- Release-announce - lists.openstack.org

tripleo-upgrade 8.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are pumped to announce the release of: tripleo-upgrade 8.1.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment The source is available from: https://opendev.org/openstack/tripleo-upgrade Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 8.0.0..8.1.0 --------------------------------------- edb205f Remove update converge 1fcbed5 Bump the default RHCS 3 tag to the newest (3-51) 0d64c81 Use stack name during upgrade converge Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 3 +-- tasks/update/main.yml | 4 ---- tasks/update/overcloud_update_converge.yml | 26 -------------------------- 3 files changed, 1 insertion(+), 32 deletions(-)

1 0

validations-common 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We high-spiritedly announce the release of: validations-common 1.4.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.3.0..1.4.0 ------------------------------------------ e68c7f3 Add new metadata keys to the validation playbooks 2a763c3 Update validations for Ansible 2.11 c33d395 Dependency reorganization 3f65cc0 validations_read_ini refactoring 746450a Fix ntp validation to check chronyd service status on all nodes 26ea5ef callback adjustment for no hosts matched 8dd3620 Setting language for the python3.6 tox environment 9d756e8 Test validations for false positives f282209 Removing validations-libs from test-requirements f12c025 reqcheck job is now voting 339eb1c Removing lookup_plugins data file directive 93c15fd Enabling indentation rule for yamllint. Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 1 + .pre-commit-config.yaml | 2 +- .yamllint | 5 +- .zuul.yaml | 2 +- ansible-collections-requirements.yml | 5 ++ molecule-requirements.txt | 2 +- playbooks/molecule/pre.yml | 3 + roles/validations/tasks/main.yaml | 12 ++-- roles/validations/tasks/run.yaml | 52 +++++++++++++-- roles/validations/tasks/show.yaml | 2 +- roles/validations/tasks/validations.yaml | 36 +++++++++- roles/validations/vars/main.yaml | 4 ++ setup.cfg | 1 - test-requirements.txt | 5 +- tox.ini | 35 +++++----- .../callback_plugins/validation_json.py | 35 ++++++++++ validations_common/library/validations_read_ini.py | 60 ++++++++++------- validations_common/playbooks/512e.yaml | 6 ++ validations_common/playbooks/check-cpu.yaml | 7 ++ .../playbooks/check-disk-space-pre-upgrade.yaml | 6 ++ validations_common/playbooks/check-disk-space.yaml | 6 ++ validations_common/playbooks/check-ftype.yaml | 6 ++ .../playbooks/check-latest-packages-version.yaml | 6 ++ validations_common/playbooks/check-ram.yaml | 7 ++ .../playbooks/check-selinux-mode.yaml | 5 ++ validations_common/playbooks/dns.yaml | 5 ++ validations_common/playbooks/no-op.yaml | 6 ++ validations_common/playbooks/ntp.yaml | 8 ++- validations_common/playbooks/service-status.yaml | 7 ++ validations_common/playbooks/validate-selinux.yaml | 6 ++ .../xfs_check_ftype/molecule/default/prepare.yml | 4 +- 34 files changed, 369 insertions(+), 82 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index e631256..8f0fd0c 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -2 +2 @@ -ansible>=2.8,!=2.8.9,!=2.9.12,<2.10.0 # GPLv3+ +ansible-core<2.12 # GPLv3+ diff --git a/test-requirements.txt b/test-requirements.txt index b4c85b4..4826c4d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -openstackdocstheme>=1.20.0 # Apache-2.0 - @@ -14,2 +12 @@ netaddr>=0.7.18 # BSD -pre-commit # MIT -validations-libs>=1.0.4 # Apache-2.0 +pre-commit>=2.3.0 # MIT

1 0

tripleo-heat-templates 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We eagerly announce the release of: tripleo-heat-templates 15.1.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. 15.1.0 ^^^^^^ Prelude ******* Environment file collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash. Enablement of data collection and transportation to an STF instance is now handled via existing templates. New Features ************ * Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package. * Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions * Adds two new parameters 'IronicAuthStrategy' and 'NeutronAuthStrategy' that defaults to 'keystone'. This would allow deploying standalone ironic and neutron services without keystone using different 'auth_strategies' like 'http_basic' and 'noauth'. * The libvirt driver has added support for hardware-offloaded OVS with vDPA (vhost Data Path Acceleration) type interfaces. vDPA allows virtio net interfaces to be presented to the guest while the datapath can be offloaded to a software or hardware implementation. This enables high performance networking with the portablity of standard virtio interfaces. Nova added support for vhost-vdpa devices in Wallaby. * Added OVN DBs clustering support. In this service model, a clustered database runs across multiple hosts in multi-active mode. * To help operators protect their workload, they can now enable the KernelArgsDeferReboot role parameter. This will prevent the tripleo- kernel ansible module from automatically rebooting nodes even if KernelArgs were changed unexpectedly. * To support Glance Distributed Image Import, adding configuration of "worker_self_reference_url" by providing the internal API URL for each node where glance api will run with glance-direct method of image-import is enabled. * Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron * The new "ApacheTimeout" parameter has been added, which determines the timeout used for IO operations in Apache. * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * A new "CinderPolicyEnforceNewDefaults" parameter adds the ability to disable Cinder's deprecated authorization policies. The default value is False, which means Cinder's deprecated policies are enabled. Setting the parameter to True disables the deprecated policies, which causes Cinder to enforce the project-admin, project- member, and project-reader RBAC personas. Support for system personas is planned for a future release. * Enable image copy for multiple RBD Glance stores Previously when using multiple RBD glance stores the operator was responsible for copying the image to all stores. Nova-compute now has the ability to automatically copy an image to the local glance store when required. This change enables the feature and adds the following role specific parameters to control the behaviour. * "NovaGlanceRbdCopyPollInterval" * "NovaGlanceRbdCopyTimeout" * A new Heat parameter HAProxyConfigBackendSyntax news drives the generation of HAproxy configuration. Prior to that, every service was mapped to a 'listen' section in the configuration. Now a service definition is split in two sections 'frontend' and 'backend', which allow for more complex proxying configurations. * New configuration "IronicDefaultBootMode" allows to change the default boot mode to use for bare metal instances. The default for now remains "bios" for legacy BIOS boot but may switch to "uefi" in the future. * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * This change adds functionality to enable modular libvirt daemons. All these daemons runs in its respective container. Also the default configuration is to use modular libvirt daemons instead of monolithic libvirt daemon. Here is the list of libvirt daemon which are added in this change. - virtnodedevd - virtproxyd - virtqemud - virtsecretd - virtstoraged It's possible to define the individual log filters for each one of these daemon using the following new parameters: - "LibvirtVirtlogdLogFilters" - "LibvirtVirtsecretdLogFilters" - "LibvirtVirtnodedevdLogFilters" - "LibvirtVirtstoragedLogFilters" - "LibvirtVirtqemudLogFilters" - "LibvirtVirtproxydLogFilters" More information regarding modular libvirt daemons is available here. *Libvirt Daemons <https://libvirt.org/daemons.html>* _. * Introduce new parameters {{role.name}}NetworkConfigUpdate. This will be a bool. When {{role.name}}NetworkConfigUpdate is True existing network configurations will be updated. By default, this is False and only new deployments will have the networks configured. This parameter is role based only, with no global option. * New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase". * Adds NovaRestrictLiveMigration boolean parmeter to enable an api policy to allow live migration only for a specific role which can be customized using NovaRestrictLiveMigrationRole. This feature is to prevent the default admin role users to be able to use live migration on coincidence. Additional policies specified using NovaApiPolicies get merged with this policy. * Adds new NovaCronArchiveDeleteRowsTaskLog parameter which controls to also archive task_log records while archiving the database. Defaults to true. * OctaviaLogOffload is now enabled by default, it creates a rsyslog container of the controllers that collects logs from the Octavia amphorae. * *OctaviaWorkers* and *HorizonWorkers* allow to configure the process workers count for the Octavia API and Horizon WSGI applications. * With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK * Users can now override or add individual entries to EndpointMap without having to specify complete EndpointMap in parameter_defaults section of an environment file. * The new "PlacementPolicies" parameter has been added. * Add support for the Pure Storage FlashBlade Manila driver * The following parmaeters have been added so that users can change timeout for communication over rpc call. * "AodhRpcResponseTimeout" * "CeilometerRpcResponseTimeout" * "DesignateRpcResponseTimeout" * "HeatRpcResponseTimeout" * "IronicRpcResponseTimeout" * "ManilaRpcResponseTimeout" * "NeutronRpcResponseTimeout" * "NovaRpcResponseTimeout" * "OctaviaRpcResponseTimeout" * The new "swift_recon_cron" container has been added to the SwiftStorage service, to reflect metrics related to async pendings to recon middleware in swift. Upgrade Notes ************* * Upgrades from OVN non-HA and OVN DBs pacemaker to OVN DBs clustered are currently not supported. * Changes the ironic PXE container TFTP service from "in.tftpd" to use the "dnsmasq" TFTP service. This is because the "in.tftpd" service is not anticipated to be carried by Linux distributions moving forward, and "dnsmasq" is actively maintained. * When upgrading an environment that uses collectd-write-qdr.yaml the CollectdAmqpInstances defaults previously specified need to be added to an administrator provided environment file and used during the overcloud deploy process. * When upgrading a deployment with the use of enable-stf.yaml, add the following files to your overcloud deployment command in order to maintain the existing services defined in enable-stf.yaml. * environments/metrics/collectd-write-qdr.yaml * environments/metrics/ceilometer-write-qdr.yaml * environments/metrics/qdr-edge-only.yaml * Mistral has been removed as it was Deprecated in Wallaby and is no longer in use. * With the change to EndpointMap interface, existing environments where it has been overridden have to specify 'merge' strategy in a new 'parameter_merge_strategies' section. * Support for Cavium/Liquidio has been removed. * "`OS::TripleO::Services::LiquidioCompute`" has been removed and should be removed from role data during upgrade. * The "`ComputeLiquidio`" role has been removed. * The "CinderPowerStoreAppliances" parameter has been removed because it has had no effect since the actual parameter was deprecated in cinder. * Support for the HPE Lefthand cinder driver has been removed. * The "OS::TripleO::Services::CinderHPELeftHandISCSI" service was removed, so it should be removed from role data during upgrade. * The "OctaviaPostWorkflowName" parameter has been removed. * Zaqar has been removed as it was deprecated in Wallaby and is no longer in use on the undercloud. Additionally it hasn't been supproted in the overcloud. Deprecation Notes ***************** * The parameter IronicIPXEEnabled has been deprecated since Ironic uses per-node boot interfaces since Ussuri. * The environment environments/deployed-server-deployed-neutron- ports.yaml, the deployed-neutron-port.yaml template, and DeployedServerPortMap parameter are deprecated in favor of NodePortMap, ControlPlaneVipData, and VipPortMap, which can be used with the generated environments/deployed-ports.yaml. * The following parameters have been deprecated and have no effect. * ManilaIsilonDriverHandlesShareServers * ManilaVNXDriverHandlesShareServers * ManilaVMAXDriverHandlesShareServers * The "ManilaCephFSCephFSEnableSnapshots" parameter has been deprecated, and has no effect now. Manila always enables snapshot support in Ceph FS backend since Wallaby. * VPP service and Neutron ML2/VPP plugin are deprecated in Xena release. VPP service relies on puppet project which isn't maintained for a while. Neutron ML2/VPP plugin is not actively supported in TripleO. Both services would be disabled in future releases. * This change deprecates the nova-libvirt-container-puppet.yaml heat- template which configures monolithic modular libvirt daemon. The newly added heat-template for modular libvirt daemons will be used to configure libvirt services in different containers. * This change removes NetworkDeploymentActions and {{role.name}}NetworkDeploymentActions. Since we can no longer rely on the Heat stack action when using Ephemeral Heat in tripleo. * The "Neutron(OVS|Vnic)VnicTypeBlackList" parameters are deprecated in favor of the new "Neutron(OVS|Sriov)VnicTypeProhibitList" parameters. * The "NovaSchedulerQueryPlacementForAvailabilityZone" parameter has been deprecated. The parameter has no effect now. * The "AdminToken" parameter has been deprecated. Use the new "KeystonePassword" parameter instead. Security Issues *************** * The OVN database servers in an OVN DBs clustering and TLS- everywhere deployment will listen on all IP addresses (0.0.0.0). This is a caveat that can only be addressed once RHBZ 1952038 is fixed. Bug Fixes ********* * The collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash. When specified, it was not possible to override the parameter, resulting in a combined hash of the default values and the administrators custom values which could lead to unexpected issues. * Default of the "NovaSyncPowerStateInterval" parameter has been changed from 0 to 600, to use the default value consistent with the one defined in nova. * Fixes issues with PPC64le hardware utilization where documented steps require a "/tftpboot/ppc64le" folder to exist for artifacts to be placed as it is required path for the firmware loader in order to boot the kernel and ramdisk. The folder is now automatically created for the container. * The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838) * NFSv4.2 is now there for long time and default in RHEL/CentOS 8. This changes the default for NovaNfsVersion to be v4.2 instead of v4 to have this the new default. * On the compute nodes, right now ssl certificates got created for libvirt, qemu-default, qemu-vnc and qemu-nbd. This is not required because the all services use the same NovaLibvirtNetwork network and therefore multiple certificates for the same hostname get created. Also from qemu point of view, if default_tls_x509_cert_dir and default_tls_x509_verify parameters get set for all certificates, there is no need to specify any of the other **_tls** config options. From Secure live migration with QEMU-native TLS (https://docs.openstack.org/nova/latest/admin/secure-live-migration- with-qemu-native-tls.html) The intention (of libvirt) is that you can just use the default_tls_x509_* config attributes so that you don’t need to set any other **_tls** parameters, unless you need different certificates for some services. The rationale for that is that some services (e.g. migration / NBD) are only exposed to internal infrastructure; while some sevices (VNC, Spice) might be exposed publically, so might need different certificates. For OpenStack this does not matter, though, we will stick with the defaults. Therefore with this change InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile get removed (which defaulted to /etc/ipa/ca.crt anyways) and just use InternalTLSCAFile. Also all cerfificates get created when EnableInternalTLS is true to and mount all SSL certificates from the host. This is to prevent certificate information is not available in a qemu's process container environment if features get switched later, which has shown to be problematic. * Add the missing **Workers* parameters into the low-memory footprint environment and set it to 1. Other Notes *********** * Using enable-stf.yaml now defines the expected configuration in OpenStack for use with Service Telemetry Framework. Removal of the defined resource_registry now requires passing additional environment files to enable the preferred data collectors and transport architecture, providing better flexibility to support additional architectures in the future. * The "iscsi_tcp" module is no longer loaded to support the operation of the "ironic-conductor" container as the "iscsi" Deployment interface has been removed from Ironic. * Parameter "DhcpAgentNotification" is set to "False" by default now. It should be set to "True" in case when Neutron DHCP agent is going to be deployed. It shouldn't be enabled with ML2/OVN backend. * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 15.0.0..15.1.0 ------------------------------------------------ b5ae7f846 Switch to rabbitmq fqdn hostnames and pass proper CA info 3cf046cce Add InternalApiNetwork entry in ServiceNetMap 28161b586 Default CephDashboardNetwork to storage_dashboard bf6f11824 Add a note about how glance currently supports project personas 512ba5ed4 Fix swift "Could not enable rsyncd" error c25eec5bf Limit collectds memory usage in the ansible part 768b66f88 Enable support for Libvirt modular daemons c354d2113 Use frontend/backend sections in HAProxy config 68db3d3be Allow configuring secure RBAC in nova 8ad58943d Allow configuring secure RBAC in placement 1e2d02d9e Option to select the required DDP package d0ee7e09e Nova: Remove usage of AvailabilityZoneFilter bdbd440cb Implement project personas in custom designate policy file 43a685e4b Implement project personas in custom octavia policy file 4e307cfd6 Implement project personas in custom ironic policy file 88494c90d Implement project personas in custom nova policy file c9635bf92 Implement a tool for converting policy.yaml files to heat templates e7f90201b Add parameters for manila storage availability zones 56a58f88e Fix libvirt/qemu logs location 8d51d6d3f Fix swift log redirection 012121109 Manila: Hide password strings 16e59efb3 Refactor usage of the NovaSchedulerEnabledFilters parameter b0de138b4 Explicitly point undercloud instead of localhost 33c1d9d34 Changing default tuned profile for ComputeVdpa ec5d0afa1 Add missing *Workers into low-memory footprint env d346aa94b Fix delegate_to to use group rather then undercloud 7fc781083 Only delete heat data in the DB if it exists 79dc2b994 Revert "Ensure startup files exist before containers might be started" 57a8efd40 Add a global configuration option for secure RBAC 60d77b37e Set cgroupns=host for neutron_dhcp and ovn-metadata 1a1fb2727 Update network-data v2 samples for ipv6 246d174f8 Add ipv6 network_data/vip_data for CI jobs ea5dff48c Support project personas in cinder 66492002c Don't use *-dist.conf files in commands 978f29d8c Add parameter IronicDefaultBootMode 3cb006d53 Changed minversion in tox to 3.18.0 c9f0a5af0 Added support for Neutron loggings service plugin configuration 5bcf76da0 Fix kill-script for cgroups v2 and podman e1a605833 Add environment to enable keystone in undercloud c293dfc7b Deploy standalone ironic and neutron in undercloud 6a8fb43ed Revert "Configure ironic to do UEFI boot by default" 0c167aede Remove zaqar cb630d03b Remove mistral 67bd75c8b Allow to set pacemaker cluster properties f2015da4b Simplify mysql users creation 84e1a591d Swap xinetd/tftp-server for dnsmasq to support ironic-pxe operations efd4ca085 Remove old ovndbs update workaround 5edb21ee3 Remove and replace NetworkDeploymentActions c463d2068 Install python3-openstackclient after the leapp upgrade ff3173bdc Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up 523acec27 Fix typo in vip-data-default-network-isolation.yaml 9edbde38d Fix typo in sample network data e8beaaf88 Add logging source for collectd 33d9d19a4 Configure api_base_uri to DesignateEndpoint URI 3f9191131 Add oidc options a52294169 Remove setting ACLs during Upgrade fcfa8ac23 Add CephRbdTrashPurgeInterval parameter a0f308324 Allow configuration of the managed resource email address 27adf3bc7 Ensure startup files exist before containers might be started 46027a8f2 Allow configuring distributed image import ae139dec6 Fix the CephDashboardNetwork default dcb33e8c5 Adding json output to yaml-diff f7121a846 Do not create mysql user if it already exists 128c2bcc2 CentOS 9: support restart of HA resources e9f0a32e7 GnocchiArchivePolicy has been removed db3996369 Revert "tripleo-podman: Enable podman.socket" 8a7201cd0 Manila: Deprecate ineffctive *DriverHandlesShareServers a235b70b2 Fix the failure condition for HAproxy chgrp script 835c6a04b Revert "Adjust HAProxy script to allow for ID change" ad2a13ab4 Check whether an HA resource already exists explicitly 5539bd8c1 NovaLiveMigrationPermitAutoConverge should default to True 151ca15e8 Consider GlanceMultistoreConfig when setting glance_pool 07fa9b17f Remove unused valid_exit_codes arg 6db0f74e2 Parameter to set api policy to limit live migration to role c69733bb6 Enable Ceph RGW public port into firewall when using SSL 79e24494b Set DhcpAgentNotification to be "false" by default 4e77e1474 Revert "Disable postcopy for ovn/ovs-dpdk" 65ff578a7 Apache: increase the base timeout 733d1bad4 Disable cephadm when ceph is deployed 474182927 Explicitly set ironic::json_rpc::project_name 1ce490716 Environment for switching to using IPs for memcached 9574cd4d0 Add IronicNeutronAgentReportInterval parameter 236f14fe8 Stop rotating rabbitmq crash.log files via erlang's lager 91627638d Prefill host configuration for rsyslog-omamqp1 3100829b9 Configure ironic to do UEFI boot by default 823e4e867 Add http basic auth support for neutron api a22ef3a0b Adjust HAProxy script to allow for ID change 47e348767 Glance: Replace deprecated os_region_name 7fe0d28ad Enable CephDashboard for scenario001 2e4361c87 container-puppet.sh idempotency on restart 99f04ef90 Create the tftpboot ppc64le folder f11b5edc2 Add BGP EVPN support to the FRR service 580139d2f Setting language for the python3.6 tox environment 5ff274113 Make default of NovaSyncPowerStateInterval consistent with nova 06cc21a44 Manila: Drop tenant_id templating from v2 endpoint e737e3f3a Remove deprecated ipv6 corosync parameters 72a12aa83 cinder_api needs etcd certs inside the container 073e581e6 Enable debug of memcached when Debug is enabled 8f6d13b7e Compute HA: Remove version discovery of keystone API 5771d9318 Remove StackAction from Octavia deployment c73ecb196 cinder_api: Export /var/log/httpd on the host ad942efe7 Fix missing ssh key in scenario010 job 61f67eff1 nova_libvirt_init_secret Give a proper error if ceph is not configured properly c4bdaea3d Support both frr 7.x and frr-8.0 concurrently b921b185f qdr: Add SSL support for oslo.messaging RPC f0010f606 Add OctaviaAmphoraSshKeyDir for ssh key creation for Octavia 6d2901345 Add <service>_api_paste_ini in puppet_tags bd7c489dc Ironic: Do not override bootfile_name 198786df2 Nova: Update puppet parameters to set castellan options bec1ffeeb Change tests to run on ansible-core 2.11 b2b1915a3 Fix NovaNfsVersion parameter comment ddb8acf32 Disable postcopy for ovn/ovs-dpdk 1896b10e2 Include octavia::driver_agent via puppet-tripleo b0caee475 Revert change to use community pacemaker_cluster module 41380b510 Replace deprecated database_connection of puppet base classes 169e4e983 Replace deprecated glance::api::database_connection feb93b26b Add DeployedCeph boolean parameter be04d6fa9 Stop using tripleo_container_manage_systemd_order f684a93aa Tidy up lingering todo's 8e0bd79c6 Enabling vhost-postcopy-support when live_migration_permit_post_copy e104c6e62 Default ganesha-internal service endpoint to external network dadb112a5 Add /run/frr volume mount 5ab70af5a Add param to configure neutron agent_down_time and report_interval bd20c5958 Fix support for json-rpc in ironic c4097a028 Make indentation consistent in pacemaker config_settings 30ddf4242 Add a role to run independent designate bind backends 74ae03602 Fix condition for pacemaker resource_op_defaults a94ff466c Example configurable cap add 68d7d51e4 Remove iscsi_tcp module load 9b34719ed [c9] nova_libvirt with host's cgroupns ad28f5da4 Wire up renamed upgrade periodic template 2d92ebf07 Add Pure Storage FlashBlade Manila driver b6148410b Add support for setting min TTL limit in designate e5ba54102 Set stop grace periods for designate services 2fb783508 Remove all docker related tasks from upgrades 810b81991 Do not fail if haproxy container UUID changes ac5b3829b Enable archive task_log records while archiving the database 02b157ab2 Remove unused BarbicanPkcs11Crypto* parameters 119812b91 Remove usage of deprecated GnocchiArchivePolicy 35e701c61 Enable swift-recon-cron job 65b1f4290 Replace the deprecated nova::scheduler::filter::scheduler_max_attempts ce660af8b nova: replace deprecated nova::cinder_catalog_info 53040573a Use yaml.safe_load to load YAML files 1115698c1 Fix typo in ovn-dbs-cluster northd kolla config file d2298873f Role parameter for tripleo_kernel_defer_reboot fd893918c Only reference _bundle manifests in cinder-{backup,volume}-pacemaker-puppet.yaml bc934d18a Enable ovn-monitor-all option to ovn-controller 8d568bdb6 Change default for NovaNfsVersion to NFSv4.2 cf0b6a161 Add CephAdmDebug parameter e0cb3c627 Deprecate ineffective ManilaCephFSCephFSEnableSnapshots 2b33594c1 Add OS version to check reboot happened 51fdc9c6b Add environments/deployed-networks.yaml e04f4a618 Compute HA: Remove workaround for Newton and older e5b1ae3c3 Add sample baremetal_deployment.yaml 7ade37b9f Default network configs to Train values 04cd218c8 tripleo-podman: Enable podman.socket 2001b48ca vncproxy: removal of tags and steps change from post_upgrade_tasks 712c6025d Remove unused OctaviaPostWorkflowName 2341c892f Skip yaml validation for releasenotes and zuul.d a9ed08335 Enable enable_proxy_headers_parsing in Ironic API f5f8f4fa7 Enable enable_proxy_headers_parsing in Barbican API 726ccc1bd Remove leftover of hieradata cleanup 30574f183 Test override of CephClusterName in 004 standalone a191377b3 Add tool to convert net-data from v1 to v2 ead5443cb Replace LEAPP_DEVEL_SKIP_RHSM with LEAPP_NO_RHSM 62b17c21b Keystone: Keep default auth methods in OpenIDC Federation c769343d8 Remove ineffective CinderPowerStoreAppliances parameter cbd2842db Allow customizing policy rules for Placement Api 61ffbe989 Fix manila-cephfsganesha-config environment for cephadm abed6abbe fix typo in readme 591f2aa2d Drop CollectdAmqpInstances from collectd-write-qdr.yaml d98d6d1f5 Fix playbook_dir Ansible Warning 1aa0af059 Remove network/ports/vip[_v6].yaml dce6bee2f Moves undercloud upgrade introspection data migration to step 1 f276e7a4a Make default of NeutronDefaultAvailabilityZones empty array 02c15818f Add heat-api environment 7010a2741 Introducing the ComputeVdpa role 1738ccfd2 Remove support for Cavium LiquidIO feef0cc1e Add a cloud profile for system-admins 5ef7f9330 FFU: change transfer parameters for database resync 95ddd09c8 Remove unused definition of PythonInterpreter cc0f113a6 Remove unused disable-unbound.yaml 6f0b375f7 Remove hieratada for ceilometer::agent::auth ec1f6102e yaml-diff.py: Making it a bit better 514f6df76 placement: Adding Debug parameter 681fa9a22 Rename AdminToken to KeystonePassword a2619ba57 Neutron: Rename VnicTypeBlacklist parameters af351b783 Update puppet parameters for networking-baremetal 4dca2a483 Allow tuning rpc_response_timeout ab4c114d5 Adjust enable-stf.yaml for latest recommendations 4aeb3f354 Enable image copy for multiple RBD Glance stores f065bb96b Add parameters to specify auth_strategy df4c7c8ce Use role var names from tripleo_podman bc2a0339e Preface tasks path with {{playbook_dir}} 5460ec844 Fix ordering of Swift pipeline values ad1ba1bc3 Add comment for libvirt/vnc network sync 978c058ef Enable LogOffload by default in Octavia dd5a5fc24 Remove from master the ceph-ansible references b1e992a73 Neutron: Use the pids subsystem to look up container id 26be31799 Deprecate DeployedServerPortMap 9da8a4059 Remove NovaVncProxyNetwork from ServiceNetMap 48918ea6d Enable healthcheck API in Octavia and Ironic 4da03adef Move ephemeral heat upgrade to the service ef7254edd Cinder: Remove support for HPE Lefthand driver 3da428352 Designate: Clean up deprecated Rabbit* parameters a96f333fa Neutron: Use placement user to talk with Placement service 5d5419a1f Octavia: Remove unused cleanup tasks of tls_proxy container e0adac953 Enable octavia driver agent puppet c904c7555 Explicit set qemu certificate group ownership ff48f2ac1 Get roles data from stack output on UC upgrade 0b5b914e3 Add THT Jinja2 data sources as stack output 28105815c Extend UC ephemeral heat to export network afc0d39dc Add Ephemeral Heat service a6118661f Fix NetworkDeploymentActionValue format 18651160a Deprecate VPP service and Neutron ML2/VPP agent fb67c2da9 Move scenario004 to cephadm 574cf2769 Drop mistral configuration from post deploy 8fb3a0b88 Use module for container puppet tasks d9b6ed3fb Include tripleo container service management once 3b043e495 Always run network config for undercloud ec444622d Add support for OVS DPDK pmd auto balance parameters. 91f06efb3 Do not run Swift rsync container in single replica mode 48fd886a0 Distribute iscsid.conf to all containers using iscsi 10e065219 Drop archive policy from enable-legacy-telemetry f94c38476 Remove PciPassthroughFilter from NovaSchedulerAvailableFilters d96a9c615 Neutron: Explicitly set the default hepervisor name 33f7868d5 Set tripleo_cephadm rbd mirror vars 94e31ab75 Enable DPDK OVS PMD Auto Load Balance e85da3e9e Add post_upgrade_task and remove puppet-ceph pkg d20f295f3 Simplify libvirt/qemu ssl certificates baf4a1614 OVN DBs clustering a263da138 Use merge strategy for EndpointMap 1ddef85c9 Add OVNAvailabilityZone to improve UX b991086fe Move designate from experimental feb63aba4 Add extra Ansible Variable perameter dcddeb3b9 Make UpgradeLeappDevelSkip per-role 1eea4ca2e Add map merge strategy for {{role.name}}Parameters a3814c08d Add service defined ansible_group_vars to RoleGroupVars 2f702f7bb Limit collectds memory usage d2bbc3fbb Deprecate IronicIPXEEnabled 454b45c7d Set OS_CLOUD instead in stackrc 019419463 Use community.general ansible collection instead of modules 6837633ea Fix broken restart of ovndb_server during minor update ed320d8a7 nova-compute: Adding failed_when to nova-compute stop task c214e99b2 Bump ovs and ovn versions to 2.15 for FFWD. ca732da9c nova-compute: Replacing yes/no with boolean values a26b064bd Add missing monitoring_subscription to Placement f86a22d33 Clean up DefaultPasswors 7b87fc691 Placement: Remove unused PlacementAPIInterface d2132dd81 Honor the Debug parameter in Zaqar template 5b34e66a7 Honor the BackupAndRestoreHieraConfigFile parameter 82de22a43 Mark NeutronFirewallDriver deprecated properly 7dbcb4157 Neutron: Remove unused NeutronMechanismDrivers from dhcp-agent template 86d3f64b0 Nova: Remove unused password parameters 90ace4f68 Don't create ExtraConfig resources per role 857807247 Add support for designate standalone jobs 06e12a1b0 Placement: Remove the unused NovaPassword parameter 09bcacd25 Add support for keystone_authtoken/memcache_use_advanced_pool be0b91ef5 Add network-v2 default files + vip data examples 035299cdc Remove all telemetry related redundant environments fcac503da Nova: Remove useless authtoken hieradata from computes 7d0320ad9 Drop usage of removed tripleo::haproxy parameters 0bb24e11e Remove ENABLE_* environment about puglins not installed c42ba433a Introducing the nova-cell environments 2225f9666 Support cinder image conversion on an NFS share 78e870712 Replace unused var 'net' with _ ab9f26b30 Remove or fix outdated/incorrect tripleo hieradata definitions 05dbd4761 Glance: Update puppet parameters to set castellan options 6dd006fc0 Add Python3 xena unit tests e9901a7fb Update master for stable/wallaby a7d238643 Make memcached port parameters globally available 4f2884ff6 Clean up usage of the deprecated aodh::auth class 2e9900e81 Set hieradata for the aodh::service_credentials class a314ad3ae Enable proxy header parsing in Octavia API 67d188f51 Clean up leftovers of Midonet support 02bb4b8aa Remove or fix outdated/incorrect neutron hieradata definitions d975e560a [VxFlex OS] Fix resource name typo in template Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + README.rst | 4 - baremetal-samples/baremetal_deployment.yaml | 79 + ci/environments/disable-unbound.yaml | 57 - ci/environments/scenario000-standalone.yaml | 8 +- .../scenario001-multinode-containers.yaml | 41 +- ci/environments/scenario001-standalone.yaml | 8 +- ci/environments/scenario002-standalone.yaml | 6 +- ci/environments/scenario003-standalone.yaml | 18 +- ci/environments/scenario004-standalone.yaml | 61 +- .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 1 + .../scenario010-multinode-containers.yaml | 38 +- ci/environments/scenario010-standalone.yaml | 39 +- ci/environments/scenario012-standalone.yaml | 1 + ci/network_data_v6.yaml | 54 + ci/vip_data_v6.yaml | 6 + common/common-container-config-scripts.yaml | 2 +- common/container-puppet.sh | 1 + common/deploy-steps-tasks-step-0.j2.yaml | 2 +- common/deploy-steps-tasks.yaml | 2 - common/deploy-steps.j2 | 35 +- common/generate-config-tasks.yaml | 21 +- common/host-container-puppet-tasks.yaml | 22 +- .../nova_libvirt_init_secret.sh | 10 + .../pacemaker_mutex_restart_bundle.sh | 15 +- .../pacemaker_restart_bundle.sh | 30 +- container_config_scripts/pacemaker_wait_bundle.sh | 29 +- deployed-server/README.rst | 2 +- deployed-server/deployed-neutron-port.yaml | 18 + deployed-server/deployed-server.yaml | 37 +- deployment/aodh/aodh-api-container-puppet.yaml | 6 + deployment/aodh/aodh-base.yaml | 20 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 6 + .../backup-and-restore/rear-baremetal-ansible.yaml | 1 + .../barbican/barbican-api-container-puppet.yaml | 34 +- deployment/barbican/barbican-client-puppet.yaml | 20 +- ...ometer-agent-notification-container-puppet.yaml | 2 - .../ceilometer-base-container-puppet.yaml | 26 +- deployment/ceph-ansible/ceph-base.yaml | 760 ---- deployment/ceph-ansible/ceph-client.yaml | 71 - deployment/ceph-ansible/ceph-external.yaml | 73 - deployment/ceph-ansible/ceph-grafana.yaml | 186 - deployment/ceph-ansible/ceph-mds.yaml | 81 - deployment/ceph-ansible/ceph-mgr.yaml | 179 - deployment/ceph-ansible/ceph-mon.yaml | 122 - deployment/ceph-ansible/ceph-nfs.yaml | 137 - deployment/ceph-ansible/ceph-osd.yaml | 137 - deployment/ceph-ansible/ceph-rbdmirror.yaml | 99 - deployment/ceph-ansible/ceph-rgw.yaml | 200 - deployment/cephadm/ceph-base.yaml | 118 +- deployment/cephadm/ceph-client.yaml | 4 - deployment/cephadm/ceph-external.yaml | 4 - deployment/cephadm/ceph-grafana.yaml | 4 - deployment/cephadm/ceph-mds.yaml | 3 - deployment/cephadm/ceph-mgr.yaml | 4 - deployment/cephadm/ceph-mon.yaml | 4 - deployment/cephadm/ceph-nfs.yaml | 4 - deployment/cephadm/ceph-osd.yaml | 4 - deployment/cephadm/ceph-rbdmirror.yaml | 28 +- deployment/cephadm/ceph-rgw.yaml | 5 +- deployment/cinder/cinder-api-container-puppet.yaml | 18 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 3 - .../cinder/cinder-backup-container-puppet.yaml | 2 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 11 +- .../cinder/cinder-common-container-puppet.yaml | 68 +- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 73 - .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 5 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- deployment/database/mysql-base.yaml | 6 - deployment/database/mysql-container-puppet.yaml | 4 +- deployment/database/mysql-pacemaker-puppet.yaml | 16 + deployment/database/redis-container-puppet.yaml | 2 +- deployment/database/redis-pacemaker-puppet.yaml | 2 +- .../liquidio-compute-config-container-puppet.yaml | 124 - deployment/deprecated/mistral/mapping.json | 373 -- .../mistral/mistral-api-container-puppet.yaml | 270 -- deployment/deprecated/mistral/mistral-base.yaml | 118 - .../mistral/mistral-engine-container-puppet.yaml | 141 - .../mistral-event-engine-container-puppet.yaml | 116 - .../mistral/mistral-executor-container-puppet.yaml | 252 -- .../neutron-vpp-agent-baremetal-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 222 +- .../novajoin/novajoin-container-puppet.yaml | 6 + .../{ => deprecated}/vpp/vpp-baremetal-puppet.yaml | 0 .../deprecated/zaqar/zaqar-container-puppet.yaml | 395 -- .../designate/designate-api-container-puppet.yaml | 12 +- .../designate/designate-base.yaml | 36 +- .../designate/designate-bind-container.yaml | 3 +- .../designate-central-container-puppet.yaml | 44 +- .../designate/designate-mdns-container-puppet.yaml | 10 +- .../designate-producer-container-puppet.yaml | 3 +- .../designate/designate-sink-container-puppet.yaml | 3 +- .../designate-worker-container-puppet.yaml | 3 +- deployment/frr/frr-container-ansible.yaml | 39 +- deployment/glance/glance-api-container-puppet.yaml | 30 +- .../glance/glance-api-edge-container-puppet.yaml | 12 + .../gnocchi/gnocchi-api-container-puppet.yaml | 11 +- deployment/haproxy/haproxy-container-puppet.yaml | 11 +- .../haproxy/haproxy-edge-container-puppet.yaml | 6 - deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-api-container-puppet.yaml | 2 +- deployment/heat/heat-base-puppet.yaml | 12 +- deployment/heat/heat-engine-container-puppet.yaml | 9 +- .../heat/heat-ephemeral-container-ansible.yaml | 124 + deployment/horizon/horizon-container-puppet.yaml | 30 +- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 6 +- deployment/ironic/ironic-api-container-puppet.yaml | 83 +- deployment/ironic/ironic-base-puppet.yaml | 18 +- .../ironic/ironic-conductor-container-puppet.yaml | 147 +- .../ironic/ironic-inspector-container-puppet.yaml | 75 +- .../ironic-neutron-agent-container-puppet.yaml | 44 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 6 +- deployment/iscsid/iscsid-container-puppet.yaml | 2 +- .../kernel-boot-params-baremetal-ansible.yaml | 16 + deployment/keystone/keystone-container-puppet.yaml | 106 +- deployment/logging/files/nova-libvirt.yaml | 67 +- deployment/logging/rsyslog-container-puppet.yaml | 26 + deployment/manila/manila-api-container-puppet.yaml | 6 + deployment/manila/manila-backend-cephfs.yaml | 65 +- .../manila/manila-backend-flashblade-puppet.yaml | 77 + deployment/manila/manila-backend-isilon.yaml | 37 +- deployment/manila/manila-backend-netapp.yaml | 52 +- deployment/manila/manila-backend-unity.yaml | 36 +- deployment/manila/manila-backend-vmax.yaml | 39 +- deployment/manila/manila-backend-vnx.yaml | 45 +- deployment/manila/manila-base.yaml | 15 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 26 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 100 +- deployment/metrics/collectd-container-ansible.yaml | 14 +- deployment/metrics/collectd-container-puppet.yaml | 21 +- deployment/metrics/qdr-container-ansible.yaml | 3 - deployment/neutron/kill-script | 11 +- .../neutron/neutron-api-container-puppet.yaml | 91 +- deployment/neutron/neutron-base.yaml | 21 +- .../neutron/neutron-dhcp-container-puppet.yaml | 43 +- .../neutron/neutron-l3-container-puppet.yaml | 56 +- .../neutron/neutron-metadata-container-puppet.yaml | 42 +- .../neutron-ovs-agent-container-puppet.yaml | 26 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 29 +- deployment/neutron/neutron-plugin-ml2.yaml | 37 +- .../neutron-sriov-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 57 +- deployment/nova/nova-apidb-client-puppet.yaml | 7 +- deployment/nova/nova-base-puppet.yaml | 12 +- deployment/nova/nova-compute-container-puppet.yaml | 131 +- .../nova/nova-conductor-container-puppet.yaml | 4 - deployment/nova/nova-db-client-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 4 +- .../nova/nova-metadata-container-puppet.yaml | 8 +- .../nova-modular-libvirt-container-puppet.yaml | 979 +++++ .../nova/nova-scheduler-container-puppet.yaml | 19 +- deployment/nova/nova-virt-common.yaml | 158 + .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- .../octavia/octavia-api-container-puppet.yaml | 72 +- deployment/octavia/octavia-base.yaml | 5 + .../octavia/octavia-deployment-config.j2.yaml | 36 +- .../octavia-health-manager-container-puppet.yaml | 4 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../octavia/providers/ovn-provider-config.yaml | 3 + .../openvswitch-dpdk-baremetal-ansible.yaml | 103 +- .../ovn/ovn-controller-container-puppet.yaml | 19 +- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 307 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 8 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 66 +- .../placement/placement-api-container-puppet.yaml | 50 +- deployment/podman/podman-baremetal-ansible.yaml | 69 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 19 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 2 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 47 +- .../swift/swift-storage-container-puppet.yaml | 119 +- .../timemaster/timemaster-baremetal-ansible.yaml | 3 - .../tripleo-packages-baremetal-puppet.yaml | 22 +- deployment/unbound/unbound-container-ansible.yaml | 29 + .../undercloud-upgrade-ephemeral-heat.yaml | 54 - deployment/undercloud/undercloud-upgrade.yaml | 24 +- environments/cavium-liquidio.yaml | 31 - .../ceph-ansible/ceph-ansible-external.yaml | 31 - .../ceph-ansible/ceph-ansible-per-role.yaml | 19 - environments/ceph-ansible/ceph-ansible.yaml | 25 - environments/ceph-ansible/ceph-dashboard.yaml | 5 - environments/ceph-ansible/ceph-mds.yaml | 2 - environments/ceph-ansible/ceph-rbdmirror.yaml | 2 - environments/ceph-ansible/ceph-rgw.yaml | 6 - environments/cinder-dellemc-powerstore-config.yaml | 1 - environments/cinder-dellemc-vxflexos-config.yaml | 2 +- environments/cinder-hpelefthand-config.yaml | 13 - environments/dcn-storage.yaml | 2 +- environments/deployed-networks.yaml | 2 + environments/deployed-ports.j2.yaml | 24 + .../deployed-server-deployed-neutron-ports.yaml | 8 +- environments/disable-telemetry.yaml | 21 - environments/enable-designate.yaml | 19 +- environments/enable-federation-openidc.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 5 +- environments/enable-secure-rbac.yaml | 4126 ++++++++++++++++++++ environments/enable-stf.yaml | 99 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 1 - environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/low-memory-usage.yaml | 15 +- environments/manila-cephfsganesha-config.yaml | 5 +- environments/manila-cephfsnative-config.yaml | 1 - environments/manila-flashblade-config.yaml | 15 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 8 - environments/neutron-ml2-vpp.yaml | 4 +- environments/neutron-ovs-dvr.yaml | 1 + environments/nova-cell.yaml | 23 + environments/ovs-hw-offload.yaml | 11 +- environments/services-baremetal/mistral.yaml | 6 - .../services-baremetal/neutron-ovn-dvr-ha.yaml | 1 - .../services-baremetal/neutron-ovn-ha.yaml | 1 - environments/services-baremetal/neutron-sriov.yaml | 10 +- environments/services/heat-api.yaml | 2 + environments/services/ironic-overcloud.yaml | 3 +- environments/services/mistral.yaml | 6 - environments/services/neutron-mlnx-agent.yaml | 11 +- environments/services/neutron-ovn-dvr-ha.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 - environments/services/neutron-ovn-sriov.yaml | 10 +- environments/services/neutron-ovn-standalone.yaml | 1 - environments/services/neutron-ovs-dpdk.yaml | 6 +- environments/services/neutron-ovs-dvr.yaml | 1 + environments/services/neutron-ovs.yaml | 1 + environments/services/neutron-sriov.yaml | 10 +- environments/services/undercloud-aodh.yaml | 7 - environments/services/undercloud-ceilometer.yaml | 9 - environments/services/undercloud-gnocchi.yaml | 7 - environments/services/vpp.yaml | 2 +- environments/services/zaqar-swift-backend.yaml | 4 - environments/services/zaqar.yaml | 3 - environments/ssl/enable-memcached-tls.yaml | 3 - environments/ssl/no-tls-endpoints-public-ip.yaml | 82 - environments/ssl/tls-endpoints-public-dns.yaml | 54 +- environments/ssl/tls-endpoints-public-ip.yaml | 54 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 11 +- environments/standalone/standalone-overcloud.yaml | 8 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/nova-nfs.yaml | 2 +- environments/undercloud-enable-keystone.yaml | 12 + environments/undercloud-enable-nova.yaml | 10 +- environments/undercloud.yaml | 14 +- environments/undercloud/undercloud-minion.yaml | 14 +- .../updates/update-from-ml2-ovs-from-rocky.yaml | 1 - extraconfig/post_deploy/undercloud_post.py | 85 +- extraconfig/post_deploy/undercloud_post.sh | 24 +- extraconfig/post_deploy/undercloud_post.yaml | 27 +- .../default-network-isolation-ipv6.yaml | 5 + network-data-samples/ganesha-ipv6.yaml | 1 + .../legacy-routed-networks-ipv6.yaml | 9 + network-data-samples/management-ipv6.yaml | 1 + network-data-samples/routed-networks-ipv6.yaml | 5 + network-data-samples/routed-networks.yaml | 2 +- .../vip-data-default-network-isolation.yaml | 39 + network-data-samples/vip-data-fixed-ip.yaml | 35 + network-data-samples/vip-data-routed-networks.yaml | 40 + network/endpoints/build_endpoint_map.py | 308 -- network/endpoints/endpoint_data.yaml | 353 -- network/endpoints/endpoint_map.yaml | 2709 +++---------- network/ports/vip.yaml | 122 - network/ports/vip_v6.yaml | 112 - network/service_net_map.j2.yaml | 14 +- network_data_default.yaml | 7 + overcloud-resource-registry-puppet.j2.yaml | 99 +- overcloud.j2.yaml | 53 +- puppet/role.role.j2.yaml | 2 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + ...parameters-neutron-ironic-3d7330a7dc82f43d.yaml | 7 + .../add-computevdpa-role-1f7c5df94d9900b6.yaml | 11 + ...d-ovn-dbs-cluster-support-6193cba5be432865.yaml | 14 + ...ter-kernelargsdeferreboot-5b8e8b2f64c64a91.yaml | 7 + ..._distributed_image_import-97458c56a1ad95d9.yaml | 7 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + .../notes/apache-timeout-d61a3910ce7dc162.yaml | 5 + ...hange-ironic-tftp-service-21cc25629b15992f.yaml | 7 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 + ...keystone-project-personas-b71c35c4c1a8bbd8.yaml | 9 + .../notes/collectd-write-qdr-f790703e3f0c3245.yaml | 16 + ...precate-IronicIPXEEnabled-6cb68b0bfee5ac4d.yaml | 5 + ...-deployed-server-port-map-99d4d6a01f630d04.yaml | 7 + ...ver_handles_share_servers-d6af4e7c25c34c6e.yaml | 8 + ...la-cephfs-enable-snapshot-7857604802378720.yaml | 6 + .../notes/deprecate-vpp-2911807152cd4b62.yaml | 7 + ...-stf-no-resource-registry-db6ee6319964ab7f.yaml | 20 + ...sync-power-state-interval-90778dbcb0104130.yaml | 6 + ...64le-tftp-folder-creation-36e73d187334dbbe.yaml | 7 + .../notes/glance_image_copy-34a3e62c48eaee0e.yaml | 13 + .../haproxy-frontend-backend-b253d26eeadbfb6b.yaml | 8 + .../notes/ironic-boot-mode-07df530490bead50.yaml | 6 + ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + .../notes/mistral-removal-df87b8dd8bf6bd4e.yaml | 5 + .../modular-libvirt-daemons-b5ad6043d6510077.yaml | 31 + .../notes/network-update-var-355dbbb4daee7f46.yaml | 14 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + ...on-vnic_type_prohibitlist-21e23e511ca0e922.yaml | 5 + ...api_live_migration_policy-04fe402b554085b9.yaml | 10 + ..._compute_nfs_default_vers-e61d0bf78794be28.yaml | 6 + ...ive_deleted_rows-task_log-efbf0aac77aab128.yaml | 6 + ...t_ssl_cert_simplification-dbee541be9f55ce5.yaml | 30 + ...le-log-offload-by-default-53faec2d64688109.yaml | 6 + .../octavia_service_workers-70887b5882ce0bb0.yaml | 9 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + ...rge-strategy-endpoint-map-83b8321c72421fd6.yaml | 11 + .../notes/placement-policies-db2704ea63d0bdad.yaml | 4 + .../purestorage_flashblade-75cbbdae48f233e0.yaml | 4 + ...-availability-zone-filter-24a0f480bb2a345b.yaml | 5 + .../notes/remove-cavium-2d8cbe8a5085517a.yaml | 11 + ...der-powerstore_appliances-0a4905808b2b66f1.yaml | 5 + .../remove-hpe-lefthand-23c6beaa777e3dfb.yaml | 8 + ...nductor-iscsi-module-load-1e7d3c72a222196a.yaml | 6 + ...ctavia_post_workflow_name-84083c092cf79c8d.yaml | 4 + .../notes/rename-admin-token-ae1b694f063035c8.yaml | 5 + .../rpc_reponse_timeout-6feb5f62819b2eaf.yaml | 15 + ...on-to-be-false-by-default-4fe7acaa60d2a95f.yaml | 6 + .../notes/swift-recon-cron-8a3023ab693486bd.yaml | 6 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 9 +- .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + .../notes/zaqar-removal-6cdb31276d5a26dc.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + roles/{ComputeLiquidio.yaml => ComputeVdpa.yaml} | 22 +- roles/Controller.yaml | 7 +- roles/ControllerAllNovaStandalone.yaml | 7 +- roles/ControllerNoCeph.yaml | 7 +- roles/ControllerNovaStandalone.yaml | 7 +- roles/ControllerOpenstack.yaml | 7 +- roles/ControllerSriov.yaml | 7 +- roles/ControllerStorageDashboard.yaml | 7 +- roles/ControllerStorageNfs.yaml | 7 +- roles/DesignateBind.yaml | 42 + roles/Standalone.yaml | 7 +- roles/Undercloud.yaml | 7 +- roles_data.yaml | 7 +- roles_data_undercloud.yaml | 7 +- sample-env-generator/dcn.yaml | 2 +- sample-env-generator/enable-services.yaml | 12 +- sample-env-generator/nova-cell.yaml | 20 + sample-env-generator/openidc.yaml | 2 +- sample-env-generator/ssl.yaml | 221 +- sample-env-generator/standalone.yaml | 16 +- sample-env-generator/undercloud-minion.yaml | 17 +- scripts/check-run-nova-compute | 56 +- scripts/undercloud-upgrade-ephemeral-heat.py | 168 +- test-ansible-requirements.txt | 2 +- tools/convert_policy_yaml_to_heat_template.py | 73 + tools/convert_v1_net_data.py | 74 + tools/merge-new-params-nic-config-script.py | 2 - tools/process-templates.py | 2 +- tools/render-ansible-tasks.py | 11 +- tools/yaml-diff.py | 127 +- tools/yaml-validate.py | 154 +- tox.ini | 15 +- tripleo_heat_templates/environment_generator.py | 4 + vip_data_default.yaml | 8 + zuul.d/layout.yaml | 3 +- 372 files changed, 10682 insertions(+), 9560 deletions(-) Requirements updates -------------------- diff --git a/test-ansible-requirements.txt b/test-ansible-requirements.txt index 3e87cc19c..28fed0367 100644 --- a/test-ansible-requirements.txt +++ b/test-ansible-requirements.txt @@ -5 +5 @@ yaql>=1.1.3 # Apache 2.0 License -ansible>=2.8.6 # GPL +ansible-core<2.12 # GPL

1 0

tripleo-puppet-elements 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are tickled pink to announce the release of: tripleo-puppet-elements 15.1.0: Puppet building rules for OpenStack images. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 15.0.0..15.1.0 ------------------------------------------------- 8fb012a Remove zaqar c5645dd Remove mistral 1120718 Add octavia client to the installed packages for the overcloud-image 4d183e9 Add config for CentOS 9 in yum_plugin_priorities 67b6e40 Install yum plugin priorities only on centos7 and fedora 7d28c85 Install puppet-placement d08388a Remove unused puppet-timezone cb2011c Remove leftover of Sahara support 07ab035 Remove puppet modules for Sensu/Uchiwa support f7ba4bf Remove fluentd module 92fb7d0 Remove puppet-opendaylight 83a27ba Remove puppet-veritas_hypercale 4bde235 Remove puppetlabs-ntp c8b65cf Remove puppet-ec2 27864d5 Remove leftover of pankoclient 980bfd4 setup.cfg: Replace dashes with underscores ca01d75 Clear tox ini Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/pkg-map | 4 ++++ .../pre-install.d/01-install-yum-priorities | 2 +- .../package-installs-overcloud-openstack-clients | 4 +--- elements/overcloud-openstack-clients/pkg-map | 21 ++++++--------------- .../environment.d/01-puppet-module-pins.sh | 5 ++--- .../02-puppet-modules-install-types.sh | 12 +----------- .../puppet-modules/source-repository-puppet-modules | 12 +----------- setup.cfg | 8 ++++---- tox.ini | 2 +- 9 files changed, 21 insertions(+), 49 deletions(-)

1 0

ansible-role-collect-logs 1.4.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are delighted to announce the release of: ansible-role-collect-logs 1.4.0: ansible-role-collect-logs - An Ansible role for aggregating logs from different nodes. The source is available from: https://opendev.org/openstack/ansible-role-collect-logs Download the package from: https://tarballs.openstack.org/ansible-role-collect-logs/ For more details, please see below. Changes in ansible-role-collect-logs 1.3.0..1.4.0 ------------------------------------------------- 0f2adf2 Update url for sova query source bfef65d Upgrade ansible-lint/molecule runs c9358e2 Handling long file names in sova ed5c048 Add errors.txt in artcl_logstash_files cc6ff6f Refactor zuul jobs 4b54d97 Correct the tox option for skipping sdist generation 2f4efe8 add tempest_run.log to logstash 79f16c5 Add container update rpms info to collect logs c3483e8 Avoid using openstack constraints Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 ++ .pre-commit-config.yaml | 16 ++++---- .yamllint | 7 ---- MANIFEST.in | 10 ++++- galaxy.yml | 34 ++++++++++++---- plugins/modules/sova.py | 5 ++- requirements.yml | 2 + roles/collect_logs/defaults/main.yml | 1 + roles/collect_logs/files/collect-container-logs.sh | 11 +++++ roles/collect_logs/molecule/default/converge.yml | 4 +- roles/collect_logs/molecule/default/prepare.yml | 1 + roles/collect_logs/molecule/default/verify.yml | 2 +- roles/collect_logs/molecule/infrared/converge.yml | 2 + roles/collect_logs/molecule/infrared/molecule.yml | 2 + roles/collect_logs/molecule/infrared/verify.yml | 2 +- roles/collect_logs/molecule/sova/prepare.yml | 2 + roles/collect_logs/molecule/sova/verify.yml | 13 +++++- roles/collect_logs/tasks/collect.yml | 8 +++- roles/collect_logs/tasks/collect/container.yml | 8 +++- roles/collect_logs/tasks/collect/system.yml | 2 +- roles/collect_logs/tasks/create-docs.yml | 8 ++-- roles/collect_logs/tasks/publish.yml | 13 +++--- roles/collect_logs/tasks/publish_ara.yml | 4 +- roles/collect_logs/tasks/publish_ara_influxdb.yml | 3 ++ roles/collect_logs/tasks/sova.yml | 2 +- tox.ini | 27 ++++++++----- zuul.d/layout.yaml | 47 +++++++++------------- 29 files changed, 157 insertions(+), 84 deletions(-)

1 0

os-collect-config 13.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We contentedly announce the release of: os-collect-config 13.1.0: Collect and cache metadata, run hooks on changes. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 13.0.1..13.1.0 ------------------------------------------- 3a7d05a Drop six d1add68 Drop unused requirements a309852 Use py3 as the default runtime for tox 537440c setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- os_collect_config/cfn.py | 2 +- os_collect_config/zaqar.py | 3 +-- requirements.txt | 4 ---- setup.cfg | 6 +++--- tox.ini | 2 +- 7 files changed, 8 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c497bab..1ddb7c4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -anyjson>=0.3.3 # BSD -eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT @@ -12 +9,0 @@ requests>=2.14.2 # Apache-2.0 -iso8601>=0.1.11 # MIT @@ -16 +12,0 @@ oslo.log>=3.36.0 # Apache-2.0 -six>=1.10.0 # MIT

1 0

ansible-role-tripleo-modify-image 1.3.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We joyfully announce the release of: ansible-role-tripleo-modify-image 1.3.0: ansible-tripleo-modify-image - Ansible role to allow modification to container images built for the TripleO project. The source is available from: https://opendev.org/openstack/ansible-role-tripleo-modify-image Download the package from: https://tarballs.openstack.org/ansible-role-tripleo-modify-image/ For more details, please see below. Changes in ansible-role-tripleo-modify-image 1.2.2..1.3.0 --------------------------------------------------------- 0b9fdcc Remove config of container_build_tool 81ca6b4 Remove docker modules from the role e4c84ad Extract updated rpms from buildah images b304c89 Only mount /etc/{{ pkg_mgr_suffix }}/vars if it exists Diffstat (except docs and test files) ------------------------------------- README.rst | 19 ------------ defaults/main.yml | 1 - meta/main.yml | 1 - tasks/get_original_user.yml | 57 ++++++++-------------------------- tasks/modify_image.yml | 11 ++++--- tasks/precheck.yml | 5 --- tasks/yum_install.yml | 4 --- tasks/yum_install_buildah.yml | 9 ++++++ tasks/yum_install_docker.yml | 57 ---------------------------------- tasks/yum_update.yml | 4 --- tasks/yum_update_buildah.yml | 28 +++++++++++++++++ tasks/yum_update_docker.yml | 71 ------------------------------------------- templates/yum_update.sh.j2 | 4 --- vars/main.yml | 6 ---- 14 files changed, 56 insertions(+), 221 deletions(-)

1 0

puppet-pacemaker 1.3.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are glad to announce the release of: puppet-pacemaker 1.3.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. 1.3.0 ^^^^^ New Features * Adds support for fence_kubevirt fencing agent. Changes in puppet-pacemaker 1.2.0..1.3.0 ---------------------------------------- fff6e02 Bump tag for release 99ac026 Make sure we test for Promoted when looking for constraints bc4cc78 Support fence_kubevirt apiversion parameter 744f3b7 Add support for fence_kubevirt fencing agent 4399c3a Fix up cluster_setup_extras usage 606d58c Remove old workarounds for broken crm_diff d513c63 Increase the scaleup/startup tries 531283e Fix spec tests using the deprecated pacemaker_restart_resource? function b0ea31a Update metadata to match released tag 8edbd64 setup.cfg: Replace dashes with underscores dc2ae86 Fix where long_description_content_type is placed Diffstat (except docs and test files) ------------------------------------- agent_generator/src_xml/fence_kubevirt.xml | 134 ++++++++++ agent_generator/variables.sh | 5 + lib/puppet/provider/pcmk_common.rb | 101 +------- lib/puppet/provider/pcmk_constraint/default.rb | 4 +- manifests/corosync.pp | 6 +- manifests/stonith/fence_kubevirt.pp | 274 +++++++++++++++++++++ metadata.json | 2 +- .../notes/fence_kubevirt-435249b87ac6c4a1.yaml | 4 + setup.cfg | 8 +- spec/unit/puppet/provider/pcmk_common_spec.rb | 55 ++--- 10 files changed, 448 insertions(+), 145 deletions(-)

1 0

python-tripleoclient 17.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We are psyched to announce the release of: python-tripleoclient 17.1.0: TripleO client The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 17.1.0 ^^^^^^ Prelude ******* During a minor update of the overcloud. It was previously necessary to execute 3 steps. - Update Prepare - Update Run - Update Converge Starting in W, it is no longer necessary to perform a Stack update during the converge. This change removes the stack update from the converge step. Now, we will just run the deploy_steps_playbook instead. New Features ************ * Added options for "overcloud delete" command to unprovision networks provisioned with "overcloud deploy" or with "overcloud network provision". * The commands *openstack overcloud node import* and *openstack overcloud node configure* now have a --boot-mode arguement which allows the boot mode for all affected nodes to be set to UEFI boot (uefi) or legacy BIOS boot (bios). This allows some nodes to have a different boot mode to the default (uefi). * The "enable_mistral" parameter and the "enable_zaqar" parameter in undercloud/standalone deployment have been deprecated and will be removed in a future release. * Neutron resources for overcloud deployments on the undercloud is now managed with tooling external to the Heat stack. Networks and subnet resources as well as Virtual IPs for an overcloud can either be manged using separate commands or the all- in-one "overcloud deploy" by using the new network data YAML definition as "--networks-file" and the "--vip-file" arguments with this command. Overcloud node network ports are now managed by the baremetal node provisioning workflow. Baremeteal nodes, and the network resources, can be provisioned using the separate "overcloud node provision" command. Alternatively the all-in-one "overcloud deploy" command will run the baremetal node provisioning steps if the "--baremetal- deployment" argument is used. Please refer to the Networking Version 2 (Two) (https://docs.openstack.org/project-deploy-guide/tripleo- docs/latest/deployment/network_v2.html). documentation page for more details. * Undercloud is now deployed without keystone and deploys standalone openstack services with http_basic authentication. A new option 'enable_keystone' has been added to enable keystone in the undercloud if required. * An ephemeral Heat process is now used by default for overcloud deployment. On each overcloud management operation (deploy/update/upgrade), a containerized Heat process will be started, the stack will be created new, and then the Heat process will be stopped. The enable_heat option is undercloud.conf is now defaulted to False. * A new command "openstack overcloud ceph deploy" is added. The command is used to deploy Ceph after the hardware has been provisioned with networking and before the overcloud is deployed. The command takes the output of "openstack overcloud node provision" as input and returns a Heat enviornment file, e.g. deployed_ceph.yaml, as output. The deployed_ceph.yaml file may then be passed to the "openstack overcloud deploy" command as input. During overcloud deployment the Ceph cluster is then configured to host OpenStack. E.g. cephx keys and pools are still created on the Ceph cluster by "openstack overcloud deploy". Upgrade Notes ************* * The following two options have been removed. * "docker_registry_mirror" * "docker_insecure_registries" * The "container_cli" parameter no longer accepts "docker". Now only "podman" is accepted as a valid value. * The network data defintion used with the overcloud deployement must be updated to version 2. The undercloud upgrade will execute the command ("openstack overcloud network extract") to generate the network data definition for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud- deploy/<STACK_NAME>/tripleo-<STACK_NAME>-network-data.yaml". * A new YAML definition file for overcloud stack virtual IPs must be used. The undercloud upgrade will execute the command ("overcloud network vip extract") to generate this file for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud-deploy/< STACK_NAME>/tripleo-<STACK_NAME>-virtual-ips.yaml". * The baremetal node defintion has been extended to support neutron port resource managment, this requires additional input in the YAML definition used for baremetal node provisioning. The undercloud upgrade will execute the command ("overcloud node extract provisioned") to generate this file for each deployed overcloud. The undercloud upgrade will save the new file in the working directory for each stack, defaults to "overcloud- deploy/<STACK_NAME>/tripleo-<STACK_NAME>-baremetal- deployment.yaml.yaml". * keystone service would not be deployed by default in the undercloud. Deprecation Notes ***************** * The "--local" argument to the "openstack overcloud image upload" command has been deprecated and a "--no-local" argument has been added. Earlier we used to fallback to upload locally when glance was not available. As glance is not installed in the undercloud by default, we would upload images locally unless "--no-local" is used. * The "enable_novajoin" parameter in undercloud/standalone deployment has been deprecated. * To enable management of neutron resources external to Heat the network data YAML definition schema has been updated. The previous schema version has been deprecated, using the deprecated v1 schema is only possible when the deprecated non-ephemeral Heat on the Undercloud. * Managing netron resources for composable networks is now enabled by default when provisioning baremetal nodes. The option "--network- ports" has been deprecated, and is a NOOP until it is fully removed. * Setting enable_heat=True in undercloud.conf is deprecated. * Using --heat-type=installed is deprecated with the openstack overcloud commands. Other Notes *********** * Removed --standalone from *openstack tripleo deploy* command. Changes in python-tripleoclient 17.0.0..17.1.0 ---------------------------------------------- 06d55449 Deprecate and ignore --skip-nodes-and-networks 3d28153e Check for passwords at old path during tripleo deploy 4dbb4531 Drop minion 9ec11521 Drop python2 logic for upgrades 4d511679 Drop six d5457bfb Use real tmpdir for ansible runner tests f9e5d79f Remove ipxe_enabled ppc64le validation d66861b2 Remove --no-workflow option 5719f37e Release note for network-v2 51753617 Donot install policycoreutils-python for cs9 17fd85ab bnr enabled ramdisk as deploy interfaces on the ironic/undercloud e8d1da4b Update deployment status after upgrade converge 13a9ced0 Deprecate network data v1 definition 40d1be0a Remove zaqar 081922a6 Remove mistral b6a1b081 Return "overcloud status" output without debug 1d2c6981 Add `--heat-type` in overcloud delete 99d4ac50 Update overcloud deploy help for default heat type 5020a8a6 Fix update run for Ephemeral Heat 81cd1056 Dynamic defaults for roles, networks, vips and bm fb6daace Allow to pass arbitrary parameters to TCIB image config ae6958a8 Add --boot-mode to import and configure 3652fb41 Update default images for "tripleo launch heat" 0a4f9c7a Add network unprovision to overcloud delete 5cbc2b8e Remove --standalone option 9c2e909c Ensure directories exist before copying fdd98894 Eliminating a race condition in the export_stack function 2939ed85 New test case and documentation for the export_stack function. bc95bc6c Changing MD5 hash to SHA512 61e4f4c7 Introduce "openstack overcloud ceph deploy" 24ee6925 Enabling cover job in the zuul 812681dc Overriding the log path argument for tripleoclient cli 86381b4b Enable py38 test d3e63bc3 Remove reference to --network-ports 377c081f Workaround py36 encoding pip bug 7dd1f6e2 Fetch stack after updating it a3c726c2 Restore kernel and ramdisk arguments to node configure e6e90bd9 Check for neutron resources with ephemeral Heat b7b934b6 Update playbooks to use consistent working dir 12d9efbd Fix 'cell export' no attribute exception 6780cd74 Make the "success" message more "success"-like 98839093 Tidy up lingering todo's f1084284 Remove name parameter from cell export 0adc5bb9 Fix --stack-only to download ansible playbooks 253bd6e7 make net_config_override of undercloud.conf work with yaml d7e8bfb0 Enabling pylint no-else-return c455a414 Fail the overcloud deploy is ceph-ansible.yaml is included 1016c8c2 Tests for tripleo_config bdc976e4 Add --reproduce-command option for tripleo deploy efdefd92 Passes playbook to the validation action as a list 26213f3a Use 'all' for ANSIBLE_VARS_PLUGIN_STAGE 6a0adcbb Unmount heat-all tmpfs dir when done 0cde1bff Fix get_deployment_status() for ephemeral heat c5347fba Allow for cron programming of backups 3f6f67c1 Remove cyclic import between export and utils 817c8e33 Always write ansible-playbook-command.sh f0f1d271 Remove deprecation warnings for the role command 078f67ec Correct exception b7879044 Add option to enable keystone in undercloud b3bcf63f Deprecate --network-ports, enable it by default ee1990ef Remove redundant defaults e7a42695 Remove deprecated docker_* options 4ac60f88 Validate the container_cli option 86522255 Implement protected resource types 9c997ff0 Add '--templates' arg to node and net provision a586cb77 Honor role and networks file constants 56e3ca0d Update description of the templates option 8e861fa2 Move FakeFlavor class to fakes.py 92d11b96 Switch inventory to directory 5595057d Fix copying of deployment archive a9d4d523 Deprecate enable_novajoin 4de40a06 Deprecate enable_mistral and enable_zaqar 5f8bd778 Standalone: Remove undercloud from parameter descriptions 429055ef Use same config download method as overcloud for tripleo deploy e7680909 Unprovision composable networks command 952eb85a Option to disable Node, Net and VIP provisioning 2400624b Moving the 'export_data' dict into constants 915ddcb6 Image upload: handle whole-disk image as default 3f303b90 Always run growvols playbook after provision 268f638f Default Heat images to container image prepare defaults 761b791b Drop noauth_policy and use the default cc2ac4a8 Restoration of the 'export_passwords' exclusion 4cf79c5c Copy the deployment archive to /var/lib/tripleo 10722b5f Deprecate overcloud image upload to glance e895c326 Use {{role.name}}Services parameters 9facf538 Drop deprecated "macs" field in nodes_json 654331cc Trigger Validation on standalone job with tripleo CLI command 8df2e97d Use upper constraints with install command 05b47bc0 overcloud deploy - net ports with baremetal deploy c3a8abfd Make 'ansible_playbooks' pre-network config only ef077696 overcloud deploy - provision virtual ips 28722a7b Drop mistralclient from requirements 030e9f0b Use ephemeral Heat by default 8de4d4a3 Fix overcloud node provide 91fa0eeb Only use undercloud.conf ipxe_enabled for inspection 299276e7 Check for the service queue with ephemeral heat dc8b39ad Refactor _validate_args and _update_args_from_answers_file bf03fe4a Simplify validate_args_environment_dir f44c7e25 Move copy_env_files to utils 83328357 Move build_image_params to utils 8ba7a7a8 Move get_undercloud_host_entry to utils 864eae15 Adding EndpointNotFound exception during scale_down a792bbd8 Add --db-only option in undercloud_backup. Diffstat (except docs and test files) ------------------------------------- .pylintrc | 1 - bindep.txt | 2 +- ...rovision-overcloud-delete-5c36ff706ab809ea.yaml | 5 + releasenotes/notes/boot_mode-ef25d1a032dcae56.yaml | 7 + .../cleanup-docker_opts-65aa01111417cadb.yaml | 7 + .../notes/container_cli-803238248de9c60a.yaml | 5 + ...ecate-glance-image-upload-ef23d3078f430ccf.yaml | 9 + ...precate-mistral-and-zaqar-aee14846fe3662d7.yaml | 6 + .../notes/deprecate-novajoin-6493fa10ee3e09cf.yaml | 5 + ...eprecated-network-data-v1-f1490ba769f6aa7a.yaml | 54 ++ ...sable-keystone-by-default-ee9cb13ee2e37f9f.yaml | 8 + ...ephemeral-heat-by-default-4ed05e8b82f41c4b.yaml | 10 + ...hemeral-heat-minor-update-db24c2f190c1c8a7.yaml | 10 + .../overcloud_ceph_deploy-485f59b64eb93c70.yaml | 11 + .../notes/remove-no-workflow-b3ad07729d3768d1.yaml | 8 + ...emove-standalone-paramter-e7f4d978c7f6261c.yaml | 4 + requirements.txt | 4 +- setup.cfg | 5 +- templates/ephemeral-heat/heat-pod.yaml.j2 | 11 +- templates/ephemeral-heat/heat.conf.j2 | 3 - tox.ini | 33 +- tripleoclient/command.py | 34 +- tripleoclient/config/minion.py | 158 ----- tripleoclient/config/standalone.py | 81 ++- tripleoclient/config/undercloud.py | 15 +- tripleoclient/constants.py | 86 ++- tripleoclient/export.py | 118 ++-- tripleoclient/heat_launcher.py | 116 ++-- tripleoclient/noauth_policy.json | 93 --- tripleoclient/plugin.py | 73 --- .../v1/overcloud_deploy/test_overcloud_deploy.py | 463 ++++++++++----- .../test_overcloud_external_update.py | 4 +- .../test_overcloud_external_upgrade.py | 4 +- .../v1/overcloud_image/test_overcloud_image.py | 244 ++++++-- .../v1/overcloud_update/test_overcloud_update.py | 51 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 12 +- .../test_tripleo_container_image.py | 4 +- .../minion => v2/overcloud_ceph}/__init__.py | 0 .../v2/overcloud_delete/test_overcloud_delete.py | 37 +- .../v2/overcloud_network/test_overcloud_network.py | 48 +- tripleoclient/utils.py | 652 +++++++++++++++++---- tripleoclient/v1/container_image.py | 6 +- tripleoclient/v1/minion_config.py | 421 ------------- tripleoclient/v1/overcloud_admin.py | 15 + tripleoclient/v1/overcloud_backup.py | 24 +- tripleoclient/v1/overcloud_cell.py | 15 +- tripleoclient/v1/overcloud_deploy.py | 633 +++++++++++--------- tripleoclient/v1/overcloud_export.py | 4 +- tripleoclient/v1/overcloud_external_update.py | 6 - tripleoclient/v1/overcloud_external_upgrade.py | 6 - tripleoclient/v1/overcloud_image.py | 89 ++- tripleoclient/v1/overcloud_netenv_validate.py | 11 +- tripleoclient/v1/overcloud_node.py | 34 +- tripleoclient/v1/overcloud_roles.py | 13 +- tripleoclient/v1/overcloud_update.py | 125 ++-- tripleoclient/v1/overcloud_upgrade.py | 29 +- tripleoclient/v1/tripleo_deploy.py | 115 ++-- tripleoclient/v1/tripleo_launch_heat.py | 21 +- tripleoclient/v1/tripleo_validator.py | 7 + tripleoclient/v1/undercloud.py | 12 +- tripleoclient/v1/undercloud_backup.py | 90 ++- tripleoclient/v1/undercloud_config.py | 83 ++- tripleoclient/v1/undercloud_minion.py | 162 ----- tripleoclient/v1/undercloud_preflight.py | 9 +- tripleoclient/v2/overcloud_ceph.py | 272 +++++++++ tripleoclient/v2/overcloud_delete.py | 44 +- tripleoclient/v2/overcloud_network.py | 106 +++- tripleoclient/v2/overcloud_node.py | 120 ++-- tripleoclient/v2/tripleo_container_image.py | 28 +- tripleoclient/workflows/baremetal.py | 57 +- tripleoclient/workflows/deployment.py | 82 +-- tripleoclient/workflows/parameters.py | 42 +- tripleoclient/workflows/roles.py | 12 +- tripleoclient/workflows/scale.py | 3 +- zuul.d/layout.yaml | 21 +- 102 files changed, 3997 insertions(+), 3010 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0176d8ce..7299c5bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +10,0 @@ python-ironicclient!=2.5.2,!=2.7.1,!=3.0.0,>=2.3.0 # Apache-2.0 -python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0 @@ -14 +12,0 @@ simplejson>=3.5.1 # MIT -six>=1.10.0 # MIT @@ -19 +17 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.4 # Apache-2.0 +validations-libs>=1.2.0 # Apache-2.0

1 0

os-net-config 15.1.0
by no-reply＠openstack.org 18 Oct '21

18 Oct '21

We exuberantly announce the release of: os-net-config 15.1.0: OpenStack network configuration The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ For more details, please see below. Changes in os-net-config 15.0.0..15.1.0 --------------------------------------- 6dc407b Drop six 3c8d3d6 Drop unused requirements 70ed002 Updating sriov_config.service to run before driverctl.slice and network-pre fcf3d9c Update sriov config service to handle nic partitioned PF 1ae0254 Allow linux tap to use routes 178564d allow vhost0 to pass list of members 5f27e09 Replace deprecated import of ABCs from collections baab05e vdpa: Introducing the vdpa PF flag 380254e sriov_config: light refactoring 8a053a2 Avoid creating multiple entries of udev rules 4d351d4 setup.cfg: Replace dashes with underscores Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + etc/os-net-config/samples/vdpa.json | 28 +++ etc/os-net-config/samples/vdpa.yaml | 31 +++ os_net_config/impl_ifcfg.py | 15 +- os_net_config/objects.py | 18 +- os_net_config/schema.yaml | 3 +- os_net_config/sriov_config.py | 354 ++++++++++++++++----------- os_net_config/utils.py | 38 ++- os_net_config/validator.py | 7 +- requirements.txt | 4 - setup.cfg | 8 +- 16 files changed, 855 insertions(+), 240 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index abf39eb..856c111 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ pbr>=2.0.0 # Apache-2.0 -anyjson>=0.3.3 # BSD -six>=1.9.0 # MIT -eventlet!=0.18.3,>=0.18.2 # MIT -iso8601>=0.1.11 # MIT

1 0