April 2022 - Release-announce - lists.openstack.org

horizon 20.1.2 (xena)
by no-reply＠openstack.org 29 Apr '22

29 Apr '22

We are psyched to announce the release of: horizon 20.1.2: OpenStack Dashboard This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 20.1.2 ^^^^^^ Bug Fixes * Previously, ToggleSuspend class checked os-rescue policy for resume operation. By this fix, the class checks 'os_compute_api:os- suspend- server:resume' policy to align to resume operation. Changes in horizon 20.1.1..20.1.2 --------------------------------- 4f4e88009 Fix for "Resize instance" button db40c8ceb Change to a proper policy for Resume operation ceb33680b Fix Project Limits for resize instance dialog Diffstat (except docs and test files) ------------------------------------- .../dashboards/project/instances/tables.py | 10 +++-- .../templates/instances/_flavors_and_quotas.html | 40 ++++++++--------- .../dashboards/project/instances/utils.py | 43 ++++++++++++++++++ .../dashboards/project/instances/views.py | 17 ++----- .../project/instances/workflows/resize_instance.py | 5 ++- ...652_fix_policy_for_resume-a719efb23054c708.yaml | 6 +++ 7 files changed, 130 insertions(+), 43 deletions(-)

1 0

oslo.policy 3.12.1 (zed)
by no-reply＠openstack.org 29 Apr '22

29 Apr '22

We are jazzed to announce the release of: oslo.policy 3.12.1: Oslo Policy library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.12.1 ^^^^^^ Bug Fixes * Fixed passing "--exclude-deprecated" boolean value to sphinx-build command. Now "--exclude-deprecated" is only passed when it is True without bool True/False value. Changes in oslo.policy 3.12.0..3.12.1 ------------------------------------- 9673a74 Only pass exclude-deprecated when True Diffstat (except docs and test files) ------------------------------------- oslo_policy/sphinxpolicygen.py | 8 +++++--- ...fix-passing-exclude-deprecated-param-317745d23022e544.yaml | 6 ++++++ 3 files changed, 15 insertions(+), 10 deletions(-)

1 0

castellan 3.10.2 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are thrilled to announce the release of: castellan 3.10.2: Generic Key Manager interface for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 3.10.1..3.10.2 ----------------------------------- d0d3735 Update TOX_CONSTRAINTS_FILE for stable/yoga d5d8c6e Update .gitreview for stable/yoga c43bc8d Replace the deprecated argument tenant Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 4 files changed, 6 insertions(+), 5 deletions(-)

1 0

oslo.limit 1.5.1 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We high-spiritedly announce the release of: oslo.limit 1.5.1: Limit enforcement library to assist with quota calculation. This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 1.5.1 ^^^^^ Bug Fixes * *bug 1962406* <https://bugs.launchpad.net/oslo.limit/+bug/1962406>`_: Fixed the wrong format of options data, which was causing failure with "oslo- config-generator" command if the "oslo.limit" entry point is included. Changes in oslo.limit 1.5.0..1.5.1 ---------------------------------- 63536c6 Add documentation for config options 594aff5 oslo-config-generator: Fix ValueError 174093d Update TOX_CONSTRAINTS_FILE for stable/yoga 260f09d Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_limit/opts.py | 6 +++--- releasenotes/notes/bug-1962406-e239d60400c726c8.yaml | 7 +++++++ tox.ini | 4 ++-- 7 files changed, 36 insertions(+), 9 deletions(-)

1 0

oslo.utils 4.12.3 (yoga)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We exuberantly announce the release of: oslo.utils 4.12.3: Oslo Utility library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.12.3 ^^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.12.2..4.12.3 ------------------------------------ 2c1b062 fix strutils password regex eb0c50a Update TOX_CONSTRAINTS_FILE for stable/yoga 5e11bca Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ tox.ini | 4 ++-- 5 files changed, 22 insertions(+), 3 deletions(-)

1 0

kolla-ansible 11.4.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We enthusiastically announce the release of: kolla-ansible 11.4.0: Ansible Deployment of Kolla containers This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 11.4.0 ^^^^^^ New Features ************ * Adds a "tls_connect" module to the Prometheus blackbox exporter. This can be used to test connectivity of TLS servers. * Implements container healthchecks for ironic-neutron-agent service. See blueprint * Adds support for libvirt SASL authentication. It is enabled by default. LP#1964013 Known Issues ************ * Existing fluentd log rotation failed to delete old haproxy, swift, glance-tls-proxy and neutron-tls-proxy logs. These will not be deleted by the new logrotate config and will have to be removed manually. Upgrade Notes ************* * The addition of libvirt SASL authentication requires a new password in "passwords.yml", "libvirt_sasl_password". This may be generated using the existing "kolla-genpwd" and "kolla-mergepwd" tooling. * The addition of libvirt SASL authentication requires both the "nova_libvirt" and "nova_compute" containers to be updated simultaneously, using new images with the necessary Cyrus SASL dependencies, as well as configuration containing the SASL credentials. * update the default value of node_custom_config to {{ node_config }}/config, when specified using --configdir Security Issues *************** * Explicitly removes the "net.ipv4.ip_forward" sysctl from "/etc/sysctl.conf" on hosts with Neutron L3 Agent. In the absence of another source for this sysctl, it should revert to the default of 0 after the next reboot. This is a follow up to a previous change which stopped setting the sysctl, but leaves existing systems with the original value of 1 set. A deployer looking to more aggressively change the value may set "neutron_l3_agent_host_ipv4_ip_forward" to 0 using a Yoga release of Kolla Ansible. This option will be removed in future. Any deployments still relying on the previous value may set "neutron_l3_agent_host_ipv4_ip_forward" to 1. LP#1945453 * Fixes an issue where the default configuration of libvirt did not use authentication for the API exposed over TCP on the internal API network. This allowed anyone with access to the internal API network read-write access to libvirt. While the internal API network is typically trusted, other services on this network generally at least require authentication. SASL authentication is now enabled for libvirt by default. Kolla Ansible supports libvirt TLS since the Train release, and this is recommended to provide a higher level of security. LP#1964013 Bug Fixes ********* * Continue to run all actions if one action failed in Elasticsearch curator. LP#1954720 * Fixes Nova resize failing when "migration_interface" is customised. LP#1956976 * Fixes Glance with Cinder iSCSI backend failing due to lack of lock_path setting. LP#1959663 * Fixes logrotate config missing for openvswitch and prometheus services. LP#1961795 * Fixes an issue with Ironic's PXE components not getting updated on upgrade. LP#1963752 * Fixes configuration of the Prometheus HTTP API URL when using the Prometheus collector in CloudKitty. LP#1961615 * Fixes the baremetal role to avoid an error "Unable to remove "libvirtd". Now the symlink /etc/apparmor.d/disable/usr.sbin.libvirtd is created by the role. LP#1960302 * Existing fluentd log rotation failed to delete old haproxy, swift, glance-tls-proxy and neutron-tls-proxy logs. Standardise rotation and deletion of logs using logrotate. * adds back the option to configure the rabbitmq clustering interface via kolla *LP#1900160 <https://bugs.launchpad.net/kolla- ansible/+bug/1900160>* * Fixes an issue where the Libvirt AppArmor profile is disable and the bootstrap-servers process tries to remove it. See bug 1909874 for details. * Fixes an issue seen when using Jinja2 3.1.0. * Fixes the configuration option setting the type of endpoint used by Neutron to send requests to Placement. LP#1960503 * Fixes a configuration issue with Node Exporter causing all file system metrics of a host to be identical. LP#1961438 * Fixes an issue where RabbitMQ was configured to mirror classic transient queues for all services. According to the RabbitMQ documentation this is not a supported configuration, and contributed to numerous bug reports. In order to avoid making unexpected changes to the RabbitMQ cluster, it is necessary to set "rabbitmq_remove_ha_all_policy" to "yes" in order to apply this fix. This variable will be removed in the Yoga release. LP#1954925 * Fixes an issue with Cinder upgrade where Cinder services would remain pinned to the previous release's RPC & object versions. LP#1954932 Changes in kolla-ansible 11.3.0..11.4.0 --------------------------------------- ff40c4b46 [CI] Make kolla-build quiet 2764844ee Allow removal of classic queue mirroring for internal RabbitMQ a4e2d5a15 Use jinja2.pass_context instead of contextfilter 9b135d965 re-add rabbitmq config for clustering interface cc09abda3 designate: fix external backend deployment ef8b02f7b Ironic: rebootstrap ironic-pxe on upgrade d2b62b50c cinder: restart services after upgrade 9e3e0d112 CI: pin ansible-lint to <6 536ffc3f7 libvirt: support SASL authentication 1885df05d Explicitly unset net.ipv4.ip_forward sysctl c2fadc230 Remove grafana [session] configuration 7d2bbbad0 Add openvswitch and prometheus to logrotate c7530df58 Fix location of release note for ironic-neutron-agent healthcheck 84eaf2fb2 cloudkitty: fix URL used for Prometheus collector e4f93a60a Configure node-exporter to report correct file system metrics a759ca44f Fix fluentd v1 buffer syntax issue e8d94e01c Refactor fluentd syslog logging f0294fb5b Fix remove libvirt apparmor disabled profile 13ac92167 [CI] Check fluentd errors c37bf3e06 Fix Apparmor libvirt profile removal 535632672 CI: Fix new ansible-lint failures d5bd75180 neutron: fix placement endpoint type configuration aaa56405d Fix log rotation for fluentd created files 3cf4fe128 [CI] Replace parted with lsblk f8ae355c5 Glance: add lock_path setting d69b7008a prometheus: add tls_connect blackbox module a967556da Fix usage of Subject Alternative Name for TLS 4e3945336 update the default value of node_custom_config 7593c1153 Make nova_ssh listen on api_interface as well 149e6dd79 Use Docker healthchecks for ironic-neutron-agent services 7fefa5a54 Continue to run all actions if one action failed in curator Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 6 + ansible/group_vars/all.yml | 2 +- ansible/roles/baremetal/tasks/install.yml | 2 +- ansible/roles/baremetal/tasks/post-install.yml | 13 +- .../roles/certificates/tasks/generate-backend.yml | 2 + ansible/roles/certificates/tasks/generate.yml | 4 + .../templates/openssl-kolla-internal.cnf.j2 | 4 +- .../certificates/templates/openssl-kolla.cnf.j2 | 4 +- ansible/roles/cinder/defaults/main.yml | 9 + ansible/roles/cinder/handlers/main.yml | 20 ++ ansible/roles/cinder/tasks/reload.yml | 10 + ansible/roles/cinder/tasks/upgrade.yml | 2 + ansible/roles/cloudkitty/defaults/main.yml | 2 +- ansible/roles/common/defaults/main.yml | 24 +++ ansible/roles/common/tasks/config.yml | 5 +- .../conf/filter/00-record_transformer.conf.j2 | 27 +-- .../common/templates/conf/output/00-local.conf.j2 | 214 ++------------------- .../common/templates/conf/output/01-es.conf.j2 | 6 +- .../templates/conf/output/02-monasca.conf.j2 | 4 +- .../templates/cron-logrotate-haproxy.conf.j2 | 2 +- .../templates/cron-logrotate-openvswitch.conf.j2 | 3 + .../templates/cron-logrotate-prometheus.conf.j2 | 3 + ansible/roles/common/templates/fluentd.json.j2 | 27 +-- ansible/roles/designate/tasks/backend_external.yml | 2 + .../templates/elasticsearch-curator-actions.yml.j2 | 14 +- ansible/roles/glance/templates/glance-api.conf.j2 | 3 + ansible/roles/grafana/templates/grafana.ini.j2 | 8 - ansible/roles/ironic/tasks/bootstrap.yml | 19 -- ansible/roles/ironic/tasks/bootstrap_service.yml | 19 ++ ansible/roles/neutron/defaults/main.yml | 15 ++ ansible/roles/neutron/tasks/config-host.yml | 2 + ansible/roles/neutron/templates/neutron.conf.j2 | 2 +- ansible/roles/nova-cell/defaults/main.yml | 8 + ansible/roles/nova-cell/handlers/main.yml | 15 ++ ansible/roles/nova-cell/tasks/config.yml | 20 ++ ansible/roles/nova-cell/tasks/precheck.yml | 17 +- ansible/roles/nova-cell/templates/auth.conf.j2 | 6 + ansible/roles/nova-cell/templates/libvirtd.conf.j2 | 3 +- .../roles/nova-cell/templates/nova-compute.json.j2 | 8 +- .../roles/nova-cell/templates/nova-libvirt.json.j2 | 12 ++ ansible/roles/nova-cell/templates/sasl.conf.j2 | 2 + ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/prometheus/defaults/main.yml | 3 +- .../templates/prometheus-blackbox-exporter.yml.j2 | 4 + .../templates/prometheus-node-exporter.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/rabbitmq/tasks/config.yml | 18 ++ ansible/roles/rabbitmq/tasks/deploy.yml | 3 + .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 29 +++ ansible/roles/rabbitmq/tasks/upgrade.yml | 3 + .../roles/rabbitmq/templates/advanced.config.j2 | 7 + .../roles/rabbitmq/templates/definitions.json.j2 | 4 + ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 6 + etc/kolla/globals.yml | 2 +- etc/kolla/passwords.yml | 5 + kolla_ansible/filters.py | 14 +- kolla_ansible/kolla_address.py | 8 +- kolla_ansible/put_address_in_context.py | 21 +- .../blackbox-tls-connect-517cd8ebdf87f16e.yaml | 5 + .../notes/bug-1945453-2-287bfcaf060689d8.yaml | 16 ++ .../notes/bug-1954720-4fc48610a56f3e98.yaml | 6 + .../notes/bug-1956976-8a2623ca1fbfd546.yaml | 5 + .../notes/bug-1959663-afda889b9aa4c63f.yaml | 6 + .../notes/bug-1961795-16fb2ac27152fc03.yaml | 6 + .../notes/bug-1963752-ee12e15c17c24bb0.yaml | 6 + ...cloudkitty-prometheus-url-ee14bc486e810631.yaml | 6 + ...r-libvirt-profile-removal-01db6ca6dd66879f.yaml | 7 + .../fix-haproxy-logrotate-e299a0000728fd8f.yaml | 12 ++ ...q-interface-configuration-b39c954fb8763d9c.yaml | 6 + ...apparmor-disabled-profile-2cab584eec729b71.yaml | 6 + ...-for-ironic-neutron-agent-61ec4d0d237da075.yaml | 6 + .../jinja2-pass-context-2afc328ade8c407b.yaml | 4 + .../notes/libvirt-sasl-404199143610fb75.yaml | 27 +++ ...n-placement-endpoint-type-90073ba5ecc9e663.yaml | 6 + ...porter-filesystem-metrics-d3ae7b0a892d2957.yaml | 6 + ...ue-mirroring-for-rabbitmq-d54b9e7e25e57a88.yaml | 10 + .../notes/unpin-cinder-rpcs-8eb7e0858a91b9b8.yaml | 6 + ...update-node-custom-config-7b378b25ce22779f.yaml | 5 + test-requirements.txt | 2 +- 84 files changed, 613 insertions(+), 327 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cab4df184..4eb87aa46 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +2 @@ -ansible-lint>=4.2.0,!=4.3.0 # MIT +ansible-lint>=4.2.0,!=4.3.0,<6.0.0 # MIT

1 0

kolla 11.3.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are thrilled to announce the release of: kolla 11.3.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.3.0 ^^^^^^ New Features ************ * Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM- SHA-256 mechanisms. These can be used for libvirt SASL authentication. LP#1964013 * Quiet mode (enabled with "--quiet" argument) can be combined with " --logs-dir" option now. Console output will be quiet as expected while building output will be stored in separate log files. Critical Issues *************** * CentOS Linux 8 (non-Stream) support has been dropped, since repositories have been removed from CentOS mirrors - see announcement (https://www.centos.org/centos-linux-eol/) Security Issues *************** * Adds mitigation for Apache Log4j 2 Remote Code Execution (RCE) vulnerabilities CVE-2021-44228 and CVE-2021-45046 to Apache Storm. Bug Fixes ********* * Fixes an issue with Ironic deployments using UEFI and iPXE, where the default UEFI iPXE bootloader in Ironic was not available in the TFTP server. This affects all Kolla releases on CentOS, and Xena on Debian/Ubuntu. LP#1959203 * Installs "glusterfs-client" in Debian and Ubuntu "manila-share" images to support GlusterFS across supported distributions. LP#1964140 * Fixes an issue when older version of Python OpenvSwitch bindings package was used, than the running OpenvSwitch code. LP#1961874 * Fix AArch64 ubuntu ironic-python-agent images UEFI PXE booting failure. Also fix x86_64 lacking of GRUB efi files issue. LP#1879265 * Fixes disabling the use of the "curlrc" configuration file in "healthcheck_curl". LP#1967272 * Fixes an issue seen when using Jinja2 3.1.0. * Fixes an issue with missing Magnum Keystone auth default policy. LP#1957159 * Fixes set_configs.py configuring same permission for directories and files, causing directories lacking execute permission if not set for files. Changes in kolla 11.2.1..11.3.0 ------------------------------- a83002b3f enable logging to file for quiet mode 238c56f53 Fix disabling of curlrc in healthcheck_curl a7ff9f6c0 elasticsearch: install Java first on CentOS too ca4952780 libvirt: add Cyrus SASL packages for DIGEST-MD5 1ea5c73d6 Install glusterfs-client in Debuntu 61f1705bc Use python3-openvswitch from distro 9b1ff36ac Ensure set_configs sets execute bit on directories 674aede28 erlang: use packages from Erlang Solutions on AArch64 545fed783 collectd: pcie-errors is x86-64 only now 07a4e434d base: Drop usage of Ceph Nautilus from RDO 77d683caa ironic: Fix UEFI & iPXE bootloader filenames 07f519996 Drop CentOS Linux 8 image builds 02f5222b0 Use distro provided GRUB efi 56f494230 openstack-base: drop anyjson 891396f7b Mitigate two Log4j vulnerabilities in Apache Storm ca6951744 magnum: fix issue with keystone auth default policy Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 86 ---------------------- kolla/common/config.py | 12 +-- kolla/common/utils.py | 34 ++++++--- kolla/template/filters.py | 9 ++- kolla/template/methods.py | 8 +- kolla/template/repos.yaml | 2 +- .../notes/bug-1959203-1bb695e052248d78.yaml | 8 ++ .../notes/bug-1964140-57b433329bab067e.yaml | 6 ++ .../notes/centos-8-eol-4500333b5e01f448.yaml | 6 ++ .../notes/distro-python-ovs-df705d1e59f16cde.yaml | 6 ++ ...n-agent-pxe-booting-issue-95adaf9249207d5b.yaml | 6 ++ ...check-curl-disable-curlrc-0f85aad47379e2a5.yaml | 5 ++ .../jinja2-pass-context-3f3febcd944e3a51.yaml | 4 + .../notes/libvirt-sasl-07a8a1a25d2450c6.yaml | 6 ++ ...stone-auth-default-policy-e16f7bb558aa4b14.yaml | 5 ++ .../quiet-mode-with-logs-0abafc07923945ac.yaml | 6 ++ ...ectory-execute-permission-8ab919b7b17025d2.yaml | 5 ++ ...-vulnerability-mitigation-6746a8a0bb329485.yaml | 5 ++ 41 files changed, 253 insertions(+), 183 deletions(-)

1 0

kayobe 9.4.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are pleased to announce the release of: kayobe 9.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.4.0 ^^^^^ Upgrade Notes ************* * Kayobe now defaults to building CentOS Stream 8 IPA and root disk images, following the end of life of CentOS Linux 8. Bug Fixes ********* * In production environments, the provision network may be separated from the other networks, so in this case, if you want Bifrost's DHCP service provides the correct gateway for the clients the "inspection_gateway" should be used instead of the "gateway" attribute for the provision network. This also avoids configuring the multiple IP gateways on a single host which leads to unpredictable results. * Fixes IPA and root disk image builds, following the end of life of CentOS Linux 8. * Fixes an issue with idempotence of local Kolla Ansible configuration generation. * Fixes an issue with the seed's configdrive when the admin network is a VLAN. See story 2008089 for details. * Fixes Ansible inventory generation with some custom group mappings using the same group names for Kayobe and Kolla Ansible. See story 2009927 for details. * The set of commands starting with "kayobe overcloud database" now generate the kolla configuration necessary to login to the nodes running the database. * Fixes an issue with config drive generation for infrastructure and seed VMs when using untagged interfaces. The symptom of this issue is that kayobe cannot login to the instance. If you check the libvirt console log, you will see "KeyError: 'vlan_link'". See story 2009910 for details. * Fixes an issue with IPA image builds which used the "master" branch of "ironic-python-agent", even on stable releases of Kayobe, or when explicitly setting "ipa_build_source_version". * Fixes an issue where patch links could be erroneously created on hosts not in the overcloud group. See Story 2009911 for details. * Deployment image (IPA) build no longer uses master version of upper- constraints. Instead, it defaults to using the constraints for the OpenStack release associated with the version of Kayobe being used. See story 2009810 for details. Changes in kayobe 9.3.0..9.4.0 ------------------------------ 15937084 docs: Fix custom LVM example c5dc2d88 Fix variable name for stackhpc.os-networks upper constraints 19faf95e Restore forgotten linuxbridge-agent container a00892dc Fix Ansible inventory generation when reusing group names b3f6e79b CI: Avoid image downloads and builds in seed jobs f6cb821c Fix custom config idempotence 0356f7d5 Only create patch links on overcloud hosts c18fee72 Use naming convention to infer VLAN tagging 73d1a34a Build CentOS stream images 7cd08b03 CI: stop using zuul as kayobe_ansible_user in TLS jobs 7f8fd3dc Set correct gateway for the bifrost provision network c4b68fc7 Set requirements branch for IPA build 1264ac29 Revert "CI: temporary disable voting of some jobs" eb8a95e4 Use stream8 images with molecule aa10df3c CentOS Stream: update DNF repo file names abff9e6c CI: temporary disable voting of some jobs 3104fe97 ipa: Use openstack_branch instead of master 091d191b Fix seed VM configdrive when admin network is a VLAN bd3b16d2 Generate kolla config when running database commands Diffstat (except docs and test files) ------------------------------------- ansible/filter_plugins/networks.py | 8 ++ ansible/group_vars/all/bifrost | 2 +- ansible/group_vars/all/ipa | 15 ++-- ansible/group_vars/all/kolla | 2 +- ansible/kolla-bifrost.yml | 2 +- ansible/network.yml | 1 + ansible/provision-net.yml | 2 +- ansible/roles/dnf/tasks/local-mirror.yml | 13 +++- .../dnf/templates/CentOS-Stream-AppStream.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-Extras.repo.j2 | 17 +++++ .../kolla-ansible/templates/overcloud-top-level.j2 | 2 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/molecule.yml | 4 +- ansible/roles/kolla-openstack/tasks/config.yml | 1 - dev/functions | 11 +++ .../reference/ironic-python-agent.rst | 10 ++- etc/kayobe/ipa.yml | 5 +- kayobe/cli/commands.py | 8 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 2 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 - .../kayobe-seed-base/bifrost-overrides.yml.j2 | 6 +- playbooks/kayobe-seed-base/overrides.yml.j2 | 12 --- .../bifrost-overrides.yml.j2 | 6 +- ...ifrost-inspection-gateway-316ab384430ef8df.yaml | 9 +++ .../build-centos8s-images-509f04d8d68cb357.yaml | 9 +++ .../notes/config-idemoptence-37846db82ecd9f43.yaml | 4 + .../notes/configdrive-vlans-4e8b6ed07b229233.yaml | 6 ++ ...lla-ansible-group-mapping-8fcd6cbb1e744e18.yaml | 6 ++ ...ckup-with-no-kolla-config-4f857915adabad41.yaml | 6 ++ .../fixes-keyerror-vlan-link-c177cf719e070df6.yaml | 8 ++ .../notes/ipa-branch-b29c377c531013a8.yaml | 6 ++ .../patch-links-on-overcloud-e24dbc858d3399cc.yaml | 6 ++ ...ents-branch-for-ipa-build-c3ca977ec21b58f4.yaml | 8 ++ requirements.yml | 2 +- zuul.d/jobs.yaml | 4 +- zuul.d/project.yaml | 2 - 40 files changed, 278 insertions(+), 61 deletions(-)

1 0

oslo.messaging 12.7.3 (wallaby)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We exuberantly announce the release of: oslo.messaging 12.7.3: Oslo Messaging API This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 12.7.3 ^^^^^^ Bug Fixes * As a fix for bug 1917645 (https://launchpad.net/bugs/1917645) the rabbit backend is changed to use the "[oslo_messaging_notifications]retry" parameter when driver tries to connect to the message bus during notification sending. Before this fix the rabbit backend retried the connection forever blocking the caller thread. Changes in oslo.messaging 12.7.2..12.7.3 ---------------------------------------- 5d6fd1a1 [rabbit] use retry parameters during notification sending d63173a3 Reproduce bug 1917645 Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqpdriver.py | 7 +- oslo_messaging/_drivers/common.py | 4 +- oslo_messaging/_drivers/impl_rabbit.py | 11 +++- oslo_messaging/_drivers/pool.py | 10 +-- oslo_messaging/notify/messaging.py | 23 +++++-- ...rameter-for-notifications-3f7c508ab4437579.yaml | 8 +++ 8 files changed, 122 insertions(+), 20 deletions(-)

1 0

oslo.utils 4.8.2 (wallaby)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are chuffed to announce the release of: oslo.utils 4.8.2: Oslo Utility library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.8.2 ^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.8.1..4.8.2 ---------------------------------- a38b56a fix strutils password regex Diffstat (except docs and test files) ------------------------------------- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ 3 files changed, 18 insertions(+)

1 0

oslo.cache 2.11.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We high-spiritedly announce the release of: oslo.cache 2.11.0: Cache storage for OpenStack projects. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 2.10.1..2.11.0 ------------------------------------ 2d610d0 Remove unnecessary unicode prefixes 557d4a2 Fix description of memcache_servers 24f4000 Add Python3 zed unit tests f7f3c2b Update master for stable/yoga a036c46 Add Python 3 only classifier Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_cache/_opts.py | 17 +++++++++-------- releasenotes/source/conf.py | 16 ++++++++-------- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ setup.cfg | 1 + 8 files changed, 31 insertions(+), 22 deletions(-)

1 0

castellan 3.11.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We exuberantly announce the release of: castellan 3.11.0: Generic Key Manager interface for OpenStack This release is part of the zed release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 3.10.1..3.11.0 ----------------------------------- d2e8437 Remove redundant override of logging_context_format_string a160e5c Replace the deprecated argument tenant d03d696 Add Python3 zed unit tests 3e0fad7 Update master for stable/yoga b0c8638 Updating python testing classifier as per Yoga testing runtime Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- castellan/options.py | 8 +------- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ setup.cfg | 1 + 7 files changed, 14 insertions(+), 12 deletions(-)

1 0

oslo.db 11.3.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We jubilantly announce the release of: oslo.db 11.3.0: Oslo Database library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 11.2.0..11.3.0 --------------------------------- 95e1dd6 Add Python3 zed unit tests ec2f9f1 Update master for stable/yoga 6ecce89 Don't call 'begin()' on existing transaction Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ 5 files changed, 9 insertions(+), 8 deletions(-)

1 0

oslo.limit 1.6.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are glad to announce the release of: oslo.limit 1.6.0: Limit enforcement library to assist with quota calculation. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 1.6.0 ^^^^^ Bug Fixes * *bug 1962406* <https://bugs.launchpad.net/oslo.limit/+bug/1962406>`_: Fixed the wrong format of options data, which was causing failure with "oslo- config-generator" command if the "oslo.limit" entry point is included. Changes in oslo.limit 1.5.0..1.6.0 ---------------------------------- c67c9cf Move Enforcer caching closer to limit retrieval 004809a Add Python3 zed unit tests a6e08b0 Update master for stable/yoga 9f7a66a Add documentation for config options ce5aa7d oslo-config-generator: Fix ValueError Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_limit/limit.py | 44 +++++++++++++--------- oslo_limit/opts.py | 6 +-- .../notes/bug-1962406-e239d60400c726c8.yaml | 7 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 +++ 10 files changed, 110 insertions(+), 25 deletions(-)

1 0

oslo.privsep 2.8.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are tickled pink to announce the release of: oslo.privsep 2.8.0: OpenStack library for privilege separation This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 2.7.0..2.8.0 ------------------------------------ fa16f4d Remove unnecessary unicode prefixes 394bd37 Add note explaining max_buffer_size value 46e1920 Fix formatting of release list 24b3a99 Add Python3 zed unit tests 4ff6561 Update master for stable/yoga c223dbc Bump max_buffer_size for Deserializer Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_privsep/comm.py | 12 +++++++++--- releasenotes/source/conf.py | 14 +++++++------- releasenotes/source/index.rst | 29 +++++++++++++++-------------- releasenotes/source/yoga.rst | 6 ++++++ 8 files changed, 49 insertions(+), 36 deletions(-)

1 0

oslo.utils 4.13.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are tickled pink to announce the release of: oslo.utils 4.13.0: Oslo Utility library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.13.0 ^^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.12.2..4.13.0 ------------------------------------ de4429f fix strutils password regex c03c07c Add Python3 zed unit tests 7855d96 Update master for stable/yoga Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ 6 files changed, 26 insertions(+), 1 deletion(-)

1 0

oslo.policy 3.12.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are pumped to announce the release of: oslo.policy 3.12.0: Oslo Policy library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.12.0 ^^^^^^ New Features ************ * Adds the ability to exclude deprecated policies from generated samples by utilizing the "--exclude-deprecated" setting when generating YAML example files. The Spinx generator can also be controlled using the "exclude_deprecated" environment variable. By default, these rules will be included, but operators and projects may not desire these deprecated rules to exist in latest documentation, espescially when considering the number of policy rules projects have made in the Secure RBAC effort. Bug Fixes ********* * Fixes handling of deprecated rules when generating sample policy files such that legacy rules are no longer automatically aliased in the resulting output. Previously, the behavior led to operator confusion when attempting to evaluate the output to determine if customized rules were required, as the aliases were always added as active rules. A warning is now also added to the generated output. For more information, please see launchpad bug #1945336 (https://bugs.launchpad.net/oslo.policy/+bug/1945336) Changes in oslo.policy 3.11.0..3.12.0 ------------------------------------- 9bc1783 Don't raise InvalidScope exception when do_raise=False 9eef147 Add Python3 zed unit tests cdec2c1 Update master for stable/yoga b67e3c7 make deprecated rule examples explicit Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_policy/generator.py | 49 +++++++++++++++++----- oslo_policy/policy.py | 23 +++++++--- oslo_policy/sphinxpolicygen.py | 17 +++++--- ...-deprecated-rule-handling-c6fe321fce6293a9.yaml | 19 +++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 +++ 12 files changed, 161 insertions(+), 39 deletions(-)

1 0

sushy 3.4.6 (victoria)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We enthusiastically announce the release of: sushy 3.4.6: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.4.6 ^^^^^ Bug Fixes * Fixes issues with the refresh of "Session" based authentication where a previous refresh attempt failing could result in a fallback to "Basic" authentication and would silently fail. The client library now attempts to re-authenticate. * Fixes silent failures when a refresh of an authentication "Session" fails and was unable to be re-established due to an "AccessError". Should this occur, now the "AccessError" exception is explicitly raised as opposed to attempting to fall back to "Basic" authentication. * Fixes issues where the "Session" and "Basic" auth interface would fallback to "Basic" authentication should a "ConnectionError" exception occur while attempting to perform an authentication action. "ConnectionError" exceptions are signs of networking transport issues, and should be investigated. A "ConnectionError" exception is now raised. * Prevents the combined "Session" and "Basic" authentication support from falling back to "Basic" authentication once "Session" based authentication has been established. This should be considered a potential security issue or an environmental change requiring potential client re-initialization. This is exposed as an "AccessError" exception. Continued operations against the Sushy library will attempt to reauthenticate, if possible. Changes in sushy 3.4.5..3.4.6 ----------------------------- 1acff06 Fix session authentication issues Diffstat (except docs and test files) ------------------------------------- ...on-fallback-failure-fixes-4f0dcfdad1afd2d7.yaml | 26 ++++ sushy/auth.py | 79 +++++++--- sushy/connector.py | 21 ++- sushy/main.py | 67 ++++++++- sushy/resources/sessionservice/sessionservice.py | 19 +-- .../session_creation_headers_no_location.json | 17 +++ .../sessionservice/test_sessionservice.py | 12 +- 11 files changed, 556 insertions(+), 93 deletions(-)

1 0

ironic 16.0.5 (victoria)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are satisfied to announce the release of: ironic 16.0.5: OpenStack Bare Metal Provisioning This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 16.0.5 ^^^^^^ Bug Fixes * Fixes connection caching issues with Redfish BMCs where AccessErrors were previously not disqualifying the cached connection from being re-used. Ironic will now explicitly open a new connection instead of using the previous connection in the cache. Under normal circumstances, the "sushy" redfish library would detect and refresh sessions, however a prior case exists where it may not detect a failure and contain cached session credential data which is ultimately invalid, blocking future access to the BMC via Redfish until the cache entry expired or the "ironic-conductor" service was restarted. For more information please see story 2009719 (https://storyboard.openstack.org/#!/story/2009719) Changes in ironic 16.0.4..16.0.5 -------------------------------- 6e640b336 Build the new cirros image even when netboot is the default acc05b45a Ensure tox.ini is ASCII 5194a5b0a CI: use a custom cirros partition image instead of the default c8a02c59d Avoid non-Stream CentOS, remove Grenade job 3e3afc325 Remove redfish cache entry upon errors Diffstat (except docs and test files) ------------------------------------- bindep.txt | 6 +- devstack/files/debs/ironic | 1 + devstack/files/rpms/ironic | 1 + devstack/lib/ironic | 53 +++++++++++++++- devstack/tools/ironic/scripts/cirros-partition.sh | 69 ++++++++++++++++++++ ironic/drivers/modules/redfish/utils.py | 27 ++++++++ .../unit/drivers/modules/redfish/test_utils.py | 73 +++++++++++++++++++++- ...on-cache-pool-accesserror-743e39a2f017b990.yaml | 13 ++++ tox.ini | 2 +- zuul.d/ironic-jobs.yaml | 5 +- zuul.d/project.yaml | 2 - 12 files changed, 246 insertions(+), 8 deletions(-)

1 0

neutron 17.4.1 (victoria)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are pleased to announce the release of: neutron 17.4.1: OpenStack Networking This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 17.4.0..17.4.1 --------------------------------- 37c2e6b708 Fix setting table monitoring conditions Diffstat (except docs and test files) ------------------------------------- neutron/agent/ovn/metadata/ovsdb.py | 2 +- .../ml2/drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 17 ++++++++++++----- 2 files changed, 13 insertions(+), 6 deletions(-)

1 0

cinder 17.4.0 (victoria)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are ecstatic to announce the release of: cinder 17.4.0: OpenStack Block Storage This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 17.4.0 ^^^^^^ New Features ************ * Log a warning from the volume service when a volume driver's get_volume_stats() call takes a long time to return. This can help deployers troubleshoot a cinder-volume service misbehaving due to a driver/backend performance issue. Bug Fixes ********* * Fixed the schema validation for attachment create API to make instance uuid an optional field. It had mistakenly been defined as a required field when schema validation was added in an earlier release. Also updated the schema to allow specification of the "mode" parameter, which has been available since microversion >= 3.54, but which was not recognized as a legitimate request field. * Bug #1924643 (https://bugs.launchpad.net/cinder/+bug/1924643) Fixed the NetApp cinder driver sub-clone operation that might be used by extend operation in case the extended size is greater than the max LUN geometry. Changes in cinder 17.3.0..17.4.0 -------------------------------- d7bb194d0 Fix: Schema validation for attachment create API 1034c9aec Add warning message about slow volume backend 9a28bce3e NetApp ONTAP: Fix sub-clone zapi call Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 2 +- cinder/api/schemas/attachments.py | 7 ++++- cinder/api/v3/attachments.py | 14 ++++++--- .../netapp/dataontap/client/test_client_cmode.py | 36 ++++++++++++++++++++++ .../netapp/dataontap/client/client_cmode.py | 6 ++-- cinder/volume/manager.py | 15 ++++++++- ...idation-attachment-create-3488914cb52d44d2.yaml | 10 ++++++ .../fix-sub-clone-operation-f42a84ab17930f24.yaml | 7 +++++ .../slow-get-volume-stats-91b84c6e661dc605.yaml | 7 +++++ 9 files changed, 95 insertions(+), 9 deletions(-)

1 0

blazar 6.0.2 (victoria)
by no-reply＠openstack.org 25 Apr '22

25 Apr '22

We are delighted to announce the release of: blazar 6.0.2: Reservation Service for OpenStack clouds This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. Changes in blazar 6.0.1..6.0.2 ------------------------------ c8f629d Update Nova scheduler filter configuration d4be86d Switch to stestr Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +--- .stestr.conf | 3 +++ .testr.conf | 7 ------- devstack/plugin.sh | 15 +++------------ lower-constraints.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 14 +++++++------- 11 files changed, 19 insertions(+), 38 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7dfe786..446cdbe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ fixtures>=3.0.0 # Apache-2.0/BSD -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

ovsdbapp 1.15.2 (yoga)
by no-reply＠openstack.org 22 Apr '22

22 Apr '22

We are jazzed to announce the release of: ovsdbapp 1.15.2: A library for creating OVSDB applications This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.15.1..1.15.2 ---------------------------------- de473ce Fix broken behavior after recent OVS update 10539ed github no longer accepts git:// connections 7735d5c Update TOX_CONSTRAINTS_FILE for stable/yoga 253afd4 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ovsdbapp/backend/ovs_idl/connection.py | 18 +++++++++++++++--- .../functional/backend/ovs_idl/test_connection.py | 3 +++ tools/setup-ovs.sh | 4 ++-- tox.ini | 4 ++-- 5 files changed, 23 insertions(+), 7 deletions(-)

1 0

ovsdbapp 1.12.1 (xena)
by no-reply＠openstack.org 22 Apr '22

22 Apr '22

We are glad to announce the release of: ovsdbapp 1.12.1: A library for creating OVSDB applications This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.12.0..1.12.1 ---------------------------------- a7a1d5c Fix broken behavior after recent OVS update a73fbf1 github no longer accepts git:// connections 3a0cd11 Log what exception caused abort of the transaction 8c09568 Update TOX_CONSTRAINTS_FILE for stable/xena 19a4364 Update .gitreview for stable/xena 49ab130 tools: run functional tests against ovn/main branch Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ovsdbapp/backend/ovs_idl/connection.py | 18 +++++++++++++++--- ovsdbapp/backend/ovs_idl/transaction.py | 9 ++++++++- .../functional/backend/ovs_idl/test_connection.py | 3 +++ tools/setup-ovs.sh | 6 +++--- tox.ini | 2 +- 6 files changed, 31 insertions(+), 8 deletions(-)

1 0

ovsdbapp 1.9.2 (wallaby)
by no-reply＠openstack.org 22 Apr '22

22 Apr '22

We are jazzed to announce the release of: ovsdbapp 1.9.2: A library for creating OVSDB applications This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.9.1..1.9.2 -------------------------------- 9990509 Fix broken behavior after recent OVS update fb5feee github no longer accepts git:// connections fa4a747 Log what exception caused abort of the transaction eaa6406 tools: run functional tests against ovn/main branch Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 18 +++++++++++++++--- ovsdbapp/backend/ovs_idl/transaction.py | 9 ++++++++- .../functional/backend/ovs_idl/test_connection.py | 3 +++ tools/setup-ovs.sh | 6 +++--- 4 files changed, 29 insertions(+), 7 deletions(-)

1 0

neutron 18.3.0 (wallaby)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are overjoyed to announce the release of: neutron 18.3.0: OpenStack Networking This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 18.3.0 ^^^^^^ Bug Fixes ********* * Enforce policy for 'qos_policy_id' attribute of Floating IP so only authorized users can set/unset it. For more info see bug LP#1957175 (https://bugs.launchpad.net/bugs/1957175) * For IPv4 subnets when dns_nameservers is not set in the subnet, servers defined in 'ovn/dns_servers' config option or system's resolv.conf are used, but for IPv6 subnets these are not used. The same will now be used for IPv6 subnets too. Additionally dns servers added in 'ovn/dns_servers' config option or system's resolv.conf will be filtered as per the subnet's IP version. For more info see the bug report 1951816 (https://bugs.launchpad.net/neutron/+bug/1951816) Other Notes *********** * OVN mechanism driver allows only to have one physical network per bridge. Changes in neutron 18.2.0..18.3.0 --------------------------------- a357dfaf11 [OVN] Keep "connectivity" VIF details parameter in migration a91d0e5e4a Retry port_update in the OVN if revision mismatch during live-migration 2311644827 Also add B324 to bandit skip list for python3.9+ 1b82d4aa20 [API] Return 403 for POST requests when user is not authorized 79aaa3e79d When creating a VXLAN interface, a device is mandatory 9a94e2855a Change set_device_rate calls according to new signature 21c9d40af4 [L3][QoS] L3 agent QoS extension to handle duplicated FIPs a159a0d9bc Check whether vxlan group and local addresses are IPv4 or IPv6 6af566a89a Fix ingress bandwidth limit in the openvswitch agent df5af13477 Clean duplicated QoS bandwidth related methods in ovs_lib module b889048202 Repeat few times put new interface in the namespace 2152d5af3d [OVN][migration] Clean sg- and fg- interfaces fc5dbf4ae7 Use python3-devel in bindep for rpm distros 7815ac1299 ovn migration: Remove usage of tripleo-ansible-inventory 9622c45bd6 ovn: Retry port binding on deadlock when migrating to ovn 5598510c80 Force security_group_id uuid validation of sg rules 60e416f5c8 ovn migration: Don't use executables in /tmp/ 8b71efd792 Add FIPS enabled scenario jobs 5aac511914 Log request IDs for matched Nova external events 6f01d45c4a Ensure gateway is set for prefix delegated subnets 8daf9b38d3 Ensure that re_added ports are DOWN before set back to UP b053dfe384 Remove exception ``IpAddressAllocationNotFound`` e480704a8c Enable sctp module in the fullstack Centos node 10988f4f70 Run configure_for_func_testing script after enable fips ca458d9eb9 Ensure no GARPs are sent for Load Balancer VIPs on tenant networks 691a7ceeec Allow ovn_db_sync to continue on duplicate normalised CIDR 6c27df2ca0 Fix a error when l3-agent gets filter id for ip 396a146236 Support SB OVSDB connections to non-leader servers 1cadfc84a5 [SR-IOV] Fix QoS extension to set min/max values 0b74cfb67c Add centos-9 jobs for wallaby zuul layout 13eb9d176f Switch to cirros uec image in ovn tempest jobs 81e738cc1b [ OVN ][Migration] Reload systemctl daemon after removal e6b7689003 [OVN][Cosmetic] Improve gen_router_port_options f9740fcbb5 Restructure layout for periodic, experimental and tox jobs 86c153d57f [OVN] Handle RouterNotFound exception in set_gateway_mtu f301bb6b02 Add functional and fullstack jobs with FIPS enabled 72142f4df9 Remove tox_install_siblings=False from the functional job's definition d96819cce4 [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP 276f154158 segments: fix scheduling duplicate segments ec4e453671 Use a thread local variable to store the Nova Notifier enable flag 4bbeacf871 Make configure_for_func_testing compatible with e.g. Centos a4f4dbcf10 Remove run-devstack role from run_functional_job playbook 3ba0f8f3c6 Disable pep8 import check for pyroute2 library b9240125e6 Wait longer before deleting DPDK vhu trunk bridges f2ddb6741e Use Port_Binding up column to set Neutron port status 4b06bf4d9f [ovn] Prevent stale ports in the OVN database 9d5cea0e2b Make sure "dead vlan" ports cannot transmit packets bd9d87019a [OVN] Check if exists trunk ports before cleanup 4b89ad6403 [OVN] Correctly set dns_server in dhcpv4/v6 options 859726bc38 Update irrelevant-files for non scenario jobs 67f36f0c5c Update irrelevant-files to skip run of untouched jobs c5765cdd75 [Stable Only] Enforce policy for qos_policy_id attribute 0340d412be Ensure subports status is aligned with parent port feacbf58dd [OVN] Fix overlapping security group objects not correctly applied a30fd26b3f [OVN] Add the VIF details "connectivity" parameter 46e763b63b Properly clean up ovn-northd in functional tests fb33a02cb2 [OVN][FT] Check UNIX socket file before using it 9f5b745a5e Make the dead vlan actually dead 0f025c728c [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid" d53733c33a [OVN] Check new added segments in OVN mech driver 45e1b44cc4 Recheck irrelevant files f039eebf3e Register cleanup hooks for the object change handlers only when needed 8fa04bec83 Fix OVS OVSNeutronAgent.reclaim_local_vlan() 224332dbb5 Exclude router gw subnet ports from port list while port delete. eddb3a7902 [OVN] Allow only one physical network per bridge 301deb87e7 Add wait event for metadataagent sb_idl 591570c5f4 [OVN] Add reverse DNS records Diffstat (except docs and test files) ------------------------------------- bindep.txt | 9 +- neutron/agent/common/ovs_lib.py | 351 +++++++++++---------- neutron/agent/l2/extensions/fdb_population.py | 3 +- neutron/agent/l3/dvr_local_router.py | 3 +- neutron/agent/l3/extensions/qos/base.py | 42 +-- neutron/agent/l3/extensions/qos/fip.py | 195 +++++++----- neutron/agent/l3/router_info.py | 3 +- neutron/agent/linux/bridge_lib.py | 3 +- neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/interface.py | 73 +++-- neutron/agent/linux/ip_lib.py | 37 ++- neutron/agent/linux/l3_tc_lib.py | 3 +- neutron/agent/linux/tc_lib.py | 8 +- neutron/agent/ovn/metadata/agent.py | 17 + neutron/agent/ovn/metadata/ovsdb.py | 9 +- neutron/cmd/sanity/checks.py | 4 +- neutron/common/ovn/constants.py | 15 +- neutron/common/ovn/utils.py | 16 +- neutron/db/agentschedulers_db.py | 7 +- neutron/db/db_base_plugin_common.py | 2 +- neutron/db/db_base_plugin_v2.py | 7 - neutron/db/ipam_backend_mixin.py | 3 - neutron/db/l3_dvrscheduler_db.py | 3 +- neutron/extensions/qos_fip.py | 1 + neutron/extensions/securitygroup.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 10 +- neutron/ipam/exceptions.py | 2 + neutron/notifiers/nova.py | 29 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 10 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 5 +- neutron/plugins/ml2/drivers/mech_agent.py | 2 + .../drivers/mech_sriov/agent/eswitch_manager.py | 64 ++-- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 18 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 3 + .../agent/extension_drivers/qos_driver.py | 9 +- .../openvswitch/agent/openflow/native/br_int.py | 9 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 41 ++- neutron/plugins/ml2/drivers/ovn/db_migration.py | 8 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 59 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 42 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 68 ++-- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 322 ++++++++++++------- neutron/plugins/ml2/ovo_rpc.py | 12 +- neutron/plugins/ml2/plugin.py | 5 +- neutron/privileged/agent/linux/ip_lib.py | 34 +- neutron/privileged/agent/linux/tc_lib.py | 3 +- neutron/services/logapi/drivers/ovn/driver.py | 22 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 2 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 14 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 7 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 21 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 28 +- .../services/logapi/drivers/ovn/test_driver.py | 63 +++- .../openvswitch/agent/test_trunk_manager.py | 2 + .../unit/agent/l3/extensions/qos/test_base.py | 12 +- .../agent/l3/extensions/qos/test_gateway_ip.py | 4 +- .../ipam/drivers/neutrondb_ipam/test_driver.py | 6 - .../agent/test_linuxbridge_neutron_agent.py | 14 +- .../mech_driver/test_mech_linuxbridge.py | 16 +- .../macvtap/mech_driver/test_mech_macvtap.py | 16 +- .../mech_sriov/agent/test_eswitch_manager.py | 126 ++++---- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 34 +- .../agent/extension_drivers/test_qos_driver.py | 11 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 30 +- .../mech_driver/test_mech_openvswitch.py | 28 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 46 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 333 ++++++++++--------- .../drivers/ovn/mech_driver/test_mech_driver.py | 233 +++++++++++++- .../plugins/ml2/drivers/ovn/test_db_migration.py | 4 +- .../unit/privileged/agent/linux/test_ip_lib.py | 15 +- .../trunk/drivers/ovn/test_trunk_driver.py | 6 +- playbooks/configure_functional_job.yaml | 6 + playbooks/enable-fips.yaml | 5 + playbooks/run_functional_job.yaml | 2 - .../notes/bug-1957175-764bc9c73b8d46e9.yaml | 6 + ...-dns-servers-ipv6-subnets-f2d525abc70b01b3.yaml | 11 + ...it-one-physnet-per-bridge-188285955a5ea124.yaml | 4 + roles/disable_selinux/tasks/main.yaml | 3 + tools/configure_for_func_testing.sh | 24 +- .../tripleo_environment/ovn_migration.sh | 11 +- .../playbooks/ovn-migration.yml | 9 + .../roles/migration/tasks/activate-ovn.yml | 4 +- .../roles/migration/tasks/cleanup-dataplane.yml | 27 +- .../roles/migration/tasks/clone-dataplane.yml | 4 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../pre-checks/ovn-controllers/tasks/main.yml | 10 + .../playbooks/roles/stop-agents/tasks/main.yml | 4 + tox.ini | 5 +- zuul.d/base.yaml | 42 ++- zuul.d/grenade.yaml | 21 +- zuul.d/job-templates.yaml | 77 +++++ zuul.d/project.yaml | 47 +-- zuul.d/rally.yaml | 19 +- zuul.d/tempest-multinode.yaml | 20 +- zuul.d/tempest-singlenode.yaml | 84 ++++- zuul.d/tripleo.yaml | 25 +- 135 files changed, 2834 insertions(+), 1138 deletions(-)

1 0

neutron 19.2.0 (xena)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are jazzed to announce the release of: neutron 19.2.0: OpenStack Networking This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 19.2.0 ^^^^^^ Bug Fixes ********* * Enforce policy for 'qos_policy_id' attribute of Floating IP so only authorized users can set/unset it. For more info see bug LP#1957175 (https://bugs.launchpad.net/bugs/1957175) * Changes the API behaviour while using OVN driver to enforce that it's not possible to delete all the IPs from a router port. For more info see bug LP#1948457 (https://bugs.launchpad.net/neutron/+bug/1948457) * For IPv4 subnets when dns_nameservers is not set in the subnet, servers defined in 'ovn/dns_servers' config option or system's resolv.conf are used, but for IPv6 subnets these are not used. The same will now be used for IPv6 subnets too. Additionally dns servers added in 'ovn/dns_servers' config option or system's resolv.conf will be filtered as per the subnet's IP version. For more info see the bug report 1951816 (https://bugs.launchpad.net/neutron/+bug/1951816) Other Notes *********** * OVN mechanism driver allows only to have one physical network per bridge. Changes in neutron 19.1.0..19.2.0 --------------------------------- c43013487c [OVN] Keep "connectivity" VIF details parameter in migration 05923cde9d Retry port_update in the OVN if revision mismatch during live-migration 68e14f0b99 Also add B324 to bandit skip list for python3.9+ 909f3bd3c5 [API] Return 403 for POST requests when user is not authorized 0c18f80f5c [L3][QoS] L3 agent QoS extension to handle duplicated FIPs 5573230d30 Fix ingress bandwidth limit in the openvswitch agent 18e05b5b2a Clean duplicated QoS bandwidth related methods in ovs_lib module 7c67460b16 Repeat few times put new interface in the namespace af0828e5e0 [OVN][migration] Clean sg- and fg- interfaces 342e0c3b78 Use python3-devel in bindep for rpm distros 0c96b2134f ovn migration: Remove usage of tripleo-ansible-inventory e05b095300 ovn: Retry port binding on deadlock when migrating to ovn afe3ba73ea Force security_group_id uuid validation of sg rules 40c3671339 Change set_device_rate calls according to new signature 4fc70c09ae ovn migration: Don't use executables in /tmp/ 37c028e3d7 Log request IDs for matched Nova external events 64c29bcaf3 Ensure gateway is set for prefix delegated subnets 7342d11427 Ensure that re_added ports are DOWN before set back to UP d2b1e3edaa Remove exception ``IpAddressAllocationNotFound`` 22baee56f0 Enable sctp module in the fullstack Centos node fc71f63a4f Run configure_for_func_testing script after enable fips 391af6c158 Ensure no GARPs are sent for Load Balancer VIPs on tenant networks bf308a12a1 Allow ovn_db_sync to continue on duplicate normalised CIDR c6d3f90bee Check whether vxlan group and local addresses are IPv4 or IPv6 ceaed57f42 Fix a error when l3-agent gets filter id for ip 6b6abd0718 [OVN] Update VIP port host ID when traffic detected 0c9e9b2752 [SR-IOV] Fix QoS extension to set min/max values 6ea9463838 Support SB OVSDB connections to non-leader servers 9da226fe30 Switch to cirros uec image in ovn tempest jobs c9de2e89df [ OVN ][Migration] Reload systemctl daemon after removal bd738eadd1 [OVN][Cosmetic] Improve gen_router_port_options b0b17dad0a Restructure layout for periodic, experimental and tox jobs c0c292efbc [OVN] Handle RouterNotFound exception in set_gateway_mtu b96d46fe42 Add FIPS enabled scenario jobs 9d233ab712 Add functional and fullstack jobs with FIPS enabled 691496c365 segments: fix scheduling duplicate segments 2104bbdddc Make configure_for_func_testing compatible with e.g. Centos eba283a4c4 Remove run-devstack role from run_functional_job playbook 6695f64f5f Use Port_Binding up column to set Neutron port status ac4aa7ef7e Wait longer before deleting DPDK vhu trunk bridges d67b05ddea [ovn] Prevent stale ports in the OVN database f20a015886 [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP 78c63d4ec6 Make sure "dead vlan" ports cannot transmit packets 8dc7db2608 Create a PeriodicWorker for DbQuotaNoLockDriver clean up 35eedf91f5 [OVN] Check if exists trunk ports before cleanup d317bedb7d Update irrelevant-files for non scenario jobs 25e8ec0c56 Update irrelevant-files to skip run of untouched jobs 68458c369e Use a thread local variable to store the Nova Notifier enable flag 0c2af0f6e7 [Stable Only] Enforce policy for qos_policy_id attribute 19d26228ac [Xena Only] Switch to xena neutron-tempest-plugin jobs 64b06e12d6 [OVN] Fix overlapping security group objects not correctly applied 08a35203de Ensure subports status is aligned with parent port 6be2df7eb5 [OVN] Add the VIF details "connectivity" parameter fb50dc2a10 [stable-only] Update Placement allocation when min bw rule direction is changed ff45fce495 Properly clean up ovn-northd in functional tests 328c5740c5 [OVN][FT] Check UNIX socket file before using it 5025a6a727 Make the dead vlan actually dead 88dfbcc8a9 [OVN] Correctly set dns_server in dhcpv4/v6 options 2f8002b506 [Stable Xena Only] Drop TripleO periodic jobs bde4724980 [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid" 30a7618e6f [OVN] Check new added segments in OVN mech driver a43972ab9f [Functional] Add extra logs to the L3 HA router transitions 97180b0183 Register cleanup hooks for the object change handlers only when needed eb582be329 Fix OVS OVSNeutronAgent.reclaim_local_vlan() 488a68cb49 Exclude router gw subnet ports from port list while port delete. 1dc99e93fe When creating a VXLAN interface, a device is mandatory 795a19bf35 [OVN] Allow only one physical network per bridge 876e42eb78 Add wait event for metadataagent sb_idl 5b30b14ad7 [OVN] Add reverse DNS records 09f713d5d5 [OVN] Update check_for_mcast_flood_reports() to check for mcast_flood ca06a2e62b [OVN] Prevent deleting the only IP of a router port 56d2bda51d Allocate IPs in bulk requests in separate transactions 6265ab319e [Functional] Fix expected number of the enqueue_state_change calls 666562a258 ovn: enable stateless-security-group api Diffstat (except docs and test files) ------------------------------------- bindep.txt | 9 +- neutron/agent/common/ovs_lib.py | 351 +++++++++---------- neutron/agent/l3/extensions/qos/base.py | 42 +-- neutron/agent/l3/extensions/qos/fip.py | 195 ++++++----- neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/interface.py | 70 +++- neutron/agent/linux/ip_lib.py | 25 +- neutron/agent/linux/l3_tc_lib.py | 3 +- neutron/agent/ovn/metadata/agent.py | 17 + neutron/agent/ovn/metadata/ovsdb.py | 9 +- neutron/cmd/sanity/checks.py | 4 +- neutron/common/ovn/constants.py | 15 +- neutron/common/ovn/extensions.py | 2 + neutron/common/ovn/utils.py | 16 +- neutron/db/agentschedulers_db.py | 7 +- neutron/db/db_base_plugin_common.py | 2 +- neutron/db/db_base_plugin_v2.py | 7 - neutron/db/ipam_backend_mixin.py | 3 - neutron/db/ipam_pluggable_backend.py | 50 ++- neutron/db/l3_dvrscheduler_db.py | 3 +- neutron/db/quota/api.py | 4 + neutron/db/quota/driver.py | 4 + neutron/db/quota/driver_nolock.py | 25 +- neutron/extensions/qos_fip.py | 1 + neutron/extensions/securitygroup.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 10 +- neutron/ipam/exceptions.py | 2 + neutron/notifiers/nova.py | 29 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 10 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 5 +- neutron/plugins/ml2/drivers/mech_agent.py | 2 + .../drivers/mech_sriov/agent/eswitch_manager.py | 64 ++-- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 18 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 3 + .../agent/extension_drivers/qos_driver.py | 9 +- .../openvswitch/agent/openflow/native/br_int.py | 9 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 41 ++- neutron/plugins/ml2/drivers/ovn/db_migration.py | 8 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 68 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 55 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 68 +++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 373 ++++++++++++++------- neutron/plugins/ml2/ovo_rpc.py | 12 +- neutron/plugins/ml2/plugin.py | 108 ++++-- neutron/privileged/agent/linux/ip_lib.py | 6 +- neutron/services/logapi/drivers/ovn/driver.py | 22 +- neutron/services/ovn_l3/plugin.py | 25 +- neutron/services/qos/qos_plugin.py | 70 ++-- .../drivers/openvswitch/agent/ovsdb_handler.py | 2 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 13 +- .../functional/agent/linux/test_bridge_lib.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 14 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 7 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 96 +++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 28 +- .../services/logapi/drivers/ovn/test_driver.py | 63 +++- .../openvswitch/agent/test_trunk_manager.py | 2 + .../unit/agent/l3/extensions/qos/test_base.py | 12 +- .../agent/l3/extensions/qos/test_gateway_ip.py | 4 +- .../ipam/drivers/neutrondb_ipam/test_driver.py | 6 - .../agent/test_linuxbridge_neutron_agent.py | 14 +- .../mech_driver/test_mech_linuxbridge.py | 16 +- .../macvtap/mech_driver/test_mech_macvtap.py | 16 +- .../mech_sriov/agent/test_eswitch_manager.py | 125 +++---- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 34 +- .../agent/extension_drivers/test_qos_driver.py | 11 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 30 +- .../mech_driver/test_mech_openvswitch.py | 28 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 71 +++- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 333 +++++++++--------- .../drivers/ovn/mech_driver/test_mech_driver.py | 233 ++++++++++++- .../plugins/ml2/drivers/ovn/test_db_migration.py | 4 +- .../unit/privileged/agent/linux/test_ip_lib.py | 15 +- .../trunk/drivers/ovn/test_trunk_driver.py | 6 +- playbooks/configure_functional_job.yaml | 6 + playbooks/enable-fips.yaml | 5 + playbooks/run_functional_job.yaml | 2 - .../notes/bug-1957175-764bc9c73b8d46e9.yaml | 6 + .../notes/bug-817525-eef68687dafa97fd.yaml | 6 + ...-dns-servers-ipv6-subnets-f2d525abc70b01b3.yaml | 11 + ...it-one-physnet-per-bridge-188285955a5ea124.yaml | 4 + roles/disable_selinux/tasks/main.yaml | 3 + tools/configure_for_func_testing.sh | 24 +- .../tripleo_environment/ovn_migration.sh | 11 +- .../playbooks/ovn-migration.yml | 9 + .../roles/migration/tasks/activate-ovn.yml | 4 +- .../roles/migration/tasks/cleanup-dataplane.yml | 27 +- .../roles/migration/tasks/clone-dataplane.yml | 4 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../pre-checks/ovn-controllers/tasks/main.yml | 10 + .../playbooks/roles/stop-agents/tasks/main.yml | 4 + tox.ini | 5 +- zuul.d/base.yaml | 30 ++ zuul.d/grenade.yaml | 15 + zuul.d/job-templates.yaml | 61 ++++ zuul.d/project.yaml | 54 +-- zuul.d/rally.yaml | 15 + zuul.d/tempest-multinode.yaml | 15 + zuul.d/tempest-singlenode.yaml | 77 ++++- zuul.d/tripleo.yaml | 69 ---- 142 files changed, 3240 insertions(+), 1337 deletions(-)

1 0

neutron 17.4.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We eagerly announce the release of: neutron 17.4.0: OpenStack Networking This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 17.4.0 ^^^^^^ Bug Fixes ********* * Enforce policy for 'qos_policy_id' attribute of Floating IP so only authorized users can set/unset it. For more info see bug LP#1957175 (https://bugs.launchpad.net/bugs/1957175) Other Notes *********** * OVN mechanism driver allows only to have one physical network per bridge. Changes in neutron 17.3.0..17.4.0 --------------------------------- 4070861450 Retry port_update in the OVN if revision mismatch during live-migration 5f048620d1 When creating a VXLAN interface, a device is mandatory 7caeebbbc3 Change set_device_rate calls according to new signature e26fd32ab8 Support SB OVSDB connections to non-leader servers 4958720448 Check whether vxlan group and local addresses are IPv4 or IPv6 4a0ca56fe5 Fix ingress bandwidth limit in the openvswitch agent 9e3aa7e3d6 Clean duplicated QoS bandwidth related methods in ovs_lib module 258dc36050 Repeat few times put new interface in the namespace 912eafa888 [OVN][migration] Clean sg- and fg- interfaces f13ab9c0c7 Force security_group_id uuid validation of sg rules 51e64a296e ovn migration: Don't use executables in /tmp/ 245ca56d23 Log request IDs for matched Nova external events 0842d28232 Ensure that re_added ports are DOWN before set back to UP 884418183a Remove exception ``IpAddressAllocationNotFound`` 4627955f97 Ensure no GARPs are sent for Load Balancer VIPs on tenant networks 10c8d590af Allow ovn_db_sync to continue on duplicate normalised CIDR 36e89eb182 Fix a error when l3-agent gets filter id for ip 42a9b7cafa [SR-IOV] Fix QoS extension to set min/max values 9ce1eecf18 [ OVN ][Migration] Reload systemctl daemon after removal 2b8edb8593 [OVN][Cosmetic] Improve gen_router_port_options 69182db50e [OVN] Handle RouterNotFound exception in set_gateway_mtu 59499e1499 [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP 2a6148869a Ensure subports status is aligned with parent port d06384867f segments: fix scheduling duplicate segments e9e73d63b1 Wait longer before deleting DPDK vhu trunk bridges 29b08d9765 [ovn] Prevent stale ports in the OVN database 88abffcb48 Make sure "dead vlan" ports cannot transmit packets ae55ae3673 [Stable Only] Enforce policy for qos_policy_id attribute 6d0b50652d [OVN] Check if exists trunk ports before cleanup e755baa279 Update irrelevant-files to skip run of untouched jobs afb0c633f8 Limit execution of the neutron CI jobs on some irrelevant file 36449172ee Use Port_Binding up column to set Neutron port status dacd5276b7 [OVN] Add the VIF details "connectivity" parameter b11f3f4c37 Properly clean up ovn-northd in functional tests a1327842bd [OVN][FT] Check UNIX socket file before using it c860e2612e [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid" b0080c4719 [OVN] Check new added segments in OVN mech driver 77afc56e10 Register cleanup hooks for the object change handlers only when needed f47fdf4d05 Fix OVS OVSNeutronAgent.reclaim_local_vlan() cb67856d9f [OVN] Allow only one physical network per bridge 97088a732e Add wait event for metadataagent sb_idl 3664aa1bb4 [OVN] Add reverse DNS records Diffstat (except docs and test files) ------------------------------------- neutron/agent/common/ovs_lib.py | 351 +++++++++++---------- neutron/agent/linux/interface.py | 70 +++- neutron/agent/linux/ip_lib.py | 25 +- neutron/agent/linux/l3_tc_lib.py | 3 +- neutron/agent/ovn/metadata/agent.py | 17 + neutron/agent/ovn/metadata/ovsdb.py | 9 +- neutron/cmd/sanity/checks.py | 4 +- neutron/common/ovn/constants.py | 15 +- neutron/db/agentschedulers_db.py | 7 +- neutron/db/db_base_plugin_v2.py | 7 - neutron/extensions/qos_fip.py | 1 + neutron/extensions/securitygroup.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 10 +- neutron/ipam/exceptions.py | 2 + neutron/notifiers/nova.py | 10 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 5 +- neutron/plugins/ml2/drivers/mech_agent.py | 2 + .../drivers/mech_sriov/agent/eswitch_manager.py | 64 ++-- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 18 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 3 + .../agent/extension_drivers/qos_driver.py | 9 +- .../openvswitch/agent/openflow/native/br_int.py | 9 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 41 ++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 59 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 42 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 68 ++-- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 318 ++++++++++++------- neutron/plugins/ml2/ovo_rpc.py | 12 +- neutron/plugins/ml2/plugin.py | 5 +- neutron/privileged/agent/linux/ip_lib.py | 6 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 2 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 14 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 7 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 19 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 28 +- .../openvswitch/agent/test_trunk_manager.py | 2 + .../ipam/drivers/neutrondb_ipam/test_driver.py | 6 - .../agent/test_linuxbridge_neutron_agent.py | 14 +- .../mech_driver/test_mech_linuxbridge.py | 16 +- .../macvtap/mech_driver/test_mech_macvtap.py | 16 +- .../mech_sriov/agent/test_eswitch_manager.py | 126 ++++---- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 34 +- .../agent/extension_drivers/test_qos_driver.py | 11 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 30 +- .../mech_driver/test_mech_openvswitch.py | 28 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 46 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 332 ++++++++++--------- .../drivers/ovn/mech_driver/test_mech_driver.py | 169 ++++++++++ .../unit/privileged/agent/linux/test_ip_lib.py | 15 +- .../trunk/drivers/ovn/test_trunk_driver.py | 6 +- .../notes/bug-1957175-764bc9c73b8d46e9.yaml | 6 + ...it-one-physnet-per-bridge-188285955a5ea124.yaml | 4 + .../playbooks/ovn-migration.yml | 9 + .../roles/migration/tasks/activate-ovn.yml | 4 +- .../roles/migration/tasks/cleanup-dataplane.yml | 27 +- .../roles/migration/tasks/clone-dataplane.yml | 4 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../pre-checks/ovn-controllers/tasks/main.yml | 10 + .../playbooks/roles/stop-agents/tasks/main.yml | 4 + zuul.d/base.yaml | 23 +- zuul.d/grenade.yaml | 47 ++- zuul.d/project.yaml | 58 +--- zuul.d/rally.yaml | 45 ++- zuul.d/tempest-multinode.yaml | 49 ++- zuul.d/tempest-singlenode.yaml | 109 ++++++- zuul.d/tripleo.yaml | 45 ++- 95 files changed, 2219 insertions(+), 946 deletions(-)

1 0

tripleo-puppet-elements 13.1.2 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are pleased to announce the release of: tripleo-puppet-elements 13.1.2: Puppet building rules for OpenStack images. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 13.1.1..13.1.2 ------------------------------------------------- c04cfea Only install required/supported fence agents Diffstat (except docs and test files) ------------------------------------- elements/overcloud-controller/pkg-map | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

tripleo-image-elements 12.2.3 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are tickled pink to announce the release of: tripleo-image-elements 12.2.3: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.2..12.2.3 ------------------------------------------------ d00e7302 Update TOX_CONSTRAINTS_FILE for stable/victoria Diffstat (except docs and test files) ------------------------------------- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

tripleo-validations 13.5.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are thrilled to announce the release of: tripleo-validations 13.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 13.4.1..13.5.0 --------------------------------------------- 9a47a5c Remove pre-deployment validation 75f620b oslo_config_validator: Nova port data changes settings have wrong values d5e942e Correct the tox option for skipping sdist generation 5cabac4 [Victoria-Only] Preventing tox from using local packages c2aafdd oslo_config_validator: Defaulting config_invalidations to empty list 4ce41ce oslo-config-validator: container run task should never fail 18dd400 feat(removal): tox-ansible support 95a0c41 fix(molecule): Add ability to run molecule on Fedora e202b48 fix(ci): Install python3 package first 6863bf8 Instruct container-status validation to accept 137, 142 and 143 exit code status 9860479 Use centos-8 stream for molecule jobs 3cb81f4 Optimize linters executions from tox and pre-commit 9def8ea [Victoria-only] Bumping the ansible-lint version to 5.3.2 in order to resolve CI failure 0c51e46 Use collections in validations for Ansible 2.11 75b0fc7 partial-backport: oslo-config-validator: Removing merged patches ea51007 oslo-config-validator: invalidating configs only when necessary 5b8f902 oslo-config-validator: container plugin is replaced with collections d925c56 Rename system_encoding playbooks. 0c00c50 Moving setting validation from nova_event_callback 365c82f Fail validation if pacemaker service is not active d786edd remove using containers-prepare-parameter.yaml a3495c1 Bump molecule to 3.3.1 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 10 + .ansible-lint_rules/RoleNames.py | 57 -- .ansible-lint_rules/ValidationHasMetadataRule.py | 2 +- .config/molecule/Dockerfile | 12 +- .config/molecule/config.yml | 16 +- .pre-commit-config.yaml | 11 +- LICENSE | 1 - README.rst | 1 - ansible-collections-requirements.yml | 6 + babel.cfg | 1 - bindep.txt | 28 +- ci/playbooks/pre.yml | 10 + .../modules/modules-ceph_pools_pg_protection.rst | 1 - .../modules-check_cpus_aligned_with_dpdk_nics.rst | 1 - .../modules/modules-check_ironic_boot_config.rst | 1 - .../modules-check_other_processes_pmd_usage.rst | 1 - .../modules-convert_range_to_numbers_list.rst | 1 - .../modules/modules-get_dpdk_nics_numa_info.rst | 1 - .../modules/modules-ovs_dpdk_pmd_cpus_check.rst | 1 - .../modules/modules-pmd_threads_siblings_check.rst | 1 - .../role-collect_flavors_and_verify_profiles.rst | 1 - .../roles/role-ironic_boot_configuration.rst | 1 - .../roles/role-undercloud_heat_purge_deleted.rst | 1 - .../roles/role-undercloud_service_status.rst | 1 - molecule-requirements.txt | 8 +- playbooks/collect-flavors-and-verify-profiles.yaml | 1 - playbooks/nova-event-callback.yaml | 21 +- playbooks/pacemaker-status.yaml | 2 + .../{system_encoding.yaml => system-encoding.yaml} | 0 .../add-ceph-health-check-000bab9581c759d3.yaml | 2 +- .../molecule/default/molecule.yml | 8 +- .../tasks/check_nfv_instances.yml | 2 +- .../tasks/validate_instance.yml | 10 +- roles/check_uc_hostname/README.md | 39 - roles/check_uc_hostname/defaults/main.yml | 8 +- .../molecule/default/converge.yml | 208 ++++- .../molecule/default/molecule.yml | 19 + .../check_uc_hostname/molecule/default/prepare.yml | 72 -- roles/check_uc_hostname/tasks/main.yml | 82 +- .../vars/main.yml | 1 - roles/container_status/tasks/main.yaml | 2 +- roles/image_serve/molecule/default/molecule.yml | 8 +- roles/nova_event_callback/defaults/main.yml | 8 +- roles/nova_event_callback/tasks/main.yml | 65 +- roles/nova_event_callback/vars/main.yml | 14 +- roles/nova_svirt/tasks/validate.yml | 2 +- roles/oslo_config_validator/defaults/main.yml | 2 + roles/oslo_config_validator/meta/main.yml | 42 + .../molecule/default/molecule.yml | 34 +- .../molecule/mocked_failure/molecule.yml | 3 +- .../resources/library/generator.yml | 74 ++ .../oslo_config_validator/resources/library/podman | 304 +++++++ .../resources/library/podman_container.py | 903 --------------------- .../resources/library/podman_container_info.py | 71 -- .../resources/playbooks/converge.yml | 2 + .../resources/playbooks/prepare.yml | 13 + .../tasks/build_validation_config.yml | 2 +- .../oslo_config_validator/tasks/container_run.yml | 73 +- .../tasks/invalidate_config.yml | 2 +- roles/oslo_config_validator/tasks/main.yml | 1 + .../tasks/opt_data_format.yml | 50 +- .../tasks/validate_config.yml | 6 +- .../tasks/validation_command.yml | 5 + .../molecule/default/molecule.yml | 2 +- .../molecule/deprecated_services/molecule.yml | 2 +- .../molecule/down_services/molecule.yml | 2 +- roles/pacemaker_status/tasks/main.yml | 5 + roles/pacemaker_status/vars/main.yml | 2 + roles/tls_everywhere/molecule/default/molecule.yml | 8 +- scripts/run-local-test | 7 +- tox.ini | 64 +- zuul.d/base.yaml | 2 +- zuul.d/layout.yaml | 3 +- 118 files changed, 1058 insertions(+), 1690 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 6dc9c35..9f4f7dd 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -3,4 +3,4 @@ ansi2html>=1.6.0 -ansible>=2.4.0 -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 -pytest>=5.1.2 +ansible-core<2.12 # GPLv3+ +jinja2>=2.8.0 # BSD-3-Clause +molecule>=3.3.1,<4 # MIT +molecule-podman>=0.3.0 # MIT

1 0

tripleo-heat-templates 13.6.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are chuffed to announce the release of: tripleo-heat-templates 13.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.6.0 ^^^^^^ New Features ************ * Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package. * Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions * Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron * New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase". * With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server. * A heat parameter "IronicPowerStateChangeTimeout" has been added which sets the number of seconds to wait for power operations to complete, i.e., so that a baremetal node is in the desired power state. If timed out, the power operation is considered a failure. The default is 60 seconds, which is the same as the current Ironic default. Upgrade Notes ************* * The default UEFI iPXE bootfile is now *snponly.efi*. The boolean parameter *IronicIPXEUefiSnpOnly* was added to allow custom configuration. When set to *true* snponly is used, when *false* the previous default ipxe.efi is used. See bug: 1959726 (https://bugs.launchpad.net/tripleo/+bug/1959726) Bug Fixes ********* * Rsyslog config for haproxy (https://bugs.launchpad.net/tripleo/+bug/1953672) * When we install libvirt on a host, the system parameter "fs.aio- max- nr" is to 1048576. Since we containerized libvirtd, we lost this system parameter. We now make sure it's defined by adding it from the nova-libvirt-common template. * The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838) Other Notes *********** * Steps are taken to minimize chances of confusion between the default block storage volume type established by the CinderDefaultVolumeType parameter, and cinder's own __DEFAULT__ volume type. In a new deployment where no volumes exist, cinder's __DEFAULT__ type is deleted because it is redundant. In an upgrade scenerio, if volumes exist then the __DEFAULT__ type's description is updated to indicate the actual default volume type is the one established by the CinderDefaultVolumeType parameter. Changes in tripleo-heat-templates 13.5.0..13.6.0 ------------------------------------------------ 7f12c4484 Fix CinderDefaultVolumeType constraints fb88ed98a Check whether an HA resource already exists explicitly b442b8d59 Memcached: Allow puppet to be aware IPv6 is used 3802edefb Disable auto discovery 02255246d Add support for powermax. 47e949807 Add nvidia firstboot yaml to tripleo-heat-template a9a4d5423 Etcd: Update cluster membership when replacing a node bdd0d7ec7 Increase stop_grace_period for Octavia controller services 951eef91f Fix typo in HciCephObject role tag 2fb1cbfa0 Add CephNfs service on roles providing "external" network connectivity 950f64010 Fix network-environment.yaml ipv6 {{network.name}}Routes fae044730 Fix attr corresponding to ManilaCephFSNFSIdmapOverrides caad2d24d Required DDP package is not loaded issue 4dadf3ded Exclude /etc/openldap to avoid overriding ro file e01fe8b34 Defining fs.aio-max-nr for hosts with libvirt service b368da08e Don't bind host's /run in multipathd container c5b2e36d4 IDM server registration is fixed to one server only b69cdee8d Add IronicNeutronAgentReportInterval parameter 371bb6528 Add parameter IronicIPXEUefiSnpOnly 720617ed0 Update dervice_pci script to handle pci address formats f76a244fb Check if passthrough user_config is decoded properly from hiera data a61368ff2 Add ping test for all networks gateway IPs 8b383986f Fix cloud-init detection rules 2ca0ebbdd Use only internal endpoints in Octavia controller services c20c5e804 Make sure libvirt guests shut down before network 401883388 Disable metrics_qdr binding in HAProxyEdge 50a28df08 Fix killscript regex match for libpod-conmon-* 5314c792b Use public endpoint for [keystone_authtoken] www_authenticate_uri 6fc83dd71 Fix IPv6 router on UC re-install fc293280c Add chrony waitsync back in 03857c21e Exec libvirtd in a transient scope 1db4c72c9 Add missing services to ControllerNovaStandalone role 729971c31 fix InternalApi subnet for ControllerNovaStandalone role e59be96fa Remove ganesha_vip extra config workaround 3c4475acd GaneshaNetwork - fallback -> external -> ctlplane f51498909 Fix indentation issue with 2-bonds-vlans config fdcd81de3 Wallaby and older: Remove heat-dashboard parameters from local_settings 9f51a8395 Remove tripleo_ovn_mac_port_name port tag 630e330f9 Missing rsyslog parameters for HAProxy b5d65342a [Victoria-Only] Fix hiera condition for cache_backend 432968ba6 Keystone: Remove unused container_puppet_tasks da47a77c1 Sc04: Enable glance sparse image upload b7019a627 Clear up confusion on cinder's default volume type 2d891e178 Revert "Enforces minimum Ceph client version to Mimic" 2e679aab6 Fix condition to add per subnet routes parameter 3da3ff6ea [Neutron] Add custom env file to set dns_domain_name d29e078cf Add param to configure neutron agent_down_time and report_interval f3930cc5b Default CephDashboardNetwork to storage_dashboard 3011d4c53 Fix libvirt/qemu logs location ba0ef3529 Enable ovn-monitor-all option to ovn-controller 1a20780ae Remove mariadb-server packages from the host 8ee7df3a3 Add parameter IronicPowerStateChangeTimeout 21a1aebc4 Added support for Neutron loggings service plugin configuration 72e0b6b78 [victoria/ussuri/train] Tune minion defaults c8daec697 Add OVNAvailabilityZone to improve UX 47e974067 Enable new SELinux boolean for vTPM support 8a4351664 Use yaml.safe_load to load YAML files 56cd7d474 placement: Adding Debug parameter 83441c397 Drop archive policy from enable-legacy-telemetry 68d3a2753 Option to select the required DDP package ae34f60cd Fix swift log redirection 0e57f8b35 Fix delegate_to to use group rather then undercloud 6b70e35fe Do not fail if haproxy container UUID changes 2d21dcce7 Remove setting ACLs during Upgrade 2397dd095 Wallaby and before: Fix wrong puppet parameter name 34cf44a88 Configure api_base_uri to DesignateEndpoint URI ec263697b Install python3-openstackclient after the leapp upgrade fd508d1ca Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up fff23ad3d Fix the CephDashboardNetwork default b0c5c80e0 NovaLiveMigrationPermitAutoConverge should default to True 895ae870f Revert "Disable postcopy for ovn/ovs-dpdk" 4cbc970d1 Environment for switching to using IPs for memcached 530668d03 Enable Ceph RGW public port into firewall when using SSL 9ae8a0683 Stop rotating rabbitmq crash.log files via erlang's lager cf53dbf19 Example configurable cap add 7ce489863 Add service ordering to cleanup service to avoid conflicts with agent startup 13e5bdf6f Add SendQueueLimit to collectd-amqp1 Diffstat (except docs and test files) ------------------------------------- ci/environments/neutron_dns_domain.yaml | 2 + ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 4 +- common/container-puppet.sh | 4 +- common/deploy-steps-tasks-step-0.j2.yaml | 6 + common/deploy-steps.j2 | 6 + .../pacemaker_restart_bundle.sh | 30 +- deployment/aodh/aodh-base.yaml | 2 +- .../barbican/barbican-api-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-mon.yaml | 19 - deployment/ceph-ansible/ceph-nfs.yaml | 2 +- deployment/ceph-ansible/ceph-rgw.yaml | 1 + deployment/cinder/cinder-api-container-puppet.yaml | 18 +- deployment/database/mysql-pacemaker-puppet.yaml | 11 +- deployment/deprecated/mistral/mistral-base.yaml | 2 +- .../novajoin/novajoin-container-puppet.yaml | 2 +- deployment/deprecated/sahara/sahara-base.yaml | 2 +- deployment/etcd/etcd-container-puppet.yaml | 77 ++ .../designate/designate-api-container-puppet.yaml | 3 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 10 + .../haproxy/haproxy-edge-container-puppet.yaml | 1 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 10 + deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-base-puppet.yaml | 9 +- deployment/horizon/horizon-container-puppet.yaml | 3 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 10 +- deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 21 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- .../ironic-neutron-agent-container-puppet.yaml | 23 +- deployment/kernel/kernel-baremetal-ansible.yaml | 23 +- deployment/keystone/keystone-container-puppet.yaml | 16 +- deployment/logging/files/nova-libvirt.yaml | 2 +- deployment/manila/manila-api-container-puppet.yaml | 2 +- deployment/manila/manila-backend-powermax.yaml | 80 ++ .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 25 +- deployment/metrics/collectd-container-puppet.yaml | 23 +- .../multipathd/multipathd-container-ansible.yaml | 1 - .../neutron/derive_pci_passthrough_whitelist.py | 502 +++++--- deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 11 +- deployment/neutron/neutron-base.yaml | 7 + deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 31 - .../neutron/neutron-l3-container-puppet.yaml | 55 +- .../neutron/neutron-metadata-container-puppet.yaml | 31 - .../neutron-ovs-agent-container-puppet.yaml | 24 + deployment/neutron/neutron-plugin-ml2-ovn.yaml | 26 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 7 +- deployment/nova/nova-compute-container-puppet.yaml | 9 +- deployment/nova/nova-libvirt-container-puppet.yaml | 11 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 4 +- .../octavia/octavia-api-container-puppet.yaml | 2 +- deployment/octavia/octavia-base.yaml | 4 + .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 27 + .../ovn/ovn-controller-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- .../placement/placement-api-container-puppet.yaml | 11 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 2 + deployment/swift/swift-proxy-container-puppet.yaml | 42 +- .../swift/swift-storage-container-puppet.yaml | 40 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/zaqar/zaqar-container-puppet.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 4 +- environments/enable-stf.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 4 + environments/manila-powermax-config.yaml | 20 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 1 + environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 9 +- environments/services/neutron-ovn-dpdk.yaml | 2 - environments/services/neutron-ovs-dpdk.yaml | 3 +- environments/undercloud/undercloud-minion.yaml | 28 + .../post_deploy/undercloud_ctlplane_network.py | 73 +- firstboot/nvidia_firstboot.yaml | 743 ++++++++++++ firstboot/userdata_timesync.yaml | 1 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 22 +- network/ports/ovn_mac_addr_port.yaml | 4 - network/service_net_map.j2.yaml | 4 +- overcloud.j2.yaml | 18 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + ...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml | 4 + ...arify-default-volume-type-c77e7a7ddafdf172.yaml | 12 + ...-fs.aio-max.nr-on-compute-06447122b8e12c71.yaml | 7 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../notes/power_state-457f12af30b9e341.yaml | 8 + .../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml | 9 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovIB.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 1 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNovaStandalone.yaml | 18 +- roles/ControllerOpenstack.yaml | 1 + roles/ControllerSriov.yaml | 1 + roles/ControllerStorageDashboard.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/HciCephObject.yaml | 2 +- roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/undercloud-minion.yaml | 19 + setup.py | 1 + tools/render-ansible-tasks.py | 11 +- tools/yaml-validate.py | 47 +- tox.ini | 4 +- zuul.d/layout.yaml | 12 + 140 files changed, 3304 insertions(+), 498 deletions(-)

1 0

tripleo-common 13.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We eagerly announce the release of: tripleo-common 13.3.0: A common library for TripleO workflows. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 13.2.3..13.3.0 ---------------------------------------- 33f1eecb Ensure failures on the undercloud leads to a complete stop f105287f Fix reference to undefined variables when heat-config times out 163d4b72 Fix namespace-less containers in image-serve 7c93f761 Add tempest to sudoers for tempest container image 79a47254 Disable ubi repos during container builds 867f6aee [EL8] Add nodejs:14 module stream 6e398b9d Add ipa client to tripleoclient container e35b654e add kernel-modules-extra in overcloud image needed for HWOL 5b885153 Remove unused DEFAULT_DEPLOY_*_NAME aab7a6ac Remove unused TRIPLEO_NETWORK_CONFIG_RESOURCE 58b77da3 Remove unused DEPLOYMENT_STATUS_FILE e732eb1d Remove unused constants for TripleO UI 8a22b25d Revert "Revert "Allow for OCI manifests"" 22e500a9 Fix awk expression cf231fb2 Align swtpm packages for nova-libvirt/compute b02ad261 Add a retry to the instropection waiting workbook Diffstat (except docs and test files) ------------------------------------- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/tcib/base/base.yaml | 2 + .../os/nova-base/nova-compute/nova-compute.yaml | 3 ++ .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 + container-images/tcib/base/os/tempest/tempest.yaml | 8 ++++ .../tcib/base/os/tempest/tempest_sudoers | 1 + .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + healthcheck/common.sh | 2 +- image-yaml/overcloud-hardened-images-centos8.yaml | 2 + image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + .../overcloud-hardened-images-uefi-centos8.yaml | 2 + .../overcloud-hardened-images-uefi-rhel8.yaml | 3 +- image-yaml/overcloud-images-centos8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + tripleo_common/constants.py | 12 ----- tripleo_common/image/image_export.py | 2 +- tripleo_common/image/image_uploader.py | 54 +++++++++++++++++++--- tripleo_common/inventory.py | 7 +++ tripleo_common/templates/deployments.yaml | 6 +-- workbooks/baremetal.yaml | 3 ++ 22 files changed, 106 insertions(+), 33 deletions(-)

1 0

python-tripleoclient 14.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are excited to announce the release of: python-tripleoclient 14.3.0: TripleO client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 14.2.3..14.3.0 ---------------------------------------------- 90c0b8eb UC/Standalone - Set ip_version in DeployedServerPortMap e1e54d2b Use netaddr when comparing local_ip for changes 8eae9267 Exposes the community validation init command af2e96ea Fix the validations_log_basedir overriding 8f83346d Overriding the log path argument for tripleoclient cli f3177274 Use Validations libs Client for main validation entry point 09962681 Don't assume json network config in validations 0f1c96f1 make net_config_override of undercloud.conf work with yaml d5264c68 Allow to pass arbitrary parameters to TCIB image config 3d6882db [stable/victoria] Add support for the validations skip list feature b2c40c3e Use real tmpdir for ansible runner tests 6cedfc26 Remove ipxe_enabled ppc64le validation c93a29e4 Update deployment status after upgrade converge a11d2b31 Return "overcloud status" output without debug 9a586eb2 [Stable-Only]Reversing the legacy directory conditional 456dc483 Remove name parameter from cell export Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- setup.cfg | 1 + test-requirements.txt | 1 + tripleoclient/config/standalone.py | 2 +- tripleoclient/constants.py | 10 +- tripleoclient/v1/overcloud_cell.py | 13 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_upgrade.py | 7 + tripleoclient/v1/tripleo_deploy.py | 9 +- tripleoclient/v1/tripleo_validator.py | 526 +++------------------ tripleoclient/v1/undercloud_config.py | 6 +- tripleoclient/v1/undercloud_preflight.py | 18 +- tripleoclient/v2/tripleo_container_image.py | 21 + 16 files changed, 180 insertions(+), 532 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8360fed..cac3524d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 74bc779b..a5b16e05 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.5.0 # Apache-2.0

1 0

os-net-config 13.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are psyched to announce the release of: os-net-config 13.3.0: OpenStack network configuration This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.2.1..13.3.0 --------------------------------------- 61294bc Fix failure in dpdk driver binding with VF during reboot e542420 Revert "Updating sriov_config.service to run before driverctl.slice and network-pre" 10e3922 For linux bond over VFs, disable spoofcheck by default 6694552 Adding steering_mode config to sriov_pf object 3ce1bf1 The default max/min tx rates shall not halt deployment eb08e87 Add ifcfg-* scripts on boot for Mellanox NIC interface ac934b3 Fix upper constraints 3c4c81c Update sriov config service to handle nic partitioned PF 2bf7534 sriov_config: light refactoring 9780dfa Updating sriov_config.service to run before driverctl.slice and network-pre 3298a48 Allow linux tap to use routes 5e0cb3e allow vhost0 to pass list of members Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + etc/os-net-config/samples/sriov_pf.json | 4 +- etc/os-net-config/samples/sriov_pf.yaml | 6 +- etc/os-net-config/samples/sriov_pf_switchdev.json | 3 +- etc/os-net-config/samples/sriov_pf_switchdev.yaml | 3 + os_net_config/common.py | 95 ++++++ os_net_config/impl_ifcfg.py | 37 ++- os_net_config/objects.py | 34 ++- os_net_config/schema.yaml | 8 +- os_net_config/sriov_config.py | 347 +++++++++++++--------- os_net_config/utils.py | 118 ++++---- tox.ini | 2 +- 16 files changed, 937 insertions(+), 312 deletions(-)

1 0

puppet-tripleo 13.7.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are thrilled to announce the release of: puppet-tripleo 13.7.0: Puppet module for OpenStack TripleO This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 13.6.4..13.7.0 ---------------------------------------- 480250ba Bump metadata to 13.7.0 for stable/victoria tripleo release b6606b8f Enable ovn controller to be updated before ovn-northd. 682f6767 Format [oslo_cache] memcache_server when IPv6 is used 90f85445 Format [keystone_authtoken] memcache_servers when IPv6 is used 8e89587c Add powermax support b4fe6213 Increase connection timeouts for Redis e8b4fba9 haproxy: Enable httplog for all http endpoints 8c9cb087 haproxy: Use httpchk instead of tcpchk for heat endpoints 39327caa Revert Horizon's Memecached config to use IP addresses 55331858 Octavia: configure services endpoints 74fe2876 Support configuring extra cinder RBD options 02f31798 Horizon: Enable manila-dashboard configurations d30b18cd Horizon: Enable octavia-dashboard configurations e61d0d1b Horizon: Enable heat-dashboard configurations f472e5f7 Make sure resource_op_defaults are set before bundles 3cd0cace Fix typo in SSL file resource b5b19bc5 Extend fencing to hosts using fence_kubevirt agent. 76ecde4c Fix rabbitmq certificate reload after it is resubmitted 3529a584 Pin puppet-redis to 8.0.0 8e60fc70 Revert "Deprecate warnings for Ceilometer and Gnocchi" 74b5ba27 Set memcached server list from memcached_node_names Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- files/certmonger-rabbitmq-refresh.sh | 7 +-- manifests/fencing.pp | 7 ++- manifests/haproxy.pp | 52 +++++++++------- manifests/profile/base/aodh/authtoken.pp | 30 +++++++--- manifests/profile/base/barbican/authtoken.pp | 32 +++++++--- manifests/profile/base/ceilometer.pp | 2 - manifests/profile/base/cinder/authtoken.pp | 30 +++++++--- manifests/profile/base/cinder/volume/rbd.pp | 8 +++ manifests/profile/base/designate/authtoken.pp | 30 +++++++--- manifests/profile/base/glance/authtoken.pp | 30 +++++++--- manifests/profile/base/gnocchi.pp | 1 - manifests/profile/base/gnocchi/authtoken.pp | 30 +++++++--- manifests/profile/base/heat.pp | 43 ++++++++++--- manifests/profile/base/heat/authtoken.pp | 30 +++++++--- manifests/profile/base/horizon.pp | 34 +++++++++-- manifests/profile/base/ironic/authtoken.pp | 30 +++++++--- .../profile/base/ironic_inspector/authtoken.pp | 30 +++++++--- manifests/profile/base/keystone.pp | 54 ++++++++++++----- manifests/profile/base/manila/api.pp | 8 ++- manifests/profile/base/manila/authtoken.pp | 30 +++++++--- manifests/profile/base/manila/share.pp | 25 ++++++++ manifests/profile/base/metrics/qdr.pp | 2 +- manifests/profile/base/mistral/authtoken.pp | 30 +++++++--- manifests/profile/base/neutron/agents/ovn.pp | 5 +- manifests/profile/base/neutron/authtoken.pp | 30 +++++++--- manifests/profile/base/nova.pp | 50 ++++++++++++---- manifests/profile/base/nova/authtoken.pp | 30 +++++++--- manifests/profile/base/novajoin/authtoken.pp | 30 +++++++--- manifests/profile/base/octavia/authtoken.pp | 30 +++++++--- manifests/profile/base/octavia/health_manager.pp | 2 + manifests/profile/base/octavia/housekeeping.pp | 3 + manifests/profile/base/octavia/worker.pp | 2 + manifests/profile/base/pacemaker.pp | 5 ++ manifests/profile/base/placement/authtoken.pp | 30 +++++++--- manifests/profile/base/swift.pp | 4 +- manifests/profile/base/swift/proxy.pp | 4 +- manifests/profile/base/zaqar/authtoken.pp | 30 +++++++--- metadata.json | 2 +- .../cinder-rbd-extra-options-c13a1e84b6452fac.yaml | 6 ++ .../tripleo_profile_base_aodh_authtoken_spec.rb | 28 +++++++-- ...tripleo_profile_base_barbican_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_cinder_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_cinder_volume_rbd_spec.rb | 5 ++ ...ripleo_profile_base_designate_authtoken_spec.rb | 30 +++++++--- .../tripleo_profile_base_glance_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_gnocchi_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_heat_authtoken_spec.rb | 28 +++++++-- spec/classes/tripleo_profile_base_heat_spec.rb | 62 ++++++++++++++++++- spec/classes/tripleo_profile_base_horizon_spec.rb | 63 +++++++++++++++++++ .../tripleo_profile_base_ironic_authtoken_spec.rb | 28 +++++++-- ...profile_base_ironic_inspector_authtoken_spec.rb | 28 +++++++-- spec/classes/tripleo_profile_base_keystone_spec.rb | 58 +++++++++++++++++- .../tripleo_profile_base_manila_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_metrics_qdr_spec.rb | 4 +- .../tripleo_profile_base_mistral_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_neutron_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_nova_authtoken_spec.rb | 30 +++++++--- spec/classes/tripleo_profile_base_nova_spec.rb | 57 +++++++++++++++++- ...tripleo_profile_base_novajoin_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_octavia_authtoken_spec.rb | 30 +++++++--- ...ripleo_profile_base_placement_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_zaqar_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_zaqar_authtoken_spec.rb | 70 ---------------------- spec/fixtures/hieradata/default.yaml | 6 +- 65 files changed, 1262 insertions(+), 386 deletions(-)

1 0

horizon 18.6.4 (victoria)
by no-reply＠openstack.org 19 Apr '22

19 Apr '22

We enthusiastically announce the release of: horizon 18.6.4: OpenStack Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 18.6.4 ^^^^^^ Bug Fixes * Previously, ToggleSuspend class checked os-rescue policy for resume operation. By this fix, the class checks 'os_compute_api:os- suspend- server:resume' policy to align to resume operation. Changes in horizon 18.6.3..18.6.4 --------------------------------- 2739d9a56 Imported Translations from Zanata 3e964000a Change to a proper policy for Resume operation 41cb81186 Fix for "Resize instance" button e26ad9b23 Fix Project Limits for resize instance dialog 2e8e0abfa Non-api filters not working with admin instance tab Diffstat (except docs and test files) ------------------------------------- openstack_auth/locale/pt_BR/LC_MESSAGES/django.po | 43 ++++++++++++- .../dashboards/admin/instances/views.py | 28 ++++++-- .../dashboards/project/instances/tables.py | 10 +-- .../templates/instances/_flavors_and_quotas.html | 40 ++++++------ .../dashboards/project/instances/utils.py | 43 +++++++++++++ .../dashboards/project/instances/views.py | 17 ++--- .../project/instances/workflows/resize_instance.py | 5 +- ...652_fix_policy_for_resume-a719efb23054c708.yaml | 6 ++ 10 files changed, 263 insertions(+), 56 deletions(-)

1 0

python-manilaclient 2.3.2 (victoria)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We are psyched to announce the release of: python-manilaclient 2.3.2: Client library for OpenStack Manila API. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.3.2 ^^^^^ Bug Fixes * Launchpad bug 1960422 (https://bugs.launchpad.net/python- manilaclient/+bug/1960422) has been fixed by prevent sending the share creation request and provide early feedback to CLI users. Changes in python-manilaclient 2.3.1..2.3.2 ------------------------------------------- eee6ca9 Add CLI error notification in case there is no share type Diffstat (except docs and test files) ------------------------------------- manilaclient/osc/v2/share.py | 10 ++++++- manilaclient/v2/shell.py | 9 ++++++ ...fix-no-default-share-type-d6191ea0aa1e57fa.yaml | 6 ++++ 5 files changed, 70 insertions(+), 9 deletions(-)

1 0

python-manilaclient 2.6.3 (wallaby)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We are excited to announce the release of: python-manilaclient 2.6.3: Client library for OpenStack Manila API. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.6.3 ^^^^^ Bug Fixes * Launchpad bug 1960422 (https://bugs.launchpad.net/python- manilaclient/+bug/1960422) has been fixed by prevent sending the share creation request and provide early feedback to CLI users. Changes in python-manilaclient 2.6.2..2.6.3 ------------------------------------------- ea39ef8 Add CLI error notification in case there is no share type d6e301f Fix tox to ignore_basepython_conflict Diffstat (except docs and test files) ------------------------------------- manilaclient/osc/v2/share.py | 10 +++++- manilaclient/v2/shell.py | 8 +++++ ...fix-no-default-share-type-d6191ea0aa1e57fa.yaml | 6 ++++ tox.ini | 9 +++-- 6 files changed, 83 insertions(+), 16 deletions(-)

1 0

manila 13.0.3 (xena)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We high-spiritedly announce the release of: manila 13.0.3: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.3 ^^^^^^ Bug Fixes * Fixed an issue with ONTAP AFF platforms while creating shares that forced volumes to have efficient data saving even when the contrary was specified. For more details, please refer to launchpad bug #1929421 (https://bugs.launchpad.net/manila/+bug/1929421) Changes in manila 13.0.2..13.0.3 -------------------------------- b6c2bb36 Mock tenacity in gluster driver unit tests eb813e08 [NetApp] Fix default thin_provisioned volumes on AFF 4cf55197 [doc] Fix config and install guide for the generic driver Diffstat (except docs and test files) ------------------------------------- .../common/dhss-true-mode-configuration.rst | 17 +- .../netapp/dataontap/client/client_cmode.py | 3 +- .../netapp/dataontap/client/test_client_cmode.py | 27 ++- ...ion-volume-create-for-AFF-c22c72ce4c3fac16.yaml | 7 + 6 files changed, 237 insertions(+), 24 deletions(-)

1 0

python-manilaclient 3.0.2 (xena)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We are excited to announce the release of: python-manilaclient 3.0.2: Client library for OpenStack Manila API. This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 3.0.2 ^^^^^ Bug Fixes * Launchpad bug 1960422 (https://bugs.launchpad.net/python- manilaclient/+bug/1960422) has been fixed by prevent sending the share creation request and provide early feedback to CLI users. Changes in python-manilaclient 3.0.1..3.0.2 ------------------------------------------- 05982ce Add CLI error notification in case there is no share type dda495f Fix tox to ignore_basepython_conflict Diffstat (except docs and test files) ------------------------------------- manilaclient/osc/v2/share.py | 10 +++++- manilaclient/v2/shell.py | 8 +++++ ...fix-no-default-share-type-d6191ea0aa1e57fa.yaml | 6 ++++ tox.ini | 9 +++-- 6 files changed, 83 insertions(+), 16 deletions(-)

1 0

manila 11.1.2 (victoria)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We are excited to announce the release of: manila 11.1.2: Shared Storage for OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 11.1.2 ^^^^^^ Bug Fixes * Fixed an issue with ONTAP AFF platforms while creating shares that forced volumes to have efficient data saving even when the contrary was specified. For more details, please refer to launchpad bug #1929421 (https://bugs.launchpad.net/manila/+bug/1929421) * When "cephfs_ganesha_server_ip" is not set, the current hostname is used as a default for such config option. The driver was treating this value as an IP address and trying to perform validations on it. The CEPH NFS driver will no longer treat hostnames as ip addresses and try to validate them as such. Changes in manila 11.1.1..11.1.2 -------------------------------- a695aac6 [NetApp] Fix default thin_provisioned volumes on AFF e487b7bd Adapt CephFS driver to do not try to escape export ip Diffstat (except docs and test files) ------------------------------------- manila/share/drivers/cephfs/driver.py | 10 ++++++++- .../netapp/dataontap/client/client_cmode.py | 3 +-- .../netapp/dataontap/client/test_client_cmode.py | 25 ++++++++++++++++++++++ ...ion-volume-create-for-AFF-c22c72ce4c3fac16.yaml | 7 ++++++ ...t-ip-escaping-on-hostname-e2866be32a8f5e38.yaml | 8 +++++++ 5 files changed, 50 insertions(+), 3 deletions(-)

1 0

manila 12.1.2 (wallaby)
by no-reply＠openstack.org 18 Apr '22

18 Apr '22

We are jazzed to announce the release of: manila 12.1.2: Shared Storage for OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 12.1.2 ^^^^^^ Bug Fixes * Fixed an issue with ONTAP AFF platforms while creating shares that forced volumes to have efficient data saving even when the contrary was specified. For more details, please refer to launchpad bug #1929421 (https://bugs.launchpad.net/manila/+bug/1929421) Changes in manila 12.1.1..12.1.2 -------------------------------- 596f0190 [NetApp] Fix default thin_provisioned volumes on AFF afe3fd30 Use tox 3.1.1 fixes Diffstat (except docs and test files) ------------------------------------- .../netapp/dataontap/client/client_cmode.py | 3 +-- .../netapp/dataontap/client/test_client_cmode.py | 25 ++++++++++++++++++++++ ...ion-volume-create-for-AFF-c22c72ce4c3fac16.yaml | 7 ++++++ tox.ini | 12 +++++++---- 4 files changed, 41 insertions(+), 6 deletions(-)

1 0

manila-tempest-plugin 1.8.0 (zed)
by no-reply＠openstack.org 14 Apr '22

14 Apr '22

We are happy to announce the release of: manila-tempest-plugin 1.8.0: Tempest plugin manila-tempest-plugin This release is part of the zed release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 1.7.0..1.8.0 --------------------------------------------- ee15891 Fix share instance show related tests.. 35b2bf1 Fix NoSuchOptError wrt CONF.validation.ssh_key_type Diffstat (except docs and test files) ------------------------------------- 3 files changed, 9 insertions(+), 2 deletions(-)

1 0

kayobe 12.0.0.0rc1 (yoga)
by no-reply＠openstack.org 14 Apr '22

14 Apr '22

Hello everyone, A new release candidate for kayobe for the end of the Yoga cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Yoga release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/yoga release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/yoga Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *yoga-rc-potential* to bring it to the kayobe release crew's attention.

1 0

validations-libs 1.7.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are pleased to announce the release of: validations-libs 1.7.0: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.6.0..1.7.0 ---------------------------------------- 68cf100 Removing leftover coverchange reference 3344af0 Setting default branch of devstack repositories for functional tests 87cafc6 Checking inventory file presence and format 55cb4f7 Removing coverchange job 9163d8b Moving callbacks to validations-libs 540ef6f Centos 9 jobs for validations libs 9ca2ffe Update master for stable/1.6 b24d4ce Validation actions refactor 1c89a4d Fix community init to respect cfg paths d4f93d4 Migrate jobs from CentOS 8 to CentOS 8 Stream Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 31 +- playbooks/coverchange.yaml | 100 --- playbooks/reqcheck.yaml | 3 +- releasenotes/source/1.6.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 1 + test-requirements.txt | 1 + tools/http_server.py | 54 ++ validations_libs/ansible.py | 7 +- validations_libs/callback_plugins/__init__.py | 13 + .../callback_plugins/vf_fail_if_no_hosts.py | 29 + validations_libs/callback_plugins/vf_http_json.py | 94 +++ .../callback_plugins/vf_validation_json.py | 238 +++++++ .../callback_plugins/vf_validation_output.py | 203 ++++++ .../callback_plugins/vf_validation_stdout.py | 99 +++ validations_libs/cli/common.py | 7 + validations_libs/cli/community.py | 19 +- validations_libs/cli/history.py | 3 +- validations_libs/cli/run.py | 12 +- validations_libs/cli/show.py | 2 +- validations_libs/community/init_validation.py | 19 +- validations_libs/group.py | 6 +- .../callback_plugins/test_vf_fail_if_no_hosts.py | 92 +++ .../callback_plugins/test_vf_validation_json.py | 537 +++++++++++++++ .../callback_plugins/test_vf_validation_output.py | 741 +++++++++++++++++++++ .../callback_plugins/test_vf_validation_stdout.py | 198 ++++++ validations_libs/utils.py | 30 - validations_libs/validation_actions.py | 308 +++++---- 40 files changed, 2821 insertions(+), 398 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 72a3433..e227531 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16 @@ testtools>=2.2.0 # MIT +oslotest>=3.2.0 # Apache-2.0

1 0

puppet-tripleo 16.1.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are stoked to announce the release of: puppet-tripleo 16.1.0: Puppet module for OpenStack TripleO The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 16.1.0 ^^^^^^ New Features ************ * A new "tripleo::profile::base::cinder::volume::rbd::extra_options" parameter adds the ability to configure additional options for use with cinder RBD backends. * Added support for host personality, iSCSI CIDR and eradicate on delete parameters for Pure Storage FlashArray Cinder backend. Upgrade Notes ************* * The unused "stack_action" hiera parameter has now been removed. Changes in puppet-tripleo 16.0.0..16.1.0 ---------------------------------------- e9e044d4 Bump metadata 16.1.0 to make master release 11e32903 setuptools: Disable auto discovery 6ae0ee75 Remove stack_action parameter c127941d Format [oslo_cache] memcache_server when IPv6 is used 1e63b4c5 Format [keystone_authtoken] memcache_servers when IPv6 is used 603fb44a Clean up code for novajoin bb298e6f Inject facts provided by Puppet OpenStack modules 3db4e972 Hardcode memcached::max_memory in unit tests 42a8771f Remove unused parameters 32d053bf Remove unused hieradata items d0ea37b8 Fix unnecessary class inclusion and type in unit tests efe87ad1 Add support for CentOS 9 Stream and RHEL 9 dccfa940 Remove manifests for networking-bigswitch c25d96a5 Remove puppet-redis from additional dependencies c9ba6a26 Bump haproxy check timeout a68d37f8 Swift: Fix the class to enable the audit middleware a4b168b0 Octavia: Ensure [service_auth] password is set 052b0e67 Move zuul jobs layout to centos9 only for master branch 79dd89c7 Revert "Pin puppet-snmp" aee66b92 Remove unused puppet-keepalived d0cc2685 Revert "Pin puppet-systemd" 0ba4a7bc Designate: Manage [network_api:neutron] parameters 70eb69d4 logrotate: Remove redundant blank lines dcda4ee5 Cinder: Manage quota options eac5caa9 Fix lint failures 209e954c Increase connection timeouts for Redis 1916e802 Add flag for rabbitmq fips_mode, defaulting to false 4f938344 Heat: include an independent class to set up [trustee] 71e83c80 Nova: Configure [keystone] parameters 8fe2e2c9 Cinder: Clean up deprecated Dell EMC volume drivers bcb55d62 Horizon: Manage policy files be5ca93a ironic-inspector: Allow arbitrary configurations 94ee6744 ironic-inspector: Include independent classes for ironic/swift options 6cc58e8a Enable policy rule management in nova-compute 87fdaf81 Swift: Define password in unit test hieradata 68e64d3e Remove Mistral/Zaqar hieradata a4fa4fbb Enforce stonith for ComputeInstanceHA nodes 67ce8f75 Designate: Manage [producer_task:*] parameters 89ded136 Add unit tests for Octavia manifests 39aad095 Make reply_ and _fanout queues non HA f6815f34 Support configuring extra cinder RBD options 23a9600a Octavia: configure services endpoints d674f63e Run designate-api under apache 69aa1e27 Add powermax support eb77e9a0 Remove unused tripleo::profile::base::validations 839b4815 MySQL: Remove ineffective systemd drop-in 242044d8 Redis: Remove leftover of Sentinel support 751c6f01 Remove leftover of keepalived support ee567f02 Remove ineffective unit test code bb895154 [Pure Storage] Add new params for FlashArray Cinder driver 5e687093 Remove the unused parameter ecd7f491 Add option to configure snmpd auth type e4e9be76 Make sure resource_op_defaults are set before bundles a9e0ec90 Make sure that rabbitmq_cacert has 'undef' as a default. 9b4212e2 Remove stack_update check in rabbit manifest a30b9f93 drop resource_restart_flag 5b5ee3fd Drop non-bundle manila Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 17 +-- manifests/fencing.pp | 15 +++ manifests/haproxy.pp | 18 +-- manifests/pacemaker/resource_restart_flag.pp | 46 -------- manifests/profile/base/aodh/authtoken.pp | 13 ++- manifests/profile/base/barbican/authtoken.pp | 13 ++- manifests/profile/base/cinder.pp | 1 + manifests/profile/base/cinder/api.pp | 15 +-- manifests/profile/base/cinder/authtoken.pp | 13 ++- manifests/profile/base/cinder/volume.pp | 41 ------- .../base/cinder/volume/dellemc_vmax_iscsi.pp | 45 ------- .../profile/base/cinder/volume/dellemc_vxflexos.pp | 57 --------- manifests/profile/base/cinder/volume/pure.pp | 20 ++-- manifests/profile/base/cinder/volume/rbd.pp | 17 ++- manifests/profile/base/cinder/volume/scaleio.pp | 60 ---------- manifests/profile/base/database/mysql.pp | 15 --- manifests/profile/base/designate/api.pp | 70 +++++++++-- manifests/profile/base/designate/authtoken.pp | 13 ++- manifests/profile/base/designate/backend.pp | 2 +- manifests/profile/base/designate/central.pp | 1 + manifests/profile/base/designate/producer.pp | 5 + manifests/profile/base/glance/authtoken.pp | 13 ++- manifests/profile/base/gnocchi/authtoken.pp | 13 ++- manifests/profile/base/heat.pp | 29 ++++- manifests/profile/base/heat/authtoken.pp | 13 ++- manifests/profile/base/horizon.pp | 1 + manifests/profile/base/ironic/authtoken.pp | 13 ++- manifests/profile/base/ironic_inspector.pp | 4 +- .../profile/base/ironic_inspector/authtoken.pp | 13 ++- manifests/profile/base/keepalived.pp | 81 ------------- manifests/profile/base/keystone.pp | 51 ++++---- manifests/profile/base/manila/api.pp | 11 +- manifests/profile/base/manila/authtoken.pp | 13 ++- manifests/profile/base/manila/share.pp | 24 ++++ manifests/profile/base/neutron/agents/bigswitch.pp | 31 ----- manifests/profile/base/neutron/authtoken.pp | 13 ++- manifests/profile/base/neutron/plugins/ml2.pp | 4 - manifests/profile/base/nova.pp | 35 ++++-- manifests/profile/base/nova/api.pp | 1 + manifests/profile/base/nova/authtoken.pp | 13 ++- manifests/profile/base/nova/compute.pp | 5 + manifests/profile/base/novajoin.pp | 86 -------------- manifests/profile/base/novajoin/authtoken.pp | 79 ------------- manifests/profile/base/octavia/authtoken.pp | 13 ++- manifests/profile/base/octavia/health_manager.pp | 3 + manifests/profile/base/octavia/housekeeping.pp | 4 + manifests/profile/base/octavia/worker.pp | 3 + manifests/profile/base/pacemaker.pp | 5 + manifests/profile/base/placement/authtoken.pp | 13 ++- manifests/profile/base/rabbitmq.pp | 33 +++--- manifests/profile/base/snmp.pp | 17 ++- manifests/profile/base/swift/proxy.pp | 2 +- manifests/profile/base/validations.pp | 29 ----- .../profile/pacemaker/database/mysql_bundle.pp | 2 + manifests/profile/pacemaker/manila.pp | 87 -------------- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 3 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 3 +- manifests/redis_notification.pp | 38 ------ metadata.json | 6 +- .../cinder-rbd-extra-options-c13a1e84b6452fac.yaml | 6 + ...rage_update_cinder_params-94940d1d3ca46877.yaml | 6 + .../remove-stack-action-4f0eaef2405d39da.yaml | 4 + setup.py | 1 + spec/classes/tripleo_config_spec.rb | 2 +- spec/classes/tripleo_firewall_spec.rb | 2 +- spec/classes/tripleo_haproxy_spec.rb | 6 +- spec/classes/tripleo_haproxy_stats_spec.rb | 2 +- spec/classes/tripleo_masquerade_networks_spec.rb | 2 +- spec/classes/tripleo_packages_spec.rb | 2 +- spec/classes/tripleo_profile_base_aodh_api_spec.rb | 2 +- .../tripleo_profile_base_aodh_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_aodh_evaluator_spec.rb | 2 +- .../tripleo_profile_base_aodh_listener_spec.rb | 2 +- .../tripleo_profile_base_aodh_notifier_spec.rb | 2 +- spec/classes/tripleo_profile_base_aodh_spec.rb | 2 +- spec/classes/tripleo_profile_base_apache_spec.rb | 2 +- .../tripleo_profile_base_barbican_api_spec.rb | 2 +- ...tripleo_profile_base_barbican_authtoken_spec.rb | 26 ++++- spec/classes/tripleo_profile_base_barbican_spec.rb | 2 +- ...file_base_ceilometer_agent_notification_spec.rb | 2 +- ...o_profile_base_ceilometer_agent_polling_spec.rb | 2 +- .../tripleo_profile_base_ceilometer_spec.rb | 2 +- .../tripleo_profile_base_cinder_api_spec.rb | 2 +- .../tripleo_profile_base_cinder_authtoken_spec.rb | 26 ++++- ...tripleo_profile_base_cinder_backup_ceph_spec.rb | 2 +- .../tripleo_profile_base_cinder_backup_gcs_spec.rb | 2 +- .../tripleo_profile_base_cinder_backup_nfs_spec.rb | 2 +- .../tripleo_profile_base_cinder_backup_s3_spec.rb | 2 +- .../tripleo_profile_base_cinder_backup_spec.rb | 2 +- ...ripleo_profile_base_cinder_backup_swift_spec.rb | 2 +- .../tripleo_profile_base_cinder_powerflex_spec.rb | 2 +- .../tripleo_profile_base_cinder_powermax_spec.rb | 2 +- .../tripleo_profile_base_cinder_powerstore_spec.rb | 2 +- .../classes/tripleo_profile_base_cinder_sc_spec.rb | 2 +- .../tripleo_profile_base_cinder_scaleio_spec.rb | 58 --------- .../tripleo_profile_base_cinder_scheduler_spec.rb | 2 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 8 +- .../tripleo_profile_base_cinder_unity_spec.rb | 2 +- .../tripleo_profile_base_cinder_vmax_spec.rb | 57 --------- .../tripleo_profile_base_cinder_vnx_spec.rb | 2 +- ...ipleo_profile_base_cinder_volume_dellsc_spec.rb | 2 +- ...ripleo_profile_base_cinder_volume_iscsi_spec.rb | 2 +- ...ipleo_profile_base_cinder_volume_netapp_spec.rb | 2 +- .../tripleo_profile_base_cinder_volume_nfs_spec.rb | 2 +- ...ipleo_profile_base_cinder_volume_nvmeof_spec.rb | 2 +- ...tripleo_profile_base_cinder_volume_pure_spec.rb | 2 +- .../tripleo_profile_base_cinder_volume_rbd_spec.rb | 13 ++- .../tripleo_profile_base_cinder_volume_spec.rb | 27 +---- .../tripleo_profile_base_cinder_vxflexos_spec.rb | 58 --------- .../tripleo_profile_base_cinder_xtremio_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 2 +- .../tripleo_profile_base_database_mysql_spec.rb | 38 +----- .../tripleo_profile_base_database_redis_spec.rb | 2 +- .../tripleo_profile_base_designate_api_spec.rb | 11 +- ...ripleo_profile_base_designate_authtoken_spec.rb | 28 ++++- .../tripleo_profile_base_designate_backend_spec.rb | 2 +- .../tripleo_profile_base_designate_central_spec.rb | 12 +- .../tripleo_profile_base_designate_mdns_spec.rb | 2 +- ...tripleo_profile_base_designate_producer_spec.rb | 17 ++- .../tripleo_profile_base_designate_sink_spec.rb | 2 +- .../classes/tripleo_profile_base_designate_spec.rb | 2 +- .../tripleo_profile_base_designate_worker_spec.rb | 2 +- spec/classes/tripleo_profile_base_etcd_spec.rb | 2 +- .../tripleo_profile_base_glance_api_spec.rb | 2 +- .../tripleo_profile_base_glance_authtoken_spec.rb | 26 ++++- ...pleo_profile_base_glance_backend_cinder_spec.rb | 2 +- ...ripleo_profile_base_glance_backend_file_spec.rb | 2 +- ...tripleo_profile_base_glance_backend_rbd_spec.rb | 2 +- ...ipleo_profile_base_glance_backend_swift_spec.rb | 2 +- .../tripleo_profile_base_gnocchi_api_spec.rb | 2 +- .../tripleo_profile_base_gnocchi_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_gnocchi_metricd_spec.rb | 2 +- spec/classes/tripleo_profile_base_gnocchi_spec.rb | 2 +- .../tripleo_profile_base_gnocchi_statsd_spec.rb | 2 +- .../tripleo_profile_base_heat_api_cfn_spec.rb | 2 +- spec/classes/tripleo_profile_base_heat_api_spec.rb | 2 +- .../tripleo_profile_base_heat_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_heat_engine_spec.rb | 2 +- spec/classes/tripleo_profile_base_heat_spec.rb | 63 +++++++++- spec/classes/tripleo_profile_base_horizon_spec.rb | 17 +-- .../tripleo_profile_base_ironic_api_spec.rb | 2 +- .../tripleo_profile_base_ironic_authtoken_spec.rb | 26 ++++- ...profile_base_ironic_inspector_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_ironic_inspector_spec.rb | 18 ++- spec/classes/tripleo_profile_base_ironic_spec.rb | 2 +- spec/classes/tripleo_profile_base_iscsid_spec.rb | 2 +- spec/classes/tripleo_profile_base_keystone_spec.rb | 58 ++++++++- spec/classes/tripleo_profile_base_lvm_spec.rb | 2 +- .../tripleo_profile_base_manila_api_spec.rb | 2 +- .../tripleo_profile_base_manila_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_manila_scheduler_spec.rb | 2 +- .../tripleo_profile_base_manila_share_spec.rb | 10 +- spec/classes/tripleo_profile_base_manila_spec.rb | 2 +- .../classes/tripleo_profile_base_memcached_spec.rb | 2 +- .../tripleo_profile_base_metrics_qdr_spec.rb | 2 +- ...o_profile_base_neutron_agents_bigswitch_spec.rb | 48 -------- .../tripleo_profile_base_neutron_authtoken_spec.rb | 26 ++++- .../tripleo_profile_base_neutron_dhcp_spec.rb | 2 +- .../tripleo_profile_base_neutron_l3_spec.rb | 2 +- .../tripleo_profile_base_neutron_ml2_vts_spec.rb | 2 +- .../tripleo_profile_base_neutron_ovs_spec.rb | 2 +- .../tripleo_profile_base_neutron_server_spec.rb | 2 +- spec/classes/tripleo_profile_base_neutron_spec.rb | 2 +- spec/classes/tripleo_profile_base_nova_api_spec.rb | 6 +- .../tripleo_profile_base_nova_authtoken_spec.rb | 28 ++++- ...ripleo_profile_base_nova_compute_ironic_spec.rb | 2 +- ...ipleo_profile_base_nova_compute_libvirt_spec.rb | 2 +- .../tripleo_profile_base_nova_compute_spec.rb | 6 +- .../tripleo_profile_base_nova_conductor_spec.rb | 2 +- .../tripleo_profile_base_nova_libvirt_spec.rb | 2 +- .../tripleo_profile_base_nova_metadata_spec.rb | 2 +- ...pleo_profile_base_nova_migration_client_spec.rb | 2 +- ...ipleo_profile_base_nova_migration_proxy_spec.rb | 2 +- ...pleo_profile_base_nova_migration_target_spec.rb | 2 +- .../tripleo_profile_base_nova_scheduler_spec.rb | 2 +- spec/classes/tripleo_profile_base_nova_spec.rb | 57 ++++++++- .../tripleo_profile_base_nova_vncproxy_spec.rb | 2 +- ...tripleo_profile_base_novajoin_authtoken_spec.rb | 70 ----------- spec/classes/tripleo_profile_base_novajoin_spec.rb | 130 --------------------- .../tripleo_profile_base_octavia_api_spec.rb | 124 +++++++++++--------- .../tripleo_profile_base_octavia_authtoken_spec.rb | 28 ++++- ...leo_profile_base_octavia_health_manager_spec.rb | 83 +++++++++++++ ...ipleo_profile_base_octavia_housekeeping_spec.rb | 83 +++++++++++++ ...ipleo_profile_base_octavia_provider_ovn_spec.rb | 2 +- spec/classes/tripleo_profile_base_octavia_spec.rb | 2 +- .../tripleo_profile_base_octavia_worker_spec.rb | 83 +++++++++++++ .../classes/tripleo_profile_base_pacemaker_spec.rb | 2 +- .../tripleo_profile_base_placement_api_spec.rb | 2 +- ...ripleo_profile_base_placement_authtoken_spec.rb | 26 ++++- .../classes/tripleo_profile_base_placement_spec.rb | 2 +- spec/classes/tripleo_profile_base_qdr_spec.rb | 2 +- spec/classes/tripleo_profile_base_snmp_spec.rb | 36 +++++- .../tripleo_profile_base_swift_proxy_spec.rb | 53 ++++++++- .../tripleo_profile_base_swift_ringbuilder_spec.rb | 2 +- spec/classes/tripleo_profile_base_swift_spec.rb | 2 +- ..._profile_pacemaker_cinder_backup_bundle_spec.rb | 2 +- ..._profile_pacemaker_cinder_volume_bundle_spec.rb | 2 +- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 2 +- .../defines/tripleo_firewall_service_rules_spec.rb | 2 +- spec/defines/tripleo_haproxy_endpoint_spec.rb | 2 +- .../tripleo_haproxy_service_endpoints_spec.rb | 2 +- spec/defines/tripleo_haproxy_userlist_spec.rb | 2 +- ...ripleo_profile_base_database_mysql_user_spec.rb | 2 +- ...profile_base_logging_rsyslog_file_input_spec.rb | 2 +- ...ase_metrics_collectd_sensubility_script_spec.rb | 2 +- ...le_base_neutron_wrappers_dibbler_client_spec.rb | 2 +- ...o_profile_base_neutron_wrappers_dnsmasq_spec.rb | 2 +- ...o_profile_base_neutron_wrappers_haproxy_spec.rb | 2 +- ...rofile_base_neutron_wrappers_keepalived_spec.rb | 2 +- ...eutron_wrappers_keepalived_state_change_spec.rb | 2 +- ...leo_profile_base_neutron_wrappers_radvd_spec.rb | 2 +- spec/fixtures/hieradata/default.yaml | 29 ++--- spec/fixtures/hieradata/step4.yaml | 3 - templates/logrotate/containers_logrotate.conf.erb | 28 ++--- templates/redis/redis-notifications.sh.erb | 30 ----- zuul.d/layout.yaml | 6 +- 216 files changed, 1542 insertions(+), 1707 deletions(-)

1 0

validations-common 1.7.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We contentedly announce the release of: validations-common 1.7.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.6.0..1.7.0 ------------------------------------------ c6003f2 Removing coverchange job 200e821 Centos 9 jobs for validations common 602c7d9 removing callbacks from validations-common a4eeda4 Update master for stable/1.6 d7821d1 Modifying catalogue execution test to resolve component pipeline issue 9b2bddb New validation for checking presence of running rsyslog service. f819685 Migrate jobs from CentOS 8 to CentOS 8 Stream Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 +- playbooks/coverchange.yaml | 100 --- playbooks/reqcheck.yaml | 3 +- releasenotes/source/1.6.rst | 6 + releasenotes/source/index.rst | 1 + roles/validations/defaults/main.yaml | 1 + roles/validations/files/catalog_vars_override.yaml | 11 + .../validations/tasks/execute_full_catalogue.yaml | 1 + roles/validations/tasks/main.yaml | 9 + roles/validations/vars/main.yaml | 5 +- setup.cfg | 1 - tools/http_server.py | 54 -- validations_common/callback_plugins/__init__.py | 13 - .../callback_plugins/fail_if_no_hosts.py | 29 - validations_common/callback_plugins/http_json.py | 94 --- .../callback_plugins/validation_json.py | 238 ------- .../callback_plugins/validation_output.py | 203 ------ .../callback_plugins/validation_stdout.py | 99 --- validations_common/playbooks/check-rsyslog.yaml | 28 + .../roles/check_rsyslog/defaults/main.yaml | 1 + .../check_rsyslog/molecule/default/converge.yml | 54 ++ .../check_rsyslog/molecule/default/molecule.yml | 53 ++ .../roles/check_rsyslog/tasks/main.yaml | 11 + .../roles/check_rsyslog/tasks/systemctl.yaml | 13 + .../roles/check_rsyslog/tasks/yum.yaml | 11 + .../callback_plugins/test_fail_if_no_hosts.py | 93 --- .../callback_plugins/test_validation_output.py | 742 --------------------- .../callback_plugins/test_validation_stdout.py | 199 ------ 31 files changed, 221 insertions(+), 2523 deletions(-)

1 0

python-tripleoclient 18.0.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We exuberantly announce the release of: python-tripleoclient 18.0.0: TripleO client The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 18.0.0 ^^^^^^ New Features ************ * Expose the existing --reproduce-command from *openstack tripleo deploy* CLI in the Undercloud CLI commnads. A new CLI option --reproduce-command is available for the *openstack undercloud install* and *openstack undercloud upgrade* commands, which creates an script, named ansible-playbook-command.sh, in the Undercloud's deployment artifacts directory. This script allows running the Ansible playbooks for deployment or upgrade in the same way the CLI command does. * The Admin Authorize command can now be targeted at specific nodes using '--limit'. It can also take a custom static-inventory using ' --static-inventory'. * A new option --daemons for the "openstack overcloud ceph deploy" command has been added. This option may be used to define additional Ceph daemons that should be deployed at this stage. For instance, a generic Ceph daemons definition can be something like the following: --- ceph_nfs: cephfs_data: 'manila_data' cephfs_metadata: 'manila_metadata' ceph_rgw: {} ceph_ingress: tripleo_cephadm_haproxy_container_image: undercloud.ctlplane.mydomain.tld:8787/ceph/haproxy:2.3 tripleo_cephadm_keepalived_container_image: undercloud.ctlplane.mydomain.tld:8787/ceph/keepalived:2.5.1 For each service added to the data structure above, additional options can be defined and passed as extra_vars to the tripleo- ansible flow. If no option is specified, the default values provided by the cephadm tripleo-ansible role will be used. * Two new commands, "openstack overcloud ceph user enable" and "openstack overcloud ceph user disable" are added. The "enable" option will create the cephadm SSH user and distribute their SSH keys to Ceph nodes in the overcloud. The "disable" option may be run after "openstack overcloud ceph deploy" has been run to disable cephadm so that it may not be used to administer the Ceph cluster and no "ceph orch ..." CLI commands will function. This will also prevent Ceph node overcloud scale operations though the Ceph cluster will still be able to read/write data. The "ceph user disable" option will also remove the public and private SSH keys of the cephadm SSH user on overclouds which host Ceph. The "ceph user enable" option may also be used to re-distribute the public and private SSH keys of the cephadm SSH user and re-enable the cephadm mgr module. * A new option --ceph-vip for the "openstack overcloud ceph deploy" command has been added. This option may be used to reserve VIP(s) for each Ceph service specified by the 'service/network' mapping defined as input. For instance, a generic ceph service mapping can be something like the following: --- ceph_services: - service: ceph_nfs network: storage_cloud_0 - service: ceph_rgw network: storage_cloud_0 For each service added to the list above, a virtual IP on the specified network is created to be used as frontend_vip of the ingress daemon. When no subnet is specified, a default *<network>_subnet* pattern is used. If the subnet does not follow the *<network>_subnet* pattern, a subnet for the VIP may be specified per service: --- ceph_services: - service: ceph_nfs network: storage_cloud_0 - service: ceph_rgw network: storage_cloud_0 subnet: storage_leafX When the *subnet* parameter is provided, it will be used by the ansible module, otherwise the default pattern is followed. This feature also supports the fixed_ips mode. When fixed_ip(s) are defined, the module is able to use that input to reserve the VIP on that network. A valid input can be something like the following: --- fixed: true ceph_services: - service: ceph_nfs network: storage_cloud_0 ip_address: 172.16.11.159 - service: ceph_rgw network: storage_cloud_0 ip_address: 172.16.11.160 When the boolean fixed is set to True, the subnet pattern is ignored, and a sanity check on the user input is performed, looking for the ip_address keys associated to the specified services. If the *fixed* keyword is missing, the subnet pattern is followed. * New command "openstack overcloud ceph spec" has been added. This command may be used to create a cephadm spec file as a function of the output of metalsmith and a TripleO roles file. For example, if metalsmith output a file with multiple hosts of differing roles and each role contained various Ceph services, then a cephadm spec file could parse these files and return input compatible with cephadm. The ceph spec file may be then be passed to "openstack overcloud ceph deploy" so that cephadm deploys only those Ceph services on those hosts. This feature should save users from the need to create two different files containing much of the same data and make it easier and less error prone to include Ceph in a deployment without the need to manually create the Ceph spec file. * The cli arguments that control what parts of the deployment to execute have been refactored to better align with the user expected intention, --stack-only: create the stack, download the config. no overcloud node changes --setup-only: ssh admin authorization setup. --config-download-only: run config-download playbook(s) to configure the overcloud. Upgrade Notes ************* * Removed *overcloud container image upload*, *overcloud container image build*, *overcloud container image prepare* and *overcloud container image tag* commands as the *tripleo container* command replaced those in Train and they no longer work. Deprecation Notes ***************** * Ephemeral heat is now used as default for overcloud deployment and assumes the nodes are pre-provisioned using metalsmith. Deprecates existing "--deployed-server" option and adds an additional option " --provision-nodes" for using installed heat and provisioning nodes with heat. * The commands "openstack overcloud profiles list" and "openstack overcloud profiles match" has been deprecated for removal. Since the Compute service is no longer used on the undercloud, the flavors based scheduling is not used. Bug Fixes ********* * Fixes Admin Authorize to work with Ephemeral Heat. * Fixes incorrect handling of root device hints when Software RAID is in use with Ironic. Users may re-introspect and an automatic root device hint would be added, which is incorrect and can lead to a failed deployment due to Software RAID (MD) device names being inconsistent across reboot from being configured to utilized. Ironic ultimately understands these devices and should choose the correct device by default if present. We now log an Warning and do not insert a potentially incorrect root device hint. Operators using a complex set of disks may still need to explicitly set a root device hint should their operational state require it. Other Notes *********** * Stack outputs that are needed by other functionality of the overcloud deployment are now saved in the stack working directory in an outputs subdirectory (default ~/overcloud- deploy/<stack>/outputs). Changes in python-tripleoclient 17.1.0..18.0.0 ---------------------------------------------- 6bdf6f3f Stop configuring install_command in tox. c42ee300 Setting default inventory path for VF interface with ooo client. 299a40da Support passing arbitrary cephadm arguments at bootstrap 80c43280 Overcloud export with ephemeral Heat 719a26aa bnr - Set properly the default inventory file 4458dc93 Add missing hostname package to bindep 88864174 Make --osd-spec and --crush-hierarchy not mutually exclusive 66718d3a Fix positional timeout arg ec411b93 Build standalone ceph_spec with Ansible b682efb9 Move _configure_logging to base Command class 0c488165 Improve tripleo-validations hook in undercloud preflight 34b4d6bf Add --yes to overcloud node provision for output file overwrite 2bfb6f2b Add AuthCloudName to export data 0f787980 Add --daemons option to deployed ceph 5a3b62ce Handle port unprovision for pre-provisioned nodes 6698a170 Mark Python 3.9 as supported runtime 8b70b793 Replace reproducer argument for consistency. 53c47168 Add option to bootstrap cephadm without --image 7ede6055 Fix UX UserWarning notification 348437df Add --reproduce-command option into Undercloud commands. 28b4248d Add Python 3.8 to supported runtime 3aae1ea8 Support Deployed Ceph container push_destination d48cb255 Move zuul jobs layout to centos9 only for master branch 74b15f79 Undercloud: Remove redundant environment file 196cba03 Add --single-host-defaults to 'openstack overcloud ceph deploy' 88ec87ca Add --standalone to overcloud ceph user and deploy f911410b Introduce tripleo --ceph-vip to deployed Ceph a3c8ecf3 Deprecate and unwire enable_nova UC option 1c3d2903 Log deprecation of enable_heat option. 482b0acd Deprecate 'overcloud profiles' commands 134270f2 Move baremetal configure commands from Ansible 4a6df279 Adding --repo-dir argument 295cffef Allow package install to be skipped for image build 1437fd07 Move baremetal clean commands from Ansible 3701f2ac Introduce "openstack overcloud ceph spec" 4ce46dca Exposes the community validation init command 51695e28 Guard against NoneType bd9bf85c Fix ironic command references f7888d00 Abort root device detection if an MD device is found 3ac32b59 Move baremetal provide commands from Ansible 79fa6fbe Handle missing ipv6 boolean in network_data.yaml for Ceph 84055814 Make deployed ceph baremetal file optional 6e0f514c Fix deploy templates arg validation 2ac39534 Add --mon-ip option to deployed ceph b9b9dbd7 Don't run playbooks if role count == 0 f8ee2464 Don't assume json network config in validations 8ab4cc19 Add the ability to enable/disable cephadm SSH user f41c3dbe Remove additional patching to use gitpython with eventlet 3e7f4845 Check old passwords file path during uc validation 59eae4b3 overcloud node extract provisioned - fixed_ips c32a24db Use Python3 yoga unit tests ddfd6d99 Don't set 'subnet' for ctlplane in node extract 02b67f8e Use netaddr when comparing local_ip for changes 538261ee Fix ports cleanup on node unprovision 723bf34c Write clouds.yaml/heatrc for tripleo launch heat f1fd9d09 Use 127.0.0.1 for ephemeral Heat server instead of ctlplane ip 0b90f0dc Skip Heat pod container image pull for default ephemeral heat images f4964907 Pass crush hierarchy data as extra_var 7d3c412e Set Ceph ms_bind options for IPv6 8552b8eb Test coverage for the overcloud_cell submodule 9ad9323b node extract provisioned - use network_config_update 149099c1 Support custom network names with deployed ceph f321bb46 Removed overcloud container commands 6b289250 Make inventory file writable fa0b7546 Replace deprecated assertEquals 43af68d4 bnr - overcloud restore - Handle correctly the ~ on the path 5e7ac07e Replace deprecated assertRaisesRegexp 9fd913f5 Ensure we're using the stackname for the inventory f797e15d Make --deployed-server the default 61744a6c Replace deprecated params in prepare b670a784 Integrating restoration process to client 8ff88f4d Add additional saved stack outputs 1cd6f282 Refactor --stack-only, --setup-only, --config-download-only 276a6def Save needed stack outputs in working_dir cc10ee4d Inspection - console to tty0 and ttyS0 a2b6a9ad Fix overcloud admin authorize 437c064e Remove cyclic import e05b6083 UC/Standalone - Set ip_version in DeployedServerPortMap 35e3278f Drop validate_playbook method from ProvisionNode 881321dd Fix usage of collections.abc dc26adb0 bnr CLI enable the conf. of ReaR with ironic on nodes 7b290d41 Fix the validations_log_basedir overriding 62a0553e Remove no longer used scale lib 19672ed3 Remove update converge 5084da81 Use unittest.mock instead of third party mock c3062ebe Remove --skip-nodes-and-networks 8c457093 Add swap files to .gitignore 87dbe9f6 Fix node scaling for Ephemeral Heat Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 + bindep.txt | 1 + .../add-uc-reproduce-command-65daa4386142fcd1.yaml | 10 + ..._args_for_admin_authorize-2fe6945515dd34a7.yaml | 9 + .../notes/ceph_daemon_option-47a75a2c8b5ce5bb.yaml | 22 + ...ser_disable_and_re_enable-18f3102031a802d0.yaml | 17 + .../ceph_vip_provisioning-dcac72d62c70c57c.yaml | 50 ++ .../deployed_server_default-0c2267c7588056fc.yaml | 7 + ...recate-overcloud-profiles-0bc0a368775844ad.yaml | 8 + .../overcloud_ceph_spec-e1cfd358c4db2b22.yaml | 14 + .../refactor-only-cli-args-cb70ed8ba8b166a9.yaml | 10 + ...md-device-for-root-device-8ad0c1e85292ca0a.yaml | 13 + ...rcloud-container-commands-fe7185ee87aeda3a.yaml | 7 + .../notes/save-stack-outputs-61c2ad9528ae2529.yaml | 5 + requirements.txt | 4 +- setup.cfg | 12 +- test-requirements.txt | 3 +- tox.ini | 1 - tripleoclient/command.py | 11 + tripleoclient/config/standalone.py | 7 + tripleoclient/constants.py | 14 +- tripleoclient/exceptions.py | 11 +- tripleoclient/export.py | 10 + tripleoclient/heat_launcher.py | 17 +- .../v1/overcloud_config/test_overcloud_config.py | 2 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 51 +- .../test_overcloud_external_update.py | 2 +- .../test_overcloud_external_upgrade.py | 2 +- .../v1/overcloud_image/test_overcloud_image.py | 2 +- .../test_overcloud_netenv_validate.py | 2 +- .../v1/overcloud_roles/test_overcloud_roles.py | 2 +- .../v1/overcloud_update/test_overcloud_update.py | 59 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 4 +- .../test_tripleo_container_image.py | 32 +- .../v2/overcloud_delete/test_overcloud_delete.py | 9 +- .../v2/overcloud_network/test_overcloud_network.py | 2 +- .../v2/overcloud_support/test_overcloud_support.py | 2 +- tripleoclient/utils.py | 339 ++++++++- tripleoclient/v1/container_image.py | 501 ------------- tripleoclient/v1/overcloud_admin.py | 67 +- tripleoclient/v1/overcloud_backup.py | 32 +- tripleoclient/v1/overcloud_deploy.py | 356 ++++----- tripleoclient/v1/overcloud_export.py | 30 +- tripleoclient/v1/overcloud_external_update.py | 5 +- tripleoclient/v1/overcloud_external_upgrade.py | 5 +- tripleoclient/v1/overcloud_image.py | 10 +- tripleoclient/v1/overcloud_node.py | 143 ++-- tripleoclient/v1/overcloud_profiles.py | 10 + tripleoclient/v1/overcloud_restore.py | 159 ++++ tripleoclient/v1/overcloud_update.py | 54 +- tripleoclient/v1/overcloud_upgrade.py | 9 +- tripleoclient/v1/tripleo_deploy.py | 9 +- tripleoclient/v1/tripleo_launch_heat.py | 16 +- tripleoclient/v1/tripleo_validator.py | 30 +- tripleoclient/v1/undercloud.py | 9 + tripleoclient/v1/undercloud_backup.py | 6 +- tripleoclient/v1/undercloud_config.py | 25 +- tripleoclient/v1/undercloud_preflight.py | 44 +- tripleoclient/v2/overcloud_ceph.py | 800 ++++++++++++++++++++- tripleoclient/v2/overcloud_delete.py | 2 +- tripleoclient/v2/overcloud_node.py | 81 ++- tripleoclient/v2/tripleo_container_image.py | 17 +- tripleoclient/workflows/baremetal.py | 216 +----- tripleoclient/workflows/deployment.py | 77 +- tripleoclient/workflows/roles.py | 12 +- tripleoclient/workflows/scale.py | 231 ------ tripleoclient/workflows/tripleo_baremetal.py | 526 ++++++++++++++ zuul.d/layout.yaml | 8 +- 105 files changed, 4615 insertions(+), 2662 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7299c5bd..8befe347 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ osc-lib>=2.3.0 # Apache-2.0 -tripleo-common>=16.0.0 # Apache-2.0 +tripleo-common>=16.3.0 # Apache-2.0 @@ -17 +17 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.2.0 # Apache-2.0 +validations-libs>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index ecce57ad..f33be701 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=3.0.0 # BSD @@ -12 +11 @@ testscenarios>=0.4 # Apache-2.0/BSD -validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file +validations-libs>=1.5.0 # Apache-2.0

1 0

tripleo-image-elements 14.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are delighted to announce the release of: tripleo-image-elements 14.2.0: Disk image builder elements for deploying OpenStack. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ For more details, please see below. Changes in tripleo-image-elements 14.1.0..14.2.0 ------------------------------------------------ cf9dd68e delorean-repo remove yum_plugin_priorities_package a2d68fae Use Python3 yoga unit tests 2ca8bd13 Add Python3 xena unit tests d1e9b054 Update master for stable/wallaby 14c47f49 Double the size of /boot/efi partition Diffstat (except docs and test files) ------------------------------------- elements/delorean-repo/pkg-map | 12 ------------ .../delorean-repo/pre-install.d/03-install-yum-priorities | 5 ----- elements/overcloud-partition-uefi/block-device-default.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/layout.yaml | 2 +- 6 files changed, 9 insertions(+), 19 deletions(-)

1 0

tripleo-validations 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are happy to announce the release of: tripleo-validations 15.2.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ For more details, please see below. Changes in tripleo-validations 15.1.0..15.2.0 --------------------------------------------- ff4cbe6 Validating that RetryFilter is not in nova 8692b4b Removing leftover README docs from roles fe0ca27 Redefining the irrelevant files list to ensure execution graph stability 30b234a Validate libvirtd is not running on the undercloud 2493726 Getting instance shutdown xml issue b0d4d49 Move zuul jobs layout to centos9 only for master branch 16dfbae Substituting 'localhost' for wildcard '*' in image-serve validation 6de2be5 oslo_config_validator: Adding possibility to override namespaces config ebcab3d oslo_config_validator: Defaulting config_invalidations to empty list 9068ede oslo_config_validator: Nova port data changes settings have wrong values 7441ea3 Add FIPS validation 01ae2b4 feat(removal): tox-ansible support 8989c8c Instruct container-status validation to accept 137, 142 and 143 exit code status 3043ad8 oslo-config-validator: container run task should never fail 12bc0d0 Remove content of TLS-Everywhere molecule.conf 7c591cb Migrate jobs from CentOS 8 to CentOS 8 Stream 23890fc Remove pre-deployment validation 32e9e9e Bumping the ansible-lint version to 5.3.2 in order to resolve CI failure 973d188 Simplify and consolidate files 3717245 Remove domain equivalence check 52f3fbd Remove references to novajoin-server and novajoin-notifier 388f7e3 Remove check for certmonger user service 995bf8c Make sure fact is available to find hostname 7c9ae48 Interface xpath attribute read issue bc1d40a fix(molecule): Add ability to run molecule on Fedora 9cbe84f Fixing formatting of the nfv_ovsdpdk_zero_packet_loss role docs 6cbeeb4 undercloud-debug validation documentation improvement 772d98c fix(ci): Install python3 package first dd088d7 Use centos-8 stream for molecule jobs abe513c Optimize linters executions from tox and pre-commit 5278602 Removing validations.yml playbook from job definition 33e57db Adding ironic's json_rpc to known namespaces a6a8c70 Multinode and provider jobs fd80bfa Remove run-validations.sh script 4512793 Change ansible_hostname to use ansible_facts Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 12 +- .config/molecule/config.yml | 16 +- .coveragerc | 2 +- .dockerignore | 2 +- .pre-commit-config.yaml | 3 +- LICENSE | 1 - README.rst | 1 - ansible-collections-requirements.yml | 1 + babel.cfg | 1 - bindep.txt | 27 ++- ci/playbooks/pre.yml | 7 + .../modules/modules-ceph_pools_pg_protection.rst | 1 - .../modules-check_cpus_aligned_with_dpdk_nics.rst | 1 - .../modules/modules-check_ironic_boot_config.rst | 1 - .../modules-check_other_processes_pmd_usage.rst | 1 - .../modules-convert_range_to_numbers_list.rst | 1 - .../modules/modules-get_dpdk_nics_numa_info.rst | 1 - .../modules/modules-ovs_dpdk_pmd_cpus_check.rst | 1 - .../modules/modules-pmd_threads_siblings_check.rst | 1 - .../role-check_nfv_ovsdpdk_zero_packet_loss.rst | 13 +- .../role-collect_flavors_and_verify_profiles.rst | 1 - .../roles/role-ironic_boot_configuration.rst | 1 - .../roles/role-undercloud_disabled_services.rst | 6 + .../roles/role-undercloud_heat_purge_deleted.rst | 42 ++++- .../roles/role-undercloud_service_status.rst | 42 ++++- playbooks/collect-flavors-and-verify-profiles.yaml | 1 - playbooks/fips-enabled.yaml | 19 ++ playbooks/oslo-config-validator.yaml | 16 ++ playbooks/undercloud-debug.yaml | 3 + playbooks/undercloud-disabled-services.yaml | 22 +++ .../add-ceph-health-check-000bab9581c759d3.yaml | 2 +- .../molecule/default/molecule.yml | 8 +- .../tasks/check_nfv_instances.yml | 17 +- .../tasks/main.yml | 6 +- .../tasks/validate_instance.yml | 12 +- .../molecule/default/converge.yml | 12 +- .../molecule/default/molecule.yml | 2 +- .../vars/main.yml | 1 - roles/container_status/tasks/main.yaml | 2 +- roles/fips_enabled/molecule/default/converge.yml | 60 ++++++ roles/fips_enabled/molecule/default/molecule.yml | 3 + roles/fips_enabled/molecule/default/prepare.yml | 19 ++ roles/fips_enabled/tasks/main.yml | 29 +++ roles/fips_enabled/vars/main.yml | 29 +++ roles/image_serve/molecule/default/molecule.yml | 8 +- roles/image_serve/tasks/main.yaml | 4 +- roles/oslo_config_validator/defaults/main.yml | 4 + .../molecule/default/molecule.yml | 2 +- .../molecule/mocked_failure/molecule.yml | 2 +- .../tasks/build_validation_config.yml | 20 +- .../oslo_config_validator/tasks/container_run.yml | 3 +- .../tasks/invalidate_config.yml | 2 +- .../tasks/validate_config.yml | 2 +- .../molecule/default/molecule.yml | 2 +- .../molecule/deprecated_services/molecule.yml | 2 +- .../molecule/down_services/molecule.yml | 2 +- roles/overcloud_service_status/resources/README.md | 1 - roles/repos/README.md | 41 ----- roles/tls_everywhere/molecule/default/molecule.yml | 17 -- roles/tls_everywhere/tasks/common.yaml | 16 +- .../tasks/overcloud-post-deployment.yaml | 28 --- .../tasks/pre-deployment-containerized.yaml | 203 --------------------- .../tasks/pre-deployment-non-containerized.yaml | 193 -------------------- roles/tls_everywhere/tasks/pre-deployment.yaml | 104 +++++------ roles/tls_everywhere/tasks/prep.yaml | 79 -------- roles/undercloud_debug/README.md | 38 ---- roles/undercloud_debug/defaults/main.yml | 4 +- roles/undercloud_debug/tasks/main.yml | 2 +- roles/undercloud_debug/vars/main.yaml | 3 + .../undercloud_disabled_services/defaults/main.yml | 3 + roles/undercloud_disabled_services/tasks/main.yml | 18 ++ roles/undercloud_disabled_services/vars/main.yaml | 8 + roles/undercloud_disk_space/README.md | 36 ---- roles/undercloud_heat_purge_deleted/README.md | 38 ---- roles/undercloud_process_count/README.md | 37 ---- roles/undercloud_service_status/README.md | 38 ---- roles/undercloud_tokenflush/README.md | 37 ---- .../validation_init/molecule/default/molecule.yml | 2 +- .../molecule/no_molecule_test/molecule.yml | 2 +- scripts/run-local-test | 7 +- scripts/run-validations.sh | 106 ----------- setup.cfg | 1 - test-requirements.txt | 2 +- tox.ini | 59 +----- zuul.d/base.yaml | 8 +- zuul.d/layout.yaml | 65 +++++-- zuul.d/molecule.yaml | 13 ++ 132 files changed, 917 insertions(+), 1287 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 77fda49..a4cccb8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansible-core<2.12.0 # GPLv3+

1 0

tripleo-heat-templates 16.0.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are excited to announce the release of: tripleo-heat-templates 16.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Add parameter to set the auth type for the snmpd_user. Possible options are MD5 (which is what was hardcoded before and is the default now) and SHA. This should be set to SHA on FIPS environments. * Add IronicDefaultBootInterface parameter to allow users to set / override the default boot interface used by ironic. This may not work if a hardware type does not support the set boot interface. This overrides create-time defaults. The ordered union of the enabled boot interfaces and hardware type determines, under normal circumstances, what the default will be. * Since genisoimage was removed from CentOS9 / RHEL9, the nova's default "mkisofs_cmd" option will not work anymore. In RHEL/CentOS realm, "mkisofs" is an alias to alternatives that either map to "xorriso" (9) or "genisoimage" (8). * * Added the Octavia TLS parameters. * RabbitMQ can be configured to run in FIPS mode via the new configuration option RabbitFIPS. The default value is false. * Admin endpoint of Keystone listens on Internal API network by default. * Logging for the designate bind backend is now more fully configured. DNS query logging can be enabled by setting *DesignateBindQueryLogging* to *true*. * Neutron can now be configured to support secure RBAC using *EnforceSecureRbac*. Note, you may not be able to use this until Neutron upstream has support for common RBAC personas (https://docs.openstack.org/keystone/latest/admin/service-api- protection.html#roles-definitions). * Keystone can now be configured to support secure RBAC personas (https://docs.openstack.org/keystone/latest/admin/service-api- protection.html#roles-definitions) with the *EnforceSecureRbac* setting. Note that deployments with mixed permission models will have unexpected side-effects. Setting this option won't have meaningful effect until all services in your deployment support secure RBAC personas. * The new parameter "EnforceSecureRbac" has been added to enforce authorization based on common RBAC personas. Currently in glance the support is only available for project-admin, project-member and project-reader personas and system personas will come in a later release. * The new "KeystoneNotificationDriver" parameter has been added. This parameter overrides the global "NotificationDriver" parameter and allows customizing notification driver only in Keystone, which is required to use notification listner function in Barbican. * Add *NovaShowHostStatus* to allow overriding API policies to access the compute host status in the requested Nova server details. The default value 'hidden' allows only admins to access it. Setting it to 'all' ('unknown-only') without additional fine-grained tuning of *NovaApiHostStatusPolicy* shows the full (limited) *host_status* to the system/project readers. Add *NovaApiHostStatusPolicy* that defines a custom API policy for *os_compute_api:servers:show:host_status and `os_compute_api:servers:show:host_status:unknown-only*. These rules, or roles, replace the admins-only policies based on the given *NovaShowHostStatus*: 'unknown-only' shows the limited host status UNKNOWN whenever a heartbeat was not received within the configured threshold, and 'all' also reveals UP, DOWN, or MAINTENANCE statuses in the Nova server details. Finally, *NovaShowHostStatus*: 'hidden' puts it back being visible only for admins. Additional policies specified using *NovaApiPolicies* get merged with this policy. * A heat parameter "IronicPowerStateChangeTimeout" has been added which sets the number of seconds to wait for power operations to complete, i.e., so that a baremetal node is in the desired power state. If timed out, the power operation is considered a failure. The default is 60 seconds, which is the same as the current Ironic default. * Added "pure_iscsi_cidr" and "pure_host_personality" and "eradicate_on_delete" support for the Pure Storage FlashArray Cinder driver. * Added "NovaDisableComputeServiceCheckForFfu" parameter to configure "nova::workarounds::disable_compute_service_check_for_ffu" to disable the service version check workaround for FFU. * Adding Hugepages role parameter Hugepages management was always a manual step done by operators via the TripleO parameter "KernelArgs". This is error prone and causing confusion. The new "Hugepages" parameter allow operators to define hugepages as dictionnary, making it easier to read and follow. To prevent unvolontary changes, there's multiple validations before applying a change: * We convert the current running configurations to an actual dictionnary that we validate the new format against * If no change is necessary, even though the format might not be the same, there's no kernel_args update. * By default, we don't remove hugepages in places except when operators specifically set the "ReconfigureHugepages" to true. This change is also opening the door to more automations and automatic tuning. Upgrade Notes ************* * Support for the following three volume drivers have been removed. * Dell EMC ScaleIO * Dell EMC VxFlexOS * Dell EMC VMAX * The following services should be removed from roles data during upgrade. * "OS::TripleO::Services::CinderBackendScaleIO" * "OS::TripleO::Services::CinderBackendDellEMCVxFlexOS" * "OS::Tripleo::Services::CinderBackendDellEMCVMAXISCSI" * Redis is now disabled by default in new deployments, so existing deployments have to delete the redis resource in pacemaker prior to upgrade, or include the new environment file ha-redis.yaml if they still implicitely depend on redis. * Support for networking-bigswitch has been removed, because the plugin is no longer maineined. * Support for the novajoin service has been removed. * The "OS::TripleO::Service::Novajoin" resource has been removed. It should be removed from roles data before upgrade. * The default boot mode for ironic deployed nodes is now "uefi" when no boot mode is explicitly set in the node's driver_info, capabilities, or instance_info configuration. To restore the previous default, set the heat parameter "IronicDefaultBootMode" to "bios". * The default UEFI iPXE bootfile is now *snponly.efi*. The boolean parameter *IronicIPXEUefiSnpOnly* was added to allow custom configuration. When set to *true* snponly is used, when *false* the previous default ipxe.efi is used. See bug: 1959726 (https://bugs.launchpad.net/tripleo/+bug/1959726) Deprecation Notes ***************** * The MlnxSDNUsername and MlnxSDNPassword have been deprecated and have no effect * The "MysqlIncreaseFileLimit" parameter has been deprecated and has no effect now. * The "IronicIpVersion" parameter has been deprecated and has no effect. * Using environments/enable-designate.yaml has been deprecated in favor of environments/services/designate.yaml, the current location for environment files that enable TripleO components. * With the switch to ephemeral heat for the overcloud, the UndercloudMinion is no longer viable. Deploying UndercloudMinion is not supported anymore and environments files to enable its deployment are dropped. Bug Fixes ********* * Adds the port used for directly accessing Ironic-Inspector using TLS, 13050, to the list of ports to permit inbound connections on. * Rsyslog config for haproxy (https://bugs.launchpad.net/tripleo/+bug/1953672) * Before this patch, invalid certificates would be detected close to the end of the deployment. In small environments, this comes fast but in an environment with a large number of nodes, failures would come really late after a few hours of deployment. With this validation, it now fails before step1 at host_prep_steps if the certificate is smaller than 512 bytes if UsePublicTLS is set to true and PublicSSLCertificateAutogenerated is set to false. It will also use openssl to verify the state of the certificate and fail if the certificate is invalid or expired. * When we install libvirt on a host, the system parameter "fs.aio- max- nr" is to 1048576. Since we containerized libvirtd, we lost this system parameter. We now make sure it's defined by adding it from the nova-libvirt-common template. * Enable Swift replicators in single replica mode to ensure cleanup of old tombstone (.ts) files. Sleep interval between replication runs is set to 24 hours to prevent unneeded load on the systems if no replication is needed. Other Notes *********** * A new param MlnxSDNToken has been added to authenticate sdn controller * Steps are taken to minimize chances of confusion between the default block storage volume type established by the CinderDefaultVolumeType parameter, and cinder's own __DEFAULT__ volume type. In a new deployment where no volumes exist, cinder's __DEFAULT__ type is deleted because it is redundant. In an upgrade scenerio, if volumes exist then the __DEFAULT__ type's description is updated to indicate the actual default volume type is the one established by the CinderDefaultVolumeType parameter. * "OvsDpdkDriverType" is now deprecated. Note that is had no effect since we upgraded to OVS 2.6, where we stopped supporting the configuration of DPDK driver in puppet-vswitch. Since then, we couldn't change the driver; so we can safely deprecate this parameter and remove it in a future release. * "podman image prune" is no longer used on the undercloud to remove unused images during the undercloud update/upgrade. With the usage of ephemeral Heat, not all images will always be used by running or stopped containers, so "podman image prune" should not be used to clean up the local container image storage. Images that are no longer being used can still be removed individually with "podman rmi". Changes in tripleo-heat-templates 15.1.0..16.0.0 ------------------------------------------------ 5136dd9d8 Have Ceph log to a file for scenario 001/004 720dd1482 Add HostnameFormatDefault for Ceph related roles 07adbb7b7 Update .gitignore de668b4ec Use FQCN for ansible builtin tasks 4d23590ca Ceilometer: Remove incomplete cache parameters 6f8a5bc1e Memcached: Allow puppet to be aware IPv6 is used e66f495b1 Include redis templates in Octavia configuration 15744039d Increase stop_grace_period for Octavia controller services 0fa959acb Add support for ovn bgp agent 20230cd59 Remove support for the novajoin service df569e638 Fix typo in HciCephObject role tag 115439e6b Add missing option for rgw/swift compatibility 5d1e6f8c0 Added log volumes for ceilometer-agent-ipmi d3d20bb44 Etcd: Update cluster membership when replacing a node 881334004 Ironic: Use generated dnsmasq conf file 875155550 Add Octavia TLS parameters 0d4fbc86a Remove support for Nuage core plugin e99a251ad Use consistent indent in .sh files 5249a06d4 Nova: Fix missing cache backend d0ca9fe63 Fix trailing slashes in bind-mounts and linting 35eb903a8 Fix network-environment.yaml ipv6 {{network.name}}Routes 5bf166be6 Drop services not used for undercloud role 243f80b8b Octavia: Add missing region_name parameters f59346887 Cinder: Remove leftover of Dell EMC VMAX driver support a2674a176 Update Ceph client service to handle external Ceph 4dc74ac16 Add CephIngress resource fa69bfc1e Disable GSSAPIAuthentication by default f97c99bc2 Use puppet parameters instead of hieradata key b35015b30 Fix sshd host_prep_tasks 309c89e90 Only run mysql upgrade commands when needed 263fee246 Ensure db initialization is not executed by puppet 087d67733 Designate: Ensure pool management by puppet is disabled 1d77d9af2 Don't add conntrack entries for vxlan 67969af3d Remove support for networking-bigswitch 7ec40a3c5 Added NovaDisableComputeServiceCheckForFfu var a8b849f03 Remove unused deployed_server_port_map output 219817528 Remove Nova from undercloud during upgrades 1395d1c49 Update Barbican Orders policy for secure-rbac 7ca6a836f rsyslog: Add missing logging sources for gnocchi services e07098b53 rsyslog: Add missing logging sources for aodh services a1b967faf Add support for additional log sources for rsyslog 7f8876ce7 Sync updated DB root password in running container 2329e416e Required DDP package is not loaded issue 88f2dfbba Update of OVN controllers as an external task. e1de2bcb7 Add CephNfs service on roles providing "external" network connectivity 9ed9c8da5 Horizon: Fix the wrong policy parameters b1e1df2b7 Enable designate-dashboard ae866ab47 Adding Hugepages role parameter c275d7870 Do not run puppet in docker_config 0c3ea4c28 Allow nic-config conversion without Heat 27b8210fd Align defaults for SoftwareConfigTransport 64a19091a Run the SSL verification at step2 18e7522d6 Fix ca-certs-baremetal-puppet.yaml description in header 71ed74176 Update Barbican Secure-RBAC policy 9cb551201 Cleanup openldap certs database 19b0b7429 Remove "ceph" tags for the TripleO cephadm branch d72a23759 Expose tripleo_cephadm_default_container boolean e93b454d6 Redis: Hard-code paths of configuration files 5746310b6 Replace dnf by tripleo_dnf_stream for updates. cd7d10133 Move zuul jobs layout to centos9 only for master branch daa48254e Exclude /etc/openldap to avoid overriding ro file 7e8d88afa Allow deployments to run when selinux is disabled fceeb2fbd Fix AnyErrorsFatal type 85ccef292 Fix Redis config generation when fd limit changes 3ae6ce355 Don't bind host's /run in multipathd container d5701e6ce Validate SSLCertificate is defined a3fa2a052 Nova: Use cross_az_attach from nova::cinder 19c11813d Fix ironic boot interface for undercloud ceed5ac9e Fix OS_CLOUD for multistack and nova az tasks acf032a09 Designate: miniDNS and bind9 instances on the proper networks d3a6e7a99 Start the neutron metadata agent with cgroupns host bd13adefd Add parameter IronicIPXEUefiSnpOnly 7eb280ace Skip podman purge on Undercloud 33d4b44ae Remove unused environment file 7bb44f26b Enable clean-up service for novajoin by default 17004426a Drop Nova and NovaJoin services from UC role data b2b9e983c Add heat::trustee parameters ec33ab404 Disable heat by default in favor of ephemeral-heat. caed5081e Keystone: Use system-admin to create resources c2d110257 Use Internal API by default for Keystone admin endpoint c3affa49a Nova: Use internal endpoint to access Keystone 97c1306b2 Defining fs.aio-max-nr for hosts with libvirt service ff7bc29c7 Added rabbit FIPS flag to FIPS env fle 3f7db6a9a Placement: Enable proxy headers parsing 8e28fde39 Allow neutron to configure secure RBAC options 9aa90bd1a Skip 'ensure dnf modules' for CS9 on undercloud-upgrade 59edff435 Add RabbitFIPS parameter dde9a258d Update dervice_pci script to handle pci address formats 6ff47463b Configure logging for designate bind backend ebab335f3 Role specific container support db63209ae Revert "Update cell0 db connection, if required" e36f44cad Check if passthrough user_config is decoded properly from hiera data ed560e46c Pass OS_CLOUD env when migrating to heat ephemeral. cef35a45a Fix cloud-init detection rules 97a2bd2ca Reduce frequency of task retries 5b9648dd9 Disable libvirtd and stop it 2caf85f84 fix path typo 72e75597c Fix ignored OctaviaControlSecurityGroup dfeb0e643 Nova: Configure [keystone] parameters a1f6142b9 Missing OVN Parameters 9b5dba49e Cinder: Remove support for deprecated Dell EMC volume drivers d57f9a877 Add ironic-inspector TLS endpoint port to be reachable 277ef9bbc README: Remove OVN row f63176e97 Horizon: Manage policy files 4362c14ce Disable metrics_qdr binding in HAProxyEdge b4a9058b8 Make sure libvirt guests shut down before network 2a27e8bdb Enable policy rule management in nova-compute a170d70e2 Add OVNContainerCpusetCpus 5326c3d5e Move *NetworkConfigTemplate to parameter_defaults 81d546a23 Add show unknown only host_status to scn002 b11c78a02 Add show all host_status policy to scn001 2b9461e97 Fix remaining usage of internal url for www_authenticate_uri 3a04690cd Enable notification from Keystone when Barbican is enabled 4e078fc42 Handle ping test ips when not available 392abfd2a Include subnet in unbound colloc port creation to ensure IP allocation b49da7236 Allow keystone to configure secure RBAC options dfd28f7b1 Revert "Revert "Add chrony waitsync back in"" 98e9b2983 Align services of ControllerSriov role 21bd42b4f Revert "Add chrony waitsync back in" 925af6378 Add generated deployed network environment 4f7e4fd18 Fix killscript regex match for libpod-conmon-* 62ded067d Fix IPv6 router on UC re-install 8d46c9c38 Add chrony waitsync back in 160936df1 Use public endpoint for [keystone_authtoken] www_authenticate_uri 3e4135aa3 Add CephAdmVerbose variable 6d142165f IDM server registration is fixed to one server only ee617c09a Add missing services to ControllerNovaStandalone role 15ff29cf1 Fix IronicImageDownloadSource on undercloud 71012af59 Replace deprecated octavia::controller::port_detach_timeout 4c1206938 Remove hieradata for Redis Sentinel 423644945 Check that redis is removed prior to FFU 98d731768 Use Python3 yoga unit tests 157d0c112 Start the l3 agent with cgroupns: host 97da97eda Fix external-ceph deployment directory reference 008b55afa fix InternalApi subnet for ControllerNovaStandalone role d8475ede4 Remove tripleo_ovn_mac_port_name port tag eae88fe0a Sync neutron-ovs-dvr.yaml copies 3983bc744 Update cell0 db connection, if required cb24c0bff Revert "Fix the wrong parameter name to disable management of libvirt services" c3bb91338 Missing rsyslog parameters for HAProxy 20368af84 Fix the wrong parameter name to disable management of libvirt services 9d4d7f9a6 Manage octavia flavor in tripleo-ansible 9d06a3c7e Exec libvirtd in a transient scope a77d5ebde Make tools scripts executable 2e4f35b07 Add templates for custom network ci job a88c32f51 Replace deprecated manila::sql_connection 5e77f8198 Manila: Use internal endpoints to access other services e78fbfb99 Nova: Use internal endpoint to access Neutron API efdbece13 Run designate-api under apache a035de7d3 Remove setype for /var/log/containers creation 98af86994 Parameters for API policies to show a host status 7a99ae23e Introduce a new linter for yaml-validate, and correct issues 613dd92d8 Add a configuration option to enable secure RBAC in Heat 1f868ba53 Ensure we bind-mount /dev instead of /dev/ 579102e54 Sc001: Enable glance image import methods 4df0b3519 Neutron: Use internal endpoint when accessing Placement API 3b80985e5 Assign project-scoped service role for token validation e6f24185b CoreServices list has to be flatten 08c5e74d3 Placement: Define root path explicitly 0436025d8 Add IronicDefaultBootInterface parameter 3055a4f11 Use only internal endpoints in Octavia controller services 1127ac015 Accept lists for Manila*ShareDataPools and Manila*EthernetPorts 7e1ee7511 set manila context-is-admin policy rule for secure-rbac dbf5d36fd Add timestamps to nova/placement wait for scripts 969043bef Correct the multiple_nics_vlans_dvr.j2 file path 06787c853 Add support for powermax. 6dc38e414 Fix doc link 531aecc4b Fix convert_v1_net_data.py - ipv6 property 3a0b86e4e Add ephemeral Heat entry to clouds.yaml 047499937 Fix condition to add per subnet routes parameter ee846d21e [Neutron] Add custom env file to set dns_domain_name 0555ee4df [Pure Storage] Set default parameter for iscsi cidr 368102b14 Deprecate ineffective MysqlIncreaseFileLimit efc328c66 Make PingTestGatewayIPsMap a map of flatten lists 1f79df6da Update project personas policies in custom neutron policy 70720d21d [Pure Storage] Add new FlashArray Cinder driver params 632afe18c Add rgw max attributes constraints c72579637 neutron: Stop setting the allow_overlapping_ips parameter 925e2db46 Keystone: Remove unused container_puppet_tasks 8cb2fd898 Fix logic related to CinderEtcdLocalConnect parameter 7f04caaf4 Use a designate specific directory for the bind persistent storage 0265f9572 Clean up update converge file 1314f345f [ovn] Deleting ovn agents during scale down tasks 61a1dcc3b Remove double slashes in path a287ebc42 Add socket keepalive options for the pymemcache backend 839ddccdb Implement project personas in custom barbican policy file 0fe7045fa Deprecate env/enable-designate in favor of env/services/designate.yaml b3863568a Fix set_fact on the CephMgrAnsibleVars 52ed0f05b Remove old non-ha container removal tasks 6d8091240 task-core basic framework 5d830980e Add ping test for all networks gateway IPs d98009ae4 Change authentication method for Mellanox sdn controller d33865cde Remove mariadb-server packages from the host f2fd2a856 Add ovn_chassis_mac_map to ExtraConfig role 273b41a5d Use ServiceNetMap to filter PublicNetwork in haproxy-tls f6eddad78 Don't use service_net_map_replace in krb-svc-principals 65151adc1 Add parameter IronicPowerStateChangeTimeout 48ed6294c Do not error out when a network is ipv6 only 040859a73 Clean up implementation to manage volume type by puppet 82a0781b4 Revert "Fix TLS-e with custom network names" 4bf486603 Clear up confusion on cinder's default volume type 4ba798c57 Add environment file for FIPS deployments e2f6aec3e Add auth type for snmpd readonly user 6bae260bc Fix TLS-e with custom network names 26b05056e Adding NovaMkisofsCmd parameter to nova-compute 20311a0a5 Flatten yaql list expressions f8e7bf2bb Do not set rabbitmq SSL CA certs when InternalTLSCAFile is '' 6b50e1622 Flatten yaql list expressions b3e5e03d6 Drop UndercloudMinion environments 6b4a4389f Remove ganesha_vip extra config workaround 716fe9bc6 Deprecate `OvsDpdkDriverType` parameter 015fc41bd Sc04: Enable glance sparse image upload ba7f896c5 Revert "Enable fernet token cache by default" 9193090b1 Allow configuring secure RBAC in glance 1cbd03a13 Use double quotes for string comparisons policies in glance 34b7d28e6 Drop non-bundle manila from puppet-config 76adfd420 Use true/false for boolean values 4d6dc5308 Refactor usage of QemuMemoryBackingDir f834c26d5 Enable new SELinux boolean for vTPM support f664302c3 Enable new SELinux boolean for vTPM support 40d5282eb follow-up: Enable support for Libvirt modular daemons 42d746921 Introduce ApplyCephConfigOverridesOnUpdate 3d2fec12b Implement project personas in custom cinder policy file 9e30f281f Remove network_virtual_ips hard-coded name filter c0b778301 GaneshaNetwork - fallback -> external -> ctlplane 2202412db Implement project personas in custom neutron policy file 433cc9375 Implement project personas in custom keystone policy file b522254bc Remove six library b30b3cc82 Implement project personas in custom placement policy file 5a43e8a30 Use EnableInternalTLS to set pssl in nb and sb 4477e2862 Implement project personas in custom manila policy file 716492274 Deprecate IronicIpVersion 9d6f24131 Set default value of IronicDefaultBootMode to uefi 9be1b7746 Run Swift replicators in single replica mode 762f5056d Allow Swift to configure secure RBAC options 93d06c2b9 Cinder: Update puppet parameters to set castellan options ccacb548e Enable enable_proxy_headers_parsing in Designate API 5e5472337 Add note indicating only Controllers use network VIPs e618ad8d3 Honor the ExternalSwiftUserTenant parameter Diffstat (except docs and test files) ------------------------------------- .gitignore | 17 +- README.rst | 2 - ci/custom_ci_roles_data.yaml | 263 ++++ ci/custom_names_network_data.yaml | 60 + ci/custom_names_vip_data.yaml | 6 + .../multiple-nics/custom-network-environment.yaml | 27 + ci/environments/neutron_dns_domain.yaml | 2 + ci/environments/scenario000-standalone.yaml | 2 - ci/environments/scenario001-standalone.yaml | 27 +- ci/environments/scenario002-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 14 +- common/common-container-setup-tasks.yaml | 3 +- common/container-puppet.sh | 4 +- common/deploy-steps-playbooks-common.yaml | 20 +- common/deploy-steps-tasks-step-0.j2.yaml | 6 + common/deploy-steps-tasks-step-1.yaml | 28 +- common/deploy-steps-tasks.yaml | 8 +- common/deploy-steps.j2 | 84 +- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 4 +- common/services/deployment-bootstrap.yaml | 71 + common/services/deployment-host-prep.yaml | 52 + common/services/deployment-legacy-deploy.yaml | 31 + common/services/deployment-network.yaml | 41 + common/services/deployment-post-deploy.yaml | 42 + common/services/deployment-state.yaml | 104 ++ common/services/role.role.j2.yaml | 21 +- .../nova_wait_for_api_service.py | 27 +- .../nova_wait_for_compute_service.py | 27 +- .../pacemaker_restart_bundle.sh | 28 +- container_config_scripts/pacemaker_wait_bundle.sh | 94 +- .../placement_wait_for_service.py | 26 +- deployment/README.rst | 3 + deployment/aodh/aodh-api-container-puppet.yaml | 40 +- .../aodh/aodh-evaluator-container-puppet.yaml | 34 +- .../aodh/aodh-listener-container-puppet.yaml | 33 +- .../aodh/aodh-notifier-container-puppet.yaml | 33 +- .../barbican/barbican-api-container-puppet.yaml | 47 +- deployment/barbican/barbican-client-puppet.yaml | 8 +- .../ceilometer-agent-central-container-puppet.yaml | 25 +- .../ceilometer-agent-compute-container-puppet.yaml | 31 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 25 +- ...ometer-agent-notification-container-puppet.yaml | 29 +- .../ceilometer-base-container-puppet.yaml | 13 +- deployment/cephadm/ceph-base.yaml | 25 +- deployment/cephadm/ceph-client.yaml | 30 +- deployment/cephadm/ceph-external.yaml | 2 - deployment/cephadm/ceph-grafana.yaml | 2 - deployment/cephadm/ceph-ingress.yaml | 72 + deployment/cephadm/ceph-mgr.yaml | 32 +- deployment/cephadm/ceph-nfs.yaml | 6 +- deployment/cephadm/ceph-osd.yaml | 2 - deployment/cephadm/ceph-rbdmirror.yaml | 2 - deployment/cephadm/ceph-rgw.yaml | 8 +- deployment/certs/ca-certs-baremetal-puppet.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 78 +- .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 82 - deployment/cinder/cinder-backend-pure-puppet.yaml | 30 + .../cinder/cinder-backup-container-puppet.yaml | 29 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 49 +- .../cinder/cinder-common-container-puppet.yaml | 12 +- .../cinder/cinder-scheduler-container-puppet.yaml | 29 +- .../cinder/cinder-volume-container-puppet.yaml | 24 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 +- deployment/database/mysql-base.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 26 +- deployment/database/mysql-pacemaker-puppet.yaml | 102 +- deployment/database/redis-base-puppet.yaml | 16 - deployment/database/redis-container-puppet.yaml | 32 +- deployment/database/redis-pacemaker-puppet.yaml | 50 +- .../cinder-backend-dellemc-vxflexos-puppet.yaml | 172 --- .../cinder/cinder-backend-scaleio-puppet.yaml | 153 -- deployment/deprecated/multipathd-container.yaml | 26 +- .../nova/nova-libvirt-container-puppet.yaml | 42 +- .../novajoin/ipaclient-baremetal-ansible.yaml | 191 --- .../novajoin/novajoin-container-puppet.yaml | 273 ---- .../designate/designate-api-container-puppet.yaml | 78 +- deployment/designate/designate-base.yaml | 21 +- deployment/designate/designate-bind-container.yaml | 48 +- .../designate-central-container-puppet.yaml | 23 +- .../designate/designate-mdns-container-puppet.yaml | 31 +- .../designate-producer-container-puppet.yaml | 22 +- .../designate/designate-sink-container-puppet.yaml | 22 +- .../designate-worker-container-puppet.yaml | 22 +- deployment/etcd/etcd-container-puppet.yaml | 195 ++- deployment/frr/frr-container-ansible.yaml | 198 ++- deployment/glance/glance-api-container-puppet.yaml | 45 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 28 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 34 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 34 +- deployment/haproxy/haproxy-container-puppet.yaml | 38 +- .../haproxy/haproxy-edge-container-puppet.yaml | 1 + .../haproxy-internal-tls-certmonger.j2.yaml | 24 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 87 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 25 +- deployment/heat/heat-api-container-puppet.yaml | 29 +- deployment/heat/heat-base-puppet.yaml | 23 +- deployment/heat/heat-engine-container-puppet.yaml | 29 +- .../heat/heat-ephemeral-container-ansible.yaml | 60 +- deployment/horizon/horizon-container-puppet.yaml | 27 +- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 10 +- deployment/ironic/ironic-api-container-puppet.yaml | 25 +- .../ironic/ironic-conductor-container-puppet.yaml | 54 +- .../ironic/ironic-inspector-container-puppet.yaml | 29 +- .../ironic-neutron-agent-container-puppet.yaml | 22 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 31 +- deployment/iscsid/iscsid-container-puppet.yaml | 16 +- deployment/kernel/kernel-baremetal-ansible.yaml | 22 +- .../kernel-boot-params-baremetal-ansible.yaml | 33 + deployment/keystone/keystone-container-puppet.yaml | 102 +- deployment/logging/files/barbican-api.yaml | 22 +- deployment/logging/files/glance-api.yaml | 22 +- deployment/logging/files/heat-engine.yaml | 22 +- deployment/logging/files/keystone.yaml | 22 +- deployment/logging/files/neutron-api.yaml | 22 +- deployment/logging/files/nova-api.yaml | 22 +- deployment/logging/files/nova-common.yaml | 19 +- deployment/logging/files/nova-libvirt.yaml | 40 +- deployment/logging/files/nova-metadata.yaml | 22 +- deployment/logging/files/placement-api.yaml | 22 +- deployment/logging/rsyslog-container-puppet.yaml | 34 +- .../logging/rsyslog-sidecar-container-puppet.yaml | 18 +- deployment/logging/stdout/barbican-api.yaml | 34 +- deployment/logging/stdout/haproxy.yaml | 26 +- deployment/logging/stdout/heat-api-cfn.yaml | 34 +- deployment/logging/stdout/heat-api.yaml | 34 +- deployment/logging/stdout/keystone.yaml | 34 +- deployment/logging/stdout/nova-api.yaml | 34 +- deployment/logging/stdout/nova-common.yaml | 2 + deployment/logging/stdout/nova-libvirt.yaml | 95 ++ deployment/logging/stdout/nova-metadata.yaml | 34 +- deployment/logging/stdout/placement-api.yaml | 34 +- .../logrotate-crond-container-puppet.yaml | 29 +- deployment/manila/manila-api-container-puppet.yaml | 46 +- deployment/manila/manila-backend-powermax.yaml | 80 + deployment/manila/manila-backend-unity.yaml | 8 +- deployment/manila/manila-backend-vmax.yaml | 8 +- deployment/manila/manila-backend-vnx.yaml | 8 +- deployment/manila/manila-base.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 29 +- deployment/manila/manila-share-common.yaml | 4 +- .../manila/manila-share-container-puppet.yaml | 27 +- .../manila/manila-share-pacemaker-puppet.yaml | 36 +- .../memcached/memcached-container-puppet.yaml | 46 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 22 +- deployment/metrics/collectd-container-ansible.yaml | 22 +- deployment/metrics/collectd-container-puppet.yaml | 24 +- deployment/metrics/qdr-container-ansible.yaml | 15 +- deployment/metrics/qdr-container-puppet.yaml | 22 +- .../multipathd/multipathd-container-ansible.yaml | 23 +- .../neutron/derive_pci_passthrough_whitelist.py | 502 ++++-- deployment/neutron/kill-script | 2 +- .../neutron-agents-ib-config-container-puppet.yaml | 46 +- .../neutron/neutron-api-container-puppet.yaml | 47 +- deployment/neutron/neutron-base.yaml | 1 - .../neutron-bgpvpn-api-container-puppet.yaml | 16 +- .../neutron-bigswitch-agent-baremetal-puppet.yaml | 37 - .../neutron/neutron-dhcp-container-puppet.yaml | 35 +- .../neutron/neutron-l2gw-api-container-puppet.yaml | 18 +- .../neutron/neutron-l3-container-puppet.yaml | 30 +- .../neutron/neutron-metadata-container-puppet.yaml | 30 +- .../neutron-mlnx-agent-container-puppet.yaml | 52 +- .../neutron-ovs-agent-container-puppet.yaml | 95 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 8 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 16 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 16 +- .../neutron-plugin-ml2-container-puppet.yaml | 16 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 38 +- .../neutron-plugin-nsx-container-puppet.yaml | 18 +- deployment/neutron/neutron-plugin-nuage.yaml | 96 -- .../neutron/neutron-sfc-api-container-puppet.yaml | 18 +- .../neutron-sriov-agent-container-puppet.yaml | 19 +- deployment/nova/nova-api-container-puppet.yaml | 89 +- deployment/nova/nova-az-config.yaml | 23 +- deployment/nova/nova-base-puppet.yaml | 106 +- .../nova/nova-compute-common-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 56 +- .../nova/nova-conductor-container-puppet.yaml | 30 +- deployment/nova/nova-ironic-container-puppet.yaml | 32 +- ...a-virt-common.yaml => nova-libvirt-common.yaml} | 22 +- .../nova/nova-libvirt-guests-container-puppet.yaml | 6 +- deployment/nova/nova-manager-container-puppet.yaml | 15 +- .../nova/nova-metadata-container-puppet.yaml | 25 +- .../nova-migration-target-container-puppet.yaml | 24 +- .../nova-modular-libvirt-container-puppet.yaml | 98 +- .../nova/nova-scheduler-container-puppet.yaml | 31 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 37 +- .../octavia/octavia-api-container-puppet.yaml | 82 +- deployment/octavia/octavia-base.yaml | 12 +- .../octavia/octavia-deployment-config.j2.yaml | 23 +- .../octavia-health-manager-container-puppet.yaml | 32 +- .../octavia-housekeeping-container-puppet.yaml | 26 +- .../octavia/octavia-worker-container-puppet.yaml | 33 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 16 +- .../ovn/ovn-controller-container-puppet.yaml | 233 ++- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 30 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 47 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 49 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 28 +- .../pacemaker/clustercheck-container-puppet.yaml | 22 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 25 +- .../pacemaker-remote-baremetal-puppet.yaml | 6 +- .../placement/placement-api-container-puppet.yaml | 32 +- deployment/podman/podman-baremetal-ansible.yaml | 22 + deployment/qdr/qdrouterd-container-puppet.yaml | 22 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 38 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 24 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 51 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 51 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 24 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 51 +- deployment/snmp/snmp-baremetal-puppet.yaml | 5 + deployment/sshd/sshd-baremetal-ansible.yaml | 6 +- deployment/sshd/sshd-baremetal-puppet.yaml | 2 +- .../external-swift-proxy-baremetal-puppet.yaml | 2 + deployment/swift/swift-proxy-container-puppet.yaml | 42 +- .../swift/swift-ringbuilder-container-puppet.yaml | 18 +- .../swift/swift-storage-container-puppet.yaml | 155 +- deployment/timesync/chrony-baremetal-ansible.yaml | 6 +- .../tripleo-packages-baremetal-puppet.yaml | 33 +- deployment/unbound/unbound-container-ansible.yaml | 39 +- deployment/undercloud/minion-rabbitmq-puppet.yaml | 65 - deployment/undercloud/undercloud-upgrade.yaml | 41 +- environments/cinder-dellemc-vmax-iscsi-config.yaml | 12 - environments/cinder-dellemc-vxflexos-config.yaml | 39 - environments/cinder-pure-config.yaml | 3 + environments/cinder-scaleio-config.yaml | 39 - ...ontainerized-control-plane-dellemc-scaleio.yaml | 35 - environments/deployed-network-environment.j2.yaml | 65 + environments/deployed-networks.yaml | 2 +- environments/disable-neutron.yaml | 1 - environments/docker-ha.yaml | 1 - environments/enable-designate.yaml | 15 +- environments/enable-secure-rbac.yaml | 1598 +++++++++----------- environments/external-ceph.yaml | 2 +- environments/fips.yaml | 9 + environments/ha-redis.yaml | 6 + environments/lifecycle/update-converge.yaml | 7 - environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-powermax-config.yaml | 20 + environments/net-multiple-nics-vlans.j2.yaml | 2 +- environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 9 +- environments/neutron-ml2-bigswitch.yaml | 31 - environments/neutron-ml2-mlnx-sdn.yaml | 3 +- environments/neutron-ovs-dvr.yaml | 13 +- environments/rhsm.yaml | 2 +- environments/services-baremetal/barbican.yaml | 3 + environments/services-baremetal/octavia.yaml | 2 +- environments/services/barbican.yaml | 3 + environments/services/designate.yaml | 20 + environments/services/frr.yaml | 4 + environments/services/neutron-ovn-dpdk.yaml | 3 + environments/services/neutron-ovn-sriov.yaml | 2 + environments/services/neutron-ovs-dpdk.yaml | 1 - environments/services/neutron-ovs-dvr.yaml | 6 +- environments/services/novajoin.yaml | 5 - environments/services/octavia.yaml | 2 +- .../services/undercloud-remove-novajoin.yaml | 4 - environments/ssl/tls-endpoints-public-dns.yaml | 1 - environments/ssl/tls-endpoints-public-ip.yaml | 1 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 - environments/undercloud-enable-nova.yaml | 6 - environments/undercloud.yaml | 14 +- environments/undercloud/undercloud-minion.yaml | 289 ---- .../update-from-keystone-admin-internal-api.yaml | 6 - .../krb-service-principals/role.role.j2.yaml | 22 +- .../post_deploy/undercloud_ctlplane_network.py | 73 +- firstboot/userdata_timesync.yaml | 1 + network/endpoints/endpoint_map.yaml | 384 ----- network/network.j2 | 8 +- network/ports/ovn_mac_addr_port.yaml | 4 - network_data.yaml | 3 +- network_data_dashboard.yaml | 3 +- network_data_ganesha.yaml | 3 +- network_data_routed.yaml | 3 +- network_data_subnets_routed.yaml | 3 +- overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 26 +- .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 52 - .../controller/neutron-ml2-bigswitch.yaml | 84 - puppet/role.role.j2.yaml | 21 +- ...pe-for-snmp-readonly-user-c90c9e5a12c92893.yaml | 6 + ...-boot-interface-parameter-f07c1fe24c7cb543.yaml | 8 + ...ironic-inspector-tls-port-4e59d0c2b2922f68.yaml | 5 + .../add-novamkisofscmd-param-6dbb64e4497a8ce6.yaml | 7 + .../add-octavia-tls-settings-7583df511c53b27a.yaml | 4 + .../add-rabbit-fips-option-ddf5a0d7e37d8e5d.yaml | 5 + .../notes/add_token_auth-fb9f0dfe8e70a4c1.yaml | 10 + ...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml | 4 + .../certificiate-validation-1b08ab8cf40b7cad.yaml | 11 + ...ge-keystone-admin-network-a29499018c323cea.yaml | 4 + ...arify-default-volume-type-c77e7a7ddafdf172.yaml | 12 + .../dellemc-driver-cleanup-4a1febdc51ec674c.yaml | 14 + ...te-MysqlIncreaseFileLimit-20548c5f7234d14c.yaml | 5 + ...precate-ironic-ip-version-27e24f03da6ddd59.yaml | 4 + ...gnate-enable-bind-logging-642e77541645519b.yaml | 6 + ...esignate-environment-file-bd08eef69758a996.yaml | 6 + .../notes/dpdk_driver_remove-76d61711c19cd099.yaml | 7 + ...e-secure-rbac-for-neutron-842bd41339a48f26.yaml | 8 + ..._secure_rbac_for_keystone-62685484ef589726.yaml | 9 + ...e_rbac_support_for_glance-167d53c491cd326c.yaml | 8 + ...-fs.aio-max.nr-on-compute-06447122b8e12c71.yaml | 7 + ...stone-notification-driver-0c71165430eb57ef.yaml | 7 + ...nova_api_show_host_status-f0dfaf4c2b0c536f.yaml | 19 + .../notes/power_state-457f12af30b9e341.yaml | 8 + ...ure_storage_update_params-4de801b1ed2d0744.yaml | 6 + ...redis_disabled_by_default-9992b2bae9b149cd.yaml | 7 + ...ute_service_check_for_ffu-19a91d20e146056c.yaml | 6 + ...move-networking-bigswitch-9ae5c280990284a2.yaml | 5 + .../notes/remove-novajoin-3ccef190c99c419b.yaml | 8 + .../remove-undercloud-minion-198ce8ea01c4e366.yaml | 7 + ...p-podman-purge-undercloud-a3a30b5ac3a0951b.yaml | 9 + ...ft-single-replica-cleanup-fdf72b9e462185c7.yaml | 6 + .../tripleo-kernel-hugepages-424c19a4b1579af8.yaml | 23 + .../notes/uefi-boot-mode-a8b1b416a0e9cdc4.yaml | 7 + .../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml | 9 + requirements.txt | 1 - roles/CephAll.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovIB.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/ComputeVdpa.yaml | 1 + roles/Controller.yaml | 5 +- roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 3 - roles/ControllerNovaStandalone.yaml | 26 +- roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 11 +- roles/ControllerStorageDashboard.yaml | 5 +- roles/ControllerStorageNfs.yaml | 4 +- roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephObject.yaml | 2 +- roles/Standalone.yaml | 4 +- roles/Undercloud.yaml | 35 - roles/UndercloudMinion.yaml | 33 - roles_data.yaml | 7 +- roles_data_undercloud.yaml | 36 +- sample-env-generator/enable-services.yaml | 29 - sample-env-generator/ssl.yaml | 5 - sample-env-generator/undercloud-minion.yaml | 284 ---- scripts/undercloud-upgrade-ephemeral-heat.py | 24 +- tools/convert_heat_nic_config_to_ansible_j2.py | 17 +- tools/convert_nic_config.py | 5 +- tools/convert_v1_net_data.py | 1 + tools/merge-new-params-nic-config-script.py | 5 +- tools/process-templates.py | 5 +- tools/yaml-validate.py | 99 +- tox.ini | 4 +- zuul.d/layout.yaml | 4 +- 377 files changed, 9015 insertions(+), 5122 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bda47437c..180423b34 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ Jinja2>=2.10 # BSD License (3 clause) -six>=1.10.0 # MIT

1 0

tripleo-common 16.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are chuffed to announce the release of: tripleo-common 16.4.0: A common library for TripleO workflows. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ For more details, please see below. 16.4.0 ^^^^^^ New Features * Split off Ceph related container images This change releases an update on the default tripleo_containers jinja template, splitting off the Ceph related container images. With this new approach pulling the ceph containers is optional, and can be avoided by setting the *ceph_images* boolean to False. e.g., passing something like the following: parameter_defaults: ContainerImagePrepare: - push_destination: true set: name_prefix: openstack- name_suffix: '' namespace: quay.io/tripleomaster neutron_driver: ovn rhel_containers: false tag: current-tripleo ceph_images: false ContainerImagePrepareDebug: true ContainerImageRegistryCredentials: {} avoid the ceph containers being pulled in the undercloud. To make this possible, a new jinja template processing approach has been introduced, and a template basedir parameter (required by the jinja loader) has been added to the BaseImageManager. Finallym, two more *ceph_* prefixed containers, required to deploy the Ceph Ingress daemon are added, and they are supposed to match the tripleo-heat- templates *OS::TripleO::Services::CephIngress* service. The Ingress daemon doesn't use the Ceph daemon container, hence *tripleo container image prepare* should be executed to pull the new container images/tags in the undercloud as made for the Ceph Dashboard and the regular Ceph image. Changes in tripleo-common 16.3.0..16.4.0 ---------------------------------------- d76e4435 Run the ovn-bgp-agent with user ovn-bgp instead of neutron 4a3cead9 Update prometheus and alertmanager containers 854cf9fa Bump Ceph container daemons to v6.0.7 60b48b2e Remove rhel specific packages for ironic-conductor e2bc5ddd Revert "Add ceph_spec library to tripleo-common" 1513e313 Export default location of password file 1a73f956 Remove tftp healthcheck from ironic-pxe image fc36d5a6 Mark Python 3.9 as supported runtime 80b294ba Ensure failures on the undercloud leads to a complete stop a65535ed ovn-bgp-agent image support 82a80c72 Auto-detect partition types for mounting more images 6f67c15f Mariadb: auth_ed25519 with FIPS crypto 77130ddc HA: do not rotate cluster passwords a5f84875 Move zuul jobs layout to centos9 only for master branch 08a8118f Split off Ceph related container images 01bb19a9 Don't install openstack-selinux in containers 096c6eee Add exception handler for node attributes 2cd1fbd8 Fix reference to undefined variables when heat-config times out b09fb3fe Reinstall centos-stream-release from centos repos a74fcf72 fixup if guard for tcib_release edc0199b Base container - Fix bash condition for rhel case fcbe594e Add exception handler for role networks dbc7916f Update how callbacks are injected within ansible 19647e57 Remove selinux-permissive from rhel8 image bf725978 Add configs for RHEL 9 image 8df691d0 Remove remove-machine-id element 38ecd5db Remove remaining reference to the six library Diffstat (except docs and test files) ------------------------------------- container-images/ceph.j2 | 55 ++++ .../container_image_prepare_defaults.yaml | 32 ++- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/tcib/base/base.yaml | 11 +- .../ironic-conductor/ironic-conductor.yaml | 4 - .../os/nova-base/nova-compute/nova-compute.yaml | 2 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 2 +- .../tcib/base/ovn-bgp-agent/ovn_bgp_agent.yaml | 8 + container-images/tripleo_containers.yaml | 20 +- container-images/tripleo_containers.yaml.j2 | 59 ++-- healthcheck/ironic-pxe | 5 +- healthcheck/ovn-bgp-agent | 12 + ...oud-hardened-images-uefi-python3-rt-kernel.yaml | 1 - .../overcloud-hardened-images-uefi-rhel9.yaml | 18 ++ image-yaml/overcloud-images-ceph-rhel9.yaml | 10 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel8.yaml | 1 - image-yaml/overcloud-images-rhel9.yaml | 22 ++ image-yaml/overcloud-realtime-compute-python3.yaml | 1 - ...split_off_ceph_containers-e1a66fa39076c2cf.yaml | 38 +++ scripts/tripleo-mount-image | 88 ++++-- setup.cfg | 1 + tripleo_common/constants.py | 37 +++ tripleo_common/image/base.py | 3 +- tripleo_common/image/kolla_builder.py | 22 +- tripleo_common/inventory.py | 16 +- tripleo_common/templates/deployments.yaml | 6 +- tripleo_common/utils/ansible.py | 2 +- tripleo_common/utils/ceph_spec.py | 303 --------------------- tripleo_common/utils/nodes.py | 7 + tripleo_common/utils/passwords.py | 31 +++ tripleo_common/utils/plan.py | 4 +- zuul.d/layout.yaml | 8 +- 39 files changed, 470 insertions(+), 431 deletions(-)

1 0

tripleo-upgrade 9.0.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are psyched to announce the release of: tripleo-upgrade 9.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 8.1.0..9.0.0 --------------------------------------- 13d7a4c Disable auto discovery 4958251 Make the network_data search more inclusive 2655889 Run control plane update first, next compute and cephstorage last 1bbaeef Fix ping_results_*.log file name 3ab719d Add the update of the OVN controllers before Update Run step. 305d9fb Ensure migrate all the VMs before upgrade the compute acea992 Move zuul jobs layout to centos9 only for master branch 9b2a321 Generate tripleo ansible inventory for Validation a90df48 Remove stein and ceph3 parameters for T to W. 95df601 Set ephemeral-heat option to true by default for Wallaby+ a315ac3 Fast and furious upgrade 55d408d Migrate jobs from CentOS 8 to CentOS 8 Stream d4bde4d Fix services stack export to respect overcloud stack name f272473 Set tripleo-upgrade to use ansible-core 521cfb9 Fixes readme file ad48924 Remove py2 compatibility 644885d [fix] remove condition of migration.timeout 33905d9 Update master for stable/wallaby 69bd654 Improve patch download 790d318 [FFWD upgrade] Adding support of live/cold migration with external workload 898db61 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- README.rst | 74 +++++++------- ansible-requirements.txt | 2 +- defaults/main.yml | 24 +++-- filter_plugins/tripleo_upgrade.py | 9 +- infrared_plugin/main.yml | 14 ++- infrared_plugin/plugin.spec | 11 +++ molecule/molecule-requirements.txt | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 6 +- setup.py | 1 + tasks/common/auxilary-facts.yaml | 4 +- tasks/common/configure_uc_containers.yml | 20 ---- tasks/common/load_roles_from_inventory.yaml | 11 ++- tasks/common/validation_group_run.yaml | 4 +- .../create-overcloud-ffu-hosts-scripts.yaml | 2 +- .../create-overcloud-ffu-scripts.yaml | 108 ++++++++++++--------- tasks/fast-forward-upgrade/main.yml | 7 ++ .../overcloud_upgrade_fast_and_furious.yaml | 21 ++++ .../overcloud_upgrade_hosts.yaml | 2 +- tasks/update/create-overcloud-update-scripts.yaml | 7 ++ tasks/update/main.yml | 11 +++ tasks/upgrade/overcloud_upgrade_converge.yml | 11 --- .../overcloud_system_upgrade.sh.j2 | 43 ++++++++ .../overcloud_upgrade_run.sh.j2 | 5 +- templates/l3_agent_start_ping.sh.j2 | 2 +- templates/node_upgrade_pre.sh.j2 | 6 +- templates/overcloud_update_prepare.sh.j2 | 3 - templates/overcloud_upgrade_converge.sh.j2 | 3 - templates/overcloud_upgrade_prepare.sh.j2 | 3 - templates/ovn-external-update.sh.j2 | 64 ++++++++++++ templates/workarounds.sh.j2 | 7 +- zuul.d/layout.yaml | 15 +-- 33 files changed, 337 insertions(+), 172 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index a1b6838..f5398ac 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -5 +5 @@ -ansible +ansible-core<2.12

1 0

tripleo-operator-ansible 0.8.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are glad to announce the release of: tripleo-operator-ansible 0.8.0: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.7.1..0.8.0 ------------------------------------------------ fbcd961 Add tripleo_ceph_deploy role 253618d Add tripleo_ceph_user role 917e0a0 Add tripleo_ceph_spec role 63f0ba7 Add --reproduce-command in UC commands. 20af773 Move zuul jobs layout to centos9 only for master branch 1d330c9 Add tripleo_upgrade role. ade61b2 Bump ansible-lint to 5.3.2 42f5d4f Add overcloud deploy disable-protected-resource-types option 36778dd Generate node unprovision script if wanted 98cc0ab Add default stack to some roles e9dfa53 Added Ephemeral Heat CLI in overcloud_deploy role fae3c7d Modified shell_args plugin for nested lists. da44a72 Overcloud post-installation playbook Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 7 + .pre-commit-config.yaml | 17 +- playbooks/overcloud-post-installation.yml | 93 +++++ plugins/filter/shell_args.py | 20 +- roles/tripleo_ceph_deploy/README.md | 91 +++++ roles/tripleo_ceph_deploy/defaults/main.yml | 41 ++ roles/tripleo_ceph_deploy/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 30 ++ .../molecule/default/molecule.yml | 19 + .../molecule/default/prepare.yml | 8 + roles/tripleo_ceph_deploy/tasks/main.yml | 102 +++++ roles/tripleo_ceph_spec/README.md | 79 ++++ roles/tripleo_ceph_spec/defaults/main.yml | 19 + roles/tripleo_ceph_spec/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 28 ++ .../molecule/default/molecule.yml | 19 + .../tripleo_ceph_spec/molecule/default/prepare.yml | 8 + roles/tripleo_ceph_spec/tasks/main.yml | 64 ++++ roles/tripleo_ceph_user/README.md | 101 +++++ roles/tripleo_ceph_user/defaults/main.yml | 16 + roles/tripleo_ceph_user/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 25 ++ .../molecule/default/molecule.yml | 19 + .../tripleo_ceph_user/molecule/default/prepare.yml | 8 + roles/tripleo_ceph_user/tasks/main.yml | 58 +++ roles/tripleo_deploy/README.md | 2 +- roles/tripleo_overcloud_deploy/README.md | 6 + roles/tripleo_overcloud_deploy/defaults/main.yml | 6 + .../molecule/default/converge.yml | 84 +++++ roles/tripleo_overcloud_deploy/tasks/main.yml | 9 + .../README.md | 2 +- .../defaults/main.yml | 2 +- .../molecule/default/converge.yml | 4 +- .../defaults/main.yml | 2 +- roles/tripleo_overcloud_node_provision/README.md | 2 +- .../defaults/main.yml | 2 +- .../molecule/default/converge.yml | 10 +- roles/tripleo_overcloud_node_unprovision/README.md | 4 +- .../defaults/main.yml | 4 +- .../molecule/default/converge.yml | 5 +- .../tasks/main.yml | 12 +- roles/tripleo_undercloud_install/README.md | 1 + roles/tripleo_undercloud_install/defaults/main.yml | 1 + .../molecule/default/converge.yml | 11 + roles/tripleo_undercloud_install/tasks/main.yml | 1 + roles/tripleo_undercloud_upgrade/README.md | 1 + roles/tripleo_undercloud_upgrade/defaults/main.yml | 1 + .../molecule/default/converge.yml | 11 + roles/tripleo_undercloud_upgrade/tasks/main.yml | 1 + roles/tripleo_upgrade/README.md | 85 +++++ roles/tripleo_upgrade/defaults/main.yml | 43 +++ roles/tripleo_upgrade/meta/main.yml | 44 +++ .../tripleo_upgrade/molecule/default/converge.yml | 420 +++++++++++++++++++++ .../tripleo_upgrade/molecule/default/molecule.yml | 19 + roles/tripleo_upgrade/molecule/default/prepare.yml | 8 + roles/tripleo_upgrade/tasks/main.yml | 107 ++++++ zuul.d/layout.yaml | 19 +- zuul.d/molecule.yaml | 66 ++++ 61 files changed, 1983 insertions(+), 36 deletions(-)

1 0

tripleo-puppet-elements 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: tripleo-puppet-elements 15.2.0: Puppet building rules for OpenStack images. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 15.1.0..15.2.0 ------------------------------------------------- fce5d94 Update overcloud-base element pkg-map 29988ab Update overcloud-agent element pkg-map a60be92 Revert "Add remove-machine-id element" 524f328 Use Python3 yoga unit tests 1e3b5a1 Migrate from testr to stestr d11a705 Only install required/supported fence agents 1a83d5a Drop ansible-playbook-3 symlink Diffstat (except docs and test files) ------------------------------------- .gitignore | 15 +++++++++++--- .stestr.conf | 3 +++ .testr.conf | 8 -------- elements/overcloud-agent/pkg-map | 24 +--------------------- .../post-install.d/51-ansible-symlink | 14 ------------- .../install.d/package-installs-overcloud-base | 1 - elements/overcloud-base/pkg-map | 20 ------------------ .../pre-install.d/01-install-yum-priorities | 7 ------- elements/overcloud-controller/pkg-map | 4 ++-- elements/remove-machine-id/README.md | 9 -------- .../post-install.d/70-remove-machine-id | 10 --------- test-requirements.txt | 2 +- tox.ini | 3 +-- zuul.d/layout.yaml | 2 +- 14 files changed, 21 insertions(+), 101 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index abd86cf..837159f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ oslotest -testrepository>=0.0.18 +stestr>=2.0.0 # Apache-2.0

1 0

puppet-pacemaker 1.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are pleased to announce the release of: puppet-pacemaker 1.4.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.3.0..1.4.0 ---------------------------------------- 91eb91a Bump metadata 1.4.0 for tripleo release e0fa810 Do not install fence-agent packages in base manifests 34bf907 Fix duplicate declaration of package resource 9f2e6f1 Only install required/supported fence agents e3df586 Fix idempotency regex during scale-up check d3a119e Make sure we wait for the cluster before setting resource_default_op c08236d Replace the deprecated is_ipv6_address function Diffstat (except docs and test files) ------------------------------------- .fixtures.yml | 4 ++-- .zuul.yaml | 7 +++---- bindep.txt | 5 ++++- manifests/corosync.pp | 7 ++++--- manifests/install.pp | 4 ++-- manifests/new/params.pp | 2 +- manifests/params.pp | 6 +++--- manifests/remote.pp | 2 +- manifests/resource/ip.pp | 4 ++-- manifests/stonith/fence_apc.pp | 2 +- manifests/stonith/fence_apc_snmp.pp | 2 +- manifests/stonith/fence_bladecenter.pp | 2 +- manifests/stonith/fence_brocade.pp | 2 +- manifests/stonith/fence_cisco_mds.pp | 2 +- manifests/stonith/fence_cisco_ucs.pp | 2 +- manifests/stonith/fence_compute.pp | 2 +- manifests/stonith/fence_drac5.pp | 2 +- manifests/stonith/fence_eaton_snmp.pp | 2 +- manifests/stonith/fence_eps.pp | 2 +- manifests/stonith/fence_hpblade.pp | 2 +- manifests/stonith/fence_ibmblade.pp | 2 +- manifests/stonith/fence_idrac.pp | 2 +- manifests/stonith/fence_ifmib.pp | 2 +- manifests/stonith/fence_ilo.pp | 2 +- manifests/stonith/fence_ilo2.pp | 2 +- manifests/stonith/fence_ilo3.pp | 2 +- manifests/stonith/fence_ilo4.pp | 2 +- manifests/stonith/fence_ilo_mp.pp | 2 +- manifests/stonith/fence_imm.pp | 2 +- manifests/stonith/fence_intelmodular.pp | 2 +- manifests/stonith/fence_ipdu.pp | 2 +- manifests/stonith/fence_ipmilan.pp | 2 +- manifests/stonith/fence_kdump.pp | 2 +- manifests/stonith/fence_redfish.pp | 2 +- manifests/stonith/fence_rhevm.pp | 2 +- manifests/stonith/fence_rsb.pp | 2 +- manifests/stonith/fence_scsi.pp | 2 +- manifests/stonith/fence_virt.pp | 2 +- manifests/stonith/fence_vmware_soap.pp | 2 +- manifests/stonith/fence_wti.pp | 2 +- manifests/stonith/fence_xvm.pp | 2 +- metadata.json | 2 +- spec/classes/pacemaker_install_spec.rb | 2 +- spec/unit/puppet/provider/cib-orig.xml | 6 +++--- spec/unit/puppet/provider/pcmk_common_spec.rb | 4 ++-- 45 files changed, 61 insertions(+), 58 deletions(-)

1 0

ansible-role-chrony 1.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: ansible-role-chrony 1.2.0: ansible-role-chrony - Ansible chrony role The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony 1.1.0..1.2.0 ------------------------------------------- 0dd2ea0 Add centos9 converage Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 6 ++++++ 1 file changed, 6 insertions(+)

1 0

ansible-role-redhat-subscription 1.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We contentedly announce the release of: ansible-role-redhat-subscription 1.2.0: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.1.5..1.2.0 -------------------------------------------------------- 0f7ac2a Adding option to disable container validation 7369c0b Fixing https://github.com/ansible-collections/community.general/issues/715 ae0a361 Revert "addressing https://github.com/ansible-collections/community.general/issues/715" 66a322b addressing https://github.com/ansible-collections/community.general/issues/715 31b0c74 Fix URL version for Satellite 6.10 effac4c Correct the tox option for skipping sdist generation Diffstat (except docs and test files) ------------------------------------- tasks/portal.yml | 2 ++ tasks/register.yml | 5 +++++ tasks/satellite.yml | 25 ++++++++++++++++++++++++- tasks/unregister.yml | 2 ++ tox.ini | 2 +- vars/main.yml | 1 + 6 files changed, 35 insertions(+), 2 deletions(-)

1 0

os-net-config 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are stoked to announce the release of: os-net-config 15.2.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.1.0..15.2.0 --------------------------------------- 8fae2de Revert "Updating sriov_config.service to run before driverctl.slice and network-pre" 404bafa For linux bond over VFs, disable spoofcheck by default 7c7b326 Adding steering_mode config to sriov_pf object 154c9c8 Use Python3 yoga unit tests 5945c73 ovs-dpdk: Add support for n_rxq_desc and n_txq_desc 99a9aa0 Fix log message related to pkey_id 44eab22 The default max/min tx rates shall not halt deployment 3ee0c46 Notify the need for overriding the default driver for Mellanox NIC b30304d vDPA support for CentOS9 ca522c2 Moving is_mellanox_interface to common aa4ba26 Adding logging to file e5c50e8 Add ifcfg-* scripts on boot for Mellanox NIC interface 78089ca Change the pkey_id type from string to int Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/ib_child_interface.json | 2 +- etc/os-net-config/samples/ib_child_interface.yaml | 2 +- etc/os-net-config/samples/ovs_dpdk.json | 2 + etc/os-net-config/samples/ovs_dpdk.yaml | 5 + etc/os-net-config/samples/sriov_pf.json | 4 +- etc/os-net-config/samples/sriov_pf.yaml | 6 +- etc/os-net-config/samples/sriov_pf_switchdev.json | 3 +- etc/os-net-config/samples/sriov_pf_switchdev.yaml | 3 + os_net_config/cli.py | 67 ++-- os_net_config/common.py | 217 ++++++++++++ os_net_config/impl_eni.py | 5 +- os_net_config/impl_ifcfg.py | 67 +++- os_net_config/objects.py | 62 ++-- os_net_config/schema.yaml | 17 +- os_net_config/sriov_config.py | 389 +++++++++++++--------- os_net_config/utils.py | 157 +++------ zuul.d/layout.yaml | 2 +- 23 files changed, 1135 insertions(+), 518 deletions(-)

1 0

os-refresh-config 13.1.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are glad to announce the release of: os-refresh-config 13.1.0: Refresh system configuration The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 13.0.1..13.1.0 ------------------------------------------- 5bb536c Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

ansible-role-collect-logs 1.5.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We eagerly announce the release of: ansible-role-collect-logs 1.5.0: ansible-role-collect-logs - An Ansible role for aggregating logs from different nodes. The source is available from: https://opendev.org/openstack/ansible-role-collect-logs Download the package from: https://tarballs.openstack.org/ansible-role-collect-logs/ For more details, please see below. Changes in ansible-role-collect-logs 1.4.0..1.5.0 ------------------------------------------------- ed6b3e3 Disable auto discovery as a workaround b5dd48c Drop deprecated non-zuul-based reproducer 3ce9bdd Also collect container-config-scripts d8fdd04 Fix slow timings regex matcher ae4d1c7 Add ipa command log collection 1809de9 Fix ansible-lint failure 0873c32 Add artcl_find_* as infrared arguments edea40c Add chrony status capture 0913c46 Use podman driver with molecule 2559de1 Replace ansible requirement by ansible-core ce53850 Also collect requests/calls took longer than 30s 4a4fba4 Collect pcs CPU throttle events to logstash 529f0ee Also collect rabbitmq report and cookies 952eb55 Increase timeout for container collect logs 3cb42de Update sanity ignore file 07cee7b Collect Nova instances console logs a1138ea Remove the ternary condition for sova_config 647c202 Fix molecule job e8058a1 Remove the "no service" option 840cdd7 Removes a verification step in sova molecule test f098644 Add new script for SELinux consolidation Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- infrared_plugin/plugin.spec | 12 ++++ requirements.txt | 3 +- roles/collect_logs/defaults/main.yml | 55 +++++++++++++- roles/collect_logs/files/consolidate-avc.pl | 44 ++++++++++++ roles/collect_logs/molecule/default/molecule.yml | 4 +- roles/collect_logs/molecule/infrared/molecule.yml | 4 +- roles/collect_logs/molecule/sova/converge.yml | 2 + roles/collect_logs/molecule/sova/prepare.yml | 88 +++++++++++++++++++++++ roles/collect_logs/molecule/sova/verify.yml | 6 +- roles/collect_logs/tasks/collect.yml | 8 ++- roles/collect_logs/tasks/collect/container.yml | 2 +- roles/collect_logs/tasks/publish.yml | 5 -- roles/collect_logs/tasks/sova.yml | 40 +++++++---- setup.py | 2 +- tox.ini | 7 +- zuul.d/layout.yaml | 10 ++- zuul.d/playbooks/pre.yml | 25 +++++++ 21 files changed, 284 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e0375c0..655bb21 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,2 +2 @@ pbr>=1.6 -# Do not remove 2.10, ansible-test and tox-ansible require it -ansible>=2.5,<2.11 +ansible-core>=2.11,<2.12

1 0

ansible-role-tripleo-modify-image 1.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: ansible-role-tripleo-modify-image 1.4.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.3.0..1.4.0 --------------------------------------------------------- 8360ef2 Move zuul jobs layout to centos9 only for master branch af582e0 Move zuul jobs layout to centos9 only for master branch Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)

1 0

tempest 30.1.0 (yoga)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We high-spiritedly announce the release of: tempest 30.1.0: OpenStack Integration Testing This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. Changes in tempest 30.0.0..30.1.0 --------------------------------- 3b0ccb0bd Allow rulesets modification in secgroups a91c6dbc0 Make test_tagged_attachment wait for SSHABLE 8e08a77ea Use server hostname when creating secure websocket dc9a93b6a Use wrap_socket from ssl.SSLContext instead of ssl e74b7e2cf Add Tempest gate job for stable/yoga 7304e3ac8 Move ServerStableDeviceRescueTest to wait for SSH-able server 6fa213cc0 Make rescue, volume attachment compute tests to use SSH-able server 8c6d0cf52 Move ssh|ping-able server logic into separate method a81496179 Fix compute_unified decoration 9daf9bb36 Add release notes page for version 30.0.0 a7b88b5fd Add release notes pages for 29.1.0 and 29.2.0 6853f8da0 Switch to the master constraint in tox.ini 76909efbe API for list group types by parameter sort/public 7138e35b8 Fix inconsistent type of default value Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 3 + releasenotes/source/v29.1.0.rst | 5 + releasenotes/source/v29.2.0.rst | 5 + releasenotes/source/v30.0.0.rst | 5 + tempest/api/compute/admin/test_volume.py | 12 +- tempest/api/compute/servers/test_device_tagging.py | 2 +- tempest/api/compute/servers/test_server_rescue.py | 99 +++++++++++----- .../compute/servers/test_server_rescue_negative.py | 36 ++++-- tempest/api/volume/admin/test_group_types.py | 36 ++++++ tempest/common/compute.py | 129 +++++++++++++-------- tempest/config.py | 2 +- tempest/scenario/manager.py | 39 ++++--- tempest/scenario/test_compute_unified_limits.py | 12 +- tox.ini | 10 +- zuul.d/project.yaml | 5 + zuul.d/stable-jobs.yaml | 5 + zuul.d/tempest-specific.yaml | 2 +- 17 files changed, 281 insertions(+), 126 deletions(-)

1 0

ovsdbapp 1.16.0 (zed)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We contentedly announce the release of: ovsdbapp 1.16.0: A library for creating OVSDB applications This release is part of the zed release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.15.1..1.16.0 ---------------------------------- be6622b Revert "Add an active wait in the "Backend.lookup"" 06207b3 Fix broken behavior after recent OVS update 7d1f318 github no longer accepts git:// connections dd66e27 Update master for stable/yoga b45267f remove unicode from code Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/__init__.py | 48 ++--------------- ovsdbapp/backend/ovs_idl/connection.py | 18 +++++-- .../functional/backend/ovs_idl/test_backend.py | 63 ---------------------- .../functional/backend/ovs_idl/test_connection.py | 3 ++ releasenotes/source/conf.py | 8 +-- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 +++ tools/setup-ovs.sh | 4 +- 9 files changed, 39 insertions(+), 120 deletions(-)

1 0

ec2-api 14.0.1 (yoga)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are glad to announce the release of: ec2-api 14.0.1: OpenStack Ec2api Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ec2-api Download the package from: https://pypi.org/project/ec2-api Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2-api 13.0.0.0rc1..14.0.1 -------------------------------------- 8c83fc4 Update TOX_CONSTRAINTS_FILE for stable/yoga 418e537 Update .gitreview for stable/yoga c1eaa49 Re-add python 3.6/3.7 in classifier dee854f Updating python testing as per Yoga testing runtime 65aa616 Include oslo.cache options to the generated configuration file 994d02b Changed minversion in tox to 3.18.0 aa02567 Use py3 as the default runtime for tox 3846493 Use TOX_CONSTRAINTS_FILE f9e7528 fix UT for cinderclient ab73c93 Add Python3 yoga unit tests 722b7b0 Run TripleO jobs on CentOS8 instead of CentOS7 a83177a Dep's should be restricted by upper-constraints Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 1 + .zuul.yaml | 6 ++---- README.rst | 3 ++- devstack/plugin.sh | 3 ++- ec2api/api/cloud.py | 14 ++++++++++---- ec2api/api/image.py | 4 ++-- ec2api/api/network_interface.py | 18 +++++++++++++++++- ec2api/api/subnet.py | 9 +++++---- ec2api/api/volume.py | 17 ++++++++++++++++- ec2api/context.py | 2 +- ec2api/metadata/api.py | 6 ++++++ etc/ec2api/ec2api-config-generator.conf | 1 + setup.cfg | 1 + tox.ini | 14 +++++++------- 18 files changed, 80 insertions(+), 32 deletions(-)

1 0

openstack-cyborg 5.0.1 (victoria)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are tickled pink to announce the release of: openstack-cyborg 5.0.1: Distributed Acceleration Management as a Service This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-cyborg Download the package from: https://tarballs.openstack.org/cyborg/ For more details, please see below. Changes in openstack-cyborg 5.0.0..5.0.1 ---------------------------------------- b1d64f3 Fill the msg of exception 72295ec Resolve mysql conflict message 01e8752 Using pop method to avoid incompatible data type cf3a682 Remove personal name in the docs 8dcd6ba tools: Allow check-cherry-picks.sh to be disabled by an env var 71abe68 improve pep8 check logic 07a5b14 Add fast8 check for cybrog 1e9d874 Trival: Fix the key error in log msg 722228b Add packages requirement restricted of upper-constraints Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/arqs.inc | 4 +- cyborg/common/nova_client.py | 2 +- cyborg/db/sqlalchemy/api.py | 7 +++- cyborg/objects/ext_arq.py | 4 +- cyborg/objects/extarq/ext_arq_job.py | 5 ++- ...=> accelerator_requests-after-update-resp.json} | 29 +------------ .../accelerator_requests-before-update-resp.json | 21 ++++++++++ tools/check-cherry-picks.sh | 47 ++++++++++++++++++++++ tools/flake8wrap.sh | 27 +++++++++++++ tox.ini | 28 +++++++++++-- 10 files changed, 134 insertions(+), 40 deletions(-)

1 0

puppet-tempest 18.5.0 (wallaby)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We high-spiritedly announce the release of: puppet-tempest 18.5.0: Puppet module for OpenStack Tempest This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 18.5.0 ^^^^^^ New Features * Support for the "[validation] ssh_key_type" parameter has been added. Changes in puppet-tempest 18.4.0..18.5.0 ---------------------------------------- 85c28a0 Prepare new release for Wallaby release 02ae157 Add support for [validation] ssh_key_type bb8b326 Set fixture paths for unit tests 958c05a Update TOX_CONSTRAINTS_FILE for stable/wallaby a36c1b9 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/init.pp | 4 ++++ metadata.json | 2 +- releasenotes/notes/ssh_key_type-43cd9a377a147c5b.yaml | 4 ++++ spec/classes/tempest_init_spec.rb | 1 + spec/spec_helper.rb | 5 +++++ tox.ini | 2 +- 7 files changed, 17 insertions(+), 2 deletions(-)

1 0

puppet-tempest 19.5.0 (xena)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are thrilled to announce the release of: puppet-tempest 19.5.0: Puppet module for OpenStack Tempest This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Support for the "[validation] ssh_key_type" parameter has been added. Bug Fixes ********* * The "[image-feature-enabled] api_v1" parameter is now set to "False" by default. Changes in puppet-tempest 19.4.0..19.5.0 ---------------------------------------- 0ad0704 Prepare new release for Xena release 7d8cace Add support for [validation] ssh_key_type 02df2fc Glance: Disable api v1 testing by default bdf94e9 Update TOX_CONSTRAINTS_FILE for stable/xena 252d664 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/init.pp | 8 ++++++-- metadata.json | 2 +- releasenotes/notes/disable-glance-api-v1-010c242db47cfabb.yaml | 5 +++++ releasenotes/notes/ssh_key_type-43cd9a377a147c5b.yaml | 4 ++++ spec/classes/tempest_init_spec.rb | 3 ++- tox.ini | 2 +- 7 files changed, 20 insertions(+), 5 deletions(-)

1 0

kolla-ansible 14.0.0.0rc1 (yoga)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

Hello everyone, A new release candidate for kolla-ansible for the end of the Yoga cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Yoga release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/yoga release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/yoga Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *yoga-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kolla 14.0.0.0rc1 (yoga)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

Hello everyone, A new release candidate for kolla for the end of the Yoga cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Yoga release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/yoga release branch at: https://opendev.org/openstack/kolla/src/branch/stable/yoga Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *yoga-rc-potential* to bring it to the kolla release crew's attention.

1 0

designate 11.0.2 (victoria)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

We are overjoyed to announce the release of: designate 11.0.2: DNS as a Service This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. 11.0.2 ^^^^^^ Bug Fixes * Fixed an issue that caused the recordset_records quota to not be enforced. * Fixes bug 1934252 which ignored invalid denylist patterns. The fix entailed checking the pattern string via regular expression compiler and testing for zero length. Previously you could create blacklist/denylist using string that cannot be used either as a regex or as a zone name, for example: patterns = ['', "'#(*&^%$%$#@$']" In addition, the server will return a 400 BadRequest response to an invalid pattern. (https://bugs.launchpad.net/designate/+bug/1934252) Changes in designate 11.0.1..11.0.2 ----------------------------------- eee0fcbe Checks for invalid denylist regex patterns 81eedab5 Make grenade non-voting for stable/victoria 6d1479a8 Fix recordset_records quota enforcement Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- designate/central/service.py | 8 +- designate/objects/blacklist.py | 4 +- designate/objects/fields.py | 22 +++++ designate/quota/base.py | 2 +- ...x-recordset-records-quota-76ed3095dd2afbbe.yaml | 4 + ...atterns-not-being-checked-ec1f1316ccc6cb1d.yaml | 16 ++++ 11 files changed, 209 insertions(+), 18 deletions(-)

1 0

puppet-sahara 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are amped to announce the release of: puppet-sahara 20.3.0: Puppet module for OpenStack Sahara This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 20.2.0..20.3.0 --------------------------------------- 9c20c3d setuptools: Disable auto discovery aa7c24e Prepare Yoga RC1 4a4a8c6 remove unicode literal from code 67d9275 Deprecate usage of authtoken parameters in providers Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/sahara.rb | 1 + metadata.json | 8 ++++---- .../provider-deprecate-at-params-8b0a649a3b201804.yaml | 12 ++++++++++++ releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 5 files changed, 25 insertions(+), 11 deletions(-)

1 0

puppet-keystone 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are overjoyed to announce the release of: puppet-keystone 20.3.0: Puppet module for OpenStack Keystone This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 20.3.0 ^^^^^^ Deprecation Notes ***************** * The "keystone::catalog_type" parameter has been deprecated. Use the "catalog_driver" parameter instead. * The "keystone_puppet_config" resource type has been deprecated and will be removed in a future release. Bug Fixes ********* * Now the "keystone::ldap" class enables connection pools for LDAP access by default. Changes in puppet-keystone 20.2.0..20.3.0 ----------------------------------------- 802fd69 setuptools: Disable auto discovery 20bd1b6 keystone::ldap: Test default values 2473f34 keystone::ldap: Remove redundant defaults 03c52c3 keystone::ldap: Use $::os_service_default instead of undef 5f35ea8 Fix outdated default of [ldap] use(_auth)_pool c2525c6 Ensure inet6: formatting for a comma-separated list string b8bc0eb Prepare Yoga RC1 31e6476 remove unicode literal from code cd9f931 Deprecate the catalog_type parameter b7396be Replace removed keystone::database_connection c140a44 Use system scope credentials to request keystone Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- examples/apache_dropin.pp | 10 +- examples/apache_with_paths.pp | 11 +- examples/k2k_sp_shib.pp | 11 +- examples/ldap_backend.pp | 5 +- examples/v3_basic.pp | 8 +- examples/v3_domain_configuration.pp | 4 +- lib/puppet/provider/keystone.rb | 117 ++--------- lib/puppet/provider/keystone_domain/openstack.rb | 10 +- lib/puppet/provider/keystone_endpoint/openstack.rb | 15 +- .../keystone_identity_provider/openstack.rb | 20 +- lib/puppet/provider/keystone_role/openstack.rb | 6 +- lib/puppet/provider/keystone_service/openstack.rb | 8 +- lib/puppet/provider/keystone_tenant/openstack.rb | 8 +- lib/puppet/provider/keystone_user/openstack.rb | 8 +- .../provider/keystone_user_role/openstack.rb | 10 +- lib/puppet/type/keystone_puppet_config.rb | 2 + manifests/bootstrap.pp | 46 +++-- manifests/init.pp | 23 ++- manifests/ldap.pp | 201 +++++++++---------- manifests/resource/authtoken.pp | 7 +- metadata.json | 6 +- .../notes/bug-1966597-1e6eb4f2911dbe23.yaml | 5 + .../deprecate-catalog_type-a6c91d151f7d605b.yaml | 5 + .../provider-system-scope-15d21fb50a8432f8.yaml | 23 +++ releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/keystone_bootstrap_spec.rb | 71 +++++-- spec/classes/keystone_init_spec.rb | 2 +- spec/classes/keystone_ldap_spec.rb | 215 +++++++++++++++------ spec/defines/keystone_resource_authtoken_spec.rb | 39 +++- spec/spec_helper.rb | 3 - .../provider/keystone_domain/openstack_spec.rb | 4 +- .../provider/keystone_endpoint/openstack_spec.rb | 2 +- .../keystone_identity_provider/openstack_spec.rb | 2 +- spec/unit/provider/keystone_role/openstack_spec.rb | 2 +- .../provider/keystone_service/openstack_spec.rb | 2 +- spec/unit/provider/keystone_spec.rb | 14 +- .../provider/keystone_tenant/openstack_spec.rb | 2 +- spec/unit/provider/keystone_user/openstack_spec.rb | 2 +- .../provider/keystone_user_role/openstack_spec.rb | 2 +- 41 files changed, 538 insertions(+), 410 deletions(-)

1 0

puppet-octavia 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are excited to announce the release of: puppet-octavia 20.3.0: Puppet module for OpenStack Octavia This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The "octavia::certificates" class now supports the following parameters. * "barbican_auth" * "service_name" * "endpoint" * The "octavia::api::provider_drivers" parameter now supports array or hash value, and the given value is conveted to correctly formatted string when being put into octavia.conf. * The new "octavia::controller::default_connection_limit" parameter has been added. * The new "octavia::service_auth::system_scope" parameter has been added. * The new "octavia::task_flow" class has been added. This class manages parameters in the "task_flow" section, which are required to use the amphora v2 driver. * The "octavia::db::mysql" class and the "octavia::db::postgresql" class now support creating a separate database for taskflow persistence. * The "octavia::db::sync_persistence" class has been added. This class invokes the command to initialize the taskflow persistence database. Deprecation Notes ***************** * The "octavia::health_manager::workers" parameter has been deprecated. Use the "health_update_threads" parameter and the "stats_update_threads" parameter instead. * The "octavia::api::provider_drivers" parameter has been deprecated in favor of the new "octavia::api::enabled_provider_drivers" parameter. Changes in puppet-octavia 20.2.0..20.3.0 ---------------------------------------- 1dd62c1 setuptools: Disable auto discovery 753b692 Support more [certificates] options c61f54f Prepare Yoga RC1 9c24dbc Add support for [haproxy_amphora] default_connection_limit c095e40 remove unicode literal from code be91d62 Globally support system scope credentials 2b9f2a0 Add parameters to configure amphorav2 driver 2b9282b Use consistent name for enabled_provider_drivers 270d33d Accept array or hash for enable_provider_drivers cffdaec [health_manager] Allow tuning individual threads Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 26 ++++- manifests/certificates.pp | 18 ++++ manifests/controller.pp | 6 ++ manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/health_manager.pp | 32 +++++-- manifests/service_auth.pp | 30 ++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 10 +- .../notes/certificates-opts-4913f5eb2ecfca0c.yaml | 8 ++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ .../default_connection_limit-4006e77c67997e01.yaml | 5 + ...ate-health_manage-workers-e7fa2378afed538d.yaml | 6 ++ .../enable_provider_drivers-db3b1fb5f07c4140.yaml | 5 + .../notes/system_scope-all-0895d770ca1afffb.yaml | 4 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ releasenotes/source/conf.py | 14 +-- setup.py | 1 + spec/classes/octavia_api_spec.rb | 48 +++++++++- spec/classes/octavia_certificates_spec.rb | 9 ++ spec/classes/octavia_controller_spec.rb | 3 + spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_health_manager_spec.rb | 11 ++- spec/classes/octavia_service_auth_spec.rb | 15 +++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ 30 files changed, 622 insertions(+), 56 deletions(-)

1 0

puppet-qdr 9.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are gleeful to announce the release of: puppet-qdr 9.3.0 This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-qdr Download the package from: https://tarballs.openstack.org/puppet-qdr/ Please report issues through: https://bugs.launchpad.net/puppet-qdr/+bugs For more details, please see below. Changes in puppet-qdr 9.2.0..9.3.0 ---------------------------------- 9cfa6b5 Prepare Yoga RC1 72feaf5 remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- releasenotes/source/conf.py | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-)

1 0

puppet-watcher 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are pumped to announce the release of: puppet-watcher 20.3.0: Puppet module for OpenStack Watcher This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The new "watcher::cache" class, to manage parameters of the oslo.cache library, has been added. * The new "watcher::watcher_clients_auth::system_scope" parameter has been added. * The new "watcher::watcher_clients_auth" class has been added. Upgrade Notes ************* * The "watcher::<service>_client_api_version" parameters have been removed. Deprecation Notes ***************** * The "watcher::api::watcher_client_auth_uri" parameter has been deprecated and has no effect. * The "watcher::api::watcher_client_default_domain_name" parameter has been deprecated. The parameter has never been used actually. * The following parameters of the "watcher::api" class have been deprecated in favor of the new "watcher::watcher_clients_auth" class. * "watcher_client_password" * "watcher_client_username" * "watcher_client_auth_url" * "watcher_client_user_domain_name" * "watcher_client_project_domain_name" * "watcher_client_insecure" * "watcher_client_keyfile" * "watcher_client_certfile" * "watcher_client_cafile" * "watcher_client_auth_type" Changes in puppet-watcher 20.2.0..20.3.0 ---------------------------------------- 5a6caae setuptools: Disable auto discovery 11a7783 Prepare Yoga RC1 9c16492 remove unicode literal from code 978502c Globally support system scope credentials 16bcc44 Create a separate class for watcher_clients_auth parameters 3fe4b7d Deprecate ineffective watcher_client_default_domain_name parameter c507b55 Deprecate management of [watcher_clients_auth] auth_uri a3f4634 Remove deprecated *_client_api_version parameters 37180fc Add support for oslo.cache options Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 172 +++++++-------- manifests/cache.pp | 239 +++++++++++++++++++++ manifests/cinder_client.pp | 4 +- manifests/deps.pp | 4 + manifests/glance_client.pp | 4 +- manifests/init.pp | 56 ----- manifests/neutron_client.pp | 4 +- manifests/nova_client.pp | 4 +- manifests/watcher_clients_auth.pp | 108 ++++++++++ metadata.json | 8 +- .../notes/cache-opts-1d4d358b81b76d2c.yaml | 5 + ...leanup-client_api_version-905613eeea94283f.yaml | 4 + .../notes/deprecate-auth_uri-90a44ad54c0d57bb.yaml | 5 + ...ecate-default_domain_name-b29df5955675de28.yaml | 5 + .../notes/system_scope-all-8c56342fed47d232.yaml | 5 + .../watcher_clients_auth-49c8642cf6384a95.yaml | 20 ++ releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/watcher_api_spec.rb | 7 +- spec/classes/watcher_cache_spec.rb | 125 +++++++++++ spec/classes/watcher_watcher_clients_auth_spec.rb | 80 +++++++ 21 files changed, 706 insertions(+), 168 deletions(-)

1 0

puppet-barbican 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are delighted to announce the release of: puppet-barbican 20.3.0: Puppet module for Barbican This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 20.2.0..20.3.0 ----------------------------------------- 111ea8b setuptools: Disable auto discovery 092b9e7 Refactor barbican::plugins::kmip b32a729 Refactor how a required parameter is defined 0d4580b Create a separate class for [retry_scheduler] parameters 8166a08 Fix unit tests of barbican::api 405aee5 Do not manage /var/lib/barbican 4d8daf2 Prepare Yoga RC1 cafa5e9 remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 48 +++++++++----------- manifests/plugins/dogtag.pp | 13 ++---- manifests/plugins/kmip.pp | 53 ++++++++++------------ manifests/retry_scheduler.pp | 30 ++++++++++++ metadata.json | 8 ++-- .../notes/retry_scheduler-10734512c1553e64.yaml | 12 +++++ releasenotes/source/conf.py | 14 +++--- setup.py | 1 + spec/classes/barbican_api_spec.rb | 27 +++++------ spec/classes/barbican_plugins_kmip_spec.rb | 39 ++++++++++------ spec/classes/barbican_retry_scheduler_spec.rb | 45 ++++++++++++++++++ 11 files changed, 183 insertions(+), 107 deletions(-)

1 0

puppet-oslo 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are glad to announce the release of: puppet-oslo 20.3.0: Puppet module for Oslo This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. Changes in puppet-oslo 20.2.0..20.3.0 ------------------------------------- fe6612c setuptools: Disable auto discovery 9554471 cache: Add inet6 prefix for only memcached backends 37185e7 Prepare Yoga RC1 00d288f remove unicode literal from code af65148 db: Deprecate support for use_tpool Diffstat (except docs and test files) ------------------------------------- manifests/cache.pp | 12 ++++++++---- manifests/db.pp | 16 ++++++++++------ metadata.json | 4 ++-- .../notes/deprecate-db-use_tpool-d4897027d3fcf788.yaml | 5 +++++ releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + spec/defines/oslo_cache_spec.rb | 6 ++++-- 7 files changed, 37 insertions(+), 21 deletions(-)

1 0

puppet-manila 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We joyfully announce the release of: puppet-manila 20.3.0: Puppet module for OpenStack Manila This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The new "manila_type" resource has been added. This can be used to manage share types in Manila. * The new "system_scope" parameter has been added to the following classes. * "manila::compute::nova" * "manila::image::glance" * "manila::network::neutron" * "manila::volume::cinder" Upgrade Notes ************* * Now the "manila_type" resource type uses system scope credential instead of project scope credential when sending requests to Manila API. Deprecation Notes ***************** * The "manila::type" resource type and the "manila::type_set" resource type has been deprecated in favor of the new "manila_type" resource. * Currently the manila_type`` resource type uses the credential written in the "[keystone_authtoken]" section of "manila.conf". However this behavior has been deprecated and now the resource type first looks for the yaml files in "/etc/openstack/puppet". Make sure one of "clouds.yaml" or "admin-clouds.yaml" (which is created by puppet-keystone) is created in that directory. * The parameters of the "manila::quota" class with "quota_" prefix have been deprecated. Use the parameters WITHOUT "quota_" prefix. Changes in puppet-manila 20.2.0..20.3.0 --------------------------------------- 4112d37 setuptools: Disable auto discovery 3c5f29c Accept array for standalone_network_plugin_allowed_ip_ranges 6c173d2 Make network_plugin_ipvN_enabled optional b903e95 Fix the wrong section used to configure standalone network plugin 2994050 Prepare Yoga RC1 f39a900 remove unicode literal from code 5ca6e6f Use system scope credentials in providers 8365117 Rename quota_ parameters fc82186 Fix the wrong [quota] parameters bc10dfe Globally support system scope credentials 74298c4 Add type/provider to manage share types Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/manila.rb | 107 ++++++++++++++ lib/puppet/provider/manila_type/openstack.rb | 154 +++++++++++++++++++++ lib/puppet/type/manila_type.rb | 50 +++++++ manifests/compute/nova.pp | 18 ++- manifests/image/glance.pp | 18 ++- manifests/network/neutron.pp | 20 ++- manifests/network/neutron_single_network.pp | 12 +- manifests/network/standalone.pp | 34 +++-- manifests/quota.pp | 114 +++++++++++---- manifests/type.pp | 4 +- manifests/type_set.pp | 3 +- manifests/volume/cinder.pp | 18 ++- metadata.json | 10 +- .../notes/manila_type-42266cf70a5f0f66.yaml | 10 ++ .../provider-system-scope-cb9a22337ffe738d.yaml | 14 ++ .../notes/quota-params-3ef809a6fd67f3ee.yaml | 5 + .../notes/system_scope-all-4a661d5cc27d448a.yaml | 9 ++ releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/acceptance/basic_manila_spec.rb | 3 + spec/classes/manila_compute_nova_spec.rb | 15 ++ spec/classes/manila_image_glance_spec.rb | 15 ++ spec/classes/manila_network_neutron_spec.rb | 15 ++ spec/classes/manila_quota_spec.rb | 83 +++++++---- spec/classes/manila_volume_cinder_spec.rb | 15 ++ .../manila_network_neutron_single_network_spec.rb | 41 ++++-- spec/defines/manila_network_standalone_spec.rb | 66 ++++++--- spec/unit/provider/manila_spec.rb | 48 +++++++ spec/unit/provider/manila_type/openstack_spec.rb | 135 ++++++++++++++++++ spec/unit/type/manila_type_spec.rb | 24 ++++ 30 files changed, 952 insertions(+), 123 deletions(-)

1 0

puppet-rally 8.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are amped to announce the release of: puppet-rally 8.3.0: Puppet module for OpenStack Rally This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-rally Download the package from: https://tarballs.openstack.org/puppet-rally/ Please report issues through: https://bugs.launchpad.net/puppet-rally/+bugs For more details, please see below. Changes in puppet-rally 8.2.0..8.3.0 ------------------------------------ 18cddc6 setuptools: Disable auto discovery 73471c2 Prepare Yoga RC1 5ab004c Add support for octavia_* parameters 411dffe Deprecate usage of [role] parameters 08640cf Migrate parameters to the [openstack] section bc940b8 remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- manifests/settings.pp | 1 + manifests/settings/cinder.pp | 18 +- manifests/settings/ec2.pp | 12 +- manifests/settings/glance.pp | 18 +- manifests/settings/heat.pp | 82 ++++++--- manifests/settings/ironic.pp | 6 +- manifests/settings/magnum.pp | 12 +- manifests/settings/manila.pp | 18 +- manifests/settings/mistral.pp | 6 +- manifests/settings/monasca.pp | 6 +- manifests/settings/murano.pp | 9 +- manifests/settings/nova.pp | 204 ++++++++++++++------- manifests/settings/octavia.pp | 32 ++++ manifests/settings/sahara.pp | 21 ++- manifests/settings/swift.pp | 24 ++- manifests/settings/tempest.pp | 36 ++-- manifests/settings/watcher.pp | 9 +- metadata.json | 6 +- .../deprecate-heat-roles-8cb3f1b7135a1db7.yaml | 8 + .../deprecate-role-opts-1ad50f2846dc4e1c.yaml | 10 + releasenotes/notes/octavia-ddffa9ac7f26382a.yaml | 4 + releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/rally_settings_cinder_spec.rb | 20 +- spec/classes/rally_settings_ec2_spec.rb | 12 +- spec/classes/rally_settings_glance_spec.rb | 20 +- spec/classes/rally_settings_heat_spec.rb | 86 ++++----- spec/classes/rally_settings_ironic_spec.rb | 4 +- spec/classes/rally_settings_magnum_spec.rb | 12 +- spec/classes/rally_settings_manila_spec.rb | 20 +- spec/classes/rally_settings_mistral_spec.rb | 4 +- spec/classes/rally_settings_monasca_spec.rb | 4 +- spec/classes/rally_settings_murano_spec.rb | 8 +- spec/classes/rally_settings_nova_spec.rb | 140 +++++++------- spec/classes/rally_settings_octavia_spec.rb | 47 +++++ spec/classes/rally_settings_sahara_spec.rb | 20 +- spec/classes/rally_settings_swift_spec.rb | 18 +- spec/classes/rally_settings_tempest_spec.rb | 26 +-- spec/classes/rally_settings_watcher_spec.rb | 8 +- 39 files changed, 645 insertions(+), 361 deletions(-)

1 0

puppet-horizon 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We joyfully announce the release of: puppet-horizon 20.3.0: Puppet module for OpenStack Horizon This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. Changes in puppet-horizon 20.2.0..20.3.0 ---------------------------------------- 71e6767 setuptools: Disable auto discovery 38d7c18 Allow different log level for django module 2c33f9f Fix syntax error in individual dashboard settings c777b11 Remove unused variable definition 514b52e Prepare Yoga RC1 5c28dde Correction of syntax errors. b043230 remove unicode literal from code ca792e5 Put each WEBSSO_* option just after descriptions b50aba3 Remove redundant blank lines 156f466 Remove LAUNCH_INSTANCE_*_ENABLED from local_settings Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 12 +- metadata.json | 4 +- .../notes/django_log_level-d4c7c89e8935c67a.yaml | 6 + releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/horizon_init_spec.rb | 15 +- spec/classes/horizon_wsgi_apache_spec.rb | 2 +- templates/_1499_load_balancer_settings.py.erb | 4 +- templates/_1699_orchestration_settings.py.erb | 2 +- templates/_90_manila_shares.py.erb | 2 +- templates/local_settings.py.erb | 206 ++++++++++----------- 11 files changed, 135 insertions(+), 133 deletions(-)

1 0

puppet-designate 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are glad to announce the release of: puppet-designate 20.3.0: Puppet module for OpenStack Designate This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The new "designate::backend::pdns4" class has been added. This class supports setting up PowerDNS 4 backend. * The new "designate::api::quotas_verify_project_id" parameter has been added. * The new "designate::keystone" class has been added. * The "workers" parameter and "threads" parameter have been added to the "designate::sink" class. Upgrade Notes ************* * Default value of the "designate::backend::bind9::manage_pool" parameter will be changed from "false" to "true" in a future release. Make sure the parameter is set to disabled management of pools. Deprecation Notes ***************** * The "designate::zone_manager" class has been deprecated. * Support for false value for the "designate::sink::enabled_notification_handlers" parameter has been deprecated and will be removed in a future release. Use "$::os_service_default" instead. Changes in puppet-designate 20.2.0..20.3.0 ------------------------------------------ 71716fc setuptools: Disable auto discovery da4b2f7 Allow verifying project id of quota definitions 37dbbe2 Do not override defaults of oslo.db parameters ea31fb5 Prepare Yoga RC1 9fbe67d bind9: Prepare to enable pool management by default dfc0a7e remove unicode literal from code 979dd5b bind9: Fix the wrong default value of dns_port 4d0a105 Add support for PowerDNS 4 backend cba519f Deprecate support for designate-zone-manager f87bd12 sink: Simplify handling of enabled_notification_handlers 94ec534 sink: Allow tuning workers and threads c13f2ff Switch to ini_settings Diffstat (except docs and test files) ------------------------------------- .../{openstackconfig.rb => ini_setting.rb} | 4 +- manifests/api.pp | 7 ++ manifests/backend/bind9.pp | 12 +++- manifests/backend/pdns4.pp | 74 ++++++++++++++++++++++ manifests/db.pp | 8 +-- manifests/keystone.pp | 73 +++++++++++++++++++++ manifests/sink.pp | 34 +++++++--- manifests/zone_manager.pp | 4 +- metadata.json | 8 +-- ...re-enable-pool-management-bebd5b552eda6293.yaml | 6 ++ .../deprecate-zone_manager-b219dc5dde23e42f.yaml | 4 ++ releasenotes/notes/pdns4-07768cbace039aee.yaml | 5 ++ .../quotas_verify_project_id-e46c274063d8780d.yaml | 8 +++ ...led_notification_handlers-b223e3e445ee02ec.yaml | 7 ++ .../notes/sink-concurrency-e3b485d7a6ccffce.yaml | 5 ++ releasenotes/source/conf.py | 14 ++-- setup.py | 1 + spec/classes/designate_api_spec.rb | 3 + spec/classes/designate_backend_pdns4_spec.rb | 58 +++++++++++++++++ spec/classes/designate_db_spec.rb | 8 +-- spec/classes/designate_keystone_spec.rb | 60 ++++++++++++++++++ spec/classes/designate_sink_spec.rb | 21 +++++- ...openstackconfig_spec.rb => ini_setting_spec.rb} | 2 +- templates/pdns4-pools.yaml.erb | 25 ++++++++ 24 files changed, 415 insertions(+), 36 deletions(-)

1 0

puppet-glance 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We exuberantly announce the release of: puppet-glance 20.3.0: Puppet module for OpenStack Glance This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. Changes in puppet-glance 20.2.0..20.3.0 --------------------------------------- 2948b45 setuptools: Disable auto discovery 2a2f349 Deprecate parameters for native ssl support c91d718 Prepare Yoga RC1 4487313 remove unicode literal from code 5dd2f27 Create a separate spec file for the base glance class 17cc71c Deprecate usage of authtoken parameters in providers Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/glance.rb | 1 + manifests/api.pp | 43 +++++++++---------- metadata.json | 10 ++--- .../deprecate-native-ssl-b35cc074d5cf11aa.yaml | 10 +++++ ...vider-deprecate-at-params-88b2ee3f16ac5443.yaml | 9 ++++ releasenotes/source/conf.py | 14 +++--- setup.py | 1 + spec/classes/glance_api_spec.rb | 50 +++------------------- spec/classes/glance_init_spec.rb | 42 ++++++++++++++++++ 9 files changed, 102 insertions(+), 78 deletions(-)

1 0

puppet-openstacklib 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are stoked to announce the release of: puppet-openstacklib 20.3.0: Puppet module for OpenStack Openstacklib This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. Changes in puppet-openstacklib 20.2.0..20.3.0 --------------------------------------------- eef7444 setuptools: Disable auto discovery eb01261 policy: Quote single quotes in yaml format 46b47c7 Prepare Yoga RC1 7cdc6da remove unicode literal from code 4ac6586 Bump upper-constraints of puppetlabs-postgresql 08bf393 Use clouds.yaml for puppet Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/openstack/auth.rb | 38 +++++++++++++- lib/puppet/provider/openstack/credentials.rb | 7 ++- manifests/policy/base.pp | 8 ++- metadata.json | 4 +- releasenotes/source/conf.py | 14 +++--- setup.py | 1 + spec/defines/openstacklib_policy_base_spec.rb | 28 +++++++++++ spec/unit/provider/openstack/auth_spec.rb | 63 ++++++++++++++++++++++++ spec/unit/provider/openstack/credentials_spec.rb | 22 ++++----- 9 files changed, 161 insertions(+), 24 deletions(-)

1 0

puppet-swift 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are amped to announce the release of: puppet-swift 20.3.0: Puppet module for OpenStack Swift This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 20.3.0 ^^^^^^ Deprecation Notes * The "swift::test_file" class has been deprecated and will be removed in a future release. Changes in puppet-swift 20.2.0..20.3.0 -------------------------------------- 4e983c2 setuptools: Disable auto discovery b95ee61 Prepare Yoga RC1 663d94b remove unicode literal from code dd3a5bb Deprecate swift::test_file Diffstat (except docs and test files) ------------------------------------- examples/site.pp | 6 ------ manifests/test_file.pp | 3 +++ metadata.json | 6 +++--- .../notes/deprecate-test_file-fcb300e2e5117d15.yaml | 5 +++++ releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 6 files changed, 19 insertions(+), 16 deletions(-)

1 0

puppet-magnum 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are pleased to announce the release of: puppet-magnum 20.3.0: Puppet module for Magnum This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-magnum Download the package from: https://tarballs.openstack.org/puppet-magnum/ Please report issues through: https://bugs.launchpad.net/puppet-magnum/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features * The new "magnum::keystone::keystone_auth::system_scope" parameter has been added. Changes in puppet-magnum 20.2.0..20.3.0 --------------------------------------- 693173b setuptools: Disable auto discovery 724e1ba Prepare Yoga RC1 5dd01c5 Avoid hard-coding api versions 075e120 Fix reference to magnum::clients parameters d4b442f Fix unit tests for magnum::clients::heat class 4376e8b remove unicode literal from code 3a77aec Globally support system scope credentials Diffstat (except docs and test files) ------------------------------------- manifests/clients/barbican.pp | 2 +- manifests/clients/cinder.pp | 2 +- manifests/clients/glance.pp | 6 ++-- manifests/clients/heat.pp | 6 ++-- manifests/clients/magnum.pp | 2 +- manifests/clients/neutron.pp | 2 +- manifests/clients/nova.pp | 6 ++-- manifests/clients/octavia.pp | 2 +- manifests/keystone/keystone_auth.pp | 18 ++++++++++-- metadata.json | 8 +++--- .../notes/system_scope-all-2f3620a1195c518d.yaml | 5 ++++ releasenotes/source/conf.py | 14 ++++----- setup.py | 1 + spec/classes/magnum_clients_barbican_spec.rb | 4 +-- spec/classes/magnum_clients_cinder_spec.rb | 8 +----- spec/classes/magnum_clients_glance_spec.rb | 13 +++------ spec/classes/magnum_clients_heat_spec.rb | 33 +++++++++++++++------- spec/classes/magnum_clients_magnum_spec.rb | 4 +-- spec/classes/magnum_clients_neutron_spec.rb | 8 +----- spec/classes/magnum_clients_nova_spec.rb | 14 +++------ spec/classes/magnum_clients_octavia_spec.rb | 8 +----- spec/classes/magnum_keystone_keystone_auth_spec.rb | 17 ++++++++++- 22 files changed, 99 insertions(+), 84 deletions(-)

1 0

puppet-openstack_extras 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We enthusiastically announce the release of: puppet-openstack_extras 20.3.0: Puppet module for OpenStack Openstack_extras This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 20.2.0..20.3.0 ------------------------------------------------- 25da23b setuptools: Disable auto discovery 403539b Prepare Yoga RC1 17d55eb remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 3 files changed, 9 insertions(+), 8 deletions(-)

1 0

puppet-zaqar 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are satisfied to announce the release of: puppet-zaqar 20.3.0: Puppet module for OpenStack Zaqar This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-zaqar Download the package from: https://tarballs.openstack.org/puppet-zaqar/ Please report issues through: https://bugs.launchpad.net/puppet-zaqar/+bugs For more details, please see below. Changes in puppet-zaqar 20.2.0..20.3.0 -------------------------------------- 59a2163 setuptools: Disable auto discovery 753bf02 Prepare Yoga RC1 2f89bc9 remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 3 files changed, 12 insertions(+), 11 deletions(-)

1 0

puppet-aodh 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are ecstatic to announce the release of: puppet-aodh 20.3.0: Puppet module for OpenStack Aodh This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features * The "aodh::service_credentials::system_scope" parameter has been added. Changes in puppet-aodh 20.2.0..20.3.0 ------------------------------------- ed325e5 setuptools: Disable auto discovery 38c5e93 Prepare Yoga RC1 e873a18 remove unicode literal from code 442e696 Globally support system scope credentials Diffstat (except docs and test files) ------------------------------------- manifests/service_credentials.pp | 81 +++++++++++++--------- metadata.json | 8 +-- .../notes/system_scope-all-3a97b232bc4955a1.yaml | 4 ++ releasenotes/source/conf.py | 14 ++-- setup.py | 1 + spec/classes/aodh_service_credentials_spec.rb | 22 ++++-- 6 files changed, 78 insertions(+), 52 deletions(-)

1 0

puppet-vswitch 16.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We high-spiritedly announce the release of: puppet-vswitch 16.3.0: Puppet module for OpenStack Vswitch This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 16.2.0..16.3.0 ---------------------------------------- a70e92a setuptools: Disable auto discovery 910bbae Remove incomplete remaining lint mark 1545c55 Ensure other_config:emc-insert-inv-prob is unset ae037fb Prepare Yoga RC1 24edba4 remove unicode literal from code 3ff72b5 Deprecate usage of Dynamic Kernel Module Support 144b464 Remove logic for Debian Wheezy (7.0) 0785d6c Assert the exec resource to restart ovs service Diffstat (except docs and test files) ------------------------------------- manifests/dpdk.pp | 5 ++ manifests/ovs.pp | 65 +++++----------- manifests/params.pp | 20 +---- metadata.json | 4 +- .../deprecate-dkms-support-245c9db9279a1285.yaml | 5 ++ releasenotes/source/conf.py | 14 ++-- setup.py | 1 + spec/classes/vswitch_dpdk_spec.rb | 12 ++- spec/classes/vswitch_ovs_spec.rb | 89 ++++++---------------- 9 files changed, 74 insertions(+), 141 deletions(-)

1 0

puppet-vitrage 10.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are excited to announce the release of: puppet-vitrage 10.3.0: Puppet module for OpenStack Vitrage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features ************ * The new "vitrage::coordination" class has been added. * The new "vitrage::service_credentials::system_scope" parameter has been added. Deprecation Notes ***************** * The "vitrage::auth" parameter has been deprecated in favor of the new "vitrage::service_credentials" class. Changes in puppet-vitrage 10.2.0..10.3.0 ---------------------------------------- 6b777ac setuptools: Disable auto discovery 889cd0c Prepare Yoga RC1 fca2ffd remove unicode literal from code c219789 Support [coordination] parameters 3c924d5 Globally support system scope credentials 9cf7f1d Use consistent class/parameter name for service_credentials Diffstat (except docs and test files) ------------------------------------- manifests/auth.pp | 25 ++++--- manifests/coordination.pp | 20 +++++ manifests/deps.pp | 4 + manifests/service_credentials.pp | 87 ++++++++++++++++++++++ metadata.json | 8 +- .../notes/coordination-578e6bae91949ee8.yaml | 4 + .../service_credentials-cd7286808d5eaa67.yaml | 5 ++ .../notes/system_scope-all-43dda993dfcc9946.yaml | 5 ++ releasenotes/source/conf.py | 14 ++-- setup.py | 1 + spec/classes/vitrage_coordination_spec.rb | 39 ++++++++++ spec/classes/vitrage_service_credentials_spec.rb | 64 ++++++++++++++++ 12 files changed, 254 insertions(+), 22 deletions(-)

1 0

puppet-tacker 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We jubilantly announce the release of: puppet-tacker 20.3.0: Puppet module for OpenStack Tacker This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-tacker Download the package from: https://tarballs.openstack.org/puppet-tacker/ Please report issues through: https://bugs.launchpad.net/puppet-tacker/+bugs For more details, please see below. Changes in puppet-tacker 20.2.0..20.3.0 --------------------------------------- 6f6227c setuptools: Disable auto discovery 9e0fb75 Prepare Yoga RC1 aa6bbed remove unicode literal from code 59babed Support more parameters to define/tune api behavior caec9bd Ensure [DEFAULT] auth_strategy is set Diffstat (except docs and test files) ------------------------------------- manifests/server.pp | 45 +++++++++++++++++----- metadata.json | 8 ++-- .../notes/api-allow-params-e3097edb0df1260a.yaml | 9 +++++ releasenotes/source/conf.py | 14 +++---- setup.py | 1 + spec/classes/tacker_server_spec.rb | 5 +++ 6 files changed, 61 insertions(+), 21 deletions(-)

1 0

puppet-placement 7.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We exuberantly announce the release of: puppet-placement 7.3.0: Puppet module for OpenStack placement This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 7.2.0..7.3.0 ---------------------------------------- 5fb0ca4 setuptools: Disable auto discovery 49ceb2b Prepare Yoga RC1 16239e8 remove unicode literal from code Diffstat (except docs and test files) ------------------------------------- metadata.json | 8 ++++---- releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 3 files changed, 12 insertions(+), 11 deletions(-)

1 0

puppet-tempest 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are pleased to announce the release of: puppet-tempest 20.3.0: Puppet module for OpenStack Tempest This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. Changes in puppet-tempest 20.2.0..20.3.0 ---------------------------------------- 197d8a4 setuptools: Disable auto discovery 745315f Prepare Yoga RC1 e2a7a35 remove unicode literal from code 744bdad Add support for [validation] ssh_key_type 5f375ba tempest_glance_id_setter: autorequire glance_image resource 61b3089 Fix inconsistent indents in spec file Diffstat (except docs and test files) ------------------------------------- lib/puppet/type/tempest_glance_id_setter.rb | 4 ++ manifests/init.pp | 6 +- metadata.json | 6 +- .../notes/ssh_key_type-43cd9a377a147c5b.yaml | 4 ++ releasenotes/source/conf.py | 14 ++--- setup.py | 1 + spec/classes/tempest_init_spec.rb | 64 +++++++++++----------- 7 files changed, 56 insertions(+), 43 deletions(-)

1 0

puppet-mistral 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We jubilantly announce the release of: puppet-mistral 20.3.0: Puppet module for OpenStack Mistral This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. Changes in puppet-mistral 20.2.0..20.3.0 ---------------------------------------- 5d268a8 setuptools: Disable auto discovery 1766928 Refactor mistral::notifier 0b8ca26 Support more [execution_expiration_policy] parameters 0c6feac Add tunable parameters of mistral-engine d62e674 Prepare Yoga RC1 7c62236 remove unicode literal from code 58b5103 Deprecate usage of authtoken parameters in providers 1f85829 Fix authtoken parameters to load service user credential Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/mistral.rb | 10 +-- manifests/engine.pp | 73 ++++++++++++++----- manifests/execution_expiration_policy.pp | 50 +++++++++++++ manifests/notifier.pp | 36 ++++----- metadata.json | 8 +- .../notes/bug-1961601-1df5a15bead1daf3.yaml | 5 ++ .../notes/engine-opts-fef47b623ca867c1.yaml | 9 +++ ...ecution_expiration_policy-d0e9ebbd2e3b8c76.yaml | 13 ++++ ...vider-deprecate-at-params-484966d315226d95.yaml | 9 +++ releasenotes/source/conf.py | 14 ++-- setup.py | 1 + spec/classes/mistral_engine_spec.rb | 85 +++++++++++++++++----- .../mistral_execution_expiration_policy_spec.rb | 58 +++++++++++++++ spec/classes/mistral_notifier_spec.rb | 10 +-- spec/unit/provider/mistral_spec.rb | 48 ++++++++++++ 15 files changed, 355 insertions(+), 74 deletions(-)

1 0

puppet-trove 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are glad to announce the release of: puppet-trove 20.3.0: Puppet module for OpenStack Trove This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The following parameters of the "trove" class have been deprecated. Use parameters of the "trove::db" class instead. * "database_connection" * "database_idle_timeout" * "database_max_retries" * "database_retry_interval" * "database_max_pool_size" * "database_max_overflow" * The new "system_scope" parameter has been added to the following classes. * "trove::api::service_credentials" * "trove::guestagent::service_credentials" Upgrade Notes ************* * The following deprecated parameters of the "trove" class have been removed. * "nova_proxy_admin_user" * "nova_proxy_admin_pass" * "nova_proxy_tenant_name" * "os_region_name" * Now the "trove::api::service_credentials" class no longer looks up the "auth_url" parameter from the "trove::keystone::authtoken" class. The parameter should be defined properly. * The "trove::guestagent::auth_url" parameter has been removed. * Now this modules no longer use "trove-conductor.conf" and "trove- taskmanager.conf". The parameters previously added to these files are now added to the base "trove.conf". Deprecation Notes ***************** * The "trove::guestagent::backup_aes_cbc_key" parameter has been deprecated because the actual parameter in Trove was already deprecated. * The "trove:use_neutron" parameter has been deprecated and has no effect now. This parameter will be removed in a future release. * The following parameters have been deprecated and have no effect now. * "trove::config::trove_taskmanager_config" * "trove::config::trove_conductor_config" * The following classes have been deprecated and have no effect now. * "trove::conductor::service_credentials" * "trove::taskmanager::service_credentials" * The following parameters of the "trove::conductor" class and the "trove::taskmanager" class have been deprecated and have no effect. * "debug" * "log_file" * "log_dir" * "use_syslog" * "log_facility" * The following resource types have been deprecated. * "trove_conductor" * "trove_taskmanager" Bug Fixes ********* * Now the "trove-guestagent" service is disabled by default, because this service should be run in instances instead of in hosts. The service can be still enabled by setting the "trove::guestagent::enabled" parameter to "true" but this requires careful consideration. Changes in puppet-trove 20.2.0..20.3.0 -------------------------------------- de17c05 setuptools: Disable auto discovery 9d0381a Avoid testing details of oslo::messaging(::*) 4c6e5c9 Disable trove-guestagent service by default 977c0dc guestagent: Deprecate the backup_aes_cbc_key parameter 2b4efd1 guestagent: Fix reference to trove::* parameters ecebc7e Prepare Yoga RC1 f35dc66 Globally support system scope credentials 9675228 Clean up deprecated keystone v2 parameters 8b00efd remove unicode literal from code a1f85ce Deprecate database parameters of the base class ddb0f14 Deprecate the use_neutron parameter f1c11c6 Use single trove.conf for api, conductor and taskmanager 93551f8 Use openstack CLI instad of trove CLI 8fcf75c Do not define service resource when service management is disabled Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/trove.rb | 146 ++++----- lib/puppet/provider/trove_datastore/trove.rb | 12 +- .../provider/trove_datastore_version/trove.rb | 18 +- lib/puppet/type/trove_conductor_config.rb | 2 +- lib/puppet/type/trove_taskmanager_config.rb | 2 +- manifests/api.pp | 98 +------ manifests/api/service_credentials.pp | 53 ++-- manifests/conductor.pp | 149 +++------- manifests/conductor/service_credentials.pp | 24 +- manifests/config.pp | 39 ++- manifests/generic_service.pp | 14 +- manifests/guestagent.pp | 23 +- manifests/guestagent/service_credentials.pp | 49 ++-- manifests/init.pp | 186 ++++++++---- manifests/taskmanager.pp | 205 +++---------- manifests/taskmanager/service_credentials.pp | 24 +- metadata.json | 8 +- ...tagent-backup_aes_cbc_key-84ed0dd16e26c8b9.yaml | 5 + .../deprecate-use_neutron-d39ccd82299c38b7.yaml | 5 + ...eprecate_database_options-34f9def22611cb34.yaml | 12 + ...uestagent-disable-service-3c4100c486de4c2e.yaml | 7 + ...remove-keystone-v2-params-047438374b04606d.yaml | 18 ++ .../notes/system_scope-all-b264889f42741908.yaml | 7 + .../notes/use-single-config-233fda77f7d6c942.yaml | 35 +++ releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/trove_api_service_credentials_spec.rb | 45 ++- spec/classes/trove_api_spec.rb | 316 +------------------- .../trove_conductor_service_credentials_spec.rb | 73 ----- spec/classes/trove_conductor_spec.rb | 221 +------------- spec/classes/trove_config_spec.rb | 22 -- .../trove_guestagent_service_credentials_spec.rb | 42 ++- spec/classes/trove_guestagent_spec.rb | 188 ++++++------ spec/classes/trove_init_spec.rb | 82 +++++- .../trove_taskmanager_service_credentials_spec.rb | 73 ----- spec/classes/trove_taskmanager_spec.rb | 326 +-------------------- spec/unit/provider/trove_datastore/trove_spec.rb | 48 +-- .../provider/trove_datastore_version/trove_spec.rb | 33 ++- 38 files changed, 808 insertions(+), 1817 deletions(-)

1 0

puppet-heat 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We eagerly announce the release of: puppet-heat 20.3.0: Puppet module for OpenStack Heat This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. Changes in puppet-heat 20.2.0..20.3.0 ------------------------------------- e7cefc1 setuptools: Disable auto discovery 9cfced8 Prepare Yoga RC1 4de5256 remove unicode literal from code ad73ba2 TripleO: Replace undercloud job by standalone job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 22 +++++++++++++++++++++- metadata.json | 8 ++++---- releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 4 files changed, 33 insertions(+), 12 deletions(-)

1 0

puppet-murano 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We joyfully announce the release of: puppet-murano 20.3.0: Puppet module for OpenStack Murano This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 20.2.0..20.3.0 --------------------------------------- 5a0e611 setuptools: Disable auto discovery 9dccbad Prepare Yoga RC1 32af2f1 remove unicode literal from code e91028f Accept system scope credentials for Keystone API request bfe5a82 Deprecate remaining [database] idle_timeout Diffstat (except docs and test files) ------------------------------------- manifests/db_cfapi.pp | 43 ++++++++++++++-------- manifests/keystone/auth.pp | 18 +++++++++ manifests/keystone/authtoken.pp | 6 +++ manifests/keystone/cfapi_auth.pp | 18 +++++++++ metadata.json | 8 ++-- ...ng-idle_timeout-parameter-6568fe0e18eacb17.yaml | 11 ++++++ .../system_scope-keystone-63b525eec68df6d3.yaml | 15 ++++++++ releasenotes/source/conf.py | 14 +++---- setup.py | 1 + spec/classes/murano_db_cfapi_spec.rb | 28 +++++++------- spec/classes/murano_keystone_auth_spec.rb | 9 +++++ spec/classes/murano_keystone_authtoken_spec.rb | 3 ++ spec/classes/murano_keystone_cfapi_auth_spec.rb | 9 +++++ 13 files changed, 142 insertions(+), 41 deletions(-)

1 0

puppet-cinder 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are jazzed to announce the release of: puppet-cinder 20.3.0: Puppet module for OpenStack Cinder This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 20.3.0 ^^^^^^ Upgrade Notes ************* * The following resource types have been removed. * "cinder::backend::scaleio" * "cinder::backend::dellemc_vxflexos" * "cinder::backend::dellemc_vmax_iscsi" * Default values of the "cinder::keystone::auth::*_url_v3" parameters have been updated and now these no longer include the "%(tenant_id)s" template. * The "cinder::type" resource type and the "cinder::type_set" resource type have been removed. Deprecation Notes ***************** * The following parameters of the "cinder::backend::netapp" resource type have been deprecated and have no effect now. * "netapp_vfiler" * "netapp_partner_backend_name" * The following parameters of the "cinder::backend::netapp" resource type have been deprecated and have no effect now. * "netapp_webservice_path" * "netapp_controller_ips" * "netapp_sa_password" * The following resource types have been using the credential written in the "[keystone_authtoken]" section of "cinder.conf". However this behavior has been deprecated and now these resource types first look for the yaml files in "/etc/openstack/puppet". Make sure one of "clouds.yaml" or "admin-clouds.yaml" (which is created by puppet- keystone) is created in that directory. * "cinder_type" * "cinder_qos" Changes in puppet-cinder 20.2.0..20.3.0 --------------------------------------- d0d981b setuptools: Disable auto discovery 258098f XtremIO: Remove hard-coded defaults 9bfb474 XtremIO: Accept array for xtremio_ports 1ead748 Rename the spec file to follow the global naming rule 6f10863 NetApp: Deprecate parameters for E-Series systems dc89e9d NetApp: Deprecate parameters for 7mode systems ceaf610 Prepare Yoga RC1 5d85ed3 remove unicode literal from code 6d6b134 Remove tenant_id templating from endpoint URLs 596a774 Deprecate usage of authtoken parameters in providers c6b83e5 Remove deprecated Dell EMC volume drivers f0ed794 Remove deprecated resource types to manage volume type Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/cinder.rb | 1 + manifests/backend/dellemc_vmax_iscsi.pp | 72 --------- manifests/backend/dellemc_vxflexos.pp | 154 ------------------- manifests/backend/dellemc_xtremio.pp | 16 +- manifests/backend/netapp.pp | 122 ++++++++------- manifests/backend/scaleio.pp | 163 --------------------- manifests/keystone/auth.pp | 18 +-- metadata.json | 8 +- .../dellemc-driver-cleanup-7c8f149c4b71ce4b.yaml | 8 + .../deprecate-netapp-7mode-a241386379e2a93b.yaml | 8 + .../deprecate-netapp-eseries-cc877c5705f34931.yaml | 9 ++ ...vider-deprecate-at-params-65e1ed50038822d3.yaml | 12 ++ ...nant_id-from-endpoint-url-c1034329f9698936.yaml | 6 + ...olume-type-resource-types-16c2cf296c0f4472.yaml | 5 + releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/cinder_keystone_auth_spec.rb | 6 +- spec/defines/cinder_backend_dellemc_vmax_spec.rb | 65 -------- .../cinder_backend_dellemc_vxflexos_spec.rb | 89 ----------- ...c.rb => cinder_backend_dellemc_xtremio_spec.rb} | 12 +- spec/defines/cinder_backend_netapp_spec.rb | 14 -- spec/defines/cinder_backend_scaleio_spec.rb | 90 ------------ 22 files changed, 154 insertions(+), 739 deletions(-)

1 0