November 2022 - Release-announce - lists.openstack.org

tripleo-heat-templates 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are satisfied to announce the release of: tripleo-heat-templates 17.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. Changes in tripleo-heat-templates 16.0.0..17.0.0 ------------------------------------------------ 88ca6a07c Drop templates to create Neutron resources b82f8b415 Do not use Neutron resource by default e6a77b424 Add missing description to some Octavia API parameters dbb0224e3 Remove old workaround to upgrade deployed server environment b6b38bce0 Use deployed server by default 818983437 Drop old templates OVN bridge mac addresses b073bf76a Support role specific MessageOfTheDay 00a774f4f Enable package installation by default ae2c68170 Replace subnet_info module with osc command fe0dbc5d2 Simplify cloud-init check and use command eb57ba758 Sets higher values for timeouts 4e178d8b5 Use step condition for all upgrade tasks 8a22c7170 Allow overriding corosync token_timeout 4939e19ee Replace dnf by tripleo_dnf_stream for undercloud upgrade 700ab1505 Add observability_data_only bool f3ac1f976 Manage CA certificates using ansible 665391f63 Enable allowerasing in undercloud upgrade from wallaby 38dbd331c Run nova_wait_for_compute_service only for the default cell deployment f14174d35 Modify existing notes related to the firewall ae5fa916f Enable CAP_AUDIT_WRITE for some containers/steps 0074098f0 Cleanup iptables resources 6579d3c53 Use renamed task files for iscsid 3e0e7f200 iscsid: use puppet dir for configuration 7b57f966c Add new paramater "CeilometerEnableTenantDiscovery" e5ce31ac3 Drop environment for the removed upgrade converge step 2090ef676 Drop legacy networking resources 6e6300f1c Move update_tasks for tripleo-packages f1cf81eec Replace remaining usage of Net::SoftwareConfig 9cdf72876 Switch default firewall engine 90c52db21 Ensure container's image get updated if their name stay the same. 2d062714f Stop creating unused cinderv3/manilav2 keystone user 190420f1b Fix inconsistent <service>Workers fc93752ff Move releasenote to correct directory 52c806389 Designate: format listen addr properly when ipv6 7efe0063b Enable dns_domain_ports extension by default c8fba9b23 Eliminate unnecessary role looping in deploy-steps.j2 804414845 Allow all packet state for selected ironic services c9d04ce3c Remove unused conditions from undercloud post deployment 57e8fc590 Add release note for role specific ContainerImagePrepare 3e983806e Fix kill-script search string to match any "/libpod-" 0bb289c55 Switch cinder-backup default to active-active 607bfe855 Stop injecting deployment_type fact bc772b63f haproxy: Remove unused haproxy_docker hieradata key 31e96b9ce Deprecate snmp service b624324e6 new tht for Cinder NFS backend 3465111c5 Drop DeployedServer resources fea789f8e Avoid a pipe and grep call f1f224c1a Copy ssh_keys from mistral environment locally cc38db4c9 Filter excluded nodes from ansible delegates 8e9ade5f1 Convert httpd ironic_api configurations to new role ad6bc22f2 Add custom seccomp profile for ephemeral heat 7b55da1c7 Add note about Ipv6 provisioning with OVN on Undercloud 87622c6de Ceilometer: Ensure the ResellerAdmin role exists 3a929ba22 Remove the python3-openclient and add a new task. 3fda88c3a Fix tls-e CA cert declaration for FRR 3c5d5a12f Fix tls-e CA cert declaration for OVN 3b110bb1d support tripleo_etcd ansible role e4c5afeda Allow Undercloud to be deployed with Ml2 OVN 9fe769c51 Use python to template cell urls 18abde638 Add internal TLS CA file to group vars 5060be800 nova-ironic: Fix selinux denial when relabeling /var/lib/nova df78b6a3c Ensure /run/frr is present after (re)boot 67c4988a5 Fix Update ovn_controller. from external-update playbook 3e41f3636 Support actual hostnames in DeploymentServerBlacklist d6e203d57 Remove old network_data examples 96c9eb7a3 Correct label for /run/libvirt ea327964c Support role specific BannerText 5da1f2896 Neutron: Deprecate unmaintained features e53ba8c0e Replace remaining usage of /var/run 2a2fd0c47 Fix ignored EnableAodhExpirer 27e113902 RabbitMQ: Fix missing bind mount for .key file a10f0bb0e Enable post-copy by setting unprivileged_userfaultfd 90fe605cd Revert "Enable post-copy by setting unprivileged_userfaultfd" 2bd8eced8 Cinder: Remove clean up logic for old service entries d852952ec Remove unused NeutronCorePluginML2OVN service b6a7dd215 Undercloud install: Create clouds.yaml with mode 600 3e37e6647 Redis: replace hiera CLI 52c95b1d1 Do not change ownership recursive for Swift ddff14458 Add role specific settings for ovn_bgp_agent parameters 70509f5c3 Add parameter OVNEncapTos 931591d68 OVN: Fix wrong image used in external update tasks 2eef82ee5 Ironic: Fix incorrect type for integer values 63a08d229 Ironic: Require number for IronicIPXEPort 827236135 Revert "Disable [oslo_messaging_rabbit] heartbeat_in_pthread" 92ad83b1c RabbitMQ: Migrate environment/volumes definition c91eb1f17 Use NeutronInterfaceDriver parameter consistently 8646f99d6 Ironic: Remove incorrect override of api port a29eaddb0 Remove unneeded parameter tripleo_frr_ovn_bgp_agent_bridge_mappings 8e8efcfb3 Set /run/podman ACL before starting collectd 18824865c Fix nova_libvirt_max_queues_set conditions for nova-compute 3f55cbfbc Octavia Jobboard integration d3f4893eb Fix the wrong command to deploy undercloud 9545bb979 Swift: pass raw disk information directly to ansible aa424abf0 Remove argument to ssh-keygen for key size a8ce51561 Nova: Look up the host parameter from nova.conf 1bb1f5448 Fix wrong parameter type of KeystoneCronTrustFlush* 1067b0978 Fix merge of multiple firewall rules 21f0f5c7f Do not copy syslinux files 2a5262051 Remove redundant override of vhost tcp port d1fe2a989 Fix collectd-sensubility script output 3561a7caa Fix permissions for nova/libvirt VNC certs/keys e9c9478f3 Add 'ResellerAdmin' role to ceilometer user df26a8a2d Apache: Use only required modules fcabd6e69 Add auditd Service in multinode-containers.yaml 524242606 Allow for jinja2 templating of puppet_config 3d40e77a6 Allow for jinja2 templating of docker_config e03105852 Introduce ExternalCeph boolean 7f71cda2c Revert "Workaround for subscription-manager" 298463b81 Make sure sensubility has proper permission a547f1660 Disable haproxy for etcd based on CinderEtcdLocalConnect b12a1e5ce Use ansible group var to detect instance ha 819bfbe64 etcd: Use ETCD_NAME in etcd.conf 8a5e9e68d Use the new tripleo_auditd ansible role instead of puppet 21a631f13 Fix wrong parameter assignation cf4d4f881 Disable [oslo_messaging_rabbit] heartbeat_in_pthread bd8a82d42 Fix ovsdb-server for IPv6 listening addresses c7acaa28d Ensure mode is correct for the tmp directory dbf517f32 Remove resource template to deploy OVNDB at host 7494f7492 Ironic: Add parameter to tune workers 130180e99 Add ipv6 support in environments/deployed-network-environment.j2.yaml 63461f6b1 Set host_routes in environments/deployed-network-environment.j2.yaml 602de1af0 Fix net_cidr_map in environments/deployed-network-environment.j2.yaml 7d64dd990 Fix TRIPLEO_CONFIG_HASH generation a1bdbe857 Make libvirt-guests service work with deprecated monolithic libvirt 7dd0714e9 Neutron: Remove NSX plugin support ef5d2f45a Bind mount swtpm logs in libvirt virtqemud container 8592d0c71 Fix typos in log messages 6861fb324 Fix typos in comments and parameter descriptions dd6e88783 Change --start-at-task for plays using tripleo_free e728e8cc8 Use conditions with Host prep block tasks c9647167e Fix unit test discovery e5ea92a5f Redis: Switch to the new config file path d503ee5fc Heat: Present policy rules for all services 3dd4107b1 Support role specific ContainerImagePrepare c43d69c5d Enable post-copy by setting unprivileged_userfaultfd a9dc35e86 Fix conditions for libvirt_file_backed_memory_enabled cfd23004a Use tripleo_migration_target standalone ansible role 10e292613 Remove ctlplane-subnet from example file. 7b843830c Fix typo in code e2c0b8391 Set OVSDB Connection.probe_interval d0d98aa2f Default to OVN raft clustering 6c0410c74 Set force_config_drive only when OVNMetadata is disabled 4f791902a Do not override CephClientConfigVars in standalone scenarios 1a7998bfc Remove unused Config* parameters 46a985b2e Move rndc traffic onto bind network 0590dd4b9 Fix skip_list definition for yamllint ce3796aa6 Fix indirect reference to hieradata 98b48f595 [ML2 OVN] Adding DisableOvnDhcpForBaremetalPorts parameter 7761fed0c Add credentials cache for novajoin user fb4bbc5e0 Octavia: Present certificates to driver-agent 0747cff38 nova-migration-target: Re-enable sftp subsystem 6b5fdf008 Clean up cinder parameters from scenario 010 381893c0f Octavia: Mount driver-agent directories only when it is enabled 1742a8675 Fix bindep for EL9 platforms 7d76af34f Fix restarting cinder HA services on config change e7afc2274 Remove the docker-network env file. 317875903 Skip Enable cleanup service in check mode 7146d0f65 Give uefi_pxe_bootfile_name an accurate name 10a0adee0 Set the images_type parameter 4e7a44d59 Remove leftover of xinetd service support 658eaf38b Designate: Fix wrong parameter name to set mdns base port 5c272738c Configure OVN sb connections for the OVN provider c4c5d7b84 Manila: Fix missing healthcheck for api and share 6617f0e52 [ML2 OVN] Add OVNOvsdbProbeInterval parameter 8494a5abd Remove unreachable code 34a2e1ebc Remove parameters/resources for undercloud Nova 2922e8a71 Neutron: Generate wrapper scripts during config file generation 52b119f42 Add missing hidden tags for password/credential/private keys f03115cf2 Designate: support configuring non-ooo-deployed binds 8f147c914 Glance: Remove ineffective parameters ab35091c4 Remove logic to create flavor/keypair in undercloud Nova 6312d2b22 Remove unused OS::TripleO::SoftwareDeployment 3155f8c22 Remove leftover of N1kv driver support da28eef8a Allow configuring the base port of the mini DNS proxy endpoints 4832fbfbc Update sensubility's container health check 927d08066 Allow ceilometer compute agent to access /run/libvirt 9168ffa82 nova-migration-target: Simplify port configuration 2b64419f0 Deprecate redundant DockerNovaMigrationSshdPort f6ceb0bfa Add support for log offloading over TCP 91ee65408 [collectd] Remove processes plugin from default list 2188b4ff9 Make KeystoneChangePasswordUponFirstUse boolean 728d2ad43 Nova: Start nova-compute after its NFS backend is ready a38104c04 Present metrics_qdr to the haproxy service e1c7b5f6a Remove masquerade-networks-baremetal-puppet 2107a4cf8 Present ovn_dbs_manage_lb to the haproxy service d5a9d845e Add test-requirements.txt in tox-tht deps f3c76bcf0 Stop generating certificate requests for disabled networks 7c04fad72 Provide default values for ExtraConfig parameters 22952c7e1 Remove unused NovaPlacement service 66ba918c7 Deprecate CephPoolDefaultPgNum and CephPoolDefaultSize c62903f7f Fix commands for configure_ovn_north/south_db_server 645aba41a Remove duplicate entries from .gitignore 1710b9da2 Fixing typo in HAProxyBase for DCN 2e1b4ef0a Add merge strategy for ExtraConfig b9148e452 Fix undefined NeutronCorePluginML2Ansible 4cceeebc8 Galera: initial support for mariabackup SST 6c290124b Remove the Backup and Restore ReaR Heat templates 9be1ee2c5 Neutron: Migrate dvr parameters for ml2+ovs to ovs agent template be7f55bdf THT cleanup of scenario001/004/010 for Deployed Ceph a0809cbde Fix Cinder Dell EMC Powerflex backend template dfbccb0b9 Remove hieradata keys for non-bundle implementations 95a02d241 Fix Cinder Dell EMC SC backend template 226d5cb2a Comment out the empty "parameter_defaults" ba2e68501 Add SwiftSystemReader role when Rbac is enabled 340a8625c Fix typo in aodh-base template 78a51efb6 Designate: configure collocation IP on bind and neutron dns integration a1b7510b7 Adapt on puppet-rsyslog update 491fefe7c Fix ignored HeatConfigureDelegatedRoles da1e3e250 Simplify HostnameResolveNetwork in ServiceNetMap a817193ae Replace deprecated octavia::api:provider_drivers 8b39501ee Designate: Fix missing LoggingSource parameters 631e36c58 Manila: Fix missing LoggingSource parameters 8ef751c4e Fix incorrect Designate*LoggingSource 9c96fd5fe Add CephRbdTrashSchedulerEnable boolean 8297e0517 Fix rgw ssl_verify option key 30213bd0f Glance: Remove unnecessary override of [paste_deploy] config_file add91e79c nova-compute: Refactor hieradata generation 4243a1f46 Fix ignored NovaLibvirtMaxQueues e0835ccd1 Neutron: Set br-int as default integration bridge 65014b48c Keystone: Remove ineffective [ssl] enable_ssl b2639fa10 Moves the shared zuul queue tripleo to the project level 13e84c4f5 Swift: Do not enable the whole rsync::server class 376a8a46c Glance: Avoid simultaneous clean/pruner job dccd879ce Fix libvirt-guests handling post virt-guest-shutdown 86d4a348a Fix 'Ensure DNF modules have the right stream' 6db7153b3 Enable Horizon in CI 8592fc32a Ceilometer: Remove snmpd_* parameters db92d55b3 Revert "task-core basic framework" e5a071dbc ironic: Remove tasks for image migration 3290e6f9d ironic tftp: Do not format IPv6 address for bind_host ac5b16012 Octavia: Remove unnecessary neutronclient package 796f6a5dc etcd: fix service config to work with latest versions f04bec312 Render all_nodes_data in check mode 348546ea1 cinder-backup/volume: Remove unused parameters 47f642d01 Nova AZ: Remove unused AdminPassword 41801f614 Remove unused parameters from undercloud post deployment template 2a3732143 Remove leftover of the tripleo::firewall class 076c26c40 Enable use_multipath_for_image_xfer 8ee95985b Support for multiple Cinder NFS storage backends a1379a3cb nova-compute: Remove unused parameters/condition 9ed1c7b92 Restore missing SAN IP in etcd cert 2de73e762 Keystone: Remove unnecessary binds for admin endpoint 215d91865 Workaround for subscription-manager 185397553 Keystone: Get rid of unnecessary noop_resource abeb98a07 Remove remaining reference to removed services a40e5b3b6 Remove leftover of ntp service 668e3d624 Heat: Clean up leftover of CloudWatch API df58fe7bf Make NeutronEnableDVR parameter boolean eac874338 Start ceilometer-compute after libvirt is started f90f685d5 Deprecate support for networking-ansible f5963e236 Fix a syntax error in Horizon's Apache config 6168a9d4b Add new parameter in order to switch firewall engine e89088784 nova-migration-target: Restrict access to the core sshd f2b211267 Support for multiple Cinder Dell EMC VNX storage backends 97f223445 Support for multiple Cinder Dell EMC Unity storage backends 068ca82a4 Re enable DVR with ml2 ovn by default e28adc27d Fix release name in release note 0b9d3bf77 Remove redundant usage of hieradata 5a3f0f336 Remove deprecated ceph-base parameters c2a6a5664 Octavia: Migrate [health_manager] heartbeat_key to base 0f86aab78 Remove deprecated memcached::listen_ip e2b9b630d Remove deprecated parameter 5ddeac53c Set amphora timezone based on TimeZone setting d15794339 Fix service dependency on libvirt daemons e3408da15 Use tripleo_iscsid standalone ansible role 6f5a8e2d8 Use tripleo_kernel standalone role for upgrade_tasks 5139180f3 Revert "Revert "Use tripleo_keystone role"" e174fd82c Deprecate SshServerOptionsOverrides b1b989471 Manage masquerade via Ansible instead of Puppet 9f53e0ce5 Remove Docker support 8c3e0e901 Remove unused environment files for undercloud b7d34e299 Remove Keystone and Memcache from Undercloud abbd67f6f Use tripleo_ovn standalone role for external_deploy_tasks 6a55550a8 NetApp: Deprecate parameters for 7mode systems and E-Series systems 5e314d9f7 Fix run_after of certs_requests in modular libvirt 1da46d9c8 Restrict networks used by nova migration target de96a96f4 Remove redundant *_migration_ssh_inbound_addr 6c673528f Use python job template for Zed 9b06e0850 Add service OS::TripleO::Services::ManilaBackendPowerMax 3378b4c37 Fix deploy failure of keystone for undercloud aa1ad7a5d Revert "Use tripleo_keystone role" 9f2866a33 Octavia ryslog container image set incorrectly 7f6a4b438 Filter empty string in PingTestGatewayIPsMap yagl b2a35f13d Remove 'u' prefix dfcff68e3 Remove old interface from plan-sample 696fd60a7 Only specify nfsver for local Nova NFS backend 3001bc82e Undercloud: Remove iscsid service 5a3d998a2 Clean up removed services from undercloud environment e9bc8e2a0 Use tripleo_keystone role 406e4853d Remove unused libvirt_vnc_specific_ca_set condition 3eda1ad21 Drop removed tripleo::firewall parameters e64e47ebc Remove usage of tripleo::firewall d8d59c2cb Horizon: Fix missing firewall rule for ssl backend 4e1940f15 neutorn-ironic-agent: Use internal endpoint to query Neutron API eae3c2543 Remove implementation for Nuage integration d6e9f84fb Iptables rule for geneve traffic should match UNTRACKED state 8911d02f8 Add back FRR to Undercloud dee269d7a Horizon: Support Strict-Transport-Security header 280e4daaf Remove leftover of Undercloud-specific services a5d7c2f02 Add predictable IP's sample file f71723aa5 Remove legacy network-isolation env files d8604df61 Log source ips instead of controller ips in apache access log 55e7629ab Horizon: Enable client ip detection by X-Forwarded-For header 4e3d90094 Stop generating certificate requests for disabled networks e604adb95 Specify steps for some of the upgrade tasks 0da3db3b9 Install ansible.posix.debug stdout callback plugin 9f028a9a0 Pin ansible-runner <2.2.0 4611aef0b Set tls-verify false when using insecure reg aaa8ce1a6 Remove sidecar containers after SIGTERM is send to stop them 146360efa Don't cleanup catalog entries in check mode e0a338565 Disable crl file in non-pacemaker haproxy too ae900ab27 Fix manila policy override config d9fabc20e Add missing cert generation tasks to glance-api ce0686a55 Don't use hardcoded subnets in VipSubnetMap c20eeb3ac Add until to retry pulling the container images 4d91ad67f Add AdminPassword and KeystoneRegion stack outputs 3699a5689 Remove deprecated storage template and parameters a3dd02377 Define frontend firewall rules separately 6d65b784a Add DNS resolver forwarding support to Unbound ef16c081b Designate/unbound: fix typo in ctlplane subnet name d5e7fd5b1 Add IPA client service to Cell ctrlr role 32e1511b1 Drop all installed heat related parameters d24425f4a Remove non-existing worker parameters 6c26d3378 Remove label=disable for ironic related containers e94814f4a Set ownership of files in external_post_deploy_tasks b5cbc06da Remove parameter to run stunnel by systemd c11604c14 Remove ineffective ovn_remote_probe_interval 7acb4f490 Use Octavia's own default user_log_format value fef8dacd9 Octavia: Accept lists for Ciphers parameters 0e24d92e5 Swift: Get rid of xinetd configuration cdb32139b Globally disable service resource in containers ab2761541 Decouple ssh for nova migration from the host sshd 807f0e638 Heat: Remove non-existing puppet parameters ff83505e8 Replace hiera by lookup 6b2d6d9a0 Deprecate `NovaVGPUTypesDeviceAddressesMapping parameter 5c6283625 Update cinder keystone endpoints 52bf7ee05 Fix CinderDefaultVolumeType constraints 90cf6a6db Switch to stestr 73486ded4 Set rx permissions for all in /var/lib/config-data 7c3f9f1a8 Remove OvsDpdkDriverType 64c75f2f2 Remove unused freeipa_setup.sh 53d3af77f Disabling container validation when running redhat-subscription a8a24184d Nova: Disable instance usage audit by default 21c50b2e6 Move permissions from neutron to ovn-bgp abee6b765 libvirt: Fix invalid dependencies when virtlogd wrapper is enabled a5e081873 Expose new paramter `NovaMDEVTypes` ca4c49613 Cleanup usage of StackAction parameter 42506f635 Deprecate DnsServers THT parameter 0176edf25 Disable auto discovery f78ba117a Add nvidia firstboot yaml to tripleo-heat-template f41324444 Correct hieradata for neutron log rate limiting for ovn 6d0033c95 Fail at first boot if time can't be synced 936aa927d Remove StackAction/StackUpdateType 7fcaf62a8 Remove support for collectd-gnocchi 72a30f2df Ensure cell0 database uri is correct 17fadfbe0 memcached: Replace usage of hiera CLI 47ee7b2f1 OVN: Use puppet-ovn to set ovn-cms-options 86f56244a Fix missing roles for Octavia services Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 29 +- .gitignore | 5 +- .stestr.conf | 3 + .testr.conf | 4 - README.rst | 2 - baremetal-samples/baremetal_deployment.yaml | 131 ++++-- bindep.txt | 9 +- ci/README.rst | 2 +- ci/custom_ci_roles_data.yaml | 11 +- ci/environments/multinode-containers.yaml | 4 +- ci/environments/ovb-ha.yaml | 3 + .../scenario000-multinode-containers.yaml | 1 - ci/environments/scenario000-standalone.yaml | 16 +- .../scenario001-multinode-containers.yaml | 9 - ci/environments/scenario001-standalone.yaml | 23 +- ci/environments/scenario002-standalone.yaml | 1 - ci/environments/scenario003-standalone.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 14 +- .../scenario007-multinode-containers.yaml | 16 + ci/environments/scenario007-standalone.yaml | 2 + .../scenario010-multinode-containers.yaml | 4 +- ci/environments/scenario010-standalone.yaml | 19 +- ci/environments/scenario013-standalone.yaml | 1 + ci/scripts/freeipa_setup.sh | 119 ----- common/common-container-setup-tasks.yaml | 3 +- common/container-puppet.sh | 12 +- common/deploy-steps-playbooks-common.yaml | 2 - ...ep-0.j2.yaml => deploy-steps-tasks-step-0.yaml} | 13 +- common/deploy-steps-tasks-step-1.yaml | 2 +- common/deploy-steps.j2 | 181 +++----- common/services/deployment-bootstrap.yaml | 71 --- common/services/deployment-host-prep.yaml | 52 --- common/services/deployment-legacy-deploy.yaml | 31 -- common/services/deployment-network.yaml | 41 -- common/services/deployment-post-deploy.yaml | 42 -- common/services/deployment-state.yaml | 104 ----- common/services/role.role.j2.yaml | 50 ++- config-download-software.yaml | 8 +- config-download-structured.yaml | 8 +- .../monitoring/collectd_check_health.py | 122 +++--- .../nova_api_ensure_default_cells.py | 161 +++++++ .../nova_statedir_ownership.py | 2 +- .../pacemaker_mutex_restart_bundle.sh | 2 +- .../pacemaker_mutex_shutdown.sh | 4 +- container_config_scripts/pacemaker_wait_bundle.sh | 2 +- .../placement_wait_for_service.py | 1 - deployed-server/ctlplane-port.yaml | 47 -- deployed-server/deployed-server.yaml | 46 -- deployment/README.rst | 9 +- deployment/aodh/aodh-api-container-puppet.yaml | 18 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 2 +- .../aodh/aodh-listener-container-puppet.yaml | 2 +- .../aodh/aodh-notifier-container-puppet.yaml | 2 +- deployment/apache/apache-baremetal-ansible.j2.yaml | 211 +++++++++ deployment/apache/apache-baremetal-puppet.j2.yaml | 18 +- ...l-puppet.yaml => auditd-baremetal-ansible.yaml} | 17 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 110 ----- .../barbican/barbican-api-container-puppet.yaml | 27 +- .../ceilometer-agent-central-container-puppet.yaml | 10 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 12 +- deployment/cephadm/ceph-base.yaml | 181 +++----- deployment/cephadm/ceph-client.yaml | 2 + deployment/cephadm/ceph-grafana.yaml | 24 +- deployment/cephadm/ceph-mgr.yaml | 6 + deployment/cephadm/ceph-osd.yaml | 2 +- deployment/cephadm/ceph-rgw.yaml | 12 +- ...puppet.yaml => ca-certs-baremetal-ansible.yaml} | 12 +- deployment/cinder/cinder-api-container-puppet.yaml | 63 ++- .../cinder-backend-dellemc-powerflex-puppet.yaml | 2 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 2 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 5 +- .../cinder-backend-dellemc-unity-puppet.yaml | 11 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 11 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 154 ------- .../cinder/cinder-backend-netapp-puppet.yaml | 42 +- deployment/cinder/cinder-backend-nfs-puppet.yaml | 109 +++++ .../cinder/cinder-backend-nvmeof-puppet.yaml | 2 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 16 +- .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 75 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 16 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 9 + deployment/containers-common.yaml | 6 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 2 +- deployment/database/mysql-container-puppet.yaml | 4 + deployment/database/mysql-pacemaker-puppet.yaml | 67 +-- deployment/database/redis-base-puppet.yaml | 2 +- deployment/database/redis-container-puppet.yaml | 25 +- deployment/database/redis-pacemaker-puppet.yaml | 35 +- .../etcd-container-puppet.yaml | 32 +- .../neutron-bgpvpn-api-container-puppet.yaml | 0 .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 2 +- .../neutron-l2gw-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-l2gw-api-container-puppet.yaml | 0 ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 3 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 53 ++- .../snmp/snmp-baremetal-puppet.yaml | 5 + .../designate/designate-api-container-puppet.yaml | 18 +- deployment/designate/designate-base.yaml | 6 + deployment/designate/designate-bind-container.yaml | 110 ++++- .../designate-central-container-puppet.yaml | 53 ++- .../designate/designate-mdns-container-puppet.yaml | 45 +- .../designate-producer-container-puppet.yaml | 2 +- .../designate/designate-sink-container-puppet.yaml | 10 +- .../designate-worker-container-puppet.yaml | 24 +- deployment/etcd/etcd-container-ansible.yaml | 334 ++++++++++++++ deployment/experimental/README.rst | 2 +- deployment/frr/frr-container-ansible.yaml | 58 ++- deployment/glance/glance-api-container-puppet.yaml | 62 ++- .../glance/glance-api-edge-container-puppet.yaml | 19 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 16 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 13 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 40 +- .../haproxy/haproxy-edge-container-puppet.yaml | 12 +- .../haproxy-internal-tls-certmonger.j2.yaml | 27 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 35 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 16 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 36 -- deployment/heat/heat-api-container-puppet.yaml | 31 +- deployment/heat/heat-base-puppet.yaml | 11 +- deployment/heat/heat-engine-container-puppet.yaml | 15 +- .../heat/heat-ephemeral-container-ansible.yaml | 18 + deployment/horizon/horizon-container-puppet.yaml | 35 +- .../image-serve/image-serve-baremetal-ansible.yaml | 7 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 26 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 87 ++-- .../ironic/ironic-conductor-container-puppet.yaml | 62 +-- .../ironic/ironic-inspector-container-puppet.yaml | 21 +- .../ironic-neutron-agent-container-puppet.yaml | 1 + deployment/ironic/ironic-pxe-container-puppet.yaml | 29 +- deployment/iscsid/iscsid-container-puppet.yaml | 81 +--- deployment/kernel/kernel-baremetal-ansible.yaml | 20 +- .../kernel-boot-params-baremetal-ansible.yaml | 20 +- deployment/keystone/keystone-container-puppet.yaml | 248 ++++------- deployment/logging/files/keystone.yaml | 12 +- deployment/logging/rsyslog-container-puppet.yaml | 11 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 49 ++- deployment/manila/manila-backend-cephfs.yaml | 17 - deployment/manila/manila-backend-isilon.yaml | 13 - deployment/manila/manila-backend-vmax.yaml | 13 - deployment/manila/manila-backend-vnx.yaml | 13 - .../manila/manila-scheduler-container-puppet.yaml | 14 +- .../manila/manila-share-container-puppet.yaml | 14 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- ... => masquerade-networks-baremetal-ansible.yaml} | 16 +- .../memcached/memcached-container-puppet.yaml | 77 ++-- .../messaging/rpc-qdrouterd-container-puppet.yaml | 2 +- deployment/metrics/collectd-container-ansible.yaml | 12 +- deployment/metrics/collectd-container-puppet.yaml | 198 ++------- deployment/metrics/qdr-container-ansible.yaml | 71 +-- deployment/metrics/qdr-container-puppet.yaml | 6 +- .../neutron/derive_pci_passthrough_whitelist.py | 16 +- deployment/neutron/kill-script | 12 +- .../neutron-agents-ib-config-container-puppet.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 53 ++- deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-compute-plugin-nuage.yaml | 103 ----- .../neutron/neutron-controller-plugin-nuage.yaml | 72 ---- .../neutron/neutron-dhcp-container-puppet.yaml | 36 +- .../neutron/neutron-l3-container-puppet.yaml | 39 +- .../neutron/neutron-metadata-container-puppet.yaml | 14 +- .../neutron-ovs-agent-container-puppet.yaml | 38 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 114 ----- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 27 +- deployment/neutron/neutron-plugin-ml2.yaml | 6 +- .../neutron-plugin-nsx-container-puppet.yaml | 125 ------ .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 124 ++---- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 4 +- .../nova/nova-compute-common-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 198 +++++---- .../nova/nova-conductor-container-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-common.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 16 +- .../nova-migration-target-container-puppet.yaml | 154 +++---- .../nova-modular-libvirt-container-puppet.yaml | 83 ++-- .../nova/nova-scheduler-container-puppet.yaml | 3 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 106 ++--- .../octavia/octavia-api-container-puppet.yaml | 105 +++-- deployment/octavia/octavia-base.yaml | 224 ++++++---- .../octavia/octavia-deployment-config.j2.yaml | 13 +- .../octavia-health-manager-container-puppet.yaml | 23 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 28 +- .../octavia/providers/ovn-provider-config.yaml | 5 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 16 - .../ovn/ovn-controller-container-puppet.yaml | 110 +++-- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 49 ++- deployment/ovn/ovn-dbs-container-puppet.yaml | 63 ++- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 24 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 53 +-- .../pacemaker/clustercheck-container-puppet.yaml | 4 +- .../compute-instanceha-baremetal-puppet.yaml | 2 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 61 --- .../pacemaker/pacemaker-baremetal-puppet.yaml | 21 +- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 15 +- deployment/podman/podman-baremetal-ansible.yaml | 20 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 12 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 4 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 20 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 20 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 17 +- deployment/snmp/snmpd-disabled-puppet.yaml | 85 ++++ deployment/sshd/sshd-baremetal-ansible.yaml | 73 ++-- deployment/sshd/sshd-baremetal-puppet.yaml | 94 ---- deployment/swift/swift-proxy-container-puppet.yaml | 21 +- .../swift/swift-storage-container-puppet.yaml | 56 +-- deployment/time/ptp-baremetal-ansible.yaml | 2 +- .../timemaster/timemaster-baremetal-ansible.yaml | 4 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-firewall-baremetal-ansible.yaml | 59 +-- .../tripleo-packages-baremetal-puppet.yaml | 104 ++--- deployment/unbound/unbound-container-ansible.yaml | 135 +++--- deployment/undercloud/undercloud-upgrade.yaml | 18 +- environments/auditd.yaml | 77 ++-- environments/backup-and-restore/rear.yaml | 3 - environments/barbican-backend-pkcs11-atos.yaml | 4 +- environments/cinder-backup-active-passive.yaml | 2 + environments/cinder-backup.yaml | 4 +- environments/cinder-dellemc-unity-config.yaml | 14 + environments/cinder-dellemc-vnx-config.yaml | 14 + environments/cinder-netapp-config.yaml | 5 - environments/cinder-nfs-config.yaml | 21 + environments/cinder-volume-active-active.yaml | 2 +- environments/composable-roles/monolithic-ha.yaml | 13 - .../composable-roles/monolithic-nonha.yaml | 13 - environments/composable-roles/standalone.yaml | 25 -- environments/dcn-storage.yaml | 6 +- environments/dcn.yaml | 4 - environments/deployed-network-environment.j2.yaml | 19 +- .../deployed-server-deployed-neutron-ports.yaml | 1 - environments/deployed-server-environment.j2.yaml | 14 +- environments/deployed-server-noop-ctlplane.yaml | 4 +- environments/disable-heat.yaml | 1 - environments/disable-neutron.yaml | 5 - environments/docker-ha.yaml | 6 +- environments/docker-network.yaml | 2 - environments/enable-designate.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 1 + environments/enable-stf.yaml | 4 +- environments/external-ceph.yaml | 1 + environments/firewall.yaml | 4 +- environments/ha-redis.yaml | 2 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-converge.yaml | 9 - environments/lifecycle/upgrade-prepare.yaml | 3 +- environments/low-memory-usage.yaml | 2 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-isilon-config.yaml | 1 - environments/manila-vmax-config.yaml | 1 - environments/manila-vnx-config.yaml | 1 - environments/metrics/ceilometer-write-qdr.yaml | 1 + environments/metrics/collectd-read-rabbitmq.yaml | 8 +- environments/net-2-linux-bonds-with-vlans.j2.yaml | 4 - .../net-bond-with-vlans-no-external.j2.yaml | 17 +- environments/net-bond-with-vlans.j2.yaml | 4 - environments/net-dpdkbond-with-vlans.j2.yaml | 4 - environments/net-multiple-nics-vlans.j2.yaml | 4 - environments/net-multiple-nics.j2.yaml | 4 - environments/net-noop.j2.yaml | 5 +- .../net-single-nic-linux-bridge-with-vlans.j2.yaml | 4 - .../net-single-nic-with-vlans-no-external.j2.yaml | 3 - environments/net-single-nic-with-vlans.j2.yaml | 4 - environments/network-environment-v6-all.j2.yaml | 12 - environments/network-environment-v6.j2.yaml | 8 - environments/network-environment.j2.yaml | 8 - .../network-isolation-no-tunneling.j2.yaml | 44 -- environments/network-isolation-v6-all.j2.yaml | 50 --- environments/network-isolation-v6.j2.yaml | 57 --- environments/network-isolation.j2.yaml | 38 -- environments/neutron-bgpvpn-bagpipe.yaml | 4 +- environments/neutron-bgpvpn.yaml | 3 +- environments/neutron-l2gw.yaml | 4 +- environments/neutron-linuxbridge.yaml | 3 +- environments/neutron-ml2-ansible.yaml | 1 + environments/neutron-ml2-vpp.yaml | 7 +- environments/neutron-nsx.yaml | 17 - environments/neutron-nuage-config.yaml | 38 -- environments/nova-cell.yaml | 4 - environments/nova-nuage-config.yaml | 12 - environments/nsx-config.yaml | 22 - environments/podman-ha.yaml | 21 + environments/rhsm.yaml | 44 +- environments/services-baremetal/etcd.yaml | 2 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 3 +- .../services-baremetal/neutron-ovn-ha.yaml | 3 +- .../services-baremetal/undercloud-ceilometer.yaml | 8 - .../services-baremetal/undercloud-cinder.yaml | 4 - .../services-baremetal/undercloud-gnocchi.yaml | 5 - .../services-baremetal/undercloud-haproxy.yaml | 2 - environments/services/designate.yaml | 2 +- environments/services/etcd.yaml | 2 +- environments/services/masquerade-networks.yaml | 2 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 1 + environments/services/neutron-ovn-dvr-ha.yaml | 3 +- environments/services/neutron-ovn-ha.yaml | 3 +- environments/services/neutron-ovn-standalone.yaml | 3 +- environments/services/undercloud-cinder.yaml | 6 - .../services/undercloud-neutron-ovn-dhcp.yaml | 31 ++ environments/standalone/standalone-overcloud.yaml | 6 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/cinder-netapp-config.yaml | 28 -- environments/undercloud-enable-keystone.yaml | 12 - environments/undercloud-enable-nova.yaml | 34 -- environments/undercloud-enable-swift.yaml | 12 - environments/undercloud.yaml | 61 +-- environments/updates/README.md | 2 +- .../update-from-deployed-server-newton.yaml | 2 - .../post_deploy/undercloud_ctlplane_network.py | 8 +- extraconfig/post_deploy/undercloud_post.py | 65 +-- extraconfig/post_deploy/undercloud_post.sh | 2 +- extraconfig/post_deploy/undercloud_post.yaml | 37 +- firstboot/.gitkeep | 0 firstboot/conntectx3_streering.yaml | 31 -- firstboot/os-net-config-mappings.yaml | 51 --- firstboot/userdata_default.yaml | 20 - firstboot/userdata_dev_rsync.yaml | 49 --- firstboot/userdata_example.yaml | 59 --- firstboot/userdata_heat_admin.yaml | 35 -- firstboot/userdata_root_password.yaml | 38 -- firstboot/userdata_timesync.yaml | 98 ----- network/endpoints/endpoint_map.yaml | 478 ++------------------- network/network.j2 | 333 -------------- network/network.network.j2.yaml | 1 - network/network_v6.network.j2.yaml | 2 - network/ovn_mac_addr_net.yaml | 37 -- .../ports/external_resource_port.network.j2.yaml | 2 - .../external_resource_port_v6.network.j2.yaml | 3 - network/ports/from_service_v6.yaml | 8 +- network/ports/ovn_mac_addr_port.yaml | 48 --- network/ports/port.j2 | 153 ------- network/ports/port.network.j2.yaml | 1 - network/ports/port_v6.network.j2.yaml | 2 - network/service_net_map.j2.yaml | 2 +- network_data.yaml | 150 ------- network_data_dashboard.yaml | 128 ------ network_data_ganesha.yaml | 170 -------- network_data_routed.yaml | 211 --------- network_data_subnets_routed.yaml | 188 -------- overcloud-resource-registry-puppet.j2.yaml | 88 ++-- overcloud.j2.yaml | 189 +++----- plan-samples/plan-environment-derived-params.yaml | 38 +- puppet/role.role.j2.yaml | 137 +----- ...Unbound-forwarder-support-8f29e47d4275a798.yaml | 5 + ...swordUponFirstUse-boolean-a3b35fa933da1d6b.yaml | 5 + .../notes/OVNEncapTos-d3312e58600050b3.yaml | 7 + ...-name-discovery-parameter-a113a6de8a220408.yaml | 7 + ...avia-log-offload-protocol-dfc5d8387c3d83bc.yaml | 5 + ...cp-for-baremetal-disabled-4bc4e648da33f4da.yaml | 5 + ...-ovn-ovsdb-probe-interval-243e66290a72eb3c.yaml | 6 + ...-ovn-ovsdb-probe-interval-7ec6aa7f68b9a133.yaml | 8 + .../notes/auditd-to-ansible-f39bd119bf25320e.yaml | 13 + .../notes/bug-1984222-bd32dbd29741ad51.yaml | 4 + .../notes/ca-certs-ansible-7a06114f0571d7f3.yaml | 5 + ...le-dellemc_unity-backends-96c6d2764209e317.yaml | 7 + ...iple-dellemc_vnx-backends-930c8e9309a6ccf5.yaml | 7 + ...der-multiple-nfs-backends-a6b7a107be066596.yaml | 12 + .../cinder-v3-endpoints-498e00f96e77f3c6.yaml | 5 + ...kup_default_switch_to_A-A-4adb439183be78f0.yaml | 11 + ..._nfs_backend_new_template-21243ef33346ed9a.yaml | 9 + ...eanup-heat-api-cloudwatch-f12315e86c7f12d4.yaml | 5 + .../notes/cleanup-xinetd-e2f59fda914b32d9.yaml | 6 + ...-processes-plugin-default-1d07c9ddfde0c2f7.yaml | 6 + .../corosync_token_timeout-d674c873c505cfe6.yaml | 6 + ...fault-ovn-to-raft-cluster-9a1fb213d28d0650.yaml | 16 + .../deprecate-DnsServers-a65541c2dceced08.yaml | 15 + ...pesDeviceAddressesMapping-b4af9f1a48b66854.yaml | 6 + ...ptionsOverrides-parameter-40820bd943e20018.yaml | 5 + ..._nova_migration_sshd_port-b99c1ba0ac012276.yaml | 5 + ...recate-networking-ansible-11004424696a71a4.yaml | 5 + ...ate-neutron-host-services-93a7187fdebe0302.yaml | 9 + ...te-removed-netapp-systems-15c58d7e807ba33a.yaml | 18 + .../notes/deprecate-snmp-084d9e625f4f4e56.yaml | 5 + ...recate_ceph_pg_num_in_tht-91fe6303cc5ba07e.yaml | 13 + .../dnf-streams-interface-c7191173efb7b139.yaml | 8 + ...orts-extension-by-default-4a620563ff5954d6.yaml | 5 + ...atConfigureDelegatedRoles-d16ddb5eb037c4c8.yaml | 10 + ...-yaql-filter-empty-string-b024ce1bce9754ef.yaml | 11 + ...missing-roles-for-octavia-ca024308bf15f0cf.yaml | 4 + .../galera-sst-mariabackup-5a667eed1787353f.yaml | 17 + .../notes/horizon-hsts-43ac1c7b602a4381.yaml | 6 + .../notes/ironic-workers-e752707221a86c36.yaml | 5 + .../notes/libvirt_swtpm_logs-a3ba8c5dcbd53c8c.yaml | 5 + .../notes/mdev_types-84da20d1791afbd2.yaml | 4 + releasenotes/notes/nftables-13caf0261a170667.yaml | 21 + ...nova-instance_usage_audit-dfb17d89446352ae.yaml | 10 + ...e-NeutronCorePluginML2OVN-8641be21f069c1bd.yaml | 6 + .../remove-NovaPlacement-c33569f37b788eaf.yaml | 5 + .../notes/remove-docker-ef1f16744ff03979.yaml | 6 + ...emove-heat-installed-rear-feae3174fb303416.yaml | 6 + ...ove-iscsi-from-undercloud-b7424ffcdc9c02ea.yaml | 5 + .../remove-legacy-networking-e9b7f996722bb93b.yaml | 11 + .../remove-misspelt-param-eeeea6fab711932e.yaml | 5 + .../notes/remove-nsx-support-e118640eebf0ce23.yaml | 6 + .../remove-puppet-masquerade-28ae63cfa7f613d6.yaml | 9 + ...ve-stack-action-parameter-285044bb49ad1f5b.yaml | 5 + .../remove-uc-nova-params-edff776d30992aa3.yaml | 20 + ...move-unused-glance-params-ae24869fef23fa06.yaml | 6 + ...rage-templates-and-params-a2707785af9f617b.yaml | 13 + .../notes/role-image-prepare-602ee8bf86463a97.yaml | 6 + .../set-amphora-timezone-d62de55c993c5d70.yaml | 5 + ...ployment-server-blacklist-532221db0e7d2bef.yaml | 5 + ...ft-do-not-chown-recursive-1086879873cd9fa6.yaml | 7 + ...n-user-log-format-default-3e9bb40c678388fc.yaml | 6 + releasenotes/source/conf.py | 16 +- roles/BlockStorage.yaml | 2 - roles/CellController.yaml | 12 +- roles/CephStorage.yaml | 1 - roles/Compute.yaml | 4 - roles/ComputeAlt.yaml | 1 - roles/ComputeDVR.yaml | 1 - roles/ComputeHCI.yaml | 1 - roles/ComputeHCIOvsDpdk.yaml | 1 - roles/ComputeHCISriov.yaml | 2 - roles/ComputeInstanceHA.yaml | 1 - roles/ComputeLocalEphemeral.yaml | 1 - roles/ComputeOvsDpdk.yaml | 2 - roles/ComputeOvsDpdkRT.yaml | 1 - roles/ComputeOvsDpdkSriov.yaml | 1 - roles/ComputeOvsDpdkSriovRT.yaml | 1 - roles/ComputePPC64LE.yaml | 1 - roles/ComputeRBDEphemeral.yaml | 1 - roles/ComputeRealTime.yaml | 1 - roles/ComputeSriov.yaml | 1 - roles/ComputeSriovIB.yaml | 1 - roles/ComputeSriovRT.yaml | 1 - roles/ComputeVdpa.yaml | 1 - roles/Controller.yaml | 9 +- roles/ControllerAllNovaStandalone.yaml | 3 +- roles/ControllerNoCeph.yaml | 5 +- roles/ControllerNovaStandalone.yaml | 4 +- roles/ControllerOpenstack.yaml | 3 +- roles/ControllerSriov.yaml | 9 +- roles/ControllerStorageDashboard.yaml | 6 +- roles/ControllerStorageNfs.yaml | 6 +- roles/Database.yaml | 1 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 1 - roles/DistributedComputeHCIScaleOut.yaml | 1 - roles/DistributedComputeScaleOut.yaml | 1 - roles/HciCephAll.yaml | 1 - roles/HciCephFile.yaml | 1 - roles/HciCephMon.yaml | 1 - roles/HciCephObject.yaml | 1 - roles/IronicConductor.yaml | 1 - roles/Messaging.yaml | 1 - roles/Networker.yaml | 1 - roles/NetworkerSriov.yaml | 1 - roles/Novacontrol.yaml | 1 - roles/ObjectStorage.yaml | 4 - roles/README.rst | 2 +- roles/Standalone.yaml | 4 +- roles/Telemetry.yaml | 1 - roles/Undercloud.yaml | 10 +- roles_data.yaml | 20 +- roles_data_undercloud.yaml | 10 +- sample-env-generator/composable-roles.yaml | 53 --- sample-env-generator/dcn.yaml | 6 +- sample-env-generator/nova-cell.yaml | 4 - sample-env-generator/ssl.yaml | 2 +- sample-env-generator/standalone.yaml | 20 +- sample-env-generator/storage.yaml | 33 +- scripts/check-run-nova-compute | 38 +- scripts/undercloud-upgrade-ephemeral-heat.py | 37 +- setup.py | 1 + test-requirements.txt | 1 + tools/convert_heat_nic_config_to_ansible_j2.py | 4 +- tools/convert_nic_config.py | 4 +- tools/convert_policy_yaml_to_heat_template.py | 2 +- tools/merge-new-params-nic-config-script.py | 11 +- tools/process-templates.py | 10 +- tools/yaml-diff.py | 2 +- tools/yaml-validate.py | 34 +- tox.ini | 16 +- tripleo_heat_templates/environment_generator.py | 18 +- zuul.d/layout.yaml | 4 +- 502 files changed, 5040 insertions(+), 8121 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 90fd4a994..d59d447df 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ testtools>=2.2.0 # MIT +stestr>=2.0.0 # Apache-2.0

1 0

tripleo-common 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We high-spiritedly announce the release of: tripleo-common 17.0.0: A common library for TripleO workflows. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ For more details, please see below. Changes in tripleo-common 16.4.0..17.0.0 ---------------------------------------- 704cdb26 tripleo-mount-image: replace most lsblk calls with blkid e80399dc Add Python MySQL drivers to the horizon container 6ebdbdca Fix the roles symlink bb4b7beb Stop rendering legacy NetworkConfig 8aa57665 Add TRIPLEO_KOLLA_UMASK for custom umask settings e310a3ce Drop ANSIBLE_RUNNER_IMAGE from tcib_args 9ee02907 Drop collections/roles list installed from ansible-galaxy e375afe2 Fix config file path in redis healtcheck script 54a6bac5 Add an Ansible execution environment to our Build f47a6ffc Derive parameters clean up 10f2ef5e Revert "Populate /var/lib/ironic/tftpboot in ironic-pxe image build" c1b5df9d Do not install syslinux-tftpboot 83936eef Populate /var/www/cgi-bin/ironic/ with wsgi app 5cb35bd5 Add excluded group to inventory 0366b14d Fix condition for CHROOT, missing quotes 2e5d3662 Removing 'disable_constraints' key from role validation schema b14ee1ac overcloudrc: Replace OS_CLOUDNAME by OS_CLOUD 615cf9ff Update ovmf-amdsev from ovmf-cc to boot UEFI VMs bcfa3edc Populate /var/lib/ironic/tftpboot in ironic-pxe image build 0267a669 Drop ctlplane from role_networks ansible var c86bd65c Remove ceilometer-common from swift images d8d781f9 Update UNDERCLOUD_SERVICES list to reflect current undercloud services def93757 Remove sysfsutils from nova container f4b3ff3c Add chroot support to tripleo-mount-image e6b0a7bf Support standard partition type GUIDs 6334593e Support multiple mounts without explicit nbd devices b48d0d57 Clustercheck healthcheck with socat and ipv6 6939ec8b Fix ImageBuildManager initialization after BaseImageManager changes b3718ffb Remove unused ironic-inspector-client d407c857 Stop downgrading pacemaker 2ed0a337 Remove unused oslo.rootwrap bce186ab Fix missing healthcheck script for manila-api/share 040490be Remove unused heat-docker-agent b3c29e34 Stop generating KeystoneFernetKey[01] 60993493 Add dependency for container healthcheck script 529a5ac2 Moves the shared zuul queue tripleo to the project level 0b6ae01e Downgrade pacemaker, resource-agents - exact ver 253049a5 Add rsync-daemon to swift container bf875554 Downgrade pacemaker and resource-agents 6d8b07b7 Reduce memory consumption in Cinder services c3db9764 Remove unused oslo.vmware from Neutron image e081e00e Fix services associated with rsyslog container image f73c56ef Drop collectd-dbi from collectd base container 115a740e Install grub2-efi, shim in ironic-pxe image 47e5225e Remove unused urllib3 468a448c Move actual requirements from test-requirements.txt 486deab3 Remove unused libraries from requirements b36e292c Update ceph daemon image pull registry 933db5dc Use python job template for Zed 105a0c86 New dedicated user for Galera SST synchronization 659c8e5a Remove /v2 URL extension e3d55c7c Revert "task-core file generation" 4248a3b4 Add the dbus-tools package to manila-share image cf971eff Remove reference to Undercloud services 62d71bae Remove implementations for novajoin support 05c72a89 Remove overcloud-agent element from overcloud images 78e04160 Don't install common packages directly 675db94f Update the default namespace 11d0164e Drop undercloud_heat_plugins 852a2d8e Remove tripleo-build-containers-jobs template from zuul layout a3498ffb Remove custom subclass to re-enable software deployment by Heat 32a9a5cc Remove unused cirros_arch 6b3ba130 Adding testing on build_catalog 7b786c0c Add element reset-bls-entries to overcloud images ab69a2b3 Remove "deprecated" key in inventory 5c909793 build_catalog should loop deeper than one level 7a7bbcec Remove python-collectd-gnocchi from the image 0cf9c127 Generate database URI for ed25519 passwords 90fd3c41 Add _create_overcloudrc_from_outputs 29324699 Switch from grub2 to bootloader element for overcloud-full Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 6 +- container-images/kolla/base/start.sh | 1 + container-images/kolla/base/uid_gid_manage.sh | 1 - .../kolla/tripleo-ansible-ee/requirements.yaml | 19 +++ container-images/kolla/tripleo-ansible-ee/settings | 26 +++ .../kolla/tripleo-ansible-ee/tripleo_entrypoint.sh | 7 + container-images/tcib/base/collectd/collectd.yaml | 4 +- .../cinder-base/cinder-backup/cinder-backup.yaml | 4 + .../cinder-base/cinder-volume/cinder-volume.yaml | 4 + container-images/tcib/base/os/horizon/horizon.yaml | 1 + .../base/os/ironic-base/ironic-api/ironic-api.yaml | 1 + .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 4 +- .../base/os/manila-base/manila-api/manila-api.yaml | 1 + .../os/manila-base/manila-share/manila-share.yaml | 2 + .../tcib/base/os/neutron-base/neutron-base.yaml | 1 - .../tcib/base/os/nova-base/nova-api/nova-api.yaml | 1 - .../nova-compute-ironic/nova-compute-ironic.yaml | 1 - .../os/nova-base/nova-compute/nova-compute.yaml | 4 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 2 + .../tcib/base/os/novajoin-base/novajoin-base.yaml | 6 - .../novajoin-notifier/novajoin-notifier.yaml | 2 - .../novajoin-server/novajoin-server.yaml | 2 - .../tcib/base/os/swift-base/swift-base.yaml | 1 + .../swift-proxy-server/swift-proxy-server.yaml | 1 - .../tripleo-ansible-ee/tripleo-ansible-ee.yaml | 47 ++++++ container-images/tripleo_containers.yaml | 180 ++++++++++----------- container-images/tripleo_containers.yaml.j2 | 46 +----- healthcheck/manila-api | 6 + healthcheck/manila-share | 14 ++ healthcheck/mariadb | 3 + healthcheck/redis | 6 +- heat_docker_agent/Dockerfile | 18 --- heat_docker_agent/configure_container.sh | 104 ------------ ...oud-hardened-images-uefi-python3-rt-kernel.yaml | 9 +- .../overcloud-hardened-images-uefi-python3.yaml | 10 +- image-yaml/overcloud-images-ceph.yaml | 13 +- image-yaml/overcloud-images-python3.yaml | 13 +- image-yaml/overcloud-realtime-compute-python3.yaml | 12 +- ...reduce-memory-consumption-d7effb68ab63b8c5.yaml | 5 + requirements.txt | 10 +- scripts/tripleo-mount-image | 110 +++++++++++-- setup.cfg | 5 +- test-requirements.txt | 2 - tripleo_common/arch.py | 5 - tripleo_common/constants.py | 9 +- tripleo_common/exception.py | 4 - tripleo_common/image/build.py | 2 +- tripleo_common/image/image_export.py | 17 +- tripleo_common/image/image_uploader.py | 4 +- tripleo_common/inventory.py | 88 +++------- .../inventory_data/undercloud_dynamic_merged.json | 7 +- .../inventory_data/undercloud_static_merged.yaml | 3 +- tripleo_common/utils/config.py | 119 +------------- tripleo_common/utils/overcloudrc.py | 26 ++- tripleo_common/utils/parameters.py | 30 ---- tripleo_common/utils/passwords.py | 24 ++- tripleo_common/utils/roles.py | 1 - undercloud_heat_plugins/__init__.py | 0 undercloud_heat_plugins/config.py | 30 ---- undercloud_heat_plugins/immutable_resources.py | 61 ------- undercloud_heat_plugins/server_update_allowed.py | 36 ----- zuul.d/cross-jobs.yaml | 6 +- zuul.d/layout.yaml | 16 +- 85 files changed, 565 insertions(+), 1031 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 761984e8..e2dc3598 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +9,0 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.rootwrap>=5.8.0 # Apache-2.0 @@ -12 +10,0 @@ oslo.utils>=3.33.0 # Apache-2.0 -python-glanceclient>=2.8.0 # Apache-2.0 @@ -15 +12,0 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -python-ironic-inspector-client>=1.5.0 # Apache-2.0 @@ -17 +13,0 @@ Jinja2>=2.10 # BSD License (3 clause) -python-novaclient>=9.1.0 # Apache-2.0 @@ -19 +14,0 @@ passlib>=1.7.0 # BSD -netifaces>=0.10.4 # MIT @@ -21,3 +15,0 @@ cryptography>=3.4.7 # BSD/Apache-2.0 -netaddr>=0.7.18 # BSD -python-keystoneclient>=3.8.0 # Apache-2.0 -keystoneauth1>=3.4.0 # Apache-2.0 @@ -26 +17,0 @@ metalsmith>=0.13.0 # Apache-2.0 -jsonschema>=3.2.0 # MIT @@ -27,0 +19 @@ requests>=2.18.0,!=2.20.0 # Apache-2.0 +PyYAML>=3.12 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 58a87542..9ebc578e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,2 +10,0 @@ testtools>=2.2.0 # MIT -PyYAML>=3.12 # MIT -urllib3>=1.21.1 # MIT

1 0

ansible-role-redhat-subscription 1.3.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are thrilled to announce the release of: ansible-role-redhat-subscription 1.3.0: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.2.0..1.3.0 -------------------------------------------------------- eefe501 Update rhsm_disable_container_check default value f703e5c Add missing environment for a couple of tasks 9d1a918 Add trailing slash to status URI 2c4cd36 fix typo 4646e4e Retry polling the satellite endpoint on failure 41b5d0b Update the satellite task file for version checks da50e0e Fix Ansible Lint Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 +- README.md | 2 +- ansible-requirements.txt | 2 +- defaults/main.yml | 14 +++--- library/rhsm_repository_conf.py | 8 +-- meta/main.yml | 13 ++--- setup.py | 1 + tasks/portal.yml | 6 ++- tasks/register.yml | 2 +- tasks/satellite-5.yml | 2 +- tasks/satellite-6.yml | 6 ++- tasks/satellite.yml | 105 +++++++++++++++++++++++++--------------- tasks/unregister.yml | 2 +- tox.ini | 2 +- vars/main.yml | 2 +- 17 files changed, 100 insertions(+), 73 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index 7507f3e..f5398ac 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -5 +5 @@ -ansible<2.10 +ansible-core<2.12

1 0

python-tripleoclient 19.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are chuffed to announce the release of: python-tripleoclient 19.0.0: TripleO client The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. Changes in python-tripleoclient 18.0.0..19.0.0 ---------------------------------------------- bcafdf71 Fix overcloud cell export paths e7da2e54 Undercloud: Deprecate unused scheduler_max_attempts 8129d94a Only use rpm installed collections/modules 66156f73 Execute undercloud preflight validations via VF binary 1846d14a overcloud-deploy: Only support pre-provisioned node 0167db88 Don't try stack delete with overcloud delete 17bf3ed4 Fix password file path message 832812a1 Remove leftover of SwiftFetchDir(Get|Put)Tempurl 8d5d3a93 Remove logic to detect legacy network resources cd940dbc Add timeout arg to node delete commands 0d3e3b92 Replace some unnecessary os.path.join() 6916f55c get_overcloud_hosts() should not return a list with empty strings 2ed0a66a Undercloud: Remove deprecated/removed IPv6 parameters 5ad2be71 Undercloud: Deprecate [DEFAULT] enable_swift_encryption 4c4612e8 Use custom seccomp profile for ephemeral heat pod 296b46bb Look for keys in the new default work dir 0621d8fe Change git user for config-download af566e52 admin authorize: Deprecate ineffective --overcloud-ssh-network 45b1091d Use hostNetwork for ephemeral heat pod a197198b Use host network for db_sync e5e84503 Derive parameters clean up 936b46c8 Run unprovision before provision 96683fd4 remove unicode prefix from code fff37dfe Do not allow uc upgrade when network plugin changes 54898e34 Set working cs9 defaults for image build 32888b9c standalone heat: Retry removing the install directory a28cbdcb Skip CephIngress daemon deploy 76c11a56 Remove migration from undercloud-passwords.conf 43c2810d Add cell export to overcloud deploy 0479d729 Support role specific ContainerImagePrepare ec8e1342 Heat Launcher - bracket IPv6 in db connection URI 8b71cb9b Patch ensure_run_as_normal_user() in unit tests 88ec22f6 Removing Popen object return from utils.run_command_and_log 1983d7d4 Removing TODO lacking sufficient description f3a34b96 Stop mocking workflow client 8038c0d9 Use realpath for checking directories 29fe3996 Ensure tripleo_ceph_client_vars is set consistently 7d9de320 Generate inventory with default ansible_ssh_user 9909d9b1 Support remove and revert actions 40abe6c7 Stop using heat-admin as ansible_ssh_user ca80181f Return Undercloud role instead of Controller 5900a1eb Extract provisioned nodes - use ironic node uuid da75b98b Stop deploying Ceph during the overcloud deployment 269fa30b ExtractProvisionNode adding resource_class if its possible 43bfc1fb Default working_dir for overcloud credential command 019441f1 Fix upgrade prepare 6d18e27d Fix upgrade/external_update/external_upgrade 5ee23cf8 Limit standalone ceph-admin user creation to a single host 2011e796 Standalone - ovn_bridge_mac comma_delimited_list c9218859 Do not end ceph_namespace with a slash 8afa8a03 Set owner/permissions on ~/.tripleo for tripleo deploy 5a6c8fc0 Refactor deploy validations for ephemeral heat 076365f3 Drop unnecessary mocks in tests cb700f43 Add HostsEntry to saved stack output f931e73c Add handling for roles and networks to answers fda32334 Fall back to alt path for ceph client data during export df5e6158 Remove overcloud config download command 7ac73357 Add release note for dropping upgrade converge ad48f5c4 Fix unittests for py310 c11228c5 Update cell export for ephemeral heat e708734e Remove duplicate check from tripleo-deploy cbbe7cdd Only export overcloud for --stack-only/full deploy d116a5af Ignore unreachable errors for scale playbook 9b03cf1d Fix unused DEFAULT_CONTAINER_TAG a769aa76 Undercloud: Deprecate options for removed services adede336 Remove unused passlib from requirements 56003d30 Add GlobalConfig to saved stack outputs a266374a Replace simplejson by built-in json 7f7f423a Remove leftover of minion 80290ad9 Enable snapshots on the CLI d8dabbc6 Revert "Remove masquerade-networks-baremetal-puppet inclusion" e689a4e3 overcloud delete - bm_deploy - delete ports 65f36df8 Use node UUID for bridge_mapping agent check 7e380a52 Use python job template for Zed a12fef6e Add ip_version to CtlplaneNetworkAttributes b56a6035 update output path cli switch d1a4ce70 Add warning for duplicate parameters fb7c8f5c Ensure each host is type string 6442450a Replace non-inclusive language 81c0b75b Remove ineffective parameter from standalone/ephemeral heat.conf d424f022 Fix typo in heat.conf for standalone heat 0e632c6b Remove unused object storage client implementation 3313a393 Call the right process_daemon function 1a590237 Mocking utils.check_deploy_backups in OvercloudDeploy tests 53030b9e Set yaql limit iterators to 10000 for ephemeral Heat f36945ad Fix typo "conatiner" -> "container" a59dde9a Remove tripleo-build-containers-jobs template from zuul layout 6a9db445 Improved test coverage for tripleo validator 8511e8e2 Remove upgrade converge ea8795d0 Revert "Setting default inventory path for VF interface with ooo client." cb6cf7b1 bnr - overcloud restore - fix error in the help description for the stack parameter 97a155ea Remove masquerade-networks-baremetal-puppet inclusion d58fa71b Create Ceph pools/cephx keys before overcloud deploy de26c288 Fix node delete for unprovision confirmation eb3d238d Set deployment_status during config generation 60d17b2f Remove --heat-type=installed support 2843b447 Consolidate ephemeral Heat interaction to single try/finally d7af2f54 Remove Heat API dependency for overcloud export 035827f3 Update overcloud credentials to use ephemeral Heat 9bf5fc90 Revert "use more defaults and simplify our options" 30556b53 Remove use of the six library 2231afdb Exclude empty string from no_proxy ddb3525b Update the default namespace 051f7e4d use more defaults and simplify our options c48d0fce Change validations log_path parameter 246d1e6f Allow jinja2 templates in preflight validation dfed2b19 Check for both config.yaml/config.json 1952f5a6 cephadm support for 'openstack overcloud export ceph' 3406b143 update env options to resolve deprecation warnings 3fe14056 Drop StackAction related hack from tripleo deploy ebad3a20 Move Ansible imports to correct UX Warnings ebe72e70 Allow user to override Ceph cluster name 8cbf9c23 Handle KeyboardInterrupt for ephemeral Heat cleanup f58fb3df Default tripleo launch heat heat-type to pod b32a3782 Check undercloud disk space during overcloud deploy 90ee1b3a node extract provisioned - warning no net_conf tpl e3c66d6a node export provisioned - get role_data from stack Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 - config-generator/minion.conf | 3 - ...oles-and-networks-answers-f23927c9075c7e99.yaml | 6 + ...ate-overcloud-ssh-network-a2a1bdf745c4796c.yaml | 5 + ...for-network-plugin-change-ba8459b171b8e37e.yaml | 7 + .../deprecate-stack-action-c3912259bfc9f509.yaml | 6 + ...e-static-inventory-option-4342b01aebaa4af8.yaml | 6 + ...uc-scheduler_max_attempts-9018c4635507940b.yaml | 6 + .../notes/inclusive_language-8d44129de1e8099a.yaml | 5 + ...loy-force-pre-provisioned-b50159643a31b3d2.yaml | 6 + ...e-config-download-command-1427d6609412e3e3.yaml | 7 + ...remove-derived-parameters-2be57032391b52e7.yaml | 5 + ...emove-heat-type-installed-6c7a90af45f57231.yaml | 5 + .../remove-upgrade-converge-12106c08ffd1be3b.yaml | 7 + .../notes/uc-unused-services-4270d05503ec2eba.yaml | 12 + releasenotes/source/conf.py | 14 +- requirements.txt | 2 - setup.cfg | 7 +- templates/ephemeral-heat/heat-pod.yaml.j2 | 7 +- templates/ephemeral-heat/heat.conf.j2 | 5 +- tripleoclient/command.py | 24 - tripleoclient/config/standalone.py | 14 + tripleoclient/config/undercloud.py | 7 + tripleoclient/constants.py | 42 +- tripleoclient/export.py | 112 +++-- tripleoclient/heat_launcher.py | 27 +- tripleoclient/plugin.py | 28 -- .../v1/overcloud_config/test_overcloud_config.py | 64 --- .../v1/overcloud_deploy/test_overcloud_deploy.py | 143 +++--- .../test_overcloud_external_update.py | 33 +- .../test_overcloud_external_upgrade.py | 27 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 61 +-- .../test_tripleo_container_image.py | 4 +- .../v2/overcloud_delete/test_overcloud_delete.py | 8 +- .../v2/overcloud_network/test_overcloud_network.py | 24 +- tripleoclient/utils.py | 512 +++++++++++++-------- tripleoclient/v1/overcloud_admin.py | 16 +- tripleoclient/v1/overcloud_backup.py | 216 +++++++-- tripleoclient/v1/overcloud_cell.py | 34 +- tripleoclient/v1/overcloud_config.py | 91 ---- tripleoclient/v1/overcloud_credentials.py | 39 +- tripleoclient/v1/overcloud_deploy.py | 306 +++++------- tripleoclient/v1/overcloud_export.py | 73 ++- tripleoclient/v1/overcloud_external_update.py | 84 ++-- tripleoclient/v1/overcloud_external_upgrade.py | 47 +- tripleoclient/v1/overcloud_node.py | 78 +++- tripleoclient/v1/overcloud_restore.py | 2 +- tripleoclient/v1/overcloud_update.py | 16 +- tripleoclient/v1/overcloud_upgrade.py | 82 +--- tripleoclient/v1/tripleo_deploy.py | 201 ++------ tripleoclient/v1/tripleo_launch_heat.py | 24 +- tripleoclient/v1/tripleo_validator.py | 8 +- tripleoclient/v1/undercloud.py | 6 +- tripleoclient/v1/undercloud_config.py | 56 +-- tripleoclient/v1/undercloud_preflight.py | 76 +-- tripleoclient/v2/overcloud_ceph.py | 140 +++++- tripleoclient/v2/overcloud_delete.py | 14 +- tripleoclient/v2/overcloud_node.py | 2 +- tripleoclient/v2/tripleo_container_image.py | 20 +- tripleoclient/workflows/deployment.py | 65 +-- tripleoclient/workflows/parameters.py | 83 ---- tripleoclient/workflows/tripleo_baremetal.py | 8 +- zuul.d/layout.yaml | 5 +- 89 files changed, 2295 insertions(+), 2375 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8befe347..c8f8d15b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -passlib>=1.7.0 # BSD @@ -12 +10,0 @@ python-openstackclient>=5.2.0 # Apache-2.0 -simplejson>=3.5.1 # MIT

1 0

puppet-pacemaker 1.5.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are ecstatic to announce the release of: puppet-pacemaker 1.5.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.4.0..1.5.0 ---------------------------------------- cf2cfcb Disable setuptools auto discovery 4332e62 Bump metadata for tripleo zed release 8b88f00 Replace hiera by lookup f003a53 Add 'Release Notes' in README Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 ++++++++----- Gemfile | 1 + README.md | 1 + manifests/resource/bundle.pp | 6 +++--- manifests/resource/filesystem.pp | 4 ++-- manifests/resource/ip.pp | 8 ++++---- manifests/resource/lsb.pp | 4 ++-- manifests/resource/ocf.pp | 6 +++--- manifests/resource/remote.pp | 6 +++--- manifests/resource/route.pp | 4 ++-- manifests/resource/service.pp | 4 ++-- manifests/resource/systemd.pp | 4 ++-- metadata.json | 13 +++++++------ setup.py | 1 + 14 files changed, 41 insertions(+), 34 deletions(-)

1 0

os-net-config 16.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We exuberantly announce the release of: os-net-config 16.0.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.2.0..16.0.0 --------------------------------------- 84f11c7 zuul: Declare queue at top level 3992b4d Drop support for Python 3.6 and 3.7 ce073e0 Fix formatting of release list 49bdd97 Use python job template for Zed d8c7e7e Add mac-size-table to all OVS bridges 88a4c88 Format json output properly 9ef2707 Fix failure in dpdk driver binding with VF during reboot Diffstat (except docs and test files) ------------------------------------- os_net_config/cli.py | 7 ++- os_net_config/common.py | 85 ++++++++++++++++++++++++++ os_net_config/impl_ifcfg.py | 3 + os_net_config/objects.py | 19 ++++-- os_net_config/sriov_config.py | 3 + os_net_config/utils.py | 106 ++++++++++----------------------- releasenotes/source/unreleased.rst | 2 +- setup.cfg | 5 +- zuul.d/layout.yaml | 6 +- 12 files changed, 191 insertions(+), 119 deletions(-)

1 0

puppet-tripleo 17.0.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We are jazzed to announce the release of: puppet-tripleo 17.0.0: Puppet module for OpenStack TripleO The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. Changes in puppet-tripleo 16.1.0..17.0.0 ---------------------------------------- e40b7c4a Bump metadata for tripleo zed release 171814eb Allow passing aditional arguments to wsrep_provider_options f6e1a2ab fencing: Remove unused logic to detect deployment type 16992c6e MySQL Client: Remove logic for non-containerized deployment 424d9d1f haproxy: Remove logic for non-containerized haproxy service c4890a2b Fix typos in parameter descriptions, comments and tests 84277251 Pacemaker: Replace hiera by lookup (2) 0592be3a Allow disabling puppet tasks to configure apache/vhost acd16947 Remove implementation for Nuage integration b37e8f7c Neutron: Remove NSX plugin support 136f7a16 tls_proxy: Make sure port is an integer 6dc7cde6 RabbitMQ: Migrate environment/volumes definition bd447d60 mysql_bundle: Remove redundant override of mysqld options 83a83379 remove unicode from code 31b1caa1 HAProxy: Replace hiera by lookup (2) ae261bb7 Remove manifest for auditd service 8556df09 galera: make gcache recovery configurable ecda0e14 Add etcd3gw api_version to cinder backend_url b52cf6a0 Neutron: Replace hiera by lookup ae15e803 RabbitMQ: Simplify how to suppress error from pam_unix.so b58a5dcb Heat: Manage policy settings in heat-engine a8773e28 Drop support of CentOS 8 and RHEL 8 c71a7afe Ironic: Manage [disk_utils] parameters by puppet ad0b6a77 Get rid of noop service provider 555a09de Configure ovn sb connection for the ovn provider 280abc73 Revert "Fix live-migration with libvirt >= 6.8.0" 259e4476 Designate: add non-backend syntax for miniDNS haproxy support 49fe38d1 Remove unused resource to set up ceilometer DB b1097f19 Redis: Share the same base class 47905493 Octavia: Add unit tests for ovn clustered DB c759bb47 Remove puppet-tripleo/firewall a15c5f87 Designate: create proxy ports on external VIP to access miniDNS workers f593a9a0 Fix tls related grafana check in the cephadm context bb002c9d Change neutron backend's timeout in haproxy to 10 minutes e6a4118d Add support for ovn clustered DB in the octavia ovn-provider 4d1bda48 Neutron: Avoid undefined variables 587819dd Include a class to manage network_api:neutron parameters ae739fe4 Database: Replace hiera by lookup fbda281c HAProxy: Replace hiera by lookup (1) 7e85c0a6 HAProxy: Remove unused logic to reload haproxy service df7a42f7 Moves the shared zuul queue tripleo to the project level d7a46e1b Remove unused class for cell v2 setup 0d6db242 Support mariabackup as a galera SST method 2a4461a7 Support to configure cinder backend_defaults ef041632 Remove implementations for Docker support 491d9b42 Disable keystone domain creation by keystone::ldap_backend f736d081 Designate: configure unbound resolvers as dns servers 36c3ad48 nova-migration-target: Remove redundant options from match block ac67b462 Support configuring multiple Dell EMC VNX cinder backends e6c8502f Remove leftover of firewall management by puppet 18ef55f8 Support configuring multiple Dell EMC Unity cinder backends 0b6d00bc Support configuring multiple NFS cinder backends 7e36cf49 Nova: Replace hiera by lookup e51bf81f nova-conductor: Fix wrong bootstrap node hieradata used 837abea1 Horizon: Support Strict-Transport-Security header b79df067 Vpp: Replace hiera by lookup a0b8bfe3 Auditd: Replace hiera by lookup d6ed3576 Pacemaker: Replace hiera by lookup (1) 501522bf Include octavia task_flow manifest for octavia services 9765e20f Remove file ACL settings for ceph keyring 1d7c92df Correct typo on hieradata key 330d2b5e sshd: Remove unused implementation to restrict ssh access c13b609e sshd: Allow customizing the ListenAddress option 2acd2f4b Designate: Replace hiera by lookup 94854028 Redis required for designate central service 27930ca5 iscsid: Replace hiera by lookup c205685c NetApp: Remove implementation for 7mode systems and E-Series systems 89572109 sshd: Remove unused implementation to set up MOTD/Banner 74fb1e4d Nova: Drop unused logic to remove the libvirt default network 373dee41 Remove implementation to manage firewall rules by Puppet 28b340c0 Octavia: Replace hiera by lookup aa7dee4d Heat: Manage [clients] options 727305a2 RabbitMQ: Replace hiera by lookup 445ddfd1 Ironic-inspector: Replace hiera by lookup 692174d2 Ironic: Replace hiera by lookup 9be30d13 Metrics/QDR: Replace hiera by lookup 4f41077f Remove unused extract_id function 46a9bf61 Remove unused netmask_to_cider function b3ecd682 Fix noop_resource function with package resource 439eb262 Remove ineffective ovn_remote_probe_interval 29ce3e35 Placement: Replace hiera by lookup bbdc4281 Horizon: Replace hiera by lookup c0aaf967 Gnocchi: Replace hiera by lookup 7045142b Gnocchi: Clean up unused parameters 8794022f HAProxy: deprecate activate_httplog 369134ec Snmpd: Replace hiera by lookup 5a25ae9a Memcached: Replace hiera by lookup 7e6dd305 Keystone: Replace hiera by lookup e851a9b0 Barbican: Replace hiera by lookup 034ce1ef Ceilometer: Replace hiera by lookup cf3e7b2c Aodh: Sync default value in parameter description 4c244905 Logging: Replace hiera by lookup 0432ed43 tls_proxy: Replace hiera by lookup 243d35a3 Remove unused implementation to manage stunnel by systemd 8abf437e Remove unused implementation to trigger ceilometer-upgrade 466f5703 Ssh: Replace hiera by lookup a90e26d4 Use stdlib function to remove undef values from array 77a4833a Remove workaround for old puppetlabs-apache 315aa58f Remove unused sysctl::value resource 2123ff49 Nova: Remove manifest for nova-serialproxy 470086b1 Manila: Replace hiera by lookup aba0d7f6 packages: Remove unused deployment_type check 0270bf98 Remove package update by puppet 798ea9af Heat: Sync default value in parameter description 3d9363f4 Glance: Replace hiera by lookup 62653535 Cinder: Replace hiera by lookup 916e7150 Swift: Replace hiera by lookup 97e69822 Etcd: Replace hiera by lookup 0d4c1616 Manila: Remove unnecessary 'undef' d4afc290 HAProxy: enable forwardfor for all http endpoints ad9fcbd9 Aodh: Replace hiera by lookup d8d906ff Heat: Replace hiera by lookup 1c03aea7 nova_migraton_target: Remove redundant service name check 7e1d6e48 Drop support for collectd-gnocchi 532d647b Fix outdated requirements/dependencies ba1e5932 Do not include the ssh::server class directly b9c60225 Nova: Remove unused migration proxy d7248de3 Remove unused puppet-ptp 5967b1ff Remove manifests for Contrail deployment 24e9a03f Remove support for Nuage core plugin f2233f01 Use octavia::networking to manage [networking] parameters Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 4 - Rakefile | 2 +- files/stunnel.service | 19 - lib/facter/docker_group_gid.rb | 24 - lib/puppet/functions/extract_id.rb | 17 - lib/puppet/functions/netmask_to_cidr.rb | 15 - lib/puppet/functions/noop_resource.rb | 28 + lib/puppet/provider/service/noop.rb | 17 - manifests/fencing.pp | 14 +- manifests/firewall.pp | 203 ------- manifests/firewall/post.pp | 65 --- manifests/firewall/pre.pp | 62 -- manifests/firewall/rule.pp | 203 ------- manifests/firewall/service_rules.pp | 42 -- manifests/haproxy.pp | 631 +++++++++++---------- manifests/haproxy/endpoint.pp | 80 +-- manifests/haproxy/horizon_endpoint.pp | 66 +-- manifests/haproxy/service_endpoints.pp | 8 +- manifests/haproxy/stats.pp | 4 +- manifests/masquerade_networks.pp | 66 --- manifests/network/contrail/analytics.pp | 381 ------------- manifests/network/contrail/analyticsdatabase.pp | 202 ------- manifests/network/contrail/config.pp | 416 -------------- manifests/network/contrail/control.pp | 211 ------- manifests/network/contrail/database.pp | 166 ------ manifests/network/contrail/heat.pp | 87 --- manifests/network/contrail/neutron_plugin.pp | 192 ------- manifests/network/contrail/provision.pp | 92 --- manifests/network/contrail/vrouter.pp | 356 ------------ manifests/network/contrail/webui.pp | 132 ----- manifests/pacemaker/haproxy_with_vip.pp | 21 +- manifests/packages.pp | 23 +- manifests/packages/upgrades.pp | 43 -- manifests/profile/base/aodh.pp | 56 +- manifests/profile/base/aodh/api.pp | 37 +- manifests/profile/base/aodh/authtoken.pp | 24 +- manifests/profile/base/aodh/evaluator.pp | 14 +- manifests/profile/base/aodh/listener.pp | 4 +- manifests/profile/base/aodh/notifier.pp | 4 +- manifests/profile/base/apache.pp | 16 +- manifests/profile/base/auditd.pp | 30 - manifests/profile/base/barbican.pp | 4 +- manifests/profile/base/barbican/api.pp | 85 +-- manifests/profile/base/barbican/authtoken.pp | 24 +- manifests/profile/base/barbican/backends.pp | 18 +- manifests/profile/base/ceilometer.pp | 52 +- .../profile/base/ceilometer/agent/notification.pp | 6 +- manifests/profile/base/ceilometer/agent/polling.pp | 30 +- manifests/profile/base/ceilometer/upgrade.pp | 62 -- manifests/profile/base/cinder.pp | 58 +- manifests/profile/base/cinder/api.pp | 35 +- manifests/profile/base/cinder/authtoken.pp | 24 +- manifests/profile/base/cinder/backup.pp | 4 +- manifests/profile/base/cinder/backup/ceph.pp | 4 +- manifests/profile/base/cinder/backup/gcs.pp | 4 +- manifests/profile/base/cinder/backup/nfs.pp | 4 +- manifests/profile/base/cinder/backup/s3.pp | 4 +- manifests/profile/base/cinder/backup/swift.pp | 4 +- manifests/profile/base/cinder/scheduler.pp | 4 +- manifests/profile/base/cinder/volume.pp | 86 +-- .../base/cinder/volume/dellemc_powerflex.pp | 51 +- .../profile/base/cinder/volume/dellemc_powermax.pp | 28 +- .../base/cinder/volume/dellemc_powerstore.pp | 24 +- manifests/profile/base/cinder/volume/dellemc_sc.pp | 46 +- .../profile/base/cinder/volume/dellemc_unity.pp | 46 +- .../profile/base/cinder/volume/dellemc_vnx.pp | 64 ++- .../profile/base/cinder/volume/dellemc_xtremio.pp | 35 +- manifests/profile/base/cinder/volume/dellsc.pp | 44 +- manifests/profile/base/cinder/volume/iscsi.pp | 12 +- manifests/profile/base/cinder/volume/netapp.pp | 58 +- manifests/profile/base/cinder/volume/nfs.pp | 59 +- manifests/profile/base/cinder/volume/nvmeof.pp | 14 +- manifests/profile/base/cinder/volume/pure.pp | 32 +- manifests/profile/base/cinder/volume/rbd.pp | 23 +- manifests/profile/base/database/mysql.pp | 73 ++- manifests/profile/base/database/mysql/client.pp | 32 +- .../base/database/mysql/include_and_check_auth.pp | 6 +- manifests/profile/base/database/mysql/users.pp | 2 +- manifests/profile/base/database/redis.pp | 46 +- manifests/profile/base/designate.pp | 53 +- manifests/profile/base/designate/api.pp | 33 +- manifests/profile/base/designate/authtoken.pp | 24 +- manifests/profile/base/designate/backend.pp | 8 +- manifests/profile/base/designate/central.pp | 11 +- manifests/profile/base/designate/coordination.pp | 57 ++ manifests/profile/base/designate/mdns.pp | 4 +- manifests/profile/base/designate/producer.pp | 31 +- manifests/profile/base/designate/sink.pp | 4 +- manifests/profile/base/designate/worker.pp | 8 +- manifests/profile/base/etcd.pp | 12 +- manifests/profile/base/glance/api.pp | 95 ++-- manifests/profile/base/glance/authtoken.pp | 24 +- manifests/profile/base/glance/backend/cinder.pp | 66 +-- manifests/profile/base/glance/backend/file.pp | 16 +- manifests/profile/base/glance/backend/rbd.pp | 54 +- manifests/profile/base/glance/backend/swift.pp | 57 +- manifests/profile/base/glance/netapp.pp | 4 +- manifests/profile/base/gnocchi.pp | 33 +- manifests/profile/base/gnocchi/api.pp | 59 +- manifests/profile/base/gnocchi/authtoken.pp | 24 +- manifests/profile/base/gnocchi/metricd.pp | 4 +- manifests/profile/base/gnocchi/statsd.pp | 4 +- manifests/profile/base/haproxy.pp | 31 +- manifests/profile/base/heat.pp | 77 +-- manifests/profile/base/heat/api.pp | 35 +- manifests/profile/base/heat/api_cfn.pp | 35 +- manifests/profile/base/heat/authtoken.pp | 24 +- manifests/profile/base/heat/engine.pp | 9 +- manifests/profile/base/horizon.pp | 40 +- manifests/profile/base/ironic.pp | 32 +- manifests/profile/base/ironic/api.pp | 35 +- manifests/profile/base/ironic/authtoken.pp | 24 +- manifests/profile/base/ironic/conductor.pp | 9 +- manifests/profile/base/ironic_inspector.pp | 8 +- .../profile/base/ironic_inspector/authtoken.pp | 24 +- manifests/profile/base/iscsid.pp | 4 +- manifests/profile/base/keystone.pp | 117 ++-- manifests/profile/base/logging/logrotate.pp | 52 +- manifests/profile/base/logging/rsyslog.pp | 10 +- .../profile/base/logging/rsyslog/file_input.pp | 4 +- manifests/profile/base/manila.pp | 56 +- manifests/profile/base/manila/api.pp | 81 +-- manifests/profile/base/manila/authtoken.pp | 24 +- manifests/profile/base/manila/scheduler.pp | 4 +- manifests/profile/base/manila/share.pp | 278 +++++---- manifests/profile/base/memcached.pp | 4 +- manifests/profile/base/metrics/collectd.pp | 148 +---- .../base/metrics/collectd/collectd_service.pp | 2 +- manifests/profile/base/metrics/collectd/gnocchi.pp | 177 ------ .../profile/base/metrics/collectd/sensubility.pp | 2 +- manifests/profile/base/metrics/qdr.pp | 14 +- manifests/profile/base/neutron.pp | 74 ++- manifests/profile/base/neutron/agents/bagpipe.pp | 4 +- manifests/profile/base/neutron/agents/l2gw.pp | 4 +- manifests/profile/base/neutron/agents/mlnx.pp | 4 +- .../base/neutron/agents/networking_baremetal.pp | 4 +- manifests/profile/base/neutron/agents/nuage.pp | 65 --- manifests/profile/base/neutron/agents/ovn.pp | 24 +- manifests/profile/base/neutron/agents/vpp.pp | 8 +- manifests/profile/base/neutron/authtoken.pp | 24 +- manifests/profile/base/neutron/bgpvpn.pp | 4 +- manifests/profile/base/neutron/dhcp.pp | 23 +- .../profile/base/neutron/dhcp_agent_wrappers.pp | 34 +- manifests/profile/base/neutron/l2gw.pp | 4 +- manifests/profile/base/neutron/l3.pp | 4 +- .../profile/base/neutron/l3_agent_wrappers.pp | 49 +- manifests/profile/base/neutron/linuxbridge.pp | 14 +- manifests/profile/base/neutron/metadata.pp | 4 +- .../profile/base/neutron/opencontrail/vrouter.pp | 40 -- manifests/profile/base/neutron/ovn_metadata.pp | 44 +- .../base/neutron/ovn_metadata_agent_wrappers.pp | 26 +- manifests/profile/base/neutron/ovn_northd.pp | 8 +- manifests/profile/base/neutron/ovs.pp | 17 +- manifests/profile/base/neutron/plugins/ml2.pp | 16 +- .../profile/base/neutron/plugins/ml2/bagpipe.pp | 4 +- .../base/neutron/plugins/ml2/networking_ansible.pp | 16 +- .../neutron/plugins/ml2/networking_baremetal.pp | 4 +- .../profile/base/neutron/plugins/ml2/nuage.pp | 40 -- manifests/profile/base/neutron/plugins/ml2/ovn.pp | 46 +- manifests/profile/base/neutron/plugins/ml2/vpp.pp | 8 +- manifests/profile/base/neutron/plugins/ml2/vts.pp | 12 +- manifests/profile/base/neutron/plugins/nsx.pp | 45 -- manifests/profile/base/neutron/plugins/nuage.pp | 43 -- .../profile/base/neutron/plugins/opencontrail.pp | 8 +- manifests/profile/base/neutron/server.pp | 93 +-- manifests/profile/base/neutron/sfc.pp | 4 +- manifests/profile/base/neutron/sriov.pp | 4 +- .../base/neutron/wrappers/dibbler_client.pp | 7 +- manifests/profile/base/neutron/wrappers/dnsmasq.pp | 7 +- manifests/profile/base/neutron/wrappers/haproxy.pp | 7 +- .../profile/base/neutron/wrappers/keepalived.pp | 7 +- .../neutron/wrappers/keepalived_state_change.pp | 5 - manifests/profile/base/neutron/wrappers/radvd.pp | 7 +- manifests/profile/base/nova.pp | 76 +-- manifests/profile/base/nova/api.pp | 59 +- manifests/profile/base/nova/authtoken.pp | 24 +- manifests/profile/base/nova/compute.pp | 12 +- manifests/profile/base/nova/compute/ironic.pp | 4 +- manifests/profile/base/nova/compute/libvirt.pp | 4 +- .../profile/base/nova/compute/libvirt_guests.pp | 4 +- .../profile/base/nova/compute_libvirt_shared.pp | 42 +- manifests/profile/base/nova/conductor.pp | 8 +- manifests/profile/base/nova/libvirt.pp | 24 +- manifests/profile/base/nova/metadata.pp | 35 +- manifests/profile/base/nova/migration.pp | 4 +- manifests/profile/base/nova/migration/client.pp | 11 +- manifests/profile/base/nova/migration/proxy.pp | 78 --- manifests/profile/base/nova/migration/target.pp | 80 +-- manifests/profile/base/nova/scheduler.pp | 4 +- manifests/profile/base/nova/serialproxy.pp | 33 -- manifests/profile/base/nova/virtlogd_wrapper.pp | 7 +- manifests/profile/base/nova/vncproxy.pp | 4 +- manifests/profile/base/nova/wrappers/virtlogd.pp | 2 +- manifests/profile/base/octavia.pp | 29 +- manifests/profile/base/octavia/api.pp | 41 +- manifests/profile/base/octavia/authtoken.pp | 24 +- manifests/profile/base/octavia/health_manager.pp | 5 +- manifests/profile/base/octavia/housekeeping.pp | 5 +- manifests/profile/base/octavia/provider/ovn.pp | 85 ++- manifests/profile/base/octavia/worker.pp | 5 +- manifests/profile/base/pacemaker.pp | 92 ++- manifests/profile/base/pacemaker/instance_ha.pp | 58 +- manifests/profile/base/pacemaker_remote.pp | 40 +- manifests/profile/base/placement.pp | 8 +- manifests/profile/base/placement/api.pp | 37 +- manifests/profile/base/placement/authtoken.pp | 24 +- manifests/profile/base/qdr.pp | 12 +- manifests/profile/base/rabbitmq.pp | 64 +-- manifests/profile/base/snmp.pp | 16 +- manifests/profile/base/sshd.pp | 74 +-- manifests/profile/base/swift.pp | 12 +- manifests/profile/base/swift/dispersion.pp | 4 +- manifests/profile/base/swift/proxy.pp | 75 +-- manifests/profile/base/swift/ringbuilder.pp | 14 +- manifests/profile/base/swift/storage.pp | 4 +- manifests/profile/base/vpp.pp | 4 +- manifests/profile/pacemaker/ceph_nfs.pp | 20 +- .../profile/pacemaker/cinder/backup_bundle.pp | 49 +- .../profile/pacemaker/cinder/volume_bundle.pp | 48 +- manifests/profile/pacemaker/clustercheck.pp | 12 +- manifests/profile/pacemaker/compute_instanceha.pp | 10 +- .../profile/pacemaker/database/mysql_bundle.pp | 195 ++++--- .../profile/pacemaker/database/redis_bundle.pp | 110 ++-- manifests/profile/pacemaker/haproxy_bundle.pp | 88 ++- manifests/profile/pacemaker/manila/share_bundle.pp | 54 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 60 +- manifests/profile/pacemaker/ovn_northd.pp | 22 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 212 +++---- manifests/stunnel.pp | 23 +- manifests/stunnel/service_proxy.pp | 2 - manifests/stunnel/systemd_unit.pp | 24 - manifests/tls_proxy.pp | 27 +- metadata.json | 27 +- ...to-select-migration-proxy-2400e9c69fc620ba.yaml | 14 + ...y-remove-activate_httplog-87325732ab9ca721.yaml | 6 + .../mysql_bundle_options-b5ecf4c4472cca01.yaml | 8 + releasenotes/source/conf.py | 16 +- spec/classes/tripleo_firewall_spec.rb | 226 -------- spec/classes/tripleo_haproxy_spec.rb | 27 - spec/classes/tripleo_masquerade_networks_spec.rb | 95 ---- spec/classes/tripleo_packages_spec.rb | 49 -- ...file_base_ceilometer_agent_notification_spec.rb | 2 - .../tripleo_profile_base_cinder_unity_spec.rb | 18 +- .../tripleo_profile_base_cinder_vnx_spec.rb | 17 + .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 21 + .../tripleo_profile_base_cinder_volume_spec.rb | 85 ++- ...pleo_profile_base_database_mysql_client_spec.rb | 67 +-- .../tripleo_profile_base_designate_central_spec.rb | 13 +- ...leo_profile_base_designate_coordination_spec.rb | 83 +++ ...tripleo_profile_base_designate_producer_spec.rb | 38 +- .../classes/tripleo_profile_base_designate_spec.rb | 2 + ...tripleo_profile_base_glance_backend_rbd_spec.rb | 12 - .../tripleo_profile_base_gnocchi_api_spec.rb | 1 - .../tripleo_profile_base_heat_engine_spec.rb | 4 + spec/classes/tripleo_profile_base_heat_spec.rb | 4 + .../tripleo_profile_base_metrics_collectd_spec.rb | 51 +- .../tripleo_profile_base_neutron_dhcp_spec.rb | 34 +- ...eo_profile_base_neutron_plugins_ml2_ovn_spec.rb | 258 +++++++++ spec/classes/tripleo_profile_base_nova_api_spec.rb | 3 - .../tripleo_profile_base_nova_conductor_spec.rb | 58 +- .../tripleo_profile_base_nova_libvirt_spec.rb | 15 - ...ipleo_profile_base_nova_migration_proxy_spec.rb | 103 ---- ...pleo_profile_base_nova_migration_target_spec.rb | 213 +------ .../tripleo_profile_base_octavia_api_spec.rb | 2 +- ...leo_profile_base_octavia_health_manager_spec.rb | 2 + ...ipleo_profile_base_octavia_housekeeping_spec.rb | 2 + ...ipleo_profile_base_octavia_provider_ovn_spec.rb | 36 ++ spec/classes/tripleo_profile_base_octavia_spec.rb | 3 + .../tripleo_profile_base_octavia_worker_spec.rb | 2 + spec/classes/tripleo_profile_base_sshd_spec.rb | 230 ++------ .../tripleo_profile_base_swift_proxy_spec.rb | 4 +- .../defines/tripleo_firewall_service_rules_spec.rb | 37 -- ...le_base_neutron_wrappers_dibbler_client_spec.rb | 29 - ...o_profile_base_neutron_wrappers_dnsmasq_spec.rb | 30 - ...o_profile_base_neutron_wrappers_haproxy_spec.rb | 33 -- ...rofile_base_neutron_wrappers_keepalived_spec.rb | 30 - ...eutron_wrappers_keepalived_state_change_spec.rb | 26 - ...leo_profile_base_neutron_wrappers_radvd_spec.rb | 33 -- spec/fixtures/hieradata/default.yaml | 9 +- spec/fixtures/hieradata/step4.yaml | 1 - spec/fixtures/hieradata/step5.yaml | 14 + spec/functions/extract_id_spec.rb | 6 - spec/functions/netmask_to_cidr_spec.rb | 6 - templates/neutron/dibbler-client.epp | 10 +- templates/neutron/dnsmasq.epp | 10 +- templates/neutron/haproxy.epp | 10 +- templates/neutron/keepalived.epp | 10 +- .../neutron/neutron-keepalived-state-change.epp | 11 +- templates/neutron/radvd.epp | 10 +- zuul.d/layout.yaml | 3 +- 290 files changed, 4048 insertions(+), 8518 deletions(-)

1 0

ansible-role-tripleo-modify-image 1.5.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We contentedly announce the release of: ansible-role-tripleo-modify-image 1.5.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.4.0..1.5.0 --------------------------------------------------------- a09c8af Add some notes about SELinux and limitations c9831b5 Disable setup.py auto discovery Diffstat (except docs and test files) ------------------------------------- README.rst | 39 ++++++++++++++++++++++++++++++++++++--- setup.cfg | 8 ++++---- setup.py | 1 + 3 files changed, 41 insertions(+), 7 deletions(-)

1 0

ansible-role-chrony 1.3.0
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We eagerly announce the release of: ansible-role-chrony 1.3.0: ansible-role-chrony - Ansible chrony role The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony 1.2.0..1.3.0 ------------------------------------------- 62654c8 Sync defaults for chrony with tripleo-heat-templates 9528e8a Add tasks for run and sync to chrony role 7ccf873 Change chrony_role_action default to 'all' Diffstat (except docs and test files) ------------------------------------- ansible-requirements.txt | 2 +- defaults/main.yml | 15 ++++++++++----- setup.py | 1 + tasks/config.yml | 39 +++++++++++++++++++-------------------- tasks/install.yml | 34 ++++++++++++++++++++++++++++++++++ tasks/main.yml | 29 ++++++++++++++++++++++++----- tasks/run.yml | 39 +++++++++++++++++++++++++++++++++++++++ tasks/sync.yml | 22 ++++++++++++++++++++++ tasks/vars.yml | 22 ++++++++++++++++++++++ 9 files changed, 172 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index 7507f3e..540637e 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -6 +6 @@ ansible<2.10 -ansible-lint +ansible-lint<4.3.0

1 0

ovsdbapp 1.9.4 (wallaby)
by no-reply＠openstack.org 02 Nov '22

02 Nov '22

We exuberantly announce the release of: ovsdbapp 1.9.4: A library for creating OVSDB applications This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.9.3..1.9.4 -------------------------------- 65d02f0 Don't force_reconnect() on unhandled Idl exception 87dcab2 Fix logging exception while handling transaction exception dd7e332 Fix TRY_AGAIN handling Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 17 ++--------------- ovsdbapp/backend/ovs_idl/transaction.py | 20 ++++---------------- 2 files changed, 6 insertions(+), 31 deletions(-)

1 0