11.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are excited to announce the release of: tripleo-heat-templates 11.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.6.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * New "CinderRpcResponseTimeout" and "CinderApiWsgiTimeout" parameters provide a means for configuring Cinder's RPC response and WSGI connection timeouts, respectively. * The new "EnableCache" parameter is added to enable/disable chacing using memcached services. The parameter is true by default, but should be false when memcached service is disabled in the deployment. * The MariaDB tuning parameter for Innodb_buffer_pool_size can now be set via a new TripleO Heat Template parameter 'MysqlInnodbBufferPoolSize'. By default this is undefined. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Add posibilities to configure ovn dbs monitor interval in tht by OVNDBSPacemakerMonitorInterval (default 30s). Under load, this can create extra stress and since the timeout has already been bumped, it makes sense to bump this interval to a higher value as a trade off between detecting a failure and stressing the service. * The nova-ironic setting for 'max_concurrent_builds' can now be set via the use of a new TripleO Heat templates parameter 'IronicMaxConcurrentBuilds'. It is set to the service default of 10 by default in TripleO Heat templates. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. The *ForceNoTsx* flag will disable this validation on a per-role basis. More information here: https://access.redhat.com/solutions/6036141 * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 11.5.0..11.6.0 ------------------------------------------------ 42a5f7f1b [ffwd] Add legacy cinderv3 volume cleanup to postupgrade fee55d5dc Fix network_cidrs when ManageNetworks: false 7840da001 [train-only] Adding ForceNoTsx flag d0ba2d100 Add dependency on OVNMacAddressNetwork for role ResourceGroup 45b4de27c Set tags on all OS::Neutron::Port resources 88ef493cd Add tags to THT network resources d2d044e02 Add OVNEncapType option to the ovn controller template af8576222 Disable tunneled mode when use_tls_for_live_migration ea9ebddf6 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml c1ee7ccdd [ffwd][train-only] Rebuild clouds.yaml before running keystone endpoint configuration. 8090c8a18 Fix RoleParameters in tuned-baremetal-ansible.yaml ab5d866cb HA: inject public certificates without blocking container 8a7725f42 Add new options for Barbican PKCS#11 backend d7e888ac9 Switch Octavia external tasks to 'post deploy' e8a224f9a [ffwd] Rework checks for hybrid state containers 7768e7608 Run update tasks with become 20561e86c Sync full /etc/leapp/files directory. 373838ffb [train-only] QemuDefaultTLSVerify should be false ff730282a Stop using (and breaking) /var/tmp for horizon temporary things 002445bea Add RootStackName to group_vars bcc5f03ab Moving nova-consoleauth to step4 ac1584a44 Missing client certificate for live-migration with TLS c9fa94dd5 Add systemd dependency to openvswitch to ovn-controller 69e24661b Disabling LM PostCopy and AutoConverge for RT roles 70f6c7804 Mount /etc/openldap inside the keystone container 3bbc8af5b Removing duplicate mount point in metrics_qdr a6e524477 Limit access to sshd used for nova migration 3d8acef64 [train-only] Introduce hybrid state for iscsi 0de9ea84f [Train Only] Ensure novajoin code is setting ansible_fqdn f24840a56 Ensure ansible_fqdn is set 860a68a4a Use single NovaLibvirtNetwork to configure instance console components 3b763ab2e [ffwd] Rework WA#1925078 2445de761 Add OVN chassis macs to hieradata 6c62cf789 Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" 489aab582 Expose Innodb_buffer_pool_size 18d40d805 Refactor OVNMacAddressNetwork 7951870db [Train-only] Fix the tripleo-container-stop role in train cbd025a3f [ffwd][train-only] Run keystone endpoint configuration on FFWD a22239e27 Add service ordering to cleanup service to avoid conflicts with agent startup b7ed86c3b [update][upgrade] Use container-tools:3.0 cb2cb5303 Support configuring cinder's RPC and WSGI timeouts e3413901c Add TLS support to services using memcached b277ccf6b Add EnableCache option to enable/disable usage of memcache 2851c49d0 Move tmpwatch from cron.daily to actual root crontab 3f59a3aa9 Config parameters for timemaster service 7fe8f4175 OVNChassisMacPorts for distributed VLAN 7203afb39 [OVN] Remove check for OVN + Availability Zones 53bf067fb [ffwd][train-only] Copy /boot/grub2/grubenv to /boot/efi/EFI/redhat/grubenv 2416eb3b1 HA: fix race when moving VIP during minor update 9f50fad9a Add non-tls listener to Memcached 546d994d0 Make memcache also listen to localhost 5319872d9 live_migration setting should be under libvirt namespace c69b33e92 Create OVNMacAddrNet network on Undercloud 38bcdfa32 Add posibilities to set ovndbs monitor interval 8ecc24fcc Add TLS capabilities to Memcached service 5ecafca64 Expose mistral::rpc_response_timeout as Heat parameter 37263ee17 Expose max_concurrent_builds as a Heat parameter Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 1 + common/hiera-steps-tasks.yaml | 1 + deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 + deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 23 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/cinder/cinder-api-container-puppet.yaml | 11 +- .../cinder/cinder-backup-container-puppet.yaml | 2 +- deployment/cinder/cinder-base.yaml | 5 + .../cinder/cinder-volume-container-puppet.yaml | 2 +- deployment/database/mysql-base.yaml | 11 + deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/heat/heat-base-puppet.yaml | 24 ++ deployment/horizon/horizon-container-puppet.yaml | 23 +- deployment/ipa/ipaclient-baremetal-ansible.yaml | 1 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 + deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 95 +++++++- .../kernel-boot-params-baremetal-ansible.yaml | 10 + deployment/keystone/keystone-container-puppet.yaml | 107 ++++++--- .../logrotate-crond-container-puppet.yaml | 45 ++-- deployment/manila/manila-api-container-puppet.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 248 ++++++++++++++++----- deployment/metrics/qdr-container-puppet.yaml | 5 - deployment/mistral/mistral-base.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 24 +- deployment/nova/nova-base-puppet.yaml | 24 +- deployment/nova/nova-compute-container-puppet.yaml | 75 +++++-- deployment/nova/nova-ironic-container-puppet.yaml | 11 +- deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova-migration-target-container-puppet.yaml | 38 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 +-- .../octavia/octavia-api-container-puppet.yaml | 2 +- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../ovn/ovn-controller-container-puppet.yaml | 21 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 10 + .../pacemaker/pacemaker-baremetal-puppet.yaml | 2 +- deployment/swift/swift-proxy-container-puppet.yaml | 9 + .../swift/swift-storage-container-puppet.yaml | 9 + .../timemaster/timemaster-baremetal-ansible.yaml | 171 ++++++++++++++ deployment/tls/undercloud-tls.yaml | 3 + .../tripleo-packages-baremetal-puppet.yaml | 59 ++--- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/ssl/enable-memcached-tls.yaml | 10 + environments/standalone/standalone-overcloud.yaml | 2 + environments/standalone/standalone-tripleo.yaml | 2 + environments/undercloud.yaml | 4 + environments/undercloud/undercloud-minion.yaml | 2 + network/network.j2 | 46 ++-- network/ovn_mac_addr_net.yaml | 37 +++ network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 43 ++++ network/ports/port.j2 | 39 ++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 5 + overcloud.j2.yaml | 20 +- puppet/role.role.j2.yaml | 38 ++++ .../notes/add-forcenotsx-36fc6dce46518f5b.yaml | 20 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 + ...er-add-timeout-parameters-54550a6e1c11c0b9.yaml | 6 + .../notes/enable-cache-293c39b3b6f55c80.yaml | 6 + .../innodb-tuning-param-e71d2fd727c450ec.yaml | 6 + ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 + .../monitor_interval_ovndbs-b14c886737965300.yaml | 9 + ...ova-max_concurrent_builds-f900d84f35704452.yaml | 6 + ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 + ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + sample-env-generator/standalone.yaml | 7 + sample-env-generator/undercloud-minion.yaml | 6 +- tools/process-templates.py | 5 + 95 files changed, 1448 insertions(+), 265 deletions(-)

1 0

paunch 5.5.1 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are stoked to announce the release of: paunch 5.5.1: Utility to launch and manage containers using YAML based configuration data This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 5.5.0..5.5.1 ------------------------------ 9b6bef4 Accept 142 as an exit code Diffstat (except docs and test files) ------------------------------------- paunch/utils/systemd.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

tripleo-image-elements 10.6.3 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are happy to announce the release of: tripleo-image-elements 10.6.3: Disk image builder elements for deploying OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.6.2..10.6.3 ------------------------------------------------ 9b50a3ce additionally remove eth* devices off the overcloud-full image c6d24542 ensure any ens3 interface is nuked during image build 44c79f62 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 7 +++++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- 9 files changed, 13 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index 208e7da0..a11ec8b4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0

1 0

tripleo-common 11.7.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are happy to announce the release of: tripleo-common 11.7.0: A common library for TripleO workflows. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 11.6.0..11.7.0 ---------------------------------------- a9863faf Fix site-packages in horizon's extend_start.sh b2024794 Add an internal index to network_data 7599a385 Don't install dhcp-all-interfaces for redhat 8 onwards 32e2249e [Victoria and bellow] Ensure rights on the ansible.log file f8695846 Add host_vars to define tasks executed before network configurations e28d539d Fix neutron driver detection for containers params dbdaa05d Revert "Revert "Fix a couple of Swift healthchecks"" 04dab053 healthcheck_port: drop lsof in favor of awk/find 818695e1 container-images: fix Cinder when running at Edge afc036b2 Add ceph-ansible to tripleoclient container 3158d18a exclude redhat-release from yum update in openstack-base 003ff038 Create a container for Unbound DNS resolver Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/base.yaml | 2 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + container-images/tcib/base/unbound/unbound.yaml | 5 +++ container-images/tripleo_containers.yaml | 2 ++ container-images/tripleo_containers.yaml.j2 | 10 ++++++ healthcheck/common.sh | 42 +++++++++++++++------- .../swift-fix-healthchecks-b3a02139230f4258.yaml | 6 ++++ healthcheck/swift-account-replicator | 8 ----- healthcheck/swift-account-server | 4 ++- healthcheck/swift-container-replicator | 8 ----- healthcheck/swift-container-server | 4 ++- healthcheck/swift-object-replicator | 8 ----- healthcheck/swift-object-server | 15 +++++++- healthcheck/swift-proxy | 2 +- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/actions/ansible.py | 5 +++ tripleo_common/actions/templates.py | 4 +++ tripleo_common/image/kolla_builder.py | 2 ++ tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ 41 files changed, 124 insertions(+), 51 deletions(-)

1 0

tripleo-validations 11.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We enthusiastically announce the release of: tripleo-validations 11.6.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 11.5.0..11.6.0 --------------------------------------------- 4dd513c [train-only] Set oc_container_cli for checks during ffu 386f41d [train-only] Inventory doesn't contain admin password 1121883 [train-only] Set container_client for checks during ffu df505cc [overcloud-service-status] Removing pre-upgrade 3e0e274 Check for dangling images b1ee6a4 Add validation to check DockerInsecureRegistryAddress matches the UC hostname fd9a540 Exposing default variables in playbook 07ffeb1 Validation should use the public endpoint 6ee98fb Make tls_everywhere validations compatible with ansible_facts 588b67b More detail in arg validation 74b064c Use a more targeted job for tripleo-validations 8c28b3c Use static inventory for component CI role and clean component list 56859ce check-ram is not compat w/ upstream 31577df Fix set by merging two list without duplicate 5df68a4 Add validation to verify undercloud.conf content. 34a8596 Add system encoding to pre-update stage. f1364e9 Add update roles on several validations. 711337e Add new Update validation groups. f65ec44 Add new tripleo-latest-packages-version playbook Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 +++++ playbooks/check-undercloud-conf.yaml | 15 +++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 21 +++++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 6 ++ roles/check_for_dangling_images/README.md | 37 +++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 +++++++ .../molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++++ .../molecule/default/molecule.yml | 47 ++++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 +++++++++ roles/check_uc_hostname/README.md | 39 ++++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 +++++++++++ .../molecule/default/converge.yml | 58 +++++++++++++++++ .../molecule/default/molecule.yml | 49 +++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++++ roles/check_undercloud_conf/defaults/main.yml | 41 ++++++++++++ .../molecule/config_OK/Dockerfile | 37 +++++++++++ .../molecule/config_OK/converge.yml | 45 ++++++++++++++ .../molecule/config_OK/molecule.yml | 52 ++++++++++++++++ .../molecule/config_OK/prepare.yml | 65 +++++++++++++++++++ .../molecule/default/Dockerfile | 37 +++++++++++ .../molecule/default/converge.yml | 55 +++++++++++++++++ .../molecule/default/molecule.yml | 52 ++++++++++++++++ .../molecule/default/prepare.yml | 34 ++++++++++ .../molecule/deprecated_drivers/Dockerfile | 37 +++++++++++ .../molecule/deprecated_drivers/converge.yml | 71 +++++++++++++++++++++ .../molecule/deprecated_drivers/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_drivers/prepare.yml | 65 +++++++++++++++++++ .../molecule/deprecated_params/Dockerfile | 37 +++++++++++ .../molecule/deprecated_params/converge.yml | 61 ++++++++++++++++++ .../molecule/deprecated_params/molecule.yml | 52 ++++++++++++++++ .../molecule/deprecated_params/prepare.yml | 51 +++++++++++++++ .../molecule/required_missing/Dockerfile | 37 +++++++++++ .../molecule/required_missing/converge.yml | 71 +++++++++++++++++++++ .../molecule/required_missing/molecule.yml | 52 ++++++++++++++++ .../molecule/required_missing/prepare.yml | 63 +++++++++++++++++++ roles/check_undercloud_conf/tasks/check_syntax.yml | 46 ++++++++++++++ roles/check_undercloud_conf/tasks/main.yml | 69 +++++++++++++++++++++ roles/container_status/tasks/main.yaml | 22 +++++-- roles/nova_status/molecule/default/converge.yml | 2 +- roles/nova_status/tasks/main.yml | 18 ++++-- .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++--- tripleo_validations/utils.py | 16 +++-- zuul.d/base.yaml | 9 +++ zuul.d/layout.yaml | 57 +++++++++-------- zuul.d/molecule.yaml | 38 +++++++++++- 70 files changed, 2077 insertions(+), 81 deletions(-)

1 0

tripleo-puppet-elements 11.3.1 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We contentedly announce the release of: tripleo-puppet-elements 11.3.1: Puppet building rules for OpenStack images. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 11.3.0..11.3.1 ------------------------------------------------- 9d10d8e overcloud-compute: add linuxptp package for timemaster service Diffstat (except docs and test files) ------------------------------------- .../overcloud-compute/install.d/package-installs-overcloud-compute | 3 ++- elements/overcloud-compute/pkg-map | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-)

1 0

python-tripleoclient 12.6.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are pumped to announce the release of: python-tripleoclient 12.6.0: TripleO client This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.6.0 ^^^^^^ Bug Fixes * RHEL-8.3 kernel disabled the Intel TSX (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade or update process. We now introduce this validation in tripleoclient to ensure early failure. More information here: https://access.redhat.com/solutions/6036141 Changes in python-tripleoclient 12.5.0..12.6.0 ---------------------------------------------- 95feb7c2 BnR Typo missing some spaces between words on the command help b0fa4257 Remove --extra-env-vars from the mutually exclusive arg group 050c9aa9 [train-only] post stack creation tsx validation 53c763d6 Fix validations listing when filtering by group(s) ebb8d56b Declare is_failed_validation variable before if statement e2cba545 [only-train] BnR overwrite the json output 48e4ed8e Overcloud image has missing kernel_id and ramdisk_id properties 83b24933 Replace exception with LOG.info 73d1ee27 [train-only] Trap empty role data 5c7ae38d Copy the inventory for standalone deploy in output_dir 10e5640f Use ceph_mon_network to find Ceph monitor IPs for export 429169bd Use validation framework for running undercloud checkdisk 1a64962d Move static-inventory option into parser group Diffstat (except docs and test files) ------------------------------------- .../notes/tsx-validation-f663a9f14b2aff3d.yaml | 17 +++++++ tripleoclient/constants.py | 4 +- tripleoclient/exceptions.py | 4 ++ tripleoclient/export.py | 19 +++++++- tripleoclient/v1/overcloud_backup.py | 7 +-- tripleoclient/v1/overcloud_deploy.py | 56 ++++++++++++++++++---- tripleoclient/v1/overcloud_image.py | 4 +- tripleoclient/v1/overcloud_update.py | 8 ++++ tripleoclient/v1/overcloud_upgrade.py | 7 +++ tripleoclient/v1/tripleo_deploy.py | 4 ++ tripleoclient/v1/tripleo_validator.py | 39 ++++++++------- tripleoclient/v1/undercloud_backup.py | 15 +++--- tripleoclient/v1/undercloud_preflight.py | 22 +++++---- 17 files changed, 201 insertions(+), 54 deletions(-)

1 0

puppet-tripleo 11.7.0 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are amped to announce the release of: puppet-tripleo 11.7.0: Puppet module for OpenStack TripleO This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.7.0 ^^^^^^ New Features ************ * Add parameter for setting monitor interval for ovndbs (default is 30s) Deprecation Notes ***************** * The "enable_cache" and "cache_backend" in "tripleo::profile::base::nova" class were removed because now these parameters are defined in tripleo-heat-templates. Changes in puppet-tripleo 11.6.1..11.7.0 ---------------------------------------- d200d552 Bump last train release 11.7.0 before train extended maintenance ac24e085 [train-only] Fix Automatically set memcache_servers for keystone cache 9f2b7feb Define nova::cache parameters in tht 8d3ea85a Use dogpile.cache.memcached in nova caching 0e38a628 Adding nova::network::neutron to nova-conductor 49728d24 HA: inject public certificates without blocking container e8f473f5 Automatically set memcache_servers for keystone cache 16f1acb9 stable-only: Pin puppetlabs-haproxy 9c298733 Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard 9cabed9d Set ovn_chassis_mac_map in ovn::controller bd1807c4 Move stonith resource creation to step2 53007c0b Always update the local certmonger ca cert 623f4483 Add Memcached certificate generation 5ceab69b Set memcache_servers for heat::cache automatically f11ed7de Add missing unit tests for heat manifests caac40ed Add monitor interval for ovn dbs Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-haproxy-refresh.sh | 18 ++- files/certmonger-memcached-refresh.sh | 20 +++ files/certmonger-rabbitmq-refresh.sh | 23 ++- manifests/certmonger/ca/local.pp | 1 - manifests/certmonger/memcached.pp | 79 ++++++++++ manifests/haproxy.pp | 32 ++++ manifests/profile/base/certmonger_user.pp | 9 ++ manifests/profile/base/heat.pp | 18 ++- manifests/profile/base/keystone.pp | 5 +- manifests/profile/base/memcached.pp | 35 ++++- manifests/profile/base/neutron/agents/ovn.pp | 22 ++- manifests/profile/base/nova.pp | 10 +- manifests/profile/base/nova/conductor.pp | 1 + manifests/profile/base/pacemaker.pp | 9 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 19 ++- metadata.json | 2 +- .../monitor_interval_ovndbs-6af18ba7f4a17cc5.yaml | 4 + .../notes/nova-cache-in-tht-533e048fd6ccc65f.yaml | 6 + spec/classes/tripleo_certmonger_ca_local_spec.rb | 4 +- spec/classes/tripleo_certmonger_memcached_spec.rb | 60 ++++++++ .../tripleo_profile_base_heat_api_cfn_spec.rb | 105 +++++++++++++ spec/classes/tripleo_profile_base_heat_api_spec.rb | 105 +++++++++++++ .../tripleo_profile_base_heat_engine_spec.rb | 97 ++++++++++++ spec/classes/tripleo_profile_base_heat_spec.rb | 166 +++++++++++++++++++++ spec/classes/tripleo_profile_base_keystone_spec.rb | 10 +- .../classes/tripleo_profile_base_memcached_spec.rb | 76 ++++++++++ .../tripleo_profile_base_nova_conductor_spec.rb | 2 + spec/classes/tripleo_profile_base_nova_spec.rb | 2 - spec/fixtures/hieradata/default.yaml | 5 + 30 files changed, 905 insertions(+), 42 deletions(-)

1 0

swift 2.23.3 (train)
by no-reply＠openstack.org 04 Jun '21

04 Jun '21

We are overjoyed to announce the release of: swift 2.23.3: OpenStack Object Storage This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.23.3 ^^^^^^ Bug Fixes * Sharding improvements: * Prevent object updates from auto-creating shard containers. This ensures more consistent listings for sharded containers during rebalances. * Deleted shard containers are no longer considered root containers. This prevents unnecessary sharding audit failures and allows the deleted shard database to actually be unlinked. * The sharder daemon has been enhanced to better support the shrinking of shards that are no longer required. Shard containers will now discover from their root container if they should be shrinking. They will also discover the shards into which they should shrink, which may include the root container itself. * Improved performance of sharded container listings when performing prefix listings. * Improved container-sharder stat reporting to reduce load on root container databases. * The container sharder can now handle containers with special characters in their names. * "swift-container-info" now summarizes shard range information. Pass "-v"/"--verbose" if you want to see all of them. * Don't inject shard ranges when user quits. * Various other minor bug fixes and improvements. * Python 3 bug fixes: * Fixed a potential server error when uploading data via a tempurl. * Fixed a potential server error when getting symlink details. * Added the ability to connect to memcached over TLS. See the "tls_*" options in etc/memcache.conf-sample Changes in swift 2.23.2..2.23.3 ------------------------------- 81d845f34 Authors/ChangeLog for 2.23.3 fa6edcc7e symlink: Ensure headers are returned as a list on py3 b2601fe3e tempurl: Fix PUT upload to temp url on py3 96e24bb1d Avoid loops when gathering container listings from shards 80b789226 Populate shrinking shards with shard ranges learnt from root 1f8c16fca Use swiftclient Connections in sharding probe tests 3d8c9e8a3 Refactor audit shard tests 71921f861 container-sharding: Stable overlap order 87c1aa0e0 Address a sharder/replicator race 98da7b093 Identify deleted shards as shards f8f50ca60 swift-container-info: Show shard ranges summary 7ee5fc197 Don't auto-create shard containers 7ed79e3b2 Latch shard-stat reporting 7159cb73d py27: Suppress UnicodeWarnings in ShardRange setters f96f24117 sharding: Add probe test that exercises swift-manage-shard-ranges ac6b89d12 sharding: Don't inject shard ranges when user says quit 086fce5ee sharding: filter shards based on prefix param when listing 4439c0d38 sharding: Better-handle newlines in container names 66b5960ac Give probe tests a second chance to pass 41204a74e Bump up probe test timeout 131093831 Bump up timeouts for DSVM and probe test jobs 0ef0064f0 Bump up ceph tests timeout c1e15d15a Give unit tests a second chance to pass bc03a32e7 s3-tests: Use my s3compat fork instead ab0464a8b s3-tests: Only try to copy outputs when there *are* outputs fc742d602 Prevent upgrading to pip 21+ e828b37ca sharding: Let swift-manage-shard-ranges accept a relative path 2a6ffd33f sharder: quote() more Swift paths when logging c9ca078e7 sharding: Tolerate blank limits when listing 89d22f0c9 Memcached client TLS support d63b7013a [stable-only] Cap bandit to 1.6.2 Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .zuul.yaml | 6 +- AUTHORS | 3 + CHANGELOG | 44 ++ bin/swift-container-info | 4 + bin/swift-container-sharder | 4 + etc/memcache.conf-sample | 22 + etc/proxy-server.conf-sample | 4 + .../notes/2_23_3_release-ee6b4fd785ec377e.yaml | 45 ++ swift/cli/info.py | 46 +- swift/cli/manage_shard_ranges.py | 9 +- swift/common/db.py | 14 +- swift/common/memcached.py | 16 +- swift/common/middleware/memcache.py | 16 +- swift/common/middleware/symlink.py | 2 +- swift/common/middleware/tempurl.py | 2 +- swift/common/utils.py | 58 +- swift/common/wsgi.py | 3 +- swift/container/backend.py | 112 ++- swift/container/server.py | 60 +- swift/container/sharder.py | 255 ++++--- swift/obj/server.py | 8 +- swift/obj/updater.py | 1 + swift/proxy/controllers/container.py | 33 +- swift/proxy/controllers/obj.py | 12 +- test-requirements.txt | 2 +- test/probe/test_sharder.py | 361 +++++++++- test/unit/cli/test_info.py | 88 ++- test/unit/cli/test_manage_shard_ranges.py | 21 +- test/unit/common/middleware/test_memcache.py | 21 + test/unit/common/middleware/test_symlink.py | 1 + test/unit/common/middleware/test_tempurl.py | 36 + test/unit/common/test_db.py | 7 +- test/unit/common/test_memcached.py | 14 + test/unit/common/test_utils.py | 37 +- test/unit/container/test_backend.py | 439 +++++++++++- test/unit/container/test_replicator.py | 87 ++- test/unit/container/test_server.py | 110 ++- test/unit/container/test_sharder.py | 797 +++++++++++++++++++-- test/unit/container/test_updater.py | 91 ++- test/unit/obj/test_server.py | 106 ++- test/unit/obj/test_updater.py | 18 +- test/unit/proxy/controllers/test_container.py | 196 ++++- test/unit/proxy/test_server.py | 6 +- tools/playbooks/common/install_dependencies.yaml | 6 +- tox.ini | 14 +- 49 files changed, 2852 insertions(+), 395 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ff86a01dd..397e6bb89 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -25 +25 @@ keystonemiddleware>=4.17.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<=1.6.2 # Apache-2.0

1 0

tripleo-image-elements 12.2.1 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are overjoyed to announce the release of: tripleo-image-elements 12.2.1: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.0..12.2.1 ------------------------------------------------ 375b4e87 ensure any ens3 interface is nuked during image build cf87fd9e fix python version conflict 3f7f9eed Update .gitreview for stable/victoria b73f4154 Drop pbr version ceiling Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/interface-names/install.d/71-clean-stale-interface | 4 ++-- .../install.d/os-apply-config-source-install/10-os-apply-config | 2 +- .../install.d/os-collect-config-source-install/10-os-collect-config | 2 +- .../install.d/os-net-config-source-install/50-os-net-config-source | 2 +- .../install.d/os-refresh-config-source-install/10-os-refresh-config | 2 +- elements/os-svc-install/bin/os-svc-install | 2 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 3 +-- 11 files changed, 12 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..37516e41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr>=0.11,<2.0 +pbr>=0.11 diff --git a/test-requirements.txt b/test-requirements.txt index f924f319..41ab0c18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=2.0.0 # Apache-2.0

1 0

tripleo-validations 13.3.0 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are excited to announce the release of: tripleo-validations 13.3.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 13.2.0..13.3.0 --------------------------------------------- 8dcc4a4 [overcloud-service-status] Removing pre-upgrade d996a43 Check for dangling images dad3e9f Add validation to check DockerInsecureRegistryAddress matches the UC hostname 8110e42 Exposing default variables in playbook d7b344b Validation should use the public endpoint 7382be2 Make tls_everywhere validations compatible with ansible_facts 1b62805 More detail in arg validation fe94df5 Use a more targeted job for tripleo-validations 610a038 Use static inventory for component CI role and clean component list 3825c31 check-ram is not compat w/ upstream 37035d5 Standardize zuul configurations files 065e13b Fix set by merging two list without duplicate 042a145 Add update roles on several validations. 3b12012 Use the UBI8 image for testing 1a6b6b5 Add system encoding to pre-update stage. bd8d9ed Add new Update validation groups. 66dfe59 Add new tripleo-latest-packages-version playbook 07c1e0f Introduce tox-ansible to tripleo-validations Diffstat (except docs and test files) ------------------------------------- .../roles/role-check_for_dangling_images.rst | 8 +++ groups.yaml | 20 ++++++ playbooks/check-for-dangling-images.yaml | 13 ++++ playbooks/check-uc-hostname.yaml | 15 ++++ playbooks/container-status.yaml | 1 + playbooks/openstack-endpoints.yaml | 2 + playbooks/overcloud-service-status.yaml | 8 ++- playbooks/package-version.yaml | 1 + playbooks/repos.yaml | 1 + playbooks/system_encoding.yaml | 1 + playbooks/tripleo-latest-packages-version.yaml | 15 ++++ playbooks/undercloud-heat-purge-deleted.yaml | 3 +- playbooks/undercloud-ipa-server-check.yaml | 5 +- playbooks/undercloud-service-status.yaml | 2 + role-addition.yml | 5 ++ roles/check_for_dangling_images/README.md | 37 ++++++++++ roles/check_for_dangling_images/defaults/main.yml | 21 ++++++ .../molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 60 ++++++++++++++++ .../molecule/default/molecule.yml | 47 +++++++++++++ roles/check_for_dangling_images/tasks/main.yml | 28 ++++++++ roles/check_uc_hostname/README.md | 39 +++++++++++ roles/check_uc_hostname/defaults/main.yml | 23 +++++++ .../check_uc_hostname/molecule/default/Dockerfile | 35 ++++++++++ .../molecule/default/converge.yml | 58 ++++++++++++++++ .../molecule/default/molecule.yml | 49 ++++++++++++++ .../check_uc_hostname/molecule/default/prepare.yml | 72 ++++++++++++++++++++ roles/check_uc_hostname/tasks/main.yml | 72 ++++++++++++++++++++ .../config_OK/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/config_OK/molecule.yml | 22 ++++-- .../molecule/config_OK/prepare.yml | 1 + .../molecule/default/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/default/molecule.yml | 22 ++++-- .../molecule/default/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_drivers/molecule.yml | 22 ++++-- .../molecule/deprecated_drivers/prepare.yml | 1 + .../{Dockerfile.j2 => Dockerfile} | 0 .../molecule/deprecated_params/molecule.yml | 22 ++++-- .../molecule/deprecated_params/prepare.yml | 1 + .../required_missing/{Dockerfile.j2 => Dockerfile} | 0 .../molecule/required_missing/molecule.yml | 22 ++++-- .../molecule/required_missing/prepare.yml | 1 + roles/check_undercloud_conf/tasks/main.yml | 2 + .../resources/scripts/http_server.py | 12 ++-- .../overcloud_service_status/tasks/os_service.yml | 4 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/tls_everywhere/tasks/common.yaml | 2 +- roles/tls_everywhere/tasks/ipa-server-check.yaml | 4 +- roles/tripleo_validations/defaults/main.yml | 1 + roles/tripleo_validations/tasks/run.yml | 2 +- roles/tripleo_validations/vars/main.yml | 6 +- scripts/tripleo-ansible-inventory | 22 ++++-- tox.ini | 7 ++ tripleo_validations/utils.py | 2 +- zuul.d/base.yaml | 24 +++++++ zuul.d/layout.yaml | 40 +++++++++++ .zuul.yaml => zuul.d/molecule.yaml | 79 +++++++--------------- 61 files changed, 949 insertions(+), 112 deletions(-)

1 0

os-apply-config 12.0.1 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We high-spiritedly announce the release of: os-apply-config 12.0.1: Config files from cloud metadata This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 13.0.0..12.0.1 ----------------------------------------- ee9ed5c Remove tripleo-multinode-container-minimal from zuul layout 8ebbbe9 Update TOX_CONSTRAINTS_FILE for stable/victoria 4f79e1f Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_apply_config/apply_config.py | 2 ++ os_apply_config/renderers.py | 2 +- os_apply_config/value_types.py | 2 +- test-requirements.txt | 4 +--- tox.ini | 2 +- zuul.d/layout.yaml | 2 -- 7 files changed, 7 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index de9adfe..8b130d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +11,0 @@ testtools>=2.2.0 # MIT -pyflakes>=2.2.0

1 0

tripleo-heat-templates 13.3.0 (victoria)
by no-reply＠openstack.org 03 Jun '21

03 Jun '21

We are jazzed to announce the release of: tripleo-heat-templates 13.3.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * Added new options for deploying Barbican with PKCS#11 backends: *BarbicanPkcs11CryptoTokenLabels* and *BarbicanPkcs11CryptoOsLockingOk* * The "OS::TripleO::{{role.name}}::PreNetworkConfig" resource has been restored. This resource can be used to implement any configuration steps executed before network configurations are applied. * *QemuDefaultTLSVerify* will allow operators to enable or disable TLS client certificate verification. Enabling this option will reject any client who does not have a certificate signed by the CA in /etc/pki/qemu/ca-cert.pem. The default is true and matches libvirt's. We will want to disable this by default in train. * Adding ptp parameters for timemaster service configuration on overcloud compute node.Timemaster will use already present chrony parameters. PTPMessageTransport, PTPInterfaces are added new. Deprecation Notes ***************** * The *BarbicanPkcs11CryptoTokenLabel* option has been deprecated and replaced with the *BarbicanPkcs11CryptoTokenLabels* option. Bug Fixes ********* * Now "ExtraConfigPre" resource and "NodeExtraConfig" resource are executed after network configurations are applied in nodes. This is consitent with the previous version with heat software deployment mechanism instead of config-download. * Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. * Nova vnc configuration right now uses NovaVncProxyNetwork, NovaLibvirtNetwork and NovaApiNetwork to configure the different components (novnc proxy, nova-compute and libvirt) for vnc. If one of the networks get changed from internal_api, the service configuration between libvirt, nova-compute and novnc proxy gets inconsistent and the console is broken. This changed to just use NovaLibvirtNetwork for configuring the vnc endpoints and removes NovaVncProxyNetwork completely. Changes in tripleo-heat-templates 13.2.0..13.3.0 ------------------------------------------------ 4890946ec Fix network_cidrs when ManageNetworks: false 0eaa748bb Add dependency on OVNMacAddressNetwork for role ResourceGroup f35479563 Set tags on all OS::Neutron::Port resources 007eaecf0 Stop handler flush cf17ac91e Add tags to THT network resources d39526de1 Fix "ManageNetworks" use-case 9b67d6420 Add new options for Barbican PKCS#11 backend b4cec5b72 Add OVNEncapType option to the ovn controller template b6d85231a Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 86de3c350 Disable tunneled mode when use_tls_for_live_migration 0fba0ce39 Add openstack-tox-tht to the gate 9536a5f31 Fix RoleParameters in tuned-baremetal-ansible.yaml 1311f8a52 Don't assume every role has default_route_networks 1785dabb8 Correct metrics_qdr logging path and regex parsing 521eae135 Run update tasks with become c71b72b29 Stop using (and breaking) /var/tmp for horizon temporary things f8485c9db Moving nova-consoleauth to step4 6ba1d84a4 Missing client certificate for live-migration with TLS 50c089a1f Add RootStackName to group_vars 48c444796 Add systemd dependency to openvswitch to ovn-controller b542452cc Disabling LM PostCopy and AutoConverge for RT roles ce9ae8666 Mount /etc/openldap inside the keystone container 9befbde21 Limit access to sshd used for nova migration b276cb24b Remove ovn-cms-options from OVS when OVNCMSOptions is set to "" e1998a8e5 Ensure ansible_fqdn is set 5171cd3d7 Fix NovaVncProxyNetwork removal df04e9518 Remove no longer used NovaNfsEnabled parameter and condtion de98fdb20 HA: fix race when moving VIP during minor update 1e137876a [update][upgrade] Use container-tools:3.0 63001263a HA: inject public certificates without blocking container 5325ac311 Move tmpwatch from cron.daily to actual root crontab 4260d30ea Set vlan-limit value depending on vlan_transparent setting c2e62032b Correct spelling mistake 4be137395 Config parameters for timemaster service 721a8d414 [OVN] Remove check for OVN + Availability Zones 87fc83d7b Restore PreNetworkConfig resources 9ba03482c live_migration setting should be under libvirt namespace 05b191d3e Use single NovaLibvirtNetwork to configure instance console components 178018d90 Switch Octavia external tasks to 'post deploy' Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 31 +++- deployed-server/ctlplane-port.yaml | 8 + deployed-server/deployed-neutron-port.yaml | 11 ++ deployed-server/deployed-server.yaml | 8 + .../barbican/barbican-api-container-puppet.yaml | 20 ++- .../barbican-backend-pkcs11-crypto-puppet.yaml | 16 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/horizon/horizon-container-puppet.yaml | 23 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 9 ++ deployment/keystone/keystone-container-puppet.yaml | 1 + .../logrotate-crond-container-puppet.yaml | 45 ++++-- deployment/metrics/qdr-container-puppet.yaml | 4 +- .../neutron/neutron-api-container-puppet.yaml | 3 +- .../neutron/neutron-dhcp-container-puppet.yaml | 4 +- deployment/nova/nova-compute-container-puppet.yaml | 58 ++++--- deployment/nova/nova-ironic-container-puppet.yaml | 12 -- deployment/nova/nova-libvirt-container-puppet.yaml | 25 ++- .../nova-migration-target-container-puppet.yaml | 52 ++++--- .../nova/nova-vnc-proxy-container-puppet.yaml | 33 ++-- .../octavia/octavia-deployment-config.j2.yaml | 3 +- .../ovn/ovn-controller-container-puppet.yaml | 24 ++- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 171 +++++++++++++++++++++ deployment/timesync/chrony-baremetal-ansible.yaml | 2 - deployment/tls/undercloud-tls.yaml | 3 + deployment/tuned/tuned-baremetal-ansible.yaml | 19 ++- environments/barbican-backend-pkcs11-atos.yaml | 13 +- environments/barbican-backend-pkcs11-lunasa.yaml | 3 +- environments/barbican-backend-pkcs11-thales.yaml | 3 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 2 +- network/config/bond-with-vlans/role.role.j2.yaml | 2 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 2 +- network/config/multiple-nics/role.role.j2.yaml | 2 +- .../role.role.j2.yaml | 2 +- network/config/single-nic-vlans/role.role.j2.yaml | 2 +- network/network.j2 | 63 +++++--- network/ports/ctlplane_vip.yaml | 16 +- network/ports/from_service.yaml | 3 + network/ports/from_service_v6.yaml | 3 + network/ports/noop.yaml | 13 ++ network/ports/ovn_mac_addr_port.yaml | 16 ++ network/ports/port.j2 | 39 +++++ network/ports/port_from_pool.j2 | 13 ++ network/ports/vip.yaml | 15 ++ network/ports/vip_v6.yaml | 16 +- overcloud-resource-registry-puppet.j2.yaml | 2 + overcloud.j2.yaml | 24 ++- puppet/role.role.j2.yaml | 13 ++ ...r-barbican-pkcs11-options-a2ec14369518b40e.yaml | 9 ++ .../notes/bug-1907214-df2f07cbacbe8a24.yaml | 13 ++ ...introducing-qemutlsverify-af590e0243fe6b08.yaml | 9 ++ ...va_migration_limit_access-20be8d69686ca95c.yaml | 8 + .../notes/nova_novnc_network-83a1479bf227f867.yaml | 10 ++ ...dd_support_for_timemaster-a8dc3e4d5db4e8b3.yaml | 7 + tools/process-templates.py | 5 + zuul.d/layout.yaml | 1 + 60 files changed, 751 insertions(+), 181 deletions(-)

1 0