April 2022 - Release-announce - lists.openstack.org

tripleo-validations 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are happy to announce the release of: tripleo-validations 15.2.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ For more details, please see below. Changes in tripleo-validations 15.1.0..15.2.0 --------------------------------------------- ff4cbe6 Validating that RetryFilter is not in nova 8692b4b Removing leftover README docs from roles fe0ca27 Redefining the irrelevant files list to ensure execution graph stability 30b234a Validate libvirtd is not running on the undercloud 2493726 Getting instance shutdown xml issue b0d4d49 Move zuul jobs layout to centos9 only for master branch 16dfbae Substituting 'localhost' for wildcard '*' in image-serve validation 6de2be5 oslo_config_validator: Adding possibility to override namespaces config ebcab3d oslo_config_validator: Defaulting config_invalidations to empty list 9068ede oslo_config_validator: Nova port data changes settings have wrong values 7441ea3 Add FIPS validation 01ae2b4 feat(removal): tox-ansible support 8989c8c Instruct container-status validation to accept 137, 142 and 143 exit code status 3043ad8 oslo-config-validator: container run task should never fail 12bc0d0 Remove content of TLS-Everywhere molecule.conf 7c591cb Migrate jobs from CentOS 8 to CentOS 8 Stream 23890fc Remove pre-deployment validation 32e9e9e Bumping the ansible-lint version to 5.3.2 in order to resolve CI failure 973d188 Simplify and consolidate files 3717245 Remove domain equivalence check 52f3fbd Remove references to novajoin-server and novajoin-notifier 388f7e3 Remove check for certmonger user service 995bf8c Make sure fact is available to find hostname 7c9ae48 Interface xpath attribute read issue bc1d40a fix(molecule): Add ability to run molecule on Fedora 9cbe84f Fixing formatting of the nfv_ovsdpdk_zero_packet_loss role docs 6cbeeb4 undercloud-debug validation documentation improvement 772d98c fix(ci): Install python3 package first dd088d7 Use centos-8 stream for molecule jobs abe513c Optimize linters executions from tox and pre-commit 5278602 Removing validations.yml playbook from job definition 33e57db Adding ironic's json_rpc to known namespaces a6a8c70 Multinode and provider jobs fd80bfa Remove run-validations.sh script 4512793 Change ansible_hostname to use ansible_facts Diffstat (except docs and test files) ------------------------------------- .config/molecule/Dockerfile | 12 +- .config/molecule/config.yml | 16 +- .coveragerc | 2 +- .dockerignore | 2 +- .pre-commit-config.yaml | 3 +- LICENSE | 1 - README.rst | 1 - ansible-collections-requirements.yml | 1 + babel.cfg | 1 - bindep.txt | 27 ++- ci/playbooks/pre.yml | 7 + .../modules/modules-ceph_pools_pg_protection.rst | 1 - .../modules-check_cpus_aligned_with_dpdk_nics.rst | 1 - .../modules/modules-check_ironic_boot_config.rst | 1 - .../modules-check_other_processes_pmd_usage.rst | 1 - .../modules-convert_range_to_numbers_list.rst | 1 - .../modules/modules-get_dpdk_nics_numa_info.rst | 1 - .../modules/modules-ovs_dpdk_pmd_cpus_check.rst | 1 - .../modules/modules-pmd_threads_siblings_check.rst | 1 - .../role-check_nfv_ovsdpdk_zero_packet_loss.rst | 13 +- .../role-collect_flavors_and_verify_profiles.rst | 1 - .../roles/role-ironic_boot_configuration.rst | 1 - .../roles/role-undercloud_disabled_services.rst | 6 + .../roles/role-undercloud_heat_purge_deleted.rst | 42 ++++- .../roles/role-undercloud_service_status.rst | 42 ++++- playbooks/collect-flavors-and-verify-profiles.yaml | 1 - playbooks/fips-enabled.yaml | 19 ++ playbooks/oslo-config-validator.yaml | 16 ++ playbooks/undercloud-debug.yaml | 3 + playbooks/undercloud-disabled-services.yaml | 22 +++ .../add-ceph-health-check-000bab9581c759d3.yaml | 2 +- .../molecule/default/molecule.yml | 8 +- .../tasks/check_nfv_instances.yml | 17 +- .../tasks/main.yml | 6 +- .../tasks/validate_instance.yml | 12 +- .../molecule/default/converge.yml | 12 +- .../molecule/default/molecule.yml | 2 +- .../vars/main.yml | 1 - roles/container_status/tasks/main.yaml | 2 +- roles/fips_enabled/molecule/default/converge.yml | 60 ++++++ roles/fips_enabled/molecule/default/molecule.yml | 3 + roles/fips_enabled/molecule/default/prepare.yml | 19 ++ roles/fips_enabled/tasks/main.yml | 29 +++ roles/fips_enabled/vars/main.yml | 29 +++ roles/image_serve/molecule/default/molecule.yml | 8 +- roles/image_serve/tasks/main.yaml | 4 +- roles/oslo_config_validator/defaults/main.yml | 4 + .../molecule/default/molecule.yml | 2 +- .../molecule/mocked_failure/molecule.yml | 2 +- .../tasks/build_validation_config.yml | 20 +- .../oslo_config_validator/tasks/container_run.yml | 3 +- .../tasks/invalidate_config.yml | 2 +- .../tasks/validate_config.yml | 2 +- .../molecule/default/molecule.yml | 2 +- .../molecule/deprecated_services/molecule.yml | 2 +- .../molecule/down_services/molecule.yml | 2 +- roles/overcloud_service_status/resources/README.md | 1 - roles/repos/README.md | 41 ----- roles/tls_everywhere/molecule/default/molecule.yml | 17 -- roles/tls_everywhere/tasks/common.yaml | 16 +- .../tasks/overcloud-post-deployment.yaml | 28 --- .../tasks/pre-deployment-containerized.yaml | 203 --------------------- .../tasks/pre-deployment-non-containerized.yaml | 193 -------------------- roles/tls_everywhere/tasks/pre-deployment.yaml | 104 +++++------ roles/tls_everywhere/tasks/prep.yaml | 79 -------- roles/undercloud_debug/README.md | 38 ---- roles/undercloud_debug/defaults/main.yml | 4 +- roles/undercloud_debug/tasks/main.yml | 2 +- roles/undercloud_debug/vars/main.yaml | 3 + .../undercloud_disabled_services/defaults/main.yml | 3 + roles/undercloud_disabled_services/tasks/main.yml | 18 ++ roles/undercloud_disabled_services/vars/main.yaml | 8 + roles/undercloud_disk_space/README.md | 36 ---- roles/undercloud_heat_purge_deleted/README.md | 38 ---- roles/undercloud_process_count/README.md | 37 ---- roles/undercloud_service_status/README.md | 38 ---- roles/undercloud_tokenflush/README.md | 37 ---- .../validation_init/molecule/default/molecule.yml | 2 +- .../molecule/no_molecule_test/molecule.yml | 2 +- scripts/run-local-test | 7 +- scripts/run-validations.sh | 106 ----------- setup.cfg | 1 - test-requirements.txt | 2 +- tox.ini | 59 +----- zuul.d/base.yaml | 8 +- zuul.d/layout.yaml | 65 +++++-- zuul.d/molecule.yaml | 13 ++ 132 files changed, 917 insertions(+), 1287 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 77fda49..a4cccb8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansible-core<2.12.0 # GPLv3+

1 0

tripleo-heat-templates 16.0.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are excited to announce the release of: tripleo-heat-templates 16.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Add parameter to set the auth type for the snmpd_user. Possible options are MD5 (which is what was hardcoded before and is the default now) and SHA. This should be set to SHA on FIPS environments. * Add IronicDefaultBootInterface parameter to allow users to set / override the default boot interface used by ironic. This may not work if a hardware type does not support the set boot interface. This overrides create-time defaults. The ordered union of the enabled boot interfaces and hardware type determines, under normal circumstances, what the default will be. * Since genisoimage was removed from CentOS9 / RHEL9, the nova's default "mkisofs_cmd" option will not work anymore. In RHEL/CentOS realm, "mkisofs" is an alias to alternatives that either map to "xorriso" (9) or "genisoimage" (8). * * Added the Octavia TLS parameters. * RabbitMQ can be configured to run in FIPS mode via the new configuration option RabbitFIPS. The default value is false. * Admin endpoint of Keystone listens on Internal API network by default. * Logging for the designate bind backend is now more fully configured. DNS query logging can be enabled by setting *DesignateBindQueryLogging* to *true*. * Neutron can now be configured to support secure RBAC using *EnforceSecureRbac*. Note, you may not be able to use this until Neutron upstream has support for common RBAC personas (https://docs.openstack.org/keystone/latest/admin/service-api- protection.html#roles-definitions). * Keystone can now be configured to support secure RBAC personas (https://docs.openstack.org/keystone/latest/admin/service-api- protection.html#roles-definitions) with the *EnforceSecureRbac* setting. Note that deployments with mixed permission models will have unexpected side-effects. Setting this option won't have meaningful effect until all services in your deployment support secure RBAC personas. * The new parameter "EnforceSecureRbac" has been added to enforce authorization based on common RBAC personas. Currently in glance the support is only available for project-admin, project-member and project-reader personas and system personas will come in a later release. * The new "KeystoneNotificationDriver" parameter has been added. This parameter overrides the global "NotificationDriver" parameter and allows customizing notification driver only in Keystone, which is required to use notification listner function in Barbican. * Add *NovaShowHostStatus* to allow overriding API policies to access the compute host status in the requested Nova server details. The default value 'hidden' allows only admins to access it. Setting it to 'all' ('unknown-only') without additional fine-grained tuning of *NovaApiHostStatusPolicy* shows the full (limited) *host_status* to the system/project readers. Add *NovaApiHostStatusPolicy* that defines a custom API policy for *os_compute_api:servers:show:host_status and `os_compute_api:servers:show:host_status:unknown-only*. These rules, or roles, replace the admins-only policies based on the given *NovaShowHostStatus*: 'unknown-only' shows the limited host status UNKNOWN whenever a heartbeat was not received within the configured threshold, and 'all' also reveals UP, DOWN, or MAINTENANCE statuses in the Nova server details. Finally, *NovaShowHostStatus*: 'hidden' puts it back being visible only for admins. Additional policies specified using *NovaApiPolicies* get merged with this policy. * A heat parameter "IronicPowerStateChangeTimeout" has been added which sets the number of seconds to wait for power operations to complete, i.e., so that a baremetal node is in the desired power state. If timed out, the power operation is considered a failure. The default is 60 seconds, which is the same as the current Ironic default. * Added "pure_iscsi_cidr" and "pure_host_personality" and "eradicate_on_delete" support for the Pure Storage FlashArray Cinder driver. * Added "NovaDisableComputeServiceCheckForFfu" parameter to configure "nova::workarounds::disable_compute_service_check_for_ffu" to disable the service version check workaround for FFU. * Adding Hugepages role parameter Hugepages management was always a manual step done by operators via the TripleO parameter "KernelArgs". This is error prone and causing confusion. The new "Hugepages" parameter allow operators to define hugepages as dictionnary, making it easier to read and follow. To prevent unvolontary changes, there's multiple validations before applying a change: * We convert the current running configurations to an actual dictionnary that we validate the new format against * If no change is necessary, even though the format might not be the same, there's no kernel_args update. * By default, we don't remove hugepages in places except when operators specifically set the "ReconfigureHugepages" to true. This change is also opening the door to more automations and automatic tuning. Upgrade Notes ************* * Support for the following three volume drivers have been removed. * Dell EMC ScaleIO * Dell EMC VxFlexOS * Dell EMC VMAX * The following services should be removed from roles data during upgrade. * "OS::TripleO::Services::CinderBackendScaleIO" * "OS::TripleO::Services::CinderBackendDellEMCVxFlexOS" * "OS::Tripleo::Services::CinderBackendDellEMCVMAXISCSI" * Redis is now disabled by default in new deployments, so existing deployments have to delete the redis resource in pacemaker prior to upgrade, or include the new environment file ha-redis.yaml if they still implicitely depend on redis. * Support for networking-bigswitch has been removed, because the plugin is no longer maineined. * Support for the novajoin service has been removed. * The "OS::TripleO::Service::Novajoin" resource has been removed. It should be removed from roles data before upgrade. * The default boot mode for ironic deployed nodes is now "uefi" when no boot mode is explicitly set in the node's driver_info, capabilities, or instance_info configuration. To restore the previous default, set the heat parameter "IronicDefaultBootMode" to "bios". * The default UEFI iPXE bootfile is now *snponly.efi*. The boolean parameter *IronicIPXEUefiSnpOnly* was added to allow custom configuration. When set to *true* snponly is used, when *false* the previous default ipxe.efi is used. See bug: 1959726 (https://bugs.launchpad.net/tripleo/+bug/1959726) Deprecation Notes ***************** * The MlnxSDNUsername and MlnxSDNPassword have been deprecated and have no effect * The "MysqlIncreaseFileLimit" parameter has been deprecated and has no effect now. * The "IronicIpVersion" parameter has been deprecated and has no effect. * Using environments/enable-designate.yaml has been deprecated in favor of environments/services/designate.yaml, the current location for environment files that enable TripleO components. * With the switch to ephemeral heat for the overcloud, the UndercloudMinion is no longer viable. Deploying UndercloudMinion is not supported anymore and environments files to enable its deployment are dropped. Bug Fixes ********* * Adds the port used for directly accessing Ironic-Inspector using TLS, 13050, to the list of ports to permit inbound connections on. * Rsyslog config for haproxy (https://bugs.launchpad.net/tripleo/+bug/1953672) * Before this patch, invalid certificates would be detected close to the end of the deployment. In small environments, this comes fast but in an environment with a large number of nodes, failures would come really late after a few hours of deployment. With this validation, it now fails before step1 at host_prep_steps if the certificate is smaller than 512 bytes if UsePublicTLS is set to true and PublicSSLCertificateAutogenerated is set to false. It will also use openssl to verify the state of the certificate and fail if the certificate is invalid or expired. * When we install libvirt on a host, the system parameter "fs.aio- max- nr" is to 1048576. Since we containerized libvirtd, we lost this system parameter. We now make sure it's defined by adding it from the nova-libvirt-common template. * Enable Swift replicators in single replica mode to ensure cleanup of old tombstone (.ts) files. Sleep interval between replication runs is set to 24 hours to prevent unneeded load on the systems if no replication is needed. Other Notes *********** * A new param MlnxSDNToken has been added to authenticate sdn controller * Steps are taken to minimize chances of confusion between the default block storage volume type established by the CinderDefaultVolumeType parameter, and cinder's own __DEFAULT__ volume type. In a new deployment where no volumes exist, cinder's __DEFAULT__ type is deleted because it is redundant. In an upgrade scenerio, if volumes exist then the __DEFAULT__ type's description is updated to indicate the actual default volume type is the one established by the CinderDefaultVolumeType parameter. * "OvsDpdkDriverType" is now deprecated. Note that is had no effect since we upgraded to OVS 2.6, where we stopped supporting the configuration of DPDK driver in puppet-vswitch. Since then, we couldn't change the driver; so we can safely deprecate this parameter and remove it in a future release. * "podman image prune" is no longer used on the undercloud to remove unused images during the undercloud update/upgrade. With the usage of ephemeral Heat, not all images will always be used by running or stopped containers, so "podman image prune" should not be used to clean up the local container image storage. Images that are no longer being used can still be removed individually with "podman rmi". Changes in tripleo-heat-templates 15.1.0..16.0.0 ------------------------------------------------ 5136dd9d8 Have Ceph log to a file for scenario 001/004 720dd1482 Add HostnameFormatDefault for Ceph related roles 07adbb7b7 Update .gitignore de668b4ec Use FQCN for ansible builtin tasks 4d23590ca Ceilometer: Remove incomplete cache parameters 6f8a5bc1e Memcached: Allow puppet to be aware IPv6 is used e66f495b1 Include redis templates in Octavia configuration 15744039d Increase stop_grace_period for Octavia controller services 0fa959acb Add support for ovn bgp agent 20230cd59 Remove support for the novajoin service df569e638 Fix typo in HciCephObject role tag 115439e6b Add missing option for rgw/swift compatibility 5d1e6f8c0 Added log volumes for ceilometer-agent-ipmi d3d20bb44 Etcd: Update cluster membership when replacing a node 881334004 Ironic: Use generated dnsmasq conf file 875155550 Add Octavia TLS parameters 0d4fbc86a Remove support for Nuage core plugin e99a251ad Use consistent indent in .sh files 5249a06d4 Nova: Fix missing cache backend d0ca9fe63 Fix trailing slashes in bind-mounts and linting 35eb903a8 Fix network-environment.yaml ipv6 {{network.name}}Routes 5bf166be6 Drop services not used for undercloud role 243f80b8b Octavia: Add missing region_name parameters f59346887 Cinder: Remove leftover of Dell EMC VMAX driver support a2674a176 Update Ceph client service to handle external Ceph 4dc74ac16 Add CephIngress resource fa69bfc1e Disable GSSAPIAuthentication by default f97c99bc2 Use puppet parameters instead of hieradata key b35015b30 Fix sshd host_prep_tasks 309c89e90 Only run mysql upgrade commands when needed 263fee246 Ensure db initialization is not executed by puppet 087d67733 Designate: Ensure pool management by puppet is disabled 1d77d9af2 Don't add conntrack entries for vxlan 67969af3d Remove support for networking-bigswitch 7ec40a3c5 Added NovaDisableComputeServiceCheckForFfu var a8b849f03 Remove unused deployed_server_port_map output 219817528 Remove Nova from undercloud during upgrades 1395d1c49 Update Barbican Orders policy for secure-rbac 7ca6a836f rsyslog: Add missing logging sources for gnocchi services e07098b53 rsyslog: Add missing logging sources for aodh services a1b967faf Add support for additional log sources for rsyslog 7f8876ce7 Sync updated DB root password in running container 2329e416e Required DDP package is not loaded issue 88f2dfbba Update of OVN controllers as an external task. e1de2bcb7 Add CephNfs service on roles providing "external" network connectivity 9ed9c8da5 Horizon: Fix the wrong policy parameters b1e1df2b7 Enable designate-dashboard ae866ab47 Adding Hugepages role parameter c275d7870 Do not run puppet in docker_config 0c3ea4c28 Allow nic-config conversion without Heat 27b8210fd Align defaults for SoftwareConfigTransport 64a19091a Run the SSL verification at step2 18e7522d6 Fix ca-certs-baremetal-puppet.yaml description in header 71ed74176 Update Barbican Secure-RBAC policy 9cb551201 Cleanup openldap certs database 19b0b7429 Remove "ceph" tags for the TripleO cephadm branch d72a23759 Expose tripleo_cephadm_default_container boolean e93b454d6 Redis: Hard-code paths of configuration files 5746310b6 Replace dnf by tripleo_dnf_stream for updates. cd7d10133 Move zuul jobs layout to centos9 only for master branch daa48254e Exclude /etc/openldap to avoid overriding ro file 7e8d88afa Allow deployments to run when selinux is disabled fceeb2fbd Fix AnyErrorsFatal type 85ccef292 Fix Redis config generation when fd limit changes 3ae6ce355 Don't bind host's /run in multipathd container d5701e6ce Validate SSLCertificate is defined a3fa2a052 Nova: Use cross_az_attach from nova::cinder 19c11813d Fix ironic boot interface for undercloud ceed5ac9e Fix OS_CLOUD for multistack and nova az tasks acf032a09 Designate: miniDNS and bind9 instances on the proper networks d3a6e7a99 Start the neutron metadata agent with cgroupns host bd13adefd Add parameter IronicIPXEUefiSnpOnly 7eb280ace Skip podman purge on Undercloud 33d4b44ae Remove unused environment file 7bb44f26b Enable clean-up service for novajoin by default 17004426a Drop Nova and NovaJoin services from UC role data b2b9e983c Add heat::trustee parameters ec33ab404 Disable heat by default in favor of ephemeral-heat. caed5081e Keystone: Use system-admin to create resources c2d110257 Use Internal API by default for Keystone admin endpoint c3affa49a Nova: Use internal endpoint to access Keystone 97c1306b2 Defining fs.aio-max-nr for hosts with libvirt service ff7bc29c7 Added rabbit FIPS flag to FIPS env fle 3f7db6a9a Placement: Enable proxy headers parsing 8e28fde39 Allow neutron to configure secure RBAC options 9aa90bd1a Skip 'ensure dnf modules' for CS9 on undercloud-upgrade 59edff435 Add RabbitFIPS parameter dde9a258d Update dervice_pci script to handle pci address formats 6ff47463b Configure logging for designate bind backend ebab335f3 Role specific container support db63209ae Revert "Update cell0 db connection, if required" e36f44cad Check if passthrough user_config is decoded properly from hiera data ed560e46c Pass OS_CLOUD env when migrating to heat ephemeral. cef35a45a Fix cloud-init detection rules 97a2bd2ca Reduce frequency of task retries 5b9648dd9 Disable libvirtd and stop it 2caf85f84 fix path typo 72e75597c Fix ignored OctaviaControlSecurityGroup dfeb0e643 Nova: Configure [keystone] parameters a1f6142b9 Missing OVN Parameters 9b5dba49e Cinder: Remove support for deprecated Dell EMC volume drivers d57f9a877 Add ironic-inspector TLS endpoint port to be reachable 277ef9bbc README: Remove OVN row f63176e97 Horizon: Manage policy files 4362c14ce Disable metrics_qdr binding in HAProxyEdge b4a9058b8 Make sure libvirt guests shut down before network 2a27e8bdb Enable policy rule management in nova-compute a170d70e2 Add OVNContainerCpusetCpus 5326c3d5e Move *NetworkConfigTemplate to parameter_defaults 81d546a23 Add show unknown only host_status to scn002 b11c78a02 Add show all host_status policy to scn001 2b9461e97 Fix remaining usage of internal url for www_authenticate_uri 3a04690cd Enable notification from Keystone when Barbican is enabled 4e078fc42 Handle ping test ips when not available 392abfd2a Include subnet in unbound colloc port creation to ensure IP allocation b49da7236 Allow keystone to configure secure RBAC options dfd28f7b1 Revert "Revert "Add chrony waitsync back in"" 98e9b2983 Align services of ControllerSriov role 21bd42b4f Revert "Add chrony waitsync back in" 925af6378 Add generated deployed network environment 4f7e4fd18 Fix killscript regex match for libpod-conmon-* 62ded067d Fix IPv6 router on UC re-install 8d46c9c38 Add chrony waitsync back in 160936df1 Use public endpoint for [keystone_authtoken] www_authenticate_uri 3e4135aa3 Add CephAdmVerbose variable 6d142165f IDM server registration is fixed to one server only ee617c09a Add missing services to ControllerNovaStandalone role 15ff29cf1 Fix IronicImageDownloadSource on undercloud 71012af59 Replace deprecated octavia::controller::port_detach_timeout 4c1206938 Remove hieradata for Redis Sentinel 423644945 Check that redis is removed prior to FFU 98d731768 Use Python3 yoga unit tests 157d0c112 Start the l3 agent with cgroupns: host 97da97eda Fix external-ceph deployment directory reference 008b55afa fix InternalApi subnet for ControllerNovaStandalone role d8475ede4 Remove tripleo_ovn_mac_port_name port tag eae88fe0a Sync neutron-ovs-dvr.yaml copies 3983bc744 Update cell0 db connection, if required cb24c0bff Revert "Fix the wrong parameter name to disable management of libvirt services" c3bb91338 Missing rsyslog parameters for HAProxy 20368af84 Fix the wrong parameter name to disable management of libvirt services 9d4d7f9a6 Manage octavia flavor in tripleo-ansible 9d06a3c7e Exec libvirtd in a transient scope a77d5ebde Make tools scripts executable 2e4f35b07 Add templates for custom network ci job a88c32f51 Replace deprecated manila::sql_connection 5e77f8198 Manila: Use internal endpoints to access other services e78fbfb99 Nova: Use internal endpoint to access Neutron API efdbece13 Run designate-api under apache a035de7d3 Remove setype for /var/log/containers creation 98af86994 Parameters for API policies to show a host status 7a99ae23e Introduce a new linter for yaml-validate, and correct issues 613dd92d8 Add a configuration option to enable secure RBAC in Heat 1f868ba53 Ensure we bind-mount /dev instead of /dev/ 579102e54 Sc001: Enable glance image import methods 4df0b3519 Neutron: Use internal endpoint when accessing Placement API 3b80985e5 Assign project-scoped service role for token validation e6f24185b CoreServices list has to be flatten 08c5e74d3 Placement: Define root path explicitly 0436025d8 Add IronicDefaultBootInterface parameter 3055a4f11 Use only internal endpoints in Octavia controller services 1127ac015 Accept lists for Manila*ShareDataPools and Manila*EthernetPorts 7e1ee7511 set manila context-is-admin policy rule for secure-rbac dbf5d36fd Add timestamps to nova/placement wait for scripts 969043bef Correct the multiple_nics_vlans_dvr.j2 file path 06787c853 Add support for powermax. 6dc38e414 Fix doc link 531aecc4b Fix convert_v1_net_data.py - ipv6 property 3a0b86e4e Add ephemeral Heat entry to clouds.yaml 047499937 Fix condition to add per subnet routes parameter ee846d21e [Neutron] Add custom env file to set dns_domain_name 0555ee4df [Pure Storage] Set default parameter for iscsi cidr 368102b14 Deprecate ineffective MysqlIncreaseFileLimit efc328c66 Make PingTestGatewayIPsMap a map of flatten lists 1f79df6da Update project personas policies in custom neutron policy 70720d21d [Pure Storage] Add new FlashArray Cinder driver params 632afe18c Add rgw max attributes constraints c72579637 neutron: Stop setting the allow_overlapping_ips parameter 925e2db46 Keystone: Remove unused container_puppet_tasks 8cb2fd898 Fix logic related to CinderEtcdLocalConnect parameter 7f04caaf4 Use a designate specific directory for the bind persistent storage 0265f9572 Clean up update converge file 1314f345f [ovn] Deleting ovn agents during scale down tasks 61a1dcc3b Remove double slashes in path a287ebc42 Add socket keepalive options for the pymemcache backend 839ddccdb Implement project personas in custom barbican policy file 0fe7045fa Deprecate env/enable-designate in favor of env/services/designate.yaml b3863568a Fix set_fact on the CephMgrAnsibleVars 52ed0f05b Remove old non-ha container removal tasks 6d8091240 task-core basic framework 5d830980e Add ping test for all networks gateway IPs d98009ae4 Change authentication method for Mellanox sdn controller d33865cde Remove mariadb-server packages from the host f2fd2a856 Add ovn_chassis_mac_map to ExtraConfig role 273b41a5d Use ServiceNetMap to filter PublicNetwork in haproxy-tls f6eddad78 Don't use service_net_map_replace in krb-svc-principals 65151adc1 Add parameter IronicPowerStateChangeTimeout 48ed6294c Do not error out when a network is ipv6 only 040859a73 Clean up implementation to manage volume type by puppet 82a0781b4 Revert "Fix TLS-e with custom network names" 4bf486603 Clear up confusion on cinder's default volume type 4ba798c57 Add environment file for FIPS deployments e2f6aec3e Add auth type for snmpd readonly user 6bae260bc Fix TLS-e with custom network names 26b05056e Adding NovaMkisofsCmd parameter to nova-compute 20311a0a5 Flatten yaql list expressions f8e7bf2bb Do not set rabbitmq SSL CA certs when InternalTLSCAFile is '' 6b50e1622 Flatten yaql list expressions b3e5e03d6 Drop UndercloudMinion environments 6b4a4389f Remove ganesha_vip extra config workaround 716fe9bc6 Deprecate `OvsDpdkDriverType` parameter 015fc41bd Sc04: Enable glance sparse image upload ba7f896c5 Revert "Enable fernet token cache by default" 9193090b1 Allow configuring secure RBAC in glance 1cbd03a13 Use double quotes for string comparisons policies in glance 34b7d28e6 Drop non-bundle manila from puppet-config 76adfd420 Use true/false for boolean values 4d6dc5308 Refactor usage of QemuMemoryBackingDir f834c26d5 Enable new SELinux boolean for vTPM support f664302c3 Enable new SELinux boolean for vTPM support 40d5282eb follow-up: Enable support for Libvirt modular daemons 42d746921 Introduce ApplyCephConfigOverridesOnUpdate 3d2fec12b Implement project personas in custom cinder policy file 9e30f281f Remove network_virtual_ips hard-coded name filter c0b778301 GaneshaNetwork - fallback -> external -> ctlplane 2202412db Implement project personas in custom neutron policy file 433cc9375 Implement project personas in custom keystone policy file b522254bc Remove six library b30b3cc82 Implement project personas in custom placement policy file 5a43e8a30 Use EnableInternalTLS to set pssl in nb and sb 4477e2862 Implement project personas in custom manila policy file 716492274 Deprecate IronicIpVersion 9d6f24131 Set default value of IronicDefaultBootMode to uefi 9be1b7746 Run Swift replicators in single replica mode 762f5056d Allow Swift to configure secure RBAC options 93d06c2b9 Cinder: Update puppet parameters to set castellan options ccacb548e Enable enable_proxy_headers_parsing in Designate API 5e5472337 Add note indicating only Controllers use network VIPs e618ad8d3 Honor the ExternalSwiftUserTenant parameter Diffstat (except docs and test files) ------------------------------------- .gitignore | 17 +- README.rst | 2 - ci/custom_ci_roles_data.yaml | 263 ++++ ci/custom_names_network_data.yaml | 60 + ci/custom_names_vip_data.yaml | 6 + .../multiple-nics/custom-network-environment.yaml | 27 + ci/environments/neutron_dns_domain.yaml | 2 + ci/environments/scenario000-standalone.yaml | 2 - ci/environments/scenario001-standalone.yaml | 27 +- ci/environments/scenario002-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 14 +- common/common-container-setup-tasks.yaml | 3 +- common/container-puppet.sh | 4 +- common/deploy-steps-playbooks-common.yaml | 20 +- common/deploy-steps-tasks-step-0.j2.yaml | 6 + common/deploy-steps-tasks-step-1.yaml | 28 +- common/deploy-steps-tasks.yaml | 8 +- common/deploy-steps.j2 | 84 +- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 4 +- common/services/deployment-bootstrap.yaml | 71 + common/services/deployment-host-prep.yaml | 52 + common/services/deployment-legacy-deploy.yaml | 31 + common/services/deployment-network.yaml | 41 + common/services/deployment-post-deploy.yaml | 42 + common/services/deployment-state.yaml | 104 ++ common/services/role.role.j2.yaml | 21 +- .../nova_wait_for_api_service.py | 27 +- .../nova_wait_for_compute_service.py | 27 +- .../pacemaker_restart_bundle.sh | 28 +- container_config_scripts/pacemaker_wait_bundle.sh | 94 +- .../placement_wait_for_service.py | 26 +- deployment/README.rst | 3 + deployment/aodh/aodh-api-container-puppet.yaml | 40 +- .../aodh/aodh-evaluator-container-puppet.yaml | 34 +- .../aodh/aodh-listener-container-puppet.yaml | 33 +- .../aodh/aodh-notifier-container-puppet.yaml | 33 +- .../barbican/barbican-api-container-puppet.yaml | 47 +- deployment/barbican/barbican-client-puppet.yaml | 8 +- .../ceilometer-agent-central-container-puppet.yaml | 25 +- .../ceilometer-agent-compute-container-puppet.yaml | 31 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 25 +- ...ometer-agent-notification-container-puppet.yaml | 29 +- .../ceilometer-base-container-puppet.yaml | 13 +- deployment/cephadm/ceph-base.yaml | 25 +- deployment/cephadm/ceph-client.yaml | 30 +- deployment/cephadm/ceph-external.yaml | 2 - deployment/cephadm/ceph-grafana.yaml | 2 - deployment/cephadm/ceph-ingress.yaml | 72 + deployment/cephadm/ceph-mgr.yaml | 32 +- deployment/cephadm/ceph-nfs.yaml | 6 +- deployment/cephadm/ceph-osd.yaml | 2 - deployment/cephadm/ceph-rbdmirror.yaml | 2 - deployment/cephadm/ceph-rgw.yaml | 8 +- deployment/certs/ca-certs-baremetal-puppet.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 78 +- .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 82 - deployment/cinder/cinder-backend-pure-puppet.yaml | 30 + .../cinder/cinder-backup-container-puppet.yaml | 29 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 49 +- .../cinder/cinder-common-container-puppet.yaml | 12 +- .../cinder/cinder-scheduler-container-puppet.yaml | 29 +- .../cinder/cinder-volume-container-puppet.yaml | 24 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 +- deployment/database/mysql-base.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 26 +- deployment/database/mysql-pacemaker-puppet.yaml | 102 +- deployment/database/redis-base-puppet.yaml | 16 - deployment/database/redis-container-puppet.yaml | 32 +- deployment/database/redis-pacemaker-puppet.yaml | 50 +- .../cinder-backend-dellemc-vxflexos-puppet.yaml | 172 --- .../cinder/cinder-backend-scaleio-puppet.yaml | 153 -- deployment/deprecated/multipathd-container.yaml | 26 +- .../nova/nova-libvirt-container-puppet.yaml | 42 +- .../novajoin/ipaclient-baremetal-ansible.yaml | 191 --- .../novajoin/novajoin-container-puppet.yaml | 273 ---- .../designate/designate-api-container-puppet.yaml | 78 +- deployment/designate/designate-base.yaml | 21 +- deployment/designate/designate-bind-container.yaml | 48 +- .../designate-central-container-puppet.yaml | 23 +- .../designate/designate-mdns-container-puppet.yaml | 31 +- .../designate-producer-container-puppet.yaml | 22 +- .../designate/designate-sink-container-puppet.yaml | 22 +- .../designate-worker-container-puppet.yaml | 22 +- deployment/etcd/etcd-container-puppet.yaml | 195 ++- deployment/frr/frr-container-ansible.yaml | 198 ++- deployment/glance/glance-api-container-puppet.yaml | 45 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 28 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 34 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 34 +- deployment/haproxy/haproxy-container-puppet.yaml | 38 +- .../haproxy/haproxy-edge-container-puppet.yaml | 1 + .../haproxy-internal-tls-certmonger.j2.yaml | 24 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 87 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 25 +- deployment/heat/heat-api-container-puppet.yaml | 29 +- deployment/heat/heat-base-puppet.yaml | 23 +- deployment/heat/heat-engine-container-puppet.yaml | 29 +- .../heat/heat-ephemeral-container-ansible.yaml | 60 +- deployment/horizon/horizon-container-puppet.yaml | 27 +- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 10 +- deployment/ironic/ironic-api-container-puppet.yaml | 25 +- .../ironic/ironic-conductor-container-puppet.yaml | 54 +- .../ironic/ironic-inspector-container-puppet.yaml | 29 +- .../ironic-neutron-agent-container-puppet.yaml | 22 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 31 +- deployment/iscsid/iscsid-container-puppet.yaml | 16 +- deployment/kernel/kernel-baremetal-ansible.yaml | 22 +- .../kernel-boot-params-baremetal-ansible.yaml | 33 + deployment/keystone/keystone-container-puppet.yaml | 102 +- deployment/logging/files/barbican-api.yaml | 22 +- deployment/logging/files/glance-api.yaml | 22 +- deployment/logging/files/heat-engine.yaml | 22 +- deployment/logging/files/keystone.yaml | 22 +- deployment/logging/files/neutron-api.yaml | 22 +- deployment/logging/files/nova-api.yaml | 22 +- deployment/logging/files/nova-common.yaml | 19 +- deployment/logging/files/nova-libvirt.yaml | 40 +- deployment/logging/files/nova-metadata.yaml | 22 +- deployment/logging/files/placement-api.yaml | 22 +- deployment/logging/rsyslog-container-puppet.yaml | 34 +- .../logging/rsyslog-sidecar-container-puppet.yaml | 18 +- deployment/logging/stdout/barbican-api.yaml | 34 +- deployment/logging/stdout/haproxy.yaml | 26 +- deployment/logging/stdout/heat-api-cfn.yaml | 34 +- deployment/logging/stdout/heat-api.yaml | 34 +- deployment/logging/stdout/keystone.yaml | 34 +- deployment/logging/stdout/nova-api.yaml | 34 +- deployment/logging/stdout/nova-common.yaml | 2 + deployment/logging/stdout/nova-libvirt.yaml | 95 ++ deployment/logging/stdout/nova-metadata.yaml | 34 +- deployment/logging/stdout/placement-api.yaml | 34 +- .../logrotate-crond-container-puppet.yaml | 29 +- deployment/manila/manila-api-container-puppet.yaml | 46 +- deployment/manila/manila-backend-powermax.yaml | 80 + deployment/manila/manila-backend-unity.yaml | 8 +- deployment/manila/manila-backend-vmax.yaml | 8 +- deployment/manila/manila-backend-vnx.yaml | 8 +- deployment/manila/manila-base.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 29 +- deployment/manila/manila-share-common.yaml | 4 +- .../manila/manila-share-container-puppet.yaml | 27 +- .../manila/manila-share-pacemaker-puppet.yaml | 36 +- .../memcached/memcached-container-puppet.yaml | 46 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 22 +- deployment/metrics/collectd-container-ansible.yaml | 22 +- deployment/metrics/collectd-container-puppet.yaml | 24 +- deployment/metrics/qdr-container-ansible.yaml | 15 +- deployment/metrics/qdr-container-puppet.yaml | 22 +- .../multipathd/multipathd-container-ansible.yaml | 23 +- .../neutron/derive_pci_passthrough_whitelist.py | 502 ++++-- deployment/neutron/kill-script | 2 +- .../neutron-agents-ib-config-container-puppet.yaml | 46 +- .../neutron/neutron-api-container-puppet.yaml | 47 +- deployment/neutron/neutron-base.yaml | 1 - .../neutron-bgpvpn-api-container-puppet.yaml | 16 +- .../neutron-bigswitch-agent-baremetal-puppet.yaml | 37 - .../neutron/neutron-dhcp-container-puppet.yaml | 35 +- .../neutron/neutron-l2gw-api-container-puppet.yaml | 18 +- .../neutron/neutron-l3-container-puppet.yaml | 30 +- .../neutron/neutron-metadata-container-puppet.yaml | 30 +- .../neutron-mlnx-agent-container-puppet.yaml | 52 +- .../neutron-ovs-agent-container-puppet.yaml | 95 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 8 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 16 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 16 +- .../neutron-plugin-ml2-container-puppet.yaml | 16 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 38 +- .../neutron-plugin-nsx-container-puppet.yaml | 18 +- deployment/neutron/neutron-plugin-nuage.yaml | 96 -- .../neutron/neutron-sfc-api-container-puppet.yaml | 18 +- .../neutron-sriov-agent-container-puppet.yaml | 19 +- deployment/nova/nova-api-container-puppet.yaml | 89 +- deployment/nova/nova-az-config.yaml | 23 +- deployment/nova/nova-base-puppet.yaml | 106 +- .../nova/nova-compute-common-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 56 +- .../nova/nova-conductor-container-puppet.yaml | 30 +- deployment/nova/nova-ironic-container-puppet.yaml | 32 +- ...a-virt-common.yaml => nova-libvirt-common.yaml} | 22 +- .../nova/nova-libvirt-guests-container-puppet.yaml | 6 +- deployment/nova/nova-manager-container-puppet.yaml | 15 +- .../nova/nova-metadata-container-puppet.yaml | 25 +- .../nova-migration-target-container-puppet.yaml | 24 +- .../nova-modular-libvirt-container-puppet.yaml | 98 +- .../nova/nova-scheduler-container-puppet.yaml | 31 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 37 +- .../octavia/octavia-api-container-puppet.yaml | 82 +- deployment/octavia/octavia-base.yaml | 12 +- .../octavia/octavia-deployment-config.j2.yaml | 23 +- .../octavia-health-manager-container-puppet.yaml | 32 +- .../octavia-housekeeping-container-puppet.yaml | 26 +- .../octavia/octavia-worker-container-puppet.yaml | 33 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 16 +- .../ovn/ovn-controller-container-puppet.yaml | 233 ++- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 30 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 47 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 49 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 28 +- .../pacemaker/clustercheck-container-puppet.yaml | 22 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 25 +- .../pacemaker-remote-baremetal-puppet.yaml | 6 +- .../placement/placement-api-container-puppet.yaml | 32 +- deployment/podman/podman-baremetal-ansible.yaml | 22 + deployment/qdr/qdrouterd-container-puppet.yaml | 22 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 38 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 24 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 51 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 51 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 24 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 51 +- deployment/snmp/snmp-baremetal-puppet.yaml | 5 + deployment/sshd/sshd-baremetal-ansible.yaml | 6 +- deployment/sshd/sshd-baremetal-puppet.yaml | 2 +- .../external-swift-proxy-baremetal-puppet.yaml | 2 + deployment/swift/swift-proxy-container-puppet.yaml | 42 +- .../swift/swift-ringbuilder-container-puppet.yaml | 18 +- .../swift/swift-storage-container-puppet.yaml | 155 +- deployment/timesync/chrony-baremetal-ansible.yaml | 6 +- .../tripleo-packages-baremetal-puppet.yaml | 33 +- deployment/unbound/unbound-container-ansible.yaml | 39 +- deployment/undercloud/minion-rabbitmq-puppet.yaml | 65 - deployment/undercloud/undercloud-upgrade.yaml | 41 +- environments/cinder-dellemc-vmax-iscsi-config.yaml | 12 - environments/cinder-dellemc-vxflexos-config.yaml | 39 - environments/cinder-pure-config.yaml | 3 + environments/cinder-scaleio-config.yaml | 39 - ...ontainerized-control-plane-dellemc-scaleio.yaml | 35 - environments/deployed-network-environment.j2.yaml | 65 + environments/deployed-networks.yaml | 2 +- environments/disable-neutron.yaml | 1 - environments/docker-ha.yaml | 1 - environments/enable-designate.yaml | 15 +- environments/enable-secure-rbac.yaml | 1598 +++++++++----------- environments/external-ceph.yaml | 2 +- environments/fips.yaml | 9 + environments/ha-redis.yaml | 6 + environments/lifecycle/update-converge.yaml | 7 - environments/manila-cephfsganesha-config.yaml | 1 + environments/manila-powermax-config.yaml | 20 + environments/net-multiple-nics-vlans.j2.yaml | 2 +- environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 9 +- environments/neutron-ml2-bigswitch.yaml | 31 - environments/neutron-ml2-mlnx-sdn.yaml | 3 +- environments/neutron-ovs-dvr.yaml | 13 +- environments/rhsm.yaml | 2 +- environments/services-baremetal/barbican.yaml | 3 + environments/services-baremetal/octavia.yaml | 2 +- environments/services/barbican.yaml | 3 + environments/services/designate.yaml | 20 + environments/services/frr.yaml | 4 + environments/services/neutron-ovn-dpdk.yaml | 3 + environments/services/neutron-ovn-sriov.yaml | 2 + environments/services/neutron-ovs-dpdk.yaml | 1 - environments/services/neutron-ovs-dvr.yaml | 6 +- environments/services/novajoin.yaml | 5 - environments/services/octavia.yaml | 2 +- .../services/undercloud-remove-novajoin.yaml | 4 - environments/ssl/tls-endpoints-public-dns.yaml | 1 - environments/ssl/tls-endpoints-public-ip.yaml | 1 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 - environments/undercloud-enable-nova.yaml | 6 - environments/undercloud.yaml | 14 +- environments/undercloud/undercloud-minion.yaml | 289 ---- .../update-from-keystone-admin-internal-api.yaml | 6 - .../krb-service-principals/role.role.j2.yaml | 22 +- .../post_deploy/undercloud_ctlplane_network.py | 73 +- firstboot/userdata_timesync.yaml | 1 + network/endpoints/endpoint_map.yaml | 384 ----- network/network.j2 | 8 +- network/ports/ovn_mac_addr_port.yaml | 4 - network_data.yaml | 3 +- network_data_dashboard.yaml | 3 +- network_data_ganesha.yaml | 3 +- network_data_routed.yaml | 3 +- network_data_subnets_routed.yaml | 3 +- overcloud-resource-registry-puppet.j2.yaml | 17 +- overcloud.j2.yaml | 26 +- .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 52 - .../controller/neutron-ml2-bigswitch.yaml | 84 - puppet/role.role.j2.yaml | 21 +- ...pe-for-snmp-readonly-user-c90c9e5a12c92893.yaml | 6 + ...-boot-interface-parameter-f07c1fe24c7cb543.yaml | 8 + ...ironic-inspector-tls-port-4e59d0c2b2922f68.yaml | 5 + .../add-novamkisofscmd-param-6dbb64e4497a8ce6.yaml | 7 + .../add-octavia-tls-settings-7583df511c53b27a.yaml | 4 + .../add-rabbit-fips-option-ddf5a0d7e37d8e5d.yaml | 5 + .../notes/add_token_auth-fb9f0dfe8e70a4c1.yaml | 10 + ...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml | 4 + .../certificiate-validation-1b08ab8cf40b7cad.yaml | 11 + ...ge-keystone-admin-network-a29499018c323cea.yaml | 4 + ...arify-default-volume-type-c77e7a7ddafdf172.yaml | 12 + .../dellemc-driver-cleanup-4a1febdc51ec674c.yaml | 14 + ...te-MysqlIncreaseFileLimit-20548c5f7234d14c.yaml | 5 + ...precate-ironic-ip-version-27e24f03da6ddd59.yaml | 4 + ...gnate-enable-bind-logging-642e77541645519b.yaml | 6 + ...esignate-environment-file-bd08eef69758a996.yaml | 6 + .../notes/dpdk_driver_remove-76d61711c19cd099.yaml | 7 + ...e-secure-rbac-for-neutron-842bd41339a48f26.yaml | 8 + ..._secure_rbac_for_keystone-62685484ef589726.yaml | 9 + ...e_rbac_support_for_glance-167d53c491cd326c.yaml | 8 + ...-fs.aio-max.nr-on-compute-06447122b8e12c71.yaml | 7 + ...stone-notification-driver-0c71165430eb57ef.yaml | 7 + ...nova_api_show_host_status-f0dfaf4c2b0c536f.yaml | 19 + .../notes/power_state-457f12af30b9e341.yaml | 8 + ...ure_storage_update_params-4de801b1ed2d0744.yaml | 6 + ...redis_disabled_by_default-9992b2bae9b149cd.yaml | 7 + ...ute_service_check_for_ffu-19a91d20e146056c.yaml | 6 + ...move-networking-bigswitch-9ae5c280990284a2.yaml | 5 + .../notes/remove-novajoin-3ccef190c99c419b.yaml | 8 + .../remove-undercloud-minion-198ce8ea01c4e366.yaml | 7 + ...p-podman-purge-undercloud-a3a30b5ac3a0951b.yaml | 9 + ...ft-single-replica-cleanup-fdf72b9e462185c7.yaml | 6 + .../tripleo-kernel-hugepages-424c19a4b1579af8.yaml | 23 + .../notes/uefi-boot-mode-a8b1b416a0e9cdc4.yaml | 7 + .../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml | 9 + requirements.txt | 1 - roles/CephAll.yaml | 1 + roles/CephStorage.yaml | 1 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovIB.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/ComputeVdpa.yaml | 1 + roles/Controller.yaml | 5 +- roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNoCeph.yaml | 3 - roles/ControllerNovaStandalone.yaml | 26 +- roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 11 +- roles/ControllerStorageDashboard.yaml | 5 +- roles/ControllerStorageNfs.yaml | 4 +- roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/HciCephAll.yaml | 1 + roles/HciCephObject.yaml | 2 +- roles/Standalone.yaml | 4 +- roles/Undercloud.yaml | 35 - roles/UndercloudMinion.yaml | 33 - roles_data.yaml | 7 +- roles_data_undercloud.yaml | 36 +- sample-env-generator/enable-services.yaml | 29 - sample-env-generator/ssl.yaml | 5 - sample-env-generator/undercloud-minion.yaml | 284 ---- scripts/undercloud-upgrade-ephemeral-heat.py | 24 +- tools/convert_heat_nic_config_to_ansible_j2.py | 17 +- tools/convert_nic_config.py | 5 +- tools/convert_v1_net_data.py | 1 + tools/merge-new-params-nic-config-script.py | 5 +- tools/process-templates.py | 5 +- tools/yaml-validate.py | 99 +- tox.ini | 4 +- zuul.d/layout.yaml | 4 +- 377 files changed, 9015 insertions(+), 5122 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bda47437c..180423b34 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ Jinja2>=2.10 # BSD License (3 clause) -six>=1.10.0 # MIT

1 0

tripleo-common 16.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are chuffed to announce the release of: tripleo-common 16.4.0: A common library for TripleO workflows. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ For more details, please see below. 16.4.0 ^^^^^^ New Features * Split off Ceph related container images This change releases an update on the default tripleo_containers jinja template, splitting off the Ceph related container images. With this new approach pulling the ceph containers is optional, and can be avoided by setting the *ceph_images* boolean to False. e.g., passing something like the following: parameter_defaults: ContainerImagePrepare: - push_destination: true set: name_prefix: openstack- name_suffix: '' namespace: quay.io/tripleomaster neutron_driver: ovn rhel_containers: false tag: current-tripleo ceph_images: false ContainerImagePrepareDebug: true ContainerImageRegistryCredentials: {} avoid the ceph containers being pulled in the undercloud. To make this possible, a new jinja template processing approach has been introduced, and a template basedir parameter (required by the jinja loader) has been added to the BaseImageManager. Finallym, two more *ceph_* prefixed containers, required to deploy the Ceph Ingress daemon are added, and they are supposed to match the tripleo-heat- templates *OS::TripleO::Services::CephIngress* service. The Ingress daemon doesn't use the Ceph daemon container, hence *tripleo container image prepare* should be executed to pull the new container images/tags in the undercloud as made for the Ceph Dashboard and the regular Ceph image. Changes in tripleo-common 16.3.0..16.4.0 ---------------------------------------- d76e4435 Run the ovn-bgp-agent with user ovn-bgp instead of neutron 4a3cead9 Update prometheus and alertmanager containers 854cf9fa Bump Ceph container daemons to v6.0.7 60b48b2e Remove rhel specific packages for ironic-conductor e2bc5ddd Revert "Add ceph_spec library to tripleo-common" 1513e313 Export default location of password file 1a73f956 Remove tftp healthcheck from ironic-pxe image fc36d5a6 Mark Python 3.9 as supported runtime 80b294ba Ensure failures on the undercloud leads to a complete stop a65535ed ovn-bgp-agent image support 82a80c72 Auto-detect partition types for mounting more images 6f67c15f Mariadb: auth_ed25519 with FIPS crypto 77130ddc HA: do not rotate cluster passwords a5f84875 Move zuul jobs layout to centos9 only for master branch 08a8118f Split off Ceph related container images 01bb19a9 Don't install openstack-selinux in containers 096c6eee Add exception handler for node attributes 2cd1fbd8 Fix reference to undefined variables when heat-config times out b09fb3fe Reinstall centos-stream-release from centos repos a74fcf72 fixup if guard for tcib_release edc0199b Base container - Fix bash condition for rhel case fcbe594e Add exception handler for role networks dbc7916f Update how callbacks are injected within ansible 19647e57 Remove selinux-permissive from rhel8 image bf725978 Add configs for RHEL 9 image 8df691d0 Remove remove-machine-id element 38ecd5db Remove remaining reference to the six library Diffstat (except docs and test files) ------------------------------------- container-images/ceph.j2 | 55 ++++ .../container_image_prepare_defaults.yaml | 32 ++- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/tcib/base/base.yaml | 11 +- .../ironic-conductor/ironic-conductor.yaml | 4 - .../os/nova-base/nova-compute/nova-compute.yaml | 2 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 2 +- .../tcib/base/ovn-bgp-agent/ovn_bgp_agent.yaml | 8 + container-images/tripleo_containers.yaml | 20 +- container-images/tripleo_containers.yaml.j2 | 59 ++-- healthcheck/ironic-pxe | 5 +- healthcheck/ovn-bgp-agent | 12 + ...oud-hardened-images-uefi-python3-rt-kernel.yaml | 1 - .../overcloud-hardened-images-uefi-rhel9.yaml | 18 ++ image-yaml/overcloud-images-ceph-rhel9.yaml | 10 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel8.yaml | 1 - image-yaml/overcloud-images-rhel9.yaml | 22 ++ image-yaml/overcloud-realtime-compute-python3.yaml | 1 - ...split_off_ceph_containers-e1a66fa39076c2cf.yaml | 38 +++ scripts/tripleo-mount-image | 88 ++++-- setup.cfg | 1 + tripleo_common/constants.py | 37 +++ tripleo_common/image/base.py | 3 +- tripleo_common/image/kolla_builder.py | 22 +- tripleo_common/inventory.py | 16 +- tripleo_common/templates/deployments.yaml | 6 +- tripleo_common/utils/ansible.py | 2 +- tripleo_common/utils/ceph_spec.py | 303 --------------------- tripleo_common/utils/nodes.py | 7 + tripleo_common/utils/passwords.py | 31 +++ tripleo_common/utils/plan.py | 4 +- zuul.d/layout.yaml | 8 +- 39 files changed, 470 insertions(+), 431 deletions(-)

1 0

tripleo-upgrade 9.0.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are psyched to announce the release of: tripleo-upgrade 9.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 8.1.0..9.0.0 --------------------------------------- 13d7a4c Disable auto discovery 4958251 Make the network_data search more inclusive 2655889 Run control plane update first, next compute and cephstorage last 1bbaeef Fix ping_results_*.log file name 3ab719d Add the update of the OVN controllers before Update Run step. 305d9fb Ensure migrate all the VMs before upgrade the compute acea992 Move zuul jobs layout to centos9 only for master branch 9b2a321 Generate tripleo ansible inventory for Validation a90df48 Remove stein and ceph3 parameters for T to W. 95df601 Set ephemeral-heat option to true by default for Wallaby+ a315ac3 Fast and furious upgrade 55d408d Migrate jobs from CentOS 8 to CentOS 8 Stream d4bde4d Fix services stack export to respect overcloud stack name f272473 Set tripleo-upgrade to use ansible-core 521cfb9 Fixes readme file ad48924 Remove py2 compatibility 644885d [fix] remove condition of migration.timeout 33905d9 Update master for stable/wallaby 69bd654 Improve patch download 790d318 [FFWD upgrade] Adding support of live/cold migration with external workload 898db61 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- README.rst | 74 +++++++------- ansible-requirements.txt | 2 +- defaults/main.yml | 24 +++-- filter_plugins/tripleo_upgrade.py | 9 +- infrared_plugin/main.yml | 14 ++- infrared_plugin/plugin.spec | 11 +++ molecule/molecule-requirements.txt | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 6 +- setup.py | 1 + tasks/common/auxilary-facts.yaml | 4 +- tasks/common/configure_uc_containers.yml | 20 ---- tasks/common/load_roles_from_inventory.yaml | 11 ++- tasks/common/validation_group_run.yaml | 4 +- .../create-overcloud-ffu-hosts-scripts.yaml | 2 +- .../create-overcloud-ffu-scripts.yaml | 108 ++++++++++++--------- tasks/fast-forward-upgrade/main.yml | 7 ++ .../overcloud_upgrade_fast_and_furious.yaml | 21 ++++ .../overcloud_upgrade_hosts.yaml | 2 +- tasks/update/create-overcloud-update-scripts.yaml | 7 ++ tasks/update/main.yml | 11 +++ tasks/upgrade/overcloud_upgrade_converge.yml | 11 --- .../overcloud_system_upgrade.sh.j2 | 43 ++++++++ .../overcloud_upgrade_run.sh.j2 | 5 +- templates/l3_agent_start_ping.sh.j2 | 2 +- templates/node_upgrade_pre.sh.j2 | 6 +- templates/overcloud_update_prepare.sh.j2 | 3 - templates/overcloud_upgrade_converge.sh.j2 | 3 - templates/overcloud_upgrade_prepare.sh.j2 | 3 - templates/ovn-external-update.sh.j2 | 64 ++++++++++++ templates/workarounds.sh.j2 | 7 +- zuul.d/layout.yaml | 15 +-- 33 files changed, 337 insertions(+), 172 deletions(-) Requirements updates -------------------- diff --git a/ansible-requirements.txt b/ansible-requirements.txt index a1b6838..f5398ac 100644 --- a/ansible-requirements.txt +++ b/ansible-requirements.txt @@ -5 +5 @@ -ansible +ansible-core<2.12

1 0

tripleo-operator-ansible 0.8.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are glad to announce the release of: tripleo-operator-ansible 0.8.0: Operator ansible assets for the TripleO project. The source is available from: https://opendev.org/openstack/tripleo-operator-ansible Download the package from: https://tarballs.openstack.org/tripleo-operator-ansible/ For more details, please see below. Changes in tripleo-operator-ansible 0.7.1..0.8.0 ------------------------------------------------ fbcd961 Add tripleo_ceph_deploy role 253618d Add tripleo_ceph_user role 917e0a0 Add tripleo_ceph_spec role 63f0ba7 Add --reproduce-command in UC commands. 20af773 Move zuul jobs layout to centos9 only for master branch 1d330c9 Add tripleo_upgrade role. ade61b2 Bump ansible-lint to 5.3.2 42f5d4f Add overcloud deploy disable-protected-resource-types option 36778dd Generate node unprovision script if wanted 98cc0ab Add default stack to some roles e9dfa53 Added Ephemeral Heat CLI in overcloud_deploy role fae3c7d Modified shell_args plugin for nested lists. da44a72 Overcloud post-installation playbook Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 7 + .pre-commit-config.yaml | 17 +- playbooks/overcloud-post-installation.yml | 93 +++++ plugins/filter/shell_args.py | 20 +- roles/tripleo_ceph_deploy/README.md | 91 +++++ roles/tripleo_ceph_deploy/defaults/main.yml | 41 ++ roles/tripleo_ceph_deploy/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 30 ++ .../molecule/default/molecule.yml | 19 + .../molecule/default/prepare.yml | 8 + roles/tripleo_ceph_deploy/tasks/main.yml | 102 +++++ roles/tripleo_ceph_spec/README.md | 79 ++++ roles/tripleo_ceph_spec/defaults/main.yml | 19 + roles/tripleo_ceph_spec/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 28 ++ .../molecule/default/molecule.yml | 19 + .../tripleo_ceph_spec/molecule/default/prepare.yml | 8 + roles/tripleo_ceph_spec/tasks/main.yml | 64 ++++ roles/tripleo_ceph_user/README.md | 101 +++++ roles/tripleo_ceph_user/defaults/main.yml | 16 + roles/tripleo_ceph_user/meta/main.yml | 45 +++ .../molecule/default/converge.yml | 25 ++ .../molecule/default/molecule.yml | 19 + .../tripleo_ceph_user/molecule/default/prepare.yml | 8 + roles/tripleo_ceph_user/tasks/main.yml | 58 +++ roles/tripleo_deploy/README.md | 2 +- roles/tripleo_overcloud_deploy/README.md | 6 + roles/tripleo_overcloud_deploy/defaults/main.yml | 6 + .../molecule/default/converge.yml | 84 +++++ roles/tripleo_overcloud_deploy/tasks/main.yml | 9 + .../README.md | 2 +- .../defaults/main.yml | 2 +- .../molecule/default/converge.yml | 4 +- .../defaults/main.yml | 2 +- roles/tripleo_overcloud_node_provision/README.md | 2 +- .../defaults/main.yml | 2 +- .../molecule/default/converge.yml | 10 +- roles/tripleo_overcloud_node_unprovision/README.md | 4 +- .../defaults/main.yml | 4 +- .../molecule/default/converge.yml | 5 +- .../tasks/main.yml | 12 +- roles/tripleo_undercloud_install/README.md | 1 + roles/tripleo_undercloud_install/defaults/main.yml | 1 + .../molecule/default/converge.yml | 11 + roles/tripleo_undercloud_install/tasks/main.yml | 1 + roles/tripleo_undercloud_upgrade/README.md | 1 + roles/tripleo_undercloud_upgrade/defaults/main.yml | 1 + .../molecule/default/converge.yml | 11 + roles/tripleo_undercloud_upgrade/tasks/main.yml | 1 + roles/tripleo_upgrade/README.md | 85 +++++ roles/tripleo_upgrade/defaults/main.yml | 43 +++ roles/tripleo_upgrade/meta/main.yml | 44 +++ .../tripleo_upgrade/molecule/default/converge.yml | 420 +++++++++++++++++++++ .../tripleo_upgrade/molecule/default/molecule.yml | 19 + roles/tripleo_upgrade/molecule/default/prepare.yml | 8 + roles/tripleo_upgrade/tasks/main.yml | 107 ++++++ zuul.d/layout.yaml | 19 +- zuul.d/molecule.yaml | 66 ++++ 61 files changed, 1983 insertions(+), 36 deletions(-)

1 0

tripleo-puppet-elements 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: tripleo-puppet-elements 15.2.0: Puppet building rules for OpenStack images. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 15.1.0..15.2.0 ------------------------------------------------- fce5d94 Update overcloud-base element pkg-map 29988ab Update overcloud-agent element pkg-map a60be92 Revert "Add remove-machine-id element" 524f328 Use Python3 yoga unit tests 1e3b5a1 Migrate from testr to stestr d11a705 Only install required/supported fence agents 1a83d5a Drop ansible-playbook-3 symlink Diffstat (except docs and test files) ------------------------------------- .gitignore | 15 +++++++++++--- .stestr.conf | 3 +++ .testr.conf | 8 -------- elements/overcloud-agent/pkg-map | 24 +--------------------- .../post-install.d/51-ansible-symlink | 14 ------------- .../install.d/package-installs-overcloud-base | 1 - elements/overcloud-base/pkg-map | 20 ------------------ .../pre-install.d/01-install-yum-priorities | 7 ------- elements/overcloud-controller/pkg-map | 4 ++-- elements/remove-machine-id/README.md | 9 -------- .../post-install.d/70-remove-machine-id | 10 --------- test-requirements.txt | 2 +- tox.ini | 3 +-- zuul.d/layout.yaml | 2 +- 14 files changed, 21 insertions(+), 101 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index abd86cf..837159f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ oslotest -testrepository>=0.0.18 +stestr>=2.0.0 # Apache-2.0

1 0

puppet-pacemaker 1.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are pleased to announce the release of: puppet-pacemaker 1.4.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.3.0..1.4.0 ---------------------------------------- 91eb91a Bump metadata 1.4.0 for tripleo release e0fa810 Do not install fence-agent packages in base manifests 34bf907 Fix duplicate declaration of package resource 9f2e6f1 Only install required/supported fence agents e3df586 Fix idempotency regex during scale-up check d3a119e Make sure we wait for the cluster before setting resource_default_op c08236d Replace the deprecated is_ipv6_address function Diffstat (except docs and test files) ------------------------------------- .fixtures.yml | 4 ++-- .zuul.yaml | 7 +++---- bindep.txt | 5 ++++- manifests/corosync.pp | 7 ++++--- manifests/install.pp | 4 ++-- manifests/new/params.pp | 2 +- manifests/params.pp | 6 +++--- manifests/remote.pp | 2 +- manifests/resource/ip.pp | 4 ++-- manifests/stonith/fence_apc.pp | 2 +- manifests/stonith/fence_apc_snmp.pp | 2 +- manifests/stonith/fence_bladecenter.pp | 2 +- manifests/stonith/fence_brocade.pp | 2 +- manifests/stonith/fence_cisco_mds.pp | 2 +- manifests/stonith/fence_cisco_ucs.pp | 2 +- manifests/stonith/fence_compute.pp | 2 +- manifests/stonith/fence_drac5.pp | 2 +- manifests/stonith/fence_eaton_snmp.pp | 2 +- manifests/stonith/fence_eps.pp | 2 +- manifests/stonith/fence_hpblade.pp | 2 +- manifests/stonith/fence_ibmblade.pp | 2 +- manifests/stonith/fence_idrac.pp | 2 +- manifests/stonith/fence_ifmib.pp | 2 +- manifests/stonith/fence_ilo.pp | 2 +- manifests/stonith/fence_ilo2.pp | 2 +- manifests/stonith/fence_ilo3.pp | 2 +- manifests/stonith/fence_ilo4.pp | 2 +- manifests/stonith/fence_ilo_mp.pp | 2 +- manifests/stonith/fence_imm.pp | 2 +- manifests/stonith/fence_intelmodular.pp | 2 +- manifests/stonith/fence_ipdu.pp | 2 +- manifests/stonith/fence_ipmilan.pp | 2 +- manifests/stonith/fence_kdump.pp | 2 +- manifests/stonith/fence_redfish.pp | 2 +- manifests/stonith/fence_rhevm.pp | 2 +- manifests/stonith/fence_rsb.pp | 2 +- manifests/stonith/fence_scsi.pp | 2 +- manifests/stonith/fence_virt.pp | 2 +- manifests/stonith/fence_vmware_soap.pp | 2 +- manifests/stonith/fence_wti.pp | 2 +- manifests/stonith/fence_xvm.pp | 2 +- metadata.json | 2 +- spec/classes/pacemaker_install_spec.rb | 2 +- spec/unit/puppet/provider/cib-orig.xml | 6 +++--- spec/unit/puppet/provider/pcmk_common_spec.rb | 4 ++-- 45 files changed, 61 insertions(+), 58 deletions(-)

1 0

ansible-role-chrony 1.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: ansible-role-chrony 1.2.0: ansible-role-chrony - Ansible chrony role The source is available from: https://opendev.org/openstack/ansible-role-chrony Download the package from: https://tarballs.openstack.org/ansible-role-chrony/ For more details, please see below. Changes in ansible-role-chrony 1.1.0..1.2.0 ------------------------------------------- 0dd2ea0 Add centos9 converage Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 6 ++++++ 1 file changed, 6 insertions(+)

1 0

ansible-role-redhat-subscription 1.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We contentedly announce the release of: ansible-role-redhat-subscription 1.2.0: ansible-role-redhat- subscription - An ansible role to Manage Red Hat subscritions and repositories The source is available from: https://opendev.org/openstack/ansible-role-redhat-subscription Download the package from: https://tarballs.openstack.org/ansible-role-redhat-subscription/ For more details, please see below. Changes in ansible-role-redhat-subscription 1.1.5..1.2.0 -------------------------------------------------------- 0f7ac2a Adding option to disable container validation 7369c0b Fixing https://github.com/ansible-collections/community.general/issues/715 ae0a361 Revert "addressing https://github.com/ansible-collections/community.general/issues/715" 66a322b addressing https://github.com/ansible-collections/community.general/issues/715 31b0c74 Fix URL version for Satellite 6.10 effac4c Correct the tox option for skipping sdist generation Diffstat (except docs and test files) ------------------------------------- tasks/portal.yml | 2 ++ tasks/register.yml | 5 +++++ tasks/satellite.yml | 25 ++++++++++++++++++++++++- tasks/unregister.yml | 2 ++ tox.ini | 2 +- vars/main.yml | 1 + 6 files changed, 35 insertions(+), 2 deletions(-)

1 0

os-net-config 15.2.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are stoked to announce the release of: os-net-config 15.2.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.1.0..15.2.0 --------------------------------------- 8fae2de Revert "Updating sriov_config.service to run before driverctl.slice and network-pre" 404bafa For linux bond over VFs, disable spoofcheck by default 7c7b326 Adding steering_mode config to sriov_pf object 154c9c8 Use Python3 yoga unit tests 5945c73 ovs-dpdk: Add support for n_rxq_desc and n_txq_desc 99a9aa0 Fix log message related to pkey_id 44eab22 The default max/min tx rates shall not halt deployment 3ee0c46 Notify the need for overriding the default driver for Mellanox NIC b30304d vDPA support for CentOS9 ca522c2 Moving is_mellanox_interface to common aa4ba26 Adding logging to file e5c50e8 Add ifcfg-* scripts on boot for Mellanox NIC interface 78089ca Change the pkey_id type from string to int Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/ib_child_interface.json | 2 +- etc/os-net-config/samples/ib_child_interface.yaml | 2 +- etc/os-net-config/samples/ovs_dpdk.json | 2 + etc/os-net-config/samples/ovs_dpdk.yaml | 5 + etc/os-net-config/samples/sriov_pf.json | 4 +- etc/os-net-config/samples/sriov_pf.yaml | 6 +- etc/os-net-config/samples/sriov_pf_switchdev.json | 3 +- etc/os-net-config/samples/sriov_pf_switchdev.yaml | 3 + os_net_config/cli.py | 67 ++-- os_net_config/common.py | 217 ++++++++++++ os_net_config/impl_eni.py | 5 +- os_net_config/impl_ifcfg.py | 67 +++- os_net_config/objects.py | 62 ++-- os_net_config/schema.yaml | 17 +- os_net_config/sriov_config.py | 389 +++++++++++++--------- os_net_config/utils.py | 157 +++------ zuul.d/layout.yaml | 2 +- 23 files changed, 1135 insertions(+), 518 deletions(-)

1 0

os-refresh-config 13.1.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We are glad to announce the release of: os-refresh-config 13.1.0: Refresh system configuration The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 13.0.1..13.1.0 ------------------------------------------- 5bb536c Use py3 as the default runtime for tox Diffstat (except docs and test files) ------------------------------------- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

ansible-role-collect-logs 1.5.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We eagerly announce the release of: ansible-role-collect-logs 1.5.0: ansible-role-collect-logs - An Ansible role for aggregating logs from different nodes. The source is available from: https://opendev.org/openstack/ansible-role-collect-logs Download the package from: https://tarballs.openstack.org/ansible-role-collect-logs/ For more details, please see below. Changes in ansible-role-collect-logs 1.4.0..1.5.0 ------------------------------------------------- ed6b3e3 Disable auto discovery as a workaround b5dd48c Drop deprecated non-zuul-based reproducer 3ce9bdd Also collect container-config-scripts d8fdd04 Fix slow timings regex matcher ae4d1c7 Add ipa command log collection 1809de9 Fix ansible-lint failure 0873c32 Add artcl_find_* as infrared arguments edea40c Add chrony status capture 0913c46 Use podman driver with molecule 2559de1 Replace ansible requirement by ansible-core ce53850 Also collect requests/calls took longer than 30s 4a4fba4 Collect pcs CPU throttle events to logstash 529f0ee Also collect rabbitmq report and cookies 952eb55 Increase timeout for container collect logs 3cb42de Update sanity ignore file 07cee7b Collect Nova instances console logs a1138ea Remove the ternary condition for sova_config 647c202 Fix molecule job e8058a1 Remove the "no service" option 840cdd7 Removes a verification step in sova molecule test f098644 Add new script for SELinux consolidation Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- infrared_plugin/plugin.spec | 12 ++++ requirements.txt | 3 +- roles/collect_logs/defaults/main.yml | 55 +++++++++++++- roles/collect_logs/files/consolidate-avc.pl | 44 ++++++++++++ roles/collect_logs/molecule/default/molecule.yml | 4 +- roles/collect_logs/molecule/infrared/molecule.yml | 4 +- roles/collect_logs/molecule/sova/converge.yml | 2 + roles/collect_logs/molecule/sova/prepare.yml | 88 +++++++++++++++++++++++ roles/collect_logs/molecule/sova/verify.yml | 6 +- roles/collect_logs/tasks/collect.yml | 8 ++- roles/collect_logs/tasks/collect/container.yml | 2 +- roles/collect_logs/tasks/publish.yml | 5 -- roles/collect_logs/tasks/sova.yml | 40 +++++++---- setup.py | 2 +- tox.ini | 7 +- zuul.d/layout.yaml | 10 ++- zuul.d/playbooks/pre.yml | 25 +++++++ 21 files changed, 284 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e0375c0..655bb21 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,2 +2 @@ pbr>=1.6 -# Do not remove 2.10, ansible-test and tox-ansible require it -ansible>=2.5,<2.11 +ansible-core>=2.11,<2.12

1 0

ansible-role-tripleo-modify-image 1.4.0
by no-reply＠openstack.org 12 Apr '22

12 Apr '22

We enthusiastically announce the release of: ansible-role-tripleo-modify-image 1.4.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.3.0..1.4.0 --------------------------------------------------------- 8360ef2 Move zuul jobs layout to centos9 only for master branch af582e0 Move zuul jobs layout to centos9 only for master branch Diffstat (except docs and test files) ------------------------------------- zuul.d/layout.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)

1 0

tempest 30.1.0 (yoga)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We high-spiritedly announce the release of: tempest 30.1.0: OpenStack Integration Testing This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. Changes in tempest 30.0.0..30.1.0 --------------------------------- 3b0ccb0bd Allow rulesets modification in secgroups a91c6dbc0 Make test_tagged_attachment wait for SSHABLE 8e08a77ea Use server hostname when creating secure websocket dc9a93b6a Use wrap_socket from ssl.SSLContext instead of ssl e74b7e2cf Add Tempest gate job for stable/yoga 7304e3ac8 Move ServerStableDeviceRescueTest to wait for SSH-able server 6fa213cc0 Make rescue, volume attachment compute tests to use SSH-able server 8c6d0cf52 Move ssh|ping-able server logic into separate method a81496179 Fix compute_unified decoration 9daf9bb36 Add release notes page for version 30.0.0 a7b88b5fd Add release notes pages for 29.1.0 and 29.2.0 6853f8da0 Switch to the master constraint in tox.ini 76909efbe API for list group types by parameter sort/public 7138e35b8 Fix inconsistent type of default value Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 3 + releasenotes/source/v29.1.0.rst | 5 + releasenotes/source/v29.2.0.rst | 5 + releasenotes/source/v30.0.0.rst | 5 + tempest/api/compute/admin/test_volume.py | 12 +- tempest/api/compute/servers/test_device_tagging.py | 2 +- tempest/api/compute/servers/test_server_rescue.py | 99 +++++++++++----- .../compute/servers/test_server_rescue_negative.py | 36 ++++-- tempest/api/volume/admin/test_group_types.py | 36 ++++++ tempest/common/compute.py | 129 +++++++++++++-------- tempest/config.py | 2 +- tempest/scenario/manager.py | 39 ++++--- tempest/scenario/test_compute_unified_limits.py | 12 +- tox.ini | 10 +- zuul.d/project.yaml | 5 + zuul.d/stable-jobs.yaml | 5 + zuul.d/tempest-specific.yaml | 2 +- 17 files changed, 281 insertions(+), 126 deletions(-)

1 0

ovsdbapp 1.16.0 (zed)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We contentedly announce the release of: ovsdbapp 1.16.0: A library for creating OVSDB applications This release is part of the zed release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.15.1..1.16.0 ---------------------------------- be6622b Revert "Add an active wait in the "Backend.lookup"" 06207b3 Fix broken behavior after recent OVS update 7d1f318 github no longer accepts git:// connections dd66e27 Update master for stable/yoga b45267f remove unicode from code Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/__init__.py | 48 ++--------------- ovsdbapp/backend/ovs_idl/connection.py | 18 +++++-- .../functional/backend/ovs_idl/test_backend.py | 63 ---------------------- .../functional/backend/ovs_idl/test_connection.py | 3 ++ releasenotes/source/conf.py | 8 +-- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 +++ tools/setup-ovs.sh | 4 +- 9 files changed, 39 insertions(+), 120 deletions(-)

1 0

ec2-api 14.0.1 (yoga)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are glad to announce the release of: ec2-api 14.0.1: OpenStack Ec2api Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ec2-api Download the package from: https://pypi.org/project/ec2-api Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2-api 13.0.0.0rc1..14.0.1 -------------------------------------- 8c83fc4 Update TOX_CONSTRAINTS_FILE for stable/yoga 418e537 Update .gitreview for stable/yoga c1eaa49 Re-add python 3.6/3.7 in classifier dee854f Updating python testing as per Yoga testing runtime 65aa616 Include oslo.cache options to the generated configuration file 994d02b Changed minversion in tox to 3.18.0 aa02567 Use py3 as the default runtime for tox 3846493 Use TOX_CONSTRAINTS_FILE f9e7528 fix UT for cinderclient ab73c93 Add Python3 yoga unit tests 722b7b0 Run TripleO jobs on CentOS8 instead of CentOS7 a83177a Dep's should be restricted by upper-constraints Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 1 + .zuul.yaml | 6 ++---- README.rst | 3 ++- devstack/plugin.sh | 3 ++- ec2api/api/cloud.py | 14 ++++++++++---- ec2api/api/image.py | 4 ++-- ec2api/api/network_interface.py | 18 +++++++++++++++++- ec2api/api/subnet.py | 9 +++++---- ec2api/api/volume.py | 17 ++++++++++++++++- ec2api/context.py | 2 +- ec2api/metadata/api.py | 6 ++++++ etc/ec2api/ec2api-config-generator.conf | 1 + setup.cfg | 1 + tox.ini | 14 +++++++------- 18 files changed, 80 insertions(+), 32 deletions(-)

1 0

openstack-cyborg 5.0.1 (victoria)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are tickled pink to announce the release of: openstack-cyborg 5.0.1: Distributed Acceleration Management as a Service This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-cyborg Download the package from: https://tarballs.openstack.org/cyborg/ For more details, please see below. Changes in openstack-cyborg 5.0.0..5.0.1 ---------------------------------------- b1d64f3 Fill the msg of exception 72295ec Resolve mysql conflict message 01e8752 Using pop method to avoid incompatible data type cf3a682 Remove personal name in the docs 8dcd6ba tools: Allow check-cherry-picks.sh to be disabled by an env var 71abe68 improve pep8 check logic 07a5b14 Add fast8 check for cybrog 1e9d874 Trival: Fix the key error in log msg 722228b Add packages requirement restricted of upper-constraints Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/arqs.inc | 4 +- cyborg/common/nova_client.py | 2 +- cyborg/db/sqlalchemy/api.py | 7 +++- cyborg/objects/ext_arq.py | 4 +- cyborg/objects/extarq/ext_arq_job.py | 5 ++- ...=> accelerator_requests-after-update-resp.json} | 29 +------------ .../accelerator_requests-before-update-resp.json | 21 ++++++++++ tools/check-cherry-picks.sh | 47 ++++++++++++++++++++++ tools/flake8wrap.sh | 27 +++++++++++++ tox.ini | 28 +++++++++++-- 10 files changed, 134 insertions(+), 40 deletions(-)

1 0

puppet-tempest 18.5.0 (wallaby)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We high-spiritedly announce the release of: puppet-tempest 18.5.0: Puppet module for OpenStack Tempest This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 18.5.0 ^^^^^^ New Features * Support for the "[validation] ssh_key_type" parameter has been added. Changes in puppet-tempest 18.4.0..18.5.0 ---------------------------------------- 85c28a0 Prepare new release for Wallaby release 02ae157 Add support for [validation] ssh_key_type bb8b326 Set fixture paths for unit tests 958c05a Update TOX_CONSTRAINTS_FILE for stable/wallaby a36c1b9 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/init.pp | 4 ++++ metadata.json | 2 +- releasenotes/notes/ssh_key_type-43cd9a377a147c5b.yaml | 4 ++++ spec/classes/tempest_init_spec.rb | 1 + spec/spec_helper.rb | 5 +++++ tox.ini | 2 +- 7 files changed, 17 insertions(+), 2 deletions(-)

1 0

puppet-tempest 19.5.0 (xena)
by no-reply＠openstack.org 11 Apr '22

11 Apr '22

We are thrilled to announce the release of: puppet-tempest 19.5.0: Puppet module for OpenStack Tempest This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Support for the "[validation] ssh_key_type" parameter has been added. Bug Fixes ********* * The "[image-feature-enabled] api_v1" parameter is now set to "False" by default. Changes in puppet-tempest 19.4.0..19.5.0 ---------------------------------------- 0ad0704 Prepare new release for Xena release 7d8cace Add support for [validation] ssh_key_type 02df2fc Glance: Disable api v1 testing by default bdf94e9 Update TOX_CONSTRAINTS_FILE for stable/xena 252d664 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/init.pp | 8 ++++++-- metadata.json | 2 +- releasenotes/notes/disable-glance-api-v1-010c242db47cfabb.yaml | 5 +++++ releasenotes/notes/ssh_key_type-43cd9a377a147c5b.yaml | 4 ++++ spec/classes/tempest_init_spec.rb | 3 ++- tox.ini | 2 +- 7 files changed, 20 insertions(+), 5 deletions(-)

1 0

kolla-ansible 14.0.0.0rc1 (yoga)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

Hello everyone, A new release candidate for kolla-ansible for the end of the Yoga cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Yoga release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/yoga release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/yoga Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *yoga-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kolla 14.0.0.0rc1 (yoga)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

Hello everyone, A new release candidate for kolla for the end of the Yoga cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Yoga release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/yoga release branch at: https://opendev.org/openstack/kolla/src/branch/stable/yoga Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *yoga-rc-potential* to bring it to the kolla release crew's attention.

1 0

designate 11.0.2 (victoria)
by no-reply＠openstack.org 07 Apr '22

07 Apr '22

We are overjoyed to announce the release of: designate 11.0.2: DNS as a Service This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. 11.0.2 ^^^^^^ Bug Fixes * Fixed an issue that caused the recordset_records quota to not be enforced. * Fixes bug 1934252 which ignored invalid denylist patterns. The fix entailed checking the pattern string via regular expression compiler and testing for zero length. Previously you could create blacklist/denylist using string that cannot be used either as a regex or as a zone name, for example: patterns = ['', "'#(*&^%$%$#@$']" In addition, the server will return a 400 BadRequest response to an invalid pattern. (https://bugs.launchpad.net/designate/+bug/1934252) Changes in designate 11.0.1..11.0.2 ----------------------------------- eee0fcbe Checks for invalid denylist regex patterns 81eedab5 Make grenade non-voting for stable/victoria 6d1479a8 Fix recordset_records quota enforcement Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- designate/central/service.py | 8 +- designate/objects/blacklist.py | 4 +- designate/objects/fields.py | 22 +++++ designate/quota/base.py | 2 +- ...x-recordset-records-quota-76ed3095dd2afbbe.yaml | 4 + ...atterns-not-being-checked-ec1f1316ccc6cb1d.yaml | 16 ++++ 11 files changed, 209 insertions(+), 18 deletions(-)

1 0

puppet-sahara 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are amped to announce the release of: puppet-sahara 20.3.0: Puppet module for OpenStack Sahara This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 20.2.0..20.3.0 --------------------------------------- 9c20c3d setuptools: Disable auto discovery aa7c24e Prepare Yoga RC1 4a4a8c6 remove unicode literal from code 67d9275 Deprecate usage of authtoken parameters in providers Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/sahara.rb | 1 + metadata.json | 8 ++++---- .../provider-deprecate-at-params-8b0a649a3b201804.yaml | 12 ++++++++++++ releasenotes/source/conf.py | 14 +++++++------- setup.py | 1 + 5 files changed, 25 insertions(+), 11 deletions(-)

1 0

puppet-keystone 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are overjoyed to announce the release of: puppet-keystone 20.3.0: Puppet module for OpenStack Keystone This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 20.3.0 ^^^^^^ Deprecation Notes ***************** * The "keystone::catalog_type" parameter has been deprecated. Use the "catalog_driver" parameter instead. * The "keystone_puppet_config" resource type has been deprecated and will be removed in a future release. Bug Fixes ********* * Now the "keystone::ldap" class enables connection pools for LDAP access by default. Changes in puppet-keystone 20.2.0..20.3.0 ----------------------------------------- 802fd69 setuptools: Disable auto discovery 20bd1b6 keystone::ldap: Test default values 2473f34 keystone::ldap: Remove redundant defaults 03c52c3 keystone::ldap: Use $::os_service_default instead of undef 5f35ea8 Fix outdated default of [ldap] use(_auth)_pool c2525c6 Ensure inet6: formatting for a comma-separated list string b8bc0eb Prepare Yoga RC1 31e6476 remove unicode literal from code cd9f931 Deprecate the catalog_type parameter b7396be Replace removed keystone::database_connection c140a44 Use system scope credentials to request keystone Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- examples/apache_dropin.pp | 10 +- examples/apache_with_paths.pp | 11 +- examples/k2k_sp_shib.pp | 11 +- examples/ldap_backend.pp | 5 +- examples/v3_basic.pp | 8 +- examples/v3_domain_configuration.pp | 4 +- lib/puppet/provider/keystone.rb | 117 ++--------- lib/puppet/provider/keystone_domain/openstack.rb | 10 +- lib/puppet/provider/keystone_endpoint/openstack.rb | 15 +- .../keystone_identity_provider/openstack.rb | 20 +- lib/puppet/provider/keystone_role/openstack.rb | 6 +- lib/puppet/provider/keystone_service/openstack.rb | 8 +- lib/puppet/provider/keystone_tenant/openstack.rb | 8 +- lib/puppet/provider/keystone_user/openstack.rb | 8 +- .../provider/keystone_user_role/openstack.rb | 10 +- lib/puppet/type/keystone_puppet_config.rb | 2 + manifests/bootstrap.pp | 46 +++-- manifests/init.pp | 23 ++- manifests/ldap.pp | 201 +++++++++---------- manifests/resource/authtoken.pp | 7 +- metadata.json | 6 +- .../notes/bug-1966597-1e6eb4f2911dbe23.yaml | 5 + .../deprecate-catalog_type-a6c91d151f7d605b.yaml | 5 + .../provider-system-scope-15d21fb50a8432f8.yaml | 23 +++ releasenotes/source/conf.py | 14 +- setup.py | 1 + spec/classes/keystone_bootstrap_spec.rb | 71 +++++-- spec/classes/keystone_init_spec.rb | 2 +- spec/classes/keystone_ldap_spec.rb | 215 +++++++++++++++------ spec/defines/keystone_resource_authtoken_spec.rb | 39 +++- spec/spec_helper.rb | 3 - .../provider/keystone_domain/openstack_spec.rb | 4 +- .../provider/keystone_endpoint/openstack_spec.rb | 2 +- .../keystone_identity_provider/openstack_spec.rb | 2 +- spec/unit/provider/keystone_role/openstack_spec.rb | 2 +- .../provider/keystone_service/openstack_spec.rb | 2 +- spec/unit/provider/keystone_spec.rb | 14 +- .../provider/keystone_tenant/openstack_spec.rb | 2 +- spec/unit/provider/keystone_user/openstack_spec.rb | 2 +- .../provider/keystone_user_role/openstack_spec.rb | 2 +- 41 files changed, 538 insertions(+), 410 deletions(-)

1 0

puppet-octavia 20.3.0 (yoga)
by no-reply＠openstack.org 05 Apr '22

05 Apr '22

We are excited to announce the release of: puppet-octavia 20.3.0: Puppet module for OpenStack Octavia This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 20.3.0 ^^^^^^ New Features ************ * The "octavia::certificates" class now supports the following parameters. * "barbican_auth" * "service_name" * "endpoint" * The "octavia::api::provider_drivers" parameter now supports array or hash value, and the given value is conveted to correctly formatted string when being put into octavia.conf. * The new "octavia::controller::default_connection_limit" parameter has been added. * The new "octavia::service_auth::system_scope" parameter has been added. * The new "octavia::task_flow" class has been added. This class manages parameters in the "task_flow" section, which are required to use the amphora v2 driver. * The "octavia::db::mysql" class and the "octavia::db::postgresql" class now support creating a separate database for taskflow persistence. * The "octavia::db::sync_persistence" class has been added. This class invokes the command to initialize the taskflow persistence database. Deprecation Notes ***************** * The "octavia::health_manager::workers" parameter has been deprecated. Use the "health_update_threads" parameter and the "stats_update_threads" parameter instead. * The "octavia::api::provider_drivers" parameter has been deprecated in favor of the new "octavia::api::enabled_provider_drivers" parameter. Changes in puppet-octavia 20.2.0..20.3.0 ---------------------------------------- 1dd62c1 setuptools: Disable auto discovery 753b692 Support more [certificates] options c61f54f Prepare Yoga RC1 9c24dbc Add support for [haproxy_amphora] default_connection_limit c095e40 remove unicode literal from code be91d62 Globally support system scope credentials 2b9f2a0 Add parameters to configure amphorav2 driver 2b9282b Use consistent name for enabled_provider_drivers 270d33d Accept array or hash for enable_provider_drivers cffdaec [health_manager] Allow tuning individual threads Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 26 ++++- manifests/certificates.pp | 18 ++++ manifests/controller.pp | 6 ++ manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/health_manager.pp | 32 +++++-- manifests/service_auth.pp | 30 ++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 10 +- .../notes/certificates-opts-4913f5eb2ecfca0c.yaml | 8 ++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ .../default_connection_limit-4006e77c67997e01.yaml | 5 + ...ate-health_manage-workers-e7fa2378afed538d.yaml | 6 ++ .../enable_provider_drivers-db3b1fb5f07c4140.yaml | 5 + .../notes/system_scope-all-0895d770ca1afffb.yaml | 4 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ releasenotes/source/conf.py | 14 +-- setup.py | 1 + spec/classes/octavia_api_spec.rb | 48 +++++++++- spec/classes/octavia_certificates_spec.rb | 9 ++ spec/classes/octavia_controller_spec.rb | 3 + spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_health_manager_spec.rb | 11 ++- spec/classes/octavia_service_auth_spec.rb | 15 +++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ 30 files changed, 622 insertions(+), 56 deletions(-)

1 0