July 2021 - Release-announce - lists.openstack.org

manila-tempest-plugin 1.5.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We high-spiritedly announce the release of: manila-tempest-plugin 1.5.0: Tempest plugin manila-tempest-plugin This release is part of the xena release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 1.4.0..1.5.0 --------------------------------------------- 184e486 Add testcase for share metadata cf95d40 Add stable branch jobs on the plugins master gate 3af822b Fix class inheritances in base.py ac53004 Add a validation check that the share has been deleted b60fdda Setup snapshot extra specs only if required a0acf25 Fix API version test skip logic 7186502 [ci] Don't install manila-tempest-plugin system-wide 74d2033 setup.cfg: Replace dashes with underscores 602f101 Fix CephFS snapshot cloning scenario test 35091ce Reorganize scenario tests Diffstat (except docs and test files) ------------------------------------- .../services/share/json/shares_client.py | 5 + .../api/admin/test_export_locations_negative.py | 6 +- .../api/admin/test_share_group_types_negative.py | 12 +- .../api/admin/test_share_instances_negative.py | 4 +- .../admin/test_share_servers_manage_negative.py | 10 +- .../api/admin/test_share_servers_migration.py | 7 +- .../admin/test_share_servers_migration_negative.py | 2 +- .../api/admin/test_share_snapshot_instances.py | 5 +- .../test_share_snapshot_instances_negative.py | 7 +- .../api/admin/test_share_types_extra_specs.py | 23 +++- .../admin/test_share_types_extra_specs_negative.py | 55 ++++---- .../api/admin/test_snapshot_export_locations.py | 8 +- .../test_snapshot_export_locations_negative.py | 10 +- .../api/admin/test_snapshot_manage_negative.py | 4 +- .../api/test_access_rules_metadata_negative.py | 4 +- .../test_replication_export_locations_negative.py | 5 +- .../api/test_security_services_mapping_negative.py | 2 +- .../api/test_share_network_subnets_negative.py | 4 +- .../api/test_share_type_availability_zones.py | 8 +- .../test_share_type_availability_zones_negative.py | 4 +- .../api/test_shares_from_snapshot_across_pools.py | 4 +- setup.cfg | 6 +- zuul.d/manila-tempest-jobs.yaml | 2 - zuul.d/manila-tempest-stable-jobs.yaml | 19 +++ zuul.d/project.yaml | 3 + 86 files changed, 858 insertions(+), 726 deletions(-)

1 0

cloudkitty_tempest_plugin 2.4.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We exuberantly announce the release of: cloudkitty_tempest_plugin 2.4.0: Tempest plugin for CloudKitty This release is part of the xena release series. The source is available from: https://opendev.org/openstack/cloudkitty_tempest_plugin Download the package from: https://tarballs.openstack.org/cloudkitty-tempest-plugin/ For more details, please see below. Changes in cloudkitty_tempest_plugin 2.3.0..2.4.0 ------------------------------------------------- 984fd8f [ussuri][goal] Update contributor documentation 018a0cd Use TOX_CONSTRAINTS_FILE 1c4e7b4 setup.cfg: Replace dashes with underscores d9b5aad Add victoria/wallaby stable branch jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 21 ++++++++------- CONTRIBUTING.rst | 24 +++++++++-------- setup.cfg | 6 ++--- tox.ini | 2 +- 5 files changed, 76 insertions(+), 24 deletions(-)

1 0

blazar_tempest_plugin 0.7.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are psyched to announce the release of: blazar_tempest_plugin 0.7.0: Tempest plugin for Blazar Project This release is part of the xena release series. The source is available from: https://opendev.org/openstack/blazar_tempest_plugin Download the package from: https://tarballs.openstack.org/blazar-tempest-plugin/ For more details, please see below. Changes in blazar_tempest_plugin 0.6.1..0.7.0 --------------------------------------------- 362c6c5 Changed minversion in tox to 3.18.0 7c19d75 Use TOX_CONSTRAINTS_FILE 4440335 Add victoria/wallaby stable branch jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 35 ++++++++++++----------------------- tox.ini | 6 +++--- 2 files changed, 15 insertions(+), 26 deletions(-)

1 0

ec2api-tempest-plugin 1.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We high-spiritedly announce the release of: ec2api-tempest-plugin 1.3.0: Tempest plugin for ec2-api This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ec2api-tempest-plugin Download the package from: https://tarballs.openstack.org/ec2api-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2api-tempest-plugin 1.2.1..1.3.0 --------------------------------------------- aae0b12 [ussuri][goal] Update contributor documentation d86c173 Add victoria/wallaby stable branch jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 ++++++++++++------ CONTRIBUTING.rst | 24 +++++++++++++----------- 2 files changed, 25 insertions(+), 17 deletions(-)

1 0

telemetry_tempest_plugin 1.4.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are jazzed to announce the release of: telemetry_tempest_plugin 1.4.0: Tempest plugin for Telemetry Projects This release is part of the xena release series. The source is available from: https://opendev.org/openstack/telemetry_tempest_plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ For more details, please see below. Changes in telemetry_tempest_plugin 1.3.0..1.4.0 ------------------------------------------------ 590f338 Move doc requirements to doc ca2bf36 Remove ties to panko 657804a Switch telemetry-tempest-dsvm to non-voting for now 2eccbbc Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 ++- README.rst | 2 +- test-requirements.txt => doc/requirements.txt | 3 +-- requirements.txt | 4 ++-- setup.cfg | 2 ++ telemetry_tempest_plugin/config.py | 4 ---- .../telemetry_integration_gabbits/autoscaling.yaml | 24 ---------------------- .../scenario/test_telemetry_integration.py | 3 +-- tox.ini | 17 ++++++++++----- 9 files changed, 21 insertions(+), 41 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aa20603..51dcad8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6,2 @@ pbr>=2.0 # Apache-2.0 -oslo.config>=5.1.0 # Apache-2.0 -oslo.utils>=3.31.0 # Apache-2.0 +oslo.config>=6.0.0 # Apache-2.0 +oslo.utils>=3.37.0 # Apache-2.0

1 0

ironic-tempest-plugin 2.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We high-spiritedly announce the release of: ironic-tempest-plugin 2.3.0: Tempest plugin for ironic and ironic- inspector This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic-tempest-plugin Download the package from: https://tarballs.openstack.org/ironic-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic For more details, please see below. Changes in ironic-tempest-plugin 2.2.0..2.3.0 --------------------------------------------- 8b9be89 Remove train testing from ironic-tempest-plugin c4ad6e2 Update min version of tox to use allowlist eaf7482 Add Wallaby jobs 3a07c4d Use get_service_clients framework with basic Secure RBAC 12236ec setup.cfg: Replace dashes with underscores 957dc34 Remove /extra/vif_port_id usage 13de53a Reconfigure tox.ini 8a1b5eb Test case for uefi-https-boot in standalone ironic Diffstat (except docs and test files) ------------------------------------- ironic_tempest_plugin/config.py | 16 ++++++++++ ironic_tempest_plugin/manager.py | 34 +++++++++++---------- ironic_tempest_plugin/plugin.py | 35 ++++++++++++++++++++++ .../scenario/ironic_standalone/test_basic_ops.py | 17 +++++++++++ .../scenario/test_baremetal_boot_from_volume.py | 2 +- setup.cfg | 6 ++-- test-requirements.txt | 5 ---- tox.ini | 10 +++++-- zuul.d/project.yaml | 29 +++++++++--------- zuul.d/stable-jobs.yaml | 35 ++++++++++++++++++++++ 18 files changed, 176 insertions(+), 68 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d5ab6d0..33a724b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -hacking>=3.1.0,<4.0.0 # Apache-2.0 - @@ -9,3 +6,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -flake8-import-order>=0.17.1 # LGPLv3 -pycodestyle>=2.0.0,<2.7.0 # MIT -

1 0

watcher-tempest-plugin 2.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are pumped to announce the release of: watcher-tempest-plugin 2.3.0: Tempest plugin watcher-tempest-plugin This release is part of the xena release series. The source is available from: https://opendev.org/openstack/watcher-tempest-plugin Download the package from: https://tarballs.openstack.org/watcher-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. Changes in watcher-tempest-plugin 2.2.0..2.3.0 ---------------------------------------------- 869e107 Changed minversion in tox to 3.18.0 93ce2f3 Add temptest tests for victoria and wallaby f50fe60 Manage constraints with testenv install_command 163ce47 setup.cfg: Replace dashes with underscores 1346d3e Use py3 as the default runtime for tox f66397a Fix zuul builds with dependencies and pep8 rules Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 ++ .zuul.yaml | 14 +++++++ setup.cfg | 8 ++-- test-requirements.txt | 10 ++--- tox.ini | 45 ++++++++++++---------- 8 files changed, 53 insertions(+), 34 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 32d0800..3c655da 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,6 +5,2 @@ -hacking<0.13,>=0.12.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 - +hacking>=3.2.,<3.3 # Apache-2.0 +stestr>=1.0.0 # Apache-2.0 @@ -23 +19 @@ reno>=3.1.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.6.0 # Apache-2.0

1 0

zaqar_tempest_plugin 1.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are amped to announce the release of: zaqar_tempest_plugin 1.3.0: Tempest plugin zaqar_tempest_plugin This release is part of the xena release series. The source is available from: https://opendev.org/openstack/zaqar_tempest_plugin Download the package from: https://tarballs.openstack.org/zaqar-tempest-plugin/ For more details, please see below. Changes in zaqar_tempest_plugin 1.2.0..1.3.0 -------------------------------------------- fef5916 Add doc/requirements Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 4 ---- tox.ini | 3 +++ 3 files changed, 7 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 00b5616..93fc72c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=2.0.0,!=2.1.0 # BSD @@ -13,3 +11,0 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=2.2.1 # Apache-2.0 -# releasenotes -reno>=3.1.0 # Apache-2.0

1 0

neutron-tempest-plugin 1.6.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We enthusiastically announce the release of: neutron-tempest-plugin 1.6.0: Tempest plugin for Neutron Project This release is part of the xena release series. The source is available from: https://opendev.org/openstack/neutron-tempest-plugin Download the package from: https://tarballs.openstack.org/neutron-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-tempest-plugin 1.5.0..1.6.0 ---------------------------------------------- 9115c8e Fix test_allocate_ips_are_from_correct_subnet on ML2/OVN backend d32821b Changed minversion in tox to 3.18.0 70be7ac Cleanup Security Group rules after TC execution 25df8e2 Add a test for overlapping SG rules a5cdede Fix required extensions for the subnet's service type API tests bb1532a Revert "Skip scenario tests if HA router will not be active" 12e5469 Enable tls-proxy support for test jobs 3eb483b Remove allowed_address_pair API tests bd2bfd4 Added test for reattached security groups 2e68c7a New API test for subnet's service types 1536b57 Remove "active" attribute from the allowed_address_pairs 8de8b99 Change way how tcpdump result is checked in multicast test 3d7420a Explicitly set jobs sfc and bgpvpn to ML2/OVS 99d8ae2 Remove train jobs from the project's CI queues 20eb967 Switch neutron-tempest-plugin-api job to be ML2/OVS dbb0b48 QoS rule negative tests 4a91784 Move back designate scenario job to the check queue a4cb807 Unset new rolevar for run-tempest role for rocky jobs 913c306 Add test for default DNS zone per tenant Diffstat (except docs and test files) ------------------------------------- neutron_tempest_plugin/api/base.py | 9 + .../api/test_allowed_address_pair.py | 121 --------- neutron_tempest_plugin/api/test_qos_negative.py | 118 +++++++-- neutron_tempest_plugin/api/test_security_groups.py | 4 +- neutron_tempest_plugin/api/test_subnets.py | 42 ++++ neutron_tempest_plugin/common/utils.py | 71 ++++++ neutron_tempest_plugin/scenario/base.py | 18 +- .../scenario/test_dns_integration.py | 53 ++++ neutron_tempest_plugin/scenario/test_multicast.py | 3 +- .../scenario/test_security_groups.py | 87 +++++++ tox.ini | 4 +- zuul.d/master_jobs.yaml | 67 ++++- zuul.d/project.yaml | 42 +--- zuul.d/queens_jobs.yaml | 1 + zuul.d/rocky_jobs.yaml | 272 ++++++++++++++++++++- zuul.d/stein_jobs.yaml | 1 + zuul.d/train_jobs.yaml | 14 ++ zuul.d/ussuri_jobs.yaml | 1 + zuul.d/victoria_jobs.yaml | 1 + zuul.d/wallaby_jobs.yaml | 1 + 20 files changed, 723 insertions(+), 207 deletions(-)

1 0

tempest 28.0.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We jubilantly announce the release of: tempest 28.0.0: OpenStack Integration Testing This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 28.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the Xena development cycle to mark the end of support for EM Train release in Tempest. After this release, Tempest will support below OpenStack Releases: * Wallaby * Victoria * Ussuri Current development of Tempest is for OpenStack Xena development cycle. Tempest's identity service client TokenClientJSON and V3TokenClientJSON has been removed. Tempest Service clients for volume v1 APIs are removed. New Features ************ * Adding new config option for volume tests which allows to specify the size a volume will be extended by (if a test does extend a volume or needs a new bigger volume). The option is beneficial in case such tests are executed on systems where the chunk size (the minimum size a volume can be extended by) is other than 1 (originally hardcoded in the tests).: CONF.volume.volume_size_extend * Add "placement" API usage method for evaluating resource class utilization of the resource provider. The following API call is available for tempest from now in the resource_providers_client: * GET /resource_providers/{uuid}/usages * Add a "TransfersV355Client" to the volume v3 "transfer_client" library supporting create, list, show, delete, and accept operations for the new Volume Transfers API (https://docs.openstack.org/api-ref /block-storage/v3/#volume-transfers-volume-transfers-3-55-or-later) of the Block Storage API v3. The min_microversion of this API is 3.55. * Add a new client to lists, creates, shows information for, and updates neutron log resource. Upgrade Notes ************* * Tempest's identity service client TokenClientJSON and V3TokenClientJSON were deprecated since long which are not removed. Please use new service clients TokenClient and V3TokenClient instead. * Cinder removed the volume v1 APIs in queens release and Tempest now support only stable train onwards release so all the Tempest service clients for volume v1 APIs are now removed. Deprecation Notes ***************** * Tempest service clients for image v1 APIs (tempest.lib.services.image.v1 module) is deprecated and will be removed once Tempest stop supporting stable Ussuri release which is last release Image v1 APIs are present in glance. * Tempest service clients for volume v2 APIs (tempest.lib.services.volume.v2 module) is deprecated and will be removed once Tempest stop supporting stable wallaby release which is last release volume v2 APIs are present in cinder. Changes in tempest 27.0.0..28.0.0 --------------------------------- 2eb82f1cb Use wallaby stable constraint in tox to release 28.0.0 2e58826ad Add releasenote to tag the end of support for Train 1e4cb1da3 Use older run-tempest for stable branches b9ac05717 Fix tempest-slow-py3: use the correct inheritance chain 619e0f416 Fix test_network_quota_exceeding test 065715df5 Add log resource client 2cd8f0045 Remove non existing puppet-openstack-integration from check pipeline 37c4bd302 Add volume_size_extend opt for volume tests 5dcdd41dd Skip network creation for system and domain scoped token e638ce8b5 Remove skip for test_fix_argument_yes unit test dba4c9ded Use volume_type option in tempest.conf in compute api test 1c8fe320f Remove "active" attribute from the allowed_address_pairs ebecf79a9 Enable swift in tempest-slow-py3 job 151cd7b9a Move verify-ipv6-only-deployments 3c10d6870 Move stable job definition to stable-jobs.yaml 4e2a6ffaa Fix up the tempest-full-py3 job configurations 3e1276406 Update IRC network to OFTC cafd2d165 Add tests for "new" Transfers API (mv 3.55) 4e18c0f79 Remove old deprecated Token clients 2f4539d60 Stop testing volume v2 APIs ccaa9969f Deprecate image v1 service clients 08d5376e5 Remove volume v1 service clients 41a7ae9ed Update encryption-type-create 92005532d Add list resource provider usage b15b58e96 Add wait to check the import task status 3d9a86999 Fix hacking check for service client 4aae01313 Bump the openstack-python3 jobs to xena 83d13e509 Add stestr master job 5c1068488 Add waiter for test_live_migration_with_trunk d1f79f4bd Remove usage of six e662307b8 Remove usage of six a6ee2d191 Remove usage of six 0b14db2a4 Add live migration with trunk test 926f823fb Fix TEMPEST_VENV_UPPER_CONSTRAINTS default value comparision b2d5b98e3 Add Tempest gate job for stable/wallaby 9d2effc50 Skip ide and ephmoral storage on aarch64 ef55216ca Cleans up volume backups after test run. c7845314f Remove unicode from code 7e96c8e85 Add release notes page for version 27.0.0 3893f9db4 Fix unstability in test_subnet_details 4a25003b7 Use the master constraint in tox.ini again e75f8ca33 Add volume services schema for microversion 3.7 Diffstat (except docs and test files) ------------------------------------- playbooks/devstack-tempest-ipv6.yaml | 17 +- playbooks/devstack-tempest.yaml | 8 + ...ement-usage-client-method-8b6015cbd8a5e0f6.yaml | 8 + ...dd-volume-transfers-v3.55-73f75073ad2c4091.yaml | 8 + ...-image-v1-service-clients-d12ed42210bb76b5.yaml | 6 + ...volume-v2-service-clients-ff8a2a7be1797eb5.yaml | 6 + .../end-of-support-for-train-83369468215d7485.yaml | 12 + .../log-resource-client-20e58a295f729902.yaml | 5 + ...recated-old-token-clients-e4c2e654132f1130.yaml | 9 + ...volume-v1-service-clients-9235e3a965f93c09.yaml | 8 + releasenotes/source/conf.py | 14 +- releasenotes/source/index.rst | 1 + releasenotes/source/v27.0.0.rst | 5 + requirements.txt | 1 - .../ipv6-only-deployments-verification/README.rst | 16 -- .../defaults/main.yaml | 1 - .../tasks/main.yaml | 4 - roles/run-tempest-26/README.rst | 83 ++++++ roles/run-tempest-26/defaults/main.yaml | 12 + roles/run-tempest-26/tasks/main.yaml | 73 +++++ roles/run-tempest/tasks/main.yaml | 2 +- tempest/api/compute/admin/test_create_server.py | 2 + tempest/api/compute/admin/test_live_migration.py | 90 ++++++ tempest/api/compute/base.py | 6 + tempest/api/compute/servers/test_novnc.py | 6 +- tempest/api/compute/servers/test_server_rescue.py | 2 + tempest/api/compute/servers/test_server_tags.py | 6 +- tempest/api/compute/servers/test_servers.py | 2 +- tempest/api/identity/v2/test_tokens.py | 3 +- tempest/api/identity/v3/test_tokens.py | 3 +- tempest/api/image/v2/test_images.py | 10 +- tempest/api/network/admin/test_negative_quotas.py | 7 +- tempest/api/network/base.py | 1 + tempest/api/network/test_allowed_address_pair.py | 17 +- tempest/api/network/test_networks.py | 7 +- .../api/object_storage/test_account_services.py | 4 +- tempest/api/volume/admin/test_multi_backend.py | 3 +- tempest/api/volume/admin/test_volume_types.py | 2 + tempest/api/volume/base.py | 4 + tempest/api/volume/test_volume_transfers.py | 27 ++ tempest/api/volume/test_volumes_clone.py | 5 +- tempest/api/volume/test_volumes_clone_negative.py | 4 +- tempest/api/volume/test_volumes_negative.py | 6 +- tempest/clients.py | 4 + tempest/common/waiters.py | 24 ++ tempest/config.py | 5 + tempest/hacking/checks.py | 16 +- tempest/lib/api_schema/response/volume/services.py | 4 - .../api_schema/response/volume/v3_7}/__init__.py | 0 .../api_schema/response/volume/v3_7/services.py | 34 +++ tempest/lib/common/api_version_utils.py | 3 +- tempest/lib/common/dynamic_creds.py | 33 ++- tempest/lib/common/http.py | 3 +- tempest/lib/common/rest_client.py | 12 +- tempest/lib/common/ssh.py | 3 +- tempest/lib/common/utils/data_utils.py | 3 +- tempest/lib/common/utils/linux/remote_client.py | 5 +- tempest/lib/decorators.py | 5 +- tempest/lib/services/clients.py | 1 - .../compute/assisted_volume_snapshots_client.py | 3 +- tempest/lib/services/identity/v2/token_client.py | 13 - .../identity/v3/identity_providers_client.py | 3 +- .../lib/services/identity/v3/mappings_client.py | 3 +- .../lib/services/identity/v3/oauth_token_client.py | 4 +- .../lib/services/identity/v3/protocols_client.py | 3 +- .../identity/v3/service_providers_client.py | 3 +- tempest/lib/services/identity/v3/token_client.py | 13 - tempest/lib/services/image/v1/__init__.py | 9 + tempest/lib/services/network/__init__.py | 4 +- .../lib/services/network/log_resource_client.py | 74 +++++ tempest/lib/services/network/trunks_client.py | 100 +++++++ .../placement/resource_providers_client.py | 14 + tempest/lib/services/volume/__init__.py | 3 +- tempest/lib/services/volume/base_client.py | 38 +++ tempest/lib/services/volume/v1/__init__.py | 33 --- .../services/volume/v1/availability_zone_client.py | 28 -- tempest/lib/services/volume/v1/backups_client.py | 112 -------- .../services/volume/v1/encryption_types_client.py | 68 ----- .../lib/services/volume/v1/extensions_client.py | 29 -- tempest/lib/services/volume/v1/hosts_client.py | 40 --- tempest/lib/services/volume/v1/limits_client.py | 32 --- tempest/lib/services/volume/v1/qos_client.py | 133 --------- tempest/lib/services/volume/v1/quotas_client.py | 63 ----- tempest/lib/services/volume/v1/services_client.py | 34 --- tempest/lib/services/volume/v1/snapshots_client.py | 188 ------------- tempest/lib/services/volume/v1/types_client.py | 167 ----------- tempest/lib/services/volume/v1/volumes_client.py | 307 --------------------- tempest/lib/services/volume/v2/__init__.py | 8 + tempest/lib/services/volume/v3/__init__.py | 6 +- tempest/lib/services/volume/v3/services_client.py | 9 +- tempest/lib/services/volume/v3/transfers_client.py | 17 +- tempest/lib/services/volume/v3/volumes_client.py | 3 +- tempest/scenario/test_network_basic_ops.py | 7 + tempest/test.py | 9 +- .../lib/services/compute/test_aggregates_client.py | 6 +- .../compute/test_availability_zone_client.py | 2 +- .../lib/services/compute/test_extensions_client.py | 2 +- .../compute/test_floating_ip_pools_client.py | 4 +- .../lib/services/compute/test_keypairs_client.py | 2 +- .../lib/services/compute/test_networks_client.py | 2 +- .../services/compute/test_quota_classes_client.py | 2 +- .../compute/test_tenant_networks_client.py | 2 +- .../services/network/test_log_resource_client.py | 145 ++++++++++ .../lib/services/network/test_trunks_client.py | 201 ++++++++++++++ .../placement/test_resource_providers_client.py | 24 ++ .../volume/v1/test_encryption_types_client.py | 86 ------ .../lib/services/volume/v1/test_quotas_client.py | 96 ------- .../services/volume/v1/test_snapshots_client.py | 200 -------------- .../services/volume/v3/test_transfers_client.py | 19 +- .../lib/services/volume/v3/test_versions_client.py | 17 -- tools/check_logs.py | 3 +- tools/verify-ipv6-only-deployments.sh | 94 +------ tox.ini | 12 + zuul.d/integrated-gate.yaml | 153 ++-------- zuul.d/project.yaml | 19 +- zuul.d/stable-jobs.yaml | 164 +++++++++++ zuul.d/tempest-specific.yaml | 16 ++ 129 files changed, 1548 insertions(+), 2117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index eae542782..c71cabea9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +15,0 @@ oslo.utils>=4.7.0 # Apache-2.0 -six>=1.10.0 # MIT

1 0

monasca-tempest-plugin 2.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are amped to announce the release of: monasca-tempest-plugin 2.3.0: Tempest plugin for Monasca project This release is part of the xena release series. The source is available from: https://opendev.org/openstack/monasca-tempest-plugin Download the package from: https://tarballs.openstack.org/monasca-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-tempest-plugin 2.2.1..2.3.0 ---------------------------------------------- 062cb75 Fix Docker build Diffstat (except docs and test files) ------------------------------------- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

vitrage-tempest-plugin 5.4.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are happy to announce the release of: vitrage-tempest-plugin 5.4.0: Tempest plugin for Vitrage project This release is part of the xena release series. The source is available from: https://opendev.org/openstack/vitrage-tempest-plugin Download the package from: https://tarballs.openstack.org/vitrage-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/vitrage/+bugs For more details, please see below. Changes in vitrage-tempest-plugin 5.3.0..5.4.0 ---------------------------------------------- a99b149 Replace deprecated UPPER_CONSTRAINTS_FILE variable 683e72f setup.cfg: Replace dashes with underscores 50b34ef Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- setup.cfg | 6 +++--- tox.ini | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-)

1 0

kuryr-tempest-plugin 0.10.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are thrilled to announce the release of: kuryr-tempest-plugin 0.10.0: Kuryr Tempest Plugin This release is part of the xena release series. The source is available from: https://opendev.org/openstack/kuryr-tempest-plugin Download the package from: https://tarballs.openstack.org/kuryr-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/kuryr/+bugs For more details, please see below. Changes in kuryr-tempest-plugin 0.9.0..0.10.0 --------------------------------------------- 8e5adde setup.cfg: Replace dashes with underscores e3a6599 Add service hairpin traffic test b47422f Add stable/wallaby jobs on master gate bb32e50 Adds tests for making listener timeouts configurable Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 ++--- kuryr_tempest_plugin/config.py | 3 + setup.cfg | 6 +- 6 files changed, 176 insertions(+), 27 deletions(-)

1 0

trove_tempest_plugin 1.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are psyched to announce the release of: trove_tempest_plugin 1.3.0: Tempest plugin for Trove project This release is part of the xena release series. The source is available from: https://opendev.org/openstack/trove_tempest_plugin Download the package from: https://tarballs.openstack.org/trove-tempest-plugin/ For more details, please see below. Changes in trove_tempest_plugin 1.2.0..1.3.0 -------------------------------------------- 4922ec7 Improve rebuild test 23ac0ee Show instance fault message when ERROR Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 15 ++++++- trove_tempest_plugin/services/client.py | 10 ++++- 7 files changed, 162 insertions(+), 49 deletions(-)

1 0

oswin-tempest-plugin 1.3.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We jubilantly announce the release of: oswin-tempest-plugin 1.3.0: This project contains Tempest tests to cover the os_win project, as well as a plugin to automatically load these tests into Tempest. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oswin-tempest-plugin Download the package from: https://tarballs.openstack.org/oswin-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/os-win/+bugs For more details, please see below. Changes in oswin-tempest-plugin 1.2.0..1.3.0 -------------------------------------------- 59e6a14 Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

cinder 16.4.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We jubilantly announce the release of: cinder 16.4.0: OpenStack Block Storage This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 16.4.0 ^^^^^^ Bug Fixes * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800) Add support for ports filtering in XtremIO driver. * Bug #1904892 (https://bugs.launchpad.net/cinder/+bug/1904892) Fix cinder manage operations for NFS backends using IPv6 addresses in the NFS server address. These were previously rejected by the Cinder API. * RBD driver bug #1907964 (https://bugs.launchpad.net/cinder/+bug/1907964) Add support for fast-diff on backup images stored in Ceph. Provided fast-diff is supported by the backend it will automatically be enabled and used. With fast-diff enabled, the generation of diffs between images and snapshots as well as determining the actual data usage of a snapshot is speed up significantly. * Bug #1920237 (https://bugs.launchpad.net/cinder/+bug/1920237) The backup manager calls volume remove_export() but does not wait for it to complete when detaching a volume after backup. This caused problems when a subsequent operation started on that volume before it had fully detached. * Pure Storage FlashArray driver fix to ensure cinder_tempest_plugin consistency group tests pass. Changes in cinder 16.3.0..16.4.0 -------------------------------- 35d56b680 Fix typo in Dell EMC Unity driver documentation f6d7b0919 Open local image files with "rb" mode e156653d3 Fix sporadic cleanup unit test failure dc8a1beab Label temporary files created by image_utils d9c029c17 Add ports filtering support to Dell EMC XtremIO driver ba8d19822 Tests: Don't assert notifier not called 34120d498 Backup manager: Synchronously call remove_export 610b59b27 Add support for RBD fast-diff feature for backups stored in Ceph b32a0f0cf Drop lower-constraints job d5fed21fd API validation: Add cinder_host type to support ipv6 in manage 1aa907300 Pure: Add default value to pure_host_personality 849fb4f19 [Pure] Fix failing consistency group tempest tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinder/api/schemas/volume_manage.py | 2 +- cinder/api/validation/parameter_types.py | 12 ++++ cinder/backup/drivers/ceph.py | 47 +++++++++------ cinder/backup/manager.py | 2 +- cinder/image/glance.py | 2 +- cinder/image/image_utils.py | 7 ++- .../unit/volume/drivers/dell_emc/test_xtremio.py | 50 +++++++++++++++- cinder/volume/drivers/dell_emc/xtremio.py | 70 +++++++++++++++++----- cinder/volume/drivers/pure.py | 4 +- cinder/volume/rpcapi.py | 7 ++- .../drivers/dell-emc-unity-driver.rst | 2 +- .../drivers/dell-emc-xtremio-driver.rst | 11 ++++ ...9-xtremio-ports-filtering-e68f90d47f17a7d9.yaml | 5 ++ ...g-1904892-ipv6-nfs-manage-391118115dfaaf54.yaml | 7 +++ .../notes/bug-1907964-9277e5ddec2abeda.yaml | 11 ++++ ...backup-remove-export-race-941e2ab1f056e54c.yaml | 8 +++ .../pure_tempest_cg_fix-913d405f7487de00.yaml | 5 ++ 25 files changed, 264 insertions(+), 96 deletions(-)

1 0

kolla-ansible 10.3.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are gleeful to announce the release of: kolla-ansible 10.3.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features ************ * Adds "kolla_sysctl_conf_path" variable that allows to customise the path to "sysctl.conf" that will be modified by Kolla Ansible plays. The default is "/etc/sysctl.conf" as it was before. * Adds a new flag, "docker_disable_default_network", which defaults to "no". Docker is using "172.17.0.0/16" by default for bridge networking on "docker0", and this might cause routing problems for operator networks. Setting this flag to "yes" will disable Docker's bridge networking. This feature will be enabled by default from the Wallaby 12.0.0 release. * Added a new haproxy configuration variable, "haproxy_host_ipv4_tcp_retries2", which allows users to modify this kernel option. This option sets maximum number of times a TCP packet is retransmitted in established state before giving up. The default kernel value is 15, which corresponds to a duration of approximately between 13 to 30 minutes, depending on the retransmission timeout. This variable can be used to mitigate an issue with stuck connections in case of VIP failover, see bug 1917068 for details. * Adds the ability to override the automatic detection of *fluentd_version* and *fluentd_binary*. These can now be defined as extra variables. This removes the dependency of having docker configured for config generation. * Adds support for collecting Prometheus metrics from RabbitMQ. This is enabled by default when Prometheus and RabbitMQ are enabled, and may be disabled by setting "enable_prometheus_rabbitmq_exporter" to "false". * Allows to skip and unset sysctl variables controlled by Kolla Ansible plays using "KOLLA_SKIP" and "KOLLA_UNSET" values. Bug Fixes ********* * Fixes an issue with "kolla-ansible bootstrap-servers" if Zun is enabled where Zun-specific configuration for Docker was applied to all nodes. LP#1914378 * Fix the issue when Swift deployed with S3 Token Middleware enabled. Fixes LP#1862765 * Fixes the Northbound and Southbound database socket paths in OVN. * chronyd crash loop if server is rebooted (Debian) LP#1915528 * Fixed an issue when Docker was configured after startup on Debian/Ubuntu, which resulted in iptables rules being created - before they were disabled. LP#1923203 * A bug where sriov_agent.ini wasn't copied due to "Permission denied" error was fixed. LP#1923467 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes Swift deploy when TLS enabled. Added the missing handler and corrected the container name. LP#1931097 * Fixes missing region_name in keystone_auth sections. See bug 1933025 for details. * Fixes "iscsid" failing in current CentOS 8 based images due to pid file being needlessly set. LP#1933033 * Fixes host bootstrap on Debian not removing the conflicting packages. It now behaves in accordance with the docs. LP#1933122 * Fixes an issue where "kolla-ansible" exits with a zero exit code when executed with a bogus command name. LP#1929397 * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Adds a new flag, "docker_disable_ip_forward", which defaults to "no" and can be used (by setting "yes") to disable docker's "ip- forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". This is to protect from creating all-forwarding hosts. LP#1931615 * Fixes an issue when generating "/etc/hosts" during "kolla-ansible bootstrap-servers" when one or more hosts has an "api_interface" with dashes ("-") in its name. LP#1927357 * Fixes some configuration issues around Barbican logging. LP#1891343 * Fixes some configuration issues around Cinder logging. LP#1916752 * Fix the wrong configuration of the ovs-dpdk service. this breaks the deployment of kolla-ansible. For more details please see bug 1908850. * Fixes an issue with keepalived which was not recreated during an upgrade if configuration is unchanged. LP#1928362 * Fixes an issue with Magnum when TLS is enabled. LP#781062 * Fixes an issue with executing "kolla-ansible" when installed via "pip install --user". LP#1915527 * Fixes an issue where "masakari.conf" was generated for the "masakari-instancemonitor" service but not used. * Fixes an issue where "masakari-monitors.conf" was generated for the "masakari-api" and "masakari-engine" services but not used. * Uses a consistent variable name for container dimensions for "masakari-instancemonitor" - "masakari_instancemonitor_dimensions". The old name of "masakari_monitors_dimensions" is still supported. * Fixes an issue with Octavia deployment when using a custom service auth project. If "octavia_service_auth_project" is set to a project that does not exist, Octavia deployment would fail. The project is now created. LP#1922100 * Fixes LP#1892376 by updating deprecated syntax in the Monasca Elasticsearch template. * Removes whitespace around equal signs in "zookeeper.cfg" which were preventing the "zkCleanup.sh" script from running correctly. Other Notes *********** * Following Cinder upstream, support for using ZFSSA with Cinder has been removed. ZFSSA was unsupported in Train and later removed in Ussuri. Changes in kolla-ansible 10.2.0..10.3.0 --------------------------------------- 588e7e87c Fix exit code with bogus command name 2acd4f711 Allow user to set sysctl_net_ipv4_tcp_retries2 345747a7c Allow to skip and unset sysctl vars 5d7c34523 Add support for changing sysctl.conf path 0055332bd Disable docker's ip-forward when iptables disabled d7fcaca38 [docker] Added a new flag to disable default network 88347646e docs: Add note about internal VIP when HAProxy is disabled e3ef0dc3d magnum: Add CA certificate configuration for internal TLS 473b7e457 Make it possible to override automatic fluentd version detection 0d8f65eac [CI] Do not set ansible_python_interpreter for Zuul 026ddc97d Add missing region_name in keystoneauth sections 2ac8b5749 Drop support for Cinder ZFSSA backend 0c7db5a14 Fix host bootstrap pkg removal on Debian f0e39cd32 Do not set pid file for iscsid c6aa022a4 baremetal: fix /etc/hosts generation when api_interface has dashes ccbdf9202 chronyd crash loop if Debian server is rebooted 0cc46ff2a Stop fluentd deprecation warnings of type vs @type 9a1e9b607 Fix parsing of infra.mariadb.xinetd logs 005d4b89f Fix neutron-ovn-metadata-agent with policy.yaml a343753a7 octavia: Ensure service auth project exists bf0e09a6f Merge glance sections for nova.conf.j2 8dc48aca0 Update blazar.conf template 46898f4e3 Support editable installation in all cases 53cab0c3c Add the ansible_managed header for admin-openrc.sh 3ffcf4636 Fix RabbitMQ restart ordering 6110ae4d6 Add forgotten 'Restart container' handler for swift 6f3b611f3 neutron: Add become for copying sriov_agent.ini 622767ead Fix duplicate dashboard section in tempest.conf.j2 b80a7922a [CI] Drop Zuul host groups 90c57266a docs: Update Freenode to OFTC fc7163df4 [CI] Support building source images with in-review changes 894ff94d0 CI: Use PATH to find kolla-ansible script ae6b25fb1 [CI] Remove setup_gate.sh symlink ecd8dfe62 CI: pull images before deploy 55d62db97 cinder: fix condition to copy backend TLS certs f6d2decae Remove [octavia]/base_url option from neutron.conf b97b388bd baremetal: Install Docker SDK less than 5.0.0 f20b54c7b baremetal: Don't start Docker after install on Debian/Ubuntu 2c7286193 Ensure keepalived is upgraded a99debd15 Disable Alertmanager's peer gossip in non-HA deployments 4a5398f29 Use @type instead of type fc66b7115 Fix "Restart mariadb-clustercheck container" during config gen ca92444c6 prometheus: Collect metrics from rabbitmq 37c24be00 masakari: fix minor issues with instance monitor 3dbe8e82a Negative seqno need to be considered when comparing seqno 55ffe1f8f docs: Improve policy documentation 9164cad1c Apply Zun configuration for Docker based on inventory f48846367 [CI] Use images from quay.io 193aa7fde nova-cell: Stop printing ceph keys in output e84ac3919 docs: fix registry mirror example a473d35e0 Correctly configure S3 Token Middleware for Swift 046d94c80 Reduce number of logs and disable ara HTML report 8a46ae952 Introduce nova_libvirt_logging_debug eea77dee5 Synchronise kolla-ansible installation with other branches faef9f592 Remove whitespace around equal signs in zookeeper.cfg b4fff7225 Fix Cinder log parsing 8581dad2f CI: Add ssh retries cd2fae0c2 Replace db-sock with db-nb-sock and db-sb-sock 469b95367 ovn: Fix disabling of gateway chassis 3e92b9351 Update String type for Monasca ES template 9efacffa8 CI: fix ceph-ansible installation after cryptography 3.4 release b03201924 Do not wait for grafana to start when kolla_action=config e95bc1375 Drop lower-constraints ff06adaf4 Fix installation with pip install --user bec35706e Fix monasca-grafana check a89a2378f Fix Barbican API log config 459cbdd84 docs: improve external Ceph docs 150445c5b docs: Improve multinode Docker registry setup b9c03063d Fix dpdk deploy failed 6aa553685 Install gnupg before adding docker apt gpg key during pre-install ae2c9f9da Fixes solum_api Listening on 127.0.0.1 82c5781d8 Fix failure during Monasca Grafana upgrade Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 27 +++- ansible/group_vars/all.yml | 13 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + .../roles/barbican/templates/barbican-api.ini.j2 | 1 + .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 4 + .../roles/baremetal/tasks/bootstrap-servers.yml | 5 +- ansible/roles/baremetal/tasks/install.yml | 28 ++++- ansible/roles/baremetal/tasks/post-install.yml | 50 ++++++-- ansible/roles/baremetal/tasks/pre-install.yml | 7 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 11 +- ansible/roles/chrony/templates/chrony.json.j2 | 4 +- ansible/roles/cinder/defaults/main.yml | 14 --- ansible/roles/cinder/tasks/config.yml | 2 +- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 18 +-- ansible/roles/common/tasks/config.yml | 12 +- ansible/roles/common/templates/admin-openrc.sh.j2 | 2 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 4 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 4 +- .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 6 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/elasticsearch/tasks/config-host.yml | 9 +- ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/handlers/main.yml | 1 + ansible/roles/haproxy/defaults/main.yml | 4 + ansible/roles/haproxy/tasks/config-host.yml | 16 ++- ansible/roles/haproxy/tasks/upgrade.yml | 2 + ansible/roles/heat/templates/heat.conf.j2 | 1 + .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/iscsi/templates/iscsid.json.j2 | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 9 ++ ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/handlers/main.yml | 2 + ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/masakari/defaults/main.yml | 10 +- ansible/roles/masakari/tasks/clone.yml | 2 +- ansible/roles/masakari/tasks/config.yml | 33 ++--- ansible/roles/mistral/templates/mistral.conf.j2 | 1 + ansible/roles/monasca/handlers/main.yml | 3 +- ansible/roles/monasca/tasks/upgrade.yml | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + .../elasticsearch-template.json | 12 +- ansible/roles/murano/templates/murano.conf.j2 | 3 + ansible/roles/neutron/defaults/main.yml | 2 + ansible/roles/neutron/tasks/config-host.yml | 8 +- ansible/roles/neutron/tasks/config.yml | 1 + .../templates/neutron-ovn-metadata-agent.json.j2 | 13 +- ansible/roles/neutron/templates/neutron.conf.j2 | 8 +- ansible/roles/nova-cell/defaults/main.yml | 4 + ansible/roles/nova-cell/tasks/config-host.yml | 9 +- ansible/roles/nova-cell/tasks/external_ceph.yml | 1 + ansible/roles/nova-cell/templates/libvirtd.conf.j2 | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +- ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/defaults/main.yml | 7 ++ ansible/roles/octavia/tasks/register.yml | 15 --- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/ovn/tasks/bootstrap.yml | 4 +- ansible/roles/ovn/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/defaults/main.yml | 2 - .../roles/ovs-dpdk/templates/ovsdpdk-db.json.j2 | 2 +- .../roles/placement/templates/placement.conf.j2 | 1 + .../templates/prometheus-alertmanager.json.j2 | 2 +- .../roles/prometheus/templates/prometheus.yml.j2 | 9 ++ ansible/roles/rabbitmq/handlers/main.yml | 18 ++- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 4 + ansible/roles/swift/defaults/main.yml | 2 +- ansible/roles/swift/handlers/main.yml | 4 + ansible/roles/swift/templates/proxy-server.conf.j2 | 2 +- ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/tempest/templates/tempest.conf.j2 | 4 - ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zookeeper/tasks/config.yml | 1 + .../reference/high-availability/haproxy-guide.rst | 47 +++++++ .../reference/storage/external-ceph-guide.rst | 101 +++++++++------ etc/kolla/globals.yml | 6 +- etc/kolla/passwords.yml | 5 - lower-constraints.txt | 93 -------------- .../bootstrap-without-zun-67d6ee5d84fcec22.yaml | 6 + .../notes/bug-1862765-a6cad9fd2d3f0f48.yaml | 5 + .../notes/bug-1913031-e8b14c50e8a27d14.yaml | 4 + ...yd-crash-loop-if-server-is-rebooted-debian.yaml | 5 + .../notes/bug-1923203-f9ff247befc4bd75.yaml | 6 + .../notes/bug-1923467-80973d9fbe1f5287.yaml | 6 + .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 + .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + .../notes/bug-1931097-c94832ed2ed92c3a.yaml | 6 + .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 + .../notes/bug-1933033-76746d127285cfe8.yaml | 6 + .../notes/bug-1933122-b34311ba73092080.yaml | 6 + .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 + .../custom-sysctl-conf-path-ce58e897fc067410.yaml | 6 + ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 ++ .../docker-disable-bridge-14df8b7fddbd5000.yaml | 9 ++ ...docker-disable-ip-forward-b0490b71f9f07cd6.yaml | 9 ++ .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 + .../notes/etc-hosts-dashes-37d0dc07c8fc881f.yaml | 7 ++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++ .../fix-barbican-logging-42068f47fe1e4e4d.yaml | 5 + .../notes/fix-cinder-logging-22fea4739begd6s.yaml | 5 + .../fix-dpdk-deploy-failed-6695899422a67359.yaml | 7 ++ .../fix-keepalived-upgrade-a395e39dc946e618.yaml | 6 + .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 + .../fix-pip-install-user-5f871f67433e465a.yaml | 6 + ...ari-instancemonitor-fixes-dc13e5234456d4c5.yaml | 12 ++ ...eate-service-auth-project-aa38b12ebb601777.yaml | 7 ++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 + .../prometheus-rabbitmq-f7d6ebf0d611a819.yaml | 6 + .../sysctl-skip-and-unset-848d5ebd765aabec.yaml | 5 + ...ca-elasticsearch-template-41492c59acaf92b1.yaml | 6 + .../zookeeper-cfg-syntax-02e93c01d6a24f35.yaml | 5 + tools/kolla-ansible | 30 ++++- tools/setup_gate.sh | 136 --------------------- tox.ini | 6 - zuul.d/base.yaml | 6 +- zuul.d/nodesets.yaml | 16 --- zuul.d/project.yaml | 1 - 148 files changed, 981 insertions(+), 603 deletions(-)

1 0

octavia 6.2.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We high-spiritedly announce the release of: octavia 6.2.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 6.2.1 ^^^^^ Bug Fixes * Fixed an issue with batch member updates, that don't have any changes, not properly rolling back the update. * Fixed an issue that an amphorav2 LB cannot be reached after loadbalancer failover. The LB security group was not set in the amphora port. * Fixes an issue where provider drivers may not decrement the load balancer objects quota on delete. * Fix an issue with the rsyslog configuration file in the Amphora when the log offloading feature and the local log storage feature are both disabled. * Some IPv6 UDP members were incorrectly marked in ERROR status, because of a formatting issue while generating the health message in the amphora. * Fixed an issue with the "lo" interface in the "amphora-haproxy" network namespace. The "lo" interface was down and prevented haproxy to communicate with other haproxy processes (for persistent stick tables) on configuration change. It delayed old haproxy worker cleanup and increased the memory consumption usage after reloading the configuration. * Fix load balancers that use customized host_routes in the VIP or the member subnets in amphorav2. * Fix weighted round-robin for UDP listeners with keepalived and lvs. The algorithm must be specified as 'wrr' in order for weighted round-robin to work correctly, but was being set to 'rr'. * Fixed the healthcheck endpoint always querying the backends by caching results for a configurable time. The default is five seconds. * Fix a bug that allowed a user to create a load balancer on a "vip_subnet_id" that belongs to another user using the subnet UUID. Changes in octavia 6.2.0..6.2.1 ------------------------------- e84d9478 Enable lo interface in the amphora-haproxy netns de602782 Add amphora_id in store params for failover_amphora 45b31c18 Fix comment for the ca_certificates_file opt 4cfbf666 Optimize CountPoolChildrenForQuota task in amphorav2 d5dc2b26 Fix task_flow.max_workers with persistence in amphorav2 bae6808f Fix rsyslog configuration when disabling logs 8829f0fb Fix devstack cleanup when using amphorav2 19619ce8 Validate user access to vip_subnet_id when creating a LB c7b4b875 Fix using subnets with host_routes in amphorav2 driver 170be0dd Make /healthcheck cache results 5b6d25ca Explicitely set nodeset to Bionic-based 46b9ce7c Cap hacking 7367311c Fix empty Batch Member Update to unlock objects a8266a9e Fix weighted round-robin about UDP listener 7ded0e47 Fix LB failover for amphorav2: set security group 4b8de86c Fix incorrect ERROR status with IPv6 UDP members dcce548e Fix provider driver quota handling Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 10 ++- etc/octavia.conf | 19 ++++- .../amphorae/backends/agent/api_server/osutils.py | 2 +- .../api_server/templates/amphora-netns.systemd.j2 | 4 + .../amphorae/backends/utils/keepalivedlvs_query.py | 13 ++-- octavia/api/drivers/amphora_driver/v1/driver.py | 11 +-- octavia/api/drivers/amphora_driver/v2/driver.py | 11 +-- octavia/api/drivers/driver_agent/driver_updater.py | 43 +++++++++-- octavia/api/healthcheck/healthcheck_plugins.py | 23 +++++- octavia/api/v2/controllers/load_balancer.py | 2 +- octavia/api/v2/controllers/member.py | 6 ++ octavia/common/base_taskflow.py | 5 +- octavia/common/config.py | 6 +- .../logging/templates/10-rsyslog.conf.template | 5 ++ octavia/common/jinja/lvs/jinja_cfg.py | 2 +- octavia/controller/worker/v2/controller_worker.py | 27 ++++++- .../worker/v2/tasks/amphora_driver_tasks.py | 22 +++++- .../controller/worker/v2/tasks/database_tasks.py | 10 +-- .../controller/worker/v2/tasks/network_tasks.py | 2 +- octavia/db/repositories.py | 10 +++ .../backend/agent/api_server/test_keepalivedlvs.py | 2 +- .../backends/utils/test_keepalivedlvs_query.py | 29 ++++++- .../amphora_driver/v1/test_amphora_driver.py | 11 ++- .../amphora_driver/v2/test_amphora_driver.py | 11 ++- .../drivers/driver_agent/test_driver_updater.py | 71 ++++++++++++++++- .../common/jinja/logging/test_logging_jinja_cfg.py | 38 ++++++---- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 16 ++-- .../sample_configs/sample_configs_combined.py | 4 +- .../common/sample_configs/sample_configs_split.py | 2 +- .../worker/v1/tasks/test_network_tasks.py | 5 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 88 +++++++++++++++++++++- .../worker/v2/tasks/test_database_tasks_quota.py | 36 ++------- .../worker/v2/tasks/test_network_tasks.py | 5 +- .../controller/worker/v2/test_controller_worker.py | 21 ++++-- ...batch-member-update-issue-09b76787553e7752.yaml | 5 ++ ...phorav2-failover-secgroup-c793de5e00b32653.yaml | 5 ++ ...ver-agent-decrement-quota-27486d9fa0bdeb89.yaml | 5 ++ ...x-error-in-rsyslog-config-a316a7856e1a847a.yaml | 5 ++ ...x-ipv6-udp-health-message-ed94b35bbea396ec.yaml | 5 ++ ...o-interface-amphora-netns-90fb9934026e1485.yaml | 8 ++ ...net-host_routes-amphorav2-3c079c5a3bfa1b3d.yaml | 5 ++ .../fix-udp-listener-wrr-50de9dc0774a8ea1.yaml | 6 ++ .../notes/healthcheck-cache-641f0a64e6f5856c.yaml | 5 ++ ...e-access-to-vip_subnet_id-48fc92b45529cafd.yaml | 5 ++ test-requirements.txt | 2 +- zuul.d/projects.yaml | 27 +++++-- 51 files changed, 598 insertions(+), 139 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6fc42870..9f5123d0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking>=3.0,<4.1.0 # Apache-2.0

1 0

ironic 15.0.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are thrilled to announce the release of: ironic 15.0.2: OpenStack Bare Metal Provisioning This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 15.0.2 ^^^^^^ Known Issues ************ * Some "ipmitool" builds, in particular on machines running Red Hat Enterprise Linux 8.2, have changed the default cipher suite being offered which can cause "ipmitool" to completely fail to negotiate a connection with the BMC. Operators who encounter this situation should use the "ipmi_cipher_suite" parameter in the "driver_info" field to override and directly assert the required cipher. Because of potential security implications of attempting second level auto- negotiation and known BMC vendor behaviors, this must be identified by the operator and explicitly set as logic to attempt to navigate through situations like this may have undesirable results. * When "redfish-virtual-media" is used, fast-track mode will not work as expected, nodes will be rebooted between operations. Upgrade Notes ************* * An automated detection of a IPMI BMC hardware vendor has been added to appropriately handle IPMI BMC variations. Ironic will now query this and save this value if not already set in order to avoid querying for every single operation. Operators upgrading should expect an elongated first power state synchronization if for nodes with the "ipmi" hardware type. Bug Fixes ********* * Fixes the deployment failure with Ussuri (and older) ramdisks that happens when another IPA command runs after "prepare_image". * Fixes an issue with the "ansible" deployment interface where automatic root deviec selection would accidently choose the system CD-ROM device, which was likely to occur when the ansible deployment interface was used with virtual media boot. The "ansible" deployment interface now ignores all Ramdisks, Loopbacks, CD-ROMs, and floppy disk devices. * Fixes the "[deploy]configdrive_use_object_store" option that was broken during the Python 3 transition. * Fixes the problem about grub2 config file. Some higher versions of grub2 (e.g. 2.05 or 2.06-rc1) use grub.cfg-01-MAC, while another lower versions of grub2 (e.g. 2.04) use MAC.conf, so we generate both paths in order to be compatible with both. * Fixes an issue with agent token handling where the agent has not been upgraded resulting in an AgentAPIError, when the token is not required. The conductor now retries without sending an agent token. * Fixes issues when "UEFI" boot mode has been requested with persistent boot to "DISK" where some versions of "ipmitool" do not properly handle multiple options being set at the same time. While some of this logic was addressed in upstream ipmitool (https://github.com/ipmitool/ipmitool/issues/163) development, new versions are not released and vendors maintain downstream forks of the ipmitool utility. When considering vendor specific selector differences (https://storyboard.openstack.org/#!/story/2008241) along with the current stance of new versions from the upstream "ipmitool" community, it only made sense to handle this logic with- in Ironic. In part this was because if already set the selector value would not be updated. Now ironic always transmits the selector value for "UEFI". * Fixes handling of Supermicro "UEFI" supporting BMCs with the "ipmi" hardware type such that an appropriate boot device selector value is sent to the remote BMC to indicate boot from local storage. This is available for both persistent and one-time boot applications. For more information, please consult story 2008241 (https://storyboard.openstack.org/#!/story/2008241) * Fixes handling of the "ipmi" hardware type where "UEFI" boot mode and "one-time" boot to PXE has been requested. As Ironic now specifically transmits the raw commands, this setting should be properly appied where previously PXE boot operations may have previously occured in "Legacy BIOS" mode. * Fixes a potential race in the hash ring code that could result in the hash rings never updated after their initial load. * Fixes the virtual disks creation by changing PERC H740P controller mode from *Enhanced HBA* to *RAID* in delete_configuration clean step. PERC H740P controllers supports RAID mode and Enhanced HBA mode. When the controller is in Enhanced HBA, it creates single disk RAID0 virtual disks of NON-RAID physical disks. Hence the request for VD creation with supported RAID fails due to no available physical disk. This patch converts the PERC H740P RAID controllers to RAID mode if enhanced HBA mode found enabled See bug bug 2007711 (https://storyboard.openstack.org/#!/story/2007711) for more details * Fixes the deprecated "idrac" hardware interface implementation "__init__" methods to call their base class "__init__" methods before emitting a log message warning about their deprecation. For more information, see story 2008197 (https://storyboard.openstack.org/#!/story/2008197) * Allows configuring IPMI cipher suite via the new "driver_info" parameter "ipmi_cipher_suite" to enable operators to navigate "ipmitool" behavior changes around supported ciphers. * When configured to use json-rpc, the "[DEFAULT].host" configuration option to ironic-conductor can now be set to an IPv6 address. Previously it could only be an IPv4 address or a DNS name. * Fixes the issue that when the MAC address of a port group is not set and been attached to instance, the landed bond port cannot get IP address due to inconsistent MAC address between the tenant port and the initially allocated one in the config drive. * Fixes wiping the agent secret token on manual power off or reboot. Also makes sure to remove the agent URL since it may potentially change. * Fixes cleaning and managed inspection not respecting the "default_boot_mode" configuration option. * Fixes cleaning and managed inspection not following the standard boot mode handling logic, particularly, not trying to assert the requested boot mode if the driver allows it. * Adds handling of Redfish BMC's which lack a "BootSourceOverrideMode" flag, such that it is no longer a fatal error for a deployment if the BMC does not support this field. This most common on BMCs which feature only a partial implementation of the "ComputerSystem" resource "boot", but may also be observable on some older generations of BMCs which recieved updates to have partial Redfish support. * The fix for story 2008252 (https://storyboard.openstack.org/#!/story/2008252) synced the boot mode after changing the boot device because Supermicro nodes reset the boot mode if not included in the boot device set. However this can cause a problem on Dell nodes when changing the mode uefi->bios or bios->uefi, see story 2008712 (https://storyboard.openstack.org/#!/story/2008712) for details. Restrict the syncing of the boot mode to Supermicro. * When Ironic configures the BootSourceOverrideTarget setting via Redfish, on Supermicro BMCs it must always configure BootSourceOverrideEnabled or that will revert to default (Once) on the BMC, see story 2008547 (https://storyboard.openstack.org/#!/story/2008547) for details. This is different than what is currently implemented for other BMCs in which the BootSourceOverrideEnabled is not configured if it matches the current setting (see story 2007355 (https://storyboard.openstack.org/#!/story/2007355)) This requires that node.properties['vendor'] be 'supermicro' which will be set by Ironic from the Redfish system response or can be set manually. * After changing the boot device via Redfish, check that the boot mode being reported matches what is configured and, if not, set it to the configured value. Some BMCs change the boot mode when the device is set via Redfish, see story 2008252 for details. * Introduces lazy-loading of ports, portgroups, volume connections and volume targets in task manager to fix performance issues. For periodic tasks which create a task manager object but don't require the aforementioned data (e.g. power sync), this change should reduce the number of database interactions by around two thirds, speeding up overall execution. * Removes stale agent tokens when rebooting nodes using API. This prevents lookup failures for nodes that get rebooted between fast- track operations. * Fixes an issue of powering off with the "idrac-wsman" management interface while the execution of a clear job queue cleaning step is proceeding. Prior to this fix, the clean step would fail when powering off a node. * Fixes timeout in fast-track mode with "redfish-virtual-media" when running one operation after another (e.g. cleaning after inspection). Other Notes *********** * Adds a "detect_vendor" management interface method to the "ipmi" hardware type. This method is being promoted as a higher level interface as the fundimental need to be able to have logic aware of the hardware vendor is necessary with vendor agnostic drivers where slight differences require slightly different behavior. Changes in ironic 15.0.1..15.0.2 -------------------------------- f33bc52b0 Remove grenade jobs from old stable branches c68e50e6c Update the clear job id's constant 8d6cf57bb Make test-setup.sh compatible with mysql8 86a855d61 Delete unavailable py2 package 54376836e update grub2 file name 72fd48b9c Restrict syncing of boot mode to Supermicro 2e4e87556 For Supermicro BMCs set enable when changing boot device 4df73e47e Refactor vendor detection and add Redfish implementation 8bf3f4747 IPMI: Handle vendor set boot device differences 97390e427 Allow unsupported redfish set_boot_mode 691211b10 Lazy-load node details from the DB 5e2eeb311 [Trivial] Fix testing of volume connector exception 0da73cdd3 Fix broken configdrive_use_object_store 8c0568f34 Enable swift temporary URLs in grenade and provide a good error message c3c6cda65 DRAC: Fix a failure to create virtual disk 85a1e3d23 CI: switch the multinode job to tempest-multinode-full-base b2ae2af3f Fixes the issue that instance bond port can't get IP address a6f38ab05 Sync boot mode when changing the boot device via Redfish cfc681817 Use assertCountEqual instead of assertItemsEqual 2248f2ac7 json-rpc: surround IPv6 address with [] in conductor URL a7cfcd181 clean up mac address with the pxe configuration files 6ef6180bd Prevent timeouts when using fast-track with redfish-virtual-media 96a719e4e opt: Enhance old stable branches to use latest python-ibmcclient d48b39430 CI: Making some of the older jobs more specific 7ce314804 CI: Additional minor job changes to improve CI reliability c15d6fd70 Fix a race condition in the hash ring code e5f886e8c Use correct error handler instead of calling process_event('fail') 20de88441 Fix deprecated 'idrac' interface '__init__'s 3943bd143 CI: Patch to fix CI jobs in bugfix/stable branches b9a02e9ab CI: Remove the build check for pre-build ramdisks only ac2d4c086 Allow configuring IPMI cipher suite d9183a0a3 Also wipe agent token on manual power off or reboot 041f1b89e Handle default_boot_mode during cleaning/inspection with PXE/iPXE b4c6d7be4 Do not assume that prepare_image is the last command to run b67ac0c40 Handle an older agent with agent_token 2b740a0c7 Increase memory of tinyipa vms 145d68e8f Ansible deploy - Ignore invalid devices bce1d33e5 Wipe agent token during reboot or power off Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 9 +- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- driver-requirements.txt | 2 +- ironic/common/hash_ring.py | 28 ++-- ironic/common/json_rpc/client.py | 5 +- ironic/common/neutron.py | 6 +- ironic/common/pxe_utils.py | 16 +- ironic/common/swift.py | 7 +- ironic/conductor/deployments.py | 3 +- ironic/conductor/manager.py | 7 + ironic/conductor/task_manager.py | 72 ++++++++- ironic/conductor/utils.py | 67 +++++++- ironic/drivers/base.py | 18 +++ ironic/drivers/modules/agent.py | 46 +++--- ironic/drivers/modules/agent_client.py | 45 +++++- .../ansible/playbooks/library/root_hints.py | 6 + ironic/drivers/modules/boot_mode_utils.py | 5 +- ironic/drivers/modules/deploy_utils.py | 3 + ironic/drivers/modules/drac/inspect.py | 1 + ironic/drivers/modules/drac/management.py | 5 +- ironic/drivers/modules/drac/power.py | 1 + ironic/drivers/modules/drac/raid.py | 166 ++++++++++++++++++- ironic/drivers/modules/drac/vendor_passthru.py | 1 + ironic/drivers/modules/ibmc/utils.py | 10 +- ironic/drivers/modules/ilo/management.py | 9 +- ironic/drivers/modules/ilo/raid.py | 6 +- ironic/drivers/modules/ipmitool.py | 138 +++++++++++++--- ironic/drivers/modules/network/common.py | 4 +- ironic/drivers/modules/network/neutron.py | 6 +- ironic/drivers/modules/pxe_base.py | 3 +- ironic/drivers/modules/redfish/management.py | 62 +++++++- .../unit/api/controllers/v1/test_allocation.py | 4 +- .../unit/api/controllers/v1/test_conductor.py | 4 +- .../api/controllers/v1/test_deploy_template.py | 4 +- .../unit/api/controllers/v1/test_portgroup.py | 4 +- .../api/controllers/v1/test_volume_connector.py | 4 +- .../unit/api/controllers/v1/test_volume_target.py | 4 +- .../unit/drivers/modules/drac/test_management.py | 4 +- .../unit/drivers/modules/ilo/test_management.py | 8 +- .../unit/drivers/modules/irmc/test_inspect.py | 17 -- .../unit/drivers/modules/network/test_common.py | 24 +-- .../unit/drivers/modules/network/test_neutron.py | 92 ++++++++++- .../drivers/modules/redfish/test_management.py | 101 ++++++++++-- .../unit/drivers/modules/test_agent_client.py | 58 +++++++ .../unit/drivers/modules/test_boot_mode_utils.py | 11 ++ .../unit/drivers/modules/test_deploy_utils.py | 31 ++++ .../drivers/modules/xclarity/test_management.py | 2 +- .../run.yaml | 2 +- .../notes/agent-uuid-5d86bc18849acda3.yaml | 5 + ...ble-device-name-filtering-0adfca7d8ba4cbcc.yaml | 9 ++ ...figdrive_use_object_store-93cfd7dc27d90003.yaml | 5 + ...ix-grub2-config-file-name-88e689a982a21684.yaml | 7 + ...andle-older-agent-command-5930124fd03bb327.yaml | 6 + ...uefi-disk-pxe-persistance-0d871825591918b5.yaml | 37 +++++ releasenotes/notes/hash-ring-6ce212ab86c2592d.yaml | 5 + .../idrac-add-ehba-support-10b90c92b8865364.yaml | 15 ++ ...-idrac-interface-__init__-362696b389c86d5d.yaml | 8 + .../notes/ipmi-cipher-suite-499097740f7c86ee.yaml | 18 +++ .../notes/json-rpc-ipv6-host-30eca350f34bc091.yaml | 6 + .../notes/portgroup-mac-649ed31c3525e4f0.yaml | 7 + .../notes/power-off-token-0403e8a054f31125.yaml | 5 + .../notes/pxe-boot-mode-9084ccf35e54bbc0.yaml | 9 ++ ...ride-not-present-handling-92e7263617e467c4.yaml | 9 ++ ...fter-device-to-supermicro-218e8cb57735c685.yaml | 11 ++ ...-redfish-override-enabled-aa51686ed33d3061.yaml | 15 ++ ...r-changing-redfish-device-f60ef90ba5675215.yaml | 8 + .../taskmanager-lazy-load-32a14526c647c2f0.yaml | 9 ++ .../notes/token-reboot-b48b5981a58a30ae.yaml | 5 + ...clear-job-id-constant-fix-c69cf96c55364bb3.yaml | 7 + .../notes/vmedia-fast-track-903076c33c4aca04.yaml | 9 ++ tools/test-setup.sh | 4 +- zuul.d/ironic-jobs.yaml | 48 ++++-- zuul.d/project.yaml | 17 +- 108 files changed, 2034 insertions(+), 393 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 2d8c9671c..f47c0b783 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -20 +20 @@ ansible>=2.7 -python-ibmcclient>=0.1.0,<0.2.0 +python-ibmcclient>=0.1.0,!=0.2.1,<0.3.0

1 0

python-tackerclient 1.1.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We contentedly announce the release of: python-tackerclient 1.1.1: CLI and Client Library for OpenStack Tacker This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tackerclient Download the package from: https://pypi.org/project/python-tackerclient Please report issues through: https://bugs.launchpad.net/python-tackerclient/+bugs For more details, please see below. Changes in python-tackerclient 1.1.0..1.1.1 ------------------------------------------- ee2e460 Improve readability of vnflcm show command 5484536 Display correct fields in output for list command 86fefdb Improve readability of vnf package show command 0d6e331 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 70d79b5 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tackerclient/osc/utils.py | 7 ++++ tackerclient/osc/v1/vnflcm/vnflcm.py | 13 ++++--- tackerclient/osc/v1/vnfpkgm/vnf_package.py | 33 ++++++++++++----- tox.ini | 4 +-- 10 files changed, 121 insertions(+), 47 deletions(-)

1 0

kayobe 8.1.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are jazzed to announce the release of: kayobe 8.1.1: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 8.1.1 ^^^^^ New Features ************ * Adds the "ipa_build_upper_constraints_file" variable to select the upper constraints file used to install diskimage-builder in the virtual environment used for building IPA images. This allows you to install a newer release than the one allowed by the default constraints. * Updates the default image for the seed VM to CentOS 8.3. Upgrade Notes ************* * Updates the "stackhpc.os-images" role to version 1.10.2, for compatibility with the version of diskimage-builder installed by Victoria upper constraints. You must run "kayobe control host upgrade" to update this role in order to successfully build IPA images. Bug Fixes ********* * Fixes an issue when using the "--limit" argument with a host pattern including commas. See story 2008255 for details. * Fixes an issue with Python setup when venv is not used. See story 2008378 for details. * Fixes an issue where custom SSH arguments, such as when setting "ansible_ssh_extra_args", were not being respected when rebooting a host to disable selinux. * Fixes calls to "kolla-ansible" when arguments to "--kolla-limit" contain special characters such as "~" or "&". * Fixes an issue with copying Swift ring files. See story 2007297 for details. * Fixes issue with deleting swift ring temporary files. See story 2008354 for details. * Fixes an issue with the "kayobe seed service deploy" command on CentOS 8.3 release. See story 2008430 for details. * Fixes building deployment images (IPA) with recent versions of ironic-python-agent-builder, by using Victoria upper constraints to install a newer version of diskimage-builder into the virtual environment used for building IPA images. This can be changed using the "ipa_build_upper_constraints_file" variable in "${KAYOBE_CONFIG_PATH}/ipa.yml". Changes in kayobe 8.1.0..8.1.1 ------------------------------ 0b82fa34 Prevent matching unrelated images 649183ce Remove outdated upgrade step 3ebeaefb Update seed VM image to CentOS 8.4 a067a8ba CI: Revert to Docker Hub images for upgrade jobs cf8869ee docs: Update Freenode to OFTC f3415254 CI: Remove unused Docker images after overcloud upgrade dc1f1348 Remove unnecessary requirements from tox.ini 9fdecebe Sync the names and content of the repo-files for CentOS8 0059a8cf CI: switch to quay.io for container images 4eafeab9 Switch to reboot module d633f938 Use released version of mrlesmithjr.mdadm d8f640f1 Fix help texts of inventory options b67c2afe Fix overcloud provision with fast track enabled d64d415f Avoid fact gathering for group_by d5e8bc03 CI: increase Ansible Galaxy retries & add delay 5a045264 Document requirements for symlinks used by custom playbooks fc198dd3 Update seed VM image to CentOS 8.3 a1881104 Wait for overcloud manage and provide state transitions b5df443a CI: display VM console log on ping or SSH failure cbad5e00 CI: Use cached cirros image for seed vm job 9d862eac Update IPA docs and test build with extra-hardware fc53de47 Test building seed deployment images in the seed job 3cf2c992 Fix IPA build on stable/ussuri d2c5f8e3 Quote kolla limit when calling kolla-ansible 8eadb255 CI: Fix overcloud and seed VM jobs on vexxhost clouds 2aa81e84 Add ipa_build_upper_constraints_file variable 9595873f Fix copying Swift ring files 12f2bb18 Fix /tmp/swift-rings/backups/ files deletion 304a869f Fix overcloud host image resolv workaround on CentOS 8.3 783d0f2e Fix --limit with commas 6ee7333e Fix Python setup when venv is not used Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all/ipa | 7 ++ ansible/group_vars/all/kolla | 138 ++++++++++----------- ansible/group_vars/all/seed-vm | 2 +- ansible/kayobe-ansible-user.yml | 1 + ansible/kayobe-target-venv.yml | 2 +- ansible/kolla-openstack.yml | 3 + ansible/overcloud-bios-raid.yml | 1 + ansible/overcloud-grafana-configure.yml | 3 +- ansible/overcloud-host-image-workaround-resolv.yml | 2 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 4 +- ansible/overcloud-introspection-rules.yml | 3 +- ansible/overcloud-ipa-build.yml | 13 +- ansible/overcloud-ipa-images.yml | 3 +- ansible/overcloud-provision.yml | 17 ++- ansible/physical-network.yml | 2 + ansible/provision-net.yml | 3 +- ansible/roles/disable-selinux/tasks/main.yml | 30 +---- ansible/roles/dnf/tasks/local-mirror.yml | 10 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 --- .../dnf/templates/CentOS-Linux-AppStream.repo.j2 | 17 +++ .../dnf/templates/CentOS-Linux-BaseOS.repo.j2 | 17 +++ .../dnf/templates/CentOS-Linux-Extras.repo.j2 | 17 +++ ansible/roles/kolla-openstack/tasks/config.yml | 17 ++- .../roles/swift-rings/files/swift-ring-builder.py | 2 +- ansible/roles/swift-rings/tasks/main.yml | 11 +- ansible/seed-ipa-build.yml | 10 +- dev/functions | 35 +++--- dev/tenks-deploy-config-compute.yml | 4 + etc/kayobe/ipa.yml | 7 ++ etc/kayobe/seed-vm.yml | 2 +- kayobe/ansible.py | 7 +- kayobe/kolla_ansible.py | 10 +- kayobe/utils.py | 27 ++++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 13 ++ playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-base/pre.yml | 5 + .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 6 + playbooks/kayobe-seed-base/globals.yml.j2 | 3 + playbooks/kayobe-seed-base/overrides.yml.j2 | 8 ++ playbooks/kayobe-seed-base/pre.yml | 5 + .../kayobe-seed-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 +- .../fix-limit-with-commas-04a357b0b7ef0371.yaml | 6 + .../notes/fix-python-setup-5e7ff929a6cab092.yaml | 5 + ...ix-selinux-disable-reboot-65c32f5dc895211c.yaml | 6 + ...a-build-upper-constraints-5686abaa161b0d94.yaml | 7 ++ .../notes/quote-kolla-limit-042422e69c008109.yaml | 5 + .../notes/seed-vm-centos-8.3-7726c9d0603508eb.yaml | 4 + .../notes/story-2007297-73f498ef6bc89fe9.yaml | 5 + .../notes/story-2008354-0c34e2ad7aeb7d3d.yaml | 6 + .../notes/story-2008430-6a50101d05219aad.yaml | 6 + .../notes/ussuri-ipa-dib-fix-5a44e28407052df4.yaml | 15 +++ requirements.yml | 5 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 + tools/ansible-galaxy-retried.sh | 6 +- tox.ini | 6 +- 68 files changed, 478 insertions(+), 269 deletions(-)

1 0

tacker 3.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are stoked to announce the release of: tacker 3.0.1: OpenStack NFV Orchestration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tacker Download the package from: https://tarballs.openstack.org/tacker/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker 3.0.0..3.0.1 ------------------------------ 5783b9ff Fix : Register vim if use_barbican is disabled Diffstat (except docs and test files) ------------------------------------- tacker/nfvo/drivers/vim/openstack_driver.py | 2 +- 2 files changed, 9 insertions(+), 6 deletions(-)

1 0

blazar 5.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are amped to announce the release of: blazar 5.0.1: Reservation Service for OpenStack clouds This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixes database migrations with Alembic 1.5.0 or greater. For more details, see bug 1912502 (https://bugs.launchpad.net/blazar/+bug/1912502) * Fixes host creation in the presence of availability zones with no hosts. For more details, see bug 1880646 (https://bugs.launchpad.net/blazar/+bug/1880646) Changes in blazar 5.0.0..5.0.1 ------------------------------ aea56f5 docs: Update Freenode to OFTC 0d71758 Fix use of legacy Alembic API 6922665 Remove lower-constraints job on stable branches 9c5a583 Avoid double slash in Keystone auth_url cedf5fb Use the native Zuul v3 jobs from blazar-tempest-plugin fd652cb Fix up adding availability zone (AZ) to a host on creation 1eea940 Update TOX_CONSTRAINTS_FILE for stable/ussuri fd4b1e8 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 38 ++--------- .../2bcfe76b0474_change_tenant_to_project.py | 4 +- blazar/utils/openstack/neutron.py | 12 ++-- blazar/utils/openstack/nova.py | 13 ++-- blazar/utils/openstack/placement.py | 12 ++-- blazar/utils/trusts.py | 9 +-- playbooks/legacy/blazar-devstack-dsvm/post.yaml | 15 ----- .../legacy/blazar-devstack-dsvm/run-ipv6.yaml | 74 ---------------------- playbooks/legacy/blazar-devstack-dsvm/run.yaml | 65 ------------------- .../alembic-fix-alter-column-42a87657992d1e78.yaml | 5 ++ .../notes/bug-1880646-f1af8c48f895f00e.yaml | 6 ++ tox.ini | 4 +- 15 files changed, 53 insertions(+), 218 deletions(-)

1 0

monasca-api 4.1.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are jazzed to announce the release of: monasca-api 4.1.0: OpenStack Monitoring as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-api Download the package from: https://tarballs.openstack.org/monasca-api/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-api 4.0.0..4.1.0 ----------------------------------- 36f18ae0 Workaround for new pip 20.3 behavior b43809ca Fix log-metric configuration 46f5d4a4 Fix docker publish image job 9ce0e0da Fix publish docker image job ba45906e Align lower-constraints for new pip ad13e892 Add option to choose Kafka client in Docker 8b146d20 Update gevent version to 1.5.0 5b145c2c Fix typo in http_check 080d1fea Update TOX_CONSTRAINTS_FILE for stable/ussuri f310557a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/files/monasca-agent/http_check.yaml | 2 +- devstack/files/monasca-log-metrics/log-metrics.conf | 2 +- devstack/plugin.sh | 7 ++++++- lower-constraints.txt | 12 ++++++------ playbooks/docker-publish.yml | 3 ++- requirements.txt | 2 +- tox.ini | 2 +- 11 files changed, 29 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a89ae871..709ba857 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21 +21 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -six>=1.10.0 # MIT +six>=1.12.0 # MIT

1 0

ironic-python-agent 6.1.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are pumped to announce the release of: ironic-python-agent 6.1.2: Ironic Python Agent Ramdisk This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.1.2 ^^^^^ New Features ************ * Adds an configuration option which can be encoded into the ramdisk itself or the PXE parameters being provided to instruct the agent to ignore bootloader installation or configuration failures. This functionality is useful to work around well-intentioned hardware which is auto-populating all possible device into the UEFI nvram firmware in order to try and help ensure the machine boots. Except, this can also mean any explict configuration attempt will fail. Operators needing this bypass can use the "ipa-ignore-bootloader- failure" configuration option on the PXE command line or utilize the "ignore_bootloader_failure" option for the Ramdisk configuration. In a future version of ironic, this setting may be able to be overriden by ironic node level configuration. * Adds the capability into the agent to read and act upon bootloader CSV files which serve as authoritative indicators of what bootloader to load instead of leaning towards utilizing the default. Known Issues ************ * If multiple bootloader CSV files are present on the EFI filesystem, the first CSV file discovered will be utilized. The Ironic team considers multiple files to be a defect in the image being deployed. This may be changed in the future. Bug Fixes ********* * Setting the new "ipa-ignore-bootloader-failure" config option prevents errors due to bootloader installation failure generated by automatic bootloader entries configuration from multiple attached devices. * The system file system configuration file for Linux machines, the "/etc/fstab" file is now updated to include a reference to the EFI partition in the case of a partition image base deployment. Without this reference, images deployed using partition images could end up in situations where upgrading the bootloader could fail. * Fixes an issue where the bootloader installation can fail on a software RAID volume when no root_device hint is set. See Story 2007905 (https://storyboard.openstack.org/#!/story/2007905) * Fixes an issue with the IntelCnaHardwareManager which prevented hardware managers with lower priority to be executed and therefore may blocked the initialization and collection of hardware these managers are supposed to take care of. * Fixes an error with UEFI based deployments where using a partition image a NVMe device was previously failing due to the different device name pattern. * Fixes a bug where the partitions created during software RAID setup are cleaned too early and therefore may prevent the proper cleaning of the md superblocks. Leaving superblocks behind will impact the creation of new md devices later on. * Fixes retry logic issues with the Agent Lookup which can result in the lookup failing prematurely before being completed, typically resulting in an abrupt end to the agent logging and potentially weird errors like TypeError being reported on the agent process standard error output. For more information see bug 2007968 (https://storyboard.openstack.org/#!/story/2007968) * Detects md component devices by their UUID, rather than by scanning the output of mdadm. This will prevent that devices miss md superblock cleanup when they are currently not part of an array. * Fixes failures with disk image conversions which result in memory allocation or input/output errors due to memory limitations by limiting the number of available memory allocation pools to a non- dynamic reasonable number which should not exceed the available system memory. * The lshw package version B.02.19.2-5 on CentOS 8.4 and 8.5 contains a bug (https://bugzilla.redhat.com/show_bug.cgi?id=1955250) that prevents the size of individual memory banks from being reported, with the result that the total memory size would be reported as 0 in some places. The total memory size is now taken from lshw's total memory size output (which does not suffer from the same problem) when available. * Fixes the agent's EFI boot handling such that EFI assets from a partition image are preserved and used instead of overridden. This should permit operators to use Secure Boot with partition images IF the assets are already present in the partition image. * Since the Ussuri release, IPA has ignored the listen_host and listen_port directives. This fixes the behavior and restores those configuration values to working status. https://storyboard.openstack.org/#!/story/2008016 * Fixes nodes failing after deployment completes due to issues in the Grub2 EFI loader entry addition where a "BOOT.CSV" file provides the authoritative pointer to the bootloader to be used for booting the OS. The base issue with Grub2 is that it would update the UEFI bootloader NVRAM entries with whatever is present in a vendor specific "BOOT.CSV" or "BOOTX64.CSV" file. In some cases, a baremetal machine *can* crash when this occurs. More information can be found at story 2008962 (https://storyboard.openstack.org/#!/story/2008962) * Increase memory usage limit for "qemu-img convert" command to 2 GiB. See Story 2008667 (https://storyboard.openstack.org/#!/story/2008667) for details. Changes in ironic-python-agent 6.1.1..6.1.2 ------------------------------------------- 746f65b Fix getting memory size in some lshw output e03d80d Add function to calculate memory 76d061e Reduce logging verbosity when collecting logs 8287b96 Utilize CSV file for EFI loader selection a4beb1b Make _get_efi_bootloaders return relative paths bc849e2 Limit qemu-img execution arenas d8c116a Increase the memory limit for qemu-img 6324b37 Fix NVMe Partition image on UEFI 7007ea0 Add fstab pointer to EFI partition 9783992 Prevent broken partition image UEFI deploys 8f77a01 Option to enable bootloader config failure bypass ca70841 More refactoring of the image module d59360f Mount all vfat partitions before calling grub2 d0f69e9 Refactor part of image module d8eefc9 Re-enable the ussuri tinyipa jobs 7f3a7e1 Prepare to use ussuri jobs from ipa-builder b9c9b0b Use UPPER_CONSTRAINTS_FILE to deal with ipa-builder 90b79c2 Pin version of ipa-builder when publishing image c23c107 Software RAID: Get component devices by md UUID 80b1492 Remove lower-constraints job 38e6c36 Log a warning of target_boot_mode does not match current boot mode 43fdcb3 Software RAID: Don't delete partitions too early 3c54867 Fix: make Intel CNA hardware manager none generic 3769174 CI: Lower memory usage of VMs/Increase swap 665219e Make WSGI server respect listen_* directives a6f96eb Increase memory for tinyipa jobs 0153622 Fix TypeError on agent lookup failure c78d6be Fix bootloader install issue with MDRAID Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/api/app.py | 13 +- ironic_python_agent/config.py | 13 +- ironic_python_agent/extensions/image.py | 561 ++++++++-- ironic_python_agent/hardware.py | 156 ++- ironic_python_agent/hardware_managers/cna.py | 23 +- ironic_python_agent/ironic_api_client.py | 37 +- ironic_python_agent/shell/write_image.sh | 13 +- ironic_python_agent/utils.py | 3 +- ...all-failure-to-be-ignored-b99667b13afa9759.yaml | 21 + ...nd-efi-partition-to-fstab-e9f945a4dd19bd7a.yaml | 8 + ...oader-install-with-mdraid-0a254035df9d0bed.yaml | 7 + ...nx-hardware-mgr-never-run-72072580be4d6e7a.yaml | 7 + ...-partition-image-handling-b8487133a188fd32.yaml | 6 + .../fix_partition_cleanup-46491861c930db12.yaml | 6 + ...ixes-agent-lookup-retries-1b4bb90b8e783aca.yaml | 9 + ...get_md_components_by_uuid-7f08d423ea9e7c94.yaml | 6 + ...mit-qemu-img-malloc-arena-025ed84115481eae.yaml | 7 + .../lshw-no-memory-bank-size-05ea71987362986e.yaml | 9 + ...serve-efi-folder-contents-ea1e278b3093ec55.yaml | 7 + ...respect-listen-directives-94fb863c5b692c07.yaml | 7 + ...t-bootloader-csv-file-use-c815b520c600cd98.yaml | 22 + .../notes/up-qemuimg-mem-1536183a02b3a235.yaml | 7 + tox.ini | 2 +- zuul.d/ironic-python-agent-jobs.yaml | 12 +- zuul.d/project.yaml | 5 +- 30 files changed, 2255 insertions(+), 294 deletions(-)

1 0

monasca-notification 2.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are psyched to announce the release of: monasca-notification 2.0.1: Reads alarms from Kafka and then notifies the customer using their configured notification method. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-notification Download the package from: https://tarballs.openstack.org/monasca-notification/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-notification 2.0.0..2.0.1 -------------------------------------------- 9dd0ea5 Fix Grafana URL in email notification 8f7a893 Fix zuul publish docker image job 05249ae Update lower-constraints 8fd51cd Fixed docker configuration template 3f9239e Add option to choose Kafka client in Docker 8151806 Remove deprecated YAML config 88df8d2 Set Docker publish jobs caacf3b Update TOX_CONSTRAINTS_FILE for stable/ussuri 2fdf235 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 12 +- lower-constraints.txt | 8 +- monasca_notification/common/utils.py | 12 +- monasca_notification/plugins/email_notifier.py | 3 +- monasca_notification/plugins/hipchat_notifier.py | 1 + monasca_notification/plugins/jira_notifier.py | 1 + monasca_notification/plugins/slack_notifier.py | 1 + monasca_notification/plugins/webhook_notifier.py | 1 + playbooks/docker-publish.yml | 2 +- test-requirements.txt | 2 +- tox.ini | 5 +- 20 files changed, 658 insertions(+), 221 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4c0a30d..a16bb4c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ Babel!=2.4.0,>=2.3.4 # BSD -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

networking-sfc 10.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are satisfied to announce the release of: networking-sfc 10.0.1: APIs and implementations to support Service Function Chaining in Neutron. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/networking-sfc Download the package from: https://pypi.org/project/networking-sfc Please report issues through: https://bugs.launchpad.net/networking-sfc/+bugs For more details, please see below. Changes in networking-sfc 10.0.0..10.0.1 ---------------------------------------- ba57ca7 Monkey patch original current_thread _active 90305b4 [stable] Drop lower-constraints job 3d4f698 Switch to stable/ussuri neutron-tempest-plugin jobs 0d4cb4f Update TOX_CONSTRAINTS_FILE for stable/ussuri 8f44ad9 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 155 -------------------------- networking_sfc/services/sfc/agent/__init__.py | 6 + test-requirements.txt | 1 + tox.ini | 8 +- zuul.d/jobs.yaml | 8 +- zuul.d/project.yaml | 1 - zuul.d/projects.yaml | 6 +- 8 files changed, 16 insertions(+), 170 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 477dd94..47d84f4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19 @@ pylint==1.9.2 # GPLv2 +isort==4.3.21 # MIT

1 0

monasca-persister 2.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We joyfully announce the release of: monasca-persister 2.0.1: Moves metrics and alarm state transitions from the Message Queue to the Metrics and Alarms database. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-persister Download the package from: https://tarballs.openstack.org/monasca-persister/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-persister 2.0.0..2.0.1 ----------------------------------------- 2d4bd37 Fix zuul publish docker image job 72c4097 Fix Docker build 9d64543 Add doc/requirements dfe3b4d Update hacking for Python3 a6c50e5 Set legacy_kafka_client_enabled = False on default for Docker Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 8 ++------ monasca_persister/hacking/checks.py | 21 +++++++++++---------- monasca_persister/persister.py | 3 ++- .../db-per-tenant/migrate-to-db-per-tenant.py | 4 ++-- playbooks/docker-publish.yml | 2 +- releasenotes/source/conf.py | 6 +++--- test-requirements.txt | 12 ++++-------- tox.ini | 17 +++++++++++++++-- 14 files changed, 50 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2a7d547..f277352 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +5,4 @@ bandit>=1.1.0 # Apache-2.0 -flake8<2.6.0,>=2.5.4 # MIT -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. @@ -10 +11,0 @@ stestr>=1.0.0 # Apache-2.0 -docutils>=0.11 # OSI-Approved Open Source, Public Domain @@ -13,5 +13,0 @@ cassandra-driver>=3.11.0 - -# release notes -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD -reno>=2.5.0 # Apache-2.0 -openstackdocstheme>=1.20.0 # Apache-2.0

1 0

monasca-ui 2.0.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are satisfied to announce the release of: monasca-ui 2.0.2: Monasca Plugin for Horizon This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-ui Download the package from: https://tarballs.openstack.org/monasca-ui/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-ui 2.0.1..2.0.2 ---------------------------------- 5e5d70b Alarm definition breakes Alarms view Diffstat (except docs and test files) ------------------------------------- monitoring/alarms/tables.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

python-zaqarclient 1.13.2 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are stoked to announce the release of: python-zaqarclient 1.13.2: Client Library for OpenStack Zaqar Messaging API This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. 1.13.2 ^^^^^^ Upgrade Notes * Python 2.7 support has been dropped. Last release of python- zaqarclient to support py2.7 is OpenStack Train. The minimum version of Python now supported by python-zaqarclient is Python 3.6. Changes in python-zaqarclient 1.13.1..1.13.2 -------------------------------------------- 9750ac6 Drop python 2.7 support and testing Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +-- playbooks/zaqarclient-dsvm-functional/run.yaml | 1 - releasenotes/notes/drop-py-2-7-20019a123a9d5e8f.yaml | 6 ++++++ setup.cfg | 2 -- tox.ini | 12 ++++-------- 6 files changed, 12 insertions(+), 15 deletions(-)

1 0

kolla-ansible 12.1.0 (wallaby)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are chuffed to announce the release of: kolla-ansible 12.1.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Added a new haproxy configuration variable, "haproxy_host_ipv4_tcp_retries2", which allows users to modify this kernel option. This option sets maximum number of times a TCP packet is retransmitted in established state before giving up. The default kernel value is 15, which corresponds to a duration of approximately between 13 to 30 minutes, depending on the retransmission timeout. This variable can be used to mitigate an issue with stuck connections in case of VIP failover, see bug 1917068 for details. * Adds the ability to override the automatic detection of *fluentd_version* and *fluentd_binary*. These can now be defined as extra variables. This removes the dependency of having docker configured for config generation. Bug Fixes ********* * Fixes missing region_name in keystone_auth sections. See bug 1933025 for details. * Fixes default Masakari host monitor config to work with other config that Kolla Ansible sets. This sets "disable_ipmi_check" due to "restrict_to_remotes" being set. It prevents the "TypeError" that happened when host monitor had to take action. This does not affect any functionality so far as Kolla Ansible does not manage IPMI credentials in Pacemaker. LP#1933209 * Fixes an issue where "kolla-ansible" exits with a zero exit code when executed with a bogus command name. LP#1929397 * Fixes the container health check for the "ironic_ipxe" container on Debian and Ubuntu systems. LP#1937037 * Fixes an issue with Magnum when TLS is enabled. LP#781062 Other Notes *********** * Following Cinder upstream, support for using ZFSSA with Cinder has been removed. ZFSSA was unsupported in Train and later removed in Ussuri. Changes in kolla-ansible 12.0.0..12.1.0 --------------------------------------- 8c68ced1a Fix exit code with bogus command name 9f13719b2 Fix ironic_ipxe healthcheck on Debian/Ubuntu 38748d2aa Fix Masakari host monitor default config 0f46987d5 Fix typos in release note 198c2c613 docs: Add note about internal VIP when HAProxy is disabled acf08e289 CI: only run cells job on changes to nova role 47f768d68 CI: fix backups Ceph pool name 270b237b3 magnum: Add CA certificate configuration for internal TLS 9bf681dd9 Make it possible to override automatic fluentd version detection 6d3ebe147 CI: Avoid generating a nova key in cephadm scenario bd0bcd75a [CI] Do not set ansible_python_interpreter for Zuul 8521ddca2 Allow user to set sysctl_net_ipv4_tcp_retries2 0e0f9693a Make rabbitmq cluster_partition_handling configurable 24d3228d0 Add missing region_name in keystoneauth sections 86bf12d2f Drop support for Cinder ZFSSA backend Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/defaults/main.yml | 14 ------- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/templates/cinder.conf.j2 | 15 +------ ansible/roles/common/tasks/config.yml | 12 ++++-- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/haproxy/defaults/main.yml | 4 ++ ansible/roles/haproxy/tasks/config-host.yml | 7 ++-- ansible/roles/heat/templates/heat.conf.j2 | 1 + ansible/roles/ironic/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/magnum/templates/magnum.conf.j2 | 10 +++++ ansible/roles/manila/templates/manila.conf.j2 | 1 + .../masakari/templates/masakari-monitors.conf.j2 | 6 +++ ansible/roles/mistral/templates/mistral.conf.j2 | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + ansible/roles/murano/templates/murano.conf.j2 | 3 ++ ansible/roles/neutron/templates/neutron.conf.j2 | 3 ++ ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/templates/octavia.conf.j2 | 1 + .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 1 + ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + .../reference/high-availability/haproxy-guide.rst | 47 ++++++++++++++++++++++ etc/kolla/globals.yml | 3 +- etc/kolla/passwords.yml | 5 --- .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 +++ .../notes/bug-1933209-73e78353cb5c3266.yaml | 11 +++++ ...fault-migration-interface-3cdf30eed98553fd.yaml | 4 +- .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 +++ .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 +++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 ++++++ ...eb-ironic-ipxe-heathcheck-2ae5fd0537c056ce.yaml | 6 +++ .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 +++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 +++ roles/cephadm/defaults/main.yml | 3 +- tools/kolla-ansible | 2 +- zuul.d/base.yaml | 6 +-- 56 files changed, 209 insertions(+), 71 deletions(-)

1 0

kolla 12.0.1 (wallaby)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We exuberantly announce the release of: kolla 12.0.1: Kolla OpenStack Deployment This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.0.1 ^^^^^^ Bug Fixes * Fixes debian image build failure caused by the official Debian bullseye release changing the os identification. LP#1933770 Changes in kolla 12.0.0..12.0.1 ------------------------------- 52a43b781 Fix missing templating block for kolla-toolbox. 601872b92 Fix prometheus-elasticsearch-exporter container. f0eb095e7 gnocchi: add python3-rados to gnocchi-base source image 655381599 CI: Fix epel url override 66dbe4862 Fix build of debian images 0c9f4a055 [CI] Do not set ansible_python_interpreter for Zuul e3ed1d5b4 tox: Use allowlist_externals instead of whitelist_externals Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 1 - .../prometheus/prometheus-elasticsearch-exporter/Dockerfile.j2 | 2 +- kolla/common/config.py | 2 +- .../add_kolla-toolbox_templating_block-3d284d886816e95a.yml | 5 +++++ releasenotes/notes/bug-1933770-c08c6804aa5d9e61.yaml | 6 ++++++ tox.ini | 8 ++++---- 11 files changed, 31 insertions(+), 21 deletions(-)

1 0

kuryr-kubernetes 2.1.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are psyched to announce the release of: kuryr-kubernetes 2.1.0: Kubernetes integration with OpenStack networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through: https://bugs.launchpad.net/kuryr-kubernetes/+bugs For more details, please see below. Changes in kuryr-kubernetes 2.0.0..2.1.0 ---------------------------------------- a198e82 Fix duplicated sg rules on NP crd 81e5350 Correctly compare SG rules in NP code 0165108 Fix base docker images 4000025 Fix CI issues 43bf7ae Use latest RDO in container images adf0d7c Change registry for fetching coredns image. 3ee234c Move to quay.io with kuryr/demo docker image. 1862d23 Ignore errors when removing containers in DevStack 631364a Handle None or {} labels in match_selector() 8cf3711 DevStack: Disable leader election for K8s services b185cd2 Expand swap back to 8 GBs on gate VMs 9aa5235 Remove dragonflow 3b16d61 Fix CNI image built ecf4aa6 Fix hacking min version to 3.0.1 Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 3 + .zuul.d/sdn.yaml | 29 ------ cni.Dockerfile | 6 +- controller.Dockerfile | 2 +- devstack/lib/kuryr_kubernetes | 2 +- devstack/plugin.sh | 21 +++- .../controller/drivers/network_policy.py | 116 ++++++++++++--------- kuryr_kubernetes/controller/drivers/utils.py | 9 +- .../unit/controller/drivers/test_network_policy.py | 30 ++++-- .../drivers/test_network_policy_security_groups.py | 8 +- lower-constraints.txt | 19 +--- requirements.txt | 4 +- test-requirements.txt | 2 +- 16 files changed, 157 insertions(+), 125 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 33d32e2..94b0ad3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -requests>=2.18.0 # Apache-2.0 +requests>=2.18.4 # Apache-2.0 @@ -18 +18 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.service!=1.28.1,>=1.31.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index c1a26c6..2e42c1a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=2.0.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

kayobe 9.1.0 (victoria)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are happy to announce the release of: kayobe 9.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Supports extra kernel options specified as strings instead of lists. * Adds the "ipa_build_upper_constraints_file" variable to select the upper constraints file used to install diskimage-builder in the virtual environment used for building IPA images. This allows you to install a newer release than the one allowed by the default constraints. * Updates the default image for the seed VM to CentOS 8.3. Upgrade Notes ************* * When interacting with Bifrost, sourcing the "env-vars" file is not supported anymore. Set the "OS_CLOUD" environment variable to "bifrost" instead or run ". ~/openrc bifrost". * When interacting with Bifrost, it is recommended to use the ironic native "baremetal" command instead of "openstack baremetal", as the availability of OpenStackClient inside the Bifrost container is not guaranteed. * Until the Victoria release, Bifrost disabled node cleaning, however it became enabled in Victoria. To maintain backward compatibility, Kayobe now modifies the configuration in Bifrost to disable node cleaning of overcloud hosts. Deprecation Notes ***************** * When interacting with Bifrost, the use of "OS_CLOUD=bifrost- inspector" is deprecated and should be replaced by "OS_CLOUD=bifrost". Bug Fixes ********* * Fixes failure in the "kayobe seed deployment image build" command due to changes in Bifrost. * Fixes formatting of extra kernel options configured with "kolla_bifrost_extra_kernel_options" when passed to Bifrost. See story 2008714 for details. * Fixes an issue when using the "--limit" argument with a host pattern including commas. See story 2008255 for details. * Fixes an issue where custom SSH arguments, such as when setting "ansible_ssh_extra_args", were not being respected when rebooting a host to disable selinux. * Fixes calls to "kolla-ansible" when arguments to "--kolla-limit" contain special characters such as "~" or "&". * Fixes an issue with copying Swift ring files. See story 2007297 for details. * Fixes issue with deleting swift ring temporary files. See story 2008354 for details. * Fixes an issue with the "kayobe seed service deploy" command on CentOS 8.3 release. See story 2008430 for details. Changes in kayobe 9.0.0..9.1.0 ------------------------------ 67c2e122 Prevent matching unrelated images f0e520bf Fix url to ansible site in kolla-ansible.rst 8d906d9b Remove outdated upgrade step 2dad64bc Update seed VM image to CentOS 8.4 d01a6ce0 docs: add variable for current branch 0746885b docs: improve automated seed development info 8a8905eb [docs] Improve contributor's automated setup document 0c8ab159 Fix overcloud post configure Python interpreter issues 0a8f1fb6 docs: Update Freenode to OFTC 688d8e16 Fix host configuration due to missing python3 37ab622c CI: Remove unused Docker images after overcloud upgrade cdcb9080 Sync the names and content of the repo-files for CentOS8 ca5e876b CI: switch to quay.io for container images c5f5b0bd Stop using platform-python c5136d9b Switch to reboot module 29f7e75a Disable Bifrost cleaning by default bf10fce8 Use released version of mrlesmithjr.mdadm 831f1cf4 Fix help texts of inventory options 5a2f121c Fix overcloud provision with fast track enabled a7d33af6 CentOS Stream 8: Use /usr/bin/which instead of bash function 71ee0ef6 Avoid fact gathering for group_by 517520e1 CI: increase Ansible Galaxy retries & add delay e3f49dc4 Support extra kernel options specified as strings instead of lists 881217b4 Document requirements for symlinks used by custom playbooks 1138f030 Update seed VM image to CentOS 8.3 46cd7e13 Fix formatting of extra kernel options for Bifrost 5446355e Wait for overcloud manage and provide state transitions 9fb2c5d1 CI: display VM console log on ping or SSH failure ff8d5e9d CI: Use cached cirros image for seed vm job 6df44cd4 Update IPA docs and test build with extra-hardware cbb00dd8 Quote kolla limit when calling kolla-ansible 27611510 CI: Fix overcloud and seed VM jobs on vexxhost clouds 0aae33b1 Add ipa_build_upper_constraints_file variable d3861f20 Test building seed deployment images in the seed job 124a1493 Adapt to changes from the Bifrost Victoria release ed498331 Fix copying Swift ring files ffce4886 Fix deployment image build in Victoria 950b9a71 Fix /tmp/swift-rings/backups/ files deletion e660db00 Fix overcloud host image resolv workaround on CentOS 8.3 6ec66524 Fix --limit with commas Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/ipa | 4 + ansible/group_vars/all/kolla | 136 +++++++-------- ansible/group_vars/all/seed-vm | 2 +- ansible/kayobe-ansible-user.yml | 23 ++- ansible/kayobe-target-venv.yml | 2 +- ansible/kolla-openstack.yml | 3 + ansible/kolla-pip.yml | 2 +- ansible/overcloud-bios-raid.yml | 5 +- ansible/overcloud-deprovision.yml | 6 +- ansible/overcloud-grafana-configure.yml | 3 +- ansible/overcloud-hardware-inspect.yml | 8 +- ansible/overcloud-host-image-workaround-resolv.yml | 2 +- ansible/overcloud-introspection-data-save.yml | 2 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 4 +- ansible/overcloud-introspection-rules.yml | 3 +- ansible/overcloud-ipa-build.yml | 13 +- ansible/overcloud-ipa-images.yml | 3 +- ansible/overcloud-provision.yml | 21 ++- ansible/physical-network.yml | 2 + ansible/pip.yml | 2 +- ansible/provision-net.yml | 3 +- ansible/roles/dell-switch-bmp/handlers/main.yml | 6 +- ansible/roles/disable-selinux/tasks/main.yml | 30 +--- ansible/roles/dnf/tasks/local-mirror.yml | 10 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 --- ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 --- .../dnf/templates/CentOS-Linux-AppStream.repo.j2 | 17 ++ .../dnf/templates/CentOS-Linux-BaseOS.repo.j2 | 17 ++ .../dnf/templates/CentOS-Linux-Extras.repo.j2 | 17 ++ .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 8 +- ansible/roles/kolla-openstack/tasks/config.yml | 17 +- .../roles/swift-rings/files/swift-ring-builder.py | 2 +- ansible/roles/swift-rings/tasks/main.yml | 11 +- ansible/seed-ipa-build.yml | 12 +- dev/functions | 39 +++-- dev/tenks-deploy-config-compute.yml | 4 + dev/tenks-deploy-config-overcloud.yml | 2 + .../reference/ironic-python-agent.rst | 40 ++--- .../configuration/reference/kolla-ansible.rst | 2 +- .../scenarios/all-in-one/overcloud.rst | 6 +- etc/kayobe/ipa.yml | 4 + etc/kayobe/seed-vm.yml | 2 +- kayobe/ansible.py | 7 +- kayobe/kolla_ansible.py | 10 +- kayobe/utils.py | 27 +++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 4 + playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-base/pre.yml | 1 - .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 13 ++ .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-upgrade-base/pre.yml | 5 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 11 ++ playbooks/kayobe-seed-base/globals.yml.j2 | 3 + playbooks/kayobe-seed-base/overrides.yml.j2 | 8 + playbooks/kayobe-seed-base/pre.yml | 5 + playbooks/kayobe-seed-upgrade-base/globals.yml.j2 | 3 + .../kayobe-seed-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-seed-upgrade-base/pre.yml | 5 + playbooks/kayobe-seed-upgrade-base/run.yml | 5 + playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 +- .../bifrost-victoria-fixes-eed49b088afdac5b.yaml | 19 +++ .../disable-bifrost-cleaning-ff10995a0bf11079.yaml | 7 + ...ra-kernel-options-strings-bec7d851e334fec5.yaml | 4 + ...ronic-extra-kernel-params-9ebdec1212ac9827.yaml | 6 + .../fix-limit-with-commas-04a357b0b7ef0371.yaml | 6 + ...ix-selinux-disable-reboot-65c32f5dc895211c.yaml | 6 + ...a-build-upper-constraints-5686abaa161b0d94.yaml | 7 + .../notes/quote-kolla-limit-042422e69c008109.yaml | 5 + .../notes/seed-vm-centos-8.3-7726c9d0603508eb.yaml | 4 + .../notes/story-2007297-73f498ef6bc89fe9.yaml | 5 + .../notes/story-2008354-0c34e2ad7aeb7d3d.yaml | 6 + .../notes/story-2008430-6a50101d05219aad.yaml | 6 + requirements.yml | 7 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 + tools/ansible-galaxy-retried.sh | 6 +- 91 files changed, 661 insertions(+), 451 deletions(-)

1 0

kuryr-libnetwork 5.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are pumped to announce the release of: kuryr-libnetwork 5.0.1: Docker libnetwork driver for OpenStack Neutron This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kuryr-libnetwork Download the package from: https://tarballs.openstack.org/kuryr-libnetwork/ Please report issues through: https://bugs.launchpad.net/kuryr-libnetwork/+bugs For more details, please see below. Changes in kuryr-libnetwork 5.0.0..5.0.1 ---------------------------------------- 2f05e8b Install tox before running tests 9b164c5 Handle subnet without gateway 080cd17 Update TOX_CONSTRAINTS_FILE for stable/ussuri 86a2816 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + kuryr_libnetwork/controllers.py | 10 ++++++++-- tox.ini | 2 +- 5 files changed, 17 insertions(+), 6 deletions(-)

1 0

kolla-ansible 11.1.0 (victoria)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We eagerly announce the release of: kolla-ansible 11.1.0: Ansible Deployment of Kolla containers This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * Add "octavia-driver-agent" to "Octavia" deployments to allow for additional providers, e.g. "ovn-octavia-provider". It is automatically deployed when "Octavia" is enabled and "neutron_plugin_agent" is set to "ovn". It can be also enabled by setting "enable_octavia_driver_agent" to "yes". Users need to update their inventory to include "octavia-driver-agent" Ansible group. * Adds a new flag, "docker_disable_default_network", which defaults to "no". Docker is using "172.17.0.0/16" by default for bridge networking on "docker0", and this might cause routing problems for operator networks. Setting this flag to "yes" will disable Docker's bridge networking. This feature will be enabled by default from the Wallaby 12.0.0 release. * Added a new haproxy configuration variable, "haproxy_host_ipv4_tcp_retries2", which allows users to modify this kernel option. This option sets maximum number of times a TCP packet is retransmitted in established state before giving up. The default kernel value is 15, which corresponds to a duration of approximately between 13 to 30 minutes, depending on the retransmission timeout. This variable can be used to mitigate an issue with stuck connections in case of VIP failover, see bug 1917068 for details. * Adds the ability to override the automatic detection of *fluentd_version* and *fluentd_binary*. These can now be defined as extra variables. This removes the dependency of having docker configured for config generation. * OVN deployment will now configure "external_ids:ovn-chassis-mac- mappings" to make DVR work on VLAN tenant networks. * Adds support for collecting Prometheus metrics from RabbitMQ. This is enabled by default when Prometheus and RabbitMQ are enabled, and may be disabled by setting "enable_prometheus_rabbitmq_exporter" to "false". Bug Fixes ********* * Fixes an issue with "kolla-ansible bootstrap-servers" if Zun is enabled where Zun-specific configuration for Docker was applied to all nodes. LP#1914378 * Fix the issue when Swift deployed with S3 Token Middleware enabled. Fixes LP#1862765 * Fixes the Northbound and Southbound database socket paths in OVN. * chronyd crash loop if server is rebooted (Debian) LP#1915528 * Fixes an issue preventing prechecks from succeeding when "non- native" NTP daemon was used, such as "ntpd` as opposed to ``systemd- timesyncd" on a Debian/Ubuntu system or to "chronyd" on a CentOS/RHEL system. LP#1922721 * Fixed an issue when Docker was configured after startup on Debian/Ubuntu, which resulted in iptables rules being created - before they were disabled. LP#1923203 * Fixes an issue with Octavia SSH key copying if user disabled Octavia auto configuration. LP##1927727 * Fixed an issue where docker python SDK 5.0.0 was failing due to missing six - introduced a constraint to install version lower than 5.x. LP#1928915 * Fixes more-than-2-node RabbitMQ upgrade failing randomly. LP#1930293. * Fixes Swift deploy when TLS enabled. Added the missing handler and corrected the container name. LP#1931097 * Fixes missing region_name in keystone_auth sections. See bug 1933025 for details. * Fixes "iscsid" failing in current CentOS 8 based images due to pid file being needlessly set. LP#1933033 * Fixes host bootstrap on Debian not removing the conflicting packages. It now behaves in accordance with the docs. LP#1933122 * Fixes an issue where "kolla-ansible" exits with a zero exit code when executed with a bogus command name. LP#1929397 * Fixes potential issue with Alertmanger in non-HA deployments. In this scenario, peer gossip protocol is now disabled and Alertmanager won't try to form a cluster with non-existing other instances. LP#1926463 * Adds a new flag, "docker_disable_ip_forward", which defaults to "no" and can be used (by setting "yes") to disable docker's "ip- forward" option which makes docker set "net.ipv4.ip_forward" sysctl to "1". This is to protect from creating all-forwarding hosts. LP#1931615 * Fixes an issue when generating "/etc/hosts" during "kolla-ansible bootstrap-servers" when one or more hosts has an "api_interface" with dashes ("-") in its name. LP#1927357 * Fixes some configuration issues around Barbican logging. LP#1891343 * Fixes some configuration issues around Cinder logging. LP#1916752 * Fix cyborg api doesn't listen on api interface. change host to host_ip in cyborg.conf. See the cyborg documentation * Fix the wrong configuration of the ovs-dpdk service. this breaks the deployment of kolla-ansible. For more details please see bug 1908850. * Fixes an issue with Magnum when TLS is enabled. LP#781062 * Fixes an issue with executing "kolla-ansible" when installed via "pip install --user". LP#1915527 * Fixes an issue where "masakari.conf" was generated for the "masakari-instancemonitor" service but not used. * Fixes an issue where "masakari-monitors.conf" was generated for the "masakari-api" and "masakari-engine" services but not used. * Uses a consistent variable name for container dimensions for "masakari-instancemonitor" - "masakari_instancemonitor_dimensions". The old name of "masakari_monitors_dimensions" is still supported. * Fixes an issue with Octavia deployment when using a custom service auth project. If "octavia_service_auth_project" is set to a project that does not exist, Octavia deployment would fail. The project is now created. LP#1922100 * Fixes LP#1892376 by updating deprecated syntax in the Monasca Elasticsearch template. * Removes whitespace around equal signs in "zookeeper.cfg" which were preventing the "zkCleanup.sh" script from running correctly. Other Notes *********** * Following Cinder upstream, support for using ZFSSA with Cinder has been removed. ZFSSA was unsupported in Train and later removed in Ussuri. * Updates the container image used by mariabackup. It was using the "mariadb" image, which was deprecated in Victoria and will be removed in Wallaby. The "mariadb-server" image is used instead. LP#1928129 Changes in kolla-ansible 11.0.0..11.1.0 --------------------------------------- 51eac17b4 Fix exit code with bogus command name e712915f3 [doc] Fix reno (disable-ip-forward) bdc1b468a Fix typos in release note d61340ba3 Allow user to set sysctl_net_ipv4_tcp_retries2 5c70c920c Disable docker's ip-forward when iptables disabled 0846f4afa [docker] Added a new flag to disable default network 0467055b2 docs: Add note about internal VIP when HAProxy is disabled 338d97731 magnum: Add CA certificate configuration for internal TLS 9681041d0 CI: Avoid generating a nova key in ceph-ansible scenario a2e5cfb85 Make it possible to override automatic fluentd version detection d41e01406 [CI] Do not set ansible_python_interpreter for Zuul 3b5bcc16a Make rabbitmq cluster_partition_handling configurable 37017d1a0 CI: Fix nfv job with kolla dependency 567fb01a7 [CI] Fix the NFV scenario f0487e793 Add missing region_name in keystoneauth sections b83ea3149 Drop support for Cinder ZFSSA backend fdbe6aebe Fix host bootstrap pkg removal on Debian 7b19b2e31 Add missing octavia-driver-agent 77d70f0d8 Do not set pid file for iscsid 5bc072141 baremetal: fix /etc/hosts generation when api_interface has dashes 12157d68b chronyd crash loop if Debian server is rebooted 5283eb8bf Stop fluentd deprecation warnings of type vs @type 903601a7a Fix parsing of infra.mariadb.xinetd logs f557229ef Fix neutron-ovn-metadata-agent with policy.yaml 1d6906bbb octavia: Ensure service auth project exists 9d9198294 Merge glance sections for nova.conf.j2 ef270b693 Redis configuration syntax update a75a489e3 Update blazar.conf template 421d7acfb Support editable installation in all cases 5b6af5094 Add the ansible_managed header for admin-openrc.sh 6387e431f Fix RabbitMQ restart ordering 595eec10b Add forgotten 'Restart container' handler for swift cece51910 [CI] Drop Zuul host groups 7244e4744 Use mariadb-server image for mariabackup dda891ac6 docs: Update Freenode to OFTC 5d538edd1 CI: Use PATH to find kolla-ansible script 91bfccb8f CI: pull images before deploy 9a0da6463 cinder: fix condition to copy backend TLS certs f3ea05ace Remove [octavia]/base_url option from neutron.conf 513a3b1fe CI: Configure IP on a linux bridge instead of OVS br-ex 5ef58708c baremetal: Install Docker SDK less than 5.0.0 34fb2c890 baremetal: Don't start Docker after install on Debian/Ubuntu edd64f3c4 Disable Alertmanager's peer gossip in non-HA deployments 2f062e3b3 ovn: make DVR work on VLAN tenant networks 4a10df452 Use @type instead of type 326e15d58 Do not write octavia_amp_ssh_key if auto_config disabled 570f46d21 Fix "Restart mariadb-clustercheck container" during config gen 2357c9793 Fix cyborg api doesn't listen on api interface 985d78222 Pin ansible to <2.10.0 in test-requirements 9ad4b7ae2 prometheus: Collect metrics from rabbitmq 561853796 masakari: fix minor issues with instance monitor d5c131bc5 CI: Use 5G loop device for ceph 54195f468 Add IPv6 configuration options to Octavia management network 5bdeef89b Negative seqno need to be considered when comparing seqno 466e4cc7c docs: Improve policy documentation 15eea3ee6 Apply Zun configuration for Docker based on inventory 1b40f0dc9 Drop the NTP service precheck 366be65fd [CI] Use images from quay.io 382add560 nova-cell: Stop printing ceph keys in output abc41f86d Reduce number of logs and disable ara HTML report d0839a3cb CI: Fix yamllint comments-indentation in .ansible-lint 5143b8925 docs: fix registry mirror example ce1dbd9fb don't use the same CIDR in octavia_amp_network_cidr and init-run-once 27f088eac Correctly configure S3 Token Middleware for Swift b32492e72 ansible-lint: add unnamed-task to the skip list eb66ef75f Introduce nova_libvirt_logging_debug 81cf413c5 Rename eswitchd.conf -> eswitchd.conf.j2 c5f41a19a Remove whitespace around equal signs in zookeeper.cfg b9f8543f1 Fix Cinder log parsing 469d28b3a CI: Add ssh retries 4f25a2015 Replace db-sock with db-nb-sock and db-sb-sock ea89f1cc1 ovn: Fix disabling of gateway chassis ff3a144d7 Update String type for Monasca ES template 3db84cce0 Do not wait for grafana to start when kolla_action=config fd10dcb96 Fix monasca-grafana check 77d050957 Fix installation with pip install --user c4f6ca1cd CI: fix kolla-ansible installation after cryptography 3.4 release 4f6988564 Fix Barbican API log config b4cede498 docs: improve external Ceph docs 9698fa153 docs: Improve multinode Docker registry setup 05e6d4a4d Fix dpdk deploy failed 25286fbf1 Install gnupg before adding docker apt gpg key during pre-install ac6039bd6 Fixes solum_api Listening on 127.0.0.1 996eeb2b7 Fix failure during Monasca Grafana upgrade 174cd7b15 octavia: fix typo in defaults Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 22 +++-- ansible/action_plugins/merge_configs.py | 27 +++++- ansible/group_vars/all.yml | 11 ++- ansible/inventory/all-in-one | 3 + ansible/inventory/multinode | 3 + ansible/roles/aodh/templates/aodh.conf.j2 | 1 + .../roles/barbican/templates/barbican-api.ini.j2 | 1 + .../roles/barbican/templates/barbican-api.json.j2 | 2 +- ansible/roles/barbican/templates/barbican.conf.j2 | 4 + .../roles/baremetal/tasks/bootstrap-servers.yml | 5 +- ansible/roles/baremetal/tasks/install.yml | 28 +++++- ansible/roles/baremetal/tasks/post-install.yml | 50 ++++++++-- ansible/roles/baremetal/tasks/pre-install.yml | 7 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 11 +-- ansible/roles/chrony/templates/chrony.json.j2 | 4 +- ansible/roles/cinder/defaults/main.yml | 14 --- ansible/roles/cinder/tasks/config.yml | 2 +- ansible/roles/cinder/tasks/precheck.yml | 1 - ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 18 +--- ansible/roles/common/tasks/config.yml | 12 ++- ansible/roles/common/templates/admin-openrc.sh.j2 | 2 + .../templates/conf/filter/01-rewrite-0.12.conf.j2 | 4 +- .../templates/conf/filter/01-rewrite-0.14.conf.j2 | 4 +- .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 8 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 4 +- .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/handlers/main.yml | 1 + ansible/roles/haproxy/defaults/main.yml | 4 + ansible/roles/haproxy/tasks/config-host.yml | 7 +- ansible/roles/heat/templates/heat.conf.j2 | 1 + .../ironic/templates/ironic-inspector.conf.j2 | 2 + ansible/roles/iscsi/templates/iscsid.json.j2 | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 10 ++ ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/defaults/main.yml | 2 +- ansible/roles/mariadb/handlers/main.yml | 2 + ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/masakari/defaults/main.yml | 10 +- ansible/roles/masakari/tasks/clone.yml | 2 +- ansible/roles/masakari/tasks/config.yml | 33 ++++--- ansible/roles/mistral/templates/mistral.conf.j2 | 1 + ansible/roles/monasca/handlers/main.yml | 3 +- ansible/roles/monasca/tasks/upgrade.yml | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + .../elasticsearch-template.json | 12 +-- ansible/roles/murano/templates/murano.conf.j2 | 3 + .../templates/{eswitchd.conf => eswitchd.conf.j2} | 0 .../templates/neutron-ovn-metadata-agent.json.j2 | 13 ++- ansible/roles/neutron/templates/neutron.conf.j2 | 8 +- ansible/roles/nova-cell/defaults/main.yml | 1 + ansible/roles/nova-cell/tasks/external_ceph.yml | 1 + ansible/roles/nova-cell/templates/libvirtd.conf.j2 | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +- ansible/roles/nova/templates/nova.conf.j2 | 1 + ansible/roles/octavia/defaults/main.yml | 39 +++++++- ansible/roles/octavia/handlers/main.yml | 15 +++ ansible/roles/octavia/tasks/check-containers.yml | 2 +- ansible/roles/octavia/tasks/config.yml | 12 ++- ansible/roles/octavia/tasks/prepare.yml | 3 + ansible/roles/octavia/tasks/pull.yml | 2 +- ansible/roles/octavia/tasks/register.yml | 15 --- .../roles/octavia/templates/octavia-api.json.j2 | 6 ++ .../octavia/templates/octavia-driver-agent.json.j2 | 23 +++++ ansible/roles/octavia/templates/octavia.conf.j2 | 12 +++ ansible/roles/ovn/defaults/main.yml | 2 + ansible/roles/ovn/tasks/bootstrap.yml | 12 ++- ansible/roles/ovn/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/defaults/main.yml | 2 - .../roles/ovs-dpdk/templates/ovsdpdk-db.json.j2 | 2 +- .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/prechecks/tasks/timesync_checks.yml | 10 -- .../templates/prometheus-alertmanager.json.j2 | 2 +- .../roles/prometheus/templates/prometheus.yml.j2 | 9 ++ ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/rabbitmq/handlers/main.yml | 18 +++- ansible/roles/rabbitmq/templates/rabbitmq.conf.j2 | 3 +- ansible/roles/redis/templates/redis.conf.j2 | 10 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/service-precheck/tasks/main.yml | 1 + ansible/roles/solum/templates/solum.conf.j2 | 4 + ansible/roles/swift/defaults/main.yml | 2 +- ansible/roles/swift/handlers/main.yml | 4 + ansible/roles/swift/templates/proxy-server.conf.j2 | 2 +- ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zookeeper/tasks/config.yml | 1 + .../reference/high-availability/haproxy-guide.rst | 47 ++++++++++ .../reference/storage/external-ceph-guide.rst | 101 ++++++++++++++------- etc/kolla/globals.yml | 9 +- etc/kolla/passwords.yml | 5 - lower-constraints.txt | 87 ------------------ .../bootstrap-without-zun-67d6ee5d84fcec22.yaml | 6 ++ .../notes/bug-1862765-a6cad9fd2d3f0f48.yaml | 5 + .../notes/bug-1903506-12ae72c114bede72.yaml | 9 ++ .../notes/bug-1913031-e8b14c50e8a27d14.yaml | 4 + ...yd-crash-loop-if-server-is-rebooted-debian.yaml | 5 + .../notes/bug-1922721-19163cfb491d0035.yaml | 7 ++ .../notes/bug-1923203-f9ff247befc4bd75.yaml | 6 ++ .../notes/bug-1927727-4437103de59e85e5.yaml | 6 ++ .../notes/bug-1928915-482b2d53bb2a4d92.yaml | 6 ++ .../notes/bug-1930293-d8a524f2070e6779.yaml | 5 + .../notes/bug-1931097-c94832ed2ed92c3a.yaml | 6 ++ .../notes/bug-1933025-1cb5d64d20d57be7.yaml | 6 ++ .../notes/bug-1933033-76746d127285cfe8.yaml | 6 ++ .../notes/bug-1933122-b34311ba73092080.yaml | 6 ++ ...fault-migration-interface-3cdf30eed98553fd.yaml | 4 +- .../notes/cli-exit-code-1e6278f803dbf8e2.yaml | 6 ++ ...e-alertmanager-clustering-ec70f5f970c4933a.yaml | 7 ++ .../docker-disable-bridge-14df8b7fddbd5000.yaml | 9 ++ ...docker-disable-ip-forward-b0490b71f9f07cd6.yaml | 9 ++ .../notes/drop-zfssa-2708a8c0b0eb5f43.yaml | 5 + .../notes/etc-hosts-dashes-37d0dc07c8fc881f.yaml | 7 ++ ...g-to-die-after-VIP-switch-5f9e811783c36041.yaml | 13 +++ .../fix-barbican-logging-42068f47fe1e4e4d.yaml | 5 + .../notes/fix-cinder-logging-22fea4739begd6s.yaml | 5 + .../fix-cyborg-host-config-dee1d79476b94981.yaml | 6 ++ .../fix-dpdk-deploy-failed-6695899422a67359.yaml | 7 ++ .../fix-magnum-tls-cacert-dd5ab5729391beb2.yaml | 5 + .../fix-pip-install-user-5f871f67433e465a.yaml | 6 ++ .../notes/mariabackup-image-8b31622f59890e28.yaml | 7 ++ ...ari-instancemonitor-fixes-dc13e5234456d4c5.yaml | 12 +++ ...eate-service-auth-project-aa38b12ebb601777.yaml | 7 ++ ...fluentd-version-detection-3cb8b8a8ebc02d0a.yaml | 6 ++ .../notes/ovn_dvr_vlan-f36a6868cfd4776e.yaml | 5 + .../prometheus-rabbitmq-f7d6ebf0d611a819.yaml | 6 ++ ...ca-elasticsearch-template-41492c59acaf92b1.yaml | 6 ++ .../zookeeper-cfg-syntax-02e93c01d6a24f35.yaml | 5 + roles/bridge/tasks/main.yml | 12 +++ roles/veth/tasks/main.yml | 12 +++ test-requirements.txt | 2 +- tools/kolla-ansible | 30 +++++- tox.ini | 8 +- zuul.d/base.yaml | 12 +-- zuul.d/nodesets.yaml | 16 ---- zuul.d/project.yaml | 1 - 171 files changed, 1119 insertions(+), 501 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f960fd505..cab4df184 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=2.9.0 # GPLv3 +ansible>=2.9.0,<2.10.0 # GPLv3

1 0

kolla 10.3.0 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are stoked to announce the release of: kolla 10.3.0: Kolla OpenStack Deployment This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 10.3.0 ^^^^^^ Upgrade Notes ************* * RabbitMQ and Erlang packages are now installed from "packagecloud.io" (and PPA for Debian/Ubuntu) since "bintray.com" is getting shut down May 1st, 2021. * The "sensu" images which were deprecated in the Ussuri cycle has been removed. Bug Fixes ********* * Fixes an issue with Swift containers failing to start in Ubuntu binary images. LP#1905279 * Fixes an issue with the "kolla_set_configs --check" command when the compared files are non-Unicode. LP#1913952 * Fixes location of monitoring_policy in Horizon, so access policy is correctly enforced. Note that by current default, admin doesn't not have Monitoring access. LP#1928408 * Fix support for kolla install in "~/.local". LP#1930544 * Fixes issues arising from the lack of Debian updates repo being enabled. LP#1931544 * Fixes Mistral source images to respect upper-constraints. Other Notes *********** * Debian images enable the Debian updates repo now. This is aligned with the base Debian image. Changes in kolla 10.2.0..10.3.0 ------------------------------- 4d1221083 gnocchi: add python3-rados to gnocchi-base source image 2b7ff0d39 CI: Fix epel url override ce988a2eb [CI] Do not set ansible_python_interpreter for Zuul f7556324f horizon: Correct location of monitoring_policy file 253c215f1 Fix build of masakari-monitors image 5c676e4a9 Fix _get_images_dir when pip-installed with --user 7cfb5b4bb Enable Debian updates repo b908906a5 docs: Update Freenode to OFTC 9389ac1b4 [CI] Support building source images with in-review changes 8ec3f577a CI: drop bashism from template overrides 4a4823804 [CI] Trust only infra mirrors da0fd2095 Add `crudini` to ovs-dpdk containers b8f23bf71 swift: fix group membership in debuntu/binary f3704f99f Install RabbitMQ repo key on Ubuntu and Debian bf2e0d62e CentOS on AArch64 has only Erlang 22 f4a5d52df Pin erlang c366a5ca1 rabbitmq: Move to packagecloud c80ac9717 [CI] Publish images to quay.io on a daily basis 00339ecc4 base: configure curl before first use 075d38162 rabbitmq: bump Erlang requirements to v23 in Debian 3de3fea92 Debian: use QEMU 5 from buster-backports 8a8c7bbff Fix Ussuri builds due to RDO Virtualization GPG key dc5fe2f0e Make kolla_set_configs open files in binary mode b5a049011 Drop lower-constraints a9200da9a nova-compute: provide needed deps for debian/aarch64 2419efb5d get rid of traces of CentOS 7 support 27b2914b4 Remove sensu images 7a4044afb Fix Mistral source images to respect upper-constraints 636a2438f Bump up rally and rally-openstack d555005ba Revert virtualenv workaround 6c2f355ad [CI] Stop checking TripleO 57d05bc7e base: install setuptools to fix build on aarch64 a6e528dfb nova-compute: 'pmdk-tools' is x86-64 only in Ubuntu 'bionic' 0b73f618d docs: drop Fedora info, mark Ubuntu one as Debian / Ubuntu 51002b4f7 CI: Use Docker proxy for pulls cc31403d2 Update projects in README.rst 724860f78 Add a storm-base image 346796691 CI: revert to public package mirrors after build a11b99c85 Remove footer block from intermediate images eb5f9c1f6 Bump prometheus-openstack-exporter version to 1.3.0 Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 28 ++++- .zuul.d/centos.yaml | 50 +++++--- .zuul.d/debian.yaml | 67 +++++++++-- .zuul.d/ubuntu.yaml | 42 ++++++- README.rst | 2 - .../neutron-infoblox-ipam-agent/Dockerfile.j2 | 5 + .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- .../{sensu/sensu-api => storm/storm}/Dockerfile.j2 | 8 +- kolla/common/config.py | 6 +- kolla/image/build.py | 8 +- kolla/template/repos.yaml | 20 +-- lower-constraints.txt | 92 -------------- .../notes/bug-1905279-41d664114ef26a16.yaml | 6 + .../notes/bug-1913952-a23431cef137f9c7.yaml | 6 + .../notes/bug-1928408-4a22a85570eee8d6.yaml | 7 ++ .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 + .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 ++ .../notes/mistral-respect-uc-77aea99b5c6506ba.yaml | 4 + .../rabbitmq-packagecloud-c009ff6d0d2bd02d.yaml | 6 + .../notes/remove-sensu-a20b01d025385aa1.yaml | 5 + roles/kolla-build-config/defaults/main.yml | 134 +++++++++++++++++++++ roles/kolla-build-config/tasks/main.yml | 5 + .../templates/kolla-build.conf.j2 | 27 +++++ tools/validate-binary-build.sh | 1 - tox.ini | 6 - 66 files changed, 675 insertions(+), 499 deletions(-)

1 0

kayobe 10.0.1 (wallaby)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are psyched to announce the release of: kayobe 10.0.1: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. Changes in kayobe 10.0.0..10.0.1 -------------------------------- f6393996 Prevent matching unrelated images 9ac76bfa Ubuntu: CI: rely on os_distribution, remove interfaces pause feeb4353 Remove outdated upgrade step cda42898 Fix url to ansible site in kolla-ansible.rst Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all/kolla | 130 ++++++++++----------- .../configuration/reference/kolla-ansible.rst | 2 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 7 -- playbooks/kayobe-seed-base/overrides.yml.j2 | 5 +- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 6 - 6 files changed, 67 insertions(+), 106 deletions(-)

1 0

kolla 11.1.0 (victoria)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are amped to announce the release of: kolla 11.1.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * "octavia-driver-agent" image was added to support other Octavia providers than "amphora". Upgrade Notes ************* * RabbitMQ and Erlang packages are now installed from "packagecloud.io" (and PPA for Debian/Ubuntu) since "bintray.com" is getting shut down May 1st, 2021. Bug Fixes ********* * Fixes an issue with Swift containers failing to start in Ubuntu binary images. LP#1905279 * Fixes an issue with the "kolla_set_configs --check" command when the compared files are non-Unicode. LP#1913952 * Fixes location of monitoring_policy in Horizon, so access policy is correctly enforced. Note that by current default, admin doesn't not have Monitoring access. LP#1928408 * Fix support for kolla install in "~/.local". LP#1930544 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.*. LP#1930867 * Fixes issues arising from the lack of Debian updates repo being enabled. LP#1931544 * Fixes an issue with the Fluentd Monasca output plugin related to a more recent openssl library. LP#1910382 * Fixes Mistral source images to respect upper-constraints. Other Notes *********** * Debian images enable the Debian updates repo now. This is aligned with the base Debian image. Changes in kolla 11.0.0..11.1.0 ------------------------------- be0373c92 Fix missing templating block for kolla-toolbox. cbc404a72 Fix prometheus-elasticsearch-exporter container. b9eac37a6 gnocchi: add python3-rados to gnocchi-base source image 9fde574c6 CI: Fix epel url override 61f0b1200 [CI] Do not set ansible_python_interpreter for Zuul 32eb32f1b horizon: Correct location of monitoring_policy file 29048206e Fix build of masakari-monitors image 08e95e532 Fix _get_images_dir when pip-installed with --user d52bb8e7b Pin td-agent to 4.0.* to fix missing logs ddea2f482 gnocchi-base: numpy provides aarch64 binary wheels 2c8ea03a7 Enable Debian updates repo c916ec1eb docs: Update Freenode to OFTC 1366332e5 CI: drop bashism from template overrides 967555e17 [CI] Trust only infra mirrors a596231e3 Add `crudini` to ovs-dpdk containers bc97aa584 swift: fix group membership in debuntu/binary 29bb43d53 Install RabbitMQ repo key on Ubuntu and Debian 0c20a44f9 CentOS on AArch64 has only Erlang 22 3ee3c7d7c Pin erlang 4c366e9fb Disable trove for Debian/binary cbf43757f rabbitmq: Move to packagecloud cc310a525 [CI] Publish images to quay.io on a daily basis 302f4a9cd base: configure curl before first use 73d4a7f4a base: Debian has QEMU 5.2 now so update pinning 3da9ded5f rabbitmq: bump Erlang requirements to v23 in Debian 619d017dc Add octavia-driver-agent f72a4b36e Make kolla_set_configs open files in binary mode 224fd4a1c Drop lower-constraints 65870d965 get rid of traces of CentOS 7 support 4e3b178e6 Upgrade the Monasca Fluentd output plugin 6e02f9588 Horizon: gentler `-o nounset` handling cf305aaaf Fix Mistral source images to respect upper-constraints 5f3620629 Bump up rally and rally-openstack b0711b6ef docs: drop Fedora info, mark Ubuntu one as Debian / Ubuntu fb67dcc03 horizon: set FORCE_GENERATE to no if not set d94546089 CI: Use Docker proxy for pulls eb557bb04 Update projects in README.rst db7dfe141 Add a storm-base image 556b9382a CI: revert to public package mirrors after build 790f96133 Remove footer block from intermediate images cf795f300 Bump prometheus-openstack-exporter version to 1.3.0 Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 28 ++++++- .zuul.d/centos.yaml | 42 ++++++++-- .zuul.d/debian.yaml | 67 +++++++++++++--- .zuul.d/ubuntu.yaml | 42 ++++++++-- README.rst | 2 - .../neutron-infoblox-ipam-agent/Dockerfile.j2 | 5 ++ .../Dockerfile.j2 | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/common/config.py | 8 +- kolla/image/build.py | 2 + kolla/template/repos.yaml | 20 ++--- lower-constraints.txt | 90 ---------------------- ...a-toolbox_templating_block-3d284d886816e95a.yml | 5 ++ .../notes/bug-1905279-41d664114ef26a16.yaml | 6 ++ .../notes/bug-1913952-a23431cef137f9c7.yaml | 6 ++ .../notes/bug-1928408-4a22a85570eee8d6.yaml | 7 ++ .../notes/bug-1930544-a8926990f3a578a9.yaml | 5 ++ releasenotes/notes/bug-1930867.yaml | 6 ++ .../notes/bug-1931544-5a091735efb6d6dd.yaml | 9 +++ ...sca-fluentd-output-plugin-c27798ba186a8ef7.yaml | 6 ++ .../notes/mistral-respect-uc-77aea99b5c6506ba.yaml | 4 + .../octavia-driver-agent-83ee17b82c577e95.yaml | 5 ++ .../rabbitmq-packagecloud-c009ff6d0d2bd02d.yaml | 6 ++ tox.ini | 6 -- 59 files changed, 572 insertions(+), 344 deletions(-)

1 0

kuryr-lib 2.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are overjoyed to announce the release of: kuryr-lib 2.0.1: Kuryr shared config and utilities This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kuryr-lib Download the package from: https://tarballs.openstack.org/kuryr/ For more details, please see below. Changes in kuryr-lib 2.0.0..2.0.1 --------------------------------- 2f021ec Remove run_as_root which fails without root_helper 6108958 Remove the unused coding style modules 90a458f Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 8c24aef Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + kuryr/lib/binding/drivers/hw_veb.py | 1 - kuryr/lib/binding/drivers/veth.py | 5 ++--- lower-constraints.txt | 5 ----- tox.ini | 2 +- 6 files changed, 4 insertions(+), 12 deletions(-)

1 0

magnum-ui 6.0.1 (ussuri)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are chuffed to announce the release of: magnum-ui 6.0.1: Magnum User Interface This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/magnum-ui Download the package from: https://tarballs.openstack.org/magnum-ui/ Please report issues through: https://bugs.launchpad.net/magnum-ui/+bugs For more details, please see below. Changes in magnum-ui 6.0.0..6.0.1 --------------------------------- 4a561a9 Fix cluster resize 1852c35 Fix npm jobs f2c8f36 Imported Translations from Zanata e1deec8 Imported Translations from Zanata 5bd5ced Imported Translations from Zanata fd5e8fe Update TOX_CONSTRAINTS_FILE for stable/ussuri bb0f5d8 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + magnum_ui/api/rest/magnum.py | 12 +- magnum_ui/locale/de/LC_MESSAGES/djangojs.po | 64 ++- magnum_ui/locale/id/LC_MESSAGES/djangojs.po | 328 ++++++++++- package.json | 2 +- .../source/locale/de/LC_MESSAGES/releasenotes.po | 519 ----------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 629 --------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 66 --- .../source/locale/id/LC_MESSAGES/releasenotes.po | 468 --------------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 586 ------------------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 540 ------------------ .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 421 -------------- .../source/locale/ru/LC_MESSAGES/releasenotes.po | 49 -- .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 279 --------- tox.ini | 4 +- 15 files changed, 398 insertions(+), 3570 deletions(-)

1 0

horizon 20.0.0 (xena)
by no-reply＠openstack.org 29 Jul '21

29 Jul '21

We are gleeful to announce the release of: horizon 20.0.0: OpenStack Dashboard This release is part of the xena release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 20.0.0 ^^^^^^ New Features ************ * When multiple availability zones are available, the default behavior is to allow the scheduler to spawn a VM in any of them. The new setting "LAUNCH_INSTANCE_DEFAULTS.default_availability_zone" allows an administrator to specify a default static availability zone for new VM creation. Upgrade Notes ************* * With this release, Horizon uses only the Block Storage API v3. Horizon has been using the Block Storage API v3 by default since Queens, so this change should not impact Horizon functionality. (The Block Storage API v2 was deprecated by the Cinder project in the Pike release, and is scheduled to be removed in the Xena release.) Bug Fixes ********* * Get the timezone offset for the current day instead of January 1st. This bug only appears to be a cosmetic one where the TZ offset would be calculated on current_year/01/01 so would remain in daylight saving offset when displaying the timezones list in the user configuration settings. Changes in horizon 19.1.0..20.0.0 --------------------------------- 788988f24 Clean up the workaround of cinderclient v2->v3 transition b58ac2894 Drop cinder v2 API support 310a24d05 Imported Translations from Zanata 647c2b753 Imported Translations from Zanata 09e57d6eb Imported Translations from Zanata ca429efbd Magic Search filter facet removal fix 866a17037 integration tests: Relax router interface status check 547049bb1 Imported Translations from Zanata 8ba5dd7c5 Imported Translations from Zanata cdb08a1ad doc: Update our IRC server to OFTC ebec26abe Imported Translations from Zanata 3aaeadf89 Default role checker should be case-insensitive. 6071b622b Imported Translations from Zanata ae7896cea Consisent abbreviation of size units 00c5825ca setup.cfg: Replace dashes with underscores be505aefa Imported Translations from Zanata b815cbfc7 Imported Translations from Zanata cdb0f013c Imported Translations from Zanata 2bb6d6070 Imported Translations from Zanata 3f2adabf1 Setup project-template for nodejs14 jobs 473290f13 Imported Translations from Zanata c87f0e7a9 Change with_data=False for swift_get_container 4e195570e Sync default policy rules e0d348c64 Fix minor points in the policy doc 4310a9541 Add Python3 xena unit tests a89c27b44 Update master for stable/wallaby 03e848b18 Imported Translations from Zanata 36f1f7e3c Imported Translations from Zanata f0736c517 Use policy_rules for user role assignment and group tabs 5c2afa97b Imported Translations from Zanata 742658679 Imported Translations from Zanata 60cf32031 Don't load user role assignment or groups tabs for non-admins ffe84dbf9 Move linters dependencies to tox.ini 893d0c026 Replace Delete Force Volume Backup with Force Delete Volume Backup 3d82d5735 Save instace_id inside Associate Floating IP workflow dadd45add handle missing access_rules f60220329 Get the timezone offset for the current day instead of January 1st. 3e4d0ad77 Fix `_data_table.html` weird conditional. a42235f6f Update cirros image to cirros-0.5.2-x86_64 a19d08062 Imported Translations from Zanata 6ac091795 Imported Translations from Zanata fc8603a49 Add default_availability_zone for VM creation b09e5b303 Move "Domain" field under "User Name" and "Password" b07ed28a9 Don't fail integration tests if browser log couldn't be retrieved Diffstat (except docs and test files) ------------------------------------- .zuul.d/django-jobs.yaml | 2 +- .zuul.d/nodejs-jobs.yaml | 51 + .zuul.d/project.yaml | 5 +- .zuul.d/xstatic-master.yaml | 6 + .../locale/en_GB/LC_MESSAGES/doc-configuration.po | 76 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 211 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 7 +- horizon/locale/cs/LC_MESSAGES/django.po | 12 +- horizon/locale/de/LC_MESSAGES/django.po | 11 +- horizon/locale/en_AU/LC_MESSAGES/django.po | 11 +- horizon/locale/en_GB/LC_MESSAGES/django.po | 17 +- horizon/locale/eo/LC_MESSAGES/django.po | 11 +- horizon/locale/es/LC_MESSAGES/django.po | 63 +- horizon/locale/es/LC_MESSAGES/djangojs.po | 11 +- horizon/locale/es_MX/LC_MESSAGES/django.po | 11 +- horizon/locale/fi_FI/LC_MESSAGES/django.po | 11 +- horizon/locale/fr/LC_MESSAGES/django.po | 14 +- horizon/locale/hi/LC_MESSAGES/django.po | 15 +- horizon/locale/id/LC_MESSAGES/django.po | 10 +- horizon/locale/it/LC_MESSAGES/django.po | 11 +- horizon/locale/ja/LC_MESSAGES/django.po | 10 +- horizon/locale/ko_KR/LC_MESSAGES/django.po | 10 +- horizon/locale/nl_NL/LC_MESSAGES/django.po | 5 +- horizon/locale/pa_IN/LC_MESSAGES/django.po | 11 +- horizon/locale/pl_PL/LC_MESSAGES/django.po | 12 +- horizon/locale/pt/LC_MESSAGES/django.po | 5 +- horizon/locale/pt_BR/LC_MESSAGES/django.po | 11 +- horizon/locale/ru/LC_MESSAGES/django.po | 12 +- horizon/locale/sl_SI/LC_MESSAGES/django.po | 5 +- horizon/locale/tr_TR/LC_MESSAGES/django.po | 11 +- horizon/locale/zh_Hans/LC_MESSAGES/django.po | 10 +- horizon/locale/zh_Hant/LC_MESSAGES/django.po | 10 +- .../magic-search/magic-search.controller.js | 4 + .../magic-search/magic-search.controller.spec.js | 8 + horizon/templates/horizon/common/_data_table.html | 4 +- horizon/templatetags/sizeformat.py | 10 +- .../test/unit/templatetags/test_templatetags.py | 2 +- lower-constraints.txt | 21 +- openstack_auth/forms.py | 6 +- openstack_auth/locale/de/LC_MESSAGES/django.po | 10 +- openstack_auth/locale/es/LC_MESSAGES/django.po | 10 +- openstack_auth/locale/ja/LC_MESSAGES/django.po | 15 +- openstack_dashboard/api/cinder.py | 15 +- openstack_dashboard/api/keystone.py | 4 +- openstack_dashboard/api/swift.py | 2 +- openstack_dashboard/conf/cinder_policy.yaml | 30 +- .../conf/default_policies/cinder.yaml | 48 +- .../conf/default_policies/glance.yaml | 586 ++++-- .../conf/default_policies/neutron.yaml | 2223 ++++++++++++++++---- .../conf/default_policies/nova.yaml | 117 -- openstack_dashboard/conf/glance_policy.yaml | 311 ++- openstack_dashboard/conf/neutron_policy.yaml | 1962 +++++++++++++++-- openstack_dashboard/conf/nova_policy.yaml | 65 - .../dashboards/admin/backups/tables.py | 8 +- .../dashboards/admin/defaults/tables.py | 2 +- .../dashboards/admin/defaults/workflows.py | 2 +- openstack_dashboard/dashboards/admin/info/tabs.py | 2 +- .../dashboards/admin/snapshots/panel.py | 2 +- .../dashboards/admin/volume_types/panel.py | 2 +- .../dashboards/admin/volumes/panel.py | 2 +- .../identity/application_credentials/forms.py | 15 +- .../dashboards/identity/projects/workflows.py | 2 +- .../dashboards/identity/users/tabs.py | 2 + .../dashboards/project/backups/panel.py | 2 +- .../dashboards/project/floating_ips/workflows.py | 26 +- .../dashboards/project/snapshots/panel.py | 2 +- .../launch-instance-model.service.js | 41 +- .../launch-instance-model.service.spec.js | 52 +- .../dashboards/project/volumes/panel.py | 2 +- .../dashboards/settings/user/forms.py | 3 +- openstack_dashboard/defaults.py | 1 + .../locale/as/LC_MESSAGES/django.po | 11 +- .../locale/bn_IN/LC_MESSAGES/django.po | 11 +- .../locale/brx/LC_MESSAGES/django.po | 11 +- .../locale/cs/LC_MESSAGES/django.po | 11 +- .../locale/de/LC_MESSAGES/django.po | 11 +- .../locale/de/LC_MESSAGES/djangojs.po | 21 +- .../locale/en_AU/LC_MESSAGES/django.po | 11 +- .../locale/en_GB/LC_MESSAGES/django.po | 79 +- .../locale/en_GB/LC_MESSAGES/djangojs.po | 8 +- .../locale/eo/LC_MESSAGES/django.po | 11 +- .../locale/es/LC_MESSAGES/django.po | 1959 +++++++++++++---- .../locale/es/LC_MESSAGES/djangojs.po | 693 +++++- .../locale/fr/LC_MESSAGES/django.po | 11 +- .../locale/gu/LC_MESSAGES/django.po | 11 +- .../locale/hi/LC_MESSAGES/django.po | 11 +- .../locale/id/LC_MESSAGES/django.po | 11 +- .../locale/it/LC_MESSAGES/django.po | 11 +- .../locale/ja/LC_MESSAGES/django.po | 88 +- .../locale/ja/LC_MESSAGES/djangojs.po | 27 +- .../locale/kn/LC_MESSAGES/django.po | 11 +- .../locale/ko_KR/LC_MESSAGES/django.po | 11 +- .../locale/kok/LC_MESSAGES/django.po | 11 +- .../locale/ks/LC_MESSAGES/django.po | 11 +- .../locale/mai/LC_MESSAGES/django.po | 11 +- .../locale/mni/LC_MESSAGES/django.po | 11 +- .../locale/mr/LC_MESSAGES/django.po | 11 +- .../locale/ne/LC_MESSAGES/django.po | 11 +- .../locale/pa_IN/LC_MESSAGES/django.po | 11 +- .../locale/pl_PL/LC_MESSAGES/django.po | 11 +- .../locale/pt_BR/LC_MESSAGES/django.po | 11 +- .../locale/ru/LC_MESSAGES/django.po | 11 +- .../locale/ta/LC_MESSAGES/django.po | 11 +- .../locale/tr_TR/LC_MESSAGES/django.po | 11 +- .../locale/ur/LC_MESSAGES/django.po | 11 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 11 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 11 +- .../core/images/actions/create-volume.service.js | 3 +- .../pages/admin/system/defaultspage.py | 2 +- .../pages/project/network/floatingipspage.py | 6 +- openstack_dashboard/test/test_data/cinder_data.py | 53 +- .../test/test_data/keystone_data.py | 23 - .../test/unit/api/rest/test_keystone.py | 14 +- openstack_dashboard/test/unit/api/test_cinder.py | 35 +- openstack_dashboard/test/unit/api/test_keystone.py | 22 + openstack_dashboard/test/unit/api/test_swift.py | 3 +- openstack_dashboard/usage/quotas.py | 4 +- ...default_availability_zone-9c070832b2992958.yaml | 8 + .../notes/bug-1822849-2833b5e6a5d021b7.yaml | 8 + .../notes/cinder-v3-only-daae11ff71a26ba7.yaml | 9 + releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 8 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 135 +- .../source/locale/id/LC_MESSAGES/releasenotes.po | 22 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 230 +- releasenotes/source/wallaby.rst | 6 + requirements.txt | 14 +- setup.cfg | 6 +- test-requirements.txt | 7 +- tox.ini | 20 +- 143 files changed, 8105 insertions(+), 2240 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aaa9ad13a..37866b9d7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=5.5.0 # Apache-2.0 @@ -13 +13 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD +Babel>=2.6.0 # BSD @@ -21 +21 @@ iso8601>=0.1.11 # MIT -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=4.3.1 # Apache-2.0 @@ -25 +25 @@ oslo.config>=5.2.0 # Apache-2.0 -oslo.i18n>=3.15.3 # Apache-2.0 +oslo.i18n>=5.0.1 # Apache-2.0 @@ -29 +29 @@ oslo.upgradecheck>=0.1.1 # Apache-2.0 -oslo.utils>=3.40.0 # Apache-2.0 +oslo.utils>=4.8.0 # Apache-2.0 @@ -33 +33 @@ pyScss>=1.3.7 # MIT License -python-cinderclient>=5.0.0 # Apache-2.0 +python-cinderclient>=8.0.0 # Apache-2.0 @@ -41 +41 @@ PyYAML>=3.12 # MIT -requests>=2.14.2 # Apache-2.0 +requests>=2.25.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 85762109a..77cf8727c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,4 +8,0 @@ -# Hacking should appear first in case something else depends on pep8 -hacking>=3.0.1,<3.1.0 # Apache-2.0 -# -bandit!=1.6.0,>=1.4.0 # Apache-2.0 @@ -14 +10 @@ coverage!=4.4,>=4.0 # Apache-2.0 -flake8-import-order==0.12 # LGPLv3 +freezegun>=0.3.15 # Apache-2.0 @@ -20 +15,0 @@ python-memcached>=1.59 # PSF -pylint==2.6.0 # GPLv2

1 0

tripleo-validations 12.3.6 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We are thrilled to announce the release of: tripleo-validations 12.3.6: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.3.6 ^^^^^^ New Features * RHEL-8.3 kernel disabled the Intel “TSX” (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process. This also impacts upstream CentOS systems. Changes in tripleo-validations 12.3.5..12.3.6 --------------------------------------------- c1ec034 [ussuri-only] molecule-requirements constraints e889268 Migrate back haproxy validation to tripleo-validations 7c937a0 Compute TSX validation 8a659c4 Add Validation Development Workflow Documentation aa54732 Introduce new Ansible validation_init role. eea038f Remove workaround for tox-ansible and global molecule config 3bab48c Quick documentation content reorganization ccecdcb Trigger molecule tests when modifying CI scripts a6d9d13 Add shared configuration for all molecule test 8c3b847 Enabling indentation rule for yamllint. 90858c7 Remove the post-update groups. Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 35 +++ .config/molecule/config.yml | 70 +++++ .yamllint | 6 +- CONTRIBUTING.rst | 57 +++- README.rst | 10 +- _skeleton_role_/molecule/default/Dockerfile | 37 --- _skeleton_role_/molecule/default/molecule.yml | 49 --- .../developer_guide.rst} | 349 +++++++++++++++------ .../modules/modules-tripleo_haproxy_conf.rst | 14 + .../roles/role-check_for_dangling_images.rst | 8 +- library/tripleo_haproxy_conf.py | 108 +++++++ molecule-requirements.txt | 20 +- playbooks/check-uc-hostname.yaml | 1 - playbooks/compute-tsx.yaml | 31 ++ playbooks/tripleo-haproxy.yaml | 26 ++ .../compute-tsx-validation-5d976a3fc5166536.yaml | 13 + role-addition.yml | 136 +------- .../molecule/default/molecule.yml | 49 +-- .../molecule/ceph-ansible-installed/Dockerfile | 37 --- .../molecule/ceph-ansible-installed/molecule.yml | 53 +--- roles/ceph/molecule/default/Dockerfile | 37 --- roles/ceph/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 35 --- .../molecule/default/molecule.yml | 48 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 37 +-- .../check_rhsm_version/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 51 +-- .../molecule/rhsm_mismatch/Dockerfile | 37 --- .../molecule/rhsm_mismatch/molecule.yml | 53 +--- .../check_uc_hostname/molecule/default/Dockerfile | 35 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/config_OK/Dockerfile | 37 --- .../molecule/config_OK/molecule.yml | 53 +--- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 53 +--- .../molecule/deprecated_drivers/Dockerfile | 37 --- .../molecule/deprecated_drivers/molecule.yml | 53 +--- .../molecule/deprecated_params/Dockerfile | 37 --- .../molecule/deprecated_params/molecule.yml | 53 +--- .../molecule/required_missing/Dockerfile | 37 --- .../molecule/required_missing/molecule.yml | 53 +--- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/compute_tsx/README.md | 64 ++++ roles/compute_tsx/defaults/main.yml | 26 ++ roles/compute_tsx/molecule/default/converge.yml | 79 +++++ roles/compute_tsx/molecule/default/molecule.yml | 3 + roles/compute_tsx/tasks/main.yml | 82 +++++ roles/compute_tsx/vars/main.yml | 23 ++ roles/container_status/molecule/default/Dockerfile | 37 --- .../container_status/molecule/default/molecule.yml | 50 +-- roles/controller_token/molecule/default/Dockerfile | 37 --- .../controller_token/molecule/default/molecule.yml | 50 +-- .../controller_ulimits/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../ctlplane_ip_range/molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/dhcp_validations/molecule/default/Dockerfile | 37 --- .../dhcp_validations/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/image_serve/molecule/default/Dockerfile | 37 --- roles/image_serve/molecule/default/molecule.yml | 36 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/node_disks/molecule/default/Dockerfile | 37 --- roles/node_disks/molecule/default/molecule.yml | 50 +-- roles/node_health/molecule/default/Dockerfile | 37 --- roles/node_health/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- roles/nova_status/molecule/default/Dockerfile | 37 --- roles/nova_status/molecule/default/molecule.yml | 50 +-- roles/nova_svirt/molecule/default/Dockerfile | 37 --- roles/nova_svirt/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 38 +-- .../molecule/deprecated_services/Dockerfile | 37 --- .../molecule/deprecated_services/molecule.yml | 38 +-- .../molecule/down_services/Dockerfile | 37 --- .../molecule/down_services/molecule.yml | 38 +-- roles/ovs_dpdk_pmd/molecule/default/Dockerfile | 37 --- roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 50 +-- roles/pacemaker_status/molecule/default/Dockerfile | 37 --- .../pacemaker_status/molecule/default/molecule.yml | 50 +-- roles/package_version/molecule/default/Dockerfile | 37 --- .../package_version/molecule/default/molecule.yml | 50 +-- roles/rabbitmq_limits/molecule/default/Dockerfile | 37 --- .../rabbitmq_limits/molecule/default/molecule.yml | 50 +-- roles/repos/molecule/default/Dockerfile | 37 --- roles/repos/molecule/default/molecule.yml | 50 +-- roles/stack_health/molecule/default/Dockerfile | 37 --- roles/stack_health/molecule/default/molecule.yml | 50 +-- roles/stonith_exists/molecule/default/Dockerfile | 37 --- roles/stonith_exists/molecule/default/molecule.yml | 50 +-- roles/switch_vlans/molecule/default/Dockerfile | 37 --- roles/switch_vlans/molecule/default/molecule.yml | 50 +-- roles/system_encoding/molecule/default/Dockerfile | 37 --- .../system_encoding/molecule/default/molecule.yml | 50 +-- roles/tls_everywhere/molecule/default/Dockerfile | 37 --- roles/tls_everywhere/molecule/default/molecule.yml | 35 +-- roles/tripleo_haproxy/defaults/main.yml | 21 ++ .../tripleo_haproxy/molecule/default/converge.yml | 71 +++++ .../tripleo_haproxy/molecule/default/molecule.yml | 3 + roles/tripleo_haproxy/tasks/main.yml | 56 ++++ roles/undercloud_debug/molecule/default/Dockerfile | 37 --- .../undercloud_debug/molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../molecule/default/Dockerfile | 37 --- .../molecule/default/molecule.yml | 50 +-- .../non-persistent-token-format/Dockerfile | 37 --- .../non-persistent-token-format/molecule.yml | 50 +-- roles/validation_init/README.md | 47 +++ roles/validation_init/defaults/main.yml | 28 ++ .../files/_skeleton_role_}/defaults/main.yml.j2 | 2 +- .../files/_skeleton_role_}/handlers/main.yml | 2 +- .../molecule/default/converge.yml.j2 | 2 +- .../_skeleton_role_/molecule/default/molecule.yml | 3 + .../_skeleton_role_/molecule/default/prepare.yml | 25 ++ .../_skeleton_role_/molecule/default/verify.yml | 24 ++ .../files/_skeleton_role_}/tasks/main.yml.j2 | 2 +- .../files/_skeleton_role_}/vars/main.yml.j2 | 2 +- .../validation_init/molecule/default/converge.yml | 62 ++++ .../validation_init/molecule/default/molecule.yml | 3 + roles/validation_init/molecule/default/prepare.yml | 96 ++++++ roles/validation_init/molecule/default/verify.yml | 137 ++++++++ roles/validation_init/tasks/main.yml | 180 +++++++++++ roles/validation_init/templates/README.md.j2 | 39 +++ tox.ini | 6 +- zuul.d/base.yaml | 6 +- zuul.d/layout.yaml | 3 +- zuul.d/molecule.yaml | 337 ++++++++++++++------ zuul.d/playbooks/pre.yml | 19 -- zuul.d/playbooks/run.yml | 2 +- 166 files changed, 2306 insertions(+), 4747 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 29dbebe..00c01d2 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -1,10 +1,10 @@ -# this is required for the molecule jobs -ansi2html -ansible -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 -pytest -pytest-cov -pytest-html -pytest-xdist -selinux # MIT +# # this is required for the molecule jobs +ansi2html>=1.5.0 # LGPLv3+ +ansible==2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +jinja2>=2.8.0,<3 # BSD-3-Clause +molecule>=3.0,<3.1 # MIT +pytest>=5.3.0 # MIT +pytest-cov>=2.9.0,<2.10.0 # MIT +pytest-html>=2.1.1 # MPL 2.0 +pytest-xdist>=1.34.0 # MIT +selinux>=0.2.0 # MIT

1 0

os-net-config 12.3.5 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We joyfully announce the release of: os-net-config 12.3.5: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.4..12.3.5 --------------------------------------- c8cac5e Avoid creating multiple entries of udev rules Diffstat (except docs and test files) ------------------------------------- os_net_config/sriov_config.py | 27 ++++-- 2 files changed, 158 insertions(+), 8 deletions(-)

1 0

tripleo-heat-templates 12.4.5 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We joyfully announce the release of: tripleo-heat-templates 12.4.5: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.5 ^^^^^^ New Features ************ * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK Bug Fixes ********* * InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile do not point to the default IPA ca.crt file and instead are requested to be loaded to component specific CA files (even if they are the same). This can lead to a race where the CA cert is not being written by certmonger in time. Ib868465c20d97c62cbcb214bfc62d949bd6efc62 already changed the default to use the IPA system cacert file '/etc/ipa/ca.crt' per default starting with the wallaby release using the ansible role. This change backports to also use the IPA system cacert file '/etc/ipa/ca.crt' to previous release when managing the certs via puppet-tripleo. Other Notes *********** * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 12.4.4..12.4.5 ------------------------------------------------ 8f79482b4 Do not log amphora ssh keys 4c49a20d2 Add OS version to check reboot happened b303b5091 Support cinder image conversion on an NFS share ba393720b Make default of NeutronDefaultAvailabilityZones empty array 6a3ebac50 Neutron: Use the pids subsystem to look up container id bef9856ab Add support for keystone_authtoken/memcache_use_advanced_pool a10dee72c Enforce internal api for token verification 8e412bd6c Add TLS support to services using memcached cc89c48df Add non-tls listener to Memcached de54e5ab6 Remove NovaVncProxyNetwork from ServiceNetMap b43962a0d Enable DPDK OVS PMD Auto Load Balance 4f1f2b730 Make memcache also listen to localhost 61b8fdf7a Added the posibility of skipping the NFS ping test on the rear installation 92be03fcb Support for OVS DPDK pmd auto balance parameters. 21c696d2d Always run network config for undercloud 63bd84405 Revert "Always run network config for undercloud" 785460825 Do not run Swift rsync container in single replica mode 6d304d61b Limit collectds memory usage d63e66567 Fix NetworkDeploymentActionValue format 67a08dee5 Remove usage of RetryFilter 50ed57fd0 Add option for enabling rsyslog reopenOnTruncate 819870702 Remove heat::heat_keystone_clients_url definition 4efcf1862 Always run network config for undercloud 58e691375 [victoria/ussuri/train] Change nbd, vnc and qemu default cacert file 98ba67989 Remove no longer used NovaNfsEnabled parameter and condtion 7815009e4 Make UpgradeLeappDevelSkip per-role 76c2e05db HA minor update: fix bad pcs invocation a56ab848c Fix broken restart of ovndb_server during minor update 1a81309da Bump ovs and ovn versions to 2.15 for FFWD. ab2f7cf5c Fix cinder's cephx keyring file permissions e580b849e set ganesha idmap.conf file path and overrides 90e0ede26 Update rhsm repo examples for RHEL8 deployments 73837b8b0 Set vlan-limit value depending on vlan_transparent setting 9fda7f090 Fix typo in ceilometer-write-qdr environment file 4abbadb46 Add environment for external network VIP f43f11f7d HA: inject public certificates without blocking container 866cc9bcb Create post-deploy.conf on update/upgrade for octavia Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-server.yaml | 2 + deployment/aodh/aodh-base.yaml | 7 ++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 ++ .../barbican/barbican-api-container-puppet.yaml | 7 ++ .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++ deployment/cinder/cinder-api-container-puppet.yaml | 7 ++ .../cinder/cinder-common-container-puppet.yaml | 132 ++++++++++++++++++--- .../cinder/cinder-volume-container-puppet.yaml | 3 +- deployment/deprecated/sahara/sahara-base.yaml | 1 + .../designate/designate-api-container-puppet.yaml | 7 ++ deployment/glance/glance-api-container-puppet.yaml | 7 ++ .../gnocchi/gnocchi-api-container-puppet.yaml | 7 ++ deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/heat/heat-base-puppet.yaml | 32 +++-- deployment/ironic/ironic-api-container-puppet.yaml | 7 ++ .../ironic/ironic-inspector-container-puppet.yaml | 1 + deployment/keystone/keystone-container-puppet.yaml | 28 ++++- deployment/logging/rsyslog-container-puppet.yaml | 10 +- deployment/manila/manila-api-container-puppet.yaml | 7 ++ .../manila/manila-share-container-puppet.yaml | 1 + .../memcached/memcached-container-puppet.yaml | 111 ++++++++++++++--- deployment/metrics/collectd-container-puppet.yaml | 1 + deployment/mistral/mistral-base.yaml | 7 ++ deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 11 +- deployment/nova/nova-api-container-puppet.yaml | 7 ++ deployment/nova/nova-base-puppet.yaml | 28 +++-- deployment/nova/nova-compute-container-puppet.yaml | 8 +- deployment/nova/nova-ironic-container-puppet.yaml | 12 -- deployment/nova/nova-libvirt-container-puppet.yaml | 25 ++-- .../nova/nova-metadata-container-puppet.yaml | 7 ++ .../nova-migration-target-container-puppet.yaml | 14 --- .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- deployment/nova/novajoin-container-puppet.yaml | 7 ++ .../octavia/octavia-api-container-puppet.yaml | 102 +++++++++------- deployment/octavia/octavia-base.yaml | 17 +++ .../octavia/octavia-deployment-config.j2.yaml | 2 + .../octavia-health-manager-container-puppet.yaml | 3 +- .../octavia-housekeeping-container-puppet.yaml | 3 +- .../octavia/octavia-worker-container-puppet.yaml | 3 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 56 +++++++++ .../ovn/ovn-controller-container-puppet.yaml | 12 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 2 +- .../placement/placement-api-container-puppet.yaml | 7 ++ deployment/swift/swift-proxy-container-puppet.yaml | 10 ++ .../swift/swift-storage-container-puppet.yaml | 51 ++++---- .../tripleo-packages-baremetal-puppet.yaml | 19 ++- deployment/undercloud/undercloud-upgrade.yaml | 2 + deployment/zaqar/zaqar-container-puppet.yaml | 7 ++ environments/cavium-liquidio.yaml | 2 +- environments/external-network-vip.yaml | 5 + environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/ovs-hw-offload.yaml | 2 +- environments/rhsm.yaml | 35 +++--- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services/neutron-mlnx-agent.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/ssl/enable-memcached-tls.yaml | 10 ++ environments/undercloud.yaml | 3 +- network/service_net_map.j2.yaml | 7 +- overcloud.j2.yaml | 8 +- puppet/role.role.j2.yaml | 2 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 ++ ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 ++ ...a_libvirt_default_ca_cert-d1a7acaa5cbc9293.yaml | 13 ++ .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 ++ .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + 74 files changed, 773 insertions(+), 209 deletions(-)

1 0

python-tripleoclient 13.4.5 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We are glad to announce the release of: python-tripleoclient 13.4.5: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 13.4.4..13.4.5 ---------------------------------------------- 265c15ab Passes playbook to the validation action as a list 134ca391 Add --db-only option in undercloud_backup. 25adb4b8 Use explicit order for ironic enabled interfaces Diffstat (except docs and test files) ------------------------------------- tripleoclient/v1/undercloud_backup.py | 66 ++++++++++++------- tripleoclient/v1/undercloud_config.py | 61 +++++++++--------- tripleoclient/v1/undercloud_preflight.py | 2 +- 5 files changed, 175 insertions(+), 95 deletions(-)

1 0

tripleo-common 12.4.6 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We are tickled pink to announce the release of: tripleo-common 12.4.6: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.5..12.4.6 ---------------------------------------- 13bf5155 directly use files instread of tcib_gather_files 66a5cc7e Rename hieradata_files result var 6ac7803b Move rabbitmq healthcheck to something more modern 0ae5db6e Add interface-names to overcloud-hardened-images-uefi-rhel8 Diffstat (except docs and test files) ------------------------------------- container-images/tcib/base/base.yaml | 13 +++++++------ container-images/tcib/base/mariadb/mariadb.yaml | 5 ++--- .../tcib/base/os/barbican-base/barbican-base.yaml | 3 +-- .../base/os/cinder-base/cinder-volume/cinder-volume.yaml | 5 ++--- container-images/tcib/base/os/glance-api/glance-api.yaml | 3 +-- container-images/tcib/base/os/horizon/horizon.yaml | 3 +-- container-images/tcib/base/os/iscsid/iscsid.yaml | 3 +-- container-images/tcib/base/os/keystone/keystone.yaml | 3 +-- .../tcib/base/os/neutron-base/neutron-base.yaml | 3 +-- container-images/tcib/base/os/swift-base/swift-base.yaml | 5 ++--- .../base/ovn-base/ovn-nb-db-server/ovn-nb-db-server.yaml | 3 +-- .../base/ovn-base/ovn-sb-db-server/ovn-sb-db-server.yaml | 3 +-- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 3 +-- container-images/tcib/base/tripleoclient/tripleoclient.yaml | 5 ++--- healthcheck/rabbitmq | 2 +- image-yaml/overcloud-hardened-images-uefi-rhel8.yaml | 2 ++ tripleo_common/templates/deployments.yaml | 4 ++-- 17 files changed, 29 insertions(+), 39 deletions(-)

1 0

puppet-tripleo 12.7.0 (ussuri)
by no-reply＠openstack.org 28 Jul '21

28 Jul '21

We joyfully announce the release of: puppet-tripleo 12.7.0: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.6.1..12.7.0 ---------------------------------------- 994919ea Bump metadata 12.7.0 for ussuri tripleo repos release e1b2d78b Revert "Aodh deprecation" 9de7fb33 Remove side-car containers in Create status f220923d Cinder: Dell EMC PowerMax: Fix typo in hash key 900a3e0f Create SSL certificates from sslProfiles 68a48380 Add pcmk_host_list stonith-fence_compute-fence-nova 3bcfb9de Add support for ovn clustered databases Diffstat (except docs and test files) ------------------------------------- lib/puppet/functions/qdr_ssl_certificate.rb | 39 ++++++++++++++++++++++ manifests/profile/base/aodh/api.pp | 1 - manifests/profile/base/aodh/evaluator.pp | 1 - manifests/profile/base/aodh/listener.pp | 1 - manifests/profile/base/aodh/notifier.pp | 1 - .../profile/base/cinder/volume/dellemc_powermax.pp | 2 +- manifests/profile/base/metrics/qdr.pp | 26 ++++++++++++++- manifests/profile/base/neutron/agents/ovn.pp | 21 ++++++++++-- manifests/profile/base/neutron/ovn_metadata.pp | 23 +++++++++++-- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 26 +++++++++++++-- manifests/profile/base/pacemaker/instance_ha.pp | 5 ++- metadata.json | 2 +- .../tripleo_profile_base_metrics_qdr_spec.rb | 33 ++++++++++++++++++ templates/neutron/dibbler-client.epp | 3 +- templates/neutron/haproxy.epp | 3 +- templates/neutron/keepalived.epp | 3 +- templates/neutron/radvd.epp | 3 +- 17 files changed, 174 insertions(+), 19 deletions(-)

1 0

masakari-monitors 10.0.1 (victoria)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We exuberantly announce the release of: masakari-monitors 10.0.1: Monitors for Masakari This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/masakari-monitors Download the package from: https://tarballs.openstack.org/masakari-monitors/ Please report issues through: https://bugs.launchpad.net/masakari-monitors/+bugs For more details, please see below. Changes in masakari-monitors 10.0.0..10.0.1 ------------------------------------------- a981e0d Fix hostmonitor hanging forever after certain exceptions 34fd456 Drop lower-constraints 1dc5755 Add py38 package metadata cefc94f Remove unnecessary continue statement 749ec25 Update TOX_CONSTRAINTS_FILE for stable/victoria 700ffcc Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 102 --------------------- .../hostmonitor/host_handler/handle_host.py | 17 ++-- .../hostmonitor/host_handler/test_handle_host.py | 29 +++--- .../notes/bug-1930361-fa8ce8e9781ea967.yaml | 5 + setup.cfg | 1 + tox.ini | 8 +- 8 files changed, 28 insertions(+), 136 deletions(-)

1 0

ceilometer 14.1.0 (ussuri)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are psyched to announce the release of: ceilometer 14.1.0: OpenStack Telemetry This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. Changes in ceilometer 14.0.0..14.1.0 ------------------------------------ ea7014ba [stable-only] Add font for PDF generation and fix lower constraints baee38e9 Cap tenacity < 7.0.0 dafbcde0 Add logic for event_update handling and set transfer event as event_update be8edb07 Run migration with NotFound exception as well e92e4347 Run migration with NotFound exception as well af90111c Remove [ and ] around parameter values in http url 96dcc2cb Fix PDF build 4185147d Trigger volume deletes only on volume deleted fd41c23d Add volume.manage to metrics. 30f70243 Port the grenade job to Zuul v3 68e4686d Imported Translations from Zanata 27a1671c Update TOX_CONSTRAINTS_FILE for stable/ussuri 689215b4 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 29 +- bindep.txt | 3 + ceilometer/data/meters.d/meters.yaml | 2 + ceilometer/gnocchi_client.py | 4 +- ceilometer/locale/id/LC_MESSAGES/ceilometer.po | 246 +++ ceilometer/pipeline/data/event_definitions.yaml | 2 +- ceilometer/publisher/data/gnocchi_resources.yaml | 13 +- ceilometer/publisher/gnocchi.py | 30 + ceilometer/publisher/http.py | 2 +- lower-constraints.txt | 8 +- playbooks/legacy/grenade-dsvm-ceilometer/post.yaml | 15 - playbooks/legacy/grenade-dsvm-ceilometer/run.yaml | 46 - .../locale/en_GB/LC_MESSAGES/releasenotes.po | 1586 -------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 63 - requirements.txt | 6 +- tox.ini | 2 +- 19 files changed, 375 insertions(+), 1743 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1626b343..02fd5a80 100644 --- a/requirements.txt +++ b/requirements.txt @@ -31,2 +31,2 @@ PyYAML>=3.12 # MIT -requests!=2.9.0,>=2.8.1 # Apache-2.0 -six>=1.9.0 # MIT +requests>=2.14.2 # Apache-2.0 +six>=1.10.0 # MIT @@ -34 +34 @@ stevedore>=1.20.0 # Apache-2.0 -tenacity>=4.4.0 # Apache-2.0 +tenacity>=4.4.0,<7.0.0 # Apache-2.0

1 0

ovn-octavia-provider 0.1.3 (ussuri)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are thrilled to announce the release of: ovn-octavia-provider 0.1.3: OpenStack Octavia integration with OVN This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 0.1.2..0.1.3 -------------------------------------------- 4d20d32 Ensure that load balancer is added to logical switch e749ac3 Add log for request_handler events 7d719a2 Remove the dependency on the "mock" package de7c637 Check if no members in pool better in batch update f4861f9 Don't try to store protocol=None in OVSDB 3204fcf Fix gate failure e6c7e5a Fix leaked file descriptors by cleaning up objects 9aaf086 Retry status updates to Octavia f98aaef Fix broken gate Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 65 +++++++++------- ovn_octavia_provider/driver.py | 91 ++++++++++++++++------ requirements.txt | 11 +-- test-requirements.txt | 6 +- tox.ini | 2 +- zuul.d/base.yaml | 30 +++++-- zuul.d/project.yaml | 6 +- 13 files changed, 201 insertions(+), 84 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b40938a..d8ee259 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5,2 @@ -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 +eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT @@ -7 +8 @@ netaddr>=0.7.18 # BSD -neutron-lib>=1.28.0 # Apache-2.0 +neutron-lib>=1.29.1 # Apache-2.0 @@ -10 +11 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.serialization>=2.28.1 # Apache-2.0 @@ -14,2 +15,2 @@ ovsdbapp>=0.17.0 # Apache-2.0 -pbr!=2.1.0,>=2.0.0 # Apache-2.0 -tenacity>=4.4.0 # Apache-2.0 +pbr>=4.0.0 # Apache-2.0 +tenacity>=5.0.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0b5f1d0..de2d51b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0 # Apache-2.0 +hacking>=3.0.1 # Apache-2.0 @@ -13,2 +13,2 @@ os-testr>=1.0.0 # Apache-2.0 -astroid==2.1.0 # LGPLv2.1 -pylint==2.3.0 # GPLv2 +astroid==2.4.0 # LGPLv2.1 +pylint==2.5.3 # GPLv2

1 0

masakari-monitors 11.0.1 (wallaby)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We exuberantly announce the release of: masakari-monitors 11.0.1: Monitors for Masakari This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/masakari-monitors Download the package from: https://tarballs.openstack.org/masakari-monitors/ Please report issues through: https://bugs.launchpad.net/masakari-monitors/+bugs For more details, please see below. Changes in masakari-monitors 11.0.0..11.0.1 ------------------------------------------- 9ae886e Fix hostmonitor hanging forever after certain exceptions 019af1c Fix one reno 9b30933 Update TOX_CONSTRAINTS_FILE for stable/wallaby 8f8ec53 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../hostmonitor/host_handler/handle_host.py | 15 +++++------ .../hostmonitor/host_handler/test_handle_host.py | 29 +++++++++++----------- ...y-check-when-host-failure-78649c512ef79199.yaml | 8 +++--- .../notes/bug-1930361-fa8ce8e9781ea967.yaml | 5 ++++ tox.ini | 4 +-- 6 files changed, 33 insertions(+), 29 deletions(-)

1 0

masakari-monitors 9.0.2 (ussuri)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are gleeful to announce the release of: masakari-monitors 9.0.2: Monitors for Masakari This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/masakari-monitors Download the package from: https://tarballs.openstack.org/masakari-monitors/ Please report issues through: https://bugs.launchpad.net/masakari-monitors/+bugs For more details, please see below. Changes in masakari-monitors 9.0.1..9.0.2 ----------------------------------------- 020e13e Fix hostmonitor hanging forever after certain exceptions 61b72e8 Drop lower-constraints 45b67c4 Fix the release jobs 72b74da Remove unnecessary continue statement Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - bindep.txt | 3 +- lower-constraints.txt | 109 --------------------- .../hostmonitor/host_handler/handle_host.py | 17 ++-- .../hostmonitor/host_handler/test_handle_host.py | 29 +++--- .../notes/bug-1930361-fa8ce8e9781ea967.yaml | 5 + tox.ini | 6 -- 7 files changed, 26 insertions(+), 144 deletions(-)

1 0

bifrost 11.1.0 (xena)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are excited to announce the release of: bifrost 11.1.0: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the xena release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 11.1.0 ^^^^^^ New Features ************ * Automatically configures "enabled_vendor_interfaces" based on the "enabled_hardware_types". * Adds support for manually specified enabled vendor interfaces via the new "enabled_vendor_interfaces" parameter. * Automatically configures the required management interface for the "ilo5" hardware type. * Adds "ipa_download_headers" variable to control HTTP headers used when downloading IPA images. * Kernel parameters for the "ilo-virtual-media" boot interface can now be set via the new "ilo_kernel_params" variable. Bug Fixes ********* * Adds the require default kernel parameters for the "ilo-virtual- media" boot interface. * Works around the "libvirt module is not importable" error by installing libvirt-python from source install of a wheel. * Installs sushy-oem-idrac (https://pypi.org/project/sushy-oem- idrac/) when the "idrac" hardware type is enabled. Changes in bifrost 11.0.0..11.1.0 --------------------------------- dfa9eddb Show debug messages during upgrade ci job 0f796370 Remove ansible-base when upgrading ansible 0acb610d Allow HTTP headers to be customised for IPA image download 51177a4a Support ilo5 hardware type 1ac7dfe9 Install sushy-oem-idrac for idrac-redfish-virtual-media 645ac1ca Perform upgrade by default when installing ansible bf11adba Allow configuring enabled vendor interfaces f0f6e6aa bifrost-cli: fix relative paths in --extra-vars 984d9794 CI: upgrade from Wallaby bd447006 Remove unnecessary defaults from keystone 8f108f90 Force selinux presence when testing 43062e2f Fix Redeploy Playbook 79c8418e Install libvirt-python from source instead of a wheel d751208a Collect explicit list of installed packages ff637c43 Skip running jobs on ironic and inspector unit tests 5ceb5160 Clean up kernel params 231fddba Revert "libvirt: pin edk2-ovmf for CentOS Stream" 3176c939 Move the network-interface checks to bootstrap 7f2d0eb9 Reasonable error message if network_interface is not found Diffstat (except docs and test files) ------------------------------------- bifrost/cli.py | 10 +++++++++- playbooks/ci/upgrade.yaml | 2 ++ playbooks/redeploy-dynamic.yaml | 22 +++++++++++----------- .../defaults/required_defaults_CentOS.yml | 4 +--- .../tasks/prepare_libvirt.yml | 12 ++++++++++-- playbooks/roles/bifrost-ironic-install/README.md | 4 ++++ .../roles/bifrost-ironic-install/defaults/main.yml | 3 +++ .../bifrost-ironic-install/tasks/bootstrap.yml | 11 +++++++++++ .../tasks/download_ipa_image.yml | 4 ++++ .../bifrost-ironic-install/tasks/hw_types.yml | 11 +++++++++++ .../roles/bifrost-ironic-install/tasks/install.yml | 6 +++--- .../bifrost-ironic-install/tasks/vendor_deps.yml | 7 +++++-- .../templates/ironic.conf.j2 | 4 +++- .../defaults/required_defaults_RedHat_family.yml | 5 ----- .../bifrost-keystone-install/tasks/bootstrap.yml | 11 +++++++++++ ...enabled_vendor_interfaces-f1b15fe75ff061fe.yaml | 8 ++++++++ releasenotes/notes/ilo5-2d9131843169418b.yaml | 5 +++++ .../notes/ipa-headers-032412a0fc741de3.yaml | 5 +++++ .../notes/kernel-params-b8f054bd75390baa.yaml | 9 +++++++++ .../libvirt-not-importable-c8e88a8ef11a1f09.yaml | 5 +++++ .../notes/sushy-oem-idrac-34f4bd1560f6948f.yaml | 5 +++++ scripts/collect-test-info.sh | 9 +++++++++ scripts/env-setup.sh | 7 ++++++- scripts/test-bifrost.sh | 5 +++++ zuul.d/bifrost-jobs.yaml | 8 ++++++-- 25 files changed, 151 insertions(+), 31 deletions(-)

1 0

swift 2.28.0 (xena)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are pumped to announce the release of: swift 2.28.0: OpenStack Object Storage This release is part of the xena release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.28.0 ^^^^^^ New Features ************ * "swift-manage-shard-ranges" improvements: * Exit codes are now applied more consistently: * 0 for success * 1 for an unexpected outcome * 2 for invalid options * 3 for user exit As a result, some errors that previously resulted in exit code 2 will now exit with code 1. * Added a new 'repair' command to automatically identify and optionally resolve overlapping shard ranges. * Added a new 'analyze' command to automatically identify overlapping shard ranges and recommend a resolution based on a JSON listing of shard ranges such as produced by the 'show' command. * Added a "--includes" option for the 'show' command to only output shard ranges that may include a given object name. * Added a "--dry-run" option for the 'compact' command. * The 'compact' command now outputs the total number of compactible sequences. * Partition power increase improvements: * The relinker now spawns multiple subprocesses to process disks in parallel. By default, one worker is spawned per disk; use the new "--workers" option to control how many subprocesses are used. Use "--workers=0" to maintain the previous behavior. * The relinker can now target specific storage policies or partitions by using the new "--policy" and "--partition" options. * More daemons now support systemd notify sockets. * The container-reconciler now scales out better with new "processes", "process", and "concurrency" options, similar to the object-expirer. Deprecation Notes ***************** * Container sharding deprecations: * Added a new config option, "shrink_threshold", to specify the absolute size below which a shard will be considered for shrinking. This overrides the "shard_shrink_point" configuration option, which expressed this as a percentage of "shard_container_threshold". "shard_shrink_point" is now deprecated. * Similar to above, "expansion_limit" was added as an absolute- size replacement for the now-deprecated "shard_shrink_merge_point" configuration option. Bug Fixes ********* * Sharding improvements: * When building a listing from shards, any failure to retrieve listings will result in a 503 response. Previously, failures fetching a partiucular shard would result in a gap in listings. * Container-server logs now include the shard path in the referer field when receiving stat updates. * Added a new config option, "rows_per_shard", to specify how many objects should be in each shard when scanning for ranges. The default is "shard_container_threshold / 2", preserving existing behavior. * Added a new config option, "minimum_shard_size". When scanning for shard ranges, if the final shard would otherwise contain fewer than this many objects, the previous shard will instead be expanded to the end of the namespace (and so may contain up to "rows_per_shard + minimum_shard_size" objects). This reduces the number of small shards generated. The default value is "rows_per_shard / 5". * The sharder now correctly identifies and fails audits for shard ranges that overlap exactly. * The sharder and swift-manage-shard-ranges now consider total row count (instead of just object count) when deciding whether a shard is a candidate for shrinking. * If the sharder encounters shard range gaps while cleaving, it will now log an error and halt sharding progress. Previously, rows may not have been moved properly, leading to data loss. * Sharding cycle time and last-completion time are now available via swift-recon. * Fixed an issue where resolving overlapping shard ranges via shrinking could prematurely mark created or cleaved shards as active. * S3 API improvements: * Added an option, "ratelimit_as_client_error", to return 429s for rate-limited responses. Several clients/SDKs have seem to support retries with backoffs on 429, and having it as a client error cleans up logging and metrics. By default, Swift will respond 503, matching AWS documentation. * Fixed a server error in bucket listings when "s3_acl" is enabled and staticweb is configured for the container. * Fixed a server error when a client exceeds "client_timeout" during an upload. Now, a "RequestTimeout" error is correctly returned. * Fixed a server error when downloading multipart uploads/static large objects that have missing or inaccessible segments. This is a state that cannot arise in AWS, so a new "BrokenMPU" error is returned, indicating that retrying the request is unlikely to succeed. * Fixed several issues with the prefix, marker, and delimiter parameters that would be mirrored back to clients when listing buckets. * Partition power increase fixes: * The relinker now performs eventlet-hub selection the same way as other daemons. In particular, "epolls" will no longer be selected, as it seemed to cause occassional hangs. * Partitions that encountered errors during relinking are no longer marked as completed in the relinker state file. This ensures that a subsequent relink will retry the failed partitions. * Partition cleanup is more robust, decreasing the likelihood of leaving behind mostly-empty partitions from the old partition power. * Improved relinker progress logging, and started collecting progress information for swift-recon. * Cleanup is more robust to files and directories being deleted by another process. * The relinker better handles data found from earlier partition power increases. * The relinker better handles tombstones found for the same object but with different inodes. * The reconciler now defers working on policies that have a partition power increase in progress to avoid issues with concurrent writes. * Erasure coding fixes: * Added the ability to quarantine EC fragments that have no (or few) other fragments in the cluster. A new configuration option, "quarantine_threshold", in the reconstructor controls the point at the fragment will be quarantined; the default (0) will never quarantine. Only fragments older than "quarantine_age" (default: "reclaim_age") may be quarantined. Before quarantining, the reconstructor will attempt to fetch fragments from handoff nodes in addition to the usual primary nodes; a new "request_node_count" option (default "2 * replicas") limits the total number of nodes to contact. * Added a delay before deleting non-durable data. A new configuration option, "commit_window" in the "[DEFAULT]" section of object-server.conf, adjusts this delay; the default is 60 seconds. This improves the durability of both back-dated PUTs (from the reconciler or container-sync, for example) and fresh writes to handoffs by preventing the reconstructor from deleting data that the object-server was still writing. * Improved proxy-server and object-reconstructor logging when data cannot be reconstructed. * Fixed an issue where some but not all fragments having metadata applied could prevent reconstruction of missing fragments. * Server-side copying of erasure-coded data to a replicated policy no longer copies EC sysmeta. The previous behavior had no material effect, but could confuse operators examining data on disk. * Python 3 fixes: * Fixed a server error when performing a PUT authorized via tempurl with some proxy pipelines. * Fixed a server error during GET of a symlink with some proxy pipelines. * Fixed an issue with logging setup when /dev/log doesn't exist or is not a UNIX socket. * The dark-data audit watcher now skips objects younger than a new configurable "grace_age" period. This avoids issues where data could be flagged, quarantined, or deleted because of listing consistency issues. The default is one week. * The dark-data audit watcher now requires that all primary locations for an object's container agree that the data does not appear in listings to consider data "dark". Previously, a network partition that left an object node isolated could cause it to quarantine or delete all of its data. * "EPIPE" errors no longer log tracebacks. * The account and container auditors now log and update recon before going to sleep. * The object-expirer logs fewer client disconnects. * "swift-recon-cron" now includes the last time it was run in the recon information. * "EIO" errors during read now cause object diskfiles to be quarantined. * The formpost middleware now properly supports uploading multiple files with different content-types. * Various other minor bug fixes and improvements. Changes in swift 2.27.0..2.28.0 ------------------------------- a8f151286 AUTHORS/CHANGELOG for 2.28.0 5759072d2 s3api: Pass through 409s from SLO eb969fdee container-reconciler: support multiple processes 1760a0cb9 Fix the sysctl parameter used to tune connections 92aef484b Dark Data Watcher: switch to agreement across the whole ring 2696a79f0 reconstructor: retire nondurable_purge_delay option bbaed18e9 diskfile: don't remove recently written non-durables 775ad9a56 Remove redundant usage of collections(.abc).Mapping f911ffac3 trivial: Use own_shard_range instead of doing an extra query 7b38d11c0 trivial: Clean up a DeprecationWarning e00ae0337 Switch get(full)argspec function according to python version 510fe6962 Add some more arm64 non-voting tests 02dd0187e Remove support for --link-check-limit f29ea9d04 reconciler: concurreny follow-up 4e52d946b Add concurrency to reconciler e491693e3 reconciler: PPI aware reconciler 9b94c278f sharder: add more validation checks on config 6709bb889 sharder: If saving own_shard_range use no_default=True da4010ae2 Sharding: root audit epoch reset warning 26c3d819b Drain and close more internal client requests 4c1320c4c Do not use epoll in relinker 2a593174a sharder: avoid small tail shards a87317db6 sharder: support rows_per_shard in config file 2fd5b87dc reconstructor: make quarantine delay configurable 391cc713e Handle ClientDisconnect on s3api object PUT 7c0ff5797 func tests: Better-tolerate deleted containers in account listings f25592f3c Quarantine on IOErrors while reading 45a5ecc8a Have expirer use IC's delete_object 574897ae2 relinker: tolerate existing tombstone with same timestamp e0ba83eca Sharder: Add root_audit overlap stats 95e031645 Make dark data watcher ignore the newly updated objects 69e9a1acb reconciler: Tolerate 503s on HEAD 85e36f712 recon: refactor common recon names into a common location 50ba8e697 bufferedhttp: Tolerate socket being None c2ae60251 Include status code when we fail to parse an SLO-delete response 2934818d6 reconstructor: Delay purging reverted non-durable datafiles 40aace89f Capture logs when running custom daemons in probe tests 0d05a8ff3 Quiet EPIPE tracebacks e40cf1ec5 Return 503 for container listings when shards are deleted 39ad468df Add async_pending_last time to object.recon 8e75faff8 Run in-process func tests under py38 eacebbb16 Allow floats for a couple more intervals bead9f1ca relinker: Remove replication locks for empty parts d183b41c9 Switch IRC references from freenode to OFTC e4c656bc5 Add unit test for missing whole EC fragments 79b263f5e Use a less bogus credit for Melissa Ma Lei 2b5853f41 Quote paths before sending them to swob.Request.blank e495c3bbe sharder: Send broker path as referer when updating root 705a88bb1 docker: Install cffi and cryptography from system packages 09ead6909 Add warn level logging if we hit un-recoverable EC rebuild 1ba17f635 Get TestDarkDataQuarantining passing when policy-0 is erasure-coded 41a3e1ff5 Add non-voting swift python3 unit test jobs f3f918411 Individual content types for multi form upload 6bfd93d88 symlink: Ensure headers are returned as a list on py3 18f20daf3 Add absolute values for shard shrinking config options f7fd99a88 Use ContainerSharderConf class in sharder and manage-shard-ranges 77530136f tempurl: Fix PUT upload to temp url on py3 1b183f221 sharder: report perfectly overlapping shard ranges bbe189b53 s-m-s-r: use argparse mutually exclusive group 5d1d48c77 swift-manage-shard-ranges: output total compactible sequences 6e5620944 swift-get-nodes: move --path-as-is to end of curl commands 1db281611 relinker: Rehash the parts actually touched when relinking 568036f1b manage-shard-ranges: add --dry-run option for compact and repair c20d61101 Drop the unnecessary sudo from probe tests 46ea3aeae Quarantine stale EC fragments after checking handoffs 4ce907a4a relinker: Add /recon/relinker endpoint and drop progress stats 04fab8d9a Document why TestReconstructorRebuildUTF8 is skipped on py3 bcecddd51 Consider tombstone count before shrinking a shard eeaac713f reconstructor: gather rebuild fragments by x-data-timestamp f140de75e relinker: let --workers accept auto f0e909749 Remove test-requirement on fixtures c374a7a85 Allow floats for all intervals 926c61bcc relinker: Only mark partitions "done" if there were no (new) errors ed6586c46 sharder: stall cleaving at shard range gaps 29418998b Fix shrinking making acceptors prematurely active ba00ff437 Add sharding to swift-recon ab8accbb0 reconstructor: extract closure for handle_response 2a312d1cd Cleanup tests' import of debug_logger 7960097f0 reconstructor: log more details when rebuild fails 8823b45b9 docs: Get rid of useless page 5516bf46c Add more detail to ECFragGetter logging f2a4c50dc Include sharding cycle time in recon 9d6006f64 auditors: Log and dump recon *before* sleeping bacef722a Use underscores instead of dashes in setup.cfg 7087fb0d7 object: Plumb logger_thread_locals through _finalize_put 717d21ccb fix not clear cause for invalid username 4a4d89968 Refactor EC multipart/byteranges control flow fa3109ab5 Enable systemd notify sockets for more daemons e76ba2107 relinker: Add start/end logs to parallel_process 7f35b1cc8 swift-manage-shard-ranges: fix exit codes 751deb988 Fix reclaim to use RECLAIM_PAGE_SIZE batches 4cb52b44d Refactor db auditors into a db_auditor base class c8de76c7f swift-account-audit: Log the bad status 122840cc0 probe test: use helper functions more widely c13c9cc67 Update AUTHORS e53c82cd3 sharder: Prevent ValueError when no cleaving contexts 1895213d2 Update some constraints for py2 7bbc73a91 sharding: constrain fill_gaps to own shard range bounds ecb5aa120 relinker: trivial comment and test fixes abfa6bee7 relinker: Parallelize per disk 20336f177 Use debug_logger instead of FakeLogger in relinker tests 3bdd01cf4 relinker: retry links from older part powers 2a672b678 py2: diskfile.valid_suffix should allow unicode 399bda8a4 ec: Don't copy EC metadata to replicated objects d55bfa7fb s-m-s-r: read shard_ranges from stdin fc7c0afbe swift-manage-shard-ranges analyze: accept incomplete shard data ade3b2863 diskfile: Prevent get_hashes from creating missing partition dirs f819fc8c2 Give functional tests another chance to pass 71a4aea31 Update docs to discourage policy names being numbers 2a3a0fb75 Add rolling upgrade job coming from stable/wallaby ef44905b3 Get rid of strip_self a967d4729 relinker: Accept policy names, too 4bc2b3ef9 Prevent instantiation of ShardRangeOuterBound c9c42c07c swift-manage-shard-ranges: add repair and analyze commands 0e4289fbd relinker: Add policy to relinker progress output b17dd7ec7 Make ShardRange.OuterBound a proper singleton 3a41cbe67 relinker: Allow multiple policies to be specified 812ed1ba0 relinker: add --partition option c6e7dac01 Update master for stable/wallaby 4ef7b10e0 relinker: Tolerate missing files when cleaning up partitions 76feb65cb Add unit tests for relinker cleanup 7e278291f relinker: Move filters & hooks to be methods 55386c836 Add --includes to s-m-s-r edc3f4d97 Add test for relinking when the object-server failed to do it a1350a2c2 relinker: make relink step a subset of cleanup step 2b4ec5a45 relinker: add --policy option 9ab9acb03 gate: Make swift-multinode-rolling-upgrade voting again d54083771 Don't require swift be installed to have passing manager tests ec37893b8 Only test with &-delimited query strings 0b129509c relinker: refactor to share common code e572938af Use headless option for cors functional test runner e35365df5 s3api: Add config option to return 429s on ratelimit acf72e880 Make more use of get_partition_for_hash in unit tests 90660c90d relinker: use abs path index in part power replace c7d56fa9c py36: Fix syslog fallback to UDP 48e625478 Fix systemd notify unit test on macos 42f4af45a Add test coverage for audit_location_generator yield_hashes arg e318d15b8 obj: Include timeout value when logging long-running rsyncs d022781bc s3api: Transfer REMOTE_USER when using s3_acl 46a6a09d5 Create a separate doc for audit watcher f0d406127 Test proxy-server.conf-sample e973e15cf Get func tests passing with a minimal proxy pipeline 66da8eaee Remove babel.cfg 10c24e951 s3api: Fix prefix/delimiter/marker quoting f0b8790c1 s3api: Fix blank delimiter handling Diffstat (except docs and test files) ------------------------------------- .mailmap | 1 + .stestr.conf | 2 + .testr.conf | 4 - .zuul.yaml | 113 +- AUTHORS | 9 +- CHANGELOG | 214 ++ CONTRIBUTING.rst | 5 +- README.rst | 2 +- babel.cfg | 2 - bin/swift-account-audit | 10 +- bin/swift-recon-cron | 11 +- etc/account-server.conf-sample | 8 +- etc/container-reconciler.conf-sample | 15 +- etc/container-server.conf-sample | 51 +- etc/container-sync-realms.conf-sample | 2 +- etc/object-expirer.conf-sample | 4 +- etc/object-server.conf-sample | 95 +- etc/proxy-server.conf-sample | 11 +- etc/swift.conf-sample | 42 +- lower-constraints.txt | 2 +- py2-constraints.txt | 4 +- .../notes/2_28_0_release-f2515e07fb61cd01.yaml | 235 ++ releasenotes/source/index.rst | 2 + releasenotes/source/wallaby.rst | 6 + setup.cfg | 20 +- swift/account/auditor.py | 128 +- swift/account/reaper.py | 2 +- swift/cli/info.py | 3 +- swift/cli/manage_shard_ranges.py | 502 +++- swift/cli/recon.py | 75 +- swift/cli/relinker.py | 1136 +++++--- swift/common/bufferedhttp.py | 18 +- swift/common/container_sync_realms.py | 2 +- swift/common/daemon.py | 1 + swift/common/db.py | 119 +- swift/common/db_auditor.py | 170 ++ swift/common/db_replicator.py | 19 +- swift/common/exceptions.py | 6 +- swift/common/internal_client.py | 46 +- swift/common/middleware/crypto/crypto_utils.py | 3 +- swift/common/middleware/formpost.py | 11 +- swift/common/middleware/recon.py | 42 +- .../common/middleware/s3api/controllers/bucket.py | 118 +- .../middleware/s3api/controllers/multi_delete.py | 4 +- swift/common/middleware/s3api/s3api.py | 2 + swift/common/middleware/s3api/s3request.py | 13 +- swift/common/middleware/s3api/s3response.py | 6 + swift/common/middleware/s3api/utils.py | 1 + swift/common/middleware/symlink.py | 2 +- swift/common/middleware/tempauth.py | 6 +- swift/common/middleware/tempurl.py | 2 +- swift/common/recon.py | 30 + swift/common/ring/ring.py | 10 +- swift/common/storage_policy.py | 67 +- swift/common/utils.py | 354 ++- swift/common/wsgi.py | 15 +- swift/container/auditor.py | 111 +- swift/container/backend.py | 137 +- swift/container/reconciler.py | 107 +- swift/container/sharder.py | 424 ++- swift/container/sync.py | 2 +- swift/container/updater.py | 7 +- swift/obj/auditor.py | 7 +- swift/obj/diskfile.py | 110 +- swift/obj/expirer.py | 15 +- swift/obj/reconstructor.py | 470 +++- swift/obj/replicator.py | 16 +- swift/obj/ssync_sender.py | 2 +- swift/obj/updater.py | 7 +- swift/obj/watchers/dark_data.py | 65 +- swift/proxy/controllers/container.py | 12 +- swift/proxy/controllers/obj.py | 129 +- swift/proxy/server.py | 17 +- test-requirements.txt | 3 +- test/cors/main.py | 12 +- test/debug_logger.py | 133 +- test/functional/__init__.py | 3 +- test/functional/s3api/test_bucket.py | 99 + test/functional/swift_test_client.py | 18 +- test/functional/test_access_control.py | 9 +- test/functional/test_staticweb.py | 5 +- test/functional/test_tempurl.py | 10 + test/functional/test_versioned_writes.py | 5 + test/probe/common.py | 26 +- test/probe/test_dark_data.py | 11 +- test/probe/test_object_partpower_increase.py | 19 +- test/probe/test_reconstructor_rebuild.py | 161 +- test/probe/test_reconstructor_revert.py | 8 +- test/probe/test_sharder.py | 402 ++- test/unit/__init__.py | 47 +- test/unit/account/test_auditor.py | 135 +- test/unit/account/test_backend.py | 16 +- test/unit/account/test_reaper.py | 13 +- test/unit/account/test_server.py | 17 +- test/unit/cli/test_info.py | 9 +- test/unit/cli/test_manage_shard_ranges.py | 1074 +++++++- test/unit/cli/test_recon.py | 108 + test/unit/cli/test_relinker.py | 2883 +++++++++++++++++--- .../common/middleware/crypto/test_crypto_utils.py | 4 +- .../common/middleware/crypto/test_decrypter.py | 6 +- .../common/middleware/crypto/test_encrypter.py | 5 +- .../common/middleware/crypto/test_encryption.py | 5 +- test/unit/common/middleware/helpers.py | 5 +- test/unit/common/middleware/s3api/__init__.py | 7 +- test/unit/common/middleware/s3api/test_bucket.py | 82 +- .../common/middleware/s3api/test_multi_delete.py | 46 + test/unit/common/middleware/s3api/test_obj.py | 21 + test/unit/common/middleware/s3api/test_s3_acl.py | 1 + test/unit/common/middleware/s3api/test_s3api.py | 4 +- .../unit/common/middleware/s3api/test_s3request.py | 4 +- test/unit/common/middleware/s3api/test_s3token.py | 63 +- test/unit/common/middleware/s3api/test_utils.py | 2 + test/unit/common/middleware/test_bulk.py | 2 +- test/unit/common/middleware/test_container_sync.py | 6 +- test/unit/common/middleware/test_copy.py | 3 +- test/unit/common/middleware/test_formpost.py | 62 + test/unit/common/middleware/test_keystoneauth.py | 18 +- .../unit/common/middleware/test_listing_formats.py | 2 +- test/unit/common/middleware/test_proxy_logging.py | 2 +- test/unit/common/middleware/test_ratelimit.py | 6 +- test/unit/common/middleware/test_read_only.py | 24 +- test/unit/common/middleware/test_recon.py | 174 +- .../common/middleware/test_subrequest_logging.py | 4 +- test/unit/common/middleware/test_symlink.py | 1 + test/unit/common/middleware/test_tempauth.py | 8 + test/unit/common/middleware/test_tempurl.py | 39 +- test/unit/common/test_bufferedhttp.py | 44 + test/unit/common/test_container_sync_realms.py | 35 +- test/unit/common/test_daemon.py | 2 +- test/unit/common/test_db.py | 160 +- test/unit/common/test_db_auditor.py | 151 + test/unit/common/test_db_replicator.py | 71 +- test/unit/common/test_direct_client.py | 3 +- test/unit/common/test_internal_client.py | 112 +- test/unit/common/test_manager.py | 16 +- test/unit/common/test_memcached.py | 2 +- test/unit/common/test_recon.py | 31 + test/unit/common/test_request_helpers.py | 18 +- test/unit/common/test_storage_policy.py | 31 +- test/unit/common/test_swob.py | 12 +- test/unit/common/test_utils.py | 534 +++- test/unit/common/test_wsgi.py | 9 +- test/unit/container/test_auditor.py | 129 +- test/unit/container/test_backend.py | 344 ++- test/unit/container/test_reconciler.py | 255 +- test/unit/container/test_replicator.py | 10 +- test/unit/container/test_server.py | 104 +- test/unit/container/test_sharder.py | 1106 ++++++-- test/unit/container/test_sync.py | 2 +- test/unit/container/test_sync_store.py | 2 +- test/unit/container/test_updater.py | 8 +- test/unit/helpers.py | 5 +- test/unit/obj/test_auditor.py | 267 +- test/unit/obj/test_diskfile.py | 262 +- test/unit/obj/test_expirer.py | 27 +- test/unit/obj/test_reconstructor.py | 1228 ++++++++- test/unit/obj/test_replicator.py | 18 +- test/unit/obj/test_server.py | 113 +- test/unit/obj/test_ssync.py | 184 +- test/unit/obj/test_ssync_receiver.py | 5 +- test/unit/obj/test_ssync_sender.py | 4 +- test/unit/obj/test_updater.py | 13 +- test/unit/proxy/controllers/test_base.py | 3 +- test/unit/proxy/controllers/test_container.py | 123 +- test/unit/proxy/controllers/test_obj.py | 661 ++++- test/unit/proxy/test_server.py | 125 +- test/unit/proxy/test_sysmeta.py | 5 +- tools/playbooks/common/install_dependencies.yaml | 4 +- tools/playbooks/cors/run.yaml | 2 +- 186 files changed, 14306 insertions(+), 3371 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 862a0e921..7eb48af72 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ nosehtmloutput>=0.0.3 # Apache-2.0 -os-testr>=0.8.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 @@ -19 +18,0 @@ requests-mock>=1.2.0 # Apache-2.0 -fixtures>=3.0.0 # Apache-2.0/BSD

1 0

python-monascaclient 2.4.0 (xena)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We jubilantly announce the release of: python-monascaclient 2.4.0: Monasca API Client Library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-monascaclient Download the package from: https://pypi.org/project/python-monascaclient Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in python-monascaclient 2.3.0..2.4.0 -------------------------------------------- 6d04502 Fix Docker build cf4d9cc Fix zuul publish docker image job 09709ed Add Python3 xena unit tests d28ec21 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- playbooks/docker-publish.yml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ 5 files changed, 10 insertions(+), 3 deletions(-)

1 0

monasca-common 3.4.0 (xena)
by no-reply＠openstack.org 27 Jul '21

27 Jul '21

We are delighted to announce the release of: monasca-common 3.4.0: Monasca common python modules This release is part of the xena release series. The source is available from: https://opendev.org/openstack/monasca-common Download the package from: https://tarballs.openstack.org/monasca-common/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-common 3.3.0..3.4.0 -------------------------------------- f5abe9d Bump librdkafka dependencies 844db67 Fix Docker build db200fd Bump sublibraries 76826b4 Add Python3 xena unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

sahara-image-elements 12.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are happy to announce the release of: sahara-image-elements 12.0.1: Image elements for Sahara This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sahara-image-elements Download the package from: https://tarballs.openstack.org/sahara-image-elements/ Please report issues through: https://bugs.launchpad.net/sahara/+bugs For more details, please see below. Changes in sahara-image-elements 12.0.0..12.0.1 ----------------------------------------------- 80c09a5 Fix URL of Maven Central Repository 1d7279b Fix the buildimages jobs: call the ensure-tox role ed9f7be Update TOX_CONSTRAINTS_FILE for stable/ussuri 59bb8ca Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/hadoop-cdh/post-install.d/50-cdh-fixes | 2 +- elements/s3_hadoop/post-install.d/89-manipulate-s3 | 8 ++++---- playbooks/buildimages/run.yaml | 1 + roles/build-sahara-images-dib/defaults/main.yaml | 1 + roles/build-sahara-images-dib/tasks/main.yaml | 2 +- tools/gate/build-images | 9 +++++---- tox.ini | 2 +- 8 files changed, 15 insertions(+), 11 deletions(-)

1 0

ironic-lib 4.2.3 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are satisfied to announce the release of: ironic-lib 4.2.3: Ironic common library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. Changes in ironic-lib 4.2.2..4.2.3 ---------------------------------- 79901af Limit the number of malloc arenas for qemu-img convert Diffstat (except docs and test files) ------------------------------------- ironic_lib/disk_utils.py | 16 +++++++++++++++- 2 files changed, 28 insertions(+), 9 deletions(-)

1 0

glance_store 2.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We high-spiritedly announce the release of: glance_store 2.0.1: OpenStack Image Service Store Library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. Changes in glance_store 2.0.0..2.0.1 ------------------------------------ ca0c58b Ramp up rbd resize to avoid excessive calls bbd9785 zuul: glance_store-src-ceph-tempest replaces a legacy job b37e7f2 Add lock per share for cinder nfs mount/umount 17b66ab Fix: API returns 503 if one of the store is mis-configured 9693c70 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri fb8c548 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 15 +- etc/glance/rootwrap.d/glance_cinder_store.filters | 4 + glance_store/_drivers/cinder.py | 54 +++- glance_store/_drivers/rbd.py | 62 ++-- glance_store/common/fs_mount.py | 366 ++++++++++++++++++++++ glance_store/common/utils.py | 4 + glance_store/exceptions.py | 5 + tox.ini | 2 +- 15 files changed, 709 insertions(+), 33 deletions(-)

1 0

ironic-inspector 10.1.2 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are gleeful to announce the release of: ironic-inspector 10.1.2: Hardware introspection for OpenStack Bare Metal This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.1.2 ^^^^^^ Bug Fixes * Fixes database migrations with SQLAlchemy 1.3.20. Changes in ironic-inspector 10.1.1..10.1.2 ------------------------------------------ 23494a4 Remove grenade jobs from old stable branches f4fe4c7 Fix docs 5c40a5e Fix memcached host address. c1a9478 Fix database migrations and disable the non-standalone job Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 2 +- .../versions/882b2d84cb1b_attribute_constraints_relaxing.py | 3 ++- .../versions/d00d6e3f38c4_change_created_finished_at_type.py | 11 ++++++++--- releasenotes/notes/migrations-1.3.20-0d337d000bd0a7e0.yaml | 4 ++++ tox.ini | 4 +++- zuul.d/ironic-inspector-jobs.yaml | 5 +++-- zuul.d/project.yaml | 7 ++----- 7 files changed, 23 insertions(+), 13 deletions(-)

1 0

manila-ui 3.1.0 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are chuffed to announce the release of: manila-ui 3.1.0: Manila Management Dashboard This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through: https://bugs.launchpad.net/manila-ui/+bugs For more details, please see below. 3.1.0 ^^^^^ Upgrade Notes ************* * Support for nova networking has been removed. Manila and the manilaclient sdk dropped support for nova network in the Ocata release (Feb 2017). So this should not have an impact on deployers running later releases, and this note is only informational. Bug Fixes ********* * Visibility of "switchable" fields in the share creation form involving share types that had hyphens in their names is now fixed. See Launchpad bug #1931641 (https://launchpad.net/bugs/1931641) for more details. Changes in manila-ui 3.0.0..3.1.0 --------------------------------- 21e3133 Fix share group creation with share types a97f5e6 Fix parsing names in switched fields 117c3fd Drop lower constraints testing 0dbfc47 Remove nova networking c29dd15 Drop legacy dsvm job & change zuulv3 integration job 24e0b14 Imported Translations from Zanata 331b1e4 Imported Translations from Zanata 5c47137 Update TOX_CONSTRAINTS_FILE for stable/ussuri 63a369f Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 71 +++-- lower-constraints.txt | 138 ---------- .../templates/share_networks/_detail.html | 3 - manila_ui/dashboards/project/share_groups/forms.py | 20 +- .../dashboards/project/share_networks/forms.py | 31 +-- .../dashboards/project/share_networks/tables.py | 4 - .../templates/share_networks/_detail.html | 3 - .../dashboards/project/share_networks/views.py | 7 - manila_ui/dashboards/project/shares/forms.py | 40 +-- manila_ui/dashboards/utils.py | 11 + manila_ui/locale/de/LC_MESSAGES/django.po | 31 ++- manila_ui/locale/id/LC_MESSAGES/django.po | 86 +++++- playbooks/legacy/manila-ui-dsvm/post.yaml | 80 ------ playbooks/legacy/manila-ui-dsvm/run.yaml | 84 ------ ...re-type-name-with-hyphens-8a9f16af36da5852.yaml | 6 + .../remove-nova-net-plugin-4fdc0d944d93644f.yaml | 7 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 179 ------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 289 --------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 35 --- .../source/locale/id/LC_MESSAGES/releasenotes.po | 157 ----------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 30 --- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 75 ------ .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 153 ----------- .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 71 ----- tox.ini | 10 +- 29 files changed, 267 insertions(+), 1391 deletions(-)

1 0

bifrost 8.1.2 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are gleeful to announce the release of: bifrost 8.1.2: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 8.1.2 ^^^^^ Bug Fixes * Ensures that repositories are consistently owned by the calling user. Changes in bifrost 8.1.1..8.1.2 ------------------------------- 2adb7bcc Use upper constraints when installing Bifrost requirements b80a0b9c Change LANG in install-deps.sh to en_US.UTF-8 f1d0c916 Ensure that repositories are owned by the running users Diffstat (except docs and test files) ------------------------------------- playbooks/roles/bifrost-create-vm-nodes/tasks/main.yml | 10 ++++++++++ playbooks/roles/bifrost-prep-for-install/tasks/main.yml | 11 +++++++++++ releasenotes/notes/repo-owner-41db02a4d0406a7a.yaml | 4 ++++ scripts/install-deps.sh | 6 +++--- 4 files changed, 28 insertions(+), 3 deletions(-)

1 0

ironic-prometheus-exporter 2.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We eagerly announce the release of: ironic-prometheus-exporter 2.0.1: Prometheus Exporter for Ironic Hardware Sensor data This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-prometheus-exporter Download the package from: https://tarballs.openstack.org/ironic-prometheus-exporter/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- prometheus-exporter For more details, please see below. 2.0.1 ^^^^^ Bug Fixes * Fix an issue where IPE fails if the node does not have *node_name* set Changes in ironic-prometheus-exporter 2.0.0..2.0.1 -------------------------------------------------- 5744d42 Remove lower-constraints job 1b15401 Fallback to `node_uuid` if`node_name` is not present 8dcc8ee Stop calling LOG.info on every function calls 2f328da Update TOX_CONSTRAINTS_FILE for stable/ussuri 125e361 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 +- ironic_prometheus_exporter/messaging.py | 5 +- ironic_prometheus_exporter/parsers/header.py | 9 +- ironic_prometheus_exporter/parsers/ipmi.py | 11 +- ironic_prometheus_exporter/parsers/redfish.py | 6 +- .../json_samples/notification-empty-node_name.json | 17 + .../notification-ipmi-none-node_name.json | 2348 ++++++++++++++++++++ .../json_samples/notification-none-node_name.json | 17 + .../notification-redfish-none-node_name.json | 67 + .../notes/no-node_name-ae693f6a030fed5f.yaml | 4 + tox.ini | 8 +- 15 files changed, 2620 insertions(+), 21 deletions(-)

1 0

trove-dashboard 14.1.0 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We enthusiastically announce the release of: trove-dashboard 14.1.0: Trove Management Dashboard This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/trove-dashboard Download the package from: https://tarballs.openstack.org/trove-dashboard/ Please report issues through: https://bugs.launchpad.net/trove-dashboard/+bugs For more details, please see below. Changes in trove-dashboard 14.0.0..14.1.0 ----------------------------------------- db7a5ab Remove clusters panel from trove dashboard 4709acd Remove publish checkbox in log view 274807e Do not use __nonzero__() 5259c8b Remove unsupported network param for creating instance 1fa1ac3 Enables to select a flavor works for a database ecf14ae Update TOX_CONSTRAINTS_FILE for stable/ussuri 58b709a Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- trove_dashboard/api/trove.py | 40 +- trove_dashboard/content/database_clusters/panel.py | 3 +- .../config_param_manager.py | 2 +- .../templates/databases/logs/_detail_log.html | 2 - .../content/databases/workflows/create_instance.py | 3 +- .../_1740_project_database_clusters_panel.py | 2 + trove_dashboard/test/test_data/trove_data.py | 8 +- 11 files changed, 44 insertions(+), 706 deletions(-)

1 0

trove 13.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are ecstatic to announce the release of: trove 13.0.1: OpenStack DBaaS This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. Changes in trove 13.0.0..13.0.1 ------------------------------- 48e39a07 [docs]Fix wrong links in README a5a5c5e0 Handle case where no networks are selected at create 7e492708 Set limit to -1 when getting Nova instances d808241a [Image] Use sudo when removing image cache dir 83bf6ce1 Install pip3 for image build f31ac746 [Backup] Ignore 404 error when deleting swift objects 695a63e2 Do not operate floating IP for relication cluster c5d78f68 Fix building raw image 775abab5 Support image type for guest image building 8d9b938a Fix CI job a006dc41 Update TOX_CONSTRAINTS_FILE for stable/ussuri 06755d64 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 31 +++++++------- README.rst | 6 +-- devstack/settings | 2 +- integration/scripts/conf/test_begin.conf | 2 +- .../99-reliable-apt-key-importing.bash | 4 +- .../guest-agent/source-repository-guest-agent | 4 +- .../99-reliable-apt-key-importing.bash | 4 +- .../elements/ubuntu-guest/install.d/15-trove-dep | 21 ++++++---- .../ubuntu-guest/post-install.d/90-apt-get-update | 9 ---- .../ubuntu-guest/pre-install.d/04-baseline-tools | 2 +- .../ubuntu-mysql/pre-install.d/10-percona-apt-key | 6 +-- .../install.d/22-decrease-networking-timeout | 7 ++++ integration/scripts/functions_qemu | 8 ++-- integration/scripts/trovestack | 8 ++-- integration/scripts/trovestack.rc | 2 +- tox.ini | 2 +- trove/common/strategies/storage/swift.py | 9 +++- trove/extensions/mgmt/instances/models.py | 3 +- trove/instance/views.py | 2 +- trove/limits/views.py | 4 +- trove/taskmanager/manager.py | 13 +----- trove/taskmanager/models.py | 48 ++-------------------- 26 files changed, 88 insertions(+), 148 deletions(-)

1 0

octavia-dashboard 5.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are pumped to announce the release of: octavia-dashboard 5.0.1: Horizon panels for Octavia This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia- dashboard For more details, please see below. Changes in octavia-dashboard 5.0.0..5.0.1 ----------------------------------------- d0b91fd Drop lower-constraints job b09a3d4 Disable Load Balancers panel when Octavia service is not deployed 7ab53ba Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 147 --------------------- .../dashboards/project/load_balancer/panel.py | 2 +- .../locale/id/LC_MESSAGES/djangojs.po | 11 +- tox.ini | 6 - zuul.d/projects.yaml | 1 - 5 files changed, 10 insertions(+), 157 deletions(-)

1 0

designate 10.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We joyfully announce the release of: designate 10.0.1: DNS as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate 10.0.0..10.0.1 ----------------------------------- b967e9f7 Update zones masters using pool target masters. dc2426f7 Fix pdns4 devstack plugin 5a526c7a Drop lower-constraints test 06883ab7 pdns4 backend: check if zone exists before attempting delete 688987ab Fix lower-constraints test not constraining properly 9cf3b8ea fix database sync always get the wrong value a61a0c39 Update TOX_CONSTRAINTS_FILE for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - designate/backend/impl_bind9.py | 37 +++++ designate/backend/impl_pdns4.py | 21 ++- designate/manage/pool.py | 28 ++++ .../migrate_repo/versions/070_liberty.py | 4 +- devstack/designate_plugins/backend-pdns4 | 22 +-- lower-constraints.txt | 170 --------------------- tox.ini | 14 +- 12 files changed, 195 insertions(+), 210 deletions(-)

1 0

metalsmith 1.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are amped to announce the release of: metalsmith 1.0.1: Deployment and Scheduling tool for Bare Metal This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.0.0..1.0.1 ---------------------------------- 43bd9d4 Remove lower-constraints job 4ee24fd Add the setuptools workaround c658bce Use is instead of ambiguous pipe 3b32a3f CI: increase the swift loopback disk size for the CentOS job d46002f Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 81eae8d Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +++- playbooks/integration/centos-image.yaml | 2 +- playbooks/integration/pre.yaml | 9 +++++++-- tox.ini | 8 ++++---- 5 files changed, 16 insertions(+), 8 deletions(-)

1 0

sahara-plugin-spark 3.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We eagerly announce the release of: sahara-plugin-spark 3.0.1: Spark Plugin for Sahara Project This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sahara-plugin-spark Download the package from: https://tarballs.openstack.org/sahara-plugin-spark/ Please report issues through: https://storyboard.openstack.org/#!/project/1104 For more details, please see below. Changes in sahara-plugin-spark 3.0.0..3.0.1 ------------------------------------------- 46b812a Fix URL of Maven Central Repository beeef12 Update TOX_CONSTRAINTS_FILE for stable/ussuri 8018cf5 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../plugins/spark/resources/images/common/manipulate_s3 | 2 +- tox.ini | 8 ++++---- 3 files changed, 6 insertions(+), 5 deletions(-)

1 0

cloudkitty 12.1.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are ecstatic to announce the release of: cloudkitty 12.1.1: Rating as a Service component for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. Changes in cloudkitty 12.1.0..12.1.1 ------------------------------------ f585666 Fix default admin_or_owner policy expression 7bfd8ec Drop lower-constraints job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cloudkitty/common/policies/base.py | 4 +++- 3 files changed, 5 insertions(+), 7 deletions(-)

1 0

manila 10.1.0 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are pleased to announce the release of: manila 10.1.0: Shared Storage for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 10.1.0 ^^^^^^ Upgrade Notes ************* * Added a new config option *netapp_ssl_cert_path* for NetApp driver. This option enables the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Security Issues *************** * An RBAC policy check has been enforced against the GET /share- access-rules API to ensure that users are permitted to access the share that the access rule belongs to. See bug 1917417 (https://launchpad.net/bugs/1917417) for more details. Bug Fixes ********* * Fixed an issue on ONTAP NetApp driver that caused access rules not to be applied to a promoted replica using CIFS protocol. Please refer to the Launchpad bug #1896949 (https://bugs.launchpad.net/manila/+bug/1896949) for more details. * Fixed an issue on ONTAP NetApp driver that was forcing the location of CA certificates for SSL verification during HTTPS requests. It adds the *netapp_ssl_cert_path* configuration, enabling the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Please refer to the Launchpad bug #1900191 (https://bugs.launchpad.net/manila/+bug/1900191) for more details. * A bug with storage protocol filtering in the scheduler has been fixed. See bug (https://launchpad.net/bugs/1783736) for more details. * Fixed bug #1886232 (https://bugs.launchpad.net/manila/+bug/1886232) that causes an INFO message saying the python-manila package was not found. Now, the package name was updated to python3-manila. This fix solves only in the case that the user installed the manila using the default packages found in OS. * New user messages now alert users of possible remediations during access rule creation errors with CephFS shares. This includes hints to users to not use cephx client users that are prohibited by CephFS or the share driver. See CVE-2020-27781 (https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2020-27781) and bug #1904015 <https://launchpad.net/bugs/1904015>`_ for more details. * Fixed a bug that if extend a volume after shrink it under generic driver, it may have a wrong real size. Please see Launchpad bug #1909951 (https://bugs.launchpad.net/manila/+bug/1909951) for more details. * The scheduler stats resource APIs (/scheduler-stats/pools and /scheduler-stats/pools/detail) have been fixed to not return an arbitrary traceback in the error message body to the caller when access to the resource has been denied. * Fixed bug #1922075 (https://bugs.launchpad.net/manila/+bug/1922075) Fixed the problem that "gluster volume set nfs.rpc-auth-reject '*'" failed when the glusterfs driver created an instance from a snapshot. * Fixed NotFound error in share replica periodic tasks. It could happen that the parent share of the replica that was being worked on had already been deleted. * Corrected an error message for attempts to create snapshots from shares that do not support this operation. The message said that the share backend has no such support but that is not always true. The original share for the snapshot does not support snapshots because it was created with a share type without the "snapshot_support" extra-spec set, irrespective of whether the back end used can itself support snapshots or not. Changes in manila 10.0.2..10.1.0 -------------------------------- a853b0cc [ci][devstack] Install bridge-utils for Container driver ed316557 Fix CI issues and adjust test jobs c591c0da Update IRC references 6707ca7b Reuse _set_instances_share_data for replicas. 3b31aae9 [Native CephFS] Add messages for async ACL ops 94bb8fea Fix traceback in scheduler-stats API 4a75c699 Filter storage protocol in the scheduler 4fab48de Fix api error message for snapshot creation failure f40a428b [Glusterfs] Fix create share from snapshot failed ff97dc01 RBAC tightening for share access rule 6b9532ee [NetApp] Fix python-manila package version 282787fb Always use new_size when extend ac667519 [NetApp] Fix hard-coded CA cert path for SSL 460f4470 [NetApp] Fix access rules for CIFS promoted replica be76d7eb Move shares filtering to database layer Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 25 +-- devstack/plugin.sh | 7 + manila/api/v1/scheduler_stats.py | 8 +- manila/api/v1/share_snapshots.py | 4 +- manila/db/sqlalchemy/api.py | 188 +++++++++++++-------- manila/exception.py | 4 + manila/message/message_field.py | 75 ++++---- manila/scheduler/drivers/filter.py | 24 ++- manila/scheduler/filters/capabilities.py | 3 - manila/share/api.py | 29 ++-- manila/share/drivers/cephfs/driver.py | 66 ++++++-- manila/share/drivers/generic.py | 2 +- manila/share/drivers/glusterfs/layout_volume.py | 33 +++- .../share/drivers/netapp/dataontap/client/api.py | 11 +- .../drivers/netapp/dataontap/client/client_base.py | 1 + .../netapp/dataontap/cluster_mode/data_motion.py | 1 + .../netapp/dataontap/cluster_mode/lib_base.py | 6 +- manila/share/drivers/netapp/options.py | 10 +- manila/share/drivers/netapp/utils.py | 2 +- .../share/drivers/glusterfs/test_layout_volume.py | 13 +- .../share/drivers/netapp/dataontap/client/fakes.py | 1 + .../dataontap/cluster_mode/test_data_motion.py | 7 +- .../post.yaml | 15 -- .../run.yaml | 108 ------------ .../post.yaml | 15 -- .../run.yaml | 94 ----------- .../post.yaml | 15 -- .../run.yaml | 107 ------------ .../post.yaml | 15 -- .../run.yaml | 83 --------- .../manila-tempest-dsvm-glusterfs-native/run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 84 --------- .../manila-tempest-dsvm-glusterfs-nfs/run.yaml | 2 +- .../legacy/manila-tempest-dsvm-hdfs/post.yaml | 15 -- playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml | 74 -------- .../manila-tempest-dsvm-mysql-generic/run.yaml | 22 +-- .../run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 92 ---------- .../run.yaml | 2 +- .../legacy/manila-tempest-dsvm-scenario/run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../manila-tempest-minimal-dsvm-dummy/run.yaml | 2 +- .../manila-tempest-minimal-dsvm-lvm/run-ipv6.yaml | 2 +- .../manila-tempest-minimal-dsvm-lvm/run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 109 ------------ .../post.yaml | 28 --- .../run.yaml | 109 ------------ ...ss-rules-promoted-replica-70b32991cc90e1ca.yaml | 7 + ...-fix-ssl-cert-path-option-35354c9b7a9c37e6.yaml | 20 +++ ...he-capabilities-scheduler-d8391183335def9f.yaml | 5 + ...p-fix-python-package-name-0f3ec3f2deec8887.yaml | 8 + ...1-cephx-asynchronous-msgs-6a683076a1fb5a54.yaml | 9 + ...ix-extend-have-wrong-size-7938eaa6591bd2ad.yaml | 7 + ...eck-on-share-access-rules-efdddaf9e6f68fdf.yaml | 7 + ...-user-if-action-forbidden-0da51825756fd5fc.yaml | 7 + ...hare-from-snapshot-failed-053a583522a6fc0e.yaml | 6 + ...ound-replica-parent-share-d8e50659c02b941a.yaml | 5 + ...hot-support-api-error-msg-eaf5fd2b1df97d15.yaml | 10 ++ zuul.d/grenade-jobs.yaml | 1 + zuul.d/project.yaml | 124 -------------- 76 files changed, 751 insertions(+), 1373 deletions(-)

1 0

ironic 18.1.0 (xena)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are overjoyed to announce the release of: ironic 18.1.0: OpenStack Bare Metal Provisioning This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 18.1.0 ^^^^^^ New Features ************ * The anaconda deploy interface now handles config drive. The config drive contents are written to the disk in the /var/lib/cloud/seed/config_drive directory by the driver via kickstart files %post section. cloud-init picks up the the config drive information and processes them. Because the config drive is extracted on to disk as plain text files, tools like glean do not work with this deploy interface. * The configuration option "[deploy]ramdisk_image_download_source" now supports a new value "swift". If set, and if "boot_iso" or "deploy_iso" is a Glance image, the image is exposed via a Swift temporary URL. For other types of images the new value works the same way as the existing "http" value. * The "ilo-virtual-media" deploy interface now supports "file:///" URLs for "boot_iso" and "deploy_iso". * The "ilo-virtual-media" deploy interface now supports the "[deploy]ramdisk_image_download_source" configuration option. * Adds "boot_mode" and "secure_boot" fields to node. These indicate the boot mode (bios/uefi) and secure boot state (True/False) detected in the most recent power sync or during transition to the "manageable" state. If underlying driver does not support detecting these, they shall be populated with null values. These fields are also available under a node's states endpoint: * "/v1/nodes/{node_ident}/states" * For the "ramdisk" deploy interface, the "ramdisk_image_download_source" option can now be provided in the node's "instance_info" in addition to the global configuration. * Provides new vendor passthru methods for Redfish to create, delete and get subscriptions for BMC events. Upgrade Notes ************* * The query pattern for the database when lists of nodes are retrieved has been changed to a more efficient pattern at scale, where a list of nodes is generated, and then additional queries are executed to composite this data together. This is from a model where the database client in the conductor was having to deduplicate the resulting data set which is overall less efficent. * The default UEFI iPXE bootloader, "[pxe]uefi_ipxe_bootfile_name" used by the "ipxe" boot interface, has been changed from "ipxe.efi" to "snponly.efi". This is because most deployments actually need to use "snponly.efi" as it contains support for the UEFI integrated network stack, where as "ipxe.efi" does not and only contained compiled in network drivers, for UEFI, there happen to be few as the UEFI standard requires networking to be handled by the UEFI firmware. * Since "ilo-virtual-media" deploy interface now respects the "[deploy]ramdisk_image_download_source" configuration options, its default caching behavior has changed. Now HTTP "boot_iso"/"deploy_iso" are cached locally and served from the conductor's HTTP server instead of passing them directly to the BMC. Glance images are also cached locally. To revert to the previous behavior, set the "[deploy]ramdisk_image_download_source" option to "swift". * The minimum requirement for the "oslo.db" library is now version 9.1.0 to address duplicate key error changes in MySQL 8.0.19. oslo.db version 9.1.0 fixes issue of idrac driver node inspection for inspect interface as idrac-redfish. Issue was introduced since MySQL 8.0.19 where duplicate key error information is extended to include the table name in the key. For more information, see story 2008901 (https://storyboard.openstack.org/#!/story/2008901) Deprecation Notes ***************** * The "driver_info" property "ilo_boot_iso" has been renamed to just "boot_iso". * The following "driver_info" parameters have been renamed with deprecation: * "ilo_deploy_kernel" -> "deploy_kernel" * "ilo_deploy_ramdisk" -> "deploy_ramdisk" * "ilo_deploy_iso" -> "deploy_iso" * "ilo_rescue_kernel" -> "rescue_kernel" * "ilo_rescue_ramdisk" -> "rescue_ramdisk" * "ilo_rescue_iso" -> "rescue_iso" * "ilo_bootloader" -> "bootloader" * The "driver_info" properties "irmc_deploy_iso" and "irmc_rescue_iso" have been renamed to just "deploy_iso" and "rescue_iso". * The "instance_info" property "irmc_boot_iso" has been renamed to just "boot_iso". * The "[pxe]ip_version" setting has been deprecated and is anticipated to be removed in the Y* release of OpenStack. This option effectively has had no operational impact since the Ussuri release of OpenStack where dual stack IPv4 and IPv6 support was added to Ironic. Critical Issues *************** * Fixes upgrade failure caused by the missing version of "BIOSSetting" database objects. Security Issues *************** * Fixes an issue with the "/v1/nodes/detail" endpoint where an authenticated user could explicitly ask for an "instance_uuid" lookup and the associated node would be returned to the user with sensitive fields redacted in the result payload if the user did not explicitly have "owner" or "lessee" permissions over the node. This is considered a low-impact low-risk issue as it requires the API consumer to already know the UUID value of the associated instance, and the returned information is mainly metadata in nature. More information can be found in Storyboard story 2008976 (https://storyboard.openstack.org/#!/story/2008976) Bug Fixes ********* * Skips port creation during redfish inspect for devices reported without a MAC address. * Fixes potential cache coherency issues by caching the AgentClient per task, rather than globally. * Fixes an issue with the "/v1/nodes/detail" endpoint where requests for an explicit "instance_uuid" match would not follow the standard query handling path and thus not be filtered based on policy determined access level and node level "owner" or "lessee" fields appropriately. Additional information can be found in story 2008976 (https://storyboard.openstack.org/#!/story/2008976) * Slow database retrieval of nodes has been addressed at the lower layer by explicitly passing and handling only the requested fields. The result is excess discarded work is not performed, making the overall process more efficent. This is particullarly beneficial for OpenStack Nova's syncronization with Ironic. * Fixes configuring Redfish RAID using "interface_type" when error "failed to find matching physical disks for all logical disks" occurs. * The "ilo-virtual-media" deploy interface no longer requires the Image service backend to be Swift for Glance images in "boot_iso" and "deploy_iso". * Improves record retrieval performance for baremetal nodes by enabling ironic to not make redundant calls as part of generating API result sets for the baremetal nodes endpoint. * Fixes handling of single-value (non-key-value) parameters in the "[inspector]extra_kernel_params" configuration options. * Allows reboot to hard disk following iso ramdisk deploy. Re-uses the "force_persistent_boot_device" driver_info option which can be set to "Never" in order to set the virtual media to one time boot. * The "ramdisk" deploy interface no longer requires a fake "image_source" value to be provided when "boot_iso" is not used. * Removes unused local images after ejecting a virtual media device via the "eject_vmedia" vendor passthru call of the "redfish" vendor interface. * In Redfish RAID clean and deploy steps skip non-RAID storage controllers for RAID operations. In Redfish systems that do not implement "SupportedRAIDTypes" they are still processed and could result in unexpected errors. * Fixes an issue of powering off with the "idrac-wsman" management interface while the execution of a clear job queue cleaning step is proceeding. Prior to this fix, the clean step would fail when powering off a node. * Fixes issue arose during inspection of iDRAC node with inspect- interface as idrac-redfish. Earlier, inspection of node was getting failed with error "port already exists". This issue arose since MySQL 8.0.19 where duplicate key error information is extended to include the table name in the key. Previously, duplicate key error information included only the key value and key name. For more information, see story 2008901 (https://storyboard.openstack.org/#!/story/2008901) * Fixes overriding "agent_verify_ca" with "False" via "driver_info". Other Notes *********** * The default database query pattern has been changed which will result in additional database queries when compositing lists of "nodes" by separately querying "traits" and "tags". Previously this was a joined query which requires deduplication of the result set before building composite objects. * Deprecation warnings for the legacy RBAC policies are now suppressed, as the OpenStack community is coalescing around what appears will be a longer deprecation cycle and process than would typcially be undertaken due to the nature and impact of policy changes. The community as a whole is expecting to make RBAC policy work changes a community goal during the Y* release development cycle, which means the earliest legacy policy support may be removed is likely now the Z* development cycle. Changes in ironic 18.0.0..18.1.0 -------------------------------- a2417571b Update vendor_passthru subscriptions releasenote f095a9478 Prepare 18.1 and clean up release notes 4bc5142df Add vendor_passthru method for subscriptions b5872c903 Set glance limit for baremetal friendly images 2cd646834 Scoped RBAC Devstack Plugin support e488792cc Burn-in: Add documentation 58ca01c22 Add a section to redfish doc for BIOS registry fields 3199d289b Fix iPXE docs: snponly is not always available 06124bae7 Update requirements e503048f0 Sanity check object version changes 3bad548ce Allow reboot to hard disk following iso ramdisk deploy. ae535bac2 Add ipxe ramdisk kernel append param test fdef42fee Update iDRAC virtual media boot known issue 46ff51487 Add `boot_mode` and `secure_boot` to node object and expose in api 7e5e65550 Add missing BIOSSettings version mapping for older releases 9e477d178 Fix typos in API sanitization change notes d3737b23b Bring boot_iso/deploy_iso handling in iLO closer to Redfish 6bbd03b17 Use selectinload for all list queries da27e370b Clean up images when ejecting an ISO with Redfish 9851b68ee Allow node_sanitize function to be provided overrides c830861ee Avoid double file removal in create_boot_iso 85212fead Add note regarding configuration drives to tuning docs 8cb605745 Support "swift" for ramdisk_image_download_source ad3ce797c Defer checking image size until instance info is built 34337f75f Fix oslo policy DeprecatedRule warnings 4ac8340fb Add support for configdrive in anaconda interface 24901e456 Add reno and reset legacy policy deprecation expectation bb0523f03 [doc] Bootloader reinstallations on Software RAID 4e5073390 [doc] Update section on ESP consistency c41ed8414 Fix Redfish RAID interface_type physical disk hint 67ff5ff2b Suppress policy deprecation and default change warnings 0cc6d8204 Skip port create if MAC is blank d8ccfabda Ramdisk: do not require image_source 1d6441cc3 Refactor deploy_utils.validate_image_properties c779be9f7 Redfish: Skip non-RAID controllers for RAID b2a249d18 Deprecate [pxe]ip_version parameter e3a4c7d77 Upgrade oslo.db version 741a4d8a8 Update the clear job id's constant 87e42afb9 API to pass fields to node object list 7b37e03b6 Set stage for objects to handle selected field lists. 644ba5d4b Only return the requested fields from the DB fcb6a1096 Cache AgentClient on Task, not globally 4d13da9cc Change UEFI ipxe bootloader default 4dc192015 Refactor: untie IloVendor from validate_image_properties ce5baa380 Fix handling driver_info[agent_verify_ca] == False d7a5b3469 Fix ramdisk boot option handling f8e2bc99d Allow ramdisk_image_download_source in instance_info for ramdisk deploy ebb314bf4 Nicer error message when a deploy step fails 5a8a77ec5 Don't run the inspector job on changes to inspector tests 4f2d1ca94 CI: change ilo_deploy_iso to deploy_iso be3c153d5 Fix node detail instance_uuid request handling fc27710fa Clean up vendor prefixes for iRMC boot 595345ffc Add documentation for anaconda deploy interface df228c5b9 Fix typos in inspection docs f91915d4c Remove redundant/legacy is_admin logic 2c3470353 Split a community page out of the contributor docs 50b84c9ae Document managed inspection fd7cde9b9 dhcp-less: mention how to provide network_data to instance 7507dec09 Use env to find python3 e84b6d102 Rename ilo_boot_iso -> boot_iso 349bf2d5b Clean up vendor prefixes for iLO boot 3824912f0 Handle non-key-value params in [inspector]extra_kernel_params f58cbf151 Fix ironic-status db index check 728edb6b7 Changes made to enrollment documentation 0a8ebdfc5 Update Redfish RAID disk_type unit test 4b29f2b95 Redfish: Get only RAID controller's physical disks 96aae720a Improve agent_client logging 2fabd3b7d Trivial: fix an outdated link 6a4e33eb0 Move provision states documentation to the user guide 39cd751a9 Refactor iDRAC OEM extension manager calls 57120615a Update CI jobs list and description in docs Diffstat (except docs and test files) ------------------------------------- .../source/baremetal-api-v1-node-management.inc | 7 +- api-ref/source/parameters.yaml | 31 +- .../source/samples/node-get-state-response.json | 2 + devstack/lib/ironic | 141 ++-- devstack/upgrade/upgrade.sh | 10 +- .../contributor/ironic-multitenant-networking.rst | 3 + driver-requirements.txt | 2 +- ironic/api/controllers/v1/collection.py | 13 +- ironic/api/controllers/v1/node.py | 379 +++++++---- ironic/api/controllers/v1/utils.py | 2 + ironic/api/controllers/v1/versions.py | 4 +- ironic/api/hooks.py | 3 - ironic/cmd/status.py | 31 +- ironic/common/context.py | 4 - ironic/common/glance_service/service_utils.py | 7 +- ironic/common/images.py | 11 +- ironic/common/kickstart_utils.py | 165 +++++ ironic/common/policy.py | 743 ++++++++++----------- ironic/common/pxe_utils.py | 9 +- ironic/common/raid.py | 10 + ironic/common/release_mappings.py | 36 +- ironic/common/utils.py | 16 + ironic/conductor/deployments.py | 6 +- ironic/conductor/manager.py | 4 + ironic/conductor/steps.py | 8 +- ironic/conductor/utils.py | 44 ++ ironic/conf/deploy.py | 5 +- ironic/conf/pxe.py | 8 +- ironic/db/api.py | 6 +- .../c1846a214450_add_boot_mode_and_secure_boot.py | 32 + ironic/db/sqlalchemy/api.py | 162 ++++- ironic/db/sqlalchemy/models.py | 3 + ironic/drivers/modules/agent.py | 17 +- ironic/drivers/modules/agent_base.py | 31 +- ironic/drivers/modules/agent_client.py | 40 +- ironic/drivers/modules/ansible/deploy.py | 6 +- ironic/drivers/modules/boot_mode_utils.py | 3 + ironic/drivers/modules/deploy_utils.py | 97 ++- ironic/drivers/modules/drac/boot.py | 67 +- ironic/drivers/modules/drac/inspect.py | 46 +- ironic/drivers/modules/drac/management.py | 187 +----- ironic/drivers/modules/drac/raid.py | 43 +- ironic/drivers/modules/drac/utils.py | 121 ++++ ironic/drivers/modules/ilo/boot.py | 261 +++----- ironic/drivers/modules/ilo/power.py | 15 +- ironic/drivers/modules/ilo/vendor.py | 7 +- ironic/drivers/modules/image_utils.py | 43 +- ironic/drivers/modules/inspector.py | 6 +- ironic/drivers/modules/irmc/boot.py | 72 +- ironic/drivers/modules/pxe.py | 13 - ironic/drivers/modules/pxe_base.py | 13 +- ironic/drivers/modules/redfish/boot.py | 34 +- ironic/drivers/modules/redfish/raid.py | 38 +- ironic/drivers/modules/redfish/utils.py | 38 +- ironic/drivers/modules/redfish/vendor.py | 192 ++++++ ironic/drivers/utils.py | 22 +- ironic/objects/base.py | 6 +- ironic/objects/node.py | 67 +- .../unit/drivers/modules/drac/test_inspect.py | 27 - .../unit/drivers/modules/drac/test_management.py | 128 +--- .../unit/drivers/modules/redfish/test_boot.py | 71 +- .../unit/drivers/modules/redfish/test_inspect.py | 15 + .../unit/drivers/modules/redfish/test_raid.py | 213 +++++- .../unit/drivers/modules/redfish/test_utils.py | 203 ++++-- .../unit/drivers/modules/redfish/test_vendor.py | 257 +++++-- .../unit/drivers/modules/test_agent_client.py | 22 + .../unit/drivers/modules/test_deploy_utils.py | 134 ++-- .../unit/drivers/third_party_driver_mock_specs.py | 3 + .../notes/bios-version-dfd5c95805c295c5.yaml | 5 + releasenotes/notes/blank-mac-f8e0b37e0bd6d719.yaml | 5 + ...ache-agentclient-per-task-ec2231684e6876d9.yaml | 5 + ...ss-pattern-for-node-lists-a333dd9c5afa737d.yaml | 16 + .../change-ipxe-default-file-a9ed5e17fc3d022e.yaml | 10 + ...upport-in-anaconda-deploy-f2aad59b4ff809ec.yaml | 9 + ...ed-instance-info-behavior-1375914a30621eca.yaml | 20 + ...-field-overhead-reduction-40be1821e38b468c.yaml | 9 + .../notes/deploy-iso-swift-355ad6eba6c511b4.yaml | 8 + ...dfish-raid-interface-type-4b3566b637cc2301.yaml | 5 + .../notes/ilo-boot-iso-696b57f44f29852d.yaml | 5 + .../notes/ilo-deploy-iso-0c88edb5daff8a4e.yaml | 22 + .../notes/ilo-prefix-d5a65ac637f82f65.yaml | 13 + ...ode-retrieval-performance-cf5a02eb629bf32c.yaml | 6 + .../inspector-kernel-params-6db82c633d7361e2.yaml | 5 + .../notes/irmc-boot-iso-0e93f97acfa59778.yaml | 8 + .../notes/node-boot-mode-0662effa2a2644dc.yaml | 10 + .../notes/not-presistent-9c552f4209a84820.yaml | 7 + ...isk-image-download-source-7a071aba7890ba95.yaml | 6 + .../notes/ramdisk-validate-acbc4acdb71d10c2.yaml | 5 + .../notes/redfish-eject-iso-9875388ae09bc8f6.yaml | 6 + .../remove_pxe_ip_version-7a71f821ded28360.yaml | 7 + ...-rbac-deprecation-for-now-779898e720a7bf4e.yaml | 10 + .../skip-nonraid-controllers-f4a79e2c9e8080ce.yaml | 7 + ...clear-job-id-constant-fix-c69cf96c55364bb3.yaml | 7 + ...redfish_inspection_bugfix-b5edd35c337f80fc.yaml | 23 + ...dor-passthru-subscription-5d28a2420e2af111.yaml | 5 + .../notes/verify-bool-ab3607429e005bed.yaml | 4 + requirements.txt | 15 +- test-requirements.txt | 6 +- tools/check-releasenotes.py | 2 +- zuul.d/ironic-jobs.yaml | 42 ++ zuul.d/project.yaml | 4 + 160 files changed, 5685 insertions(+), 2844 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index e379bb99a..8b2af33a2 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -14 +14 @@ python-xclarityclient>=0.1.6 -sushy>=3.8.0 +sushy>=3.10.0 diff --git a/requirements.txt b/requirements.txt index ca59703cc..9c4e1dc47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.1.1 # Apache-2.0 @@ -19,2 +19,2 @@ oslo.config>=6.8.0 # Apache-2.0 -oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=6.0.0 # Apache-2.0 +oslo.context>=2.22.0 # Apache-2.0 +oslo.db>=9.1.0 # Apache-2.0 @@ -24,2 +24,2 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=3.6.2 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.policy>=3.7.0 # Apache-2.0 +oslo.serialization>=2.25.0 # Apache-2.0 @@ -32,2 +32,3 @@ pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD -requests>=2.14.2 # Apache-2.0 -rfc3986>=0.3.1 # Apache-2.0 +pycdlib>=1.11.0 # LGPLv2 +requests>=2.18.0 # Apache-2.0 +rfc3986>=1.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 72cd8e6b9..bd29d9394 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ coverage!=4.4,>=4.0 # Apache-2.0 -ddt>=1.0.1 # MIT +ddt>=1.2.1 # MIT @@ -12 +12 @@ oslotest>=3.2.0 # Apache-2.0 -stestr>=1.0.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 @@ -17 +17 @@ pysnmp>=4.4.12 -bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 \ No newline at end of file +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0

1 0

tripleo-image-elements 12.2.2 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are satisfied to announce the release of: tripleo-image-elements 12.2.2: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.1..12.2.2 ------------------------------------------------ 6fd9757b Clean up ifcfg-eth0 Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

1 0

tripleo-heat-templates 13.4.0 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We contentedly announce the release of: tripleo-heat-templates 13.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.0 ^^^^^^ New Features ************ * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK Bug Fixes ********* * InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile do not point to the default IPA ca.crt file and instead are requested to be loaded to component specific CA files (even if they are the same). This can lead to a race where the CA cert is not being written by certmonger in time. Ib868465c20d97c62cbcb214bfc62d949bd6efc62 already changed the default to use the IPA system cacert file '/etc/ipa/ca.crt' per default starting with the wallaby release using the ansible role. This change backports to also use the IPA system cacert file '/etc/ipa/ca.crt' to previous release when managing the certs via puppet-tripleo. * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800) Add support for ports filtering in XtremIO driver. Other Notes *********** * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 13.3.0..13.4.0 ------------------------------------------------ f99fab967 Make default of NeutronDefaultAvailabilityZones empty array 46ad1e676 Neutron: Use the pids subsystem to look up container id 59599a86d Enable keystone_authtoken/memcach_use_advanced_pool for Sahara 0b5b09c12 Support cinder image conversion on an NFS share 643c3d25d Add THT Jinja2 data sources as stack output 9df8a1ce0 Enable DPDK OVS PMD Auto Load Balance d18c6e928 Remove NovaVncProxyNetwork from ServiceNetMap 89fde273e Add support for keystone_authtoken/memcache_use_advanced_pool c746dfa0b support for OVS DPDK pmd auto balance parameters. 52f26b6fb Do not run Swift rsync container in single replica mode c748d92c7 Always run network config for undercloud 3a919de4e Fix NetworkDeploymentActionValue format 02b7e3d67 Limit collectds memory usage f58effc74 Revert "Always run network config for undercloud" 470496171 Add option for enabling rsyslog reopenOnTruncate c2c2111ef Always run network config for undercloud 0ed341f44 Remove heat::heat_keystone_clients_url definition 8caac4190 Make UpgradeLeappDevelSkip per-role 7f19b9635 Added the posibility of skipping the NFS ping test on the rear installation f808dac56 HA minor update: fix bad pcs invocation 6c5011056 Fix broken restart of ovndb_server during minor update bb1a85575 Bump ovs and ovn versions to 2.15 for FFWD. d54d63285 [victoria/ussuri/train] Change nbd, vnc and qemu default cacert file c595a9a83 Update rhsm repo examples for RHEL8 deployments bc39ac89d Fix cinder's cephx keyring file permissions 823ec8223 set ganesha idmap.conf file path and overrides 67ae1b953 Fix typo in ceilometer-write-qdr environment file 496accc44 Allow customizing podman's [engine]/events_logger 8c796f4f1 Add OVNCMSOptions to Controller and Networker roles 069005186 Disable tunnelled migration 51a9a0781 Unify cinder's volume and backup kolla_config settings 27ae88324 Add environment for external network VIP a68d3f96b Create post-deploy.conf on update/upgrade for octavia 9e8061ae7 Fix NovaDefaultFloatingPool parameter a31e100ca Add ports filtering support to XtremIO Cinder driver Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-server.yaml | 2 + deployment/aodh/aodh-base.yaml | 6 + .../backup-and-restore/rear-baremetal-ansible.yaml | 7 + .../barbican/barbican-api-container-puppet.yaml | 6 + deployment/ceph-ansible/ceph-nfs.yaml | 9 ++ deployment/cinder/cinder-api-container-puppet.yaml | 6 + ...inder-backend-dellemc-xtremio-iscsi-puppet.yaml | 8 ++ .../cinder-backend-dellemc-xtremio-puppet.yaml | 7 + .../cinder/cinder-backup-container-puppet.yaml | 51 +------ .../cinder/cinder-backup-pacemaker-puppet.yaml | 31 +---- .../cinder/cinder-common-container-puppet.yaml | 154 ++++++++++++++++++++- .../cinder/cinder-volume-container-puppet.yaml | 39 +----- .../cinder/cinder-volume-pacemaker-puppet.yaml | 23 +-- deployment/deprecated/mistral/mistral-base.yaml | 6 + .../novajoin/novajoin-container-puppet.yaml | 6 + deployment/deprecated/sahara/sahara-base.yaml | 6 + .../designate/designate-api-container-puppet.yaml | 6 + deployment/glance/glance-api-container-puppet.yaml | 6 + .../gnocchi/gnocchi-api-container-puppet.yaml | 6 + deployment/heat/heat-base-puppet.yaml | 7 +- deployment/ironic/ironic-api-container-puppet.yaml | 6 + deployment/logging/rsyslog-container-puppet.yaml | 10 +- deployment/manila/manila-api-container-puppet.yaml | 6 + deployment/metrics/collectd-container-puppet.yaml | 1 + deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 10 +- deployment/nova/nova-api-container-puppet.yaml | 8 +- deployment/nova/nova-compute-container-puppet.yaml | 28 +--- deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova/nova-metadata-container-puppet.yaml | 6 + .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 109 ++++++++------- deployment/octavia/octavia-base.yaml | 17 +++ .../octavia-health-manager-container-puppet.yaml | 3 +- .../octavia-housekeeping-container-puppet.yaml | 3 +- .../octavia/octavia-worker-container-puppet.yaml | 3 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 56 ++++++++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 2 +- .../placement/placement-api-container-puppet.yaml | 6 + deployment/podman/podman-baremetal-ansible.yaml | 9 ++ .../swift/swift-storage-container-puppet.yaml | 42 +++--- .../tripleo-packages-baremetal-puppet.yaml | 16 ++- deployment/undercloud/undercloud-upgrade.yaml | 2 + deployment/zaqar/zaqar-container-puppet.yaml | 6 + environments/cinder-dellemc-xtremio-config.yaml | 1 + .../cinder-dellemc-xtremio-iscsi-config.yaml | 1 + environments/external-network-vip.yaml | 5 + environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/rhsm.yaml | 35 +++-- environments/undercloud.yaml | 1 + network/service_net_map.j2.yaml | 7 +- overcloud.j2.yaml | 13 +- puppet/role.role.j2.yaml | 2 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 ++ ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + ...a_libvirt_default_ca_cert-d1a7acaa5cbc9293.yaml | 13 ++ .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + .../xtremio-add-ports-option-8991f7c8acc1aadb.yaml | 5 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + 75 files changed, 639 insertions(+), 273 deletions(-)

1 0

python-tripleoclient 14.2.2 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are excited to announce the release of: python-tripleoclient 14.2.2: TripleO client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 14.2.1..14.2.2 ---------------------------------------------- 66e61a34 Add --db-only option in undercloud_backup. 79637b03 Use explicit order for ironic enabled interfaces dc70f1e9 BnR Typo missing some spaces between words on the command help Diffstat (except docs and test files) ------------------------------------- tripleoclient/v1/overcloud_backup.py | 6 +- tripleoclient/v1/undercloud_backup.py | 80 ++++++++++++++--------- tripleoclient/v1/undercloud_config.py | 61 +++++++++--------- 5 files changed, 184 insertions(+), 104 deletions(-)

1 0

tripleo-common 13.2.2 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We exuberantly announce the release of: tripleo-common 13.2.2: A common library for TripleO workflows. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 13.2.1..13.2.2 ---------------------------------------- 58f20a15 Add missing IPv6 support for healthcheck_port 61fb1c24 directly use files instread of tcib_gather_files e7e69815 Rename hieradata_files result var f7dabb46 Move rabbitmq healthcheck to something more modern 1f15a070 Fix config parsing in memcached healthcheck eaf32cc3 Add interface-names to overcloud-hardened-images-uefi-rhel8 14b7d3e7 Fix site-packages in horizon's extend_start.sh Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 ++- container-images/tcib/base/base.yaml | 13 +++++++------ container-images/tcib/base/mariadb/mariadb.yaml | 5 ++--- .../tcib/base/os/barbican-base/barbican-base.yaml | 3 +-- .../os/cinder-base/cinder-volume/cinder-volume.yaml | 5 ++--- .../tcib/base/os/glance-api/glance-api.yaml | 3 +-- container-images/tcib/base/os/horizon/horizon.yaml | 3 +-- container-images/tcib/base/os/iscsid/iscsid.yaml | 3 +-- container-images/tcib/base/os/keystone/keystone.yaml | 3 +-- .../tcib/base/os/neutron-base/neutron-base.yaml | 3 +-- .../tcib/base/os/swift-base/swift-base.yaml | 5 ++--- .../ovn-base/ovn-nb-db-server/ovn-nb-db-server.yaml | 3 +-- .../ovn-base/ovn-sb-db-server/ovn-sb-db-server.yaml | 3 +-- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 3 +-- .../tcib/base/tripleoclient/tripleoclient.yaml | 5 ++--- healthcheck/common.sh | 2 +- healthcheck/memcached | 18 ++++++++++++++++-- healthcheck/rabbitmq | 2 +- image-yaml/overcloud-hardened-images-uefi-rhel8.yaml | 2 ++ tripleo_common/templates/deployments.yaml | 4 ++-- 20 files changed, 48 insertions(+), 43 deletions(-)

1 0

puppet-tripleo 13.6.3 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We contentedly announce the release of: puppet-tripleo 13.6.3: Puppet module for OpenStack TripleO This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 13.6.2..13.6.3 ---------------------------------------- 24aa12a0 Bump metadata for victoria repos release 8b631042 Revert "Aodh deprecation" 29b4ccbd Remove side-car containers in Create status a29d7cb1 Cinder: Dell EMC PowerMax: Fix typo in hash key 42e37e24 Create SSL certificates from sslProfiles 5b1025ee Add pcmk_host_list stonith-fence_compute-fence-nova d1b1f7c6 Add support for ovn clustered databases 94936054 Add option to set rsyslog reopenOnTruncate parameter for all services Diffstat (except docs and test files) ------------------------------------- lib/puppet/functions/qdr_ssl_certificate.rb | 39 ++++++++++++++++++++++ manifests/profile/base/aodh/api.pp | 1 - manifests/profile/base/aodh/evaluator.pp | 1 - manifests/profile/base/aodh/listener.pp | 1 - manifests/profile/base/aodh/notifier.pp | 1 - .../profile/base/cinder/volume/dellemc_powermax.pp | 2 +- manifests/profile/base/logging/rsyslog.pp | 11 +++++- .../profile/base/logging/rsyslog/file_input.pp | 21 ++++++++++-- manifests/profile/base/metrics/qdr.pp | 26 ++++++++++++++- manifests/profile/base/neutron/agents/ovn.pp | 21 ++++++++++-- manifests/profile/base/neutron/ovn_metadata.pp | 23 +++++++++++-- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 26 +++++++++++++-- manifests/profile/base/pacemaker/instance_ha.pp | 5 ++- metadata.json | 2 +- .../tripleo_profile_base_metrics_qdr_spec.rb | 33 ++++++++++++++++++ templates/neutron/dibbler-client.epp | 3 +- templates/neutron/haproxy.epp | 3 +- templates/neutron/keepalived.epp | 3 +- templates/neutron/radvd.epp | 3 +- 19 files changed, 203 insertions(+), 22 deletions(-)

1 0

tripleo-validations 13.4.0 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are happy to announce the release of: tripleo-validations 13.4.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.0 ^^^^^^ New Features * RHEL-8.3 kernel disabled the Intel “TSX” (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process. This also impacts upstream CentOS systems. Changes in tripleo-validations 13.3.0..13.4.0 --------------------------------------------- da80177 Sort jobs in molecule.yaml file when adding new role 04c0871 Add zuul.d/molecule.yaml file back in the yamllint ignore list bd0d497 Migrate back haproxy validation to tripleo-validations 727625f Introducing the oslo_config_validator role 5207e0e Compute TSX validation 3ab836a Add Validation Development Workflow Documentation 379c427 Introduce new Ansible validation_init role. 4496600 Remove workaround for tox-ansible and global molecule config 1c0b5db Quick documentation content reorganization b2322fa Trigger molecule tests when modifying CI scripts 92aaa11 Enabling indentation rule for yamllint. 8bd52a2 Add shared configuration for all molecule test a11a9a3 Remove the post-update groups. 7af4352 Use validation_component for Standalone CI jobs Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 35 + .config/molecule/config.yml | 70 ++ .yamllint | 7 +- CONTRIBUTING.rst | 57 +- README.rst | 10 +- _skeleton_role_/molecule/default/Dockerfile | 37 - _skeleton_role_/molecule/default/molecule.yml | 49 -- ci/playbooks/pre.yml | 19 - ci/playbooks/run.yml | 2 +- .../developer_guide.rst} | 349 +++++--- .../modules/modules-tripleo_haproxy_conf.rst | 14 + .../roles/role-check_for_dangling_images.rst | 8 +- library/tripleo_haproxy_conf.py | 108 +++ playbooks/check-uc-hostname.yaml | 1 - playbooks/compute-tsx.yaml | 31 + playbooks/oslo-config-validator.yaml | 60 ++ playbooks/tripleo-haproxy.yaml | 26 + .../compute-tsx-validation-5d976a3fc5166536.yaml | 13 + role-addition.yml | 137 +--- .../molecule/default/molecule.yml | 49 +- .../molecule/ceph-ansible-installed/Dockerfile | 37 - .../molecule/ceph-ansible-installed/molecule.yml | 53 +- roles/ceph/molecule/default/Dockerfile | 37 - roles/ceph/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 35 - .../molecule/default/molecule.yml | 48 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 37 +- .../check_rhsm_version/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 51 +- .../molecule/rhsm_mismatch/Dockerfile | 37 - .../molecule/rhsm_mismatch/molecule.yml | 53 +- .../check_uc_hostname/molecule/default/Dockerfile | 35 - .../molecule/default/molecule.yml | 50 +- .../molecule/config_OK/Dockerfile | 37 - .../molecule/config_OK/molecule.yml | 53 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 53 +- .../molecule/deprecated_drivers/Dockerfile | 37 - .../molecule/deprecated_drivers/molecule.yml | 53 +- .../molecule/deprecated_params/Dockerfile | 37 - .../molecule/deprecated_params/molecule.yml | 53 +- .../molecule/required_missing/Dockerfile | 37 - .../molecule/required_missing/molecule.yml | 53 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/compute_tsx/README.md | 64 ++ roles/compute_tsx/defaults/main.yml | 26 + roles/compute_tsx/molecule/default/converge.yml | 79 ++ roles/compute_tsx/molecule/default/molecule.yml | 3 + roles/compute_tsx/tasks/main.yml | 82 ++ roles/compute_tsx/vars/main.yml | 23 + roles/container_status/molecule/default/Dockerfile | 37 - .../container_status/molecule/default/molecule.yml | 50 +- roles/controller_token/molecule/default/Dockerfile | 37 - .../controller_token/molecule/default/molecule.yml | 50 +- .../controller_ulimits/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../ctlplane_ip_range/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/dhcp_validations/molecule/default/Dockerfile | 37 - .../dhcp_validations/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/image_serve/molecule/default/Dockerfile | 37 - roles/image_serve/molecule/default/molecule.yml | 36 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/node_disks/molecule/default/Dockerfile | 37 - roles/node_disks/molecule/default/molecule.yml | 50 +- roles/node_health/molecule/default/Dockerfile | 37 - roles/node_health/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/nova_status/molecule/default/Dockerfile | 37 - roles/nova_status/molecule/default/molecule.yml | 50 +- roles/nova_svirt/molecule/default/Dockerfile | 37 - roles/nova_svirt/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/oslo_config_validator/defaults/main.yml | 387 +++++++++ .../molecule/default/molecule.yml | 35 + .../molecule/mocked_failure/molecule.yml | 25 + .../resources/library/podman_container.py | 903 +++++++++++++++++++++ .../resources/library/podman_container_info.py | 71 ++ .../resources/playbooks/converge.yml | 35 + .../resources/playbooks/prepare.yml | 30 + .../tasks/build_validation_config.yml | 166 ++++ .../oslo_config_validator/tasks/container_run.yml | 121 +++ .../tasks/invalidate_config.yml | 76 ++ roles/oslo_config_validator/tasks/main.yml | 72 ++ .../tasks/opt_data_format.yml | 66 ++ .../tasks/report_generation.yml | 90 ++ .../tasks/validate_config.yml | 68 ++ .../tasks/validation_command.yml | 97 +++ roles/oslo_config_validator/vars/main.yml | 44 + .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 38 +- .../molecule/deprecated_services/Dockerfile | 37 - .../molecule/deprecated_services/molecule.yml | 38 +- .../molecule/down_services/Dockerfile | 37 - .../molecule/down_services/molecule.yml | 38 +- roles/ovs_dpdk_pmd/molecule/default/Dockerfile | 37 - roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 50 +- roles/pacemaker_status/molecule/default/Dockerfile | 37 - .../pacemaker_status/molecule/default/molecule.yml | 50 +- roles/package_version/molecule/default/Dockerfile | 37 - .../package_version/molecule/default/molecule.yml | 50 +- roles/rabbitmq_limits/molecule/default/Dockerfile | 37 - .../rabbitmq_limits/molecule/default/molecule.yml | 50 +- roles/repos/molecule/default/Dockerfile | 37 - roles/repos/molecule/default/molecule.yml | 50 +- roles/stack_health/molecule/default/Dockerfile | 37 - roles/stack_health/molecule/default/molecule.yml | 50 +- roles/stonith_exists/molecule/default/Dockerfile | 37 - roles/stonith_exists/molecule/default/molecule.yml | 50 +- roles/switch_vlans/molecule/default/Dockerfile | 37 - roles/switch_vlans/molecule/default/molecule.yml | 50 +- roles/system_encoding/molecule/default/Dockerfile | 37 - .../system_encoding/molecule/default/molecule.yml | 50 +- roles/tls_everywhere/molecule/default/Dockerfile | 37 - roles/tls_everywhere/molecule/default/molecule.yml | 35 +- roles/tripleo_haproxy/defaults/main.yml | 21 + .../tripleo_haproxy/molecule/default/converge.yml | 71 ++ .../tripleo_haproxy/molecule/default/molecule.yml | 3 + roles/tripleo_haproxy/tasks/main.yml | 56 ++ roles/undercloud_debug/molecule/default/Dockerfile | 37 - .../undercloud_debug/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../non-persistent-token-format/Dockerfile | 37 - .../non-persistent-token-format/molecule.yml | 50 +- roles/validation_init/README.md | 47 ++ roles/validation_init/defaults/main.yml | 28 + .../files/_skeleton_role_}/defaults/main.yml.j2 | 2 +- .../files/_skeleton_role_}/handlers/main.yml | 2 +- .../molecule/default/converge.yml.j2 | 2 +- .../_skeleton_role_/molecule/default/molecule.yml | 3 + .../_skeleton_role_/molecule/default/prepare.yml | 25 + .../_skeleton_role_/molecule/default/verify.yml | 24 + .../files/_skeleton_role_}/tasks/main.yml.j2 | 2 +- .../files/_skeleton_role_}/vars/main.yml.j2 | 2 +- .../validation_init/molecule/default/converge.yml | 62 ++ .../validation_init/molecule/default/molecule.yml | 3 + roles/validation_init/molecule/default/prepare.yml | 96 +++ roles/validation_init/molecule/default/verify.yml | 137 ++++ roles/validation_init/tasks/main.yml | 185 +++++ roles/validation_init/templates/README.md.j2 | 39 + tox.ini | 6 +- zuul.d/base.yaml | 2 +- zuul.d/molecule.yaml | 502 ++++++++---- 185 files changed, 4832 insertions(+), 4898 deletions(-)

1 0

os-net-config 13.2.1 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are pumped to announce the release of: os-net-config 13.2.1: OpenStack network configuration This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.2.0..13.2.1 --------------------------------------- 2fcf8b0 Avoid creating multiple entries of udev rules Diffstat (except docs and test files) ------------------------------------- os_net_config/sriov_config.py | 27 ++++-- 2 files changed, 158 insertions(+), 8 deletions(-)

1 0

ironic-inspector 10.7.0 (xena)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are happy to announce the release of: ironic-inspector 10.7.0: Hardware introspection for OpenStack Bare Metal This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.7.0 ^^^^^^ Bug Fixes * Fixes an issue where a failed inspection due to a transient failure can prevent retry attempts to inspect to be perceived as a failure. If a prior inspection fails and is in "error" state, when a new introspection is requested, the state is now appropriately set to "starting". Changes in ironic-inspector 10.6.0..10.7.0 ------------------------------------------ 611a543 Update requirements 6a4899b Fix & suppress oslo policy warnings 072ebdc Fix broken links in CONTRIBUTING.rst 2c2dfe9 Add rbac scope enforcement handling to devstack plugin d972dc9 Ignored error state cache for new requests 948325c Fix SqlAlchemy >1.3.19 support 1ba0849 [doc] Improvements in processing_hooks docs 11e5798 Add versions to Wallaby release notes b912248 Changed minversion in tox to 3.18.0 1600dbc setup.cfg: Replace dashes with underscores de839a5 Trivial: better guard against malformed data in extra_hardware 08b6c89 Trivial: remove an ancient option from the CI faafa91 Add Python3 xena unit tests 402f629 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 28 ++++----- devstack/plugin.sh | 33 ++++++++-- ironic_inspector/node_cache.py | 8 ++- ironic_inspector/plugins/extra_hardware.py | 4 +- ironic_inspector/policy.py | 73 ++++++++++++---------- ironic_inspector/test/unit/policy_fixture.py | 1 + ironic_inspector/test/unit/test_node_cache.py | 17 +++-- .../fix-cache-error-on-start-27f492ba863d5f92.yaml | 7 +++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ requirements.txt | 14 ++--- setup.cfg | 8 +-- tox.ini | 6 +- zuul.d/ironic-inspector-jobs.yaml | 1 - zuul.d/project.yaml | 2 +- 17 files changed, 146 insertions(+), 86 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 47989fd..e2b8adc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ netaddr>=0.7.18 # BSD -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.1.1 # Apache-2.0 @@ -22 +22 @@ oslo.config>=6.8.0 # Apache-2.0 -oslo.context>=2.19.2 # Apache-2.0 +oslo.context>=2.22.0 # Apache-2.0 @@ -24,2 +24,2 @@ oslo.db>=6.0.0 # Apache-2.0 -oslo.i18n>=3.15.3 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 +oslo.i18n>=3.20.0 # Apache-2.0 +oslo.log>=4.3.0 # Apache-2.0 @@ -28 +28 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=3.6.0 # Apache-2.0 +oslo.policy>=3.7.0 # Apache-2.0 @@ -30,2 +30,2 @@ oslo.rootwrap>=5.8.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.serialization>=2.25.0 # Apache-2.0 +oslo.service>=1.31.0 # Apache-2.0

1 0

ironic-python-agent 8.1.0 (xena)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are excited to announce the release of: ironic-python-agent 8.1.0: Ironic Python Agent Ramdisk This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 8.1.0 ^^^^^ New Features ************ * Adds a burn-in cleaning step 'burnin_disk' to stress test disks for a configurable number of iterations or a configurable amount of time with fio. To use this step, stress-ng needs to be installed on the RAM disk. * Adds a burn-in cleaning step 'burnin_network' to stress test the network interface for a configurable amount of time with fio. To use this step, fio needs to be installed on the RAM disk. * Heartbeats to the conductor are grouped when they are scheduled or requested within a time interval of five seconds to avoid sending them in quick succession. * Adds the capability into the agent to read and act upon bootloader CSV files which serve as authoritative indicators of what bootloader to load instead of leaning towards utilizing the default. Known Issues ************ * If multiple bootloader CSV files are present on the EFI filesystem, the first CSV file discovered will be utilized. The Ironic team considers multiple files to be a defect in the image being deployed. This may be changed in the future. Bug Fixes ********* * Fixes an issue with bootloader installation on a software RAID by checking if the ESP is already mounted. * Fixes an issue where a quick succession of heartbeats exposes a race condition in the conductor's RPC handling. * Fixes an issue where the NTP time sync at the IPA startup via chronyd is not immediate (which can break time sensitive components such as the generation of a TLS certificate). * Recent releases of redhat grub2 will always fail when installing to EFI paths, to encourage a transition to the signed shim bootloader. Partition image deploys avoid calling grub2-install with the preserve-efi-assets functions. Deploying whole disk images doesn't require grub2-install. This leaves whole disk images installed onto softraid devices, which still calls grub2-install. Running grub2-install is still attempted in this one remaining case, but any failures are now ignored. * Fixes nodes failing after deployment completes due to issues in the Grub2 EFI loader entry addition where a "BOOT.CSV" file provides the authoritative pointer to the bootloader to be used for booting the OS. The base issue with Grub2 is that it would update the UEFI bootloader NVRAM entries with whatever is present in a vendor specific "BOOT.CSV" or "BOOTX64.CSV" file. In some cases, a baremetal machine *can* crash when this occurs. More information can be found at story 2008962 (https://storyboard.openstack.org/#!/story/2008962) Changes in ironic-python-agent 8.0.0..8.1.0 ------------------------------------------- 5531d5c Force immediate NTP time sync with chronyd at IPA startup cacdd9b Burn-in: Add network step e5d5524 Catch ismount not being handled 2756820 Only mount the ESP if not yet mounted b605943 Coalesce heartbeats 2fcf35e Reduce logging verbosity when collecting logs 5473700 Remove lower-constraints job 2fab70c Utilize CSV file for EFI loader selection a057be7 Ignore efi grub2-install failure e27cdb3 Changed minversion in tox to 3.18.0 33d889c Refactor: use convert_image from ironic_lib 20c5894 Burn-in: Add disk step Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/agent.py | 21 +- ironic_python_agent/burnin.py | 111 ++++++++++ ironic_python_agent/extensions/image.py | 152 ++++++++++---- ironic_python_agent/extensions/standby.py | 17 +- ironic_python_agent/hardware.py | 30 +++ ironic_python_agent/utils.py | 23 +- .../notes/add_burnin_disk-12adb5735a41af47.yaml | 6 + .../notes/add_burnin_network-4856153d21c25f4a.yaml | 6 + .../check-if-ESP-is-mounted-f9e0eff3609c2668.yaml | 7 + .../coalesce_heartbeats-fb8899a5f9fe4709.yaml | 10 + .../fix_chronyd_time_sync-626a14b66ca37677.yaml | 6 + .../ignore-grub-efi-fail-dcf7eb07f61f4388.yaml | 10 + ...t-bootloader-csv-file-use-c815b520c600cd98.yaml | 22 ++ requirements.txt | 2 +- tox.ini | 15 +- 22 files changed, 773 insertions(+), 152 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a08384d..69d886c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ tenacity>=6.2.0 # Apache-2.0 -ironic-lib>=4.5.0 # Apache-2.0 +ironic-lib>=4.7.1 # Apache-2.0

1 0

python-cinderclient 8.0.0 (xena)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We contentedly announce the release of: python-cinderclient 8.0.0: OpenStack Block Storage API Client Library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-cinderclient Download the package from: https://pypi.org/project/python-cinderclient Please report issues through: https://bugs.launchpad.net/python-cinderclient/+bugs For more details, please see below. 8.0.0 ^^^^^ Upgrade Notes ************* * This release drops support of the Block Storage API v2. The last version of the python-cinderclient supporting that API is the 7.x series. Bug Fixes ********* * When attaching to a host, we don't need a server id so it shouldn't be mandatory to be supplied with attachment-create operation. The server_id parameter is made optional so we can create attachments without passing it. The backward compatibility is maintained so we can pass it like how we currently do if required. * Bug #1915996 (https://bugs.launchpad.net/python- cinderclient/+bug/1915996): Passing client certificates for mTLS connections was not supported and now has been fixed. Changes in python-cinderclient 7.4.0..8.0.0 ------------------------------------------- cb52352 Remove v2 classes d714249 Make instance_uuid optional in attachment create 3502a55 Remove v2 support from the shell b891c99 Remove skip_missing_interpreters f54b873 Run functional job on Ubuntu Focal 8d8d457 setup.cfg: Replace dashes with underscores 202c1a3 Add Python3 xena unit tests a0e3621 Update master for stable/wallaby 9c2e8df Support passing client certificates for server version requests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 +- bindep.txt | 4 +- cinderclient/api_versions.py | 48 +- cinderclient/client.py | 65 +- cinderclient/shell.py | 41 +- .../{v2 => v3}/contrib/test_list_extensions.py | 4 +- .../unit/{v2 => v3}/test_availability_zone.py | 6 +- .../unit/{v2 => v3}/test_consistencygroups.py | 5 +- .../test_services.py => v3/test_services_base.py} | 8 +- .../test_volume_backups_30.py} | 21 +- .../{v2 => v3}/test_volume_encryption_types.py | 4 +- .../test_volumes.py => v3/test_volumes_base.py} | 35 +- cinderclient/v2/__init__.py | 17 - cinderclient/v2/availability_zones.py | 41 - cinderclient/v2/capabilities.py | 38 - cinderclient/v2/cgsnapshots.py | 112 -- cinderclient/v2/client.py | 140 -- cinderclient/v2/consistencygroups.py | 149 --- cinderclient/v2/contrib/__init__.py | 0 cinderclient/v2/contrib/list_extensions.py | 44 - cinderclient/v2/limits.py | 99 -- cinderclient/v2/pools.py | 60 - cinderclient/v2/qos_specs.py | 155 --- cinderclient/v2/quota_classes.py | 47 - cinderclient/v2/quotas.py | 56 - cinderclient/v2/services.py | 80 -- cinderclient/v2/volume_backups.py | 137 -- cinderclient/v2/volume_backups_restore.py | 44 - cinderclient/v2/volume_encryption_types.py | 104 -- cinderclient/v2/volume_snapshots.py | 39 - cinderclient/v2/volume_transfers.py | 88 -- cinderclient/v2/volume_type_access.py | 53 - cinderclient/v2/volume_types.py | 153 --- cinderclient/v3/attachments.py | 5 +- cinderclient/v3/availability_zones.py | 25 +- cinderclient/v3/capabilities.py | 22 +- cinderclient/v3/cgsnapshots.py | 96 +- cinderclient/v3/client.py | 7 +- cinderclient/v3/consistencygroups.py | 133 +- cinderclient/v3/contrib/list_extensions.py | 30 +- cinderclient/v3/limits.py | 84 +- cinderclient/v3/pools.py | 44 +- cinderclient/v3/qos_specs.py | 136 +- cinderclient/v3/quota_classes.py | 33 +- cinderclient/v3/quotas.py | 31 +- cinderclient/v3/services.py | 63 +- cinderclient/v3/shell.py | 6 +- cinderclient/{v2/shell.py => v3/shell_base.py} | 2 +- cinderclient/v3/volume_backups.py | 91 +- cinderclient/v3/volume_backups_restore.py | 25 +- cinderclient/v3/volume_encryption_types.py | 86 +- cinderclient/v3/volume_snapshots.py | 12 +- cinderclient/v3/volume_transfers.py | 17 +- cinderclient/v3/volume_type_access.py | 38 +- cinderclient/v3/volumes.py | 20 +- cinderclient/{v2/volumes.py => v3/volumes_base.py} | 88 +- ...create-optional-server-id-9299d9da2b62b263.yaml | 10 + .../notes/bug-1915996-3aaa5e2548eb7c93.yaml | 7 + .../notes/drop-v2-support-e578ca21c7c6b532.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + setup.cfg | 8 +- tox.ini | 3 +- 94 files changed, 1447 insertions(+), 3507 deletions(-)

1 0

sushy 3.10.0 (xena)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We exuberantly announce the release of: sushy 3.10.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the xena release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.10.0 ^^^^^^ New Features ************ * Adds "Drive.volumes" property for list of volumes that drive is part of. Bug Fixes ********* * Removes the requirement from *Context* to be present when requesting a subscription, some BMCs do not report *Context* when the subscription is created with empty string and would cause *MissingAttributeError*. * Fixes "Processor.sub_processors" for "'Processor' object has no attribute 'conn'" error. Changes in sushy 3.9.1..3.10.0 ------------------------------ 0a8d5e1 Fix Context for EventDestination 0eaacad Add Drive.volumes af951ac Fix Processor.sub_processors bf50d73 Protect Connector against empty auth object 99b4340 Update min version of tox to use allowlist Diffstat (except docs and test files) ------------------------------------- .../notes/add-drive-volumes-971d80644c3bd1e0.yaml | 4 ++++ ..._context_eventdestination-9a96c34dd7edbeca.yaml | 6 ++++++ .../notes/fix-subprocessors-3b619434dba4636d.yaml | 5 +++++ sushy/connector.py | 3 ++- sushy/resources/eventservice/eventdestination.py | 2 +- sushy/resources/system/processor.py | 14 ++++++------ sushy/resources/system/storage/drive.py | 19 ++++++++++++++++ .../unit/json_samples/subprocessor_collection.json | 9 ++++++++ .../resources/eventservice/test_evendestination.py | 25 ++++++++++++++++++++++ .../unit/resources/system/storage/test_drive.py | 23 ++++++++++++++++++++ tox.ini | 4 ++-- 16 files changed, 165 insertions(+), 11 deletions(-)

1 0

tripleo-image-elements 13.1.2 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are satisfied to announce the release of: tripleo-image-elements 13.1.2: Disk image builder elements for deploying OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 13.1.1..13.1.2 ------------------------------------------------ fb4c3621 Clean up ifcfg-eth0 Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

1 0

tripleo-puppet-elements 14.1.2 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are gleeful to announce the release of: tripleo-puppet-elements 14.1.2: Puppet building rules for OpenStack images. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 14.1.1..14.1.2 ------------------------------------------------- ffb4b4c Remove leftover of pankoclient 665911b Remove pankoclient Diffstat (except docs and test files) ------------------------------------- .../install.d/package-installs-overcloud-openstack-clients | 1 - elements/overcloud-openstack-clients/pkg-map | 3 --- 2 files changed, 4 deletions(-)

1 0

tripleo-heat-templates 14.2.0 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are chuffed to announce the release of: tripleo-heat-templates 14.2.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.2.0 ^^^^^^ Prelude ******* Enablement of data collection and transportation to an STF instance is now handled via existing templates. New Features ************ * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * The "glance_api_cron" container has been introduced, which executes db purge job for Glance service. Use GlanceCronDbPurge* parameters to override cron parameters. * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK * New parameter *RbdDiskCachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * A new service, OS::TripleO::Services::UndercloudUpgradeEphemeralHeat is added to the Undercloud role. The service is mapped to OS::Heat::None by default, but when environments/lifecycle /undercloud-upgrade- prepare.yaml is included, the service will be enabled and will migrate any already deployed stacks in the undercloud's Heat instance to be able to be used with the ephemeral Heat deployment option from tripleoclient. Upgrade Notes ************* * When upgrading a deployment with the use of enable-stf.yaml, add the following files to your overcloud deployment command in order to maintain the existing services defined in enable-stf.yaml. * environments/metrics/collectd-write-qdr.yaml * environments/metrics/ceilometer-write-qdr.yaml * environments/metrics/qdr-edge-only.yaml Bug Fixes ********* * On the compute nodes, right now ssl certificates got created for libvirt, qemu-default, qemu-vnc and qemu-nbd. This is not required because the all services use the same NovaLibvirtNetwork network and therefore multiple certificates for the same hostname get created. Also from qemu point of view, if default_tls_x509_cert_dir and default_tls_x509_verify parameters get set for all certificates, there is no need to specify any of the other **_tls** config options. From Secure live migration with QEMU-native TLS (https://docs.openstack.org/nova/latest/admin/secure-live-migration- with-qemu-native-tls.html) The intention (of libvirt) is that you can just use the default_tls_x509_* config attributes so that you don’t need to set any other **_tls** parameters, unless you need different certificates for some services. The rationale for that is that some services (e.g. migration / NBD) are only exposed to internal infrastructure; while some sevices (VNC, Spice) might be exposed publically, so might need different certificates. For OpenStack this does not matter, though, we will stick with the defaults. Therefore with this change InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile get removed (which defaulted to /etc/ipa/ca.crt anyways) and just use InternalTLSCAFile. Also all cerfificates get created when EnableInternalTLS is true to and mount all SSL certificates from the host. This is to prevent certificate information is not available in a qemu's process container environment if features get switched later, which has shown to be problematic. Other Notes *********** * Using enable-stf.yaml now defines the expected configuration in OpenStack for use with Service Telemetry Framework. Removal of the defined resource_registry now requires passing additional environment files to enable the preferred data collectors and transport architecture, providing better flexibility to support additional architectures in the future. * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 14.1.2..14.2.0 ------------------------------------------------ be2c8e62c Make default of NeutronDefaultAvailabilityZones empty array f972c3710 FFU: change transfer parameters for database resync 7335bc1a5 Wire up the tripleo-upgrades-wallaby-pipeline 81373cb67 Moves undercloud upgrade introspection data migration to step 1 59a235340 Simplify libvirt/qemu ssl certificates 8c2862d23 Neutron: Use the pids subsystem to look up container id 2d407a8f5 Adjust enable-stf.yaml for latest recommendations d5b8ced54 Support cinder image conversion on an NFS share ddcb24798 Get roles data from stack output on UC upgrade 12156c09c Add THT Jinja2 data sources as stack output ba7d5b627 Enable DPDK OVS PMD Auto Load Balance 2f0689d8d Remove NovaVncProxyNetwork from ServiceNetMap 37811641f Move designate from experimental 497582342 Support additional IP so bind and unbound can collocate 7d602ed90 Extend UC ephemeral heat to export network 94d994946 Pass scripts list for download for sensubility 476e444b8 Simplify nova service templates 443498e69 Support for OVS DPDK pmd auto balance parameters. fdfd4e992 Do not run Swift rsync container in single replica mode 18b544723 Add Ephemeral Heat service a15452998 Add network-v2 default files + vip data examples f1d4c29d5 Move scenario004 to cephadm d098242f7 Always run network config for undercloud e38ea651e Fix NetworkDeploymentActionValue format ef18f2515 Add support for keystone_authtoken/memcache_use_advanced_pool 3737ec8fd Set tripleo_cephadm rbd mirror vars e987a2340 Limit collectds memory usage 0a690e519 Introduce nova virtlogd wrapper e2ff0b446 Set OS_CLOUD instead in stackrc 2d095f314 Revert "Always run network config for undercloud" a15698b7f Revert "Always run network config for undercloud" 5e941e4ef Remove heat::heat_keystone_clients_url definition 17de50a8d Add post_upgrade_task and remove puppet-ceph pkg c2966ca0f Always run network config for undercloud cb8f13027 Ignore puppet_config is an empty dict ad010c084 Switch barbican actions to use kolla_config 4758c3e7c Fix typo that breaks Octavia db sync step fd0a1aca1 Use kolla_config for other actions 733f3ecbe Add glance db purge job 61575a7d7 Make UpgradeLeappDevelSkip per-role e91fabbcd Use community.general ansible collection instead of modules 8100f86e8 Refactor OVN bridge MAC addresses 713533207 Bump ovs and ovn versions to 2.15 for FFWD. 1ff7e9be9 Fix broken restart of ovndb_server during minor update 76b5cf4d6 Set ganesha idmap.conf file path and overrides 00884af21 Add alertmanager port parameter d03517b61 HA minor update: fix bad pcs invocation 63c3afa8c Cleanup optional flag for conf.modules.d 7dea661f6 Fix container security_opts type 20840a7a5 Update rhsm repo examples for RHEL8 deployments 71223f9ee Add OS::TripleO::UndercloudUpgradeEphemeralHeat 7e3e0c0f2 Fix typo in ceilometer-write-qdr environment file 808f66e7a Add param for RBD disk cache modes a76bd1a69 Add option for enabling rsyslog reopenOnTruncate 0c97152f2 Update TOX_CONSTRAINTS_FILE for stable/wallaby Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario003-standalone.yaml | 13 +- ci/environments/scenario004-standalone.yaml | 58 +-- common/common-container-config-scripts.yaml | 2 +- common/deploy-steps-playbooks-common.yaml | 7 +- common/deploy-steps-tasks-step-0.j2.yaml | 2 +- .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-server.yaml | 2 + deployment/aodh/aodh-api-container-puppet.yaml | 28 +- .../barbican/barbican-api-container-puppet.yaml | 209 +++++--- .../ceilometer-agent-central-container-puppet.yaml | 14 +- deployment/ceph-ansible/ceph-base.yaml | 5 +- deployment/ceph-ansible/ceph-client.yaml | 5 +- deployment/ceph-ansible/ceph-external.yaml | 5 +- deployment/ceph-ansible/ceph-grafana.yaml | 5 +- deployment/ceph-ansible/ceph-mds.yaml | 5 +- deployment/ceph-ansible/ceph-mgr.yaml | 5 +- deployment/ceph-ansible/ceph-mon.yaml | 5 +- deployment/ceph-ansible/ceph-nfs.yaml | 5 +- deployment/ceph-ansible/ceph-osd.yaml | 5 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 5 +- deployment/ceph-ansible/ceph-rgw.yaml | 5 +- deployment/cephadm/ceph-base.yaml | 12 +- deployment/cephadm/ceph-client.yaml | 5 +- deployment/cephadm/ceph-external.yaml | 5 +- deployment/cephadm/ceph-grafana.yaml | 6 +- deployment/cephadm/ceph-mds.yaml | 5 +- deployment/cephadm/ceph-mgr.yaml | 5 +- deployment/cephadm/ceph-mon.yaml | 5 +- deployment/cephadm/ceph-nfs.yaml | 7 +- deployment/cephadm/ceph-osd.yaml | 5 +- deployment/cephadm/ceph-rbdmirror.yaml | 30 +- deployment/cephadm/ceph-rgw.yaml | 5 +- deployment/cinder/cinder-api-container-puppet.yaml | 39 +- .../cinder/cinder-common-container-puppet.yaml | 64 ++- .../cinder/cinder-volume-container-puppet.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 2 +- deployment/database/mysql-pacemaker-puppet.yaml | 16 + deployment/database/redis-container-puppet.yaml | 2 +- .../mistral/mistral-api-container-puppet.yaml | 30 +- deployment/deprecated/mistral/mistral-base.yaml | 6 + .../novajoin/novajoin-container-puppet.yaml | 6 + .../deprecated/zaqar/zaqar-container-puppet.yaml | 20 +- .../designate/designate-api-container-puppet.yaml | 8 +- .../designate/designate-base.yaml | 0 .../designate/designate-bind-container.yaml | 2 +- .../designate-central-container-puppet.yaml | 30 +- .../designate/designate-mdns-container-puppet.yaml | 4 +- .../designate-producer-container-puppet.yaml | 2 +- .../designate/designate-sink-container-puppet.yaml | 2 +- .../designate-worker-container-puppet.yaml | 2 +- deployment/etcd/etcd-container-puppet.yaml | 3 +- deployment/glance/glance-api-container-puppet.yaml | 99 +++- .../gnocchi/gnocchi-api-container-puppet.yaml | 9 +- deployment/haproxy/haproxy-container-puppet.yaml | 3 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 3 - deployment/heat/heat-api-container-puppet.yaml | 3 - deployment/heat/heat-base-puppet.yaml | 7 +- deployment/heat/heat-engine-container-puppet.yaml | 19 +- .../heat/heat-ephemeral-container-ansible.yaml | 74 +++ deployment/horizon/horizon-container-puppet.yaml | 3 - .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 24 +- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- .../ironic/ironic-inspector-container-puppet.yaml | 16 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 6 +- deployment/iscsid/iscsid-container-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 3 - deployment/logging/rsyslog-baremetal-ansible.yaml | 5 +- deployment/logging/rsyslog-container-puppet.yaml | 13 +- deployment/manila/manila-api-container-puppet.yaml | 25 +- .../manila/manila-share-container-puppet.yaml | 2 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 2 +- deployment/metrics/collectd-container-puppet.yaml | 10 + deployment/neutron/kill-script | 2 +- .../neutron-agents-ib-config-container-puppet.yaml | 3 +- .../neutron/neutron-api-container-puppet.yaml | 35 +- .../neutron/neutron-dhcp-container-puppet.yaml | 3 +- .../neutron-mlnx-agent-container-puppet.yaml | 3 +- .../neutron-ovs-agent-container-puppet.yaml | 6 +- deployment/nova/nova-api-container-puppet.yaml | 148 +++--- deployment/nova/nova-apidb-client-puppet.yaml | 21 +- deployment/nova/nova-az-config.yaml | 23 +- deployment/nova/nova-base-puppet.yaml | 25 +- .../nova/nova-compute-common-container-puppet.yaml | 1 - deployment/nova/nova-compute-container-puppet.yaml | 224 ++++---- .../nova/nova-conductor-container-puppet.yaml | 49 +- deployment/nova/nova-db-client-puppet.yaml | 23 +- deployment/nova/nova-ironic-container-puppet.yaml | 46 +- deployment/nova/nova-libvirt-container-puppet.yaml | 563 +++++++++------------ deployment/nova/nova-manager-container-puppet.yaml | 4 +- .../nova/nova-metadata-container-puppet.yaml | 52 +- .../nova-migration-target-container-puppet.yaml | 4 +- .../nova/nova-scheduler-container-puppet.yaml | 17 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 71 +-- .../octavia/octavia-api-container-puppet.yaml | 26 +- .../octavia/octavia-deployment-config.j2.yaml | 5 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 56 ++ ...vswitch-dpdk-netcontrold-container-ansible.yaml | 3 +- .../ovn/ovn-controller-container-puppet.yaml | 55 ++ deployment/ovn/ovn-dbs-container-puppet.yaml | 6 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 2 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 12 +- .../placement/placement-api-container-puppet.yaml | 35 +- deployment/podman/podman-baremetal-ansible.yaml | 2 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 4 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 4 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 2 +- deployment/swift/swift-proxy-container-puppet.yaml | 3 - .../swift/swift-ringbuilder-container-puppet.yaml | 2 +- .../swift/swift-storage-container-puppet.yaml | 44 +- .../tripleo-packages-baremetal-puppet.yaml | 16 +- deployment/unbound/unbound-container-ansible.yaml | 75 ++- .../undercloud-upgrade-ephemeral-heat.yaml | 69 +++ deployment/undercloud/undercloud-upgrade.yaml | 29 +- environments/enable-designate.yaml | 15 +- environments/enable-stf.yaml | 99 ++-- .../lifecycle/undercloud-upgrade-prepare.yaml | 4 +- environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/rhsm.yaml | 35 +- environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/undercloud.yaml | 7 +- environments/undercloud/undercloud-minion.yaml | 2 - extraconfig/post_deploy/undercloud_post.sh | 23 +- extraconfig/post_deploy/undercloud_post.yaml | 16 +- .../vip-data-default-network-isolation.yaml | 39 ++ network-data-samples/vip-data-fixed-ip.yaml | 35 ++ network-data-samples/vip-data-routed-networks.yaml | 40 ++ network/service_net_map.j2.yaml | 7 +- network_data_default.yaml | 7 + overcloud-resource-registry-puppet.j2.yaml | 6 +- overcloud.j2.yaml | 20 +- puppet/role.role.j2.yaml | 33 +- ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 + ...-stf-no-resource-registry-db6ee6319964ab7f.yaml | 20 + .../notes/glance-db-purge-bb185353a45880c7.yaml | 6 + ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + ...t_ssl_cert_simplification-dbee541be9f55ce5.yaml | 30 ++ .../nova_virtlogd_wrapper-120fcfcfa0787b2b.yaml | 17 + .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + .../rbd-disk-cache-modes-284a73271741ea62.yaml | 5 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 8 + .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + roles/Undercloud.yaml | 2 + roles_data_undercloud.yaml | 2 + sample-env-generator/enable-services.yaml | 12 +- sample-env-generator/standalone.yaml | 7 - sample-env-generator/undercloud-minion.yaml | 4 - scripts/undercloud-upgrade-ephemeral-heat.py | 406 +++++++++++++++ tools/yaml-validate.py | 6 +- tox.ini | 4 +- vip_data_default.yaml | 8 + zuul.d/layout.yaml | 2 +- 158 files changed, 2475 insertions(+), 1329 deletions(-)

1 0

puppet-tripleo 14.2.1 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are stoked to announce the release of: puppet-tripleo 14.2.1: Puppet module for OpenStack TripleO This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 14.2.0..14.2.1 ---------------------------------------- 46281163 Bump metadata.json for release of tripleo wallaby repos b6f46727 Wire up the tripleo-upgrades-wallaby-pipeline 567ea3f0 Revert "Aodh deprecation" cc7dc21b Remove side-car containers in Create status 092bc127 Cinder: Dell EMC PowerMax: Fix typo in hash key Diffstat (except docs and test files) ------------------------------------- manifests/profile/base/aodh/api.pp | 1 - manifests/profile/base/aodh/evaluator.pp | 1 - manifests/profile/base/aodh/listener.pp | 1 - manifests/profile/base/aodh/notifier.pp | 1 - manifests/profile/base/cinder/volume/dellemc_powermax.pp | 2 +- metadata.json | 2 +- templates/neutron/dibbler-client.epp | 3 ++- templates/neutron/haproxy.epp | 3 ++- templates/neutron/keepalived.epp | 3 ++- templates/neutron/radvd.epp | 3 ++- zuul.d/layout.yaml | 2 +- 11 files changed, 11 insertions(+), 11 deletions(-)

1 0

python-tripleoclient 16.3.0 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We joyfully announce the release of: python-tripleoclient 16.3.0: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 16.3.0 ^^^^^^ New Features ************ * An ephemeral Heat process is now used by default for overcloud deployment. On each overcloud management operation (deploy/update/upgrade), a containerized Heat process will be started, the stack will be created new, and then the Heat process will be stopped. The enable_heat option is undercloud.conf is now defaulted to False. Deprecation Notes ***************** * Setting enable_heat=True in undercloud.conf is deprecated. * Using --heat-type=installed is deprecated with the openstack overcloud commands. Changes in python-tripleoclient 16.2.1..16.3.0 ---------------------------------------------- 045ca024 Wire up the tripleo-upgrades-wallaby-pipeline 4e097d54 Add '--templates' arg to node and net provision 1499add1 Unprovision composable networks command 2ac67065 Honor role and networks file constants 18ce8b9a Default Heat images to container image prepare defaults 9ae6487b Use ephemeral Heat by default 38317489 Handle KeyboardInterrupt with overcloud deploy 579b5c5e Add --db-only option in undercloud_backup. 51347c40 Option to disable Node, Net and VIP provisioning cd29d2e5 overcloud deploy - net ports with baremetal deploy b44e1b30 Make 'ansible_playbooks' pre-network config only 6bc6c921 overcloud deploy - provision virtual ips 1765cb3a Use {{role.name}}Services parameters 8f84d3c7 overcloud deploy - provision networks db79c4d2 Use upper constraints with install command 81384692 Don't download configs twice for --setup-only d0aead19 Don't allow --config-download-only with --baremetal-deployment 918293a6 Check for the service queue with ephemeral heat 2ebf9d48 Remove iscsi from IronicEnabledDeployInterfaces ee1ce322 Use podman interactive mode when restoring db ac0edba9 Add dosfstools to bindep 7f959bfd Use explicit order for ironic enabled interfaces c38dd36e Fix backup/restore file name for ephemeral heat c8870f5d Remove references to tripleo-validations legacy directory 72718fec Fix undercloud validate password file Diffstat (except docs and test files) ------------------------------------- bindep.txt | 1 + ...ephemeral-heat-by-default-4ed05e8b82f41c4b.yaml | 10 + setup.cfg | 1 + templates/ephemeral-heat/heat-pod.yaml.j2 | 4 +- tox.ini | 2 +- tripleoclient/config/undercloud.py | 2 +- tripleoclient/constants.py | 60 ++-- tripleoclient/heat_launcher.py | 61 ++-- .../v1/overcloud_deploy/test_overcloud_deploy.py | 312 ++++++++++++++----- .../v2/overcloud_network/test_overcloud_network.py | 42 ++- tripleoclient/utils.py | 119 +++++-- tripleoclient/v1/overcloud_deploy.py | 345 +++++++++++++++------ tripleoclient/v1/tripleo_deploy.py | 33 +- tripleoclient/v1/undercloud_backup.py | 66 ++-- tripleoclient/v1/undercloud_config.py | 61 ++-- tripleoclient/v1/undercloud_preflight.py | 15 +- tripleoclient/v2/overcloud_network.py | 67 +++- tripleoclient/v2/overcloud_node.py | 30 +- tripleoclient/workflows/deployment.py | 21 +- zuul.d/layout.yaml | 2 +- 28 files changed, 1036 insertions(+), 523 deletions(-)

1 0

tripleo-validations 14.2.0 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are overjoyed to announce the release of: tripleo-validations 14.2.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.2.0 ^^^^^^ New Features * RHEL-8.3 kernel disabled the Intel “TSX” (Transactional Synchronization Extensions) feature by default as a preemptive security measure, but it breaks live migration from RHEL-7.9 (or even RHEL-8.1 or RHEL-8.2) to RHEL-8.3. Operators are expected to explicitly define the TSX flag in their KernelArgs for the compute role to prevent live-migration issues during the upgrade process. This also impacts upstream CentOS systems. Changes in tripleo-validations 14.1.1..14.2.0 --------------------------------------------- cc29577 Sort jobs in molecule.yaml file when adding new role f798c56 Add zuul.d/molecule.yaml file back in the yamllint ignore list 253a16d Migrate back haproxy validation to tripleo-validations d2571bc Enabling indentation rule for yamllint. 1d166b0 Use OS_CLOUD environment variable fab6429 Introducing the oslo_config_validator role 4584764 Allow comments in variable files to be rendered in docs f76cfcf Use and ownership info for the ip_range module. 149b72e Use and ownership info for the check_flavors module d21830f Use and ownership info for the pacemaker module af65fae Use and ownership info for the node_disk module. 7db51a0 Use and ownership info for the icmp_ping module. 51185ee Use and ownership info for the ovs_dpdk_pmd_cpus_check module. 785219e Use and ownership info for the ceph_pools_pg_protection module 3ab651d Use and ownership info for the verify_profiles module 8c1a983 Use and ownership info for the network_environment module ad9c8b3 Use and ownership info for the switch_vlans module 74c30cf Compute TSX validation 9923eda Remove the post-update groups. 99acc1c Add Validation Development Workflow Documentation 19bb19e Introduce new Ansible validation_init role. f3cba82 Remove workaround for tox-ansible and global molecule config 98cdbd0 Quick documentation content reorganization bdae1d3 Update TOX_CONSTRAINTS_FILE for stable/wallaby eda796e Use validation_component for Standalone CI jobs e50c193 Bump molecule to 3.3.1 d619eff requirements-check enabled 46ee49a Trigger molecule jobs when modifying molecule-requirements.txt file 6a3081b Add shared configuration for all molecule test 8821e60 Removing python-tripleoclient 37b8a4b Update .gitreview for stable/wallaby 306d4ff [overcloud-service-status] Removing pre-upgrade Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 35 + .config/molecule/config.yml | 70 ++ .gitreview | 1 + .yamllint | 7 +- CONTRIBUTING.rst | 57 +- README.rst | 10 +- _skeleton_role_/molecule/default/Dockerfile | 37 - _skeleton_role_/molecule/default/molecule.yml | 49 -- ci/playbooks/pre.yml | 19 - ci/playbooks/run.yml | 2 +- .../developer_guide.rst} | 365 ++++++--- .../modules/modules-tripleo_haproxy_conf.rst | 14 + .../roles/role-check_for_dangling_images.rst | 8 +- library/ceph_pools_pg_protection.py | 38 +- library/check_flavors.py | 6 +- library/icmp_ping.py | 6 +- library/ip_range.py | 6 +- library/network_environment.py | 11 +- library/node_disks.py | 5 +- library/ovs_dpdk_pmd_cpus_check.py | 6 +- library/pacemaker.py | 6 +- library/switch_vlans.py | 6 +- library/tripleo_haproxy_conf.py | 108 +++ library/verify_profiles.py | 6 +- molecule-requirements.txt | 5 +- playbooks/check-uc-hostname.yaml | 1 - playbooks/compute-tsx.yaml | 31 + playbooks/oslo-config-validator.yaml | 61 ++ playbooks/overcloud-service-status.yaml | 1 - playbooks/tripleo-haproxy.yaml | 26 + .../compute-tsx-validation-5d976a3fc5166536.yaml | 13 + requirements.txt | 1 - role-addition.yml | 141 +--- .../molecule/ceph-ansible-installed/Dockerfile | 37 - .../molecule/ceph-ansible-installed/molecule.yml | 53 +- roles/ceph/molecule/default/Dockerfile | 37 - roles/ceph/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 35 - .../molecule/default/molecule.yml | 48 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 35 +- .../check_rhsm_version/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 51 +- .../molecule/rhsm_mismatch/Dockerfile | 37 - .../molecule/rhsm_mismatch/molecule.yml | 53 +- .../check_uc_hostname/molecule/default/Dockerfile | 35 - .../molecule/default/molecule.yml | 50 +- .../molecule/config_OK/Dockerfile | 37 - .../molecule/config_OK/molecule.yml | 53 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 53 +- .../molecule/deprecated_drivers/Dockerfile | 37 - .../molecule/deprecated_drivers/molecule.yml | 53 +- .../molecule/deprecated_params/Dockerfile | 37 - .../molecule/deprecated_params/molecule.yml | 53 +- .../molecule/required_missing/Dockerfile | 37 - .../molecule/required_missing/molecule.yml | 53 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/compute_tsx/README.md | 64 ++ roles/compute_tsx/defaults/main.yml | 26 + roles/compute_tsx/molecule/default/converge.yml | 79 ++ roles/compute_tsx/molecule/default/molecule.yml | 3 + roles/compute_tsx/tasks/main.yml | 82 ++ roles/compute_tsx/vars/main.yml | 23 + roles/container_status/molecule/default/Dockerfile | 37 - .../container_status/molecule/default/molecule.yml | 50 +- roles/controller_token/molecule/default/Dockerfile | 37 - .../controller_token/molecule/default/molecule.yml | 50 +- .../controller_ulimits/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../ctlplane_ip_range/molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/dhcp_validations/molecule/default/Dockerfile | 37 - .../dhcp_validations/molecule/default/molecule.yml | 50 +- roles/frr_status/molecule/default/Dockerfile | 37 - roles/frr_status/molecule/default/molecule.yml | 50 +- roles/frr_status/molecule/faulty/Dockerfile | 37 - roles/frr_status/molecule/faulty/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/image_serve/molecule/default/Dockerfile | 37 - roles/image_serve/molecule/default/molecule.yml | 38 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/node_disks/molecule/default/Dockerfile | 37 - roles/node_disks/molecule/default/molecule.yml | 50 +- roles/node_health/molecule/default/Dockerfile | 37 - roles/node_health/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/nova_status/molecule/default/Dockerfile | 37 - roles/nova_status/molecule/default/molecule.yml | 50 +- roles/nova_svirt/molecule/default/Dockerfile | 37 - roles/nova_svirt/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- roles/oslo_config_validator/defaults/main.yml | 387 +++++++++ .../molecule/default/molecule.yml | 35 + .../molecule/mocked_failure/molecule.yml | 25 + .../resources/library/podman_container.py | 903 +++++++++++++++++++++ .../resources/library/podman_container_info.py | 71 ++ .../resources/playbooks/converge.yml | 35 + .../resources/playbooks/prepare.yml | 30 + .../tasks/build_validation_config.yml | 166 ++++ .../oslo_config_validator/tasks/container_run.yml | 121 +++ .../tasks/invalidate_config.yml | 76 ++ roles/oslo_config_validator/tasks/main.yml | 72 ++ .../tasks/opt_data_format.yml | 66 ++ .../tasks/report_generation.yml | 90 ++ .../tasks/validate_config.yml | 68 ++ .../tasks/validation_command.yml | 97 +++ roles/oslo_config_validator/vars/main.yml | 44 + .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 38 +- .../molecule/deprecated_services/Dockerfile | 37 - .../molecule/deprecated_services/molecule.yml | 38 +- .../molecule/down_services/Dockerfile | 37 - .../molecule/down_services/molecule.yml | 38 +- roles/overcloud_service_status/vars/main.yml | 1 - roles/ovs_dpdk_pmd/molecule/default/Dockerfile | 37 - roles/ovs_dpdk_pmd/molecule/default/molecule.yml | 50 +- roles/pacemaker_status/molecule/default/Dockerfile | 37 - .../pacemaker_status/molecule/default/molecule.yml | 50 +- roles/package_version/molecule/default/Dockerfile | 37 - .../package_version/molecule/default/molecule.yml | 50 +- roles/rabbitmq_limits/molecule/default/Dockerfile | 37 - .../rabbitmq_limits/molecule/default/molecule.yml | 50 +- roles/repos/molecule/default/Dockerfile | 37 - roles/repos/molecule/default/molecule.yml | 50 +- roles/stack_health/molecule/default/Dockerfile | 37 - roles/stack_health/molecule/default/molecule.yml | 50 +- roles/stonith_exists/molecule/default/Dockerfile | 37 - roles/stonith_exists/molecule/default/molecule.yml | 50 +- roles/switch_vlans/molecule/default/Dockerfile | 37 - roles/switch_vlans/molecule/default/molecule.yml | 50 +- roles/system_encoding/molecule/default/Dockerfile | 37 - .../system_encoding/molecule/default/molecule.yml | 50 +- roles/tls_everywhere/molecule/default/Dockerfile | 37 - roles/tls_everywhere/molecule/default/molecule.yml | 35 +- roles/tripleo_haproxy/defaults/main.yml | 21 + .../tripleo_haproxy/molecule/default/converge.yml | 71 ++ .../tripleo_haproxy/molecule/default/molecule.yml | 3 + roles/tripleo_haproxy/tasks/main.yml | 56 ++ roles/undercloud_debug/molecule/default/Dockerfile | 37 - .../undercloud_debug/molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../molecule/default/Dockerfile | 37 - .../molecule/default/molecule.yml | 50 +- .../non-persistent-token-format/Dockerfile | 37 - .../non-persistent-token-format/molecule.yml | 50 +- roles/validation_init/README.md | 47 ++ roles/validation_init/defaults/main.yml | 28 + .../files/_skeleton_role_}/defaults/main.yml.j2 | 2 +- .../files/_skeleton_role_}/handlers/main.yml | 2 +- .../molecule/default/converge.yml.j2 | 2 +- .../_skeleton_role_/molecule/default/molecule.yml | 3 + .../_skeleton_role_/molecule/default/prepare.yml | 25 + .../_skeleton_role_/molecule/default/verify.yml | 24 + .../files/_skeleton_role_}/tasks/main.yml.j2 | 2 +- .../files/_skeleton_role_}/vars/main.yml.j2 | 2 +- .../validation_init/molecule/default/converge.yml | 62 ++ .../validation_init/molecule/default/molecule.yml | 3 + roles/validation_init/molecule/default/prepare.yml | 96 +++ roles/validation_init/molecule/default/verify.yml | 137 ++++ roles/validation_init/tasks/main.yml | 185 +++++ roles/validation_init/templates/README.md.j2 | 39 + scripts/tripleo-ansible-inventory | 4 +- test-requirements.txt | 1 - tox.ini | 8 +- zuul.d/base.yaml | 2 +- zuul.d/layout.yaml | 1 + zuul.d/molecule.yaml | 364 ++++++--- 207 files changed, 4939 insertions(+), 5085 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index ebd0bdd..c5a69f4 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -4,2 +4,3 @@ ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 +jinja2>=2.8.0 +molecule>=3.3.1,<4 # MIT +molecule-podman # MIT diff --git a/requirements.txt b/requirements.txt index 7c0b81b..4acdf4e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +12,0 @@ python-ironic-inspector-client>=3.1.1 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fa524d1..fbb1c7e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -20 +19,0 @@ requests-mock>=1.8.0 # Apache-2.0 -python-tripleoclient>=15.0.0 # Apache-2.0

1 0

tripleo-common 15.3.0 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are gleeful to announce the release of: tripleo-common 15.3.0: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.1..15.3.0 ---------------------------------------- 26f56c16 Wire up the tripleo-upgrades-wallaby-pipeline 9c427641 Remove ironic-inspector dnsmasq healthcheck 8e95b040 Add missing IPv6 support for healthcheck_port bbb5f3da directly use files instread of tcib_gather_files d6b49330 Rename hieradata_files result var 1313c8f8 Make sure Heat Ephemeral has images prepared 29d8f083 Refactor enabled_services for roles d2552f6e Cleanup OS_CLOUD env var for ephemeral heat 31468f27 [Wallaby-only] Update default container namespace for wallaby 62344e94 Move rabbitmq healthcheck to something more modern 7ba76730 Remove references to tripleo-validations legacy directory Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 2 +- container-images/tcib/base/base.yaml | 13 +- container-images/tcib/base/mariadb/mariadb.yaml | 5 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 3 +- .../cinder-base/cinder-volume/cinder-volume.yaml | 5 +- .../tcib/base/os/glance-api/glance-api.yaml | 3 +- container-images/tcib/base/os/horizon/horizon.yaml | 3 +- container-images/tcib/base/os/iscsid/iscsid.yaml | 3 +- .../tcib/base/os/keystone/keystone.yaml | 3 +- .../tcib/base/os/neutron-base/neutron-base.yaml | 3 +- .../tcib/base/os/swift-base/swift-base.yaml | 5 +- .../ovn-nb-db-server/ovn-nb-db-server.yaml | 3 +- .../ovn-sb-db-server/ovn-sb-db-server.yaml | 3 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 3 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 5 +- container-images/tripleo_containers.yaml | 178 ++++++++++----------- container-images/tripleo_containers.yaml.j2 | 6 + healthcheck/common.sh | 2 +- healthcheck/ironic-inspector | 13 +- healthcheck/rabbitmq | 2 +- tripleo_common/constants.py | 1 - tripleo_common/image/kolla_builder.py | 46 ++++-- tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/ansible.py | 30 +--- tripleo_common/utils/heat.py | 3 +- zuul.d/layout.yaml | 2 +- 29 files changed, 220 insertions(+), 237 deletions(-)

1 0

os-net-config 14.1.1 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are tickled pink to announce the release of: os-net-config 14.1.1: OpenStack network configuration This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 14.1.0..14.1.1 --------------------------------------- e2b7ed1 Avoid creating multiple entries of udev rules Diffstat (except docs and test files) ------------------------------------- os_net_config/sriov_config.py | 27 ++++-- 2 files changed, 158 insertions(+), 8 deletions(-)

1 0

openstacksdk 0.58.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We contentedly announce the release of: openstacksdk 0.58.0: An SDK for building applications to work with OpenStack This release is part of the xena release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 0.58.0 ^^^^^^ New Features * Added support for the "ResourceClass" Placement resource. Changes in openstacksdk 0.57.0..0.58.0 -------------------------------------- 6c2a5ccb Move to OFTC 30600da9 Fix import order in accelerator and config unit tests 2e7b48ff tests: Rename 'TestProxyBase._verify2' to '_verify' 40cc84d5 Add IPsecSiteConnection resource and proxy layer functionality for it 6f985394 tests: Remove final use of 'TestProxyBase._verify' 2e726ef7 tests: Sanity check 'test_proxy_base' 5edbb15e tests: Remove dead code 38e9ca00 placement: Add support for resource classes Diffstat (except docs and test files) ------------------------------------- .../resources/network/v2/ipsec_site_connection.rst | 13 + .../user/resources/placement/v1/resource_class.rst | 13 + openstack/baremetal/v1/_proxy.py | 9 +- openstack/block_storage/v2/_proxy.py | 7 +- openstack/block_storage/v3/_proxy.py | 7 +- openstack/clustering/v1/_proxy.py | 4 +- openstack/compute/v2/_proxy.py | 12 +- openstack/image/v2/_proxy.py | 22 +- openstack/network/v2/_proxy.py | 96 ++++ openstack/network/v2/ipsec_site_connection.py | 105 ++++ openstack/placement/v1/_proxy.py | 84 +++- openstack/placement/v1/resource_class.py | 32 ++ openstack/proxy.py | 19 +- .../accelerator/v2/test_accelerator_request.py | 2 +- .../unit/accelerator/v2/test_device_profile.py | 3 +- .../unit/load_balancer/{ => v2}/test_proxy.py | 105 ++-- .../unit/network/v2/test_ipsec_site_connection.py | 80 +++ ...-placement-resource-class-e1c644d978b886bc.yaml | 4 + tox.ini | 2 - 51 files changed, 1953 insertions(+), 1381 deletions(-)

1 0

python-ironic-inspector-client 4.6.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We high-spiritedly announce the release of: python-ironic-inspector-client 4.6.0: Python client for Ironic Inspector This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironic-inspector-client For more details, please see below. 4.6.0 ^^^^^ New Features * Exposes "switch_mgmt_addresses" and "switch_system_description" in interface details. Changes in python-ironic-inspector-client 4.5.0..4.6.0 ------------------------------------------------------ 4046b74 [doc] Fix lldp_basic name 0687489 Expose more interface fields b95e72c Add Python3 xena unit tests db9bdd1 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- ironic_inspector_client/resource.py | 2 ++ ironic_inspector_client/v1.py | 4 ++-- .../notes/expose-more-interface-fields-de82d634c2af05e0.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/project.yaml | 2 +- 6 files changed, 17 insertions(+), 3 deletions(-)

1 0

metalsmith 1.5.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We contentedly announce the release of: metalsmith 1.5.0: Deployment and Scheduling tool for Bare Metal This release is part of the xena release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 1.5.0 ^^^^^ Bug Fixes * Images sourced by HTTP would never have the node instance_info *image_disk_format* set to *raw* because the image file is not processed by ironic. This would result in errors for large images, or ironic-python-agent never using streaming to copy the image to disk. To work around this, *image_disk_format* is set to *raw* when the image URL ends with a *.raw* file extension. Changes in metalsmith 1.4.2..1.5.0 ---------------------------------- 407e505 Set image_disk_format from file extension for HTTP images 2fe1733 setup.cfg: Replace dashes with underscores 048ddb5 Stop testing the iscsi deploy interface 8cd0f73 Add Python3 xena unit tests 3114db1 Update master for stable/wallaby 621cd8c remove unicode from code Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 28 ++++----------- metalsmith/sources.py | 22 +++++++++--- metalsmith/test/test_sources.py | 42 ++++++++++++++++++++++ .../notes/raw_http_images-41007351896ff642.yaml | 9 +++++ releasenotes/source/conf.py | 4 +-- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++ setup.cfg | 8 ++--- 9 files changed, 92 insertions(+), 34 deletions(-)

1 0

nova 21.2.2 (ussuri)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are gleeful to announce the release of: nova 21.2.2: Cloud computing fabric controller This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 21.2.2 ^^^^^^ Bug Fixes * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. Changes in nova 21.2.1..21.2.2 ------------------------------ be4a514c8a [neutron] Get only ID and name of the SGs from Neutron bf90a1e061 Error anti-affinity violation on migrations 31ead3839e Remove broken legacy zuul jobs 341ba7aa17 [CI] Fix gate by using zuulv3 live migration and grenade jobs 22daca3e7f Ignore PCI devices with 32bit domain 8e9859b95c Reproduce bug 1897528 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 71 ++++--- gate/live_migration/hooks/ceph.sh | 208 --------------------- gate/live_migration/hooks/nfs.sh | 50 ----- gate/live_migration/hooks/utils.sh | 11 -- nova/compute/manager.py | 110 +++++++++-- nova/conf/pci.py | 8 +- nova/network/neutron.py | 8 +- nova/pci/manager.py | 39 +++- playbooks/legacy/nova-grenade-multinode/post.yaml | 15 -- playbooks/legacy/nova-grenade-multinode/run.yaml | 65 ------- playbooks/legacy/nova-live-migration/post.yaml | 15 -- playbooks/legacy/nova-live-migration/run.yaml | 60 ------ playbooks/nova-evacuate/run.yaml | 8 + playbooks/nova-live-migration/post-run.yaml | 10 + .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 ++ roles/run-evacuate-hook/README.rst | 1 + .../files/setup_evacuate_resources.sh | 34 ++++ roles/run-evacuate-hook/files/test_evacuate.sh | 55 ++++++ .../files/test_negative_evacuate.sh | 37 ++++ roles/run-evacuate-hook/tasks/main.yaml | 64 +++++++ 25 files changed, 573 insertions(+), 550 deletions(-)

1 0

nova 22.2.2 (victoria)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We enthusiastically announce the release of: nova 22.2.2: Cloud computing fabric controller This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 22.2.2 ^^^^^^ Bug Fixes * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. Changes in nova 22.2.1..22.2.2 ------------------------------ bec6dd4752 Stop leaking ceph df cmd in RBD utils f7d84db587 [neutron] Get only ID and name of the SGs from Neutron 6ede6df7f4 Error anti-affinity violation on migrations e3085fa631 Initialize global data separately and run_once in WSGI app init f20346bc00 Honor [neutron]http_retries in the manual client 2af08fb5ea zuul: Replace grenade and nova-grenade-multinode with grenade-multinode 0405709999 rbd: Get rbd_utils unit tests running again 90ffc553d7 Ignore PCI devices with 32bit domain 0354d4d9f4 Reproduce bug 1897528 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 32 ++-- gate/live_migration/hooks/ceph.sh | 208 --------------------- gate/live_migration/hooks/nfs.sh | 50 ----- gate/live_migration/hooks/utils.sh | 11 -- nova/api/openstack/wsgi_app.py | 24 ++- nova/compute/manager.py | 110 +++++++++-- nova/conf/pci.py | 8 +- nova/network/neutron.py | 9 +- nova/pci/manager.py | 38 +++- nova/storage/rbd_utils.py | 9 +- nova/test.py | 5 + nova/utils.py | 46 +++++ playbooks/legacy/nova-grenade-multinode/post.yaml | 15 -- playbooks/legacy/nova-grenade-multinode/run.yaml | 65 ------- playbooks/legacy/nova-live-migration/post.yaml | 15 -- playbooks/legacy/nova-live-migration/run.yaml | 60 ------ .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 ++ 27 files changed, 609 insertions(+), 544 deletions(-)

1 0

nova 23.0.2 (wallaby)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We joyfully announce the release of: nova 23.0.2: Cloud computing fabric controller This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 23.0.2 ^^^^^^ Security Issues *************** * A vulnerability in the console proxies (novnc, serial, spice) that allowed open redirection has been patched. The novnc, serial, and spice console proxies are implemented as websockify servers and the request handler inherits from the python standard SimpleHTTPRequestHandler. There is a known issue in the SimpleHTTPRequestHandler which allows open redirects by way of URLs in the following format: http://vncproxy.my.domain.com//example.com/%2F.. which if visited, will redirect a user to example.com. The novnc, serial, and spice console proxies will now reject requests that pass a redirection URL beginning with "//" with a 400 Bad Request. (https://bugs.launchpad.net/nova/+bug/1927677) (https://bugs.python.org/issue32084) Bug Fixes ********* * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. * Bug 1851545 (https://bugs.launchpad.net/nova/+bug/1851545) wherein unshelving an instance with SRIOV Neutron ports did not update the port binding's "pci_slot" and could cause libvirt PCI conflicts, has been fixed. Important: Constraints in the fix's implementation mean that it only applies to instances booted **after** it has been applied. Existing instances will still experience bug 1851545 after being shelved and unshelved, even with the fix applied. * To fix device detach issues in the libvirt driver the detach logic has been changed from a sleep based retry loop to waiting for libvirt domain events. During this change we also introduced two new config options to allow fine tuning the retry logic. For details see the description of the new "[libvirt]device_detach_attempts" and "[libvirt]device_detach_timeout" config options. (https://bugs.launchpad.net/nova/+bug/1882521) Changes in nova 23.0.1..23.0.2 ------------------------------ fef0305abe Move 'check-cherry-picks' test to gate, n-v check 5d65680095 libvirt: Set driver_iommu when attaching virtio devices to SEV instance c45bedd98d zuul: Replace grenade and nova-grenade-multinode with grenade-multinode 8b62a4ec9b Error anti-affinity violation on migrations 46aa3f4ec7 Honor [neutron]http_retries in the manual client bf7254b794 Update SRIOV port pci_slot when unshelving 3625d5336a Test SRIOV port move operations with PCI conflicts 83ca8b3563 Neutron fixture: don't clobber profile and vif_details if empty 5ede75c65e Stop leaking ceph df cmd in RBD utils 4709256142 Reject open redirection in the console proxy 8f018d754d rbd: Get rbd_utils unit tests running again 8b50f48ed2 Consolidate device detach error handling ebf1ceb7d6 Move instance power state check to _detach_with_retry 14596ca30f libvirt: Remove dead error handling code 9f90c7268c Follow up type hints for a634103 3fcd11a403 Enable mypy on libvirt/guest.py 5f488d8cd1 Move the guest.get_disk test to test_guest 30317e6b3f Replace blind retry with libvirt event waiting in detach Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 46 +- gate/live_migration/hooks/ceph.sh | 208 ---- gate/live_migration/hooks/nfs.sh | 50 - gate/live_migration/hooks/utils.sh | 11 - mypy-files.txt | 1 + nova/compute/manager.py | 124 +- nova/conf/libvirt.py | 24 + nova/console/websocketproxy.py | 23 + nova/network/neutron.py | 86 +- nova/storage/rbd_utils.py | 9 +- .../functional/libvirt/test_pci_sriov_servers.py | 116 ++ nova/virt/libvirt/designer.py | 10 +- nova/virt/libvirt/driver.py | 559 ++++++--- nova/virt/libvirt/guest.py | 139 +-- nova/virt/libvirt/migration.py | 9 +- playbooks/legacy/nova-grenade-multinode/post.yaml | 15 - playbooks/legacy/nova-grenade-multinode/run.yaml | 65 -- playbooks/legacy/nova-live-migration/post.yaml | 15 - playbooks/legacy/nova-live-migration/run.yaml | 60 - .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 + .../notes/bug-1851545-781c358939d96cea.yaml | 12 + ...roxy-reject-open-redirect-4ac0a7895acca7eb.yaml | 19 + ...event-based-device-detach-23ac037004d753b1.yaml | 11 + tools/check-cherry-picks.sh | 5 - tox.ini | 12 +- 39 files changed, 2180 insertions(+), 1347 deletions(-)

1 0

python-octaviaclient 2.4.0 (xena)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are pumped to announce the release of: python-octaviaclient 2.4.0: Octavia client for OpenStack Load Balancing This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 2.4.0 ^^^^^ Bug Fixes * Improved the client performance when using a name instead of the resource ID. * Fixed some issues when the number of Octavia resources exceeded the 'pagination_max_limit' parameter in Octavia API. The list calls now support pagination. Changes in python-octaviaclient 2.3.0..2.4.0 -------------------------------------------- 6ef3eed Fix some typos 84e927d Improve the client performance on large clouds cf0c4be Support pagination for 'list' API calls 32a6c09 setup.cfg: Replace dashes with underscores 7927aec Add Python3 xena unit tests 7776264 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- octaviaclient/api/constants.py | 50 +++++++---- octaviaclient/api/v2/octavia.py | 98 +++++++++++++++++----- octaviaclient/osc/v2/amphora.py | 10 +-- octaviaclient/osc/v2/availabilityzoneprofile.py | 4 +- octaviaclient/osc/v2/flavor.py | 2 +- octaviaclient/osc/v2/flavorprofile.py | 2 +- octaviaclient/osc/v2/health_monitor.py | 8 +- octaviaclient/osc/v2/l7policy.py | 12 +-- octaviaclient/osc/v2/l7rule.py | 8 +- octaviaclient/osc/v2/listener.py | 14 ++-- octaviaclient/osc/v2/load_balancer.py | 12 +-- octaviaclient/osc/v2/member.py | 34 ++++---- octaviaclient/osc/v2/pool.py | 12 +-- octaviaclient/osc/v2/quota.py | 2 +- octaviaclient/osc/v2/utils.py | 91 +++++++++++++++----- .../unit/osc/v2/test_availabilityzoneprofile.py | 2 + ...sing-a-name-instead-of-ID-51a6637050386a90.yaml | 5 ++ .../notes/fix-cli-pagination-792ad8cd386eb0e7.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 8 +- zuul.d/projects.yaml | 2 +- 31 files changed, 281 insertions(+), 129 deletions(-)

1 0

oslo.middleware 4.3.0 (xena)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are overjoyed to announce the release of: oslo.middleware 4.3.0: Oslo Middleware library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 4.2.0..4.3.0 --------------------------------------- 2c415ff Upgrade the pre-commit-hooks version 2ec633c setup.cfg: Replace dashes with underscores b1ce931 Warning about /healthcheck c7fabf4 Add Python3 xena unit tests c1a30f3 Update master for stable/wallaby 3a0f7e4 Fix requirements issues 5c806d4 Fix requirements issues 2eb27aa remove unicode from code ea0d1ab Use py3 as the default runtime for tox a220331 ignore reno generated artifacts Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 ++ .pre-commit-config.yaml | 10 ++++--- .zuul.yaml | 3 +-- lower-constraints.txt | 43 ------------------------------ oslo_middleware/healthcheck/__init__.py | 6 +++++ releasenotes/source/conf.py | 10 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++++ setup.cfg | 8 +++--- tox.ini | 8 +----- 12 files changed, 35 insertions(+), 66 deletions(-)

1 0