November 2022 - Release-announce - lists.openstack.org

puppet-octavia 18.5.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are glad to announce the release of: puppet-octavia 18.5.0: Puppet module for OpenStack Octavia This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. Changes in puppet-octavia 18.4.1..18.5.0 ---------------------------------------- 35f7824 setuptools: Disable auto discovery c7d4f67 Prepare the final wallaby release 86f0407 Do not show passphrase even if it is invalid 36e13e5 Make TripleO job voting 47b7b3c TripleO: Switch to scenario 013 2b2e580 ovn: Accept arrays for ovn_*_connection parameters 59612af ovn: Add support for ovn_sb_* parameters 0c8f1c4 ovn: Add more tunables related to OVN DB connection f2bb105 Manage ovn-octavia-provider package 71e762c Accept array or hash for enable_provider_drivers 6fe787c Fix inconsistent spec file name 765afdf Add parameters to configure amphorav2 driver 2255949 Add centos-9 jobs for wallaby zuul layout da1dcd4 api: Add support for TLS cipher/version parameters f8b2c94 Add support for [api_settings] healthcheck_refresh_interval Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 36 +++++-- manifests/api.pp | 53 ++++++++++- manifests/certificates.pp | 6 +- manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/params.pp | 1 + manifests/provider/ovn.pp | 75 +++++++++++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 2 +- .../notes/api-tls-params-48cefc42aee491ab.yaml | 13 +++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ ...lthcheck_refresh_interval-861418bae80c15d5.yaml | 5 + .../ovn-provider-package-af40f696662e7052.yaml | 5 + .../notes/ovn-tunables-103622c80b71d03d.yaml | 9 ++ .../notes/ovnsb-params-e7bdca2b53465ed9.yaml | 5 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ setup.py | 1 + spec/classes/octavia_api_spec.rb | 71 +++++++++++++- spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_ovn_provider_spec.rb | 47 --------- spec/classes/octavia_provider_ovn_spec.rb | 90 ++++++++++++++++++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ 27 files changed, 757 insertions(+), 89 deletions(-)

1 0

puppet-neutron 18.6.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are pumped to announce the release of: puppet-neutron 18.6.0: Puppet module for OpenStack Neutron This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 18.6.0 ^^^^^^ New Features ************ * The new "neutron::cache" class has been added. * The "neutron::agents::ovn_metadata" class now supports the following two new parameters. * "ovsdb_probe_interval" parameter to configure "[ovn]ovsdb_probe_interval" in ovn metadata agent config file. * "ovsdb_retry_max_interval" parameter to configure "[ovn]ovsdb_retry_max_interval" in ovn metadata agent config file. * The "neutron::plugins::ml2::ovn" class now supports the following two new parameters. * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" Bug Fixes ********* * The independent ovn plugin package("pythonN-networking-ovn") is no longer required. The package is no longer available since Ussuri, and all codes are now included in the base neutron package. * The "neutron-ovn-metadata-agent" package is now installed in Ubuntu and Debian. * Bug #1987460 (https://bugs.launchpad.net/puppet- neutron/+bug/1987460): Previously the "neutron::agents::ml2::mlnx" class causes duplicate resources when used with the "neutron::agents::dhcp" class or the "neutron::agents::l3" class. Now it is possible to workaround the error by implementing the following mitigation. * Include the "neutron::agents::ml2::mlnx" class AFTER the "neutron::agents::dhcp" class or the "neutron::agents::l3" * Set the "interface_driver" parameter and the "dhcp_broadcast_reply" parameter consistently. Changes in puppet-neutron 18.5.0..18.6.0 ---------------------------------------- 2094101f setuptools: Disable auto discovery c4e6cde3 Prepare the final wallaby release e70d3e68 ovn: Do not expect the separate plugin package 181975c4 mlnx: Allow workaround for duplicate resources 9a9bdac5 [ovn metadata] Add more tunable parameters 4456238f ml2+ovn: Add more tunable parameters for OVN DB connections 3bdf3112 NSX Plugin: nsx_api_password should be secret a2a67d3c Add support for oslo.cache options cfbc5c12 Fix the ignored unit test case for dhcp-agent configuration 7888ba4b Add centos-9 jobs for wallaby zuul layout Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 +- .../ovn_metadata_agent_config/ini_setting.rb | 2 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/ml2/mlnx.pp | 14 +- manifests/agents/ovn_metadata.pp | 15 +- manifests/cache.pp | 166 +++++++++++++++++++++ manifests/params.pp | 6 +- manifests/plugins/ml2/ovn.pp | 20 ++- manifests/plugins/nsx.pp | 2 +- metadata.json | 2 +- .../notes/bug-1945973-65195b6dae2009e5.yaml | 10 ++ .../notes/bug-1987460-c5bfc6d98ccd3375.yaml | 14 ++ .../notes/cache-opts-1948574d59cde1b0.yaml | 4 + ...n-metadata-tunning-params-9232d7638488ae0d.yaml | 12 ++ .../notes/ovn-tunables-0f917de23d4c1274.yaml | 8 + setup.py | 1 + spec/classes/neutron_agents_dhcp_spec.rb | 64 ++++---- spec/classes/neutron_agents_ovn_metadata_spec.rb | 53 +++---- spec/classes/neutron_cache_spec.rb | 95 ++++++++++++ spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +- spec/classes/neutron_plugins_nsx_spec.rb | 4 +- .../ovn_metadata_agent_config/ini_setting_spec.rb | 4 +- 22 files changed, 426 insertions(+), 91 deletions(-)

1 0

puppet-swift 18.6.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We high-spiritedly announce the release of: puppet-swift 18.6.0: Puppet module for OpenStack Swift This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. Changes in puppet-swift 18.5.0..18.6.0 -------------------------------------- c4e1203 setuptools: Disable auto discovery df52b9c Prepare the final wallaby release bce59e6 Fix deprecation warning by validate_legacy dd89409 Fix type validation warning for storage policy rings 4267671 Support customizing internal-client.conf ba44c31 Support more [oslo_messaging_rabbit] parameters 195425d Fix typo in swiftinit service type 1d4dab1 Add centos-9 jobs for wallaby zuul layout 6b4e64b TripleO: Enable container build in standalone job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 +- lib/puppet/provider/service/swiftinit.rb | 2 +- .../swift_internal_client_config/ini_setting.rb | 10 ++ lib/puppet/type/swift_internal_client_config.rb | 53 ++++++++ manifests/config.pp | 8 ++ manifests/deps.pp | 4 + manifests/internal_client.pp | 95 +++++++++++++++ manifests/internal_client/cache.pp | 76 ++++++++++++ manifests/internal_client/catch_errors.pp | 25 ++++ manifests/internal_client/proxy_logging.pp | 15 +++ manifests/internal_client/symlink.pp | 42 +++++++ manifests/proxy/ceilometer.pp | 134 ++++++++++++++++----- manifests/ringbuilder/create.pp | 6 +- manifests/ringbuilder/rebalance.pp | 6 +- manifests/storage/node.pp | 6 +- metadata.json | 2 +- .../notes/internal-client-ce022fa93df88aaa.yaml | 5 + ...slo-messaging-rabbit-opts-e4da4a73d1f2c788.yaml | 15 +++ setup.py | 1 + spec/classes/swift_config_spec.rb | 11 ++ spec/classes/swift_internal_client_cache_spec.rb | 78 ++++++++++++ .../swift_internal_client_catch_errors_spec.rb | 19 +++ spec/classes/swift_internal_client_spec.rb | 73 +++++++++++ spec/classes/swift_internal_client_symlink_spec.rb | 33 +++++ spec/classes/swift_proxy_ceilometer_spec.rb | 20 ++- spec/defines/swift_ringbuilder_create_spec.rb | 14 ++- spec/defines/swift_ringbuilder_rebalance_spec.rb | 16 ++- .../ini_setting_spec.rb | 49 ++++++++ .../unit/type/swift_internal_client_config_spec.rb | 19 +++ 29 files changed, 793 insertions(+), 56 deletions(-)

1 0

kolla 13.7.0 (xena)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are chuffed to announce the release of: kolla 13.7.0: Kolla OpenStack Deployment This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.7.0 ^^^^^^ Bug Fixes * RabbitMQ version has been updated to 3.9 and ERLang has been updated to 25. Previously used versions (3.8 and 23) have been marked as end-of-life and are not supported anymore as of August 2022. * Fixes an issue with Swift deployment via Kolla Ansible caused by the fix to CVE-2022-38060. The kolla-toolbox container now have its own sudoers secure_path configuration which allows the necessary binaries to execute. Changes in kolla 13.6.0..13.7.0 ------------------------------- f3edd4d67 rabbitmq: update to RabbitMQ 3.9 on Erlang 25 75a21a45d Fix Swift deployment issue Diffstat (except docs and test files) ------------------------------------- kolla/template/repos.yaml | 22 +++++++++++----------- .../notes/rabbitmq-3.9-2b7dc15995b823cc.yaml | 6 ++++++ .../notes/swift-sudo-issue-84d37919c980a373.yaml | 7 +++++++ 11 files changed, 49 insertions(+), 30 deletions(-)

1 0

puppet-gnocchi 18.4.2 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are thrilled to announce the release of: puppet-gnocchi 18.4.2: Puppet module for OpenStack Gnocchi This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. Changes in puppet-gnocchi 18.4.1..18.4.2 ---------------------------------------- 457dee3 setuptools: Disable auto discovery b935859 Prepare the final wallaby release 72717d6 s3_access_key_id should be secret Diffstat (except docs and test files) ------------------------------------- manifests/storage/s3.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/gnocchi_storage_s3_spec.rb | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-)

1 0

puppet-openstacklib 18.5.1 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are psyched to announce the release of: puppet-openstacklib 18.5.1: Puppet module for OpenStack Openstacklib This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. Changes in puppet-openstacklib 18.5.0..18.5.1 --------------------------------------------- cccd349 setuptools: Disable auto discovery e18c413 Prepare the final wallaby release 973a9b9 Ubuntu: Use utf8mb3 charset in MySQL 358e2a4 Make regex matching policy key stricter 9072278 policy: Quote single quotes in yaml format 977516d Add centos-9 jobs for wallaby zuul layout Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 ++++++++- manifests/policy/base.pp | 11 +++++++-- metadata.json | 2 +- setup.py | 1 + spec/acceptance/mysql_spec.rb | 8 ++++++- spec/acceptance/openstacklib_policy_base_spec.rb | 14 ++++++++++++ spec/defines/openstacklib_policy_base_spec.rb | 29 +++++++++++++++++++++++- 7 files changed, 70 insertions(+), 6 deletions(-)

1 0

puppet-ceilometer 18.4.2 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We enthusiastically announce the release of: puppet-ceilometer 18.4.2: Puppet module for OpenStack Ceilometer This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. Changes in puppet-ceilometer 18.4.1..18.4.2 ------------------------------------------- 4c2ea39 setuptools: Disable auto discovery f9d8b05 Prepare the final wallaby release 5023b08 Bugfix - Deprecated notification_workers is ignored Diffstat (except docs and test files) ------------------------------------- manifests/agent/notification.pp | 2 +- metadata.json | 2 +- setup.py | 1 + 3 files changed, 3 insertions(+), 2 deletions(-)

1 0

metalsmith 1.6.3 (yoga)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We jubilantly announce the release of: metalsmith 1.6.3: Deployment and Scheduling tool for Bare Metal This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.6.2..1.6.3 ---------------------------------- dedafe9 Do a precise node lookup for unprovision 1b631e2 Add linters job 8f652d4 CI: Extend timeouts for RAX c08d5c2 metalsmith_instances module, unprovision by hostname 3e074d9 metalsmith_instances module, pass hostname in reserve b25bfc7 metalsmith list handle missing port 6b8005a Add a workaround to fix the CI e902067 Update TOX_CONSTRAINTS_FILE for stable/yoga 8fb9790 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- metalsmith/_instance.py | 16 +++++-- metalsmith/test/test_instance.py | 13 ++++++ metalsmith/test/test_metalsmith_instances.py | 49 ++++++++++++++++++++++ .../modules/metalsmith_instances.py | 26 +++++++++++- playbooks/integration/centos8-integration.yaml | 2 +- playbooks/integration/exercise.yaml | 2 +- playbooks/integration/initial-setup.yaml | 5 +++ playbooks/integration/run.yaml | 2 +- tools/ansible-lint.sh | 8 ++++ tox.ini | 17 ++++++-- 12 files changed, 132 insertions(+), 13 deletions(-)

1 0

puppet-keystone 18.6.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are satisfied to announce the release of: puppet-keystone 18.6.0: Puppet module for OpenStack Keystone This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 18.6.0 ^^^^^^ Security Issues * Content of fernet keys and credential keys are now hidden from output, when these files are updated. Changes in puppet-keystone 18.5.0..18.6.0 ----------------------------------------- e979678 setuptools: Disable auto discovery b75d914 Prepare the final wallaby release bbdbd7a Ensure key contents are hidden 2606fdf Add support for MultiStrOpt b632a78 Ensure inet6: formatting for a comma-separated list string 3ac6b05 Add centos-9 jobs for wallaby zuul layout Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 +++- lib/puppet/provider/keystone.rb | 2 +- .../{ini_setting.rb => openstackconfig.rb} | 4 +- lib/puppet/provider/keystone_domain/openstack.rb | 2 +- .../provider/keystone_domain_config/openstack.rb | 8 +-- lib/puppet/type/keystone_config.rb | 65 +++++++++++++++++++--- manifests/init.pp | 2 + manifests/resource/authtoken.pp | 7 ++- metadata.json | 2 +- .../notes/bug-1979672-003a5939f3bd6f67.yaml | 5 ++ setup.py | 1 + spec/classes/keystone_init_spec.rb | 2 + spec/defines/keystone_resource_authtoken_spec.rb | 39 +++++++++++-- ...ini_setting_spec.rb => openstackconfig_spec.rb} | 15 ++++- .../keystone_domain_config/openstack_spec.rb | 3 +- spec/unit/type/keystone_config_spec.rb | 6 +- 16 files changed, 142 insertions(+), 32 deletions(-)

1 0

puppet-ironic 18.7.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are tickled pink to announce the release of: puppet-ironic 18.7.0: Puppet module for OpenStack Ironic This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 18.7.0 ^^^^^^ New Features ************ * The "ironic::conductor" class now supports the following two new parameters. * "heartbeat_interval" * "heartbeat_timeout" * The new "ironic::disk_utils" class has been added. Bug Fixes ********* * Now the "tftpd-hap" package is installed insted of the "tftpd" package in Debian and Ubuntu. Changes in puppet-ironic 18.6.0..18.7.0 --------------------------------------- 65869f8 Prepare the final wallaby release 590f7dd setuptools: Disable auto discovery 079dff9 Debian/Ubuntu: Use tftpd-hpa instead of tftpd d80f2bf conductor: Support tuning of heartbeats 21dd14b Add support for [disk_utils] parameters 5ac952a Refactor unit tests of ironic::pxe d603c8d CentOS 9: Fix unit tests for ironic::pxe Diffstat (except docs and test files) ------------------------------------- manifests/conductor.pp | 13 ++ manifests/disk_utils.pp | 61 ++++++ manifests/params.pp | 2 +- metadata.json | 2 +- .../conductor-heartbeat-d92790f3e6a59c4b.yaml | 8 + .../notes/disk_utils-ff85c8b00595d8b8.yaml | 4 + .../use-tftpd-hpa-in-debian-07f5429e791ab883.yaml | 5 + setup.py | 1 + spec/classes/ironic_conductor_spec.rb | 6 + spec/classes/ironic_disk_utils_spec.rb | 60 ++++++ spec/classes/ironic_pxe_spec.rb | 220 +++++++++++++-------- 11 files changed, 295 insertions(+), 87 deletions(-)

1 0

puppet-horizon 18.6.0 (wallaby)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are gleeful to announce the release of: puppet-horizon 18.6.0: Puppet module for OpenStack Horizon This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 18.6.0 ^^^^^^ New Features ************ * The new "horizon::wsgi::apache::ssl_extra_params" parameter has been added. This parameter affects only ssl vhost and overrides the "extra_params" parameter when set. Bug Fixes ********* * Fix HORIZON_IMAGES_UPLOAD_MODE in template file because the value must be encapsulated with quotes or it will be treated as an expression by horizon. Changes in puppet-horizon 18.5.0..18.6.0 ---------------------------------------- e768b14 setuptools: Disable auto discovery 2f3476b Prepare the final wallaby release 69539a2 Do not show diff of local_settings(.py) d4ada5a wallaby and before: Remove logic for CentOS 7/RHEL 7 7e7e2e2 Add inet6 prefix only when MemcacheCache is used dc84cdb Accept array for cache_server_url 6fc4f4d Allow customizing apache::vhost parameters for SSL vhost 9a6961d Fix syntax error in individual dashboard settings 31798f7 Add centos-9 jobs for wallaby zuul layout a12c772 Fix missing HORIZON_IMAGES_UPLOAD_MODE Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 ++- manifests/init.pp | 25 +++-- manifests/wsgi/apache.pp | 61 ++++++++---- metadata.json | 2 +- ..._quotes_for_images_upload-bcd649d0311afe32.yaml | 5 + .../wsgi-ssl_extra_params-f775a56966c5d475.yaml | 6 ++ setup.py | 1 + spec/classes/horizon_init_spec.rb | 108 +++++++++++++++------ spec/classes/horizon_wsgi_apache_spec.rb | 26 ++++- templates/_1499_load_balancer_settings.py.erb | 4 +- templates/_1699_orchestration_settings.py.erb | 2 +- templates/_90_manila_shares.py.erb | 2 +- templates/local_settings.py.erb | 8 +- 13 files changed, 192 insertions(+), 69 deletions(-)

1 0

ironic-inspector 10.8.1 (xena)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are pumped to announce the release of: ironic-inspector 10.8.1: Hardware introspection for OpenStack Bare Metal This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.8.1 ^^^^^^ Known Issues ************ * The response headers for empty body HTTP 204 replies, at present, violate RFC7230. This was not intentional, but underlying libraries also make inappropriate changes to the headers, which can cause clients to experience odd failures. This is anticipated to be corrected once an underlying issue in eventlet (https://github.com/eventlet/eventlet/issues/746) is resolved. Bug Fixes ********* * Fixes HTTP responses so the Eventlet library, which is used to support the operation of the WSGI application, does not incorrectly inject a "Transfer-Encoding" header into the HTTP response, even on HTTP 204 replies, which is a violation of RFC7230. This header ultimately can cause varying client reactions which are not expected and can raise exceptions. For now, this has been remedied via an explicit return of a "Content-Length" header, which is also an RFC7230 violation, but it appears to be the lesser of known evils at this time. Changes in ironic-inspector 10.8.0..10.8.1 ------------------------------------------ befeb52 CI: Zuul no longer respects queue 83d15fe Return a content-length on HTTP204 to prevent client failures d2328f0 Update TOX_CONSTRAINTS_FILE for stable/xena 218a130 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/main.py | 14 ++++++++++++++ ironic_inspector/test/unit/test_main.py | 6 ++++++ ..._eventlet_wsgi_evil_override-3905c6eef0ad7fa3.yaml | 19 +++++++++++++++++++ tox.ini | 10 +++++----- zuul.d/project.yaml | 1 - 6 files changed, 45 insertions(+), 6 deletions(-)

1 0

sushy 3.12.3 (xena)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are amped to announce the release of: sushy 3.12.3: Sushy is a small Python library to communicate with Redfish based systems This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.12.3 ^^^^^^ Bug Fixes * Fixes potential cases where exceptions from the underlying "requests" library may be raised up through "sushy", resulting in client applications possibly not understanding that an error has occurred. The sushy "ConnectionError" exception is now returned upon any exception falling under "RequestException" from the "requests" library. * Fixes unreliable behavior with ETag interactions with some BMCs as opportunistic use of compressed responses may cause the BMC to change an ETag response to "Weak", which is to be expected as an ETag represents an absolute byte-by-byte response consistency, and compression cannot reliably honor that contract. Introduction of a client perceiving a "Weak" ETag may not be expected by the server, and the server may reject responses because the ETag is not a "Strong" ETag when we respond or interact with a resource. As a result, requests no longer offer oppurtunistic compression of responses as an acceptable possibility, which overall has minimal impact, espescially when compared to the value of consistent BMC behavior and interaction. * Fixes an issue in the sushy connector object handling where a Sushy client utilizing "basic" authentication would not raise an AccessError exception once the credentials stopped working. We now explicitly check to see if "basic" authentication is in use, and raise the exception if an AccessError is encountered. * Alters eTag handling in PATCH requests: First, the original eTag is used. In case of a failure, if the eTag provided was weak, it is converted to a strong format by removing the weak prefix. If this approach is not applicable or fails, the final attempt is made omitting the eTag entirely. By taking this approach, no workarounds are applied if BMC is handling eTags as expected and in case of failures, known workarounds are attempted, improving overall resiliency. Changes in sushy 3.12.2..3.12.3 ------------------------------- 16cb80f Improve resiliency of eTag handling 26d9e4f Capture requests errors 021e017 Do not send compression as acceptable encoding b32ab9b Handle mismatch between registry Identity and the way it's referred to eb80989 Handle AccessError with Basic Auth instead of "reauth" Diffstat (except docs and test files) ------------------------------------- ...neral-requests-exceptions-b5fd706597708fb6.yaml | 8 + ...ffer-compression-encoding-884ca8a7458cb096.yaml | 16 ++ ...-basic-auth-access-errors-393b368b31f5cad2.yaml | 9 + .../notes/releasenote-d7138d1e1d414632.yaml | 10 + sushy/auth.py | 1 + sushy/connector.py | 120 ++++++++++- sushy/main.py | 1 - sushy/resources/base.py | 17 +- sushy/resources/system/bios.py | 3 +- sushy/resources/system/system.py | 5 +- .../unit/resources/manager/test_virtual_media.py | 4 +- 14 files changed, 408 insertions(+), 44 deletions(-)

1 0

manila 15.1.0 (zed)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We joyfully announce the release of: manila 15.1.0: Shared Storage for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 15.1.0 ^^^^^^ Bug Fixes * The GET /shares/{share_id} API now responds with HTTP 404 (Not Found) for inaccessible resources. See bug 1901210 (https://launchpad.net/bugs/1901210) for further information. * The CephFS NFS driver, specifically the NFSProtocolHelper implementation, was passing a wrong param to the Ceph backend and this was preventing users to add and deny access to the created shares. With this fix, users of the CephFS NFS NFSProtocolHelper can normally create and remove access to their shares. * Deployers now can specify "[glance]endpoint_type" configuration option (defaults to "publicURL" for backward compatibility) so that Manila uses Glance endpoint other than the public one (see bug 1991396 (https://bugs.launchpad.net/manila/+bug/1991396)). * Bug 1991776 (https://launchpad.net/bugs/1991776) was fixed within the CephFS driver. The driver no longer emits repeated warnings concerning supported IP versions when using the NFS protocol. * Some neutron integrations might not have the network type, so the neutron network plugin is fixed by taking that scenario in consideration. Launchpad bug #1987315 (https://bugs.launchpad.ne/manila/+bug/1987315) for more details. Changes in manila 15.0.0..15.1.0 -------------------------------- 5f9c037a Set configured_ip_versions fact in cephfs driver cfdb3c43 Macrosan driver: some improvements about variables and syntax df2cc333 Fix neutron plugin get network_type 44088139 Allow setting endpoint_type for glance 6a3f9f06 Rename 'nfs_cluster_id' to 'cluster_id' in the NFSProtocolHelper 4fd8e223 [CI][stable/zed] pin test plugin in grenade skip-level 078bc430 [RBAC] Return 404 if share is inaccessible dea2503c Update TOX_CONSTRAINTS_FILE for stable/zed 18fa883b Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manila/image/glance.py | 4 ++ manila/network/neutron/neutron_network_plugin.py | 6 +-- manila/share/api.py | 5 +- manila/share/drivers/cephfs/driver.py | 10 ++-- manila/share/drivers/macrosan/macrosan_helper.py | 31 +++++------ manila/share/drivers/macrosan/macrosan_nas.py | 6 ++- manila/share/drivers/macrosan/rest_helper.py | 23 +++++--- .../share/drivers/macrosan/test_macrosan_nas.py | 61 +++++----------------- ...-add-configuration-option-282fa1026748c4f9.yaml | 5 ++ ...if-share-access-forbidden-02ca9a9552ad3e15.yaml | 6 +++ ...uster_id-param-cephfs-nfs-2ddc4ff98141b9b9.yaml | 9 ++++ ...-add-glance-endpoint-type-151777f255e423a3.yaml | 7 +++ ...fs-configured-ip-versions-fd87976fdb848e8c.yaml | 6 +++ ...n-plugin-invalid-key-dict-68c3d6bcbf2f19f0.yaml | 7 +++ tox.ini | 8 +-- zuul.d/grenade-jobs.yaml | 5 ++ 22 files changed, 143 insertions(+), 96 deletions(-)

1 0

sushy 4.3.1 (zed)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We joyfully announce the release of: sushy 4.3.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.3.1 ^^^^^ Bug Fixes * Alters eTag handling in PATCH requests: First, the original eTag is used. In case of a failure, if the eTag provided was weak, it is converted to a strong format by removing the weak prefix. If this approach is not applicable or fails, the final attempt is made omitting the eTag entirely. By taking this approach, no workarounds are applied if BMC is handling eTags as expected and in case of failures, known workarounds are attempted, improving overall resiliency. Changes in sushy 4.3.0..4.3.1 ----------------------------- 4ccbc97 Improve resiliency of eTag handling 77a1782 Update TOX_CONSTRAINTS_FILE for stable/zed a945fc5 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../notes/releasenote-d7138d1e1d414632.yaml | 10 ++ sushy/connector.py | 93 ++++++++++- sushy/resources/base.py | 17 +- sushy/resources/system/system.py | 5 +- .../unit/resources/manager/test_virtual_media.py | 4 +- tox.ini | 10 +- 9 files changed, 292 insertions(+), 44 deletions(-)

1 0

sushy 4.1.3 (yoga)
by no-reply＠openstack.org 07 Nov '22

07 Nov '22

We are stoked to announce the release of: sushy 4.1.3: Sushy is a small Python library to communicate with Redfish based systems This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.1.3 ^^^^^ Bug Fixes * Alters eTag handling in PATCH requests: First, the original eTag is used. In case of a failure, if the eTag provided was weak, it is converted to a strong format by removing the weak prefix. If this approach is not applicable or fails, the final attempt is made omitting the eTag entirely. By taking this approach, no workarounds are applied if BMC is handling eTags as expected and in case of failures, known workarounds are attempted, improving overall resiliency. Changes in sushy 4.1.2..4.1.3 ----------------------------- 1da4385 Improve resiliency of eTag handling Diffstat (except docs and test files) ------------------------------------- .../notes/releasenote-d7138d1e1d414632.yaml | 10 ++ sushy/connector.py | 93 ++++++++++- sushy/resources/base.py | 17 +- sushy/resources/system/system.py | 5 +- .../unit/resources/manager/test_virtual_media.py | 4 +- 7 files changed, 286 insertions(+), 39 deletions(-)

1 0

os_vif 2.4.1 (wallaby)
by no-reply＠openstack.org 04 Nov '22

04 Nov '22

We high-spiritedly announce the release of: os_vif 2.4.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. Changes in os_vif 2.4.0..2.4.1 ------------------------------ 6b2050b Update TOX_CONSTRAINTS_FILE for stable/wallaby b2ad320 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-)

1 0

sushy 3.7.6 (wallaby)
by no-reply＠openstack.org 04 Nov '22

04 Nov '22

We are pumped to announce the release of: sushy 3.7.6: Sushy is a small Python library to communicate with Redfish based systems This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.7.6 ^^^^^ Bug Fixes * Fixes potential cases where exceptions from the underlying "requests" library may be raised up through "sushy", resulting in client applications possibly not understanding that an error has occurred. The sushy "ConnectionError" exception is now returned upon any exception falling under "RequestException" from the "requests" library. * Fixes unreliable behavior with ETag interactions with some BMCs as opportunistic use of compressed responses may cause the BMC to change an ETag response to "Weak", which is to be expected as an ETag represents an absolute byte-by-byte response consistency, and compression cannot reliably honor that contract. Introduction of a client perceiving a "Weak" ETag may not be expected by the server, and the server may reject responses because the ETag is not a "Strong" ETag when we respond or interact with a resource. As a result, requests no longer offer oppurtunistic compression of responses as an acceptable possibility, which overall has minimal impact, espescially when compared to the value of consistent BMC behavior and interaction. * Fixes an issue in the sushy connector object handling where a Sushy client utilizing "basic" authentication would not raise an AccessError exception once the credentials stopped working. We now explicitly check to see if "basic" authentication is in use, and raise the exception if an AccessError is encountered. * Alters eTag handling in PATCH requests: First, the original eTag is used. In case of a failure, if the eTag provided was weak, it is converted to a strong format by removing the weak prefix. If this approach is not applicable or fails, the final attempt is made omitting the eTag entirely. By taking this approach, no workarounds are applied if BMC is handling eTags as expected and in case of failures, known workarounds are attempted, improving overall resiliency. Changes in sushy 3.7.5..3.7.6 ----------------------------- 9b3cf44 Improve resiliency of eTag handling a91e086 Capture requests errors cff4cc1 Do not send compression as acceptable encoding 73cbb51 Handle AccessError with Basic Auth instead of "reauth" Diffstat (except docs and test files) ------------------------------------- ...neral-requests-exceptions-b5fd706597708fb6.yaml | 8 + ...ffer-compression-encoding-884ca8a7458cb096.yaml | 16 ++ ...-basic-auth-access-errors-393b368b31f5cad2.yaml | 9 + .../notes/releasenote-d7138d1e1d414632.yaml | 10 + sushy/auth.py | 1 + sushy/connector.py | 120 ++++++++++- sushy/main.py | 1 - sushy/resources/base.py | 17 +- sushy/resources/system/system.py | 5 +- .../unit/resources/manager/test_virtual_media.py | 4 +- 12 files changed, 396 insertions(+), 41 deletions(-)

1 0

glance 22.1.1 (wallaby)
by no-reply＠openstack.org 04 Nov '22

04 Nov '22

We are glad to announce the release of: glance 22.1.1: OpenStack Image Service This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance 22.1.0..22.1.1 -------------------------------- 677c89c2 Fix set_property_atomic() boolean type casting b1d635c2 Fix failing copy_image flow init fdf7b80d [stable-only] Specify openstacksdk stable branch Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 ++++++++++ glance/db/sqlalchemy/api.py | 10 +++++----- 3 files changed, 17 insertions(+), 6 deletions(-)

1 0

heat-dashboard 5.0.1 (wallaby)
by no-reply＠openstack.org 04 Nov '22

04 Nov '22

We jubilantly announce the release of: heat-dashboard 5.0.1: Heat Management Dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 5.0.0..5.0.1 -------------------------------------- c845677 Set False to include_empty_option 904cf33 Drop lower-constraints.txt and its testing cd889e6 Update TOX_CONSTRAINTS_FILE for stable/wallaby 4d8ddb0 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - heat_dashboard/content/stacks/forms.py | 13 +-- lower-constraints.txt | 149 --------------------------------- requirements.txt | 4 + tox.ini | 10 +-- 6 files changed, 15 insertions(+), 164 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b737e47..4febe72 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

horizon 19.4.0 (wallaby)
by no-reply＠openstack.org 04 Nov '22

04 Nov '22

We joyfully announce the release of: horizon 19.4.0: OpenStack Dashboard This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 19.3.0..19.4.0 --------------------------------- beed6bf6f Fix success_url parameter issue for Edit Snapshot 374e8bbc9 zuul: Declare queue at top level 594511396 Fix flavor specification at instance overview page 5932bca8b Modified the image page to use CSS class f3e917ea8 Don't try and update port security if its not changing Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 2 +- .../dashboards/project/instances/views.py | 11 ++++++++-- .../dashboards/project/networks/ports/workflows.py | 8 ++++++++ .../dashboards/project/snapshots/views.py | 12 +---------- .../static/dashboard/scss/_util.scss | 3 +-- 8 files changed, 55 insertions(+), 23 deletions(-)

1 0

os-brick 4.3.4 (wallaby)
by no-reply＠openstack.org 03 Nov '22

03 Nov '22

We are gleeful to announce the release of: os-brick 4.3.4: OpenStack Cinder brick library for managing local volume attaches This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 4.3.4 ^^^^^ Bug Fixes * NVMe-oF connector bug #1964379 (https://bugs.launchpad.net/os- brick/+bug/1964379): Fixed using non LUKS v1 encrypted volumes, as once one of such volumes is disconnected from a host all successive NVMe-oF attachments would fail. * Bug #1967790 (https://bugs.launchpad.net/os-brick/+bug/1967790): Fixed encryptor's connect_volume returns and the symlink is pointing to the raw block device instead of to the decrypted device mapper device. * NVMe-oF connector bug #1928944 (https://bugs.launchpad.net/os- brick/+bug/1928944): Fixed not returning the right nqn value on "get_connector_properties" when "/etc/nvme/hostnqn" doesn't exist. Changes in os-brick 4.3.3..4.3.4 -------------------------------- cf69f92 Fix encryption symlink issues a5f53fd NVMe-oF: Return right nqn when missing hostnqn Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/fibre_channel.py | 6 +- os_brick/initiator/connectors/iscsi.py | 39 +-- os_brick/initiator/connectors/nvmeof.py | 23 +- os_brick/initiator/connectors/rbd.py | 3 + os_brick/initiator/connectors/scaleio.py | 3 + os_brick/initiator/connectors/storpool.py | 4 + os_brick/initiator/initiator_connector.py | 23 ++ os_brick/initiator/linuxscsi.py | 8 - os_brick/privileged/nvmeof.py | 66 +++++ os_brick/privileged/rootwrap.py | 17 ++ .../initiator/connectors/test_fibre_channel.py | 2 +- os_brick/utils.py | 171 +++++++++++++ .../notes/encryption-a642889a82ff9207.yaml | 12 + .../notes/nvme-hostnqn-c2611dc56729183b.yaml | 7 + 20 files changed, 757 insertions(+), 204 deletions(-)

1 0

cinder 18.2.1 (wallaby)
by no-reply＠openstack.org 03 Nov '22

03 Nov '22

We enthusiastically announce the release of: cinder 18.2.1: OpenStack Block Storage This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 18.2.1 ^^^^^^ Bug Fixes * Bug #1944577 (https://bugs.launchpad.net/cinder/+bug/1944577): Managing a volume to an encrypted type was never a good idea because there was no way to specify an encryption key ID so that the volume could be used. Requests to manage a volume to an encrypted volume type now result in an invalid request response. * Bug #1965847 (https://bugs.launchpad.net/cinder/+bug/1965847): Fixed issue where importing a backup record for a backup_id that currently existed had the unfortunate side effect of deleting the existing backup record. * Bug #1970768 (https://bugs.launchpad.net/cinder/+bug/1970768): Fixed status of temporary volumes when creating backups and reverting to a snapshot, preventing accidental manual deletion of those resources. * NFS driver bug #1946059 (https://bugs.launchpad.net/cinder/+bug/1946059): Fixed revert to snapshot operation. * NetApp ONTAP: Fix check QoS minimum support for SVM scoped account. See: Bug #1924798 (https://bugs.launchpad.net/cinder/+bug/1924798). Changes in cinder 18.2.0..18.2.1 -------------------------------- ebc27d371 NFS: Fix generic revert to snapshot flow 70164132d SF: Remove compat clone image code eb2720645 NetApp ONTAP: Fix check QoS min support for SVM account ba947e6d7 Prohibit volume manage to an encrypted volume type 741d0ce54 Don't destroy existing backup by mistake on import 9a473fdf0 Fix: nfs format info limitation 553264535 Prevent temporary volume from being deleted accidentally c29a6d087 Handle the case when tempest fails Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/volume-manage.inc | 2 + api-ref/source/v3/volume-manage.inc | 6 +- cinder/api/contrib/volume_manage.py | 3 + cinder/backup/api.py | 41 ++--- cinder/objects/volume.py | 17 ++ .../netapp/dataontap/client/test_client_cmode.py | 5 + .../volume/drivers/solidfire/test_solidfire.py | 32 ---- cinder/volume/api.py | 17 ++ cinder/volume/driver.py | 17 +- .../netapp/dataontap/client/client_cmode.py | 5 + cinder/volume/drivers/remotefs.py | 15 +- cinder/volume/drivers/solidfire.py | 33 ---- cinder/volume/flows/manager/create_volume.py | 11 +- cinder/volume/manager.py | 5 +- playbooks/tempest-and-cinderlib-run.yaml | 7 +- ...-manage-to-encrypted-type-b5b5d7f8360f037f.yaml | 8 + ...1965847-fix-backup-import-3b3ccdf740a13cff.yaml | 7 + ...g-1970768-temp-vol-delete-6586a13f08d7a5c1.yaml | 6 + .../fix-nfs-revert-to-snap-adc04204b3661d66.yaml | 6 + ...upport-svm-scoped-account-a8458445d459023c.yaml | 5 + 30 files changed, 462 insertions(+), 132 deletions(-)

1 0

tripleo-image-elements 15.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We contentedly announce the release of: tripleo-image-elements 15.0.0: Disk image builder elements for deploying OpenStack. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. 15.0.0 ^^^^^^ New Features * The seven LVM volumes in the overcloud-hardened-uefi-full image are now thinly provisioned, backed by a single pool. The initial boot growvols behaviour is now to grow the pool to the size of the disk and grow each thin provisioned volume so the capacity of the pool is filled but not over provisioned. This will allow temporary volumes to be created for backups during upgrades, and it will allow the operator to over-provision a volume which requires extra capacity. Changes in tripleo-image-elements 14.2.0..15.0.0 ------------------------------------------------ 275a56fc Add release note for thin provisioning 304e4d1f Switch to LVM thin provisioning 865bf26d Switch to MiB for all partition/volume sizes 44abab62 Delete unused elements e57e998b Add a separate /boot partition 31731e14 Use python job template for Zed 7fd9cbef Add element reset-bls-entries 0b33e111 Disable auto discovery b5b3160e Updates for virtualenv on debian bullseye bfbccfb8 Updated package maps for Debian Bullseye 918b802e remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- elements/delorean-repo/README.md | 18 --- elements/delorean-repo/element-deps | 1 - .../pre-install.d/01-delorean-clean-metadata | 5 - .../delorean-repo/pre-install.d/01-delorean-repo | 26 ----- elements/hosts/README.md | 5 - elements/hosts/element-deps | 2 - .../hosts/os-refresh-config/configure.d/51-hosts | 51 --------- elements/hosts/package-installs.yaml | 1 - elements/hosts/pkg-map | 7 -- elements/localboot/README.md | 21 ---- elements/localboot/cleanup.d/99-adjust-grub-conf | 49 --------- elements/localboot/element-deps | 2 - elements/localboot/install.d/99-boot-helpers | 38 ------- .../os-refresh-config/configure.d/01-bootable | 71 ------------ elements/ntp/README.md | 8 -- elements/ntp/element-deps | 2 - elements/ntp/install.d/50-ntp | 10 -- elements/ntp/os-apply-config/etc/ntp.conf | 32 ------ elements/ntp/os-refresh-config/configure.d/50-ntp | 29 ----- elements/ntp/svc-map | 3 - .../10-os-apply-config | 10 +- elements/os-apply-config/pkg-map | 7 ++ .../10-os-collect-config | 8 +- elements/os-collect-config/pkg-map | 7 ++ elements/os-net-config/README.md | 31 ------ elements/os-net-config/element-deps | 6 - .../environment.d/10-os-net-config-venv-dir.bash | 6 - .../50-os-net-config-source | 31 ------ .../etc/os-net-config/element_config.json | 3 - .../os-refresh-config/configure.d/20-os-net-config | 122 --------------------- elements/os-net-config/package-installs.yaml | 2 - elements/os-net-config/pkg-map | 10 -- .../10-os-refresh-config | 8 +- elements/os-refresh-config/pkg-map | 7 ++ elements/overcloud-dracut/README.rst | 7 -- elements/overcloud-dracut/element-deps | 2 - .../finalise.d/98-regenerate-initramfs | 13 --- elements/overcloud-dracut/package-installs.yaml | 2 - .../block-device-default.yaml | 49 +++++++-- .../post-install.d/80-enable-fstrim | 11 ++ elements/overcloud-partition/README.rst | 11 -- .../overcloud-partition/block-device-default.yaml | 95 ---------------- elements/overcloud-partition/element-deps | 1 - elements/overcloud-partition/element-provides | 1 - .../environment.d/15-block-device.bash | 10 -- .../post-install.d/99-enable-tmp-mount | 8 -- elements/reset-bls-entries/README.rst | 10 ++ .../init-scripts/systemd/reset-bls-entries.service | 13 +++ .../post-install.d/80-reset-bls-entries | 9 ++ .../static/usr/lib/systemd/reset-bls-entries | 14 +++ .../notes/boot-partition-6ad1ce7255b1715e.yaml | 9 ++ .../notes/thin-provisioning-74121cc4c86c3a07.yaml | 10 ++ releasenotes/source/conf.py | 16 +-- setup.py | 1 + zuul.d/layout.yaml | 2 +- 56 files changed, 179 insertions(+), 770 deletions(-)

1 0

validations-libs 1.8.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are delighted to announce the release of: validations-libs 1.8.0: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. 1.8.0 ^^^^^ Upgrade Notes * Python 3.6 & 3.7 support has been dropped. The minimum version of Python now supported is Python 3.8. Changes in validations-libs 1.7.1..1.8.0 ---------------------------------------- 2e7216b Remove log_path parameter so it can be only set by the constructor bb98dea Restoring logging facility and implementing default logger b4fed7a Updating development vagrant file to centos8 stream 791203c Add CI job for podified VF 3a3ea53 Removing superfluous imports and variable c602a08 Define and loop on config file section 55e0969 remove unicode prefix from code b191190 Constraining runtime selection and behavior to improve local testing stability 8a69f95 Removing Popen object return from utils.run_command_and_log 14a681b Using UBI9 as base for VF development containers b27ad5a Minor style violations fix 9bf191d Adding yamllint configuration file and fixing style violations 5cad282 Expanding parser actions to allow for multiple key-value pairs 9047bbb Python 3.6 support removal cb41912 Update python testing as per zed cycle testing runtime 4b58391 Skipping tests during API doc generation Diffstat (except docs and test files) ------------------------------------- .dockerignore | 2 +- .yamllint | 14 +++++ .zuul.yaml | 40 +++++++++++++ Dockerfile | 30 +++++----- Vagrantfile.centos | 4 +- container/validation | 46 ++++++++------- playbooks/post.yaml | 1 + playbooks/validations-libs-podified.yaml | 63 +++++++++++++++++++++ .../drop-python-3-6-and-3-7-7b2fb404f31475f8.yaml | 5 ++ releasenotes/source/conf.py | 12 ++-- setup.cfg | 4 +- skiplist-example.yaml | 1 + tox.ini | 2 +- validations_libs/cli/base.py | 22 ++++---- validations_libs/cli/common.py | 1 - validations_libs/cli/history.py | 1 - validations_libs/cli/parseractions.py | 37 ++++++++---- validations_libs/logger.py | 47 +++++++++++++++ .../callback_plugins/test_vf_validation_json.py | 8 +-- .../callback_plugins/test_vf_validation_stdout.py | 8 +-- validations_libs/utils.py | 39 ++++++------- validations_libs/validation_actions.py | 66 +++------------------- 34 files changed, 360 insertions(+), 266 deletions(-)

1 0

tripleo-validations 16.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We jubilantly announce the release of: tripleo-validations 16.0.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ For more details, please see below. Changes in tripleo-validations 15.2.0..16.0.0 --------------------------------------------- da989b5 Add validate_passwords_file preflight checks validation bc547f3 Refactoring node-health validation f9e2d6f Fixed incorrect formatting of the TV developer guide code blocks 688b7f7 Removing coverchange job definition dbb5cb2 Check the time synchronization and list the NTP servers chrony is trying to access 29ad8ab Triggering overcloud container CLI discovery task on allovercloud group ce05cec The tox.ini file edited to explicitly define the python runtime environment 477aaa9 Avoid failure when non DPDK instances present db07f1b oslo-config-validator: fix cinder's namespaces 7448701 Fix nits on check_manila_policy_file role 9fc742b remove unicode from code 9d56dc5 Implement validation for manila config f23a399 Run nova-svirt validation in nodes with nova_libvirt service f933d7f Fix to check the result of undercloud_debug validation 896dcbd Fix package metadata for pypi upload d5b5458 Removing undercloud-heat-purge-deleted from validation groups 2e8d7ef Add proxy validation for undercloud deployment. 48c52d9 Add libvirtd.socket to list of services 8e4958c Fix to get HOME environment in dhcp-provisioning validation 08e2e1a Deprecates tripleo-ansible-inventory and remove tripleo-validation scripts bf17c45 Correct the command that gets the PID of nova_libvirt_launcher.sh. 77f8033 Refactoring and improvement of check_ironic_boot_config tests 35094d4 [Master-Only] Aligning tripleo-validations with Zed release 3d73482 Update python testing as per zed cycle testing runtime c6ad39a Bumping flake8-typing-imports to version 1.12.0 ca9c032 Explicitly setting constraints on linters tox env b8c7d2a Update py36 to py38 tox jobs befe0cc Normalizing Tripleo Validations metadata 47996a8 Setting default inventory for multinode job to 0 length string f27d891 Disabling coverchange job for tripleo-validations fc889a2 Adding roles.galaxy to the gitignore e809c88 Change the way the task 'Validation errors' prints the output messages in order to be more readable. 80620c5 Changing extension of the collections requirement file to .yml f687689 Tests for the 'verify_profiles' module. Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .pre-commit-config.yaml | 2 +- ansible-collections-requirements.yml | 1 + ci/playbooks/coverchange.yaml | 106 --------- .../roles/role-undercloud_heat_purge_deleted.rst | 4 + .../roles/role-undercloud_proxy_validation.rst | 6 + playbooks/check-manila-policy-file.yaml | 17 ++ playbooks/check-ntp-reachability.yaml | 20 ++ playbooks/node-health.yaml | 5 +- playbooks/nova-svirt.yaml | 2 +- playbooks/undercloud-heat-purge-deleted.yaml | 8 +- playbooks/undercloud-proxy-validation.yaml | 22 ++ playbooks/validate-passwords-file.yaml | 23 ++ .../drop-python-3-6-and-3-7-9688231ce7089eb9.yaml | 5 + releasenotes/source/conf.py | 12 +- .../molecule/default/converge.yml | 64 ++++++ .../molecule/default/molecule.yml | 3 + .../molecule/default/prepare.yml | 18 ++ roles/check_manila_policy_file/tasks/main.yml | 25 +++ roles/check_manila_policy_file/vars/main.yml | 28 +++ .../tasks/main.yml | 6 +- .../tasks/validate_instance.yml | 16 +- roles/check_ntp_reachability/tasks/main.yml | 32 +++ roles/container_status/tasks/main.yaml | 2 +- .../dhcp_validations/tasks/dhcp-provisioning.yaml | 2 +- roles/node_health/tasks/main.yml | 71 +++--- roles/oslo_config_validator/defaults/main.yml | 1 + .../undercloud_debug/molecule/default/converge.yml | 4 +- roles/undercloud_debug/tasks/main.yml | 10 +- .../undercloud_disabled_services/defaults/main.yml | 3 +- roles/undercloud_heat_purge_deleted/vars/main.yaml | 7 +- .../undercloud_proxy_validation/defaults/main.yml | 1 + roles/undercloud_proxy_validation/tasks/main.yml | 11 + roles/undercloud_proxy_validation/vars/main.yaml | 15 ++ roles/validate_passwords_file/defaults/main.yaml | 3 + roles/validate_passwords_file/tasks/main.yaml | 28 +++ scripts/tripleo-ansible-inventory | 220 +----------------- scripts/tripleo-validation.py | 48 ---- setup.cfg | 13 +- tox.ini | 7 +- tripleo_validations/constants.py | 18 -- tripleo_validations/utils.py | 17 -- zuul.d/base.yaml | 15 -- zuul.d/layout.yaml | 10 +- zuul.d/molecule.yaml | 13 ++ 54 files changed, 976 insertions(+), 562 deletions(-)

1 0

tripleo-upgrade 10.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are ecstatic to announce the release of: tripleo-upgrade 10.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 9.0.0..10.0.0 ---------------------------------------- 9d1d50a Add a loop sleep for cinder create and delete. d9d3ce1 Removed tasks using unsupported NIC config script 1a704df Bump cirros verision to 0.6.0 in plugin.spec file f78db9f Make a workload_launch script more robust f3be13b Bump Cirros to 0.6.0 224d964 Ensure fencing is correctly handled during update 583bed0 Changed minversion in tox to 3.18.0. 93e1f8c Make sure patch reports issues and ignores test files fff4372 Add additional tags to update validations tasks 10eec1d Change a list of files for leapp fa5da60 Append item to custom_env_files of undercloud.conf 43b712d Monitor ceph update status with 'ceph orch upgrade status' cmd da06f27 Adjust ceph minor update section 1ae0411 Use already available ansible inventory 2a252cb Moves the shared zuul queue tripleo to the project level b9c5180 Fix validation inventory setup. 7c39685 Make config-heat and config-resource options comptatible with OOOQ f0a071b Install pkgs required to apply workarounds c003ac5 Nit cleanup for fast and furious upgrade tasks 1d854f6 Make sure create_workload tasks inherit the always tags. Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- defaults/main.yml | 7 +- infrared_plugin/main.yml | 13 ++++ infrared_plugin/plugin.spec | 2 +- molecule/default/prepare.yml | 14 +++- tasks/common/auxilary-facts.yaml | 36 +++++++++ tasks/common/build_extra_template.yaml | 14 ---- tasks/common/convert_nic_template.yaml | 33 -------- tasks/common/convert_nic_templates.yaml | 10 --- tasks/common/load_roles_from_inventory.yaml | 10 +-- .../rocky_to_stein_adjust_nic_templates.yaml | 41 ---------- tasks/common/skip_rhel_enforcement.yaml | 51 ++++++++---- tasks/common/undercloud_os_upgrade.yaml | 9 ++- tasks/common/validation_group_run.yaml | 2 - .../create-overcloud-ffu-scripts.yaml | 5 +- tasks/fast-forward-upgrade/main.yml | 6 +- tasks/main.yml | 16 +++- tasks/update/ceph_update_run.yml | 91 ++++++++++++++++++---- tasks/update/create-overcloud-update-scripts.yaml | 10 +-- tasks/update/disable_fencing.yaml | 23 ++++++ tasks/update/enable_fencing.yaml | 28 +++++++ tasks/update/main.yml | 17 +++- templates/ceph-update-run.sh.j2 | 64 --------------- .../overcloud_system_upgrade.sh.j2 | 3 - templates/workarounds.sh.j2 | 10 +-- templates/workload_launch.sh.j2 | 90 +++++++++++++++------ tox.ini | 6 +- zuul.d/layout.yaml | 2 +- 28 files changed, 354 insertions(+), 261 deletions(-)

1 0

validations-common 1.8.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are gleeful to announce the release of: validations-common 1.8.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. 1.8.0 ^^^^^ Upgrade Notes * Python 3.6 & 3.7 support has been dropped. The minimum version of Python now supported is Python 3.8. Changes in validations-common 1.7.1..1.8.0 ------------------------------------------ 69033b0 Disabling undercloud-tokenflush in catalogue tests f9b11a1 Retargetting log removal task b02d478 Adding CI task for clean up of existing validation logs 5e8cf58 Adding validations to the catalogue test 8480aa1 The tox.ini file edited to explicitly define the python runtime environment 8eae7f0 Moving verify-packages validation into 'pre-deployment' group 03b47c3 remove unicode prefix from code e73861f Setting variable override for check-cpu in catalogue tests a78141c Add the default filter so the validations have default fallback 5c34b1c Changing filter pattern on setup module call e7aca61 Enabling pep8 linting and fixing style violations 566dc28 New validation: verify_package e8a183e Restoring variables lost in merge commit d7362dd Update python testing as per zed cycle testing runtime fd47e7f Bumping flake8-typing-imports to version 1.12.0 64f1e01 Python 3.6 support removal 1ebe686 Adjustment of the validations-common contribution docs Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- .zuul.yaml | 1 + CONTRIBUTING.rst | 30 ++++++++-- .../drop-python-3-6-and-3-7-be8da40ef6f158fa.yaml | 5 ++ releasenotes/source/conf.py | 14 ++--- roles/validations/files/catalog_vars_override.yaml | 3 + roles/validations/tasks/main.yaml | 18 +++++- roles/validations/tasks/run.yaml | 2 +- roles/validations/vars/main.yaml | 19 +++++-- setup.cfg | 4 +- tox.ini | 2 + validations_common/library/validations_read_ini.py | 1 - validations_common/playbooks/verify-package.yaml | 64 ++++++++++++++++++++++ .../roles/check_rsyslog/tasks/main.yaml | 3 +- validations_common/roles/verify_package/README.md | 37 +++++++++++++ .../roles/verify_package/defaults/main.yml | 4 ++ .../roles/verify_package/tasks/main.yml | 24 ++++++++ 19 files changed, 213 insertions(+), 33 deletions(-)

1 0

tripleo-operator-ansible 0.9.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are psyched to announce the release of: tripleo-operator-ansible 0.9.0: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.8.0..0.9.0 ------------------------------------------------ e4b4658 Switch to openstack-python3-zed-jobs job template fd8f962 update tripleo_operator_ansible VF hooks since CLI has changed 9b63299 Add implicit --yes to tripleo_ceph_user disable role a0036ea Disable auto discovery 31394ed Add --cluster to tripleo_ceph_deploy role Diffstat (except docs and test files) ------------------------------------- roles/tripleo_ceph_deploy/README.md | 1 + roles/tripleo_ceph_deploy/defaults/main.yml | 1 + roles/tripleo_ceph_deploy/tasks/main.yml | 2 ++ roles/tripleo_ceph_user/tasks/main.yml | 2 +- roles/tripleo_validator_run/README.md | 3 +-- roles/tripleo_validator_run/defaults/main.yml | 3 +-- roles/tripleo_validator_run/molecule/default/converge.yml | 13 ------------- roles/tripleo_validator_run/tasks/main.yml | 3 +-- setup.py | 1 + zuul.d/layout.yaml | 5 ++--- 10 files changed, 11 insertions(+), 23 deletions(-)

1 0

tripleo-puppet-elements 16.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are pumped to announce the release of: tripleo-puppet-elements 16.0.0: Puppet building rules for OpenStack images. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 15.2.0..16.0.0 ------------------------------------------------- c820a58 Stop installing net-snmp 207b457 Add nftables to the OC images 9f4007d Remove puppet-auditd f03ba68 Revert "Remove unused puppet-kmod" af810d5 Remove overcloud-agent element a9d7810 Add sbd and fence-agents-sbd to the list of fence agents c0be3d5 Use python job template for Zed 81eb7fb Remove unused puppet-ipaclient 4629a09 Remove unused puppet-datacat 0ce4f55 Remove unused puppet modules 64a7870 Remove unused reference to source repos 8a45ac3 Add common packages to the installed list 66f8964 Disable auto discovery d2b58ac Add fence-agents-compute to the list of installed rpms 6bc4e2c Remove modules to deploy Contrail components b3df2da Remove unused puppet modules fc26c50 Remove unused puppet-certmonger 998ea40 Remove unused puppet-keepalived c8d9178 Remove unused puppetlabs-vcsrepo 7f14422 Remove unused puppet-kmod 43440d2 Remove unused puppet-ceph 32c946e Remove support for Midonet plugin 46fd569 Remove unused puppet-ptp Diffstat (except docs and test files) ------------------------------------- elements/overcloud-agent/README.md | 122 --------------------- elements/overcloud-agent/element-deps | 1 - elements/overcloud-agent/package-installs.yaml | 2 - elements/overcloud-agent/pkg-map | 6 - .../install.d/package-installs-overcloud-base | 10 +- elements/overcloud-base/pkg-map | 1 - elements/overcloud-contrail-controller/README.md | 1 - .../overcloud-contrail-controller/element-deps | 3 - .../package-installs-overcloud-contrail-controller | 5 - elements/overcloud-contrail-controller/pkg-map | 9 -- elements/overcloud-controller/pkg-map | 4 +- elements/overcloud-network-midonet/README.md | 50 --------- elements/overcloud-network-midonet/element-deps | 5 - .../environment.d/02-midonet-envs.bash | 42 ------- .../extra-data.d/60-create-midonet-repositories | 46 -------- .../overcloud-network-midonet/extra-data.d/curator | 6 - .../extra-data.d/datastax | 6 - .../extra-data.d/elasticsearch | 6 - .../extra-data.d/logstash | 6 - .../extra-data.d/midonet-mem | 20 ---- .../extra-data.d/midonet-oss | 27 ----- .../extra-data.d/vbernat-llpd | 6 - .../install.d/00-midonet-manager | 11 -- .../install.d/74-rubygems | 3 - .../install.d/76-overcloud-network-midonet-source | 3 - .../package-installs-overcloud-network-midonet | 15 --- elements/overcloud-network-midonet/pkg-map | 19 ---- .../source-repository-overcloud-network-midonet | 16 --- .../02-puppet-modules-install-types.sh | 23 +--- .../source-repository-puppet-modules | 21 ---- setup.py | 1 + zuul.d/layout.yaml | 2 +- 32 files changed, 14 insertions(+), 484 deletions(-)

1 0

tripleo-heat-templates 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are satisfied to announce the release of: tripleo-heat-templates 17.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. Changes in tripleo-heat-templates 16.0.0..17.0.0 ------------------------------------------------ 88ca6a07c Drop templates to create Neutron resources b82f8b415 Do not use Neutron resource by default e6a77b424 Add missing description to some Octavia API parameters dbb0224e3 Remove old workaround to upgrade deployed server environment b6b38bce0 Use deployed server by default 818983437 Drop old templates OVN bridge mac addresses b073bf76a Support role specific MessageOfTheDay 00a774f4f Enable package installation by default ae2c68170 Replace subnet_info module with osc command fe0dbc5d2 Simplify cloud-init check and use command eb57ba758 Sets higher values for timeouts 4e178d8b5 Use step condition for all upgrade tasks 8a22c7170 Allow overriding corosync token_timeout 4939e19ee Replace dnf by tripleo_dnf_stream for undercloud upgrade 700ab1505 Add observability_data_only bool f3ac1f976 Manage CA certificates using ansible 665391f63 Enable allowerasing in undercloud upgrade from wallaby 38dbd331c Run nova_wait_for_compute_service only for the default cell deployment f14174d35 Modify existing notes related to the firewall ae5fa916f Enable CAP_AUDIT_WRITE for some containers/steps 0074098f0 Cleanup iptables resources 6579d3c53 Use renamed task files for iscsid 3e0e7f200 iscsid: use puppet dir for configuration 7b57f966c Add new paramater "CeilometerEnableTenantDiscovery" e5ce31ac3 Drop environment for the removed upgrade converge step 2090ef676 Drop legacy networking resources 6e6300f1c Move update_tasks for tripleo-packages f1cf81eec Replace remaining usage of Net::SoftwareConfig 9cdf72876 Switch default firewall engine 90c52db21 Ensure container's image get updated if their name stay the same. 2d062714f Stop creating unused cinderv3/manilav2 keystone user 190420f1b Fix inconsistent <service>Workers fc93752ff Move releasenote to correct directory 52c806389 Designate: format listen addr properly when ipv6 7efe0063b Enable dns_domain_ports extension by default c8fba9b23 Eliminate unnecessary role looping in deploy-steps.j2 804414845 Allow all packet state for selected ironic services c9d04ce3c Remove unused conditions from undercloud post deployment 57e8fc590 Add release note for role specific ContainerImagePrepare 3e983806e Fix kill-script search string to match any "/libpod-" 0bb289c55 Switch cinder-backup default to active-active 607bfe855 Stop injecting deployment_type fact bc772b63f haproxy: Remove unused haproxy_docker hieradata key 31e96b9ce Deprecate snmp service b624324e6 new tht for Cinder NFS backend 3465111c5 Drop DeployedServer resources fea789f8e Avoid a pipe and grep call f1f224c1a Copy ssh_keys from mistral environment locally cc38db4c9 Filter excluded nodes from ansible delegates 8e9ade5f1 Convert httpd ironic_api configurations to new role ad6bc22f2 Add custom seccomp profile for ephemeral heat 7b55da1c7 Add note about Ipv6 provisioning with OVN on Undercloud 87622c6de Ceilometer: Ensure the ResellerAdmin role exists 3a929ba22 Remove the python3-openclient and add a new task. 3fda88c3a Fix tls-e CA cert declaration for FRR 3c5d5a12f Fix tls-e CA cert declaration for OVN 3b110bb1d support tripleo_etcd ansible role e4c5afeda Allow Undercloud to be deployed with Ml2 OVN 9fe769c51 Use python to template cell urls 18abde638 Add internal TLS CA file to group vars 5060be800 nova-ironic: Fix selinux denial when relabeling /var/lib/nova df78b6a3c Ensure /run/frr is present after (re)boot 67c4988a5 Fix Update ovn_controller. from external-update playbook 3e41f3636 Support actual hostnames in DeploymentServerBlacklist d6e203d57 Remove old network_data examples 96c9eb7a3 Correct label for /run/libvirt ea327964c Support role specific BannerText 5da1f2896 Neutron: Deprecate unmaintained features e53ba8c0e Replace remaining usage of /var/run 2a2fd0c47 Fix ignored EnableAodhExpirer 27e113902 RabbitMQ: Fix missing bind mount for .key file a10f0bb0e Enable post-copy by setting unprivileged_userfaultfd 90fe605cd Revert "Enable post-copy by setting unprivileged_userfaultfd" 2bd8eced8 Cinder: Remove clean up logic for old service entries d852952ec Remove unused NeutronCorePluginML2OVN service b6a7dd215 Undercloud install: Create clouds.yaml with mode 600 3e37e6647 Redis: replace hiera CLI 52c95b1d1 Do not change ownership recursive for Swift ddff14458 Add role specific settings for ovn_bgp_agent parameters 70509f5c3 Add parameter OVNEncapTos 931591d68 OVN: Fix wrong image used in external update tasks 2eef82ee5 Ironic: Fix incorrect type for integer values 63a08d229 Ironic: Require number for IronicIPXEPort 827236135 Revert "Disable [oslo_messaging_rabbit] heartbeat_in_pthread" 92ad83b1c RabbitMQ: Migrate environment/volumes definition c91eb1f17 Use NeutronInterfaceDriver parameter consistently 8646f99d6 Ironic: Remove incorrect override of api port a29eaddb0 Remove unneeded parameter tripleo_frr_ovn_bgp_agent_bridge_mappings 8e8efcfb3 Set /run/podman ACL before starting collectd 18824865c Fix nova_libvirt_max_queues_set conditions for nova-compute 3f55cbfbc Octavia Jobboard integration d3f4893eb Fix the wrong command to deploy undercloud 9545bb979 Swift: pass raw disk information directly to ansible aa424abf0 Remove argument to ssh-keygen for key size a8ce51561 Nova: Look up the host parameter from nova.conf 1bb1f5448 Fix wrong parameter type of KeystoneCronTrustFlush* 1067b0978 Fix merge of multiple firewall rules 21f0f5c7f Do not copy syslinux files 2a5262051 Remove redundant override of vhost tcp port d1fe2a989 Fix collectd-sensubility script output 3561a7caa Fix permissions for nova/libvirt VNC certs/keys e9c9478f3 Add 'ResellerAdmin' role to ceilometer user df26a8a2d Apache: Use only required modules fcabd6e69 Add auditd Service in multinode-containers.yaml 524242606 Allow for jinja2 templating of puppet_config 3d40e77a6 Allow for jinja2 templating of docker_config e03105852 Introduce ExternalCeph boolean 7f71cda2c Revert "Workaround for subscription-manager" 298463b81 Make sure sensubility has proper permission a547f1660 Disable haproxy for etcd based on CinderEtcdLocalConnect b12a1e5ce Use ansible group var to detect instance ha 819bfbe64 etcd: Use ETCD_NAME in etcd.conf 8a5e9e68d Use the new tripleo_auditd ansible role instead of puppet 21a631f13 Fix wrong parameter assignation cf4d4f881 Disable [oslo_messaging_rabbit] heartbeat_in_pthread bd8a82d42 Fix ovsdb-server for IPv6 listening addresses c7acaa28d Ensure mode is correct for the tmp directory dbf517f32 Remove resource template to deploy OVNDB at host 7494f7492 Ironic: Add parameter to tune workers 130180e99 Add ipv6 support in environments/deployed-network-environment.j2.yaml 63461f6b1 Set host_routes in environments/deployed-network-environment.j2.yaml 602de1af0 Fix net_cidr_map in environments/deployed-network-environment.j2.yaml 7d64dd990 Fix TRIPLEO_CONFIG_HASH generation a1bdbe857 Make libvirt-guests service work with deprecated monolithic libvirt 7dd0714e9 Neutron: Remove NSX plugin support ef5d2f45a Bind mount swtpm logs in libvirt virtqemud container 8592d0c71 Fix typos in log messages 6861fb324 Fix typos in comments and parameter descriptions dd6e88783 Change --start-at-task for plays using tripleo_free e728e8cc8 Use conditions with Host prep block tasks c9647167e Fix unit test discovery e5ea92a5f Redis: Switch to the new config file path d503ee5fc Heat: Present policy rules for all services 3dd4107b1 Support role specific ContainerImagePrepare c43d69c5d Enable post-copy by setting unprivileged_userfaultfd a9dc35e86 Fix conditions for libvirt_file_backed_memory_enabled cfd23004a Use tripleo_migration_target standalone ansible role 10e292613 Remove ctlplane-subnet from example file. 7b843830c Fix typo in code e2c0b8391 Set OVSDB Connection.probe_interval d0d98aa2f Default to OVN raft clustering 6c0410c74 Set force_config_drive only when OVNMetadata is disabled 4f791902a Do not override CephClientConfigVars in standalone scenarios 1a7998bfc Remove unused Config* parameters 46a985b2e Move rndc traffic onto bind network 0590dd4b9 Fix skip_list definition for yamllint ce3796aa6 Fix indirect reference to hieradata 98b48f595 [ML2 OVN] Adding DisableOvnDhcpForBaremetalPorts parameter 7761fed0c Add credentials cache for novajoin user fb4bbc5e0 Octavia: Present certificates to driver-agent 0747cff38 nova-migration-target: Re-enable sftp subsystem 6b5fdf008 Clean up cinder parameters from scenario 010 381893c0f Octavia: Mount driver-agent directories only when it is enabled 1742a8675 Fix bindep for EL9 platforms 7d76af34f Fix restarting cinder HA services on config change e7afc2274 Remove the docker-network env file. 317875903 Skip Enable cleanup service in check mode 7146d0f65 Give uefi_pxe_bootfile_name an accurate name 10a0adee0 Set the images_type parameter 4e7a44d59 Remove leftover of xinetd service support 658eaf38b Designate: Fix wrong parameter name to set mdns base port 5c272738c Configure OVN sb connections for the OVN provider c4c5d7b84 Manila: Fix missing healthcheck for api and share 6617f0e52 [ML2 OVN] Add OVNOvsdbProbeInterval parameter 8494a5abd Remove unreachable code 34a2e1ebc Remove parameters/resources for undercloud Nova 2922e8a71 Neutron: Generate wrapper scripts during config file generation 52b119f42 Add missing hidden tags for password/credential/private keys f03115cf2 Designate: support configuring non-ooo-deployed binds 8f147c914 Glance: Remove ineffective parameters ab35091c4 Remove logic to create flavor/keypair in undercloud Nova 6312d2b22 Remove unused OS::TripleO::SoftwareDeployment 3155f8c22 Remove leftover of N1kv driver support da28eef8a Allow configuring the base port of the mini DNS proxy endpoints 4832fbfbc Update sensubility's container health check 927d08066 Allow ceilometer compute agent to access /run/libvirt 9168ffa82 nova-migration-target: Simplify port configuration 2b64419f0 Deprecate redundant DockerNovaMigrationSshdPort f6ceb0bfa Add support for log offloading over TCP 91ee65408 [collectd] Remove processes plugin from default list 2188b4ff9 Make KeystoneChangePasswordUponFirstUse boolean 728d2ad43 Nova: Start nova-compute after its NFS backend is ready a38104c04 Present metrics_qdr to the haproxy service e1c7b5f6a Remove masquerade-networks-baremetal-puppet 2107a4cf8 Present ovn_dbs_manage_lb to the haproxy service d5a9d845e Add test-requirements.txt in tox-tht deps f3c76bcf0 Stop generating certificate requests for disabled networks 7c04fad72 Provide default values for ExtraConfig parameters 22952c7e1 Remove unused NovaPlacement service 66ba918c7 Deprecate CephPoolDefaultPgNum and CephPoolDefaultSize c62903f7f Fix commands for configure_ovn_north/south_db_server 645aba41a Remove duplicate entries from .gitignore 1710b9da2 Fixing typo in HAProxyBase for DCN 2e1b4ef0a Add merge strategy for ExtraConfig b9148e452 Fix undefined NeutronCorePluginML2Ansible 4cceeebc8 Galera: initial support for mariabackup SST 6c290124b Remove the Backup and Restore ReaR Heat templates 9be1ee2c5 Neutron: Migrate dvr parameters for ml2+ovs to ovs agent template be7f55bdf THT cleanup of scenario001/004/010 for Deployed Ceph a0809cbde Fix Cinder Dell EMC Powerflex backend template dfbccb0b9 Remove hieradata keys for non-bundle implementations 95a02d241 Fix Cinder Dell EMC SC backend template 226d5cb2a Comment out the empty "parameter_defaults" ba2e68501 Add SwiftSystemReader role when Rbac is enabled 340a8625c Fix typo in aodh-base template 78a51efb6 Designate: configure collocation IP on bind and neutron dns integration a1b7510b7 Adapt on puppet-rsyslog update 491fefe7c Fix ignored HeatConfigureDelegatedRoles da1e3e250 Simplify HostnameResolveNetwork in ServiceNetMap a817193ae Replace deprecated octavia::api:provider_drivers 8b39501ee Designate: Fix missing LoggingSource parameters 631e36c58 Manila: Fix missing LoggingSource parameters 8ef751c4e Fix incorrect Designate*LoggingSource 9c96fd5fe Add CephRbdTrashSchedulerEnable boolean 8297e0517 Fix rgw ssl_verify option key 30213bd0f Glance: Remove unnecessary override of [paste_deploy] config_file add91e79c nova-compute: Refactor hieradata generation 4243a1f46 Fix ignored NovaLibvirtMaxQueues e0835ccd1 Neutron: Set br-int as default integration bridge 65014b48c Keystone: Remove ineffective [ssl] enable_ssl b2639fa10 Moves the shared zuul queue tripleo to the project level 13e84c4f5 Swift: Do not enable the whole rsync::server class 376a8a46c Glance: Avoid simultaneous clean/pruner job dccd879ce Fix libvirt-guests handling post virt-guest-shutdown 86d4a348a Fix 'Ensure DNF modules have the right stream' 6db7153b3 Enable Horizon in CI 8592fc32a Ceilometer: Remove snmpd_* parameters db92d55b3 Revert "task-core basic framework" e5a071dbc ironic: Remove tasks for image migration 3290e6f9d ironic tftp: Do not format IPv6 address for bind_host ac5b16012 Octavia: Remove unnecessary neutronclient package 796f6a5dc etcd: fix service config to work with latest versions f04bec312 Render all_nodes_data in check mode 348546ea1 cinder-backup/volume: Remove unused parameters 47f642d01 Nova AZ: Remove unused AdminPassword 41801f614 Remove unused parameters from undercloud post deployment template 2a3732143 Remove leftover of the tripleo::firewall class 076c26c40 Enable use_multipath_for_image_xfer 8ee95985b Support for multiple Cinder NFS storage backends a1379a3cb nova-compute: Remove unused parameters/condition 9ed1c7b92 Restore missing SAN IP in etcd cert 2de73e762 Keystone: Remove unnecessary binds for admin endpoint 215d91865 Workaround for subscription-manager 185397553 Keystone: Get rid of unnecessary noop_resource abeb98a07 Remove remaining reference to removed services a40e5b3b6 Remove leftover of ntp service 668e3d624 Heat: Clean up leftover of CloudWatch API df58fe7bf Make NeutronEnableDVR parameter boolean eac874338 Start ceilometer-compute after libvirt is started f90f685d5 Deprecate support for networking-ansible f5963e236 Fix a syntax error in Horizon's Apache config 6168a9d4b Add new parameter in order to switch firewall engine e89088784 nova-migration-target: Restrict access to the core sshd f2b211267 Support for multiple Cinder Dell EMC VNX storage backends 97f223445 Support for multiple Cinder Dell EMC Unity storage backends 068ca82a4 Re enable DVR with ml2 ovn by default e28adc27d Fix release name in release note 0b9d3bf77 Remove redundant usage of hieradata 5a3f0f336 Remove deprecated ceph-base parameters c2a6a5664 Octavia: Migrate [health_manager] heartbeat_key to base 0f86aab78 Remove deprecated memcached::listen_ip e2b9b630d Remove deprecated parameter 5ddeac53c Set amphora timezone based on TimeZone setting d15794339 Fix service dependency on libvirt daemons e3408da15 Use tripleo_iscsid standalone ansible role 6f5a8e2d8 Use tripleo_kernel standalone role for upgrade_tasks 5139180f3 Revert "Revert "Use tripleo_keystone role"" e174fd82c Deprecate SshServerOptionsOverrides b1b989471 Manage masquerade via Ansible instead of Puppet 9f53e0ce5 Remove Docker support 8c3e0e901 Remove unused environment files for undercloud b7d34e299 Remove Keystone and Memcache from Undercloud abbd67f6f Use tripleo_ovn standalone role for external_deploy_tasks 6a55550a8 NetApp: Deprecate parameters for 7mode systems and E-Series systems 5e314d9f7 Fix run_after of certs_requests in modular libvirt 1da46d9c8 Restrict networks used by nova migration target de96a96f4 Remove redundant *_migration_ssh_inbound_addr 6c673528f Use python job template for Zed 9b06e0850 Add service OS::TripleO::Services::ManilaBackendPowerMax 3378b4c37 Fix deploy failure of keystone for undercloud aa1ad7a5d Revert "Use tripleo_keystone role" 9f2866a33 Octavia ryslog container image set incorrectly 7f6a4b438 Filter empty string in PingTestGatewayIPsMap yagl b2a35f13d Remove 'u' prefix dfcff68e3 Remove old interface from plan-sample 696fd60a7 Only specify nfsver for local Nova NFS backend 3001bc82e Undercloud: Remove iscsid service 5a3d998a2 Clean up removed services from undercloud environment e9bc8e2a0 Use tripleo_keystone role 406e4853d Remove unused libvirt_vnc_specific_ca_set condition 3eda1ad21 Drop removed tripleo::firewall parameters e64e47ebc Remove usage of tripleo::firewall d8d59c2cb Horizon: Fix missing firewall rule for ssl backend 4e1940f15 neutorn-ironic-agent: Use internal endpoint to query Neutron API eae3c2543 Remove implementation for Nuage integration d6e9f84fb Iptables rule for geneve traffic should match UNTRACKED state 8911d02f8 Add back FRR to Undercloud dee269d7a Horizon: Support Strict-Transport-Security header 280e4daaf Remove leftover of Undercloud-specific services a5d7c2f02 Add predictable IP's sample file f71723aa5 Remove legacy network-isolation env files d8604df61 Log source ips instead of controller ips in apache access log 55e7629ab Horizon: Enable client ip detection by X-Forwarded-For header 4e3d90094 Stop generating certificate requests for disabled networks e604adb95 Specify steps for some of the upgrade tasks 0da3db3b9 Install ansible.posix.debug stdout callback plugin 9f028a9a0 Pin ansible-runner <2.2.0 4611aef0b Set tls-verify false when using insecure reg aaa8ce1a6 Remove sidecar containers after SIGTERM is send to stop them 146360efa Don't cleanup catalog entries in check mode e0a338565 Disable crl file in non-pacemaker haproxy too ae900ab27 Fix manila policy override config d9fabc20e Add missing cert generation tasks to glance-api ce0686a55 Don't use hardcoded subnets in VipSubnetMap c20eeb3ac Add until to retry pulling the container images 4d91ad67f Add AdminPassword and KeystoneRegion stack outputs 3699a5689 Remove deprecated storage template and parameters a3dd02377 Define frontend firewall rules separately 6d65b784a Add DNS resolver forwarding support to Unbound ef16c081b Designate/unbound: fix typo in ctlplane subnet name d5e7fd5b1 Add IPA client service to Cell ctrlr role 32e1511b1 Drop all installed heat related parameters d24425f4a Remove non-existing worker parameters 6c26d3378 Remove label=disable for ironic related containers e94814f4a Set ownership of files in external_post_deploy_tasks b5cbc06da Remove parameter to run stunnel by systemd c11604c14 Remove ineffective ovn_remote_probe_interval 7acb4f490 Use Octavia's own default user_log_format value fef8dacd9 Octavia: Accept lists for Ciphers parameters 0e24d92e5 Swift: Get rid of xinetd configuration cdb32139b Globally disable service resource in containers ab2761541 Decouple ssh for nova migration from the host sshd 807f0e638 Heat: Remove non-existing puppet parameters ff83505e8 Replace hiera by lookup 6b2d6d9a0 Deprecate `NovaVGPUTypesDeviceAddressesMapping parameter 5c6283625 Update cinder keystone endpoints 52bf7ee05 Fix CinderDefaultVolumeType constraints 90cf6a6db Switch to stestr 73486ded4 Set rx permissions for all in /var/lib/config-data 7c3f9f1a8 Remove OvsDpdkDriverType 64c75f2f2 Remove unused freeipa_setup.sh 53d3af77f Disabling container validation when running redhat-subscription a8a24184d Nova: Disable instance usage audit by default 21c50b2e6 Move permissions from neutron to ovn-bgp abee6b765 libvirt: Fix invalid dependencies when virtlogd wrapper is enabled a5e081873 Expose new paramter `NovaMDEVTypes` ca4c49613 Cleanup usage of StackAction parameter 42506f635 Deprecate DnsServers THT parameter 0176edf25 Disable auto discovery f78ba117a Add nvidia firstboot yaml to tripleo-heat-template f41324444 Correct hieradata for neutron log rate limiting for ovn 6d0033c95 Fail at first boot if time can't be synced 936aa927d Remove StackAction/StackUpdateType 7fcaf62a8 Remove support for collectd-gnocchi 72a30f2df Ensure cell0 database uri is correct 17fadfbe0 memcached: Replace usage of hiera CLI 47ee7b2f1 OVN: Use puppet-ovn to set ovn-cms-options 86f56244a Fix missing roles for Octavia services Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 29 +- .gitignore | 5 +- .stestr.conf | 3 + .testr.conf | 4 - README.rst | 2 - baremetal-samples/baremetal_deployment.yaml | 131 ++++-- bindep.txt | 9 +- ci/README.rst | 2 +- ci/custom_ci_roles_data.yaml | 11 +- ci/environments/multinode-containers.yaml | 4 +- ci/environments/ovb-ha.yaml | 3 + .../scenario000-multinode-containers.yaml | 1 - ci/environments/scenario000-standalone.yaml | 16 +- .../scenario001-multinode-containers.yaml | 9 - ci/environments/scenario001-standalone.yaml | 23 +- ci/environments/scenario002-standalone.yaml | 1 - ci/environments/scenario003-standalone.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 14 +- .../scenario007-multinode-containers.yaml | 16 + ci/environments/scenario007-standalone.yaml | 2 + .../scenario010-multinode-containers.yaml | 4 +- ci/environments/scenario010-standalone.yaml | 19 +- ci/environments/scenario013-standalone.yaml | 1 + ci/scripts/freeipa_setup.sh | 119 ----- common/common-container-setup-tasks.yaml | 3 +- common/container-puppet.sh | 12 +- common/deploy-steps-playbooks-common.yaml | 2 - ...ep-0.j2.yaml => deploy-steps-tasks-step-0.yaml} | 13 +- common/deploy-steps-tasks-step-1.yaml | 2 +- common/deploy-steps.j2 | 181 +++----- common/services/deployment-bootstrap.yaml | 71 --- common/services/deployment-host-prep.yaml | 52 --- common/services/deployment-legacy-deploy.yaml | 31 -- common/services/deployment-network.yaml | 41 -- common/services/deployment-post-deploy.yaml | 42 -- common/services/deployment-state.yaml | 104 ----- common/services/role.role.j2.yaml | 50 ++- config-download-software.yaml | 8 +- config-download-structured.yaml | 8 +- .../monitoring/collectd_check_health.py | 122 +++--- .../nova_api_ensure_default_cells.py | 161 +++++++ .../nova_statedir_ownership.py | 2 +- .../pacemaker_mutex_restart_bundle.sh | 2 +- .../pacemaker_mutex_shutdown.sh | 4 +- container_config_scripts/pacemaker_wait_bundle.sh | 2 +- .../placement_wait_for_service.py | 1 - deployed-server/ctlplane-port.yaml | 47 -- deployed-server/deployed-server.yaml | 46 -- deployment/README.rst | 9 +- deployment/aodh/aodh-api-container-puppet.yaml | 18 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 2 +- .../aodh/aodh-listener-container-puppet.yaml | 2 +- .../aodh/aodh-notifier-container-puppet.yaml | 2 +- deployment/apache/apache-baremetal-ansible.j2.yaml | 211 +++++++++ deployment/apache/apache-baremetal-puppet.j2.yaml | 18 +- ...l-puppet.yaml => auditd-baremetal-ansible.yaml} | 17 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 110 ----- .../barbican/barbican-api-container-puppet.yaml | 27 +- .../ceilometer-agent-central-container-puppet.yaml | 10 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 12 +- deployment/cephadm/ceph-base.yaml | 181 +++----- deployment/cephadm/ceph-client.yaml | 2 + deployment/cephadm/ceph-grafana.yaml | 24 +- deployment/cephadm/ceph-mgr.yaml | 6 + deployment/cephadm/ceph-osd.yaml | 2 +- deployment/cephadm/ceph-rgw.yaml | 12 +- ...puppet.yaml => ca-certs-baremetal-ansible.yaml} | 12 +- deployment/cinder/cinder-api-container-puppet.yaml | 63 ++- .../cinder-backend-dellemc-powerflex-puppet.yaml | 2 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 2 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 5 +- .../cinder-backend-dellemc-unity-puppet.yaml | 11 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 11 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 154 ------- .../cinder/cinder-backend-netapp-puppet.yaml | 42 +- deployment/cinder/cinder-backend-nfs-puppet.yaml | 109 +++++ .../cinder/cinder-backend-nvmeof-puppet.yaml | 2 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 16 +- .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 75 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 16 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 9 + deployment/containers-common.yaml | 6 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 2 +- deployment/database/mysql-container-puppet.yaml | 4 + deployment/database/mysql-pacemaker-puppet.yaml | 67 +-- deployment/database/redis-base-puppet.yaml | 2 +- deployment/database/redis-container-puppet.yaml | 25 +- deployment/database/redis-pacemaker-puppet.yaml | 35 +- .../etcd-container-puppet.yaml | 32 +- .../neutron-bgpvpn-api-container-puppet.yaml | 0 .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 2 +- .../neutron-l2gw-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-l2gw-api-container-puppet.yaml | 0 ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 3 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 53 ++- .../snmp/snmp-baremetal-puppet.yaml | 5 + .../designate/designate-api-container-puppet.yaml | 18 +- deployment/designate/designate-base.yaml | 6 + deployment/designate/designate-bind-container.yaml | 110 ++++- .../designate-central-container-puppet.yaml | 53 ++- .../designate/designate-mdns-container-puppet.yaml | 45 +- .../designate-producer-container-puppet.yaml | 2 +- .../designate/designate-sink-container-puppet.yaml | 10 +- .../designate-worker-container-puppet.yaml | 24 +- deployment/etcd/etcd-container-ansible.yaml | 334 ++++++++++++++ deployment/experimental/README.rst | 2 +- deployment/frr/frr-container-ansible.yaml | 58 ++- deployment/glance/glance-api-container-puppet.yaml | 62 ++- .../glance/glance-api-edge-container-puppet.yaml | 19 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 16 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 13 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 40 +- .../haproxy/haproxy-edge-container-puppet.yaml | 12 +- .../haproxy-internal-tls-certmonger.j2.yaml | 27 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 35 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 16 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 36 -- deployment/heat/heat-api-container-puppet.yaml | 31 +- deployment/heat/heat-base-puppet.yaml | 11 +- deployment/heat/heat-engine-container-puppet.yaml | 15 +- .../heat/heat-ephemeral-container-ansible.yaml | 18 + deployment/horizon/horizon-container-puppet.yaml | 35 +- .../image-serve/image-serve-baremetal-ansible.yaml | 7 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 26 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 87 ++-- .../ironic/ironic-conductor-container-puppet.yaml | 62 +-- .../ironic/ironic-inspector-container-puppet.yaml | 21 +- .../ironic-neutron-agent-container-puppet.yaml | 1 + deployment/ironic/ironic-pxe-container-puppet.yaml | 29 +- deployment/iscsid/iscsid-container-puppet.yaml | 81 +--- deployment/kernel/kernel-baremetal-ansible.yaml | 20 +- .../kernel-boot-params-baremetal-ansible.yaml | 20 +- deployment/keystone/keystone-container-puppet.yaml | 248 ++++------- deployment/logging/files/keystone.yaml | 12 +- deployment/logging/rsyslog-container-puppet.yaml | 11 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 49 ++- deployment/manila/manila-backend-cephfs.yaml | 17 - deployment/manila/manila-backend-isilon.yaml | 13 - deployment/manila/manila-backend-vmax.yaml | 13 - deployment/manila/manila-backend-vnx.yaml | 13 - .../manila/manila-scheduler-container-puppet.yaml | 14 +- .../manila/manila-share-container-puppet.yaml | 14 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- ... => masquerade-networks-baremetal-ansible.yaml} | 16 +- .../memcached/memcached-container-puppet.yaml | 77 ++-- .../messaging/rpc-qdrouterd-container-puppet.yaml | 2 +- deployment/metrics/collectd-container-ansible.yaml | 12 +- deployment/metrics/collectd-container-puppet.yaml | 198 ++------- deployment/metrics/qdr-container-ansible.yaml | 71 +-- deployment/metrics/qdr-container-puppet.yaml | 6 +- .../neutron/derive_pci_passthrough_whitelist.py | 16 +- deployment/neutron/kill-script | 12 +- .../neutron-agents-ib-config-container-puppet.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 53 ++- deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-compute-plugin-nuage.yaml | 103 ----- .../neutron/neutron-controller-plugin-nuage.yaml | 72 ---- .../neutron/neutron-dhcp-container-puppet.yaml | 36 +- .../neutron/neutron-l3-container-puppet.yaml | 39 +- .../neutron/neutron-metadata-container-puppet.yaml | 14 +- .../neutron-ovs-agent-container-puppet.yaml | 38 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 114 ----- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 27 +- deployment/neutron/neutron-plugin-ml2.yaml | 6 +- .../neutron-plugin-nsx-container-puppet.yaml | 125 ------ .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 124 ++---- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 4 +- .../nova/nova-compute-common-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 198 +++++---- .../nova/nova-conductor-container-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-common.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 16 +- .../nova-migration-target-container-puppet.yaml | 154 +++---- .../nova-modular-libvirt-container-puppet.yaml | 83 ++-- .../nova/nova-scheduler-container-puppet.yaml | 3 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 106 ++--- .../octavia/octavia-api-container-puppet.yaml | 105 +++-- deployment/octavia/octavia-base.yaml | 224 ++++++---- .../octavia/octavia-deployment-config.j2.yaml | 13 +- .../octavia-health-manager-container-puppet.yaml | 23 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 28 +- .../octavia/providers/ovn-provider-config.yaml | 5 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 16 - .../ovn/ovn-controller-container-puppet.yaml | 110 +++-- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 49 ++- deployment/ovn/ovn-dbs-container-puppet.yaml | 63 ++- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 24 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 53 +-- .../pacemaker/clustercheck-container-puppet.yaml | 4 +- .../compute-instanceha-baremetal-puppet.yaml | 2 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 61 --- .../pacemaker/pacemaker-baremetal-puppet.yaml | 21 +- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 15 +- deployment/podman/podman-baremetal-ansible.yaml | 20 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 12 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 4 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 20 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 20 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 17 +- deployment/snmp/snmpd-disabled-puppet.yaml | 85 ++++ deployment/sshd/sshd-baremetal-ansible.yaml | 73 ++-- deployment/sshd/sshd-baremetal-puppet.yaml | 94 ---- deployment/swift/swift-proxy-container-puppet.yaml | 21 +- .../swift/swift-storage-container-puppet.yaml | 56 +-- deployment/time/ptp-baremetal-ansible.yaml | 2 +- .../timemaster/timemaster-baremetal-ansible.yaml | 4 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-firewall-baremetal-ansible.yaml | 59 +-- .../tripleo-packages-baremetal-puppet.yaml | 104 ++--- deployment/unbound/unbound-container-ansible.yaml | 135 +++--- deployment/undercloud/undercloud-upgrade.yaml | 18 +- environments/auditd.yaml | 77 ++-- environments/backup-and-restore/rear.yaml | 3 - environments/barbican-backend-pkcs11-atos.yaml | 4 +- environments/cinder-backup-active-passive.yaml | 2 + environments/cinder-backup.yaml | 4 +- environments/cinder-dellemc-unity-config.yaml | 14 + environments/cinder-dellemc-vnx-config.yaml | 14 + environments/cinder-netapp-config.yaml | 5 - environments/cinder-nfs-config.yaml | 21 + environments/cinder-volume-active-active.yaml | 2 +- environments/composable-roles/monolithic-ha.yaml | 13 - .../composable-roles/monolithic-nonha.yaml | 13 - environments/composable-roles/standalone.yaml | 25 -- environments/dcn-storage.yaml | 6 +- environments/dcn.yaml | 4 - environments/deployed-network-environment.j2.yaml | 19 +- .../deployed-server-deployed-neutron-ports.yaml | 1 - environments/deployed-server-environment.j2.yaml | 14 +- environments/deployed-server-noop-ctlplane.yaml | 4 +- environments/disable-heat.yaml | 1 - environments/disable-neutron.yaml | 5 - environments/docker-ha.yaml | 6 +- environments/docker-network.yaml | 2 - environments/enable-designate.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 1 + environments/enable-stf.yaml | 4 +- environments/external-ceph.yaml | 1 + environments/firewall.yaml | 4 +- environments/ha-redis.yaml | 2 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-converge.yaml | 9 - environments/lifecycle/upgrade-prepare.yaml | 3 +- environments/low-memory-usage.yaml | 2 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-isilon-config.yaml | 1 - environments/manila-vmax-config.yaml | 1 - environments/manila-vnx-config.yaml | 1 - environments/metrics/ceilometer-write-qdr.yaml | 1 + environments/metrics/collectd-read-rabbitmq.yaml | 8 +- environments/net-2-linux-bonds-with-vlans.j2.yaml | 4 - .../net-bond-with-vlans-no-external.j2.yaml | 17 +- environments/net-bond-with-vlans.j2.yaml | 4 - environments/net-dpdkbond-with-vlans.j2.yaml | 4 - environments/net-multiple-nics-vlans.j2.yaml | 4 - environments/net-multiple-nics.j2.yaml | 4 - environments/net-noop.j2.yaml | 5 +- .../net-single-nic-linux-bridge-with-vlans.j2.yaml | 4 - .../net-single-nic-with-vlans-no-external.j2.yaml | 3 - environments/net-single-nic-with-vlans.j2.yaml | 4 - environments/network-environment-v6-all.j2.yaml | 12 - environments/network-environment-v6.j2.yaml | 8 - environments/network-environment.j2.yaml | 8 - .../network-isolation-no-tunneling.j2.yaml | 44 -- environments/network-isolation-v6-all.j2.yaml | 50 --- environments/network-isolation-v6.j2.yaml | 57 --- environments/network-isolation.j2.yaml | 38 -- environments/neutron-bgpvpn-bagpipe.yaml | 4 +- environments/neutron-bgpvpn.yaml | 3 +- environments/neutron-l2gw.yaml | 4 +- environments/neutron-linuxbridge.yaml | 3 +- environments/neutron-ml2-ansible.yaml | 1 + environments/neutron-ml2-vpp.yaml | 7 +- environments/neutron-nsx.yaml | 17 - environments/neutron-nuage-config.yaml | 38 -- environments/nova-cell.yaml | 4 - environments/nova-nuage-config.yaml | 12 - environments/nsx-config.yaml | 22 - environments/podman-ha.yaml | 21 + environments/rhsm.yaml | 44 +- environments/services-baremetal/etcd.yaml | 2 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 3 +- .../services-baremetal/neutron-ovn-ha.yaml | 3 +- .../services-baremetal/undercloud-ceilometer.yaml | 8 - .../services-baremetal/undercloud-cinder.yaml | 4 - .../services-baremetal/undercloud-gnocchi.yaml | 5 - .../services-baremetal/undercloud-haproxy.yaml | 2 - environments/services/designate.yaml | 2 +- environments/services/etcd.yaml | 2 +- environments/services/masquerade-networks.yaml | 2 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 1 + environments/services/neutron-ovn-dvr-ha.yaml | 3 +- environments/services/neutron-ovn-ha.yaml | 3 +- environments/services/neutron-ovn-standalone.yaml | 3 +- environments/services/undercloud-cinder.yaml | 6 - .../services/undercloud-neutron-ovn-dhcp.yaml | 31 ++ environments/standalone/standalone-overcloud.yaml | 6 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/cinder-netapp-config.yaml | 28 -- environments/undercloud-enable-keystone.yaml | 12 - environments/undercloud-enable-nova.yaml | 34 -- environments/undercloud-enable-swift.yaml | 12 - environments/undercloud.yaml | 61 +-- environments/updates/README.md | 2 +- .../update-from-deployed-server-newton.yaml | 2 - .../post_deploy/undercloud_ctlplane_network.py | 8 +- extraconfig/post_deploy/undercloud_post.py | 65 +-- extraconfig/post_deploy/undercloud_post.sh | 2 +- extraconfig/post_deploy/undercloud_post.yaml | 37 +- firstboot/.gitkeep | 0 firstboot/conntectx3_streering.yaml | 31 -- firstboot/os-net-config-mappings.yaml | 51 --- firstboot/userdata_default.yaml | 20 - firstboot/userdata_dev_rsync.yaml | 49 --- firstboot/userdata_example.yaml | 59 --- firstboot/userdata_heat_admin.yaml | 35 -- firstboot/userdata_root_password.yaml | 38 -- firstboot/userdata_timesync.yaml | 98 ----- network/endpoints/endpoint_map.yaml | 478 ++------------------- network/network.j2 | 333 -------------- network/network.network.j2.yaml | 1 - network/network_v6.network.j2.yaml | 2 - network/ovn_mac_addr_net.yaml | 37 -- .../ports/external_resource_port.network.j2.yaml | 2 - .../external_resource_port_v6.network.j2.yaml | 3 - network/ports/from_service_v6.yaml | 8 +- network/ports/ovn_mac_addr_port.yaml | 48 --- network/ports/port.j2 | 153 ------- network/ports/port.network.j2.yaml | 1 - network/ports/port_v6.network.j2.yaml | 2 - network/service_net_map.j2.yaml | 2 +- network_data.yaml | 150 ------- network_data_dashboard.yaml | 128 ------ network_data_ganesha.yaml | 170 -------- network_data_routed.yaml | 211 --------- network_data_subnets_routed.yaml | 188 -------- overcloud-resource-registry-puppet.j2.yaml | 88 ++-- overcloud.j2.yaml | 189 +++----- plan-samples/plan-environment-derived-params.yaml | 38 +- puppet/role.role.j2.yaml | 137 +----- ...Unbound-forwarder-support-8f29e47d4275a798.yaml | 5 + ...swordUponFirstUse-boolean-a3b35fa933da1d6b.yaml | 5 + .../notes/OVNEncapTos-d3312e58600050b3.yaml | 7 + ...-name-discovery-parameter-a113a6de8a220408.yaml | 7 + ...avia-log-offload-protocol-dfc5d8387c3d83bc.yaml | 5 + ...cp-for-baremetal-disabled-4bc4e648da33f4da.yaml | 5 + ...-ovn-ovsdb-probe-interval-243e66290a72eb3c.yaml | 6 + ...-ovn-ovsdb-probe-interval-7ec6aa7f68b9a133.yaml | 8 + .../notes/auditd-to-ansible-f39bd119bf25320e.yaml | 13 + .../notes/bug-1984222-bd32dbd29741ad51.yaml | 4 + .../notes/ca-certs-ansible-7a06114f0571d7f3.yaml | 5 + ...le-dellemc_unity-backends-96c6d2764209e317.yaml | 7 + ...iple-dellemc_vnx-backends-930c8e9309a6ccf5.yaml | 7 + ...der-multiple-nfs-backends-a6b7a107be066596.yaml | 12 + .../cinder-v3-endpoints-498e00f96e77f3c6.yaml | 5 + ...kup_default_switch_to_A-A-4adb439183be78f0.yaml | 11 + ..._nfs_backend_new_template-21243ef33346ed9a.yaml | 9 + ...eanup-heat-api-cloudwatch-f12315e86c7f12d4.yaml | 5 + .../notes/cleanup-xinetd-e2f59fda914b32d9.yaml | 6 + ...-processes-plugin-default-1d07c9ddfde0c2f7.yaml | 6 + .../corosync_token_timeout-d674c873c505cfe6.yaml | 6 + ...fault-ovn-to-raft-cluster-9a1fb213d28d0650.yaml | 16 + .../deprecate-DnsServers-a65541c2dceced08.yaml | 15 + ...pesDeviceAddressesMapping-b4af9f1a48b66854.yaml | 6 + ...ptionsOverrides-parameter-40820bd943e20018.yaml | 5 + ..._nova_migration_sshd_port-b99c1ba0ac012276.yaml | 5 + ...recate-networking-ansible-11004424696a71a4.yaml | 5 + ...ate-neutron-host-services-93a7187fdebe0302.yaml | 9 + ...te-removed-netapp-systems-15c58d7e807ba33a.yaml | 18 + .../notes/deprecate-snmp-084d9e625f4f4e56.yaml | 5 + ...recate_ceph_pg_num_in_tht-91fe6303cc5ba07e.yaml | 13 + .../dnf-streams-interface-c7191173efb7b139.yaml | 8 + ...orts-extension-by-default-4a620563ff5954d6.yaml | 5 + ...atConfigureDelegatedRoles-d16ddb5eb037c4c8.yaml | 10 + ...-yaql-filter-empty-string-b024ce1bce9754ef.yaml | 11 + ...missing-roles-for-octavia-ca024308bf15f0cf.yaml | 4 + .../galera-sst-mariabackup-5a667eed1787353f.yaml | 17 + .../notes/horizon-hsts-43ac1c7b602a4381.yaml | 6 + .../notes/ironic-workers-e752707221a86c36.yaml | 5 + .../notes/libvirt_swtpm_logs-a3ba8c5dcbd53c8c.yaml | 5 + .../notes/mdev_types-84da20d1791afbd2.yaml | 4 + releasenotes/notes/nftables-13caf0261a170667.yaml | 21 + ...nova-instance_usage_audit-dfb17d89446352ae.yaml | 10 + ...e-NeutronCorePluginML2OVN-8641be21f069c1bd.yaml | 6 + .../remove-NovaPlacement-c33569f37b788eaf.yaml | 5 + .../notes/remove-docker-ef1f16744ff03979.yaml | 6 + ...emove-heat-installed-rear-feae3174fb303416.yaml | 6 + ...ove-iscsi-from-undercloud-b7424ffcdc9c02ea.yaml | 5 + .../remove-legacy-networking-e9b7f996722bb93b.yaml | 11 + .../remove-misspelt-param-eeeea6fab711932e.yaml | 5 + .../notes/remove-nsx-support-e118640eebf0ce23.yaml | 6 + .../remove-puppet-masquerade-28ae63cfa7f613d6.yaml | 9 + ...ve-stack-action-parameter-285044bb49ad1f5b.yaml | 5 + .../remove-uc-nova-params-edff776d30992aa3.yaml | 20 + ...move-unused-glance-params-ae24869fef23fa06.yaml | 6 + ...rage-templates-and-params-a2707785af9f617b.yaml | 13 + .../notes/role-image-prepare-602ee8bf86463a97.yaml | 6 + .../set-amphora-timezone-d62de55c993c5d70.yaml | 5 + ...ployment-server-blacklist-532221db0e7d2bef.yaml | 5 + ...ft-do-not-chown-recursive-1086879873cd9fa6.yaml | 7 + ...n-user-log-format-default-3e9bb40c678388fc.yaml | 6 + releasenotes/source/conf.py | 16 +- roles/BlockStorage.yaml | 2 - roles/CellController.yaml | 12 +- roles/CephStorage.yaml | 1 - roles/Compute.yaml | 4 - roles/ComputeAlt.yaml | 1 - roles/ComputeDVR.yaml | 1 - roles/ComputeHCI.yaml | 1 - roles/ComputeHCIOvsDpdk.yaml | 1 - roles/ComputeHCISriov.yaml | 2 - roles/ComputeInstanceHA.yaml | 1 - roles/ComputeLocalEphemeral.yaml | 1 - roles/ComputeOvsDpdk.yaml | 2 - roles/ComputeOvsDpdkRT.yaml | 1 - roles/ComputeOvsDpdkSriov.yaml | 1 - roles/ComputeOvsDpdkSriovRT.yaml | 1 - roles/ComputePPC64LE.yaml | 1 - roles/ComputeRBDEphemeral.yaml | 1 - roles/ComputeRealTime.yaml | 1 - roles/ComputeSriov.yaml | 1 - roles/ComputeSriovIB.yaml | 1 - roles/ComputeSriovRT.yaml | 1 - roles/ComputeVdpa.yaml | 1 - roles/Controller.yaml | 9 +- roles/ControllerAllNovaStandalone.yaml | 3 +- roles/ControllerNoCeph.yaml | 5 +- roles/ControllerNovaStandalone.yaml | 4 +- roles/ControllerOpenstack.yaml | 3 +- roles/ControllerSriov.yaml | 9 +- roles/ControllerStorageDashboard.yaml | 6 +- roles/ControllerStorageNfs.yaml | 6 +- roles/Database.yaml | 1 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 1 - roles/DistributedComputeHCIScaleOut.yaml | 1 - roles/DistributedComputeScaleOut.yaml | 1 - roles/HciCephAll.yaml | 1 - roles/HciCephFile.yaml | 1 - roles/HciCephMon.yaml | 1 - roles/HciCephObject.yaml | 1 - roles/IronicConductor.yaml | 1 - roles/Messaging.yaml | 1 - roles/Networker.yaml | 1 - roles/NetworkerSriov.yaml | 1 - roles/Novacontrol.yaml | 1 - roles/ObjectStorage.yaml | 4 - roles/README.rst | 2 +- roles/Standalone.yaml | 4 +- roles/Telemetry.yaml | 1 - roles/Undercloud.yaml | 10 +- roles_data.yaml | 20 +- roles_data_undercloud.yaml | 10 +- sample-env-generator/composable-roles.yaml | 53 --- sample-env-generator/dcn.yaml | 6 +- sample-env-generator/nova-cell.yaml | 4 - sample-env-generator/ssl.yaml | 2 +- sample-env-generator/standalone.yaml | 20 +- sample-env-generator/storage.yaml | 33 +- scripts/check-run-nova-compute | 38 +- scripts/undercloud-upgrade-ephemeral-heat.py | 37 +- setup.py | 1 + test-requirements.txt | 1 + tools/convert_heat_nic_config_to_ansible_j2.py | 4 +- tools/convert_nic_config.py | 4 +- tools/convert_policy_yaml_to_heat_template.py | 2 +- tools/merge-new-params-nic-config-script.py | 11 +- tools/process-templates.py | 10 +- tools/yaml-diff.py | 2 +- tools/yaml-validate.py | 34 +- tox.ini | 16 +- tripleo_heat_templates/environment_generator.py | 18 +- zuul.d/layout.yaml | 4 +- 502 files changed, 5040 insertions(+), 8121 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 90fd4a994..d59d447df 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ testtools>=2.2.0 # MIT +stestr>=2.0.0 # Apache-2.0

1 0

tripleo-common 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We high-spiritedly announce the release of: tripleo-common 17.0.0: A common library for TripleO workflows. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ For more details, please see below. Changes in tripleo-common 16.4.0..17.0.0 ---------------------------------------- 704cdb26 tripleo-mount-image: replace most lsblk calls with blkid e80399dc Add Python MySQL drivers to the horizon container 6ebdbdca Fix the roles symlink bb4b7beb Stop rendering legacy NetworkConfig 8aa57665 Add TRIPLEO_KOLLA_UMASK for custom umask settings e310a3ce Drop ANSIBLE_RUNNER_IMAGE from tcib_args 9ee02907 Drop collections/roles list installed from ansible-galaxy e375afe2 Fix config file path in redis healtcheck script 54a6bac5 Add an Ansible execution environment to our Build f47a6ffc Derive parameters clean up 10f2ef5e Revert "Populate /var/lib/ironic/tftpboot in ironic-pxe image build" c1b5df9d Do not install syslinux-tftpboot 83936eef Populate /var/www/cgi-bin/ironic/ with wsgi app 5cb35bd5 Add excluded group to inventory 0366b14d Fix condition for CHROOT, missing quotes 2e5d3662 Removing 'disable_constraints' key from role validation schema b14ee1ac overcloudrc: Replace OS_CLOUDNAME by OS_CLOUD 615cf9ff Update ovmf-amdsev from ovmf-cc to boot UEFI VMs bcfa3edc Populate /var/lib/ironic/tftpboot in ironic-pxe image build 0267a669 Drop ctlplane from role_networks ansible var c86bd65c Remove ceilometer-common from swift images d8d781f9 Update UNDERCLOUD_SERVICES list to reflect current undercloud services def93757 Remove sysfsutils from nova container f4b3ff3c Add chroot support to tripleo-mount-image e6b0a7bf Support standard partition type GUIDs 6334593e Support multiple mounts without explicit nbd devices b48d0d57 Clustercheck healthcheck with socat and ipv6 6939ec8b Fix ImageBuildManager initialization after BaseImageManager changes b3718ffb Remove unused ironic-inspector-client d407c857 Stop downgrading pacemaker 2ed0a337 Remove unused oslo.rootwrap bce186ab Fix missing healthcheck script for manila-api/share 040490be Remove unused heat-docker-agent b3c29e34 Stop generating KeystoneFernetKey[01] 60993493 Add dependency for container healthcheck script 529a5ac2 Moves the shared zuul queue tripleo to the project level 0b6ae01e Downgrade pacemaker, resource-agents - exact ver 253049a5 Add rsync-daemon to swift container bf875554 Downgrade pacemaker and resource-agents 6d8b07b7 Reduce memory consumption in Cinder services c3db9764 Remove unused oslo.vmware from Neutron image e081e00e Fix services associated with rsyslog container image f73c56ef Drop collectd-dbi from collectd base container 115a740e Install grub2-efi, shim in ironic-pxe image 47e5225e Remove unused urllib3 468a448c Move actual requirements from test-requirements.txt 486deab3 Remove unused libraries from requirements b36e292c Update ceph daemon image pull registry 933db5dc Use python job template for Zed 105a0c86 New dedicated user for Galera SST synchronization 659c8e5a Remove /v2 URL extension e3d55c7c Revert "task-core file generation" 4248a3b4 Add the dbus-tools package to manila-share image cf971eff Remove reference to Undercloud services 62d71bae Remove implementations for novajoin support 05c72a89 Remove overcloud-agent element from overcloud images 78e04160 Don't install common packages directly 675db94f Update the default namespace 11d0164e Drop undercloud_heat_plugins 852a2d8e Remove tripleo-build-containers-jobs template from zuul layout a3498ffb Remove custom subclass to re-enable software deployment by Heat 32a9a5cc Remove unused cirros_arch 6b3ba130 Adding testing on build_catalog 7b786c0c Add element reset-bls-entries to overcloud images ab69a2b3 Remove "deprecated" key in inventory 5c909793 build_catalog should loop deeper than one level 7a7bbcec Remove python-collectd-gnocchi from the image 0cf9c127 Generate database URI for ed25519 passwords 90fd3c41 Add _create_overcloudrc_from_outputs 29324699 Switch from grub2 to bootloader element for overcloud-full Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 6 +- container-images/kolla/base/start.sh | 1 + container-images/kolla/base/uid_gid_manage.sh | 1 - .../kolla/tripleo-ansible-ee/requirements.yaml | 19 +++ container-images/kolla/tripleo-ansible-ee/settings | 26 +++ .../kolla/tripleo-ansible-ee/tripleo_entrypoint.sh | 7 + container-images/tcib/base/collectd/collectd.yaml | 4 +- .../cinder-base/cinder-backup/cinder-backup.yaml | 4 + .../cinder-base/cinder-volume/cinder-volume.yaml | 4 + container-images/tcib/base/os/horizon/horizon.yaml | 1 + .../base/os/ironic-base/ironic-api/ironic-api.yaml | 1 + .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 4 +- .../base/os/manila-base/manila-api/manila-api.yaml | 1 + .../os/manila-base/manila-share/manila-share.yaml | 2 + .../tcib/base/os/neutron-base/neutron-base.yaml | 1 - .../tcib/base/os/nova-base/nova-api/nova-api.yaml | 1 - .../nova-compute-ironic/nova-compute-ironic.yaml | 1 - .../os/nova-base/nova-compute/nova-compute.yaml | 4 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 2 + .../tcib/base/os/novajoin-base/novajoin-base.yaml | 6 - .../novajoin-notifier/novajoin-notifier.yaml | 2 - .../novajoin-server/novajoin-server.yaml | 2 - .../tcib/base/os/swift-base/swift-base.yaml | 1 + .../swift-proxy-server/swift-proxy-server.yaml | 1 - .../tripleo-ansible-ee/tripleo-ansible-ee.yaml | 47 ++++++ container-images/tripleo_containers.yaml | 180 ++++++++++----------- container-images/tripleo_containers.yaml.j2 | 46 +----- healthcheck/manila-api | 6 + healthcheck/manila-share | 14 ++ healthcheck/mariadb | 3 + healthcheck/redis | 6 +- heat_docker_agent/Dockerfile | 18 --- heat_docker_agent/configure_container.sh | 104 ------------ ...oud-hardened-images-uefi-python3-rt-kernel.yaml | 9 +- .../overcloud-hardened-images-uefi-python3.yaml | 10 +- image-yaml/overcloud-images-ceph.yaml | 13 +- image-yaml/overcloud-images-python3.yaml | 13 +- image-yaml/overcloud-realtime-compute-python3.yaml | 12 +- ...reduce-memory-consumption-d7effb68ab63b8c5.yaml | 5 + requirements.txt | 10 +- scripts/tripleo-mount-image | 110 +++++++++++-- setup.cfg | 5 +- test-requirements.txt | 2 - tripleo_common/arch.py | 5 - tripleo_common/constants.py | 9 +- tripleo_common/exception.py | 4 - tripleo_common/image/build.py | 2 +- tripleo_common/image/image_export.py | 17 +- tripleo_common/image/image_uploader.py | 4 +- tripleo_common/inventory.py | 88 +++------- .../inventory_data/undercloud_dynamic_merged.json | 7 +- .../inventory_data/undercloud_static_merged.yaml | 3 +- tripleo_common/utils/config.py | 119 +------------- tripleo_common/utils/overcloudrc.py | 26 ++- tripleo_common/utils/parameters.py | 30 ---- tripleo_common/utils/passwords.py | 24 ++- tripleo_common/utils/roles.py | 1 - undercloud_heat_plugins/__init__.py | 0 undercloud_heat_plugins/config.py | 30 ---- undercloud_heat_plugins/immutable_resources.py | 61 ------- undercloud_heat_plugins/server_update_allowed.py | 36 ----- zuul.d/cross-jobs.yaml | 6 +- zuul.d/layout.yaml | 16 +- 85 files changed, 565 insertions(+), 1031 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 761984e8..e2dc3598 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +9,0 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.rootwrap>=5.8.0 # Apache-2.0 @@ -12 +10,0 @@ oslo.utils>=3.33.0 # Apache-2.0 -python-glanceclient>=2.8.0 # Apache-2.0 @@ -15 +12,0 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -python-ironic-inspector-client>=1.5.0 # Apache-2.0 @@ -17 +13,0 @@ Jinja2>=2.10 # BSD License (3 clause) -python-novaclient>=9.1.0 # Apache-2.0 @@ -19 +14,0 @@ passlib>=1.7.0 # BSD -netifaces>=0.10.4 # MIT @@ -21,3 +15,0 @@ cryptography>=3.4.7 # BSD/Apache-2.0 -netaddr>=0.7.18 # BSD -python-keystoneclient>=3.8.0 # Apache-2.0 -keystoneauth1>=3.4.0 # Apache-2.0 @@ -26 +17,0 @@ metalsmith>=0.13.0 # Apache-2.0 -jsonschema>=3.2.0 # MIT @@ -27,0 +19 @@ requests>=2.18.0,!=2.20.0 # Apache-2.0 +PyYAML>=3.12 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 58a87542..9ebc578e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,2 +10,0 @@ testtools>=2.2.0 # MIT -PyYAML>=3.12 # MIT -urllib3>=1.21.1 # MIT

1 0

ansible-role-redhat-subscription 1.3.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are thrilled to announce the release of: ansible-role-redhat-subscription 1.3.0: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.2.0..1.3.0 -------------------------------------------------------- eefe501 Update rhsm_disable_container_check default value f703e5c Add missing environment for a couple of tasks 9d1a918 Add trailing slash to status URI 2c4cd36 fix typo 4646e4e Retry polling the satellite endpoint on failure 41b5d0b Update the satellite task file for version checks da50e0e Fix Ansible Lint Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 +- README.md | 2 +- ansible-requirements.txt | 2 +- defaults/main.yml | 14 +++--- library/rhsm_repository_conf.py | 8 +-- meta/main.yml | 13 ++--- setup.py | 1 + tasks/portal.yml | 6 ++- tasks/register.yml | 2 +- tasks/satellite-5.yml | 2 +- tasks/satellite-6.yml | 6 ++- tasks/satellite.yml | 105 +++++++++++++++++++++++++--------------- tasks/unregister.yml | 2 +- tox.ini | 2 +- vars/main.yml | 2 +- 17 files changed, 100 insertions(+), 73 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index 7507f3e..f5398ac 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -5 +5 @@ -ansible<2.10 +ansible-core<2.12

1 0

python-tripleoclient 19.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are chuffed to announce the release of: python-tripleoclient 19.0.0: TripleO client The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. Changes in python-tripleoclient 18.0.0..19.0.0 ---------------------------------------------- bcafdf71 Fix overcloud cell export paths e7da2e54 Undercloud: Deprecate unused scheduler_max_attempts 8129d94a Only use rpm installed collections/modules 66156f73 Execute undercloud preflight validations via VF binary 1846d14a overcloud-deploy: Only support pre-provisioned node 0167db88 Don't try stack delete with overcloud delete 17bf3ed4 Fix password file path message 832812a1 Remove leftover of SwiftFetchDir(Get|Put)Tempurl 8d5d3a93 Remove logic to detect legacy network resources cd940dbc Add timeout arg to node delete commands 0d3e3b92 Replace some unnecessary os.path.join() 6916f55c get_overcloud_hosts() should not return a list with empty strings 2ed0a66a Undercloud: Remove deprecated/removed IPv6 parameters 5ad2be71 Undercloud: Deprecate [DEFAULT] enable_swift_encryption 4c4612e8 Use custom seccomp profile for ephemeral heat pod 296b46bb Look for keys in the new default work dir 0621d8fe Change git user for config-download af566e52 admin authorize: Deprecate ineffective --overcloud-ssh-network 45b1091d Use hostNetwork for ephemeral heat pod a197198b Use host network for db_sync e5e84503 Derive parameters clean up 936b46c8 Run unprovision before provision 96683fd4 remove unicode prefix from code fff37dfe Do not allow uc upgrade when network plugin changes 54898e34 Set working cs9 defaults for image build 32888b9c standalone heat: Retry removing the install directory a28cbdcb Skip CephIngress daemon deploy 76c11a56 Remove migration from undercloud-passwords.conf 43c2810d Add cell export to overcloud deploy 0479d729 Support role specific ContainerImagePrepare ec8e1342 Heat Launcher - bracket IPv6 in db connection URI 8b71cb9b Patch ensure_run_as_normal_user() in unit tests 88ec22f6 Removing Popen object return from utils.run_command_and_log 1983d7d4 Removing TODO lacking sufficient description f3a34b96 Stop mocking workflow client 8038c0d9 Use realpath for checking directories 29fe3996 Ensure tripleo_ceph_client_vars is set consistently 7d9de320 Generate inventory with default ansible_ssh_user 9909d9b1 Support remove and revert actions 40abe6c7 Stop using heat-admin as ansible_ssh_user ca80181f Return Undercloud role instead of Controller 5900a1eb Extract provisioned nodes - use ironic node uuid da75b98b Stop deploying Ceph during the overcloud deployment 269fa30b ExtractProvisionNode adding resource_class if its possible 43bfc1fb Default working_dir for overcloud credential command 019441f1 Fix upgrade prepare 6d18e27d Fix upgrade/external_update/external_upgrade 5ee23cf8 Limit standalone ceph-admin user creation to a single host 2011e796 Standalone - ovn_bridge_mac comma_delimited_list c9218859 Do not end ceph_namespace with a slash 8afa8a03 Set owner/permissions on ~/.tripleo for tripleo deploy 5a6c8fc0 Refactor deploy validations for ephemeral heat 076365f3 Drop unnecessary mocks in tests cb700f43 Add HostsEntry to saved stack output f931e73c Add handling for roles and networks to answers fda32334 Fall back to alt path for ceph client data during export df5e6158 Remove overcloud config download command 7ac73357 Add release note for dropping upgrade converge ad48f5c4 Fix unittests for py310 c11228c5 Update cell export for ephemeral heat e708734e Remove duplicate check from tripleo-deploy cbbe7cdd Only export overcloud for --stack-only/full deploy d116a5af Ignore unreachable errors for scale playbook 9b03cf1d Fix unused DEFAULT_CONTAINER_TAG a769aa76 Undercloud: Deprecate options for removed services adede336 Remove unused passlib from requirements 56003d30 Add GlobalConfig to saved stack outputs a266374a Replace simplejson by built-in json 7f7f423a Remove leftover of minion 80290ad9 Enable snapshots on the CLI d8dabbc6 Revert "Remove masquerade-networks-baremetal-puppet inclusion" e689a4e3 overcloud delete - bm_deploy - delete ports 65f36df8 Use node UUID for bridge_mapping agent check 7e380a52 Use python job template for Zed a12fef6e Add ip_version to CtlplaneNetworkAttributes b56a6035 update output path cli switch d1a4ce70 Add warning for duplicate parameters fb7c8f5c Ensure each host is type string 6442450a Replace non-inclusive language 81c0b75b Remove ineffective parameter from standalone/ephemeral heat.conf d424f022 Fix typo in heat.conf for standalone heat 0e632c6b Remove unused object storage client implementation 3313a393 Call the right process_daemon function 1a590237 Mocking utils.check_deploy_backups in OvercloudDeploy tests 53030b9e Set yaql limit iterators to 10000 for ephemeral Heat f36945ad Fix typo "conatiner" -> "container" a59dde9a Remove tripleo-build-containers-jobs template from zuul layout 6a9db445 Improved test coverage for tripleo validator 8511e8e2 Remove upgrade converge ea8795d0 Revert "Setting default inventory path for VF interface with ooo client." cb6cf7b1 bnr - overcloud restore - fix error in the help description for the stack parameter 97a155ea Remove masquerade-networks-baremetal-puppet inclusion d58fa71b Create Ceph pools/cephx keys before overcloud deploy de26c288 Fix node delete for unprovision confirmation eb3d238d Set deployment_status during config generation 60d17b2f Remove --heat-type=installed support 2843b447 Consolidate ephemeral Heat interaction to single try/finally d7af2f54 Remove Heat API dependency for overcloud export 035827f3 Update overcloud credentials to use ephemeral Heat 9bf5fc90 Revert "use more defaults and simplify our options" 30556b53 Remove use of the six library 2231afdb Exclude empty string from no_proxy ddb3525b Update the default namespace 051f7e4d use more defaults and simplify our options c48d0fce Change validations log_path parameter 246d1e6f Allow jinja2 templates in preflight validation dfed2b19 Check for both config.yaml/config.json 1952f5a6 cephadm support for 'openstack overcloud export ceph' 3406b143 update env options to resolve deprecation warnings 3fe14056 Drop StackAction related hack from tripleo deploy ebad3a20 Move Ansible imports to correct UX Warnings ebe72e70 Allow user to override Ceph cluster name 8cbf9c23 Handle KeyboardInterrupt for ephemeral Heat cleanup f58fb3df Default tripleo launch heat heat-type to pod b32a3782 Check undercloud disk space during overcloud deploy 90ee1b3a node extract provisioned - warning no net_conf tpl e3c66d6a node export provisioned - get role_data from stack Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 - config-generator/minion.conf | 3 - ...oles-and-networks-answers-f23927c9075c7e99.yaml | 6 + ...ate-overcloud-ssh-network-a2a1bdf745c4796c.yaml | 5 + ...for-network-plugin-change-ba8459b171b8e37e.yaml | 7 + .../deprecate-stack-action-c3912259bfc9f509.yaml | 6 + ...e-static-inventory-option-4342b01aebaa4af8.yaml | 6 + ...uc-scheduler_max_attempts-9018c4635507940b.yaml | 6 + .../notes/inclusive_language-8d44129de1e8099a.yaml | 5 + ...loy-force-pre-provisioned-b50159643a31b3d2.yaml | 6 + ...e-config-download-command-1427d6609412e3e3.yaml | 7 + ...remove-derived-parameters-2be57032391b52e7.yaml | 5 + ...emove-heat-type-installed-6c7a90af45f57231.yaml | 5 + .../remove-upgrade-converge-12106c08ffd1be3b.yaml | 7 + .../notes/uc-unused-services-4270d05503ec2eba.yaml | 12 + releasenotes/source/conf.py | 14 +- requirements.txt | 2 - setup.cfg | 7 +- templates/ephemeral-heat/heat-pod.yaml.j2 | 7 +- templates/ephemeral-heat/heat.conf.j2 | 5 +- tripleoclient/command.py | 24 - tripleoclient/config/standalone.py | 14 + tripleoclient/config/undercloud.py | 7 + tripleoclient/constants.py | 42 +- tripleoclient/export.py | 112 +++-- tripleoclient/heat_launcher.py | 27 +- tripleoclient/plugin.py | 28 -- .../v1/overcloud_config/test_overcloud_config.py | 64 --- .../v1/overcloud_deploy/test_overcloud_deploy.py | 143 +++--- .../test_overcloud_external_update.py | 33 +- .../test_overcloud_external_upgrade.py | 27 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 61 +-- .../test_tripleo_container_image.py | 4 +- .../v2/overcloud_delete/test_overcloud_delete.py | 8 +- .../v2/overcloud_network/test_overcloud_network.py | 24 +- tripleoclient/utils.py | 512 +++++++++++++-------- tripleoclient/v1/overcloud_admin.py | 16 +- tripleoclient/v1/overcloud_backup.py | 216 +++++++-- tripleoclient/v1/overcloud_cell.py | 34 +- tripleoclient/v1/overcloud_config.py | 91 ---- tripleoclient/v1/overcloud_credentials.py | 39 +- tripleoclient/v1/overcloud_deploy.py | 306 +++++------- tripleoclient/v1/overcloud_export.py | 73 ++- tripleoclient/v1/overcloud_external_update.py | 84 ++-- tripleoclient/v1/overcloud_external_upgrade.py | 47 +- tripleoclient/v1/overcloud_node.py | 78 +++- tripleoclient/v1/overcloud_restore.py | 2 +- tripleoclient/v1/overcloud_update.py | 16 +- tripleoclient/v1/overcloud_upgrade.py | 82 +--- tripleoclient/v1/tripleo_deploy.py | 201 ++------ tripleoclient/v1/tripleo_launch_heat.py | 24 +- tripleoclient/v1/tripleo_validator.py | 8 +- tripleoclient/v1/undercloud.py | 6 +- tripleoclient/v1/undercloud_config.py | 56 +-- tripleoclient/v1/undercloud_preflight.py | 76 +-- tripleoclient/v2/overcloud_ceph.py | 140 +++++- tripleoclient/v2/overcloud_delete.py | 14 +- tripleoclient/v2/overcloud_node.py | 2 +- tripleoclient/v2/tripleo_container_image.py | 20 +- tripleoclient/workflows/deployment.py | 65 +-- tripleoclient/workflows/parameters.py | 83 ---- tripleoclient/workflows/tripleo_baremetal.py | 8 +- zuul.d/layout.yaml | 5 +- 89 files changed, 2295 insertions(+), 2375 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8befe347..c8f8d15b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -passlib>=1.7.0 # BSD @@ -12 +10,0 @@ python-openstackclient>=5.2.0 # Apache-2.0 -simplejson>=3.5.1 # MIT

1 0

puppet-pacemaker 1.5.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are ecstatic to announce the release of: puppet-pacemaker 1.5.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.4.0..1.5.0 ---------------------------------------- cf2cfcb Disable setuptools auto discovery 4332e62 Bump metadata for tripleo zed release 8b88f00 Replace hiera by lookup f003a53 Add 'Release Notes' in README Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 ++++++++----- Gemfile | 1 + README.md | 1 + manifests/resource/bundle.pp | 6 +++--- manifests/resource/filesystem.pp | 4 ++-- manifests/resource/ip.pp | 8 ++++---- manifests/resource/lsb.pp | 4 ++-- manifests/resource/ocf.pp | 6 +++--- manifests/resource/remote.pp | 6 +++--- manifests/resource/route.pp | 4 ++-- manifests/resource/service.pp | 4 ++-- manifests/resource/systemd.pp | 4 ++-- metadata.json | 13 +++++++------ setup.py | 1 + 14 files changed, 41 insertions(+), 34 deletions(-)

1 0

os-net-config 16.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We exuberantly announce the release of: os-net-config 16.0.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.2.0..16.0.0 --------------------------------------- 84f11c7 zuul: Declare queue at top level 3992b4d Drop support for Python 3.6 and 3.7 ce073e0 Fix formatting of release list 49bdd97 Use python job template for Zed d8c7e7e Add mac-size-table to all OVS bridges 88a4c88 Format json output properly 9ef2707 Fix failure in dpdk driver binding with VF during reboot Diffstat (except docs and test files) ------------------------------------- os_net_config/cli.py | 7 ++- os_net_config/common.py | 85 ++++++++++++++++++++++++++ os_net_config/impl_ifcfg.py | 3 + os_net_config/objects.py | 19 ++++-- os_net_config/sriov_config.py | 3 + os_net_config/utils.py | 106 ++++++++++----------------------- releasenotes/source/unreleased.rst | 2 +- setup.cfg | 5 +- zuul.d/layout.yaml | 6 +- 12 files changed, 191 insertions(+), 119 deletions(-)

1 0

puppet-tripleo 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are jazzed to announce the release of: puppet-tripleo 17.0.0: Puppet module for OpenStack TripleO The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. Changes in puppet-tripleo 16.1.0..17.0.0 ---------------------------------------- e40b7c4a Bump metadata for tripleo zed release 171814eb Allow passing aditional arguments to wsrep_provider_options f6e1a2ab fencing: Remove unused logic to detect deployment type 16992c6e MySQL Client: Remove logic for non-containerized deployment 424d9d1f haproxy: Remove logic for non-containerized haproxy service c4890a2b Fix typos in parameter descriptions, comments and tests 84277251 Pacemaker: Replace hiera by lookup (2) 0592be3a Allow disabling puppet tasks to configure apache/vhost acd16947 Remove implementation for Nuage integration b37e8f7c Neutron: Remove NSX plugin support 136f7a16 tls_proxy: Make sure port is an integer 6dc7cde6 RabbitMQ: Migrate environment/volumes definition bd447d60 mysql_bundle: Remove redundant override of mysqld options 83a83379 remove unicode from code 31b1caa1 HAProxy: Replace hiera by lookup (2) ae261bb7 Remove manifest for auditd service 8556df09 galera: make gcache recovery configurable ecda0e14 Add etcd3gw api_version to cinder backend_url b52cf6a0 Neutron: Replace hiera by lookup ae15e803 RabbitMQ: Simplify how to suppress error from pam_unix.so b58a5dcb Heat: Manage policy settings in heat-engine a8773e28 Drop support of CentOS 8 and RHEL 8 c71a7afe Ironic: Manage [disk_utils] parameters by puppet ad0b6a77 Get rid of noop service provider 555a09de Configure ovn sb connection for the ovn provider 280abc73 Revert "Fix live-migration with libvirt >= 6.8.0" 259e4476 Designate: add non-backend syntax for miniDNS haproxy support 49fe38d1 Remove unused resource to set up ceilometer DB b1097f19 Redis: Share the same base class 47905493 Octavia: Add unit tests for ovn clustered DB c759bb47 Remove puppet-tripleo/firewall a15c5f87 Designate: create proxy ports on external VIP to access miniDNS workers f593a9a0 Fix tls related grafana check in the cephadm context bb002c9d Change neutron backend's timeout in haproxy to 10 minutes e6a4118d Add support for ovn clustered DB in the octavia ovn-provider 4d1bda48 Neutron: Avoid undefined variables 587819dd Include a class to manage network_api:neutron parameters ae739fe4 Database: Replace hiera by lookup fbda281c HAProxy: Replace hiera by lookup (1) 7e85c0a6 HAProxy: Remove unused logic to reload haproxy service df7a42f7 Moves the shared zuul queue tripleo to the project level d7a46e1b Remove unused class for cell v2 setup 0d6db242 Support mariabackup as a galera SST method 2a4461a7 Support to configure cinder backend_defaults ef041632 Remove implementations for Docker support 491d9b42 Disable keystone domain creation by keystone::ldap_backend f736d081 Designate: configure unbound resolvers as dns servers 36c3ad48 nova-migration-target: Remove redundant options from match block ac67b462 Support configuring multiple Dell EMC VNX cinder backends e6c8502f Remove leftover of firewall management by puppet 18ef55f8 Support configuring multiple Dell EMC Unity cinder backends 0b6d00bc Support configuring multiple NFS cinder backends 7e36cf49 Nova: Replace hiera by lookup e51bf81f nova-conductor: Fix wrong bootstrap node hieradata used 837abea1 Horizon: Support Strict-Transport-Security header b79df067 Vpp: Replace hiera by lookup a0b8bfe3 Auditd: Replace hiera by lookup d6ed3576 Pacemaker: Replace hiera by lookup (1) 501522bf Include octavia task_flow manifest for octavia services 9765e20f Remove file ACL settings for ceph keyring 1d7c92df Correct typo on hieradata key 330d2b5e sshd: Remove unused implementation to restrict ssh access c13b609e sshd: Allow customizing the ListenAddress option 2acd2f4b Designate: Replace hiera by lookup 94854028 Redis required for designate central service 27930ca5 iscsid: Replace hiera by lookup c205685c NetApp: Remove implementation for 7mode systems and E-Series systems 89572109 sshd: Remove unused implementation to set up MOTD/Banner 74fb1e4d Nova: Drop unused logic to remove the libvirt default network 373dee41 Remove implementation to manage firewall rules by Puppet 28b340c0 Octavia: Replace hiera by lookup aa7dee4d Heat: Manage [clients] options 727305a2 RabbitMQ: Replace hiera by lookup 445ddfd1 Ironic-inspector: Replace hiera by lookup 692174d2 Ironic: Replace hiera by lookup 9be30d13 Metrics/QDR: Replace hiera by lookup 4f41077f Remove unused extract_id function 46a9bf61 Remove unused netmask_to_cider function b3ecd682 Fix noop_resource function with package resource 439eb262 Remove ineffective ovn_remote_probe_interval 29ce3e35 Placement: Replace hiera by lookup bbdc4281 Horizon: Replace hiera by lookup c0aaf967 Gnocchi: Replace hiera by lookup 7045142b Gnocchi: Clean up unused parameters 8794022f HAProxy: deprecate activate_httplog 369134ec Snmpd: Replace hiera by lookup 5a25ae9a Memcached: Replace hiera by lookup 7e6dd305 Keystone: Replace hiera by lookup e851a9b0 Barbican: Replace hiera by lookup 034ce1ef Ceilometer: Replace hiera by lookup cf3e7b2c Aodh: Sync default value in parameter description 4c244905 Logging: Replace hiera by lookup 0432ed43 tls_proxy: Replace hiera by lookup 243d35a3 Remove unused implementation to manage stunnel by systemd 8abf437e Remove unused implementation to trigger ceilometer-upgrade 466f5703 Ssh: Replace hiera by lookup a90e26d4 Use stdlib function to remove undef values from array 77a4833a Remove workaround for old puppetlabs-apache 315aa58f Remove unused sysctl::value resource 2123ff49 Nova: Remove manifest for nova-serialproxy 470086b1 Manila: Replace hiera by lookup aba0d7f6 packages: Remove unused deployment_type check 0270bf98 Remove package update by puppet 798ea9af Heat: Sync default value in parameter description 3d9363f4 Glance: Replace hiera by lookup 62653535 Cinder: Replace hiera by lookup 916e7150 Swift: Replace hiera by lookup 97e69822 Etcd: Replace hiera by lookup 0d4c1616 Manila: Remove unnecessary 'undef' d4afc290 HAProxy: enable forwardfor for all http endpoints ad9fcbd9 Aodh: Replace hiera by lookup d8d906ff Heat: Replace hiera by lookup 1c03aea7 nova_migraton_target: Remove redundant service name check 7e1d6e48 Drop support for collectd-gnocchi 532d647b Fix outdated requirements/dependencies ba1e5932 Do not include the ssh::server class directly b9c60225 Nova: Remove unused migration proxy d7248de3 Remove unused puppet-ptp 5967b1ff Remove manifests for Contrail deployment 24e9a03f Remove support for Nuage core plugin f2233f01 Use octavia::networking to manage [networking] parameters Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 4 - Rakefile | 2 +- files/stunnel.service | 19 - lib/facter/docker_group_gid.rb | 24 - lib/puppet/functions/extract_id.rb | 17 - lib/puppet/functions/netmask_to_cidr.rb | 15 - lib/puppet/functions/noop_resource.rb | 28 + lib/puppet/provider/service/noop.rb | 17 - manifests/fencing.pp | 14 +- manifests/firewall.pp | 203 ------- manifests/firewall/post.pp | 65 --- manifests/firewall/pre.pp | 62 -- manifests/firewall/rule.pp | 203 ------- manifests/firewall/service_rules.pp | 42 -- manifests/haproxy.pp | 631 +++++++++++---------- manifests/haproxy/endpoint.pp | 80 +-- manifests/haproxy/horizon_endpoint.pp | 66 +-- manifests/haproxy/service_endpoints.pp | 8 +- manifests/haproxy/stats.pp | 4 +- manifests/masquerade_networks.pp | 66 --- manifests/network/contrail/analytics.pp | 381 ------------- manifests/network/contrail/analyticsdatabase.pp | 202 ------- manifests/network/contrail/config.pp | 416 -------------- manifests/network/contrail/control.pp | 211 ------- manifests/network/contrail/database.pp | 166 ------ manifests/network/contrail/heat.pp | 87 --- manifests/network/contrail/neutron_plugin.pp | 192 ------- manifests/network/contrail/provision.pp | 92 --- manifests/network/contrail/vrouter.pp | 356 ------------ manifests/network/contrail/webui.pp | 132 ----- manifests/pacemaker/haproxy_with_vip.pp | 21 +- manifests/packages.pp | 23 +- manifests/packages/upgrades.pp | 43 -- manifests/profile/base/aodh.pp | 56 +- manifests/profile/base/aodh/api.pp | 37 +- manifests/profile/base/aodh/authtoken.pp | 24 +- manifests/profile/base/aodh/evaluator.pp | 14 +- manifests/profile/base/aodh/listener.pp | 4 +- manifests/profile/base/aodh/notifier.pp | 4 +- manifests/profile/base/apache.pp | 16 +- manifests/profile/base/auditd.pp | 30 - manifests/profile/base/barbican.pp | 4 +- manifests/profile/base/barbican/api.pp | 85 +-- manifests/profile/base/barbican/authtoken.pp | 24 +- manifests/profile/base/barbican/backends.pp | 18 +- manifests/profile/base/ceilometer.pp | 52 +- .../profile/base/ceilometer/agent/notification.pp | 6 +- manifests/profile/base/ceilometer/agent/polling.pp | 30 +- manifests/profile/base/ceilometer/upgrade.pp | 62 -- manifests/profile/base/cinder.pp | 58 +- manifests/profile/base/cinder/api.pp | 35 +- manifests/profile/base/cinder/authtoken.pp | 24 +- manifests/profile/base/cinder/backup.pp | 4 +- manifests/profile/base/cinder/backup/ceph.pp | 4 +- manifests/profile/base/cinder/backup/gcs.pp | 4 +- manifests/profile/base/cinder/backup/nfs.pp | 4 +- manifests/profile/base/cinder/backup/s3.pp | 4 +- manifests/profile/base/cinder/backup/swift.pp | 4 +- manifests/profile/base/cinder/scheduler.pp | 4 +- manifests/profile/base/cinder/volume.pp | 86 +-- .../base/cinder/volume/dellemc_powerflex.pp | 51 +- .../profile/base/cinder/volume/dellemc_powermax.pp | 28 +- .../base/cinder/volume/dellemc_powerstore.pp | 24 +- manifests/profile/base/cinder/volume/dellemc_sc.pp | 46 +- .../profile/base/cinder/volume/dellemc_unity.pp | 46 +- .../profile/base/cinder/volume/dellemc_vnx.pp | 64 ++- .../profile/base/cinder/volume/dellemc_xtremio.pp | 35 +- manifests/profile/base/cinder/volume/dellsc.pp | 44 +- manifests/profile/base/cinder/volume/iscsi.pp | 12 +- manifests/profile/base/cinder/volume/netapp.pp | 58 +- manifests/profile/base/cinder/volume/nfs.pp | 59 +- manifests/profile/base/cinder/volume/nvmeof.pp | 14 +- manifests/profile/base/cinder/volume/pure.pp | 32 +- manifests/profile/base/cinder/volume/rbd.pp | 23 +- manifests/profile/base/database/mysql.pp | 73 ++- manifests/profile/base/database/mysql/client.pp | 32 +- .../base/database/mysql/include_and_check_auth.pp | 6 +- manifests/profile/base/database/mysql/users.pp | 2 +- manifests/profile/base/database/redis.pp | 46 +- manifests/profile/base/designate.pp | 53 +- manifests/profile/base/designate/api.pp | 33 +- manifests/profile/base/designate/authtoken.pp | 24 +- manifests/profile/base/designate/backend.pp | 8 +- manifests/profile/base/designate/central.pp | 11 +- manifests/profile/base/designate/coordination.pp | 57 ++ manifests/profile/base/designate/mdns.pp | 4 +- manifests/profile/base/designate/producer.pp | 31 +- manifests/profile/base/designate/sink.pp | 4 +- manifests/profile/base/designate/worker.pp | 8 +- manifests/profile/base/etcd.pp | 12 +- manifests/profile/base/glance/api.pp | 95 ++-- manifests/profile/base/glance/authtoken.pp | 24 +- manifests/profile/base/glance/backend/cinder.pp | 66 +-- manifests/profile/base/glance/backend/file.pp | 16 +- manifests/profile/base/glance/backend/rbd.pp | 54 +- manifests/profile/base/glance/backend/swift.pp | 57 +- manifests/profile/base/glance/netapp.pp | 4 +- manifests/profile/base/gnocchi.pp | 33 +- manifests/profile/base/gnocchi/api.pp | 59 +- manifests/profile/base/gnocchi/authtoken.pp | 24 +- manifests/profile/base/gnocchi/metricd.pp | 4 +- manifests/profile/base/gnocchi/statsd.pp | 4 +- manifests/profile/base/haproxy.pp | 31 +- manifests/profile/base/heat.pp | 77 +-- manifests/profile/base/heat/api.pp | 35 +- manifests/profile/base/heat/api_cfn.pp | 35 +- manifests/profile/base/heat/authtoken.pp | 24 +- manifests/profile/base/heat/engine.pp | 9 +- manifests/profile/base/horizon.pp | 40 +- manifests/profile/base/ironic.pp | 32 +- manifests/profile/base/ironic/api.pp | 35 +- manifests/profile/base/ironic/authtoken.pp | 24 +- manifests/profile/base/ironic/conductor.pp | 9 +- manifests/profile/base/ironic_inspector.pp | 8 +- .../profile/base/ironic_inspector/authtoken.pp | 24 +- manifests/profile/base/iscsid.pp | 4 +- manifests/profile/base/keystone.pp | 117 ++-- manifests/profile/base/logging/logrotate.pp | 52 +- manifests/profile/base/logging/rsyslog.pp | 10 +- .../profile/base/logging/rsyslog/file_input.pp | 4 +- manifests/profile/base/manila.pp | 56 +- manifests/profile/base/manila/api.pp | 81 +-- manifests/profile/base/manila/authtoken.pp | 24 +- manifests/profile/base/manila/scheduler.pp | 4 +- manifests/profile/base/manila/share.pp | 278 +++++---- manifests/profile/base/memcached.pp | 4 +- manifests/profile/base/metrics/collectd.pp | 148 +---- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/metrics/collectd/gnocchi.pp | 177 ------ .../profile/base/metrics/collectd/sensubility.pp | 2 +- manifests/profile/base/metrics/qdr.pp | 14 +- manifests/profile/base/neutron.pp | 74 ++- manifests/profile/base/neutron/agents/bagpipe.pp | 4 +- manifests/profile/base/neutron/agents/l2gw.pp | 4 +- manifests/profile/base/neutron/agents/mlnx.pp | 4 +- .../base/neutron/agents/networking_baremetal.pp | 4 +- manifests/profile/base/neutron/agents/nuage.pp | 65 --- manifests/profile/base/neutron/agents/ovn.pp | 24 +- manifests/profile/base/neutron/agents/vpp.pp | 8 +- manifests/profile/base/neutron/authtoken.pp | 24 +- manifests/profile/base/neutron/bgpvpn.pp | 4 +- manifests/profile/base/neutron/dhcp.pp | 23 +- .../profile/base/neutron/dhcp_agent_wrappers.pp | 34 +- manifests/profile/base/neutron/l2gw.pp | 4 +- manifests/profile/base/neutron/l3.pp | 4 +- .../profile/base/neutron/l3_agent_wrappers.pp | 49 +- manifests/profile/base/neutron/linuxbridge.pp | 14 +- manifests/profile/base/neutron/metadata.pp | 4 +- .../profile/base/neutron/opencontrail/vrouter.pp | 40 -- manifests/profile/base/neutron/ovn_metadata.pp | 44 +- .../base/neutron/ovn_metadata_agent_wrappers.pp | 26 +- manifests/profile/base/neutron/ovn_northd.pp | 8 +- manifests/profile/base/neutron/ovs.pp | 17 +- manifests/profile/base/neutron/plugins/ml2.pp | 16 +- .../profile/base/neutron/plugins/ml2/bagpipe.pp | 4 +- .../base/neutron/plugins/ml2/networking_ansible.pp | 16 +- .../neutron/plugins/ml2/networking_baremetal.pp | 4 +- .../profile/base/neutron/plugins/ml2/nuage.pp | 40 -- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 46 +- manifests/profile/base/neutron/plugins/ml2/vpp.pp | 8 +- manifests/profile/base/neutron/plugins/ml2/vts.pp | 12 +- manifests/profile/base/neutron/plugins/nsx.pp | 45 -- manifests/profile/base/neutron/plugins/nuage.pp | 43 -- .../profile/base/neutron/plugins/opencontrail.pp | 8 +- manifests/profile/base/neutron/server.pp | 93 +-- manifests/profile/base/neutron/sfc.pp | 4 +- manifests/profile/base/neutron/sriov.pp | 4 +- .../base/neutron/wrappers/dibbler_client.pp | 7 +- manifests/profile/base/neutron/wrappers/dnsmasq.pp | 7 +- manifests/profile/base/neutron/wrappers/haproxy.pp | 7 +- .../profile/base/neutron/wrappers/keepalived.pp | 7 +- .../neutron/wrappers/keepalived_state_change.pp | 5 - manifests/profile/base/neutron/wrappers/radvd.pp | 7 +- manifests/profile/base/nova.pp | 76 +-- manifests/profile/base/nova/api.pp | 59 +- manifests/profile/base/nova/authtoken.pp | 24 +- manifests/profile/base/nova/compute.pp | 12 +- manifests/profile/base/nova/compute/ironic.pp | 4 +- manifests/profile/base/nova/compute/libvirt.pp | 4 +- .../profile/base/nova/compute/libvirt_guests.pp | 4 +- .../profile/base/nova/compute_libvirt_shared.pp | 42 +- manifests/profile/base/nova/conductor.pp | 8 +- manifests/profile/base/nova/libvirt.pp | 24 +- manifests/profile/base/nova/metadata.pp | 35 +- manifests/profile/base/nova/migration.pp | 4 +- manifests/profile/base/nova/migration/client.pp | 11 +- manifests/profile/base/nova/migration/proxy.pp | 78 --- manifests/profile/base/nova/migration/target.pp | 80 +-- manifests/profile/base/nova/scheduler.pp | 4 +- manifests/profile/base/nova/serialproxy.pp | 33 -- manifests/profile/base/nova/virtlogd_wrapper.pp | 7 +- manifests/profile/base/nova/vncproxy.pp | 4 +- manifests/profile/base/nova/wrappers/virtlogd.pp | 2 +- manifests/profile/base/octavia.pp | 29 +- manifests/profile/base/octavia/api.pp | 41 +- manifests/profile/base/octavia/authtoken.pp | 24 +- manifests/profile/base/octavia/health_manager.pp | 5 +- manifests/profile/base/octavia/housekeeping.pp | 5 +- manifests/profile/base/octavia/provider/ovn.pp | 85 ++- manifests/profile/base/octavia/worker.pp | 5 +- manifests/profile/base/pacemaker.pp | 92 ++- manifests/profile/base/pacemaker/instance_ha.pp | 58 +- manifests/profile/base/pacemaker_remote.pp | 40 +- manifests/profile/base/placement.pp | 8 +- manifests/profile/base/placement/api.pp | 37 +- manifests/profile/base/placement/authtoken.pp | 24 +- manifests/profile/base/qdr.pp | 12 +- manifests/profile/base/rabbitmq.pp | 64 +-- manifests/profile/base/snmp.pp | 16 +- manifests/profile/base/sshd.pp | 74 +-- manifests/profile/base/swift.pp | 12 +- manifests/profile/base/swift/dispersion.pp | 4 +- manifests/profile/base/swift/proxy.pp | 75 +-- manifests/profile/base/swift/ringbuilder.pp | 14 +- manifests/profile/base/swift/storage.pp | 4 +- manifests/profile/base/vpp.pp | 4 +- manifests/profile/pacemaker/ceph_nfs.pp | 20 +- .../profile/pacemaker/cinder/backup_bundle.pp | 49 +- .../profile/pacemaker/cinder/volume_bundle.pp | 48 +- manifests/profile/pacemaker/clustercheck.pp | 12 +- manifests/profile/pacemaker/compute_instanceha.pp | 10 +- .../profile/pacemaker/database/mysql_bundle.pp | 195 ++++--- .../profile/pacemaker/database/redis_bundle.pp | 110 ++-- manifests/profile/pacemaker/haproxy_bundle.pp | 88 ++- manifests/profile/pacemaker/manila/share_bundle.pp | 54 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 60 +- manifests/profile/pacemaker/ovn_northd.pp | 22 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 212 +++---- manifests/stunnel.pp | 23 +- manifests/stunnel/service_proxy.pp | 2 - manifests/stunnel/systemd_unit.pp | 24 - manifests/tls_proxy.pp | 27 +- metadata.json | 27 +- ...to-select-migration-proxy-2400e9c69fc620ba.yaml | 14 + ...y-remove-activate_httplog-87325732ab9ca721.yaml | 6 + .../mysql_bundle_options-b5ecf4c4472cca01.yaml | 8 + releasenotes/source/conf.py | 16 +- spec/classes/tripleo_firewall_spec.rb | 226 -------- spec/classes/tripleo_haproxy_spec.rb | 27 - spec/classes/tripleo_masquerade_networks_spec.rb | 95 ---- spec/classes/tripleo_packages_spec.rb | 49 -- ...file_base_ceilometer_agent_notification_spec.rb | 2 - .../tripleo_profile_base_cinder_unity_spec.rb | 18 +- .../tripleo_profile_base_cinder_vnx_spec.rb | 17 + .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 21 + .../tripleo_profile_base_cinder_volume_spec.rb | 85 ++- ...pleo_profile_base_database_mysql_client_spec.rb | 67 +-- .../tripleo_profile_base_designate_central_spec.rb | 13 +- ...leo_profile_base_designate_coordination_spec.rb | 83 +++ ...tripleo_profile_base_designate_producer_spec.rb | 38 +- .../classes/tripleo_profile_base_designate_spec.rb | 2 + ...tripleo_profile_base_glance_backend_rbd_spec.rb | 12 - .../tripleo_profile_base_gnocchi_api_spec.rb | 1 - .../tripleo_profile_base_heat_engine_spec.rb | 4 + spec/classes/tripleo_profile_base_heat_spec.rb | 4 + .../tripleo_profile_base_metrics_collectd_spec.rb | 51 +- .../tripleo_profile_base_neutron_dhcp_spec.rb | 34 +- ...eo_profile_base_neutron_plugins_ml2_ovn_spec.rb | 258 +++++++++ spec/classes/tripleo_profile_base_nova_api_spec.rb | 3 - .../tripleo_profile_base_nova_conductor_spec.rb | 58 +- .../tripleo_profile_base_nova_libvirt_spec.rb | 15 - ...ipleo_profile_base_nova_migration_proxy_spec.rb | 103 ---- ...pleo_profile_base_nova_migration_target_spec.rb | 213 +------ .../tripleo_profile_base_octavia_api_spec.rb | 2 +- ...leo_profile_base_octavia_health_manager_spec.rb | 2 + ...ipleo_profile_base_octavia_housekeeping_spec.rb | 2 + ...ipleo_profile_base_octavia_provider_ovn_spec.rb | 36 ++ spec/classes/tripleo_profile_base_octavia_spec.rb | 3 + .../tripleo_profile_base_octavia_worker_spec.rb | 2 + spec/classes/tripleo_profile_base_sshd_spec.rb | 230 ++------ .../tripleo_profile_base_swift_proxy_spec.rb | 4 +- .../defines/tripleo_firewall_service_rules_spec.rb | 37 -- ...le_base_neutron_wrappers_dibbler_client_spec.rb | 29 - ...o_profile_base_neutron_wrappers_dnsmasq_spec.rb | 30 - ...o_profile_base_neutron_wrappers_haproxy_spec.rb | 33 -- ...rofile_base_neutron_wrappers_keepalived_spec.rb | 30 - ...eutron_wrappers_keepalived_state_change_spec.rb | 26 - ...leo_profile_base_neutron_wrappers_radvd_spec.rb | 33 -- spec/fixtures/hieradata/default.yaml | 9 +- spec/fixtures/hieradata/step4.yaml | 1 - spec/fixtures/hieradata/step5.yaml | 14 + spec/functions/extract_id_spec.rb | 6 - spec/functions/netmask_to_cidr_spec.rb | 6 - templates/neutron/dibbler-client.epp | 10 +- templates/neutron/dnsmasq.epp | 10 +- templates/neutron/haproxy.epp | 10 +- templates/neutron/keepalived.epp | 10 +- .../neutron/neutron-keepalived-state-change.epp | 11 +- templates/neutron/radvd.epp | 10 +- zuul.d/layout.yaml | 3 +- 290 files changed, 4048 insertions(+), 8518 deletions(-)

1 0

ansible-role-tripleo-modify-image 1.5.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We contentedly announce the release of: ansible-role-tripleo-modify-image 1.5.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.4.0..1.5.0 --------------------------------------------------------- a09c8af Add some notes about SELinux and limitations c9831b5 Disable setup.py auto discovery Diffstat (except docs and test files) ------------------------------------- README.rst | 39 ++++++++++++++++++++++++++++++++++++--- setup.cfg | 8 ++++---- setup.py | 1 + 3 files changed, 41 insertions(+), 7 deletions(-)

1 0

ansible-role-chrony 1.3.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We eagerly announce the release of: ansible-role-chrony 1.3.0: ansible-role-chrony - Ansible chrony role The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony 1.2.0..1.3.0 ------------------------------------------- 62654c8 Sync defaults for chrony with tripleo-heat-templates 9528e8a Add tasks for run and sync to chrony role 7ccf873 Change chrony_role_action default to 'all' Diffstat (except docs and test files) ------------------------------------- ansible-requirements.txt | 2 +- defaults/main.yml | 15 ++++++++++----- setup.py | 1 + tasks/config.yml | 39 +++++++++++++++++++-------------------- tasks/install.yml | 34 ++++++++++++++++++++++++++++++++++ tasks/main.yml | 29 ++++++++++++++++++++++++----- tasks/run.yml | 39 +++++++++++++++++++++++++++++++++++++++ tasks/sync.yml | 22 ++++++++++++++++++++++ tasks/vars.yml | 22 ++++++++++++++++++++++ 9 files changed, 172 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index 7507f3e..540637e 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -6 +6 @@ ansible<2.10 -ansible-lint +ansible-lint<4.3.0

1 0

ovsdbapp 1.9.4 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We exuberantly announce the release of: ovsdbapp 1.9.4: A library for creating OVSDB applications This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.9.3..1.9.4 -------------------------------- 65d02f0 Don't force_reconnect() on unhandled Idl exception 87dcab2 Fix logging exception while handling transaction exception dd7e332 Fix TRY_AGAIN handling Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 17 ++--------------- ovsdbapp/backend/ovs_idl/transaction.py | 20 ++++---------------- 2 files changed, 6 insertions(+), 31 deletions(-)

1 0

neutron 18.6.0 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are delighted to announce the release of: neutron 18.6.0: OpenStack Networking This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 18.6.0 ^^^^^^ New Features ************ * After the port is considered as provisioned, the Nova port binding update could have not been received, leaving the port as not bound. Now the port provisioning method has an active wait that will retry several times, waiting for the port binding update. If received, the port status will be set as active if the admin state flag is set. * A new script to remove the duplicated port bindings was added. This script will list all "ml2_port_bindings" records in the database, finding those ones with the same port ID. Then the script removes those ones with status=INACTIVE. This script is useful to remove those leftovers that remain in the database after a failed live migration. It is important to remark that this script should not be executed during any live migration process. * Add "use_random_fully" setting to allow an operator to disable the iptables random-fully property on an iptable rules. Known Issues ************ * If the "use_random_fully" setting is disabled, it will prevent random fully from being used and if there're 2 guests in different networks using the same source_ip and source_port and they try to reach the same dest_ip and dest_port, packets might be dropped in the kernel do to the racy tuple generation . Disabling this setting should only be done if source_port is really important such as in network firewall ACLs and that the source_ip are never repeating within the platform. Upgrade Notes ************* * The default value for the "metadata_workers" configuration option has changed to 0 for the ML2/OVN driver. Since [OVN] Allow to execute "MetadataProxyHandler" in a local thread (https://review.opendev.org/c/openstack/neutron/+/861649), the OVN metadata proxy handler can be spawned in the same process of the OVN metadata agent, in a local thread. That reduces the number of OVN SB database connections to one. Bug Fixes ********* * Support for the extensions "dns_domain_ports" and "subnet_dns_publish_fixed_ip" belonging to the DNS integration is now properly announced by the OVN driver. See bug 1947127 (https://bugs.launchpad.net/neutron/+bug/1947127) * Fixes an issue in the ML2/OVN driver where the network segment tag was not being updated in the OVN Northbound database. For more information, see bug 1944708 (https://bugs.launchpad.net/neutron/+bug/1944708). Changes in neutron 18.5.0..18.6.0 --------------------------------- 93e7091a13 [OVN] Set the default OVN metadata worker number to 0 1b2c6c1272 update the nova host aggregates links 9d826bc77a Disable in-band management for bridges before setting up controllers 049435eeab [OVN] Avoid deadlock when cleaning hash ring nodes 473af223fd [L3HA] Don't update HA router's ports if router isn't active on agents 1197d8e735 Allow to pass EUI64 IP address as fixed ip for the port 80d1e81049 Fix ipam_pluggable_backend unit tests module 6b7fbf9495 Execute "IpMonitorTestCase" tests always inside a namespace a8261f8fb3 Split Hash Ring probing from the maintenance task 14190a612f [OVN] Allow to execute ``MetadataProxyHandler`` in a local thread b96886b9ea [stable-only] Add writer DB context to "add_provisioning_component" 8b1ec76321 Script to remove duplicated port bindings 9c99dfa089 fix: Fix url of Floodlight 00efb17f00 Use "OVNMechDriver" instance in "TestOvn[Nb|Sb]IdlNotifyHandler" 1c0c03eaac Handle several dhcp agents for metadata over ipv6 733ef4f2d8 Do not allow a tenant to create a default SG for another one 4b6a8a2157 [OVN] Rate limit the "Disallow caching" log from hash ring c35aed1b30 Migration revert plan 1f4dc75963 Fix indentation issue in wait_for_change override 4c76a53494 Fix list of DNS extensions supported by OVN 059d14a4a6 Revert "[OVN] Set NB/SB "connection" inactivity probe" b5e9148cc7 Retry connections to Nova 8e9ef2d653 Add an active wait during the port provisioning event 62862df103 [ovn] Specify port type if it's a router port when updating 336bb4d3fc Allow operator to disable usage of random-fully d0592d06e8 Bump revision number of objects when description is changed fe645cefe6 [OVN] Remove ACLs with remote SG during deletion of SG a6432b3943 ovn: Don't fail db sync if new IP allocation fails for metadata 012151c6ea Mellanox_eth.img url expires, remove the mellanox_eth.img node 529b5f9f28 [OVN] Fix updating network segmentation ID 6dc54d23c7 Clean up db residual record from dvr port 2e2f1d6cd4 [ovn]Change LogicalSwitchPortUpdateUpEvent old conditions b9fb76e57f Add workaround for eventlet.greendns bug 301c4cdbed Port update will trigger less notifications to the DHCP agents 868427c104 Test: mock out _check_netfilter_for_bridges in unit tests b183e12fdc functional: Add debug messages around OVN services 74b1ec280e [ovn][metadata] Remove metadata readiness mechanism 80d408cd96 ovn: Wait for northd in functional tests Diffstat (except docs and test files) ------------------------------------- .../contributor/internals/live_migration.rst | 21 +++ .../contributor/internals/ovn/metadata_api.rst | 28 +-- neutron/agent/common/ovs_lib.py | 19 ++- neutron/agent/common/utils.py | 54 ++++-- neutron/agent/dhcp/agent.py | 2 +- neutron/agent/linux/iptables_manager.py | 4 + neutron/agent/ovn/metadata/agent.py | 42 +---- neutron/agent/ovn/metadata/server.py | 14 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 27 ++- neutron/api/rpc/handlers/l3_rpc.py | 17 +- neutron/cmd/remove_duplicated_port_bindings.py | 71 ++++++++ neutron/common/config.py | 3 + neutron/common/ovn/constants.py | 1 + neutron/common/ovn/extensions.py | 4 + neutron/common/ovn/hash_ring_manager.py | 15 +- neutron/common/ovn/utils.py | 20 --- neutron/conf/agent/common.py | 3 + neutron/conf/common.py | 13 ++ neutron/db/ipam_pluggable_backend.py | 14 +- neutron/db/l3_dvrscheduler_db.py | 10 +- neutron/db/provisioning_blocks.py | 1 + neutron/db/securitygroups_db.py | 4 + neutron/notifiers/nova.py | 12 ++ neutron/objects/ports.py | 9 + neutron/plugins/ml2/db.py | 18 ++ .../agent/openflow/native/ovs_bridge.py | 34 ++-- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 151 ++++++----------- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 27 +-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 16 ++ .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 9 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 3 +- neutron/plugins/ml2/plugin.py | 97 +++++++---- neutron/services/revisions/revision_plugin.py | 33 +++- .../agent/ovn/metadata/test_metadata_agent.py | 17 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 7 - .../drivers/ovn/mech_driver/test_mech_driver.py | 188 +++++++++++++++------ .../linux/openvswitch_firewall/test_iptables.py | 16 +- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 40 ++++- .../unit/common/ovn/test_hash_ring_manager.py | 11 +- .../agent/openflow/native/ovs_bridge_test_base.py | 7 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 5 +- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 48 ------ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 80 +++++---- .../drivers/ovn/mech_driver/test_mech_driver.py | 88 +++++----- .../services/revisions/test_revision_plugin.py | 16 ++ ...d-port-provisioning-retry-8edf16a258b164a0.yaml | 8 + .../fix-ovn-dns-extensions-d94ec25d20714b20.yaml | 6 + .../ovn-metadata-workers-fa8a2019f34bd572.yaml | 9 + .../notes/ovn-update-vlan-id-749d8f17999243f5.yaml | 7 + ...-duplicated-port-bindings-83b58060f3adb403.yaml | 10 ++ .../notes/use_random_fully-527b20bc524c308a.yaml | 15 ++ setup.cfg | 1 + .../tripleo_environment/ovn_migration.sh | 35 +++- .../playbooks/ovn-migration.yml | 17 ++ .../tripleo_environment/playbooks/revert.yml | 4 + .../roles/recovery-backup/defaults/main.yml | 12 ++ .../playbooks/roles/recovery-backup/tasks/main.yml | 68 ++++++++ .../playbooks/roles/revert/tasks/main.yml | 29 ++++ tox.ini | 1 + 79 files changed, 1348 insertions(+), 734 deletions(-)

1 0

python-neutronclient 7.3.1 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are satisfied to announce the release of: python-neutronclient 7.3.1: CLI and Client Library for OpenStack Networking This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 7.3.0..7.3.1 -------------------------------------------- 074e591 Use yaml.safe_load instead of yaml.load 9ba92c2 tests: change safe_hasattr to hasattr e28d08a Dropping lower constraints testing (stable Wallaby) c58eaf1 Update TOX_CONSTRAINTS_FILE for stable/wallaby 16aef72 Update .gitreview for stable/wallaby 979c944 Fix lower constraints Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 111 --------------------- neutronclient/client.py | 2 +- requirements.txt | 2 +- tox.ini | 12 +-- 9 files changed, 12 insertions(+), 130 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d10083c..b08551d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ os-client-config>=1.28.0 # Apache-2.0 -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.8.0 # Apache-2.0

1 0

neutron-dynamic-routing 18.1.1 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are ecstatic to announce the release of: neutron-dynamic-routing 18.1.1: Neutron Dynamic Routing This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 18.1.1 ^^^^^^ Bug Fixes * The BGP service plugin RPC queue has been added to RPC workers, like it is done in other Neutron service plugins (l3-plugin, metering, etc.). This fixes RPC requests and AMQP heartbeats not getting processed in time, causing AMQP connection dropping, and other unpredictable unwanted behavior. See bug 1974057 (https://bugs.launchpad.net/neutron/+bug/1974057). * Multiple issues in the implementation of the StaticScheduler have been fixed that may have caused peers to be erroneously descheduled. See bug 1980235 (https://bugs.launchpad.net/neutron/+bug/1980235). Changes in neutron-dynamic-routing 18.1.0..18.1.1 ------------------------------------------------- 1ba3fb1 Add releasenotes for recently added fixes 035910e Don't run periodic actions for StaticScheduler 5371d71 Fix missing functions in StaticScheduler ed1ffb1 Consume BGP service plugin queue in RPC workers Diffstat (except docs and test files) ------------------------------------- neutron_dynamic_routing/db/bgp_dragentscheduler_db.py | 9 +++++---- neutron_dynamic_routing/services/bgp/bgp_plugin.py | 13 ++++++------- .../services/bgp/scheduler/bgp_dragent_scheduler.py | 19 ++++++++++++++++--- releasenotes/notes/rpc-workers-4941f3b9136418df.yaml | 9 +++++++++ .../notes/static-scheduler-2288b8173f9357a6.yaml | 6 ++++++ 5 files changed, 42 insertions(+), 14 deletions(-)

1 0

ovn-octavia-provider 1.0.2 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are pleased to announce the release of: ovn-octavia-provider 1.0.2: OpenStack Octavia integration with OVN This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 1.0.1..1.0.2 -------------------------------------------- 7ef3cf6 Ensure OVN-LB is properly configured upon LS removal from LR 1ecdb18 Optimization for find_ls_for_lr dc50d14 Ensure LB are removed from LS not connected to the LB LR 4ab7616 Ensure lbs are properly configured for router gateway set/unset b76f35d Avoid LB ERROR status on delete when LS/LR are already deleted e6a0388 Capture port deleted event associated to HM ServiceMonitor d5a2fbc Fix healthMonitor events affecting to unrelated LB Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/common/constants.py | 4 + ovn_octavia_provider/event.py | 9 +- ovn_octavia_provider/helper.py | 109 +++++++---- 4 files changed, 274 insertions(+), 95 deletions(-)

1 0

python-manilaclient 4.1.1 (zed)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are satisfied to announce the release of: python-manilaclient 4.1.1: Client library for OpenStack Manila API. This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. Changes in python-manilaclient 4.1.0..4.1.1 ------------------------------------------- b25443d Respect OS_CACERT when using Manila OSC plugin 3a8e86e Update TOX_CONSTRAINTS_FILE for stable/zed 3291207 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manilaclient/osc/plugin.py | 1 + tox.ini | 6 +++--- 3 files changed, 5 insertions(+), 3 deletions(-)

1 0