- Release-announce - lists.openstack.org

neutron 19.2.0 (xena)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are jazzed to announce the release of: neutron 19.2.0: OpenStack Networking This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 19.2.0 ^^^^^^ Bug Fixes ********* * Enforce policy for 'qos_policy_id' attribute of Floating IP so only authorized users can set/unset it. For more info see bug LP#1957175 (https://bugs.launchpad.net/bugs/1957175) * Changes the API behaviour while using OVN driver to enforce that it's not possible to delete all the IPs from a router port. For more info see bug LP#1948457 (https://bugs.launchpad.net/neutron/+bug/1948457) * For IPv4 subnets when dns_nameservers is not set in the subnet, servers defined in 'ovn/dns_servers' config option or system's resolv.conf are used, but for IPv6 subnets these are not used. The same will now be used for IPv6 subnets too. Additionally dns servers added in 'ovn/dns_servers' config option or system's resolv.conf will be filtered as per the subnet's IP version. For more info see the bug report 1951816 (https://bugs.launchpad.net/neutron/+bug/1951816) Other Notes *********** * OVN mechanism driver allows only to have one physical network per bridge. Changes in neutron 19.1.0..19.2.0 --------------------------------- c43013487c [OVN] Keep "connectivity" VIF details parameter in migration 05923cde9d Retry port_update in the OVN if revision mismatch during live-migration 68e14f0b99 Also add B324 to bandit skip list for python3.9+ 909f3bd3c5 [API] Return 403 for POST requests when user is not authorized 0c18f80f5c [L3][QoS] L3 agent QoS extension to handle duplicated FIPs 5573230d30 Fix ingress bandwidth limit in the openvswitch agent 18e05b5b2a Clean duplicated QoS bandwidth related methods in ovs_lib module 7c67460b16 Repeat few times put new interface in the namespace af0828e5e0 [OVN][migration] Clean sg- and fg- interfaces 342e0c3b78 Use python3-devel in bindep for rpm distros 0c96b2134f ovn migration: Remove usage of tripleo-ansible-inventory e05b095300 ovn: Retry port binding on deadlock when migrating to ovn afe3ba73ea Force security_group_id uuid validation of sg rules 40c3671339 Change set_device_rate calls according to new signature 4fc70c09ae ovn migration: Don't use executables in /tmp/ 37c028e3d7 Log request IDs for matched Nova external events 64c29bcaf3 Ensure gateway is set for prefix delegated subnets 7342d11427 Ensure that re_added ports are DOWN before set back to UP d2b1e3edaa Remove exception ``IpAddressAllocationNotFound`` 22baee56f0 Enable sctp module in the fullstack Centos node fc71f63a4f Run configure_for_func_testing script after enable fips 391af6c158 Ensure no GARPs are sent for Load Balancer VIPs on tenant networks bf308a12a1 Allow ovn_db_sync to continue on duplicate normalised CIDR c6d3f90bee Check whether vxlan group and local addresses are IPv4 or IPv6 ceaed57f42 Fix a error when l3-agent gets filter id for ip 6b6abd0718 [OVN] Update VIP port host ID when traffic detected 0c9e9b2752 [SR-IOV] Fix QoS extension to set min/max values 6ea9463838 Support SB OVSDB connections to non-leader servers 9da226fe30 Switch to cirros uec image in ovn tempest jobs c9de2e89df [ OVN ][Migration] Reload systemctl daemon after removal bd738eadd1 [OVN][Cosmetic] Improve gen_router_port_options b0b17dad0a Restructure layout for periodic, experimental and tox jobs c0c292efbc [OVN] Handle RouterNotFound exception in set_gateway_mtu b96d46fe42 Add FIPS enabled scenario jobs 9d233ab712 Add functional and fullstack jobs with FIPS enabled 691496c365 segments: fix scheduling duplicate segments 2104bbdddc Make configure_for_func_testing compatible with e.g. Centos eba283a4c4 Remove run-devstack role from run_functional_job playbook 6695f64f5f Use Port_Binding up column to set Neutron port status ac4aa7ef7e Wait longer before deleting DPDK vhu trunk bridges d67b05ddea [ovn] Prevent stale ports in the OVN database f20a015886 [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP 78c63d4ec6 Make sure "dead vlan" ports cannot transmit packets 8dc7db2608 Create a PeriodicWorker for DbQuotaNoLockDriver clean up 35eedf91f5 [OVN] Check if exists trunk ports before cleanup d317bedb7d Update irrelevant-files for non scenario jobs 25e8ec0c56 Update irrelevant-files to skip run of untouched jobs 68458c369e Use a thread local variable to store the Nova Notifier enable flag 0c2af0f6e7 [Stable Only] Enforce policy for qos_policy_id attribute 19d26228ac [Xena Only] Switch to xena neutron-tempest-plugin jobs 64b06e12d6 [OVN] Fix overlapping security group objects not correctly applied 08a35203de Ensure subports status is aligned with parent port 6be2df7eb5 [OVN] Add the VIF details "connectivity" parameter fb50dc2a10 [stable-only] Update Placement allocation when min bw rule direction is changed ff45fce495 Properly clean up ovn-northd in functional tests 328c5740c5 [OVN][FT] Check UNIX socket file before using it 5025a6a727 Make the dead vlan actually dead 88dfbcc8a9 [OVN] Correctly set dns_server in dhcpv4/v6 options 2f8002b506 [Stable Xena Only] Drop TripleO periodic jobs bde4724980 [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid" 30a7618e6f [OVN] Check new added segments in OVN mech driver a43972ab9f [Functional] Add extra logs to the L3 HA router transitions 97180b0183 Register cleanup hooks for the object change handlers only when needed eb582be329 Fix OVS OVSNeutronAgent.reclaim_local_vlan() 488a68cb49 Exclude router gw subnet ports from port list while port delete. 1dc99e93fe When creating a VXLAN interface, a device is mandatory 795a19bf35 [OVN] Allow only one physical network per bridge 876e42eb78 Add wait event for metadataagent sb_idl 5b30b14ad7 [OVN] Add reverse DNS records 09f713d5d5 [OVN] Update check_for_mcast_flood_reports() to check for mcast_flood ca06a2e62b [OVN] Prevent deleting the only IP of a router port 56d2bda51d Allocate IPs in bulk requests in separate transactions 6265ab319e [Functional] Fix expected number of the enqueue_state_change calls 666562a258 ovn: enable stateless-security-group api Diffstat (except docs and test files) ------------------------------------- bindep.txt | 9 +- neutron/agent/common/ovs_lib.py | 351 +++++++++---------- neutron/agent/l3/extensions/qos/base.py | 42 +-- neutron/agent/l3/extensions/qos/fip.py | 195 ++++++----- neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/interface.py | 70 +++- neutron/agent/linux/ip_lib.py | 25 +- neutron/agent/linux/l3_tc_lib.py | 3 +- neutron/agent/ovn/metadata/agent.py | 17 + neutron/agent/ovn/metadata/ovsdb.py | 9 +- neutron/cmd/sanity/checks.py | 4 +- neutron/common/ovn/constants.py | 15 +- neutron/common/ovn/extensions.py | 2 + neutron/common/ovn/utils.py | 16 +- neutron/db/agentschedulers_db.py | 7 +- neutron/db/db_base_plugin_common.py | 2 +- neutron/db/db_base_plugin_v2.py | 7 - neutron/db/ipam_backend_mixin.py | 3 - neutron/db/ipam_pluggable_backend.py | 50 ++- neutron/db/l3_dvrscheduler_db.py | 3 +- neutron/db/quota/api.py | 4 + neutron/db/quota/driver.py | 4 + neutron/db/quota/driver_nolock.py | 25 +- neutron/extensions/qos_fip.py | 1 + neutron/extensions/securitygroup.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 10 +- neutron/ipam/exceptions.py | 2 + neutron/notifiers/nova.py | 29 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 10 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 5 +- neutron/plugins/ml2/drivers/mech_agent.py | 2 + .../drivers/mech_sriov/agent/eswitch_manager.py | 64 ++-- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 18 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 3 + .../agent/extension_drivers/qos_driver.py | 9 +- .../openvswitch/agent/openflow/native/br_int.py | 9 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 41 ++- neutron/plugins/ml2/drivers/ovn/db_migration.py | 8 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 68 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 55 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 68 +++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 373 ++++++++++++++------- neutron/plugins/ml2/ovo_rpc.py | 12 +- neutron/plugins/ml2/plugin.py | 108 ++++-- neutron/privileged/agent/linux/ip_lib.py | 6 +- neutron/services/logapi/drivers/ovn/driver.py | 22 +- neutron/services/ovn_l3/plugin.py | 25 +- neutron/services/qos/qos_plugin.py | 70 ++-- .../drivers/openvswitch/agent/ovsdb_handler.py | 2 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 13 +- .../functional/agent/linux/test_bridge_lib.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 14 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 7 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 96 +++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 28 +- .../services/logapi/drivers/ovn/test_driver.py | 63 +++- .../openvswitch/agent/test_trunk_manager.py | 2 + .../unit/agent/l3/extensions/qos/test_base.py | 12 +- .../agent/l3/extensions/qos/test_gateway_ip.py | 4 +- .../ipam/drivers/neutrondb_ipam/test_driver.py | 6 - .../agent/test_linuxbridge_neutron_agent.py | 14 +- .../mech_driver/test_mech_linuxbridge.py | 16 +- .../macvtap/mech_driver/test_mech_macvtap.py | 16 +- .../mech_sriov/agent/test_eswitch_manager.py | 125 +++---- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 34 +- .../agent/extension_drivers/test_qos_driver.py | 11 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 30 +- .../mech_driver/test_mech_openvswitch.py | 28 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 71 +++- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 333 +++++++++--------- .../drivers/ovn/mech_driver/test_mech_driver.py | 233 ++++++++++++- .../plugins/ml2/drivers/ovn/test_db_migration.py | 4 +- .../unit/privileged/agent/linux/test_ip_lib.py | 15 +- .../trunk/drivers/ovn/test_trunk_driver.py | 6 +- playbooks/configure_functional_job.yaml | 6 + playbooks/enable-fips.yaml | 5 + playbooks/run_functional_job.yaml | 2 - .../notes/bug-1957175-764bc9c73b8d46e9.yaml | 6 + .../notes/bug-817525-eef68687dafa97fd.yaml | 6 + ...-dns-servers-ipv6-subnets-f2d525abc70b01b3.yaml | 11 + ...it-one-physnet-per-bridge-188285955a5ea124.yaml | 4 + roles/disable_selinux/tasks/main.yaml | 3 + tools/configure_for_func_testing.sh | 24 +- .../tripleo_environment/ovn_migration.sh | 11 +- .../playbooks/ovn-migration.yml | 9 + .../roles/migration/tasks/activate-ovn.yml | 4 +- .../roles/migration/tasks/cleanup-dataplane.yml | 27 +- .../roles/migration/tasks/clone-dataplane.yml | 4 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../pre-checks/ovn-controllers/tasks/main.yml | 10 + .../playbooks/roles/stop-agents/tasks/main.yml | 4 + tox.ini | 5 +- zuul.d/base.yaml | 30 ++ zuul.d/grenade.yaml | 15 + zuul.d/job-templates.yaml | 61 ++++ zuul.d/project.yaml | 54 +-- zuul.d/rally.yaml | 15 + zuul.d/tempest-multinode.yaml | 15 + zuul.d/tempest-singlenode.yaml | 77 ++++- zuul.d/tripleo.yaml | 69 ---- 142 files changed, 3240 insertions(+), 1337 deletions(-)

1 0

neutron 17.4.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We eagerly announce the release of: neutron 17.4.0: OpenStack Networking This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 17.4.0 ^^^^^^ Bug Fixes ********* * Enforce policy for 'qos_policy_id' attribute of Floating IP so only authorized users can set/unset it. For more info see bug LP#1957175 (https://bugs.launchpad.net/bugs/1957175) Other Notes *********** * OVN mechanism driver allows only to have one physical network per bridge. Changes in neutron 17.3.0..17.4.0 --------------------------------- 4070861450 Retry port_update in the OVN if revision mismatch during live-migration 5f048620d1 When creating a VXLAN interface, a device is mandatory 7caeebbbc3 Change set_device_rate calls according to new signature e26fd32ab8 Support SB OVSDB connections to non-leader servers 4958720448 Check whether vxlan group and local addresses are IPv4 or IPv6 4a0ca56fe5 Fix ingress bandwidth limit in the openvswitch agent 9e3aa7e3d6 Clean duplicated QoS bandwidth related methods in ovs_lib module 258dc36050 Repeat few times put new interface in the namespace 912eafa888 [OVN][migration] Clean sg- and fg- interfaces f13ab9c0c7 Force security_group_id uuid validation of sg rules 51e64a296e ovn migration: Don't use executables in /tmp/ 245ca56d23 Log request IDs for matched Nova external events 0842d28232 Ensure that re_added ports are DOWN before set back to UP 884418183a Remove exception ``IpAddressAllocationNotFound`` 4627955f97 Ensure no GARPs are sent for Load Balancer VIPs on tenant networks 10c8d590af Allow ovn_db_sync to continue on duplicate normalised CIDR 36e89eb182 Fix a error when l3-agent gets filter id for ip 42a9b7cafa [SR-IOV] Fix QoS extension to set min/max values 9ce1eecf18 [ OVN ][Migration] Reload systemctl daemon after removal 2b8edb8593 [OVN][Cosmetic] Improve gen_router_port_options 69182db50e [OVN] Handle RouterNotFound exception in set_gateway_mtu 59499e1499 [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP 2a6148869a Ensure subports status is aligned with parent port d06384867f segments: fix scheduling duplicate segments e9e73d63b1 Wait longer before deleting DPDK vhu trunk bridges 29b08d9765 [ovn] Prevent stale ports in the OVN database 88abffcb48 Make sure "dead vlan" ports cannot transmit packets ae55ae3673 [Stable Only] Enforce policy for qos_policy_id attribute 6d0b50652d [OVN] Check if exists trunk ports before cleanup e755baa279 Update irrelevant-files to skip run of untouched jobs afb0c633f8 Limit execution of the neutron CI jobs on some irrelevant file 36449172ee Use Port_Binding up column to set Neutron port status dacd5276b7 [OVN] Add the VIF details "connectivity" parameter b11f3f4c37 Properly clean up ovn-northd in functional tests a1327842bd [OVN][FT] Check UNIX socket file before using it c860e2612e [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid" b0080c4719 [OVN] Check new added segments in OVN mech driver 77afc56e10 Register cleanup hooks for the object change handlers only when needed f47fdf4d05 Fix OVS OVSNeutronAgent.reclaim_local_vlan() cb67856d9f [OVN] Allow only one physical network per bridge 97088a732e Add wait event for metadataagent sb_idl 3664aa1bb4 [OVN] Add reverse DNS records Diffstat (except docs and test files) ------------------------------------- neutron/agent/common/ovs_lib.py | 351 +++++++++++---------- neutron/agent/linux/interface.py | 70 +++- neutron/agent/linux/ip_lib.py | 25 +- neutron/agent/linux/l3_tc_lib.py | 3 +- neutron/agent/ovn/metadata/agent.py | 17 + neutron/agent/ovn/metadata/ovsdb.py | 9 +- neutron/cmd/sanity/checks.py | 4 +- neutron/common/ovn/constants.py | 15 +- neutron/db/agentschedulers_db.py | 7 +- neutron/db/db_base_plugin_v2.py | 7 - neutron/extensions/qos_fip.py | 1 + neutron/extensions/securitygroup.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 10 +- neutron/ipam/exceptions.py | 2 + neutron/notifiers/nova.py | 10 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 5 +- neutron/plugins/ml2/drivers/mech_agent.py | 2 + .../drivers/mech_sriov/agent/eswitch_manager.py | 64 ++-- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 18 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 3 + .../agent/extension_drivers/qos_driver.py | 9 +- .../openvswitch/agent/openflow/native/br_int.py | 9 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 41 ++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 59 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 42 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 68 ++-- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 318 ++++++++++++------- neutron/plugins/ml2/ovo_rpc.py | 12 +- neutron/plugins/ml2/plugin.py | 5 +- neutron/privileged/agent/linux/ip_lib.py | 6 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 2 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 14 + .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 7 + .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 19 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 28 +- .../openvswitch/agent/test_trunk_manager.py | 2 + .../ipam/drivers/neutrondb_ipam/test_driver.py | 6 - .../agent/test_linuxbridge_neutron_agent.py | 14 +- .../mech_driver/test_mech_linuxbridge.py | 16 +- .../macvtap/mech_driver/test_mech_macvtap.py | 16 +- .../mech_sriov/agent/test_eswitch_manager.py | 126 ++++---- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 34 +- .../agent/extension_drivers/test_qos_driver.py | 11 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 30 +- .../mech_driver/test_mech_openvswitch.py | 28 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 46 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 332 ++++++++++--------- .../drivers/ovn/mech_driver/test_mech_driver.py | 169 ++++++++++ .../unit/privileged/agent/linux/test_ip_lib.py | 15 +- .../trunk/drivers/ovn/test_trunk_driver.py | 6 +- .../notes/bug-1957175-764bc9c73b8d46e9.yaml | 6 + ...it-one-physnet-per-bridge-188285955a5ea124.yaml | 4 + .../playbooks/ovn-migration.yml | 9 + .../roles/migration/tasks/activate-ovn.yml | 4 +- .../roles/migration/tasks/cleanup-dataplane.yml | 27 +- .../roles/migration/tasks/clone-dataplane.yml | 4 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../pre-checks/ovn-controllers/tasks/main.yml | 10 + .../playbooks/roles/stop-agents/tasks/main.yml | 4 + zuul.d/base.yaml | 23 +- zuul.d/grenade.yaml | 47 ++- zuul.d/project.yaml | 58 +--- zuul.d/rally.yaml | 45 ++- zuul.d/tempest-multinode.yaml | 49 ++- zuul.d/tempest-singlenode.yaml | 109 ++++++- zuul.d/tripleo.yaml | 45 ++- 95 files changed, 2219 insertions(+), 946 deletions(-)

1 0

tripleo-puppet-elements 13.1.2 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are pleased to announce the release of: tripleo-puppet-elements 13.1.2: Puppet building rules for OpenStack images. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 13.1.1..13.1.2 ------------------------------------------------- c04cfea Only install required/supported fence agents Diffstat (except docs and test files) ------------------------------------- elements/overcloud-controller/pkg-map | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

tripleo-image-elements 12.2.3 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are tickled pink to announce the release of: tripleo-image-elements 12.2.3: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.2..12.2.3 ------------------------------------------------ d00e7302 Update TOX_CONSTRAINTS_FILE for stable/victoria Diffstat (except docs and test files) ------------------------------------- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

tripleo-validations 13.5.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are thrilled to announce the release of: tripleo-validations 13.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 13.4.1..13.5.0 --------------------------------------------- 9a47a5c Remove pre-deployment validation 75f620b oslo_config_validator: Nova port data changes settings have wrong values d5e942e Correct the tox option for skipping sdist generation 5cabac4 [Victoria-Only] Preventing tox from using local packages c2aafdd oslo_config_validator: Defaulting config_invalidations to empty list 4ce41ce oslo-config-validator: container run task should never fail 18dd400 feat(removal): tox-ansible support 95a0c41 fix(molecule): Add ability to run molecule on Fedora e202b48 fix(ci): Install python3 package first 6863bf8 Instruct container-status validation to accept 137, 142 and 143 exit code status 9860479 Use centos-8 stream for molecule jobs 3cb81f4 Optimize linters executions from tox and pre-commit 9def8ea [Victoria-only] Bumping the ansible-lint version to 5.3.2 in order to resolve CI failure 0c51e46 Use collections in validations for Ansible 2.11 75b0fc7 partial-backport: oslo-config-validator: Removing merged patches ea51007 oslo-config-validator: invalidating configs only when necessary 5b8f902 oslo-config-validator: container plugin is replaced with collections d925c56 Rename system_encoding playbooks. 0c00c50 Moving setting validation from nova_event_callback 365c82f Fail validation if pacemaker service is not active d786edd remove using containers-prepare-parameter.yaml a3495c1 Bump molecule to 3.3.1 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 10 + .ansible-lint_rules/RoleNames.py | 57 -- .ansible-lint_rules/ValidationHasMetadataRule.py | 2 +- .config/molecule/Dockerfile | 12 +- .config/molecule/config.yml | 16 +- .pre-commit-config.yaml | 11 +- LICENSE | 1 - README.rst | 1 - ansible-collections-requirements.yml | 6 + babel.cfg | 1 - bindep.txt | 28 +- ci/playbooks/pre.yml | 10 + .../modules/modules-ceph_pools_pg_protection.rst | 1 - .../modules-check_cpus_aligned_with_dpdk_nics.rst | 1 - .../modules/modules-check_ironic_boot_config.rst | 1 - .../modules-check_other_processes_pmd_usage.rst | 1 - .../modules-convert_range_to_numbers_list.rst | 1 - .../modules/modules-get_dpdk_nics_numa_info.rst | 1 - .../modules/modules-ovs_dpdk_pmd_cpus_check.rst | 1 - .../modules/modules-pmd_threads_siblings_check.rst | 1 - .../role-collect_flavors_and_verify_profiles.rst | 1 - .../roles/role-ironic_boot_configuration.rst | 1 - .../roles/role-undercloud_heat_purge_deleted.rst | 1 - .../roles/role-undercloud_service_status.rst | 1 - molecule-requirements.txt | 8 +- playbooks/collect-flavors-and-verify-profiles.yaml | 1 - playbooks/nova-event-callback.yaml | 21 +- playbooks/pacemaker-status.yaml | 2 + .../{system_encoding.yaml => system-encoding.yaml} | 0 .../add-ceph-health-check-000bab9581c759d3.yaml | 2 +- .../molecule/default/molecule.yml | 8 +- .../tasks/check_nfv_instances.yml | 2 +- .../tasks/validate_instance.yml | 10 +- roles/check_uc_hostname/README.md | 39 - roles/check_uc_hostname/defaults/main.yml | 8 +- .../molecule/default/converge.yml | 208 ++++- .../molecule/default/molecule.yml | 19 + .../check_uc_hostname/molecule/default/prepare.yml | 72 -- roles/check_uc_hostname/tasks/main.yml | 82 +- .../vars/main.yml | 1 - roles/container_status/tasks/main.yaml | 2 +- roles/image_serve/molecule/default/molecule.yml | 8 +- roles/nova_event_callback/defaults/main.yml | 8 +- roles/nova_event_callback/tasks/main.yml | 65 +- roles/nova_event_callback/vars/main.yml | 14 +- roles/nova_svirt/tasks/validate.yml | 2 +- roles/oslo_config_validator/defaults/main.yml | 2 + roles/oslo_config_validator/meta/main.yml | 42 + .../molecule/default/molecule.yml | 34 +- .../molecule/mocked_failure/molecule.yml | 3 +- .../resources/library/generator.yml | 74 ++ .../oslo_config_validator/resources/library/podman | 304 +++++++ .../resources/library/podman_container.py | 903 --------------------- .../resources/library/podman_container_info.py | 71 -- .../resources/playbooks/converge.yml | 2 + .../resources/playbooks/prepare.yml | 13 + .../tasks/build_validation_config.yml | 2 +- .../oslo_config_validator/tasks/container_run.yml | 73 +- .../tasks/invalidate_config.yml | 2 +- roles/oslo_config_validator/tasks/main.yml | 1 + .../tasks/opt_data_format.yml | 50 +- .../tasks/validate_config.yml | 6 +- .../tasks/validation_command.yml | 5 + .../molecule/default/molecule.yml | 2 +- .../molecule/deprecated_services/molecule.yml | 2 +- .../molecule/down_services/molecule.yml | 2 +- roles/pacemaker_status/tasks/main.yml | 5 + roles/pacemaker_status/vars/main.yml | 2 + roles/tls_everywhere/molecule/default/molecule.yml | 8 +- scripts/run-local-test | 7 +- tox.ini | 64 +- zuul.d/base.yaml | 2 +- zuul.d/layout.yaml | 3 +- 118 files changed, 1058 insertions(+), 1690 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 6dc9c35..9f4f7dd 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -3,4 +3,4 @@ ansi2html>=1.6.0 -ansible>=2.4.0 -jinja2>=2.8.0,<3 -molecule>=3.0,<3.1 -pytest>=5.1.2 +ansible-core<2.12 # GPLv3+ +jinja2>=2.8.0 # BSD-3-Clause +molecule>=3.3.1,<4 # MIT +molecule-podman>=0.3.0 # MIT

1 0

tripleo-heat-templates 13.6.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are chuffed to announce the release of: tripleo-heat-templates 13.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.6.0 ^^^^^^ New Features ************ * Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package. * Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions * Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron * New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase". * With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server. * A heat parameter "IronicPowerStateChangeTimeout" has been added which sets the number of seconds to wait for power operations to complete, i.e., so that a baremetal node is in the desired power state. If timed out, the power operation is considered a failure. The default is 60 seconds, which is the same as the current Ironic default. Upgrade Notes ************* * The default UEFI iPXE bootfile is now *snponly.efi*. The boolean parameter *IronicIPXEUefiSnpOnly* was added to allow custom configuration. When set to *true* snponly is used, when *false* the previous default ipxe.efi is used. See bug: 1959726 (https://bugs.launchpad.net/tripleo/+bug/1959726) Bug Fixes ********* * Rsyslog config for haproxy (https://bugs.launchpad.net/tripleo/+bug/1953672) * When we install libvirt on a host, the system parameter "fs.aio- max- nr" is to 1048576. Since we containerized libvirtd, we lost this system parameter. We now make sure it's defined by adding it from the nova-libvirt-common template. * The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838) Other Notes *********** * Steps are taken to minimize chances of confusion between the default block storage volume type established by the CinderDefaultVolumeType parameter, and cinder's own __DEFAULT__ volume type. In a new deployment where no volumes exist, cinder's __DEFAULT__ type is deleted because it is redundant. In an upgrade scenerio, if volumes exist then the __DEFAULT__ type's description is updated to indicate the actual default volume type is the one established by the CinderDefaultVolumeType parameter. Changes in tripleo-heat-templates 13.5.0..13.6.0 ------------------------------------------------ 7f12c4484 Fix CinderDefaultVolumeType constraints fb88ed98a Check whether an HA resource already exists explicitly b442b8d59 Memcached: Allow puppet to be aware IPv6 is used 3802edefb Disable auto discovery 02255246d Add support for powermax. 47e949807 Add nvidia firstboot yaml to tripleo-heat-template a9a4d5423 Etcd: Update cluster membership when replacing a node bdd0d7ec7 Increase stop_grace_period for Octavia controller services 951eef91f Fix typo in HciCephObject role tag 2fb1cbfa0 Add CephNfs service on roles providing "external" network connectivity 950f64010 Fix network-environment.yaml ipv6 {{network.name}}Routes fae044730 Fix attr corresponding to ManilaCephFSNFSIdmapOverrides caad2d24d Required DDP package is not loaded issue 4dadf3ded Exclude /etc/openldap to avoid overriding ro file e01fe8b34 Defining fs.aio-max-nr for hosts with libvirt service b368da08e Don't bind host's /run in multipathd container c5b2e36d4 IDM server registration is fixed to one server only b69cdee8d Add IronicNeutronAgentReportInterval parameter 371bb6528 Add parameter IronicIPXEUefiSnpOnly 720617ed0 Update dervice_pci script to handle pci address formats f76a244fb Check if passthrough user_config is decoded properly from hiera data a61368ff2 Add ping test for all networks gateway IPs 8b383986f Fix cloud-init detection rules 2ca0ebbdd Use only internal endpoints in Octavia controller services c20c5e804 Make sure libvirt guests shut down before network 401883388 Disable metrics_qdr binding in HAProxyEdge 50a28df08 Fix killscript regex match for libpod-conmon-* 5314c792b Use public endpoint for [keystone_authtoken] www_authenticate_uri 6fc83dd71 Fix IPv6 router on UC re-install fc293280c Add chrony waitsync back in 03857c21e Exec libvirtd in a transient scope 1db4c72c9 Add missing services to ControllerNovaStandalone role 729971c31 fix InternalApi subnet for ControllerNovaStandalone role e59be96fa Remove ganesha_vip extra config workaround 3c4475acd GaneshaNetwork - fallback -> external -> ctlplane f51498909 Fix indentation issue with 2-bonds-vlans config fdcd81de3 Wallaby and older: Remove heat-dashboard parameters from local_settings 9f51a8395 Remove tripleo_ovn_mac_port_name port tag 630e330f9 Missing rsyslog parameters for HAProxy b5d65342a [Victoria-Only] Fix hiera condition for cache_backend 432968ba6 Keystone: Remove unused container_puppet_tasks da47a77c1 Sc04: Enable glance sparse image upload b7019a627 Clear up confusion on cinder's default volume type 2d891e178 Revert "Enforces minimum Ceph client version to Mimic" 2e679aab6 Fix condition to add per subnet routes parameter 3da3ff6ea [Neutron] Add custom env file to set dns_domain_name d29e078cf Add param to configure neutron agent_down_time and report_interval f3930cc5b Default CephDashboardNetwork to storage_dashboard 3011d4c53 Fix libvirt/qemu logs location ba0ef3529 Enable ovn-monitor-all option to ovn-controller 1a20780ae Remove mariadb-server packages from the host 8ee7df3a3 Add parameter IronicPowerStateChangeTimeout 21a1aebc4 Added support for Neutron loggings service plugin configuration 72e0b6b78 [victoria/ussuri/train] Tune minion defaults c8daec697 Add OVNAvailabilityZone to improve UX 47e974067 Enable new SELinux boolean for vTPM support 8a4351664 Use yaml.safe_load to load YAML files 56cd7d474 placement: Adding Debug parameter 83441c397 Drop archive policy from enable-legacy-telemetry 68d3a2753 Option to select the required DDP package ae34f60cd Fix swift log redirection 0e57f8b35 Fix delegate_to to use group rather then undercloud 6b70e35fe Do not fail if haproxy container UUID changes 2d21dcce7 Remove setting ACLs during Upgrade 2397dd095 Wallaby and before: Fix wrong puppet parameter name 34cf44a88 Configure api_base_uri to DesignateEndpoint URI ec263697b Install python3-openstackclient after the leapp upgrade fd508d1ca Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up fff23ad3d Fix the CephDashboardNetwork default b0c5c80e0 NovaLiveMigrationPermitAutoConverge should default to True 895ae870f Revert "Disable postcopy for ovn/ovs-dpdk" 4cbc970d1 Environment for switching to using IPs for memcached 530668d03 Enable Ceph RGW public port into firewall when using SSL 9ae8a0683 Stop rotating rabbitmq crash.log files via erlang's lager cf53dbf19 Example configurable cap add 7ce489863 Add service ordering to cleanup service to avoid conflicts with agent startup 13e5bdf6f Add SendQueueLimit to collectd-amqp1 Diffstat (except docs and test files) ------------------------------------- ci/environments/neutron_dns_domain.yaml | 2 + ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 4 +- common/container-puppet.sh | 4 +- common/deploy-steps-tasks-step-0.j2.yaml | 6 + common/deploy-steps.j2 | 6 + .../pacemaker_restart_bundle.sh | 30 +- deployment/aodh/aodh-base.yaml | 2 +- .../barbican/barbican-api-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-mon.yaml | 19 - deployment/ceph-ansible/ceph-nfs.yaml | 2 +- deployment/ceph-ansible/ceph-rgw.yaml | 1 + deployment/cinder/cinder-api-container-puppet.yaml | 18 +- deployment/database/mysql-pacemaker-puppet.yaml | 11 +- deployment/deprecated/mistral/mistral-base.yaml | 2 +- .../novajoin/novajoin-container-puppet.yaml | 2 +- deployment/deprecated/sahara/sahara-base.yaml | 2 +- deployment/etcd/etcd-container-puppet.yaml | 77 ++ .../designate/designate-api-container-puppet.yaml | 3 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 10 + .../haproxy/haproxy-edge-container-puppet.yaml | 1 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 10 + deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-base-puppet.yaml | 9 +- deployment/horizon/horizon-container-puppet.yaml | 3 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 10 +- deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 21 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- .../ironic-neutron-agent-container-puppet.yaml | 23 +- deployment/kernel/kernel-baremetal-ansible.yaml | 23 +- deployment/keystone/keystone-container-puppet.yaml | 16 +- deployment/logging/files/nova-libvirt.yaml | 2 +- deployment/manila/manila-api-container-puppet.yaml | 2 +- deployment/manila/manila-backend-powermax.yaml | 80 ++ .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 25 +- deployment/metrics/collectd-container-puppet.yaml | 23 +- .../multipathd/multipathd-container-ansible.yaml | 1 - .../neutron/derive_pci_passthrough_whitelist.py | 502 +++++--- deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 11 +- deployment/neutron/neutron-base.yaml | 7 + deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 31 - .../neutron/neutron-l3-container-puppet.yaml | 55 +- .../neutron/neutron-metadata-container-puppet.yaml | 31 - .../neutron-ovs-agent-container-puppet.yaml | 24 + deployment/neutron/neutron-plugin-ml2-ovn.yaml | 26 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 7 +- deployment/nova/nova-compute-container-puppet.yaml | 9 +- deployment/nova/nova-libvirt-container-puppet.yaml | 11 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 4 +- .../octavia/octavia-api-container-puppet.yaml | 2 +- deployment/octavia/octavia-base.yaml | 4 + .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 27 + .../ovn/ovn-controller-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- .../placement/placement-api-container-puppet.yaml | 11 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 2 + deployment/swift/swift-proxy-container-puppet.yaml | 42 +- .../swift/swift-storage-container-puppet.yaml | 40 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/zaqar/zaqar-container-puppet.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 4 +- environments/enable-stf.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 4 + environments/manila-powermax-config.yaml | 20 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 1 + environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 9 +- environments/services/neutron-ovn-dpdk.yaml | 2 - environments/services/neutron-ovs-dpdk.yaml | 3 +- environments/undercloud/undercloud-minion.yaml | 28 + .../post_deploy/undercloud_ctlplane_network.py | 73 +- firstboot/nvidia_firstboot.yaml | 743 ++++++++++++ firstboot/userdata_timesync.yaml | 1 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 22 +- network/ports/ovn_mac_addr_port.yaml | 4 - network/service_net_map.j2.yaml | 4 +- overcloud.j2.yaml | 18 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + ...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml | 4 + ...arify-default-volume-type-c77e7a7ddafdf172.yaml | 12 + ...-fs.aio-max.nr-on-compute-06447122b8e12c71.yaml | 7 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../notes/power_state-457f12af30b9e341.yaml | 8 + .../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml | 9 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovIB.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 1 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNovaStandalone.yaml | 18 +- roles/ControllerOpenstack.yaml | 1 + roles/ControllerSriov.yaml | 1 + roles/ControllerStorageDashboard.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/HciCephObject.yaml | 2 +- roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/undercloud-minion.yaml | 19 + setup.py | 1 + tools/render-ansible-tasks.py | 11 +- tools/yaml-validate.py | 47 +- tox.ini | 4 +- zuul.d/layout.yaml | 12 + 140 files changed, 3304 insertions(+), 498 deletions(-)

1 0

tripleo-common 13.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We eagerly announce the release of: tripleo-common 13.3.0: A common library for TripleO workflows. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 13.2.3..13.3.0 ---------------------------------------- 33f1eecb Ensure failures on the undercloud leads to a complete stop f105287f Fix reference to undefined variables when heat-config times out 163d4b72 Fix namespace-less containers in image-serve 7c93f761 Add tempest to sudoers for tempest container image 79a47254 Disable ubi repos during container builds 867f6aee [EL8] Add nodejs:14 module stream 6e398b9d Add ipa client to tripleoclient container e35b654e add kernel-modules-extra in overcloud image needed for HWOL 5b885153 Remove unused DEFAULT_DEPLOY_*_NAME aab7a6ac Remove unused TRIPLEO_NETWORK_CONFIG_RESOURCE 58b77da3 Remove unused DEPLOYMENT_STATUS_FILE e732eb1d Remove unused constants for TripleO UI 8a22b25d Revert "Revert "Allow for OCI manifests"" 22e500a9 Fix awk expression cf231fb2 Align swtpm packages for nova-libvirt/compute b02ad261 Add a retry to the instropection waiting workbook Diffstat (except docs and test files) ------------------------------------- container-images/kolla/base/uid_gid_manage.sh | 1 + container-images/tcib/base/base.yaml | 2 + .../os/nova-base/nova-compute/nova-compute.yaml | 3 ++ .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 1 + container-images/tcib/base/os/tempest/tempest.yaml | 8 ++++ .../tcib/base/os/tempest/tempest_sudoers | 1 + .../tcib/base/tripleoclient/tripleoclient.yaml | 1 + healthcheck/common.sh | 2 +- image-yaml/overcloud-hardened-images-centos8.yaml | 2 + image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + .../overcloud-hardened-images-uefi-centos8.yaml | 2 + .../overcloud-hardened-images-uefi-rhel8.yaml | 3 +- image-yaml/overcloud-images-centos8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + tripleo_common/constants.py | 12 ----- tripleo_common/image/image_export.py | 2 +- tripleo_common/image/image_uploader.py | 54 +++++++++++++++++++--- tripleo_common/inventory.py | 7 +++ tripleo_common/templates/deployments.yaml | 6 +-- workbooks/baremetal.yaml | 3 ++ 22 files changed, 106 insertions(+), 33 deletions(-)

1 0

python-tripleoclient 14.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are excited to announce the release of: python-tripleoclient 14.3.0: TripleO client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 14.2.3..14.3.0 ---------------------------------------------- 90c0b8eb UC/Standalone - Set ip_version in DeployedServerPortMap e1e54d2b Use netaddr when comparing local_ip for changes 8eae9267 Exposes the community validation init command af2e96ea Fix the validations_log_basedir overriding 8f83346d Overriding the log path argument for tripleoclient cli f3177274 Use Validations libs Client for main validation entry point 09962681 Don't assume json network config in validations 0f1c96f1 make net_config_override of undercloud.conf work with yaml d5264c68 Allow to pass arbitrary parameters to TCIB image config 3d6882db [stable/victoria] Add support for the validations skip list feature b2c40c3e Use real tmpdir for ansible runner tests 6cedfc26 Remove ipxe_enabled ppc64le validation c93a29e4 Update deployment status after upgrade converge a11d2b31 Return "overcloud status" output without debug 9a586eb2 [Stable-Only]Reversing the legacy directory conditional 456dc483 Remove name parameter from cell export Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- setup.cfg | 1 + test-requirements.txt | 1 + tripleoclient/config/standalone.py | 2 +- tripleoclient/constants.py | 10 +- tripleoclient/v1/overcloud_cell.py | 13 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_upgrade.py | 7 + tripleoclient/v1/tripleo_deploy.py | 9 +- tripleoclient/v1/tripleo_validator.py | 526 +++------------------ tripleoclient/v1/undercloud_config.py | 6 +- tripleoclient/v1/undercloud_preflight.py | 18 +- tripleoclient/v2/tripleo_container_image.py | 21 + 16 files changed, 180 insertions(+), 532 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8360fed..cac3524d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 74bc779b..a5b16e05 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.5.0 # Apache-2.0

1 0

os-net-config 13.3.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are psyched to announce the release of: os-net-config 13.3.0: OpenStack network configuration This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.2.1..13.3.0 --------------------------------------- 61294bc Fix failure in dpdk driver binding with VF during reboot e542420 Revert "Updating sriov_config.service to run before driverctl.slice and network-pre" 10e3922 For linux bond over VFs, disable spoofcheck by default 6694552 Adding steering_mode config to sriov_pf object 3ce1bf1 The default max/min tx rates shall not halt deployment eb08e87 Add ifcfg-* scripts on boot for Mellanox NIC interface ac934b3 Fix upper constraints 3c4c81c Update sriov config service to handle nic partitioned PF 2bf7534 sriov_config: light refactoring 9780dfa Updating sriov_config.service to run before driverctl.slice and network-pre 3298a48 Allow linux tap to use routes 5e0cb3e allow vhost0 to pass list of members Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + etc/os-net-config/samples/sriov_pf.json | 4 +- etc/os-net-config/samples/sriov_pf.yaml | 6 +- etc/os-net-config/samples/sriov_pf_switchdev.json | 3 +- etc/os-net-config/samples/sriov_pf_switchdev.yaml | 3 + os_net_config/common.py | 95 ++++++ os_net_config/impl_ifcfg.py | 37 ++- os_net_config/objects.py | 34 ++- os_net_config/schema.yaml | 8 +- os_net_config/sriov_config.py | 347 +++++++++++++--------- os_net_config/utils.py | 118 ++++---- tox.ini | 2 +- 16 files changed, 937 insertions(+), 312 deletions(-)

1 0

puppet-tripleo 13.7.0 (victoria)
by no-reply＠openstack.org 21 Apr '22

21 Apr '22

We are thrilled to announce the release of: puppet-tripleo 13.7.0: Puppet module for OpenStack TripleO This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 13.6.4..13.7.0 ---------------------------------------- 480250ba Bump metadata to 13.7.0 for stable/victoria tripleo release b6606b8f Enable ovn controller to be updated before ovn-northd. 682f6767 Format [oslo_cache] memcache_server when IPv6 is used 90f85445 Format [keystone_authtoken] memcache_servers when IPv6 is used 8e89587c Add powermax support b4fe6213 Increase connection timeouts for Redis e8b4fba9 haproxy: Enable httplog for all http endpoints 8c9cb087 haproxy: Use httpchk instead of tcpchk for heat endpoints 39327caa Revert Horizon's Memecached config to use IP addresses 55331858 Octavia: configure services endpoints 74fe2876 Support configuring extra cinder RBD options 02f31798 Horizon: Enable manila-dashboard configurations d30b18cd Horizon: Enable octavia-dashboard configurations e61d0d1b Horizon: Enable heat-dashboard configurations f472e5f7 Make sure resource_op_defaults are set before bundles 3cd0cace Fix typo in SSL file resource b5b19bc5 Extend fencing to hosts using fence_kubevirt agent. 76ecde4c Fix rabbitmq certificate reload after it is resubmitted 3529a584 Pin puppet-redis to 8.0.0 8e60fc70 Revert "Deprecate warnings for Ceilometer and Gnocchi" 74b5ba27 Set memcached server list from memcached_node_names Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- files/certmonger-rabbitmq-refresh.sh | 7 +-- manifests/fencing.pp | 7 ++- manifests/haproxy.pp | 52 +++++++++------- manifests/profile/base/aodh/authtoken.pp | 30 +++++++--- manifests/profile/base/barbican/authtoken.pp | 32 +++++++--- manifests/profile/base/ceilometer.pp | 2 - manifests/profile/base/cinder/authtoken.pp | 30 +++++++--- manifests/profile/base/cinder/volume/rbd.pp | 8 +++ manifests/profile/base/designate/authtoken.pp | 30 +++++++--- manifests/profile/base/glance/authtoken.pp | 30 +++++++--- manifests/profile/base/gnocchi.pp | 1 - manifests/profile/base/gnocchi/authtoken.pp | 30 +++++++--- manifests/profile/base/heat.pp | 43 ++++++++++--- manifests/profile/base/heat/authtoken.pp | 30 +++++++--- manifests/profile/base/horizon.pp | 34 +++++++++-- manifests/profile/base/ironic/authtoken.pp | 30 +++++++--- .../profile/base/ironic_inspector/authtoken.pp | 30 +++++++--- manifests/profile/base/keystone.pp | 54 ++++++++++++----- manifests/profile/base/manila/api.pp | 8 ++- manifests/profile/base/manila/authtoken.pp | 30 +++++++--- manifests/profile/base/manila/share.pp | 25 ++++++++ manifests/profile/base/metrics/qdr.pp | 2 +- manifests/profile/base/mistral/authtoken.pp | 30 +++++++--- manifests/profile/base/neutron/agents/ovn.pp | 5 +- manifests/profile/base/neutron/authtoken.pp | 30 +++++++--- manifests/profile/base/nova.pp | 50 ++++++++++++---- manifests/profile/base/nova/authtoken.pp | 30 +++++++--- manifests/profile/base/novajoin/authtoken.pp | 30 +++++++--- manifests/profile/base/octavia/authtoken.pp | 30 +++++++--- manifests/profile/base/octavia/health_manager.pp | 2 + manifests/profile/base/octavia/housekeeping.pp | 3 + manifests/profile/base/octavia/worker.pp | 2 + manifests/profile/base/pacemaker.pp | 5 ++ manifests/profile/base/placement/authtoken.pp | 30 +++++++--- manifests/profile/base/swift.pp | 4 +- manifests/profile/base/swift/proxy.pp | 4 +- manifests/profile/base/zaqar/authtoken.pp | 30 +++++++--- metadata.json | 2 +- .../cinder-rbd-extra-options-c13a1e84b6452fac.yaml | 6 ++ .../tripleo_profile_base_aodh_authtoken_spec.rb | 28 +++++++-- ...tripleo_profile_base_barbican_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_cinder_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_cinder_volume_rbd_spec.rb | 5 ++ ...ripleo_profile_base_designate_authtoken_spec.rb | 30 +++++++--- .../tripleo_profile_base_glance_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_gnocchi_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_heat_authtoken_spec.rb | 28 +++++++-- spec/classes/tripleo_profile_base_heat_spec.rb | 62 ++++++++++++++++++- spec/classes/tripleo_profile_base_horizon_spec.rb | 63 +++++++++++++++++++ .../tripleo_profile_base_ironic_authtoken_spec.rb | 28 +++++++-- ...profile_base_ironic_inspector_authtoken_spec.rb | 28 +++++++-- spec/classes/tripleo_profile_base_keystone_spec.rb | 58 +++++++++++++++++- .../tripleo_profile_base_manila_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_metrics_qdr_spec.rb | 4 +- .../tripleo_profile_base_mistral_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_neutron_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_nova_authtoken_spec.rb | 30 +++++++--- spec/classes/tripleo_profile_base_nova_spec.rb | 57 +++++++++++++++++- ...tripleo_profile_base_novajoin_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_octavia_authtoken_spec.rb | 30 +++++++--- ...ripleo_profile_base_placement_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_base_zaqar_authtoken_spec.rb | 28 +++++++-- .../tripleo_profile_zaqar_authtoken_spec.rb | 70 ---------------------- spec/fixtures/hieradata/default.yaml | 6 +- 65 files changed, 1262 insertions(+), 386 deletions(-)

1 0